last executing test programs: 3.452205137s ago: executing program 3 (id=2238): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x1e, 0x4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) close(0x3) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x1, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000360000006700000000000000080100000000000029000000040000"], 0x120}, 0x1400c0c0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f00000014c0)="dc", 0x1}], 0x2}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66}, 0x28) 3.251594791s ago: executing program 3 (id=2240): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010026"], &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa}, 0x28) socket$igmp(0x2, 0x3, 0x2) 3.119544072s ago: executing program 3 (id=2243): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x40080) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.min\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x4, 0x12) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'rose0\x00', &(0x7f00000001c0)=@ethtool_gfeatures={0x3a, 0x3, [{}, {}, {}]}}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000240)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x183200, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000002c0)=0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r6, &(0x7f0000000340)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10) r8 = accept$netrom(0xffffffffffffffff, &(0x7f0000000380)={{}, [@null, @null, @default, @bcast, @remote, @default, @remote, @null]}, &(0x7f0000000400)=0x48) connect$netrom(r8, &(0x7f0000000440)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) setsockopt$sock_int(r3, 0x1, 0x13, &(0x7f00000004c0)=0x4, 0x4) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000500)=0x50, 0x4) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000580)={0x4, &(0x7f0000000540)=[{0xffc0, 0x3, 0x8, 0x5}, {0xc, 0x6, 0x9, 0xfd0}, {0x4, 0x0, 0x13, 0x3}, {0x3, 0x9, 0x8, 0x6}]}) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000005c0)={0xffffffffffffffff}, 0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x9, &(0x7f0000000600)=@raw=[@call={0x85, 0x0, 0x0, 0x12}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @tail_call, @jmp={0x5, 0x1, 0xb, 0xa, 0xa, 0xffffffffffffffff}], &(0x7f0000000680)='GPL\x00', 0x5, 0x59, &(0x7f00000006c0)=""/89, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x10, 0x7fffffff, 0x9}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000007c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000800)=[{0x4, 0x3, 0xd, 0x7}, {0x0, 0x2, 0xd, 0x1}, {0x1, 0x1, 0xf, 0x1}, {0x5, 0x5, 0xb, 0x7}, {0x2, 0x4, 0xe}, {0x1, 0x5, 0x9, 0xc}, {0x3, 0x2, 0x8, 0xa}, {0x4, 0x2, 0x9, 0x5}, {0x4, 0x5, 0xb}, {0x0, 0x2, 0x9, 0xf}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a80)={@ifindex=0x0, 0xe, 0x1, 0xad5, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000009c0)=[0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xcd8, '\x00', 0x0, r3, 0x5, 0x1, 0x5}, 0x50) r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000b80), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ac0)={@map=r13, r9, 0x2b, 0x13, r10, @void, @value=r14, @void, @void, r12}, 0x20) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r10, 0x6628) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=@newtclass={0x30, 0x28, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x3, 0xfff2}, {0xf, 0x10}, {0xf, 0x4}}, [@tclass_kind_options=@c_taprio={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x95) 2.879213681s ago: executing program 0 (id=2245): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044004}, 0x1b13d75a1c422bd3) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0xf0ff, r3, 0x41234, 0x76c5f}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x28}}, 0x24044014) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000002c0007012bbd7000ffdbdf25057c000008000180d8ba7c430c000380050001"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc810) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r0, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x81, 0x77}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0xffffffffffffff27}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "83be2a9c78"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x4008040) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) syz_emit_ethernet(0x82, &(0x7f0000000300)={@empty, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@mpls_uc={0x8847, {[{0x2, 0x0, 0x1}], @llc={@llc={0x42, 0xdc, 'l', "590f46836cd76127791114fda3683bf4f169849f1c05aee7c9c57baab3e68a34460d6b4bd6273f91110429b41a219fbf8daa18240845c7ba027765efd427270a6f241df946fb60dca51e0d2f871a1b3761765442f0b7d66b68c7d19a4d7f20464b1f2961a5"}}}}}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) 2.560775886s ago: executing program 0 (id=2246): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd16", 0x8}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg(r1, &(0x7f00000063c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)=""/145, 0x91}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000540)=""/94, 0x5e}, 0x6}, {{&(0x7f00000016c0)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f0000000300)=[{&(0x7f0000004600)=""/4096, 0x1000}], 0x1, &(0x7f0000001740)=""/188, 0xbc}, 0x2}, {{&(0x7f0000001800)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001880)=[{&(0x7f0000005600)=""/171, 0xab}, {&(0x7f0000000400)=""/56, 0x38}, {&(0x7f00000056c0)=""/187, 0xbb}], 0x3, &(0x7f0000005780)=""/29, 0x1d}, 0x9}, {{0x0, 0x0, &(0x7f0000005a00)=[{&(0x7f00000057c0)=""/60, 0x3c}, {&(0x7f0000005800)=""/152, 0x98}, {&(0x7f00000058c0)=""/152, 0x98}, {&(0x7f0000005980)=""/124, 0x7c}], 0x4}, 0x1}, {{&(0x7f0000005a40)=@nfc_llcp, 0x80, &(0x7f0000005f80)=[{&(0x7f0000005ac0)=""/100, 0x64}, {&(0x7f0000005b40)=""/25, 0x19}, {&(0x7f0000005b80)=""/236, 0xec}, {&(0x7f0000005c80)=""/81, 0x51}, {&(0x7f0000005d00)=""/197, 0xc5}, {&(0x7f0000005e00)=""/39, 0x27}, {&(0x7f0000005e40)=""/169, 0xa9}, {&(0x7f0000005f00)=""/93, 0x5d}], 0x8, &(0x7f0000006000)=""/77, 0x4d}, 0xe}, {{&(0x7f0000006080)=@phonet, 0x80, &(0x7f0000006340)=[{&(0x7f0000006100)=""/41, 0x29}, {&(0x7f0000006140)=""/247, 0xf7}, {&(0x7f0000006240)=""/48, 0x30}, {&(0x7f0000006280)=""/149, 0x95}], 0x4, &(0x7f0000006380)=""/26, 0x1a}, 0x9}], 0x6, 0x40000100, &(0x7f0000006540)={0x77359400}) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) r8 = socket$kcm(0xa, 0x2, 0x3a) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000006600)={'syztnl2\x00', &(0x7f0000006580)={'syztnl1\x00', r2, 0x29, 0xf, 0x5, 0x6, 0x1, @empty, @loopback, 0x20, 0x7800, 0x2, 0x1}}) sendmsg$nl_route(r9, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000001"], 0x28}}, 0x4000800) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000000)=@l2={0x1f, 0x1ff, @any, 0xfffe}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000480)="a0005bf8f1", 0x5}, {&(0x7f00000000c0)="d3a214", 0x3}], 0x2, 0x0, 0x0, 0x900}, 0x4000800) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9, 0x4}, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000001900)={0x2210, r12, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffff01, 0x5d}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x107c, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1a, 0x2, "c50f1821e8d74b734f00dffd95926ed6d1c2ff6dbb97"}}, {0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "d2e08eb5c9cf60489de5ebf24290c338d90edfe2bfaf650445c8e271942d9224a6d2f1d13df704dd082eb35d160b9f792eb5cd048f94e88c02473666f2c2727e360791a2f8f554b475902fbf82848c83ebd040ad4b5f1ace1a1fe0e83902e5657e479263a2aa6f402acce0300ab880b9e73ced62b1f0ce214682006028e1fc7deb4a53fb3859a36be1ff65ea143eaa3061e9d2d80118d3999752d3538ac9eb7afa90be47bbf6bc2b38dc5d9204a4cdeaed11088e2ba70b13c0f69ab423a1cdb38881b639ac3354cd9a5ecd5c8157d4cd590a91e2dfd5bf2723cb8dc7941e9150e60be9219611e90f990fb2d01e7fa08a4c530d49113cac0f85a7cd6632fa0893c3bdb9a973d68af0a0c6ab8a44556b789b177e905cec90b9bec6a6bc2d991d1c6f509e670b7425c3e736a2b155d78c2b3ac1306bc12ae9ccb9ddffce74714e766a9a374dd953b79b12205647731a5481280ccf441d76a5c1bdf0854e2bace334f948cb499dc8848a7c403ebc1809c7193eafb6661d50c76fa4b692da59802968605e799f52e67e03b208d8e113a24e5d08850340ef7b9f31996c989982fce1883f97c870a6cc3f418a9907de1703f850cf7e2dc2ca3781952203369e75c0427f03ad45e9e2ac21366fefe922b2ee31d457ca051a0882f8376d3234fa0ff981cf87fe72e47d25ae5394aba895dad71efea63c53d21971ccd0cc213d39de08d33f755159555cc2d536b4aca0aa2e2a16f17eb2b9cdf567afda593acaa648c7f9eae257fa56c513a1c47f0c2dcceccd087063ea77f4495804d3633654d05d532ea2f149d9515399765d1bb9bcfd6306df25482d9aa5087199623b5eb4b3aa618c2762b6c198137ebf42a6a8e2c8dfefe4bc42d82a8bf803cdc9525eb1d2e9ab2d6deb2f81f45e212ecf9d5814a9e6f8fa581e2d6209343a73814be96ecba3862085659928fb35433015c2c92c1a1d0f7fcc597f4413d0c09b5a606a8140e1fc69769762e2d06c3a78ab6103334056f67a2abcf010f7d9b1cd68b96f4f1104ae6b1d1eaac53e74acedd936d21d4839b92ae2b859d673fd51bf46a668fe325fc552188f64830fc8d59c05ad2ab342deabf2c0507de085fd68d6962d4e60c44bfbde9f7335ec66004a34493926974cfe1d9552f47439da2c853bc4900cd3c1ea7e1dee7c4d0c0d0632679ee21607724ffede7bf6fe93eb8d00a9fb04e920eff86c99a2e202d70d7b93613929e6e8f90816da283fe1471e84a3377e084d651061fc0c540ce14035ff1ec6b5fff51006a975d7672e1c9b421f47ede7ad9d27881a346f65f2567b3c5debd586a2a130e2e5f807489134dd4572da04ed05481858c70143791425c9e2dc544b179a9e279a49a815a7264ec8ff2133aa1c61f3dd8dc17f5fdb89359062de58b48070915062b3520b73a321eab4ba14de8746cf6ca0451a42697a81ca7d3f3d9249dfad46153657152296bd274e474a6abf08e3c82902212bf56e9667c3311f9f4585167013b27dcf3569794ff4e8f981a27c6d21a6467fec1d506758b7ffdad8cf7038a1ad99087dc32bd01f257ed20334bf2050e57a233e53cd5054efad63375da8a5934e1a0e5e17559ccfcd742b6dba74f38c31c10201bc7f39370d322567b78a361951dd6a6d703f84d5898d04f12aeb54c66e5ad818c8b1086deedc95a409a16a9b8a8efa5ab7938cfb84adf64d10e45655db4472206aff53ccf1c3311dab96e810f748acbd85523eb0c1e5aa1e9d764b701146771501d7a74227214f034875769cc385bcd77e08eb3fc49c51daff6adf5df4e8d3d7710dcb1d20f8ea29a15072ea8aafc5e79be9bf959a3ddb97f2b461ee27129fcead84788d9389bff6ccc23c241f207d4ce7e57e8d4174fe8858b5d52774c11e9bede02eb8c4a1d6d3b8759ab65a5f7062a57627da5608be217f376e6b0073ec200c28aedfe7fb1bd8b05e73622e906de48fd1aed5515883f964ab0969df4af8add14c4102d017a975a6e10b408a4e5655f630b91464926eeaf7c45df803d0fb58e9bd4b91dcbcf5a2d340f2c7166d38540fc644f3fbef8590a9f3c25993f7279d3cb96a9a77170f2f76f7cd505df21e9a5f4b47725194fbaf25f8fbf871f45401ca669374b0e0ab5f1e93865219871dde441d72ea616e0f37b0e59cfeb6f8f421cad584289cb072d87ca19bc143edf01c69a6eb118ffbfcd72ee969cbb18bf23efbc1b3a172ef88f23291dcfc38d02846f4fb4d78aec733dc58bfa0c9e59f8058d51d76e06c99297ff9ea0537dbc7cd923f0fcbe272d87f5e1988e13afb75a2dadc2640a41a939b08002c7e84a158880eb7c94ffd263266dbe093279d654fbc63522638710671f7c97f7a1c1c1c5c192d164b9c36eaca984bf11402b1860a3a73a65d8870133f6b3d5b2f660b910c4dbf83b9dc7010aebf2a62f490d7423aac8c21601b34a15e26e2384e861173a1553ff2d889370fa285caa46a83fe1160f3da1a998354a577fcb2395b114dd6dc61c5404e3c1d02b4d1d54b725af5adf2a0e5904d8b61c6f61318d91a80278cb152acb557d108d692fe83bdd3f67606b50d5b1cbd72dcd4c018a76e16f961135d4978903a7174871c0e26697e01ed42afe6291d9b3e7499fdca7c51ce5b644ea276ff61c05c3a7dbe7428e9d847fa20ae9f3e9f0b2debdb5c0120ae8c726be9c05c3ec39bbcdbe2f52b8dbd611ba696412635932f57e386e628329e1cb746bee29ba349d0b37ae605f94f7e54a291dd3af8070d450360d7c19d51c08cca5d11f66ce0eacd37df79d260ea75c99a667e7e2d5ae73299c46c2c877088d656bf68af1e3b5ed0356d8c25588a8e42b7655c6c4e278c33da5a4eb8172babafab0e4d68b5e90ad3ade8e61361f3769753141dd1344b828ce018d9f757a5163e397163e546afacd44186504c87bc0b9c74131eb44e8e651ff24820e5c2747a8a23546924506ca66330c470cf703e9f690f6b55685e13de23af2155327c2cbaf0d11b74608e2a479085a0e3a8357a61eecc125c43c341d4e5e9f9ebf096f1ca849a8ae711cb09e48a1cbde7d7342f0a185823f6dbfe58ff773d2ecb6be85e1f995e5376be871a31e0a805aabac380f13ee59de53e3a70c1bfb120130f85f239848c7d59aacc3717d9287539571fb7d9a1c6c6d3b3d149072b72527214db6116f34d3cbf078de424362fbff6d2076704af73bb0f2412706197423cde84eed705ab5ed4c2759a6572286ac524e7040940ae60311988dc5b479344c1275151bc23dca3e5216a90b8055ffdf0c79922ba99a7167bab0f72680fc808e2e4772ec00a92ade8b573f44067ef5701eaa5b066dffe8935b45dfe6a052ab8d53b6c82a99ab1b7e547b62d9f621b40b1d62608c79f14e57e0e14461e78d2f14c96f6c10e95e21559c3aeef7899a5edbf8be97353c4c1fba03ff46ce7c65767f17eff7fa24604796b8140548f9371ecc44bd99151dc2186a0035de8a5b56f5542037536154e4da3343f5c3d9b311dfa2fde88386fcb807eac2cf8e96c4344c403d23a78ce444c0daf872ff295e4c30655479ea298c33199e47de53d20147b1ab5a61e04a684bcf6319dabc85b4115112842d8d46c2ba73c3b0ebb7da8ab76894287c139c4950a0c72288668c6297f72bd94883bc686be4322644ec478ea9e23691d4e09aa90f0667e2bc94ad138453595073c01bd02c2f80954049b80744249a6ba02d05c168a0dd79d6a47093eb3129ee89c60f941eec6d4b77c02b02b42331aa92ecc1f06d986486454c4f3f2b95942981eb3cdaa09f6330e123d55988bee0da54e5eeedee81565c49061134bf61bd8c1ee3e1f0c5570ced3e05332b2429341f7c7054c41ae3cfb01918830353b0f38eb38f098031a60ff78039d12801a16e51f747903f4650b66bef701cef75f02abdb066a82e69c6f048b8688f10c22f1d1c030fcc131218510a305ff6e01bc81c46f699ef6e56959db70d81c891af3352538c7ca0df1b72495e6daf39481d3ebc299a77913665bd1df26f9cf6ff29bd1e5d16fe952bad4fa0229f132e8af1a5e1a3b24b60e5a03ab76a33d39ac687a811319f51407686096bb7fee690ea9df086d8ebe0b110b77bc265f7ac58e9c82753af0395984d6e4d4e73f4835070f2833fab3cbe865c71c543157d7bcd4bbfb9b3db9c7debe5f58f1aca70253a544f08dd8b255b53dec671dcac2c3fa673d03cc56454398d8d0c43bb885017fb54df3f36967008fa461272c4a1047af00032788a62fac46857a187424ae687c37b86edaa2ce93c73dc4ef064a5a2bdec8265e5180ab5aa9b1876007f144df151b63f8e63caa5282d9e2b8c2886d8babb5de56fe8539a57eed44889e9938ad734ea7142213ad7037958e7064508ed04736d945d6befd1275bd5f740b580f188eb432f8f019847407ac8454b878e867114764c9d0053940ca3aca513549216c997bc27aa3c4ecee6240aea49ca576fd96158432218f2fc783a01c17e9e4acc741ee0d0f4009c22c00e0421a06383504c020a633915049bd7678552d9a80faa2a8f519f091a37abb84e180586246b04382c7e78d9648db83b1cbc8f93fbb340acc391b4fa1b5f3a53dd9c79698f23488b1aaf7810d9c97341f957de76f909fd53aa2b95c6921c4e27af18f714c8236ecbd15c3a67c7ff12c82a626da55cadabc3e29bf4236126eea7ab606f72edbd19812c85ef639dd04b09ec3871fb4c31af5bce0f1ed8ee9bd293d8107a488169cd6c0f469befa428826732bfb99d62348909e3e96dcf1b1c567945c59cf7897de970a9bd624cab149813539ce09645b7ee7d51203e58e3f6ed736afa4232da5213df5b46ef79fdb8cb6fc54f8d33a8380699218e870f5ba36a8daeafcedf60fde7c37338adef41278ac7ebab43d1d302967ed703a054ecd74ffcbd17c01a43ebe344f11709b04aa998ec2ed421713e1351a512ba6f0fb2407e695bc4384209e35fa9869bb908a91ef4d2913be9b7dd83b6a90c1d32a7cc1678099e6b1d218c7675ca9f69e559922e8a3a0d949811df48489920205517f2fd4a66a6f0e44a4188ed5237b2c8b987b5607c34b7a42afb4dc514d60bb515fa1dd9354ffebb46ac40bc9f6bf087a94bd9604afb89a7cc8367e190d79624361c8d55064381a01e4314e2758c59ce75c9d0c6e181bbc60c0bd77f4b36d93bd617503cc5a18f19092d2e7299db369026ac7e5edc47a3842bd6553948b9dc9900b4d4cc34c8ac45c23c954c7a06b5dbf2ef2ccac653a5e084506286d30692c7bf878868059030e6cb505973bae51390a0a870d3f399622b14ac5aa57af118b1360f099fbcf7192dfbd89dfcb2fd55ec87f2aec8a87b1d42c69cc6576e9a678fc994cbeef2d6c2ec5d4b3dcfc8a36f5657ac57fdef8ef144c53126a1051c3e62ff814dd6d852132abc7cd37075179909b995ab3867133694dffd9225a0e3ecbce418c2193e08ae11334e43c8efc45e2c9eef7d5fd28d2e65a440999466caf1b719b59a010f53f2ae6feff233c2ed01fdfc252f557f68a1270ccbfed8c501807d3f9cb8886241f13eb3c92558abc1163cd9a6525a18fe237a654acc8a30a8fa1f7ec28f1236fcc1fc0585a3b1388f45bc3d29473c0ee47249a806b59f30536474f70f3596108be09d7a0249d3208078ef62c41f9bcb9270d73c834ed6d4eb237c74a785f43efddba4f566c03a00c1d092befeca79550c744cc633df371e317465382b6d2c775849ecb3c47489da973856c0e12f83caae1a94bf6fe1bc96cc43c4332efc54aaf75f1b88a1147b921c25e"}}, {0x50, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x49, 0x1, "8dfde78832f86a8bc0a1414843b4b889eb35d4bac3cacf566030da4ba79f265feb704fcd50cf705e8a56786fe4d9a5ff22ac66433c0a05b59384fd40ea3fc048da8388b53e"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x11c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xc}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8}}, {0x100, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xfc, 0x1, "7aa17b96a26b5f76bf63120935b5822da1dc0949e7f7d773498ceb38bc8ca8e4d8f8094809cbce92b2b8a21ea4ed7d62727dc51fca941818509f9bc4f06c2f0d54d4abb89f46af5d8b21b7b5a18f306523be272077b5a9008f3dd5ae15783bb0f32014236796b70494dc41d674454f623801d38de4d165b47907d5ef7de594925140b94e5f518e39ca1ba5cf46cb3f2fffe1d1263b7e3569f6caacd6bfdc738d7211eda7f6ce6cc9175e90c0e9b6ac2bc8f917e1215651abbd603cc668a21e1f07b7d565fa13c86cd9034534eb240934705ef925f8128cbcb8062339fdca71f282621cea8816128bda2fcfcfbbfac11d6a933051ce90aab5"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x100c, 0x3, 0x0, 0x1, [{0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x30, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xf, 0x1, "9daf46bd5dc1ccbf38fb03"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x52}]}, 0x2210}, 0x1, 0x0, 0x0, 0x4004000}, 0x851) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r13, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="6b1690bb8dc095ebae95baccdce177a97389ae7df65487e3996df64c35efa6e159bd2f2180", 0xfdef}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac142d00000000001600000000000000000000000700000094feffffff020000"], 0x38}, 0x0) write(r11, &(0x7f00000000c0)="240000001e06000214fffffffffffff807000000a600000000000000080008001d000000", 0x24) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 2.417847866s ago: executing program 3 (id=2248): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (fail_nth: 1) 2.16224061s ago: executing program 3 (id=2249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x138, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_USERDATA={0xa7, 0x7, 0x1, 0x0, "4a87dbb01e01cb1f8e757fc75314e608b113925d493cd24965328ddb797c73b6ab3a163b3ac0c562a9d3a3db86559f0e61612ee8bf2f746b0628d32e22615816f7d030ba7282a900f9dae1855658514f1a9a6ff4dec4dba720e2857a53a6d51c713da41b46ca900b7667bca55e6cd29fc6cc196172b3fd2ded22ae2f3bf5d92f5982e2b0cf53c03101a064f95d8e2de77bd59d842d250fad30e67caf147696d02da0da"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x160}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffbf00c}, {0x6}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x4}], 0x1}}], 0x1, 0x4000041) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) sendmmsg$inet6(r1, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="50558c9051438c3fc439ea1b05d22d567fcc9031b9f3b155b55e82ea621d302bffb1aaf008144b8a0ee8b61da55e512844f7c7e3697b80434d3f68e6ef54b4a2", 0x40}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0x4}, {0x0}], 0x2}}], 0x2, 0x20004810) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc3ba6735d17dd3a5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x14, 0x52, 0x1, 0x70bd05, 0x4, {0x2}}, 0x14}}, 0x800) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r9 = getpid() write$cgroup_pid(r8, &(0x7f0000000180)=r9, 0x12) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r10, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x0}}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r12, 0x5421, &(0x7f0000000000)=0xc711) writev(r12, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) sendmsg$nl_route(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r11, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.943573168s ago: executing program 0 (id=2251): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe21, 0x4, @private2={0xfc, 0x2, '\x00', 0xe}, 0x7}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8b2c, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x300, 0x0, 0x2, 0x1, 'syz0\x00', 0x3}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00148008000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno', 0xa) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r7, @ANYBLOB="200001"], 0x38}}, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000000)=0x18) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000)=0xf, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="ac0000002100010000000000010000007f000001000000000000000000000000fe8000000000000000000000000000bb00000000000000000000008033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fbdd4c82db4295ede000000100004eb2baa68b71f573f58d31d900000100000000000000ac1414b3000000000000000000000000ac1414aa070000000000000000000000ff7d7dff000000000000000000"], 0xac}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000073114b00000000008510000002000000850000005600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc0, &(0x7f0000000740)=""/192, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r8, 0xc0385868, &(0x7f0000000180)={r8, &(0x7f0000000040)='bridge_slave_0\x00', 0x20142, &(0x7f00000000c0)={@align=0x8, {0x8, 0x8, 0xc3b, 0x80}}, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) 1.914359678s ago: executing program 3 (id=2252): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x6b) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host=0x20, 0xff01}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000180000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002d0500020007000000380001800c0001006269747769736500280002800800014000000014080002400000000008000640000000030400058008000340000000010900010073797a30"], 0x10c}}, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) read$alg(r3, &(0x7f0000000080)=""/47, 0x2f) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff00800", 0x0, 0x104, 0x6000000000000000, 0xc1, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab30", 0x0}, 0x50) recvmsg$unix(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000500)=""/138, 0x8a}, {&(0x7f00000006c0)=""/120, 0x78}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/11, 0xb}], 0x5, &(0x7f00000005c0)=[@cred={{0x1c}}], 0x20}, 0x2000) sendmmsg$unix(r3, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="0a690b6528a1f42d548655afb9", 0xd}, {&(0x7f0000000300)="dd5722a4ada647acf96f7778f3ab8a7dd0ecdc630c69655dff751cbf8e247fdab005", 0x22}, {&(0x7f00000003c0)}], 0x3, 0x0, 0x0, 0x40488c5}}], 0x4c, 0xc000) 1.850502536s ago: executing program 4 (id=2253): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x80000000, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x1, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000200)="96fa2c0bff2099297e1c1ea6d53ff4c2f69b32d385f14857ae25047e39555bbacdb216aa20b99d21a3aa5e57c47882279061186e400377670a3422aa5184ed400cf452f14ef81d20a792091e037ed82c9ee401f0f428bd4951eab88952d04fd3c2201db337881657994495e357e1d85f36e3f0931c866ce50c6839828dd412369194605df0f359df4d2012decda29157b9745bd0364c0253e3e0508de0a042f5c204550df43138c084a1074c6c9f8ca767acf711d47b2d2f9922", 0xba) close(r7) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000000)) socket$igmp(0x2, 0x3, 0x2) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f0000000100)=0x2, 0x4) 1.658202117s ago: executing program 0 (id=2254): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) recvfrom(r0, 0x0, 0x0, 0x22, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000240)={0x5, 0x7, 0x9, @random="07c0e7e57d29", 'ipvlan0\x00'}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000060000000000c97d0342d0fd43c926acef708f0f5d00000700000085da8464b5f4919d6b85b226faaf3f89aec40bd60c3d3618e959e98fe72a853519ee1c199be84fd6143d496986c3b2ff85dac8de4043fff8983fc27aade60d3849f9f326890d38a78cac437762a63829ceaa6bfcf2442a2bc901fcaf8b4bf692d88c3c2dc8a0046992d91153493e52276cc5d9ee2170ec1a3330e7b4a18df630bee40109c54d5bd270e742cade49c5368231e7b408d55b2a0799148ab4854be9b5ab38941685fc42a969ee6e413a4c276032da583b3515f8469e70f8cf9e05bcf0009b79cb1ea0"], &(0x7f0000001880)='syzkaller\x00', 0x3, 0x40, &(0x7f00000018c0)=""/64, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendfile(r3, r2, 0x0, 0x3) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x62180, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000040)={'caif0\x00', 0x400}) setsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000000)="4112fb7c087ee5", 0x7) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x9, 0x0, 0x0, 0x8, 0x7fffffff}, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x4008800) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0xffffffffffffff10, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r4], 0x30}, 0x1, 0x0, 0x0, 0xc840}, 0x4006000) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000000100)=0xd, 0x4) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f00000001c0)={r4, &(0x7f0000000080)='][\x00', 0x10641, &(0x7f0000000100)={@align=0x6, {0x802, 0x3, 0x5, 0x2}}, 0x2, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x4}) connect$bt_sco(r8, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 1.352248133s ago: executing program 4 (id=2255): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00'}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) recvmsg(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000b40)=""/12, 0xc}, 0x20) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r3, &(0x7f0000006140)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000002500)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000002600)=@abs, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000003100)=""/4080, 0xff0}], 0x1}}, {{&(0x7f0000002d00), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002d80)=""/136, 0x88}, {0x0}], 0x2}}], 0x3, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) 1.343356716s ago: executing program 1 (id=2257): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x10, 0x1403, 0x1}, 0x10}}, 0x20000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x1405, 0x100, 0x70bd27, 0x25dfdbfd, "", [{{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x400d0}, 0x44810) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0xff03, 0x3d0, 0x2e8, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @multicast2, @private=0xa010102, 0x2}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xfffffffb, 0xfffff801, 0x0, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x420) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a340977770a89"], 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000009580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[{0x10, 0x6, 0x8}, {0x10, 0x0, 0x492}], 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000008140)=[{0x10, 0x3a, 0x4}, {0x10, 0x1, 0x3}], 0x20}}], 0x2, 0x40840) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000540)={r1, &(0x7f0000000700)='\xca:\x00', 0x200000, &(0x7f0000000480)={@align=0x7ff, {0x7, 0x7, 0x707, 0xffffffff8f413569}}, 0x5, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0xb}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x78, r6, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x200}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xee}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x44}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x68}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x44051) 1.210773765s ago: executing program 1 (id=2259): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x9}, 0x94) r1 = socket$inet(0x2, 0x1, 0x8) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f00000000c0)=""/16, &(0x7f0000000100)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611824000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000200)="28d10a32b5b55c814ba6b78355bf2bf12f3b387f23ccc14dae2a7971730e0259b5d28c33913a82f1b6656a0f805f7f5c7228cb41f8c70a6b6226a755509dd7adf465165d20ecc692bf17bc51f71f9f85c1051f1ba73949034c53d3413a47e9c46e71ac669108ff4362957c7501bcb81044dbf560536a2b13df147bd4db7b30a011f419d03df1c9b32bd63ade290c45f6401c21b1c4c359367a149315b7f6cd7917c82d9e7796e74e394341", 0xab}, {&(0x7f0000000140)="30870db3f8b4ed2876cf95982c3d2c471806091811bb06a5b1391de894fe13714bbfa311e4f350e5b662", 0x2a}], 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, r5, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r4) sendmsg$nl_xfrm(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000940)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd26, 0x25dfdbfb, {{@in6=@empty, @in6=@private1, 0x4e23, 0x0, 0x4e22, 0xc, 0xa, 0xa0, 0x20, 0x2f}, 0x0, 0x2}, [@policy_type={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="e9a90076167468315f766c616e000000000000"], 0x34}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0) 1.007005027s ago: executing program 2 (id=2261): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x9}, {0x7, 0xe}}}, 0x24}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newtaction={0x48, 0x5a, 0x301, 0x0, 0x0, {0x2}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1c, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x24}}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xffe0, 0x10}, {0xfff1, 0xfff2}, {0x5, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x3}}]}, 0x2c}}, 0x4008000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0xfd, 0x0, 0xfffff02c}, {0x6, 0x8, 0x4, 0x5}]}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x7, &(0x7f0000000080)=0x4, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2d, 0x25dfdbfc, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x0, 0x1, {@ip4=@remote, 0x800}}}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 920.794584ms ago: executing program 2 (id=2262): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0xffe4, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x5}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x46}}, {{0x5, 0x0, 0xc, 0x9, 0x0, 0x1, 0x2000000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 867.137566ms ago: executing program 1 (id=2263): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073114a00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2e, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0106000000000000000019"], 0x38}}, 0x0) 763.411396ms ago: executing program 2 (id=2264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010429bd7000fbdbdf2555000000080001000c00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40400c0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c5820fae9d6dcd32e5f248120c0002000000000000", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) (async) r4 = socket$inet(0xa, 0x801, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200008877747ab7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0xfca804a0, 0xe, 0x0, &(0x7f0000000040)="04a63eb507e7ae000098d1db1ba9", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000008c0)=ANY=[@ANYBLOB="64020000", @ANYRES16=r1, @ANYBLOB="04002a092683fe99b5f9f5390f4060dbdf253a0000009d72f6ee", @ANYRES32=r7, @ANYBLOB="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"], 0x264}, 0x1, 0x0, 0x0, 0x800}, 0x800) listen(r4, 0x8) r8 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) (async) r9 = epoll_create1(0x80000) (async, rerun: 64) r10 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x20, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x86}]}, {0x18, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf1a}]}]}]}}]}, 0x50}}, 0x0) sendmmsg$unix(r8, &(0x7f0000001600)=[{{&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000500)="14a0f409acd3d8037ae37325d904cfc3981db53d8fae3ae7bc954c31034f4c5b8bcefdfda8b58cef342b7075cde6da054df5d5ec944095ea568b94580f4d92000b7d61ce435485f2b845920fd2e4b9db299e69275d", 0x55}, {&(0x7f0000000580)="85ad51a8bd7fba453623e0d6621d54b6145ebb672db122acb89e596fba4934f7a0d78f5bd0d995cddd35af763be1b5af234fbc8267a0185ae98bffd368a18fa1bae5ed2eeccbf87c08d29ec99935c42b8fc63391f419b2d2230e625088b15b9790efc68ffecae079f68e06bf3f94ecb6c43abdcf7eb4db39f23faaca43db7c3912598d081286b97c74b297100c1da235d223fa9f9614950d6b58bc62284a49787345b3de4255a049656736773e4a16ec952651493d78913d65793ee496cff1502843de8af9a01361f13e7731fac211ef60bd2240f761eea5e3d9", 0xda}], 0x2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32=r5, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r6, @ANYRES32=r8, @ANYRES32=r8, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000f001c000000000001000000fdfff45149be", @ANYRES32=r6, @ANYRES32=r9, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x140}}, {{&(0x7f0000000f00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000f80)="98e0e9f9247fd1cd689b79fda77d3848be826d28777312e88b55be3222d34d0fb36f11f9273d77fde5c74d5f1e", 0x2d}], 0x1, &(0x7f0000001480)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r2, @ANYRES32=r8, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r8, @ANYRES32=r6, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r10, @ANYRES32=r2, @ANYRES32=r8, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="28470525"], 0x160, 0x45000}}], 0x2, 0x4004) (async) accept4(r8, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, &(0x7f0000000080)=0x80, 0x80000) (async) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r3, &(0x7f00000002c0)={0x10000018}) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000340), r3) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000100040061117f0000000000850000008400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94) (rerun: 32) socket$inet6(0xa, 0x1, 0x80000000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 762.495437ms ago: executing program 1 (id=2265): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x2}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x48}}, 0x48000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80000001, 0x5}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2001c071}, 0x4008000) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) close(0x4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x184, 0x10, 0x713, 0x70bd2a, 0x24dfdbfe, {{@in=@rand_addr=0x64010102, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x102, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x9, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2e, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @algo_crypt={0x48, 0x2, {{'cbc-cast6-avx\x00'}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x61, 0x4}, {0x45}, {0x2}, {0x6}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}]}, 0x24}}, 0x10) 730.081451ms ago: executing program 0 (id=2266): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x198, 0xffffff7a, 0xffffffff, 0x198, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x3, 0x6, '\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40c0802}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x4}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000011}, 0x805) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000003000"/24], 0x18, 0x4855}, 0x24000052) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 667.296841ms ago: executing program 4 (id=2267): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000070000000600"], 0x50) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x800) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f00000006c0)=""/143, &(0x7f00000002c0)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newlink={0x54, 0x10, 0x2, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1, 0x2021}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, r7, 0x1, 0x70bd2b, 0x0, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000000) close(r6) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r5, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000023c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x0, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_DELTABLE={0x54, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0xa}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x8000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0x154, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1112}, @CTA_NAT_DST={0x94, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}]}, @CTA_TUPLE_REPLY={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private1}}}]}, @CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x154}, 0x1, 0x0, 0x0, 0x10000}, 0x2000c000) 522.372767ms ago: executing program 0 (id=2268): mmap(&(0x7f00003ac000/0x1000)=nil, 0x1000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000129bd7000fbdb760567d956e2df253a"], 0x24}, 0x1, 0x0, 0x0, 0xc040}, 0x24040000) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a001000000000000000000006001d000000000005001b0001"], 0x2c}}, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x89f, 0x8, 0x1]}}, 0x5c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018020000000000001800000018000000020000000000000000000003002100000300000001000000020000000000"], 0x0, 0x32, 0x0, 0x8, 0x401}, 0x28) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000340), 0xfffffca3) r4 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000)=0x3, 0x1) connect$inet(r4, &(0x7f0000002040)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\b', @ANYRES16=r5, @ANYBLOB="000427bd7000ffdbdf25010000000a000900bbbbbbbbbbbb00000500380000000000060028000300000002002f00000000004bff3300010000000500300001000000"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x800) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0x11, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x247002, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRESOCT=r0, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 381.243722ms ago: executing program 4 (id=2269): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x4, &(0x7f0000020440)=ANY=[@ANYBLOB="18000000004000000000000009000000850000000f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_init_net_socket$ax25(0x3, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x404c080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x100000) 291.906722ms ago: executing program 2 (id=2270): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)}, 0x80) 248.01393ms ago: executing program 2 (id=2271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001a00), 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), r5) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x38, r7, 0x1, 0x3, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}]}, 0x38}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="cd86a8e58245ba6aaecd8fe257f2c2ffbf13d2630d10891cf0c8217c513384b8536012741f439818fa067448222aaea07d32f28b9996b4eecdd89a758e65e16199eff18b7b8732f6a1275b645df31f0e794aa8d0106dd3cf61ae3c1b470de91fa052ff09498a392a89fdd28053cf1f5b807e57ad37568fbdca440c8b3765a299736605cd0f5849d78926973e1f69028c65c2d268", 0x94}], 0x1, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r8, &(0x7f000000a040)=[{{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003400)=""/147, 0x93}], 0x1}}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000003640)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) vmsplice(r0, &(0x7f0000001740)=[{&(0x7f0000000180)="20437b3a0c7a6be3e2994aa3723a44f2db2f4e05b1c891f7c721776c77478ae906d4d135c9108da6049b7313498682f7433e57807f41b4513e87116a628d1fed7c3e4e51c4cdf086638102eb61f106a6d2017efdeaaf6aa47d77620ddc", 0x5d}, {&(0x7f00000002c0)="b2ab07917ea02abac9bfdc275a87f328279c839134facd44827a4c82198262b9b8495ee50b2c204c2c340328bdcb5887d80f187248de206e73d11af5e4aaf209858ed9157b556af3f2254804d6bc5dd029572a16ecdd9ea8f294d0f299f737379ef1589645996f3836278d6341bf1d806a94aad893a61175d0cb418de2ae4870ac7663bb31c70593a74bb4229e99adbf4503c01b9bda", 0x96}, {&(0x7f0000000440)="4333f3b4494de3c09ad52b964296c8b29966cd35a5ceec3a6b20820d0994fec1665280a23035b9d1ebaa80cfafee2fc7ebedd54a8eacad7ab7ae0fa15fdc9d5f8a00e0542058e9771a10feda1ad40525e5085314d26b4dd38554d603e409f8e0d23bc81c1c95b6e76ac038e2b162900e57e849658d1cf1f204a9a863cbe9b900281ef1b82b864faf99e1954a95d3a34bc6ca31bb9ed3bee7865223795bff3832cb99b2547bec3e8f8255973c4153287a3733a701d61fdac374843bbb3f20783f65e9ca698183d2ba9c087b02742aae46af28c0734773cb0892b6ba176f53603a1f98257968a102f5649d0a771c726252", 0xf0}, {&(0x7f0000000540)}, {&(0x7f0000000640)="93bc730711accf185ee5f66650f64b85e41e4371caf61e7f9459c062e8312db9905cb006935b8baa377aaf539af0b64dddf9459d1b5cb1536fdba8844f81dceb4d8967f6f0f9452d612612ee3071f0a6e220afc7374542aed888938da26df3c48afc4f731ab8ab74972d6c950601928943d05349644fc7bfb49ed9ba490daf62074a84114789ccc63923eb5ac68b4899c832340cb22887b23efa993e4082b4799ca5653f6456ec9648afaa89b7daadee94587b143cd225352af58a927b39dfd4a81cc81387d18ab011ad02788d8196a18f6c2969554d683ff19c9409847888c63524903198f6964fbe32f9b6bd4dbf7e0138a9c31aa05dad6f331b197cdf13ec5a8c1c7ba0339dde202f45e2b319b12601be43c2b6ab8d6563f3b999b116c07c4183f10159514841f9ef58f895b3cbdf0d0b49ef9615b023e678cdd8cdd2235e4fb31920618fe1ec0eaffb20c3b46aa655ce0c3ab08d01c030d551c135e099b01a2a937bcfc9fcfcc648dbf3c7c206183df29e52687f55b5ebb49fcfe8121f6f4e77570522241990f16823180953abef5950c5199b4423ee458008a828ced4bb894a67ba33c52718d16c652f72e9390bcbcd3a71b511fc005358d859fa1cf75f8f7a03ebdb8829b39892ef1c347c6abf8622f97a72cb1b3086d4834b8c33957f88b85fb71cddf51f41682a7d582fe0875c874e7cfead303c6549286d122b3fe7c35ca3903ecffba349d3e7690b7b3ca207c199365742a2eb05fc5d3c787554fdf7829d751af7c2102467514d19243712a125496143d20d9632b7cdd37c4a98e7f31b3f7f8c0ba332dc6ee6550470c7225ed8624713974d44473762edb3f8fefe63c8d61ee680a65fa6263ba2b780667ece5d9b5e71ee49905686aac425f57b9675eef931adf3298c2f9b073abf9e60fd6994157262d477896c99ec729ae53ef879c147b512e0728414586f39191875b7dc39119eff7674ffa064f9089c65aec4081a41552a6086932dc0eddf5b8ca53b30e3c4683ba248de52724c392ae3df710a0a3441043f915454722e4ad7d5cd5eb2bdc411e0a390341adba66aff0da97c2dc2c7b2d2eb4378eb0fd2df48bf19d4403e71df6364042599d46662a2ea50e4becfd52007e2f2b3980775eabd0e16e46a21ebf2c28237b4acb871d5c6a1ea6c363257e257d922ccc82b6e8b203bc8991f9ddf5a1feab91366f7876334185c22af7a53037ab1766d738d1a1606651e00bda68b8cc974e5095360c0edb878fca701c05ff5b0b9304280ae7e3f77f0d589a1bedd8f475d160f05fd73d40ce3fcb0b182b5760243c0853967bab027058c94c785fbf74214a1a3596619a419b2c98fe170b4e068fc733a487c57c1caa37eecb7a76da9d480167147cd90d6f27afcf4b287e8e68c54333a46758b558cd5d338c2cf24d085272dd7d55c1a5618ac9156a81977f8d707bb61a0800a18543919744a67347cc4ceeb97d0c469ccfb401fa94e432a4d688d189db889f09adf0ca9d707b84948ec231379871c53021e538e9f9dc9d907d0b7a2781cd636ca05a62947f485ae558f88158715f19980b75f238cf6c32e1e291b8d03e64d6093df71ba63e448b0ab451c9c7b6ad1c9928b5b6216825a1ba5848b840a71a4add911ef8a9ecd4b21a3c7bd5062f94e82fa8a0fd8c9a4e13e6a9beb90f27eec527845d3065a8813cac90e4f8808bd9b546ea82503ef5c9da4e278e87447ca9508d0247f3197ed7dcf25ceb18dc9c1f3407db64539f3dbb1d81a9dfd0c460d4e074f7553786589c7f94bba04de9fd333e8253bcbce4cfa098437b1f8ac422f4496336f8d636d8fbab8776e4c075cc59988a77e03fd218f8bbd5edd4a621958bea4c459a17b4f8c12ac65f0b16b6b0f04c21a7ebe7eb4e13cf94e887e7767ecb5662ad7ebb2405d62dbb9ab60ebbd53c24135d8ae235609bb388041d3000196e8d1e140d03363ca68a391832d4127d74db0037d30557933ba69b88e38d03583dfbb87a1a240cd376d4dde28bb3f31c2e37a747bfc5cc1d0252d797ce989198e68d9a23652a9f867843b5d5455fef6ea064f8790a1f6b5d4dc16447a85bdfc95d7b25bd3c725c195e82a6d565df2c7a88a82c049212733574c727fdffef30d783f32b86e8ccfdbb2b9412078b40c124381231333710329e73e3efc8e7b8a17078ee3102ac75f96d2f501c74c529b06a948e8b0e6381d45de439a2073e1874fd91d5a524afdefb5c8fc3591def4bca9e7e895963f55952ed675f938ba23ebb2e09a5a4ff052f74083060c7e76b6554dc4060c7fd768415b5ad45ab2c167c28c3d5edb956ef1236dbe3d38fc4f2c6ad1c600b5cd215f7982a7f5b50c1e9bcbf9b1c8e78f1027075d317d0255dba1b15752d6e1d9da3042dd9610751d95cb345c07f9ad7f1aa44350467e7bbc0192719f0a27e8900159de9fbb95a26479e258e5444b992ef84a05dafd85885c61170027cd5f6a3eb636dea71bb18eaff8db67636c556494b0d3c0f57e79f03a3d2f60ed5bfa3abdc8465574bcf023dc0b08a78bfe96f968e73acc8c3cb1074d4b178447b35cfc8c352eb6bc3476d879afc09a659bb1190d3018d00ac2ad6969d101ab4842199b119883f1cb66a116d28feb3ac9f7ef380ae9b7bb1ff6d0c0b43d98c3bfe5c9c0951abf9ef14a083dbd7622f884915b3a7c0d3ad6d115124bc9fec8c48825c5055a986c12b2f97b9b1547b146c2906ac40e6e9daf0595535aa5bd8a07dbfd73e2664e8edbe8992acb8bd353099d0db801b9c48d719f3f71ca217d8188881e492e852e3dfb4d0c7effbc8f02940887dc09296135bda9085f262592ba0a2f32f44e165e4ec43894673d1694324d830788e60ce0f6031515688fb66b380c2a46e7cae0900d95901aabf36d24c748ee55359c7010713fbcf8f74e78310aff91914e1d8909ddefa16853f682d20913191f66b7d0535bef4ca45fe32ed7a18842f01e72632e574b2857352d4867c50f238775d2099d675fa484a7c18f869bfe7e4a1b036c7cece0a25d34cd4f30c7b0cb4dc8d9eb5c7a5571e74bcf890f1229a2cd790b21b42a7fb415af33bfab85189da580174f588821daaf2e0d7a0a035b2dab2501036404cb867b8f8c14c9a83ce77557c2d3b846cf5eeea6a9414128a0cea41937d82106e8cb749a248b88400dc6e6fade9d7651abb98a447b4fe9fad35b083ca92b89dbb8649ebd6b45c15db3bbf71a845f3e65abf6b697bc19b845899f59e962c13c23d499268b852582a0941423f467e485d35edb0f9568f5ff956653163ec69ec9ef10fb519a5cc85b8af044dc2a7c16d40fb8ed26f1af5899d230e07989a46e0631030bfe320edc0a3f05f59855b22336ef4dc9a2476f6b77c8b26a1dc1339a50f3db1b95a884cd972d27fc144483eaa648791c5465821866b40f64274a540e1913368ae8bfc57e4aaa78c553e7873c39853542627e1805c056ce5bb74192b0d34954877cc6009c6644cd531ce32feaba1f23c1573b43c9ad8d6721b136eddd92573819672c6320643aad3129de954412f7d8fddebf6423544cc8338bec5577098903a435265ac3012fbd63c6cc4b18c838e14eb7f96329cfc838b12fda80d3ed194e45208222906cc2e396585aa2274eaec2130bf1ac03a70b29b35d5279952180206a5a0f51f7f7949eee2f1f6727d38799195a78c0ee8365b923382a41db6498484c546407448ae75638695f968564094718738ee97a1517694bdc62354230cb7f677595b49432c0b708a0b932430b8fafd413e421b6d897beb84b32cd8dc896eae1704ae754227acd2ecadf1ba86a0960dae9ccee9c20d3ec68e3c64ab69384ae8c778fc780cad07955d0894a301732edd92e3e55863764c3186e204fabd79ac281f6248a73915d58b5e98a214a57e8c81f6536b573338ddc7aab35004a6f92abeead127f0fa96cea6eb4a33cad002b64b3d242a164c75c5d6888c7d0b01c94be5cdd440d2cd10bb0ae09f2ad3819bd783debcac363b80c9087b09032c42e377936ae307c3543b5d110ae3ceff0e6cc3aabafd65f3af2caf0a62bd84bf0028ceb38d6c6be814c3720b13dbd8a7f41108efee3117dc0891386af22cb21d3a838a36ea4f9b36b1baa2b8d3f4346ba168ea78ffcdd8ab42a9914cd466657fc321c8a016e6fac7c40c9db9be3c848a29c808311d21fa28127535a46b86e4d21da6d155e0df8a8f9dc25c885be96e981a5e04e50d4e7fa3f487d3b971704239a23f34e8381b30bedb45e61d85cf10bf5f450b717e6783df127a0c180003e993b5d8e72b0df2ab5001dab533062327139d0a4d40d6dc617406677c7a1af47530ff754b2e079d3de07a994af7a4cb8b28ad040561597210dbab9392c61e4f6cf3f8f51d7df6a4feb289d663eba6646d545bb063458f61253d1820be85dfc03b3f97aea716fd20a99606ab02db67376f01328e3daa33139ef8d4985e8508cbe9077998f55af8005a1ea836daade0ac4f370816b4caf5f50fc5b76445d89e0b9d9683b37f9029f4ed58149c88743edad8e2b83cb35e47a2f5d2fe1faec14c624a3ac3ae5cdd875da642d687d8bc4a64ef4b22b218688ecf672be104671a5e7f3d91a4d2548c4e6897b2dff0086db5049472e2ad3c76167a369e4847217ac0a2a7ed38bde322861cecc5f6bf5ce8c601be60345bd685b7ccec7d5d3091336f6ace905be7e314c9d3446e210e0cd982af9776b42e52de11ece5a166b6cad1d9a9b64892593c14c3a22959f1812ef15eb0540272758713c151fc21eb67ae0eaef679044d767f4e26a7622fd3d6c799d0038b1b424de9d43b1736f60bcc718b67e43270da8e73fb7e73e66c098fa33f24239f7aa3411cd417a44695af714f55a6e3d8921a7fba1fbdfdc85401047540cc5cfaac03576e3a8d9fe89c84c3a6eb21c389e90b86f030caa38b0aa6702ac2ad250a4e4bdc9e3b0eaf39bed40ef2dad90c7229cebcf8f2a82a0618d683bd3b1e92eaeefa8f5b445a1713da5c614cecc42a846794bb4d436d1131fa9ae600dfa7453cc1b540fef0548044ff3b2c63c86fbae3dc0715a1c765325c7a3fb9c8ed1cddf2e8ee60cce053398738f5f4b77e49c4d949b5f9068af942abb0e75cc440a0fa59159daddaaa8c57713bd3fd993ef5384419eb59a095067ca20dfc909aa431d60a060e8ac7562a882b78974050d28e45448a908d6be1617907a18f56c41646f30cef74efefdd7d9f5f920fac55b18e9117987fc0bf13790656d07c035ce5ba043834427dc53980e32ad084cf9a4501078c824aaa6e5b5b3735ef4787af0e1290d4cc7749212344599c5fa2f4f5238e963c73d74127964b68cdd1e5bebce37728337a307387eef7b7ffcd8d1c6c4b36bc297ea27a1f7539377f3876e4e58bb7ad0d4c94480994f652e4301a39a75d31e1700070021e865e0ac31b8713d8be3d5ef6068e2f7e3086cc6e3d7ea6d4276c5a6f97bb32ed0b58eafc5738fe627c72ee47cbe6e26f2d052fd0f40818c784f348e791c380c050b7692d67fb20d66f30b3a88865c1ef5851f2fa0f3e9dd40a0f006665ede1af81396ee64c869419e37225bc08b8e36b8dde571a6e585a389dc00d3baf38a104b37f96e941132eadb461e2a39a1df6d48075753832381a11fbec231885aac1cbebe0f312feb74c596a589c12ded0348ea972822d41bbb91316f25511bf4aeb44afa73ac5a5ef462429471e10dfc4f4254f3a920e6d43250463c75fba4df9ea9335dcb01bf0c1f26d289831582cc600a4ad1511d403fc1dc0175f418618c38488c43", 0x1000}, {&(0x7f0000001640)="aa0350c54723c3fcbdd1e4d2d2587b9972a79eeb1babf78b4c37722265a9ce544c13bd1e2ca47496a27067737226cc558c875db26970755dc773435dc3e372a7bda18f87eca301a9cd2c27124d10c6868846ef9461a148faf9e0789449abe6d39c9077ae0d801e944c6bad1f2cab0a7ec413e1263b85b7f71f1cf7e64d07a1801bb2caad9881912c94d135b810ae0d2bd3ebc6da2fcb5fc8ee3be9beb0d277324c2c2be53c1f63927107227e6640c6baa4f081ee7afad26b35c3c15f0228a33bc987fdf5a09ff3496af3ab8c23f06ccc5523507b2ba6eb680a", 0xd9}, {&(0x7f0000000200)="e5581627a70a01ace680f840ccbbf242429078090b05c477e2024c3a2d7346bffe44b011b8bab2be2b8240dfd61f4b7cd2dd4c1108fa5688afaaeb0071d04a49895e369af55e76d55e9ee39a9385b6619ee4a5a62612d87189ee3b5ebd4468bb07ea1954c3dae0192d39443ea2470c92c3f227734b581663a6", 0x79}, {&(0x7f00000003c0)="aaef148df2f9427ff7", 0x9}], 0x8, 0x3) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000018c0)={r0, &(0x7f00000017c0)=',#[-\'^(\xae$[^[),\'\x00', 0x80000, 0x0, 0xfffffff8, &(0x7f0000001840), &(0x7f0000001880)=0x9}) r10 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000002d00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000005e40)={0x1258, r10, 0x402, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x6, 0x12}}}}, [@NL80211_ATTR_TID_CONFIG={0xc8, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x49}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x16, 0x1, 0x1b, 0xb, 0x16, 0x12, 0x1, 0x1, 0x6, 0xb4b121c817fc72ee, 0x9, 0x1b, 0x9, 0x16, 0x5, 0x28, 0x12, 0x18, 0x1b, 0x3, 0x1, 0x30, 0x24, 0xb, 0x1b, 0xc, 0x9cfd451ec48de45d]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9b}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x56}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x49}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}]}]}, @NL80211_ATTR_TID_CONFIG={0x1e0, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x160, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffb0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9286, 0x5, 0x6, 0xba, 0x3, 0x2, 0x3, 0x800]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x3}, {0x3, 0xa}, {0x6, 0x7}, {0x1, 0x7}, {0x7, 0x7}, {0x3, 0x7}, {0x0, 0x3}, {0x1, 0x6}, {0x3, 0x9}, {0x0, 0x3}, {0x7}, {0x7, 0x7}, {0x4, 0x2}, {0x2, 0x7}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x5}, {0x7, 0x7}, {0x4}, {0x4, 0x6}, {0x4, 0x7}, {0x4, 0x8}, {0x6, 0xa}, {0x0, 0x1}, {0x1, 0x4}, {0x0, 0x8}, {0x6}, {0x0, 0x7}, {0x7, 0xa}, {0x6, 0xa}, {0x6, 0x9}, {0x0, 0x3}, {0x7, 0xa}, {0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x4, 0x5, 0x5, 0x1000, 0x8, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6dd, 0x23, 0xfffc, 0x1, 0xfff8, 0x6ba, 0x5, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xffc2, 0x3, 0x5, 0xffff, 0x2, 0xd, 0x2]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x8, 0x2, 0xd, 0x6, 0x9, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x7}, {0x0, 0x5}, {0x2, 0xa}, {0x7, 0x3}, {0x2, 0x5}, {0x2, 0x3}, {0x5, 0x6}, {0x2, 0x6}, {0x2, 0x8}, {0x5, 0x4}, {0x2, 0x8}, {0x2, 0x3}, {0x7, 0x6}, {0x4}, {0x2, 0x9}, {0x4, 0x4}, {0x0, 0x4}, {0x0, 0x2}, {0x0, 0x7}, {0x5, 0x4}, {0x1, 0x3}, {0x7, 0xa}, {0x3, 0x3}, {0x5, 0x1}, {0x6, 0x6}, {0x0, 0x6}, {0x7, 0x6}, {0x5, 0x7}, {0x7, 0x8}, {0x1, 0x5}, {0x7, 0x4}, {0x6}, {0x0, 0x5}, {0x7, 0x2}, {0x7, 0x7}, {0x1, 0x8}, {0x3, 0x1}, {0x0, 0x4}, {0x5, 0x5}, {0x4, 0x5}, {0x1, 0x5}, {0x0, 0xa}, {0x1, 0x8}, {0x3, 0x5}, {0x6, 0x2}, {0x7, 0x3}, {0x1}, {0x3, 0x6}, {0x2, 0x5}, {0x2, 0x6}, {0x2, 0x4}, {0x7, 0xa}, {0x5, 0x4}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x2, 0x4}, {0x7, 0x6}, {0x1, 0x8}, {0x5, 0x8}, {0x5, 0x7}, {0x0, 0x6}, {0x0, 0x7}, {0x7, 0x8}, {0x0, 0x9}, {0x7, 0x2}, {0x5}, {0x0, 0x6}, {0x5, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xdf}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x80}]}]}, @NL80211_ATTR_TID_CONFIG={0x344, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x70a0}]}, {0x284, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000001}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x254, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x7, 0x6, 0x81, 0x3, 0x1ff, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xb, 0x30, 0x60, 0x1b, 0x2, 0x9, 0xc, 0x1b, 0x48, 0x18, 0x5, 0x24, 0x2, 0x60, 0x6c, 0x0, 0x9, 0x60, 0x5, 0x18]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6375306bd82e9925, 0x3]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x9}, {0x5}, {0x7, 0x4}, {0x2, 0x7}, {0x7, 0x8}, {0x7, 0x8}, {0x3, 0x9}, {0x1, 0x7}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x3}, {0x3}, {0x0, 0xa}, {0x6}, {0x1, 0x1}, {0x2, 0x8}, {0x1}, {0x0, 0x3}, {0x7, 0x7}, {0x5, 0x1}, {0x5, 0xa}, {0x2, 0x9}, {0x3, 0x2}, {0x2}, {0x5, 0x2}, {0x1, 0x8}, {0x2}, {0x0, 0x3}, {0x0, 0x3}, {0x1, 0x8}, {0x7}, {0x6, 0x8}, {0x3, 0x1}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0x6}, {0x6, 0x6}, {0x7, 0x8}, {0x3}, {0x0, 0xa}, {0x2, 0x1}, {0x2}, {0x1, 0x7}, {0x4, 0x5}, {0x6, 0x7}, {0x6, 0x5}, {0x0, 0x9}, {0x5, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0x2, 0x4, 0x80, 0x2, 0x7ff, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3, 0x2, 0x200, 0x0, 0x8484, 0x45be, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x12, 0xa, 0x4, 0x12, 0x9, 0x86f7db2d13a046a8, 0xc, 0xc, 0x9, 0x65, 0x60, 0x5, 0x6, 0x6, 0x3, 0x9, 0x60, 0x18, 0x60, 0xd, 0x12, 0x2, 0x9, 0xc]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0x4}, {0x7, 0x4}, {0x0, 0x6}, {0x3}, {0x2, 0x7}, {0x0, 0x3}, {0x3, 0x2}, {0x6, 0x8}, {0x4, 0x8}, {0x2, 0x9}, {0x0, 0x3}, {0x0, 0x2}, {0x3, 0x8}, {0x0, 0x8}, {0x6, 0x4}, {0x3}, {0x3, 0x3}, {0x6, 0x3}, {0x5, 0xa}, {0x7, 0x3}, {0x0, 0x3}, {0x1, 0xa}, {0x2, 0x5}, {0x6, 0x3}, {0x4, 0x5}, {0x1, 0x5}, {0x0, 0x6}, {0x7, 0x1}, {0x7, 0x9}, {0x1}, {0x0, 0x6}, {0x5, 0x2}, {0x3, 0x8}, {0x4, 0x2}, {0x1, 0x8}, {0x5, 0x2}, {0x5, 0x5}, {0x5, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x110, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x72, 0x0, 0x1, 0x2, 0xffff, 0x1, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x12, 0x9, 0xc, 0x16, 0x60, 0x79, 0x48, 0x1b, 0x1b, 0x30, 0x48, 0x24, 0x30, 0x2, 0x16, 0x6c, 0x2, 0x9, 0x12, 0xc, 0x16, 0x3, 0x6, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0xcc, 0x10, 0x446, 0x9, 0x1000, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x2, 0x7, 0x9, 0x1eb1, 0xc, 0x5c, 0x6]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x7, 0x4}, {0x3, 0x6}, {0x0, 0x5}, {0x6, 0x8}, {0x0, 0x7}, {0x2, 0x1}, {0x3, 0xa}, {0x2}, {0x0, 0x9}, {0x6, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x1}, {0x0, 0x5}, {0x2, 0x6}, {0x2, 0x8}, {0x1, 0x4}, {0x1, 0x5}, {0x4}, {0x7, 0x7}, {0x0, 0x1}, {0x4}, {}, {0x6, 0x7}, {0x1, 0x8}, {0x5, 0x6}, {0x0, 0x7}, {0x5, 0x4}, {0x2, 0x9}, {0x7, 0x9}, {0x2}, {0x2, 0x3}, {0x4, 0x7}, {0x2, 0xa}, {0x5, 0x2}, {0x5, 0x9}, {0x0, 0x7}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x2}, {0x6, 0x2}, {0x2, 0x9}, {0x6, 0x9}, {0x3, 0x9}, {0x1, 0x5}, {0x2, 0x3}, {0x4, 0x1}, {0x6, 0x4}, {0x1, 0x5}, {0x3, 0x2}, {0x6, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x0, 0x4}, {0x4, 0x2}, {0x7, 0x8}, {0x1, 0x1}, {0x7, 0x1}, {0x0, 0x4}, {0x3, 0x5}, {0x3, 0x8}, {0x1, 0x6}, {0x7, 0x2}, {0x5, 0xa}, {0x0, 0x1}, {0x7, 0xa}, {0x2, 0x5}, {0x0, 0x8}, {0x2, 0x2}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x2, 0x5, 0x12, 0x1, 0x1, 0x6, 0x9, 0x18, 0x2, 0xb, 0x30, 0xb, 0x2, 0xb, 0x30, 0x30, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x82a, 0x7, 0x0, 0x200, 0x24b, 0x9, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0xfe01, 0x1, 0x0, 0xf662, 0x8, 0x9f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x78, 0x3, 0x34d6, 0xa, 0x9, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x69d, 0x7, 0x6, 0xb, 0x5, 0x3, 0xfff]}}]}]}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x80, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0xf233, 0x2, 0x2ba, 0x3, 0x5, 0x9, 0x8]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x6c, 0x16, 0x2, 0x1b, 0x18, 0x1b, 0x30, 0x9, 0x1, 0x2, 0x48, 0x0, 0xc, 0x30, 0x3, 0x16, 0x16, 0x24, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x6, 0x5d5, 0x3, 0xc5, 0x7, 0x5, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x75, 0x2, 0x8, 0x95e, 0x8, 0x4, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0xfff8, 0x4, 0xe70, 0x4, 0x70, 0x7fff]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0xb8, 0x11d, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x57}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2b}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc6}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x44, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x7, 0x7, 0x14d, 0x5f, 0x3b9, 0x9, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xe, 0x1ff, 0xa, 0x100, 0xff, 0x3ff, 0x8bb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x11, 0x1, 0x7, 0x795, 0xc, 0x9, 0x200]}}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x95}]}]}, @NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xce}]}]}, @NL80211_ATTR_TID_CONFIG={0x100, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xbc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x94, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x1}, {0x5, 0x8}, {0x4, 0x9}, {0x0, 0x5}, {0x7, 0x6}, {0x1, 0x9}, {0x6, 0x6}, {0x3, 0x7}, {0x2, 0x5}, {0x6, 0x1}, {0x6, 0x5}]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x5, 0x0, 0x6c, 0x0, 0x59, 0x1, 0x5, 0x6c, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x6, 0x7, 0x0, 0x8, 0xb987, 0xabd4, 0x68b3]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x4, 0x60, 0x36, 0x36, 0x36, 0x2, 0xc, 0x5, 0x5, 0x18, 0x16, 0x48, 0x18, 0x30, 0x1, 0x4, 0x1, 0x9, 0x0, 0x48, 0x12, 0x60, 0x16, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x7ff, 0x5, 0x2, 0x0, 0xc5, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xca}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6d}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x734, 0x11d, 0x0, 0x1, [{0x234, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x228, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x2, 0x24, 0x1]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x2}, {0x0, 0x9}, {0x1, 0xa}, {}, {}, {0x2, 0xa}, {0x4, 0x7}, {0x3, 0x7}, {0x1, 0x8}, {0x2}, {0x0, 0x8}, {0x5, 0x5}, {0x4, 0x1}, {0x5, 0x6}, {0x1, 0x3}, {0x0, 0x6}, {0x7, 0x2}, {0x3, 0x7}, {0x6}, {0x1, 0x6}, {0x7, 0x8}, {0x6, 0x3}, {0x0, 0xa}, {0x1, 0x1}, {0x7, 0x6}, {0x0, 0x5}, {0x1, 0x4}, {0x1, 0x7}, {0x2, 0x4}, {0x1, 0x9}, {0x4, 0x7}, {0x1}, {0x7}, {0x5, 0x6}, {0x5, 0x9}, {0x2, 0xa}, {0x1, 0x2}, {0x3}, {0x4, 0x6}, {0x0, 0x1}, {0x3, 0x5}, {0x7, 0x7}, {0x0, 0xa}, {0x6, 0x2}, {0x2, 0x9}, {0x2, 0x3}, {0x7, 0xa}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x6}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x2, 0xa}, {0x6, 0x4}, {0x1, 0x6}, {0x2, 0x4}, {0x6, 0x7}, {0x7}, {0x4, 0x8}, {0x6, 0x2}, {0x3, 0x5}, {0x6, 0xa}, {0x2, 0x9}, {0x0, 0x6}, {0x1, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x1, 0xa}, {0x6, 0x2}, {0x2, 0x4}, {0x2, 0xa}, {0x6, 0x4}, {0x1, 0x5}, {0x4, 0xa}, {0x3, 0x1c}, {0x5, 0xa}, {0x7, 0x4}, {0x0, 0x4}, {0x7, 0x5}, {0x7, 0xa}, {0x7, 0x4}, {0x5, 0x5}, {0x4, 0x8}, {0x6, 0x3}, {0x1, 0x5}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x5, 0x5}, {0x6, 0x2}, {0x7, 0x1}, {0x4, 0x3}, {0x7, 0x4}, {0x4}, {0x5, 0x3}, {0x2, 0x7}, {0x0, 0x9}, {0x3, 0x9}, {0x3, 0x8}, {0x3, 0x6}, {0x7, 0x6}, {0x4, 0x6}, {0x4, 0x5}, {0x5, 0x7}, {0x2, 0x1}, {0x3, 0x8}, {0x0, 0x4}, {0x0, 0x3}, {0x5, 0x3}, {0x0, 0x9}, {0x3, 0x3}, {0x2, 0x5}, {0x1, 0x7}, {0x1, 0x5}, {0x0, 0x2}, {0x3}, {0x6, 0x5}, {0x5, 0x5}, {0x6, 0x1}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x4, 0x30, 0x24, 0x1b, 0xc, 0xc, 0x6, 0x2, 0x18, 0x24]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x1, 0x6, 0x2, 0x2, 0x1000, 0xb, 0x2780]}}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x5}, {0x6, 0x5}, {0x4, 0x3}, {0x7, 0xa}, {0x5}, {0x3, 0x7}, {0x4, 0x3}, {0x7, 0x5}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x1}, {0x4, 0x1}, {0x5, 0x5}, {}, {0x4, 0xa}, {0x0, 0x9}, {0x0, 0x1}, {0x5, 0x2}, {0x7, 0x5}, {0x0, 0x4}, {0x7, 0x8}, {0x4, 0x5}, {0x5, 0xa}, {0x1, 0x9}, {0x1, 0x7}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x2}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x5, 0x9}, {0x0, 0x9}, {0x6, 0x5}, {0x7, 0x5}, {0x5, 0x4}, {0x1, 0xa}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x5}]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0x400, 0x5, 0x4, 0xffff, 0x4, 0x2]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x3, 0x4, 0x36, 0x48, 0x1b, 0xb, 0x1b, 0x18, 0x18, 0x16, 0x24, 0x1e, 0x30, 0x36, 0x12, 0xc, 0x60, 0x1b, 0x4, 0x18, 0x4, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xcf, 0x3, 0xd19d, 0xd, 0x9, 0xb2, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x7}, {0x1, 0x5}, {0x7, 0x4}, {0x4, 0x2}, {0x1, 0x9}, {0x7, 0x8}, {0x7, 0x4}, {0x3, 0x6}, {0x7, 0x2}, {0x7, 0x8}, {0x5, 0x9}, {0x0, 0x3}, {0x0, 0x7}, {0x1, 0x4}, {0x2, 0x9}, {0x6, 0x8}, {0x7, 0x7}, {0x5, 0x8}, {0x3, 0x4}, {0x2, 0x5}, {0x0, 0x4}, {0x5, 0x6}, {0x5, 0x1}, {0x4, 0x4}, {0x3, 0x3}, {0x1, 0x8}, {0x0, 0x2}, {0x6}, {0x5, 0x5}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x2}, {0x1, 0x5}, {0x0, 0x1}, {0x7, 0x6}, {0x3, 0xa}, {0x5, 0x8}, {0x2, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3ff, 0x400, 0x2, 0xb, 0x3e, 0x7]}}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x12, 0x12, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4b8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x234, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x3, 0x400, 0x5, 0x2, 0x6, 0x7]}}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x3, 0x7}, {0x6, 0xa}, {0x3, 0x5}, {0x1, 0x5}, {0x6, 0x9}, {0x4, 0x7}, {0x1, 0x1b}, {0x4, 0x8}, {0x3}, {0x4, 0x4}, {0x6, 0x7}, {0x2, 0x7}, {}, {0x7, 0x4}, {0x2, 0x9}, {0x0, 0x9}, {0x7}, {0x0, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x3, 0x2}, {0x2, 0x9}, {0x0, 0x4}, {0x6, 0xa}, {0x4, 0x5}, {0x1, 0x7}, {0x6, 0x5}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0x9}, {0x7, 0x7}, {0x7, 0x7}]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x7, 0x2}, {0x2, 0xa}, {0x1, 0x4}, {0x7, 0x7}, {0x7, 0x8}, {0x5, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x6}, {0x4, 0x8}, {0x3, 0x2}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x100, 0x2, 0x200, 0xa1, 0x0, 0x1, 0x9d]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4e, 0xbce, 0x5, 0xd, 0x7, 0x3, 0x8ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0xfff, 0x4, 0x400, 0x7, 0x1, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1000, 0x9, 0xffc0, 0x6, 0x2d, 0x3, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x24, 0x2, 0x18, 0xc, 0x1b, 0x4, 0x60, 0x2, 0x4, 0x12, 0x4, 0x9, 0x1, 0xc, 0x36, 0x16, 0x48, 0x1, 0x60, 0x2, 0x5, 0x12, 0x0, 0x30, 0x16, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x5a, 0x2, 0x1b, 0x36, 0x1b, 0x5, 0x48, 0x1, 0x16, 0x6, 0x14, 0x30, 0x1b, 0x0, 0x2, 0x4, 0x3, 0x1, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x0, 0x24, 0x36, 0x1, 0xc, 0x9, 0x6c, 0x24, 0x36, 0x18, 0xc, 0xb, 0xb, 0x16, 0x36, 0x24, 0x1b, 0x9, 0x1, 0x3, 0xc, 0x1, 0x36, 0x2, 0x1]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x401, 0x6, 0x1000, 0x7, 0x2, 0x5, 0x8]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x8}, {0x7, 0x5}, {0x1, 0x6}, {0x3}, {0x1, 0xa}, {0x0, 0x3}, {0x0, 0xa}, {0x1}, {0x7, 0x3}, {0x0, 0x6}, {0x1, 0x1}, {0x4, 0x7}, {0x6, 0x2}, {0x2, 0x2}, {0x5, 0x5}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x9}, {0x6, 0x9}, {0x2, 0x3}, {0x1, 0x2}, {0x5, 0x3}, {0x0, 0x9}, {0x5, 0x2}, {0x3, 0x8}, {0x6, 0x4}, {0x0, 0x8}, {0x6, 0x8}, {0x7, 0x3}, {0x0, 0x5}, {0x7, 0x4}, {0x1, 0x7}, {0x7, 0x4}, {0x1, 0x9}, {0x0, 0x1}, {0x1, 0x3}, {0x0, 0x9}, {0x5, 0x4}, {0x0, 0x4}, {0x2, 0x3}, {0x7, 0x2}, {0x5, 0x7}, {}, {0x4, 0x5}, {0x4, 0x5}, {0x3, 0x6}, {0x3, 0x4}, {0x0, 0x9}, {0x4, 0xa}, {0x7, 0x7}, {0x2, 0x6}, {0x0, 0x4}, {0x5, 0x5}, {0x6, 0x2}, {0x4, 0x8}, {0x6, 0x6}, {0x4, 0x5}, {0x3}, {0x7, 0x3}, {0x4, 0x2}, {0x5, 0x6}, {0x3}, {0x6, 0x2}, {0x5, 0x8}, {0x0, 0x7}, {0x2, 0x7}, {0x0, 0x8}, {0x2, 0x5}, {0x5, 0x5}, {0x3, 0x1}, {0x1, 0x3}, {0x1, 0x7}, {0x3, 0x9}]}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x1}, {0x5, 0x3}, {0x6, 0x6}, {0x4, 0x7}, {0x2, 0xa}, {0x6, 0x9}, {0x4, 0x3}, {0x4, 0xa}, {0x2, 0x5}, {0x4, 0x3}, {0x3, 0x2}, {0x0, 0xa}, {0x6, 0x8}, {}, {0x3, 0x8}, {}, {0x5, 0x1}, {0x7, 0x6}, {0x2, 0x1}, {0x0, 0x4}, {0x4, 0x3}, {0x2, 0x5}, {0x7, 0x2}, {0x4, 0x4}, {0x0, 0x4}, {0x1, 0x1}, {0x7, 0xa}, {0x6}, {0x7, 0x5}, {0x7, 0xa}, {0x3, 0x9}, {0x3, 0x1}, {0x7, 0x7}, {0x4, 0x4}, {0x3, 0x8}, {0x1, 0x4}, {0x4, 0xa}, {0x0, 0x2}, {0x0, 0x8}, {0x1, 0x3}, {0x4, 0x8}, {0x2, 0x5}, {0x1, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2, 0x5, 0x5, 0x2, 0x2, 0x3, 0x3, 0x12, 0x3e, 0x1b, 0x18, 0x2, 0x2, 0xc, 0x48, 0x5]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7ff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x264, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x0, 0x6, 0x8, 0x5, 0xa5f2, 0xb]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x2, 0x6}, {0x7, 0x2}, {0x2, 0x4}, {0x1, 0x8}, {0x6, 0x3}, {0x7, 0x6}, {0x1}, {0x0, 0x3}, {0x5, 0x9}, {0x2, 0x6}, {0x4, 0x3}, {0x5, 0x9}, {0x1, 0x2}, {0x2, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x7, 0x4}, {0x4, 0x3}, {0x2, 0x7}, {0x4, 0x5}, {0x6, 0xa}, {0x0, 0x3}, {0x3, 0x5}, {0x5, 0x8}, {0x2}, {0x5, 0x9}, {0x2, 0x7}, {0x4, 0x1}, {0x5, 0x5}, {0x2, 0x4}, {0x0, 0x4}, {0x4, 0x8}, {0x1, 0xa}, {0x7, 0x9}, {0x0, 0x8}, {0x5, 0x8}, {0x4, 0x6}, {0x7, 0x4}, {0x0, 0x5}, {0x0, 0x1}, {0x3, 0x5}, {0x6, 0x4}, {0x4, 0x5}, {0x1, 0xa}, {0x2}, {0x7, 0x5}, {0x3, 0x1}, {0x1, 0x6}, {0x2, 0xa}, {0x5, 0x5}, {0x0, 0x5}, {0x0, 0x4}, {0x4, 0x6}, {0x6, 0x7}, {0x7, 0x6}, {0x5, 0x7}, {0x6, 0x9}, {0x1, 0x3}, {}, {0x2, 0x7}, {0x3, 0x5}, {0x2, 0x7}, {0x2, 0x9}, {0x4, 0x5}, {0x0, 0x9}, {0x5, 0x2}, {0x3, 0x5}, {0x1, 0x6}, {0x1, 0x6}, {0x5, 0x1}, {0x5, 0x2}, {0x1}, {0x7, 0x3}, {0x1, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x12, 0x48, 0x48, 0x2, 0x5, 0x24, 0x2, 0x24, 0x24, 0x18, 0xb, 0xc, 0x60, 0x6, 0x4, 0x16, 0x1, 0x9, 0x3, 0x0, 0x30, 0x60, 0x48, 0x16, 0xb]}, @NL80211_TXRATE_HT={0x11, 0x2, [{}, {0x3}, {0x4, 0x7}, {0x5}, {0x5, 0xa}, {0x5, 0x7}, {0x1, 0x8}, {0x4, 0x2}, {0x6, 0x7}, {0x4, 0xa}, {0x4, 0x4}, {0x3, 0x8}, {0x6, 0x2}]}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x80, 0x1, 0x2, 0x8, 0x6, 0x7, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x0, 0xe, 0x100, 0xc426, 0x9, 0x2, 0x2]}}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x6, 0xa}, {0x1, 0xa}, {0x6, 0x8}, {0x7, 0x7}, {0x7, 0x9}, {0x7, 0x2}, {0x1, 0x5}, {0x6, 0x3}, {0x7, 0x8}, {0x6, 0xa}, {0x0, 0xa}, {0x7, 0x8}, {0x6, 0x2}, {0x1, 0x6}, {0x6, 0x7}, {0x2, 0x2}, {0x5, 0x7}, {0x5, 0x2}, {0x1, 0x6}, {0x5, 0xa}, {0x4}, {0x7, 0xa}, {0x5, 0x7}, {0x3, 0x5}, {0x5, 0x3}, {0x2, 0x8}, {0x2, 0x8}, {0x0, 0x4}, {0x2, 0x5}, {0x7, 0x7}, {}, {0x1, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x1, 0x2}, {0x0, 0x8}, {0x6}, {0x3, 0x5}, {0x6, 0x1}, {0x1}, {0x1}, {0x3, 0x2}, {0x0, 0x3}, {0x0, 0x2}, {0x7, 0xa}, {0x3}, {0x2, 0x5}, {0x2, 0x8}, {0x5, 0x9}, {0x3, 0x6}, {0x2, 0x9}, {0x3, 0x9}, {0x4, 0x9}, {}, {0x7, 0xa}, {0x3, 0x5}, {0x1, 0x6}, {0x7, 0x4}, {0x4, 0xa}, {0x2, 0xa}, {0x7, 0x9}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0xc3, 0x18, 0x16, 0x1, 0x3, 0x6, 0x6c, 0x4, 0x60, 0x6, 0x6, 0x24, 0x6c, 0x6, 0x6c, 0x9, 0x6, 0x86c4bd8a43f1079d, 0x1, 0x2, 0x6c, 0x2, 0x48, 0x12, 0x48, 0x9, 0xc, 0x60, 0xb, 0x2]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0xb4, 0x2, 0xfff, 0xa6, 0x6, 0xaa]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0x6, 0x8, 0x800, 0x6, 0x1, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x4, 0x15, 0x8a, 0x0, 0x5, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xfff9, 0x2, 0xff, 0x6137, 0x2, 0x8, 0x4]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x3f, 0x5, 0x18]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x7, 0x7}, {0x7, 0x6}, {0x7, 0x4}, {0x2, 0x9}, {0x0, 0x6}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0x7}, {0x4, 0xa}, {0x3, 0xa}, {0x7, 0x9}, {0x0, 0xa}, {0x4, 0x3}, {0x6, 0x4}, {0x1, 0x3}, {0x7, 0x8}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0x8}, {0x1, 0x8}, {0x7, 0x7}, {0x5, 0x1}, {0x0, 0x6}, {0x6, 0x1}, {0x1, 0x8}, {0x7, 0xa}, {0x6, 0x2}, {0x1, 0x9}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0xc, 0x9, 0x2, 0x18, 0x6c, 0x9, 0x30, 0x1, 0x3, 0x6c, 0x18, 0x1b, 0x1b, 0x9, 0x1, 0x16, 0x60, 0x1, 0x60, 0x16, 0x60, 0xb, 0xa, 0x24]}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x101, 0x6, 0x3, 0x400, 0x58b7, 0x9]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xb, 0x3, 0x2e, 0x16, 0x12, 0x2, 0x60, 0x24, 0x16, 0x9, 0x24, 0x24, 0x24, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x10, 0x8, 0x4, 0x0, 0x232b, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x114, 0x11d, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x8b918d95d9255652, 0x1b, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffc, 0x2, 0x1, 0x83, 0x101, 0x1, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x2, 0x2, 0x0, 0x0, 0xd11, 0x3d9, 0xfffe]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x1, 0x8}, {0x4}, {0x5, 0xa}, {0x0, 0x7}, {0x4, 0x1}, {0x6, 0x9}, {}, {0x6, 0x5}, {0x6, 0x8}, {0x3, 0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x5}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0x8}, {0x2, 0x2}, {0x5, 0x1}, {0x3, 0x5}, {0x1, 0x2}]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x8, 0x3, 0x1, 0x5, 0x4, 0x7, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xd, 0x8, 0xfffc, 0xd6ea, 0x800, 0x0, 0x2]}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf0}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1f0, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x56}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xa}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x69}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6a}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x88}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x16}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x174, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x90}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x15c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x6, 0x1}, {0x7, 0x6}, {0x1, 0xa}, {0x6, 0x9}, {0x1, 0x1}, {0x4, 0x5}, {0x3, 0x9}, {0x4, 0x8}, {0x0, 0x7}, {0x1}, {0x0, 0x2}, {0x1, 0x6}, {}, {0x0, 0x1}, {0x3, 0x5}, {0x0, 0x2}, {0x5, 0x2}, {0x5}, {0x0, 0x5}, {0x4, 0x4}, {0x2, 0x9}, {0x3, 0x4}, {0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x3, 0x4, 0x2, 0x12, 0x2, 0x36, 0xb, 0x4, 0x6c, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xff80, 0x200, 0x8, 0x7, 0x6, 0x741a, 0x7]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x6, 0x4}, {0x2, 0x7}, {0x1, 0x2}, {0x6, 0xa}, {0x0, 0xa}, {0x0, 0x5}, {0x6, 0x4}, {0x6, 0x6}, {0x0, 0x8}, {0x1, 0x5}, {0x5, 0x8}, {0x5, 0x8}, {0x2, 0x4}, {0x5, 0x4}, {0x6, 0x1}, {0x6, 0x8}, {0x2, 0x5}, {0x3, 0x9}, {0x3, 0x3}, {0x0, 0x6}, {0x7}, {0x4}, {}, {0x0, 0x1}, {0x6, 0x6}, {0x1, 0x3}, {0x0, 0xa}, {0x4}, {0x6, 0xa}, {0x6, 0x7}, {0x0, 0x4}, {0x7, 0x4}, {0x1, 0x4}, {0x7, 0x1}, {0x2, 0x7}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x1}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x2, 0xe2, 0x49, 0x1, 0x2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x1, 0x5}, {0x6, 0x1}, {0x0, 0x3}, {0x3, 0x5}, {0x4, 0x3}, {0x2, 0x7}, {0x6, 0x9}, {0x7, 0x7}, {0x5, 0xa}, {0x5, 0x7}, {0x2, 0x7}, {0x1, 0x5}, {0x7}, {0x4, 0x1}, {0x1, 0x2}, {0x0, 0x1}, {0x6, 0x1}, {0x5, 0x8}, {0x2, 0x3}, {0x7, 0x8}, {0x5, 0x6}, {0x2, 0x7}, {0x7, 0x1}, {0x0, 0x9}, {0x0, 0x8}, {0x1, 0x6}, {0x4, 0x7}, {0x6, 0x7}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x8}, {0x0, 0x6}, {0x6, 0xa}, {0x3, 0x5}, {0x4}, {0x1, 0x7}, {0x2, 0x4}, {0x5, 0x4}, {0x1, 0x6}, {0x1}, {0x3, 0x9}, {0x7, 0x1}, {0x3, 0x9}, {0x7}, {0x6, 0x2}, {0x5}, {0x0, 0x1}, {0x0, 0x5}, {0x1, 0x7}, {0x6, 0xa}]}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0xe4, 0x80, 0x3, 0x5, 0x5e, 0x5, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x67, 0x6, 0x3, 0x4, 0x8000, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xffff, 0x4, 0x9, 0x5, 0x3, 0x800, 0x3]}}]}]}]}]}]}, 0x1258}}, 0x4048040) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) close(0x3) 164.180801ms ago: executing program 1 (id=2272): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x38, 0x9fef}, {0x6, 0xfc}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0xfff) write$ppp(r0, &(0x7f0000000140)="1e0861", 0x3) (async) write$ppp(r0, &(0x7f0000000140)="1e0861", 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="104de6020700090004030000250000002eb60c7ef09ee8c23e2caa8dbb8e01000000", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r2}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r2}, 0x38) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r4], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r3, &(0x7f0000000140)="294c9dadfe43a4489d5112bce040", 0xe, 0x80, &(0x7f0000000040)={0x11, 0x1b, r6, 0x1, 0x9, 0x6, @random="6faa5fa51b9a"}, 0x14) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xeb, 0x0) 149.554727ms ago: executing program 2 (id=2273): openat$tun(0xffffffffffffff9c, 0x0, 0x20800, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@deltaction={0x19c, 0x31, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x44}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa6}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f22}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x90}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048800}, 0x20008801) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c"], 0x340a) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r10, 0x5452, &(0x7f0000000180)=0xf51) readv(r10, &(0x7f0000000340)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) setsockopt$sock_int(r10, 0x1, 0x20, &(0x7f00000000c0)=0xf6, 0x4) 79.746772ms ago: executing program 4 (id=2274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x26020480) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000)=0x28, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) unshare(0x26020480) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000)=0x28, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0) (async) 13.551541ms ago: executing program 1 (id=2275): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001200010025bd700000000000070000007359dd950de122c0eba5618564f9ca90f33ff13c29a107f822ea28119d6d3104b841c1549ec6c83fa9f17521f457dbd0666a8f385a9e72054e84c719fcb0074a07000000000000003511b319cd40ba7475600b6f54567340ce3f", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468315f766972745f77696669000800040001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket(0xa, 0x5, 0x0) listen(r3, 0x8) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x200000ff, @loopback, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000a00)="0040a00d", 0x4}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="300000000000000083ffde0001008e183b26e4a10790000000009ef8b4b05a04819e000001000000120200000ad8a01b88c018540cd56bd772a816795c25ee96ff803bad378ec97a9278f435a34b544dd24df90288490100bf7d1a9c4e411135ec691084abeca5dc49b24263766c807cc53d5dce82170e216bd61b3b675015e9a77fade7ff21162ca6d53ef1bc6e5de013ca96111ddb1c4072ade613a5cbb1ecbe8f9f6ebbd227699634a7d83baf5cd7588b77bade2c22b42a244929e6050bd0684ded96cc99f9db6dabc209c337dce3c33d9af9b7883fc32fbd39ad74efd90133b3a6eed67a3cd69e950bd8f52212aca798a7ddd8", @ANYRES32=0x0], 0x30, 0x4855}, 0x24000052) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:'], 0x47) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r5, 0x20, &(0x7f0000000400)={&(0x7f0000000240)=""/74, 0x4a, 0x0, &(0x7f0000000300)=""/246, 0xf6}}, 0x10) unshare(0x40000480) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000001c0)=0x6533, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvfrom$inet(r4, 0x0, 0x0, 0x2043, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000002100), &(0x7f0000000000)=0x30) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x7800, 0x1, 0x3, 0x6, {{0x41, 0x4, 0x1, 0xa, 0x104, 0x64, 0x0, 0xc, 0x29, 0x0, @remote, @multicast1, {[@ssrr={0x89, 0xb, 0x63, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x34, 0x4a, 0x1, 0x6, [{@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0xc8f}, {@multicast1, 0xff}, {@broadcast, 0x2}, {@remote, 0xc}, {@multicast2, 0x8}]}, @noop, @timestamp={0x44, 0x1c, 0xb7, 0x0, 0x5, [0x0, 0xffffffff, 0x8, 0x43, 0x80000001, 0x7fffffff]}, @lsrr={0x83, 0x14, 0xf, [@dev={0xac, 0x14, 0x14, 0x30}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010102]}, @generic={0x44, 0x10, "a263b6b846a853be63b19e5adc89"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x54, 0xaf, 0x1, 0x8, [{@multicast1, 0x3ff}, {@rand_addr=0x64010101, 0xfffffffa}, {@remote, 0xe}, {@remote, 0x8001}, {@broadcast, 0x4}, {@rand_addr=0x64010100, 0x3}, {@multicast2, 0x800}, {@loopback}, {@rand_addr=0x64010102, 0x9}, {@multicast2, 0xc}]}, @ssrr={0x89, 0x13, 0x4, [@private=0xa010101, @multicast1, @loopback, @remote]}]}}}}}) 0s ago: executing program 4 (id=2276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x28980, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000020000000f100000000000007a0000000000000095f305e49b243c69"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) (async) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7}, 0x1c) (async) shutdown(r1, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000140)=0xfffffffe, 0x4) sendmmsg$inet(r3, &(0x7f0000000980)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="688d92b6ac", 0x5}], 0x1, &(0x7f0000000b40)}}], 0x2, 0x4008800) (async) close(r2) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000000) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) r9 = socket(0xa, 0x3, 0x87) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000480)={@private2, 0x18, r11}) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={r8, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000540)=0xd172, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) kernel console output (not intermixed with test programs): packets. [ 151.227478][ T78] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.236167][ T8901] netlink: 112 bytes leftover after parsing attributes in process `syz.0.763'. [ 151.245462][ T78] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.280322][ T78] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.305528][ T78] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.335967][ T6153] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.344302][ T6153] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.386979][ T6150] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.405201][ T6150] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.516379][ T8907] xt_CT: No such helper "snmp_trap" [ 151.620133][ T8919] FAULT_INJECTION: forcing a failure. [ 151.620133][ T8919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.650003][ T8919] CPU: 0 UID: 0 PID: 8919 Comm: syz.3.767 Not tainted syzkaller #0 PREEMPT(full) [ 151.650025][ T8919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 151.650034][ T8919] Call Trace: [ 151.650040][ T8919] [ 151.650047][ T8919] dump_stack_lvl+0xe8/0x150 [ 151.650072][ T8919] should_fail_ex+0x412/0x560 [ 151.650096][ T8919] _copy_to_user+0x31/0xb0 [ 151.650120][ T8919] simple_read_from_buffer+0xe1/0x170 [ 151.650146][ T8919] proc_fail_nth_read+0x1bb/0x230 [ 151.650170][ T8919] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 151.650193][ T8919] ? rw_verify_area+0x2a6/0x4d0 [ 151.650209][ T8919] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 151.650230][ T8919] vfs_read+0x20c/0xa70 [ 151.650245][ T8919] ? fdget_pos+0x246/0x320 [ 151.650272][ T8919] ? __pfx___mutex_lock+0x10/0x10 [ 151.650297][ T8919] ? __pfx_vfs_read+0x10/0x10 [ 151.650323][ T8919] ? __fget_files+0x2a/0x420 [ 151.650348][ T8919] ? __fget_files+0x3a0/0x420 [ 151.650368][ T8919] ? __fget_files+0x2a/0x420 [ 151.650398][ T8919] ksys_read+0x150/0x270 [ 151.650416][ T8919] ? __pfx_ksys_read+0x10/0x10 [ 151.650442][ T8919] do_syscall_64+0x14d/0xf80 [ 151.650464][ T8919] ? trace_irq_disable+0x3b/0x150 [ 151.650486][ T8919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.650504][ T8919] ? clear_bhb_loop+0x40/0x90 [ 151.650525][ T8919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.650541][ T8919] RIP: 0033:0x7feb3e75cece [ 151.650557][ T8919] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 151.650570][ T8919] RSP: 002b:00007feb3f5dafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 151.650586][ T8919] RAX: ffffffffffffffda RBX: 00007feb3f5db6c0 RCX: 00007feb3e75cece [ 151.650598][ T8919] RDX: 000000000000000f RSI: 00007feb3f5db0a0 RDI: 0000000000000006 [ 151.650608][ T8919] RBP: 00007feb3f5db090 R08: 0000000000000000 R09: 0000000000000000 [ 151.650618][ T8919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.650626][ T8919] R13: 00007feb3ea16038 R14: 00007feb3ea15fa0 R15: 00007fffc5bafbc8 [ 151.650654][ T8919] [ 151.689960][ T8925] netlink: 180 bytes leftover after parsing attributes in process `syz.0.771'. [ 151.739964][ T8920] netlink: 'syz.1.768': attribute type 1 has an invalid length. [ 151.892881][ T8920] netlink: 256 bytes leftover after parsing attributes in process `syz.1.768'. [ 152.008935][ T8939] netlink: 'syz.0.774': attribute type 1 has an invalid length. [ 152.024875][ T8943] netlink: 'syz.2.775': attribute type 1 has an invalid length. [ 152.050077][ T8944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.776'. [ 152.059591][ T8943] netlink: 228 bytes leftover after parsing attributes in process `syz.2.775'. [ 152.063133][ T8939] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 152.080205][ T8939] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 152.136201][ T8948] bond0: (slave bridge1): Enslaving as an active interface with a down link [ 152.164688][ T8939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.188733][ T8939] bond0: entered promiscuous mode [ 152.196350][ T8939] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 152.205287][ T8939] bond0: left promiscuous mode [ 152.364660][ T8956] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .¿šØ ÕáÊÎí ÿìà´*žËî]æÌÔáÿÿÿÿÁ [ 152.538271][ T8964] syzkaller1: entered promiscuous mode [ 152.543759][ T8964] syzkaller1: entered allmulticast mode [ 152.756870][ T8977] IPv6: addrconf: prefix option has invalid lifetime [ 152.765985][ T8977] 8021q: VLANs not supported on ip6tnl0 [ 152.910364][ T8984] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.056772][ T8984] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.060644][ T8998] netlink: 'syz.0.792': attribute type 2 has an invalid length. [ 153.152535][ T8998] !©9: entered promiscuous mode [ 153.191693][ T8984] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.316447][ T8984] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.435558][ T9023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.447841][ T9023] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 153.459364][ T9023] bond0: (slave sit0): Error -95 calling set_mac_address [ 153.510800][ T78] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.554869][ T78] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.635283][ T78] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.664112][ T78] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.889502][ T25] block nbd0: Connection timed out, retrying (0/1 alive) [ 153.898064][ T25] block nbd0: Connection timed out, retrying (0/1 alive) [ 153.905581][ T25] block nbd0: Connection timed out, retrying (0/1 alive) [ 153.914716][ T25] block nbd0: Connection timed out, retrying (0/1 alive) [ 153.922580][ T2265] block nbd0: Dead connection, failed to find a fallback [ 153.982639][ T9054] batman_adv: batadv0: Adding interface: geneve2 [ 153.989778][ T9054] batman_adv: batadv0: Interface activated: geneve2 [ 154.280600][ T9068] æÿîÿ: entered promiscuous mode [ 154.445135][ T9076] syzkaller1: entered promiscuous mode [ 154.450806][ T9076] syzkaller1: entered allmulticast mode [ 155.034680][ T9112] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 155.042889][ T9112] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 155.050866][ T9112] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 155.058809][ T9112] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 155.066707][ T9112] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 155.074661][ T9112] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 155.082635][ T9112] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 155.090595][ T9112] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 155.627775][ T9149] veth0_virt_wifi: entered promiscuous mode [ 155.634843][ T9152] tipc: Can't bind to reserved service type 3 [ 155.644508][ T9149] macsec1: entered allmulticast mode [ 155.661731][ T9149] veth0_virt_wifi: entered allmulticast mode [ 155.680303][ T9149] veth0_virt_wifi: left allmulticast mode [ 155.687400][ T9149] veth0_virt_wifi: left promiscuous mode [ 155.884317][ T9164] __nla_validate_parse: 15 callbacks suppressed [ 155.884337][ T9164] netlink: 32 bytes leftover after parsing attributes in process `syz.4.831'. [ 155.900371][ T9164] netlink: 32 bytes leftover after parsing attributes in process `syz.4.831'. [ 156.051585][ T9173] netlink: 'syz.4.832': attribute type 11 has an invalid length. [ 156.074868][ T9173] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.832'. [ 156.358526][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 157.149853][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.842'. [ 157.224915][ T9213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.255988][ T9215] macsec1: entered promiscuous mode [ 157.261529][ T9215] bond0: entered promiscuous mode [ 157.281521][ T9213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.842'. [ 157.309138][ T9215] bond0: left promiscuous mode [ 157.402126][ T9221] x_tables: duplicate underflow at hook 2 [ 157.556587][ T9228] syzkaller0: entered promiscuous mode [ 157.563693][ T9228] syzkaller0: entered allmulticast mode [ 157.625458][ T9229] FAULT_INJECTION: forcing a failure. [ 157.625458][ T9229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.641522][ T9229] CPU: 1 UID: 0 PID: 9229 Comm: syz.4.847 Not tainted syzkaller #0 PREEMPT(full) [ 157.641546][ T9229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.641556][ T9229] Call Trace: [ 157.641563][ T9229] [ 157.641570][ T9229] dump_stack_lvl+0xe8/0x150 [ 157.641598][ T9229] should_fail_ex+0x412/0x560 [ 157.641622][ T9229] _copy_from_user+0x2d/0xb0 [ 157.641645][ T9229] ___sys_sendmsg+0x1c6/0x360 [ 157.641674][ T9229] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.641736][ T9229] ? __fget_files+0x2a/0x420 [ 157.641758][ T9229] ? __fget_files+0x3a0/0x420 [ 157.641798][ T9229] __x64_sys_sendmsg+0x1bd/0x2a0 [ 157.641824][ T9229] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.641856][ T9229] ? __pfx_ksys_write+0x10/0x10 [ 157.641884][ T9229] do_syscall_64+0x14d/0xf80 [ 157.641908][ T9229] ? trace_irq_disable+0x3b/0x150 [ 157.641928][ T9229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.641945][ T9229] ? clear_bhb_loop+0x40/0x90 [ 157.641965][ T9229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.641982][ T9229] RIP: 0033:0x7fc3bab9c629 [ 157.641998][ T9229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.642011][ T9229] RSP: 002b:00007fc3bb970028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.642029][ T9229] RAX: ffffffffffffffda RBX: 00007fc3bae16090 RCX: 00007fc3bab9c629 [ 157.642041][ T9229] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000008 [ 157.642051][ T9229] RBP: 00007fc3bb970090 R08: 0000000000000000 R09: 0000000000000000 [ 157.642061][ T9229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.642070][ T9229] R13: 00007fc3bae16128 R14: 00007fc3bae16090 R15: 00007fff8629d0f8 [ 157.642098][ T9229] [ 157.919617][ T9242] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 158.085573][ T9250] netlink: 16 bytes leftover after parsing attributes in process `syz.0.853'. [ 158.283626][ T9262] netlink: 'syz.1.857': attribute type 2 has an invalid length. [ 158.318416][ T9265] netlink: 76 bytes leftover after parsing attributes in process `syz.1.857'. [ 158.329355][ T9264] net_ratelimit: 46 callbacks suppressed [ 158.329372][ T9264] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 158.348664][ T9262] netlink: 'syz.1.857': attribute type 1 has an invalid length. [ 158.361337][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'. [ 158.379644][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'. [ 158.382147][ T9262] netlink: 'syz.1.857': attribute type 2 has an invalid length. [ 158.398768][ T9262] netlink: 'syz.1.857': attribute type 1 has an invalid length. [ 159.163606][ T9311] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 159.670929][ T9339] netlink: 'syz.0.881': attribute type 4 has an invalid length. [ 159.851984][ T9347] netlink: 'syz.0.881': attribute type 4 has an invalid length. [ 160.543193][ T9380] vlan1: left promiscuous mode [ 160.611972][ T9380] vti0: left promiscuous mode [ 160.643933][ T9380] geneve2: left promiscuous mode [ 160.680289][ T9391] bond0: (slave rose0): Enslaving as an active interface with an up link [ 160.877978][ T9403] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 160.993071][ T9412] netlink: 'syz.4.898': attribute type 4 has an invalid length. [ 161.036348][ T9412] __nla_validate_parse: 12 callbacks suppressed [ 161.036368][ T9412] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.898'. [ 161.086866][ T9412] netlink: 48 bytes leftover after parsing attributes in process `syz.4.898'. [ 161.135908][ T796] syz_tun: tun_net_xmit 86 [ 161.152684][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.898'. [ 161.385257][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.906'. [ 161.434109][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.906'. [ 161.489551][ T9443] chnl_net:caif_netlink_parms(): no params data found [ 161.653115][ T9461] netlink: 'syz.3.909': attribute type 1 has an invalid length. [ 161.828160][ T9461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.858556][ T9468] vlan3: entered promiscuous mode [ 161.863668][ T9468] bond1: entered promiscuous mode [ 161.875731][ T9468] vlan3: entered allmulticast mode [ 161.887274][ T9468] bond1: entered allmulticast mode [ 161.914150][ T9461] bond1: (slave bridge2): making interface the new active one [ 161.945275][ T9461] bridge2: entered promiscuous mode [ 161.950779][ T9461] bridge2: entered allmulticast mode [ 161.957601][ T9461] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 161.971038][ T9483] nbd: socks must be embedded in a SOCK_ITEM attr [ 162.045261][ T9476] team0 (unregistering): Port device team_slave_0 removed [ 162.110354][ T9476] team0 (unregistering): Port device team_slave_1 removed [ 162.739684][ T9515] netlink: 68 bytes leftover after parsing attributes in process `syz.4.921'. [ 162.763640][ T9516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.920'. [ 162.899739][ T9523] syzkaller0: entered promiscuous mode [ 162.905518][ T9523] syzkaller0: entered allmulticast mode [ 162.932588][ T9523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.940201][ T9523] IPv6: NLM_F_CREATE should be set when creating new route [ 162.947494][ T9523] IPv6: NLM_F_CREATE should be set when creating new route [ 162.954730][ T9523] IPv6: NLM_F_CREATE should be set when creating new route [ 163.123796][ T9534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'. [ 163.156062][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.925'. [ 163.441052][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.924'. [ 163.839625][ T9570] netlink: set zone limit has 4 unknown bytes [ 163.853399][ T9573] netlink: 'syz.3.932': attribute type 3 has an invalid length. [ 164.283007][ T9594] geneve2: entered promiscuous mode [ 164.474655][ T9603] dummy0: Caught tx_queue_len zero misconfig [ 164.743834][ T9603] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.261157][ T9613] sctp: [Deprecated]: syz.0.941 (pid 9613) Use of int in max_burst socket option deprecated. [ 165.261157][ T9613] Use struct sctp_assoc_value instead [ 165.519262][ T9627] netlink: 'syz.2.944': attribute type 29 has an invalid length. [ 165.998899][ T9646] openvswitch: netlink: IP tunnel dst address not specified [ 166.195532][ T9658] netlink: 'syz.4.960': attribute type 1 has an invalid length. [ 166.226714][ T9658] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 166.433520][ T9669] syzkaller0: entered promiscuous mode [ 166.504657][ T9669] syzkaller0: entered allmulticast mode [ 166.521391][ T9677] __nla_validate_parse: 10 callbacks suppressed [ 166.521409][ T9677] netlink: 28 bytes leftover after parsing attributes in process `syz.3.962'. [ 166.542441][ T9677] netlink: 28 bytes leftover after parsing attributes in process `syz.3.962'. [ 166.584332][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.962'. [ 166.749290][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.969'. [ 166.998444][ T9702] netlink: 'syz.3.971': attribute type 2 has an invalid length. [ 167.024625][ T9702] : entered promiscuous mode [ 167.043057][ T9702] netlink: 'syz.3.971': attribute type 2 has an invalid length. [ 167.062952][ T9702] : left promiscuous mode [ 167.070001][ T9665] lec:lec_atm_close: lec0: Shut down! [ 167.113983][ T9706] netlink: 44 bytes leftover after parsing attributes in process `syz.4.973'. [ 167.777241][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.982'. [ 167.823471][ T9742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.982'. [ 167.917919][ T9743] netlink: 'syz.3.982': attribute type 1 has an invalid length. [ 168.000771][ T9743] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 168.228507][ T9767] netlink: 32 bytes leftover after parsing attributes in process `syz.3.986'. [ 168.266396][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'. [ 168.273525][ T9768] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 168.327220][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'. [ 168.738238][ T796] lec:lec_start_xmit: lec0:No lecd attached [ 169.459240][ T9833] vxlan0: entered promiscuous mode [ 169.464599][ T9833] vxlan0: entered allmulticast mode [ 169.470661][ T6155] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.479308][ T6155] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.497434][ T9834] syzkaller1: entered promiscuous mode [ 169.513650][ T9834] syzkaller1: entered allmulticast mode [ 169.529480][ T6155] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.538727][ T6155] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.933196][ T9815] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 171.952294][ T9824] __nla_validate_parse: 1 callbacks suppressed [ 171.952314][ T9824] netlink: 16 bytes leftover after parsing attributes in process `syz.0.998'. [ 172.325365][ T9862] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 172.365906][ T9862] syzkaller0: entered promiscuous mode [ 172.397307][ T9862] syzkaller0: entered allmulticast mode [ 172.414296][ T9873] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1006'. [ 173.646124][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1015'. [ 173.661830][ T9926] xt_hashlimit: size too large, truncated to 1048576 [ 173.668850][ T9926] xt_hashlimit: max too large, truncated to 1048576 [ 174.010500][ T9936] ip6tnl0: Caught tx_queue_len zero misconfig [ 174.024222][ T9936] netlink: 616 bytes leftover after parsing attributes in process `syz.4.1016'. [ 174.049156][ T9936] netlink: 'syz.4.1016': attribute type 1 has an invalid length. [ 174.119757][ T9937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1016'. [ 174.367124][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5630 ms [ 174.375535][ C1] lec:lec_tx_timeout: lec0 [ 174.380259][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 174.479826][ T9942] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.497170][ T9942] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.506240][ T9943] netlink: 'syz.4.1020': attribute type 21 has an invalid length. [ 174.578062][ T9943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1020'. [ 174.972942][ T9942] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.000457][ T9942] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.263022][ T9942] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.281860][ T9942] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.395744][ T9950] SET target dimension over the limit! [ 175.412114][ T9942] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.437170][ T9942] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.629370][ T6161] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.638981][ T6161] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.650648][ T6161] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.667493][ T6161] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.712693][ T6161] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.734770][ T6161] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.793118][ T6155] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.804592][ T6155] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.083003][ T9984] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 176.118735][ T9987] xt_hashlimit: size too large, truncated to 1048576 [ 176.127989][ T9987] xt_hashlimit: max too large, truncated to 1048576 [ 176.560009][T10005] geneve2: entered promiscuous mode [ 176.567469][T10005] geneve2: entered allmulticast mode [ 176.587720][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1033'. [ 176.701680][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1033'. [ 178.763910][ T9970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 178.938312][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1047'. [ 178.971348][T10076] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1047'. [ 178.997623][T10080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1050'. [ 179.048725][T10079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1049'. [ 179.132833][T10091] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1053'. [ 179.218872][T10096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1055'. [ 179.292859][T10100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1058'. [ 179.309480][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 179.322874][T10104] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1059'. [ 179.339420][T10100] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1058'. [ 179.351999][T10101] xt_hashlimit: size too large, truncated to 1048576 [ 179.359041][T10101] xt_hashlimit: max too large, truncated to 1048576 [ 179.448681][T10109] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.553846][T10109] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.646499][T10109] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.692026][T10126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.755624][T10109] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.854776][T10131] dvmrp0: entered allmulticast mode [ 179.888480][T10133] tipc: Enabling not permitted [ 179.894379][T10133] tipc: Enabling of bearer rejected, failed to enable media [ 179.922476][ T65] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.990474][ T65] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.033485][ T65] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.085175][ T78] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.127071][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 180.135140][ C1] lec:lec_tx_timeout: lec0 [ 180.140617][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 180.204358][T10143] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 180.210746][ T5883] IPVS: starting estimator thread 0... [ 180.307155][T10149] IPVS: using max 39 ests per chain, 93600 per kthread [ 180.780271][T10170] netlink: 'syz.4.1076': attribute type 1 has an invalid length. [ 181.032911][T10179] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.085893][T10179] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.162489][T10179] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.172536][T10179] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.299868][T10179] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.317187][T10179] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.412244][T10193] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20002 [ 181.451333][T10179] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.471614][T10179] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.647977][ T6153] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.661096][ T6153] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.682834][ T6153] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.697264][ T6153] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.732538][ T6153] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.756433][ T6153] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.774117][T10207] vlan2: entered promiscuous mode [ 181.799838][ T6153] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.809065][ T6153] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.379196][T10241] team0 (unregistering): Port device team_slave_0 removed [ 182.398633][T10241] team0 (unregistering): Port device team_slave_1 removed [ 182.476284][T10247] xt_bpf: check failed: parse error [ 182.571815][T10251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.580582][T10251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.590245][T10251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.607345][T10251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.963453][T10265] netlink: 'syz.3.1103': attribute type 1 has an invalid length. [ 183.090059][T10265] bond2: entered promiscuous mode [ 183.120037][T10265] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.346793][T10284] syzkaller0: entered promiscuous mode [ 183.355066][T10284] syzkaller0: entered allmulticast mode [ 183.406699][T10286] syzkaller0: entered promiscuous mode [ 183.412432][T10286] syzkaller0: entered allmulticast mode [ 183.880260][T10306] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.908494][T10306] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.990449][T10304] xt_bpf: check failed: parse error [ 184.043792][T10306] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.065885][T10306] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.172458][T10306] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.182687][T10306] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.223223][T10325] Bluetooth: MGMT ver 1.23 [ 184.286024][T10306] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.299289][T10306] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.415080][T10336] __nla_validate_parse: 56 callbacks suppressed [ 184.415101][T10336] netlink: 4456 bytes leftover after parsing attributes in process `syz.3.1120'. [ 184.497613][T10334] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1119'. [ 184.683589][ T65] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.705603][ T65] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.747098][T10350] netlink: 'syz.2.1122': attribute type 1 has an invalid length. [ 184.754994][T10350] netlink: 'syz.2.1122': attribute type 2 has an invalid length. [ 184.769057][ T65] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.781321][ T65] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.815905][ T65] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.876156][ T65] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.911540][ T6161] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.919893][ T6161] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.982222][T10347] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1121'. [ 185.156950][T10361] xfrm1: entered allmulticast mode [ 185.781386][T10396] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.817279][T10396] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.830629][T10402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1135'. [ 185.861543][T10401] ip6erspan0: entered promiscuous mode [ 185.887073][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 185.895154][ C1] lec:lec_tx_timeout: lec0 [ 185.896071][T10399] syzkaller1: entered promiscuous mode [ 185.899986][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 185.918784][T10399] syzkaller1: entered allmulticast mode [ 185.944411][T10396] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.974958][T10396] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.037498][T10404] netem: change failed [ 186.148570][T10396] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.161368][T10396] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.219110][T10410] wg1: entered promiscuous mode [ 186.224097][T10410] wg1: entered allmulticast mode [ 186.263985][T10396] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.299495][T10396] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.570648][ T6150] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.580173][ T6150] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.632892][ T6155] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.647215][ T6155] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.682942][ T6150] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.717420][ T6150] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.750321][ T6150] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.768139][ T6150] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.914601][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'. [ 186.939901][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1144'. [ 187.049725][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'. [ 187.091075][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1144'. [ 187.150987][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'. [ 187.177400][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1144'. [ 187.869984][T10461] Unsupported ieee802154 address type: 0 [ 188.024719][T10470] netlink: 'syz.3.1154': attribute type 2 has an invalid length. [ 188.056888][T10470] : entered promiscuous mode [ 190.917098][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 190.925177][ C1] lec:lec_tx_timeout: lec0 [ 190.929900][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 191.170097][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 191.170622][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 191.183102][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 191.233614][T10532] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.391187][T10492] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.489331][T10540] __nla_validate_parse: 126 callbacks suppressed [ 191.489351][T10540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 191.597193][T10550] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 191.630481][T10545] syzkaller0: entered promiscuous mode [ 191.636005][T10545] syzkaller0: entered allmulticast mode [ 191.749476][T10552] netlink: set zone limit has 4 unknown bytes [ 191.754578][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1176'. [ 191.784932][T10555] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 191.912084][T10565] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 191.980188][T10574] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1181'. [ 192.013272][T10574] netlink: 'syz.4.1181': attribute type 4 has an invalid length. [ 192.156004][T10585] netlink: 'syz.3.1182': attribute type 21 has an invalid length. [ 192.216985][T10585] netlink: 'syz.3.1182': attribute type 3 has an invalid length. [ 192.224803][T10585] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1182'. [ 192.281053][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1186'. [ 193.161793][T10615] netlink: 'syz.2.1190': attribute type 10 has an invalid length. [ 193.533824][T10615] team0: Port device dummy0 added [ 193.726161][T10626] x_tables: duplicate underflow at hook 1 [ 193.877980][T10632] netlink: 'syz.1.1196': attribute type 13 has an invalid length. [ 193.889966][T10632] gretap0: refused to change device tx_queue_len [ 193.909707][T10632] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 194.065842][T10642] netlink: 'syz.1.1198': attribute type 1 has an invalid length. [ 194.125152][T10647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1201'. [ 194.139102][T10650] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1200'. [ 194.143498][T10648] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.158055][T10648] bond1: (slave bond2): making interface the new active one [ 194.165734][T10648] bond1: (slave bond2): Enslaving as an active interface with an up link [ 194.202601][T10642] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 194.218574][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.219172][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.240144][T10642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1198'. [ 194.250483][T10642] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.015896][T10675] netlink: 'syz.4.1209': attribute type 1 has an invalid length. [ 195.278846][T10595] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.562989][T10702] veth1: entered promiscuous mode [ 195.582147][T10704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1218'. [ 195.593401][T10707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1219'. [ 195.597133][T10702] veth1: entered allmulticast mode [ 195.655998][T10702] netlink: 'syz.2.1217': attribute type 2 has an invalid length. [ 195.699064][T10709] syzkaller1: entered promiscuous mode [ 195.709003][T10709] syzkaller1: entered allmulticast mode [ 195.937061][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 195.945162][ C1] lec:lec_tx_timeout: lec0 [ 195.949718][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 196.043064][T10733] netlink: 'syz.2.1226': attribute type 1 has an invalid length. [ 196.417568][T10763] openvswitch: netlink: Multiple metadata blocks provided [ 196.646951][T10781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1238'. [ 196.658822][T10773] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 196.676744][T10773] bond3 (unregistering): Released all slaves [ 196.680072][T10785] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1235'. [ 196.701129][T10786] netlink: 'syz.1.1236': attribute type 10 has an invalid length. [ 196.777318][T10786] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 196.800727][T10786] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 196.818384][T10786] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 196.848881][T10772] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.888286][T10772] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.115743][T10796] syzkaller0: entered promiscuous mode [ 197.121845][T10796] syzkaller0: entered allmulticast mode [ 197.163729][T10772] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.173676][T10772] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.187885][T10805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1242'. [ 198.422759][T10805] vlan2: entered promiscuous mode [ 198.434803][T10772] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.444823][T10772] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.534516][T10772] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.570069][T10772] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.652829][T10820] netlink: 'syz.2.1245': attribute type 1 has an invalid length. [ 198.677352][T10820] netlink: 'syz.2.1245': attribute type 2 has an invalid length. [ 198.801054][ T65] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.817798][ T65] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.826052][ T65] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.874599][ T65] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.948084][ T78] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.961652][ T78] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.987192][ T78] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.995458][ T78] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.226630][T10846] syzkaller0: entered promiscuous mode [ 199.232314][T10846] syzkaller0: entered allmulticast mode [ 199.254691][T10848] openvswitch: netlink: Duplicate or invalid key (type 0). [ 199.264220][T10848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.336842][T10852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1258'. [ 199.370495][T10852] vlan4: entered promiscuous mode [ 199.386951][T10852] batadv0: entered promiscuous mode [ 199.862139][T10879] syzkaller0: entered promiscuous mode [ 199.891692][T10879] syzkaller0: entered allmulticast mode [ 200.041341][T10885] macsec0: entered promiscuous mode [ 200.308599][T10899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1273'. [ 200.470261][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1277'. [ 200.678125][T10921] netlink: 'syz.3.1282': attribute type 2 has an invalid length. [ 200.723666][T10926] sctp: [Deprecated]: syz.4.1284 (pid 10926) Use of int in max_burst socket option. [ 200.723666][T10926] Use struct sctp_assoc_value instead [ 200.780880][T10931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1285'. [ 200.815855][T10931] vlan2: entered promiscuous mode [ 200.957053][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 200.965221][ C1] lec:lec_tx_timeout: lec0 [ 200.970099][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 201.195524][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1286'. [ 201.319645][T10941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1288'. [ 201.342479][T10941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1288'. [ 201.351678][T10941] tc_dump_action: action bad kind [ 201.371869][T10941] bridge0: port 1(macsec0) entered blocking state [ 201.379170][T10941] bridge0: port 1(macsec0) entered disabled state [ 201.385995][T10941] macsec0: entered allmulticast mode [ 201.399144][T10941] veth1_macvtap: entered allmulticast mode [ 201.412251][T10941] macsec0: entered promiscuous mode [ 201.423356][T10941] bridge0: port 1(macsec0) entered blocking state [ 201.429987][T10941] bridge0: port 1(macsec0) entered forwarding state [ 201.549463][T10947] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 201.569303][ T983] IPVS: starting estimator thread 0... [ 201.651375][T10954] netlink: 'syz.2.1292': attribute type 1 has an invalid length. [ 201.666173][T10952] IPVS: using max 35 ests per chain, 84000 per kthread [ 201.755922][T10969] __nla_validate_parse: 1 callbacks suppressed [ 201.755940][T10969] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1295'. [ 201.790484][T10963] gretap2: entered allmulticast mode [ 201.844817][T10963] bond3: (slave gretap2): making interface the new active one [ 201.868882][T10963] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 201.889652][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1298'. [ 201.918739][T10972] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.919536][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1298'. [ 201.937675][T10972] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.959387][T10980] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1297'. [ 202.008870][T10984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1300'. [ 202.145835][T10984] vlan3: entered promiscuous mode [ 202.207823][T10972] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.217983][T10972] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.724417][T10972] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.746390][T10972] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.944929][T10972] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.977735][T10972] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.006008][T11023] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1308'. [ 203.052061][T11026] tc_dump_action: action bad kind [ 203.057314][T11023] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 203.125436][T11028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1309'. [ 203.156159][ T65] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.199944][ T65] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.300410][ T65] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.319599][ T65] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.376730][ T65] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.390905][ T65] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.410422][ T65] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.424255][ T65] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.441111][T11038] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.462584][T11038] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.475594][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1314'. [ 203.501610][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1312'. [ 203.552682][T11048] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1316'. [ 203.589158][T11043] vlan2: entered promiscuous mode [ 203.636573][T11038] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.658944][T11057] netlink: 'syz.3.1316': attribute type 10 has an invalid length. [ 203.667226][T11038] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.883352][T11038] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.896913][T11038] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.022284][T11038] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.043768][T11038] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.987126][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 205.995229][ C1] lec:lec_tx_timeout: lec0 [ 205.999930][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 206.440524][T11089] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.450464][T11089] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.541325][T11089] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.551346][T11089] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.618830][T11089] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.629653][T11089] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.683095][ T6161] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.693615][ T6161] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.704012][T11108] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR [ 206.722959][T11089] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.743708][T11089] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.843953][T11112] ipvlan2: entered promiscuous mode [ 206.869036][T11112] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 206.878971][ T6161] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.894407][ T6161] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.930944][ T78] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.940150][ T78] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.966445][ T6161] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.982220][ T6161] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.057155][ T78] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.085653][ T78] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.131965][ T78] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.149943][T11145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.157189][ T78] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.193420][ T6161] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.227321][ T6161] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.266609][ T6155] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.275135][ T6155] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.294154][T11145] netlink: 'syz.0.1336': attribute type 2 has an invalid length. [ 207.543032][T11168] __nla_validate_parse: 5 callbacks suppressed [ 207.543048][T11168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1344'. [ 207.882667][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1350'. [ 207.979754][T11188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1349'. [ 208.063581][T11188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1349'. [ 208.095573][T11190] hsr0: entered promiscuous mode [ 208.154859][T11195] netlink: 'syz.0.1353': attribute type 1 has an invalid length. [ 208.195905][T11195] netlink: 'syz.0.1353': attribute type 5 has an invalid length. [ 208.270905][T11195] ip6erspan0: entered promiscuous mode [ 208.477089][T11219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1359'. [ 209.176469][T11245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1367'. [ 209.188741][T11245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1367'. [ 209.311459][T11241] netlink: 'syz.3.1366': attribute type 13 has an invalid length. [ 209.329131][T11241] netlink: 'syz.3.1366': attribute type 17 has an invalid length. [ 209.510787][T11241] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.601294][T11257] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1371'. [ 209.986668][T11282] batman_adv: batadv0: Adding interface: macsec1 [ 210.036568][T11282] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.066232][T11282] batman_adv: batadv0: Interface activated: macsec1 [ 210.286523][T11249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1368'. [ 210.338502][T11249] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1368'. [ 210.645458][T11303] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.657413][T11306] netlink: 'syz.4.1382': attribute type 1 has an invalid length. [ 210.678683][T11303] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.722105][T11301] tipc: MTU too low for tipc bearer [ 210.784224][T11306] bond2: entered promiscuous mode [ 210.790297][T11306] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.808178][T11305] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.815662][T11305] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 210.826367][T11305] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 210.848531][T11305] bond2: (slave gre1): making interface the new active one [ 210.855788][T11305] gre1: entered promiscuous mode [ 210.865577][T11305] bond2: (slave gre1): Enslaving as an active interface with an up link [ 210.964017][T11303] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.978706][T11303] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.122550][T11303] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.150670][T11303] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.192810][T11331] netlink: 'syz.0.1386': attribute type 1 has an invalid length. [ 211.217591][T11303] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.257272][T11303] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.490120][T11346] netlink: 'syz.2.1391': attribute type 3 has an invalid length. [ 211.541018][ T6150] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.549671][ T6150] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.589992][ T6150] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.614225][ T6150] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.659959][ T6150] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.671717][T11358] syz_tun: tun_net_xmit 42 [ 211.674639][ T6150] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.807071][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 211.815117][ C1] lec:lec_tx_timeout: lec0 [ 211.820179][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 211.914114][ T6150] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.934045][ T6150] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.990278][ T6150] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.041406][ T6150] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.070129][ T6150] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.113978][ T6150] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.569431][T11393] __nla_validate_parse: 18 callbacks suppressed [ 212.569451][T11393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1403'. [ 212.649051][T11395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1404'. [ 212.687153][ C1] syz_tun: tun_net_xmit 42 [ 212.826355][T11405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1405'. [ 212.877336][T11405] vlan4: entered promiscuous mode [ 212.910463][T11412] netlink: 'syz.0.1408': attribute type 8 has an invalid length. [ 213.015534][T11416] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 213.027339][T11408] FAULT_INJECTION: forcing a failure. [ 213.027339][T11408] name failslab, interval 1, probability 0, space 0, times 0 [ 213.061468][T11408] CPU: 1 UID: 0 PID: 11408 Comm: syz.1.1407 Not tainted syzkaller #0 PREEMPT(full) [ 213.061492][T11408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 213.061502][T11408] Call Trace: [ 213.061509][T11408] [ 213.061517][T11408] dump_stack_lvl+0xe8/0x150 [ 213.061546][T11408] should_fail_ex+0x412/0x560 [ 213.061570][T11408] should_failslab+0xa8/0x100 [ 213.061592][T11408] __kmalloc_noprof+0xe8/0x760 [ 213.061610][T11408] ? alloc_pipe_info+0x1fc/0x4d0 [ 213.061627][T11408] ? __kmalloc_cache_noprof+0x15b/0x660 [ 213.061657][T11408] alloc_pipe_info+0x1fc/0x4d0 [ 213.061678][T11408] splice_direct_to_actor+0xa08/0xc70 [ 213.061712][T11408] ? __pfx_direct_splice_actor+0x10/0x10 [ 213.061741][T11408] ? __pfx_aa_file_perm+0x10/0x10 [ 213.061766][T11408] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 213.061788][T11408] ? get_pid_task+0x20/0x1f0 [ 213.061812][T11408] do_splice_direct+0x195/0x290 [ 213.061837][T11408] ? __pfx_do_splice_direct+0x10/0x10 [ 213.061860][T11408] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 213.061885][T11408] ? bpf_lsm_file_permission+0x9/0x20 [ 213.061904][T11408] ? security_file_permission+0x75/0x260 [ 213.061930][T11408] ? rw_verify_area+0x255/0x4d0 [ 213.061951][T11408] do_sendfile+0x535/0x7d0 [ 213.061979][T11408] ? __pfx_do_sendfile+0x10/0x10 [ 213.062000][T11408] ? __fget_files+0x3a0/0x420 [ 213.062032][T11408] __se_sys_sendfile64+0x144/0x1a0 [ 213.062055][T11408] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 213.062087][T11408] do_syscall_64+0x14d/0xf80 [ 213.062110][T11408] ? trace_irq_disable+0x3b/0x150 [ 213.062132][T11408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.062150][T11408] ? clear_bhb_loop+0x40/0x90 [ 213.062171][T11408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.062188][T11408] RIP: 0033:0x7fc3cad9c629 [ 213.062205][T11408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.062220][T11408] RSP: 002b:00007fc3cbcd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 213.062238][T11408] RAX: ffffffffffffffda RBX: 00007fc3cb016090 RCX: 00007fc3cad9c629 [ 213.062251][T11408] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 213.062261][T11408] RBP: 00007fc3cbcd4090 R08: 0000000000000000 R09: 0000000000000000 [ 213.062271][T11408] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 213.062283][T11408] R13: 00007fc3cb016128 R14: 00007fc3cb016090 R15: 00007fffd7a6dc08 [ 213.062310][T11408] [ 213.543902][T11426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1411'. [ 213.634448][T11435] netlink: 'syz.3.1414': attribute type 1 has an invalid length. [ 213.727180][ C1] syz_tun: tun_net_xmit 42 [ 213.823575][T11430] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 214.126893][T11456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1421'. [ 214.331961][T11451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'. [ 214.478856][T11476] netlink: 'syz.3.1423': attribute type 13 has an invalid length. [ 214.533643][T11476] netlink: 'syz.3.1423': attribute type 12 has an invalid length. [ 214.871636][T11487] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1428'. [ 215.484858][T11520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1435'. [ 215.502281][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1429'. [ 215.536440][T11523] netlink: 'syz.2.1436': attribute type 1 has an invalid length. [ 215.549542][T11523] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1436'. [ 215.673146][T11530] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 216.827091][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 216.835129][ C1] lec:lec_tx_timeout: lec0 [ 216.839746][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 216.884170][T11555] netlink: 'syz.0.1445': attribute type 33 has an invalid length. [ 217.208356][T11568] Cannot find set identified by id 65534 to match [ 217.373233][T11574] sit0: entered promiscuous mode [ 217.382746][T11574] netlink: 'syz.4.1450': attribute type 1 has an invalid length. [ 217.508255][T11581] netlink: 'syz.4.1452': attribute type 1 has an invalid length. [ 217.660773][T11592] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 217.674991][T11586] bond3: (slave geneve3): making interface the new active one [ 217.708218][T11586] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 217.736681][T11587] __nla_validate_parse: 4 callbacks suppressed [ 217.736699][T11587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1453'. [ 217.761555][ T78] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 217.772116][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1452'. [ 217.787839][ T78] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 217.816977][ T78] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 217.825422][ T78] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 217.913190][T11581] bond3 (unregistering): (slave geneve3): Releasing active interface [ 217.942850][T11581] bond3 (unregistering): Released all slaves [ 218.008116][ T5809] udevd[5809]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 218.018511][ T10] IPVS: starting estimator thread 0... [ 218.029720][T11587] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 218.050286][ T6161] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 218.097415][ T6161] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 218.129147][T11610] IPVS: using max 36 ests per chain, 86400 per kthread [ 218.136086][ T6161] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 218.237214][ T6161] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 218.272487][T11624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.334909][T11628] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1461'. [ 218.344755][T11628] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 218.401787][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1460'. [ 218.534922][T11643] netlink: 'syz.0.1462': attribute type 2 has an invalid length. [ 218.573047][T11643] : entered promiscuous mode [ 218.609948][T11646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1464'. [ 218.806616][T11648] netlink: 'syz.2.1465': attribute type 1 has an invalid length. [ 218.825492][T11651] netlink: 732 bytes leftover after parsing attributes in process `syz.0.1462'. [ 218.844074][T11648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.879276][T11651] netlink: 732 bytes leftover after parsing attributes in process `syz.0.1462'. [ 219.091506][T11661] sctp: [Deprecated]: syz.4.1469 (pid 11661) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.091506][T11661] Use struct sctp_sack_info instead [ 219.181846][T11656] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 219.219885][T11656] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 219.593554][T11677] vlan2: entered promiscuous mode [ 219.603431][T11682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1475'. [ 219.612558][T11677] hsr0: entered promiscuous mode [ 219.636859][T11682] nbd: couldn't find a device at index 65546 [ 219.709504][T11683] veth5: entered promiscuous mode [ 219.767354][T11685] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1477'. [ 219.900772][T11697] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 219.956438][T11696] netlink: 'syz.3.1481': attribute type 10 has an invalid length. [ 219.973928][T11696] netlink: 'syz.3.1481': attribute type 10 has an invalid length. [ 220.182272][T11714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1489'. [ 220.200069][T11717] sock: sock_timestamping_bind_phc: sock not bind to device [ 220.604266][T11753] ieee802154 phy0 wpan0: encryption failed: -22 [ 220.661271][T11759] xt_hashlimit: overflow, rate too high: 0 [ 220.733973][T11763] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 220.745693][T11763] bond3 (unregistering): Released all slaves [ 221.295327][T11786] can: request_module (can-proto-0) failed. [ 221.857046][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 221.865077][ C1] lec:lec_tx_timeout: lec0 [ 221.869674][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 222.286665][T11790] FAULT_INJECTION: forcing a failure. [ 222.286665][T11790] name failslab, interval 1, probability 0, space 0, times 0 [ 222.300479][T11790] CPU: 1 UID: 0 PID: 11790 Comm: syz.4.1508 Not tainted syzkaller #0 PREEMPT(full) [ 222.300503][T11790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.300514][T11790] Call Trace: [ 222.300521][T11790] [ 222.300528][T11790] dump_stack_lvl+0xe8/0x150 [ 222.300557][T11790] should_fail_ex+0x412/0x560 [ 222.300582][T11790] should_failslab+0xa8/0x100 [ 222.300605][T11790] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 222.300633][T11790] ? __alloc_skb+0x1d0/0x7d0 [ 222.300659][T11790] __alloc_skb+0x1d0/0x7d0 [ 222.300685][T11790] tcp_stream_alloc_skb+0x3f/0x580 [ 222.300713][T11790] tcp_sendmsg_locked+0x1375/0x5490 [ 222.300758][T11790] ? tomoyo_check_open_permission+0x38e/0x470 [ 222.300808][T11790] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 222.300838][T11790] ? tcp_sendmsg+0x21/0x50 [ 222.300862][T11790] ? __local_bh_enable_ip+0xd0/0x130 [ 222.300885][T11790] tcp_sendmsg+0x2f/0x50 [ 222.300908][T11790] ____sys_sendmsg+0x894/0xad0 [ 222.300928][T11790] ? __lock_acquire+0x6b5/0x2cf0 [ 222.300956][T11790] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.300985][T11790] ? import_iovec+0x73/0xa0 [ 222.301010][T11790] ___sys_sendmsg+0x2a5/0x360 [ 222.301038][T11790] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.301066][T11790] ? kstrtouint+0x6e/0xe0 [ 222.301109][T11790] ? __fget_files+0x2a/0x420 [ 222.301131][T11790] ? __fget_files+0x3a0/0x420 [ 222.301164][T11790] __sys_sendmmsg+0x27c/0x4e0 [ 222.301193][T11790] ? __pfx___sys_sendmmsg+0x10/0x10 [ 222.301214][T11790] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 222.301264][T11790] ? ksys_write+0x242/0x270 [ 222.301284][T11790] ? __pfx_ksys_write+0x10/0x10 [ 222.301307][T11790] __x64_sys_sendmmsg+0xa0/0xc0 [ 222.301332][T11790] do_syscall_64+0x14d/0xf80 [ 222.301356][T11790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.301373][T11790] ? clear_bhb_loop+0x40/0x90 [ 222.301394][T11790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.301412][T11790] RIP: 0033:0x7fc3bab9c629 [ 222.301428][T11790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.301443][T11790] RSP: 002b:00007fc3bb991028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 222.301461][T11790] RAX: ffffffffffffffda RBX: 00007fc3bae15fa0 RCX: 00007fc3bab9c629 [ 222.301474][T11790] RDX: 0000000000000004 RSI: 0000200000000d00 RDI: 0000000000000003 [ 222.301484][T11790] RBP: 00007fc3bb991090 R08: 0000000000000000 R09: 0000000000000000 [ 222.301494][T11790] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.301504][T11790] R13: 00007fc3bae16038 R14: 00007fc3bae15fa0 R15: 00007fff8629d0f8 [ 222.301530][T11790] [ 222.915796][T11799] bond3: option primary_reselect: invalid value (4) [ 222.925561][T11799] bond3 (unregistering): Released all slaves [ 223.183879][T11808] syzkaller1: entered promiscuous mode [ 223.190032][T11808] syzkaller1: entered allmulticast mode [ 223.553190][T11748] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 223.591903][T11783] __nla_validate_parse: 6 callbacks suppressed [ 223.591929][T11783] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1506'. [ 223.711134][T11825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1521'. [ 223.797371][ T5883] syz_tun: tun_net_xmit 86 [ 223.929377][T11839] lo speed is unknown, defaulting to 1000 [ 223.947296][T11839] lo speed is unknown, defaulting to 1000 [ 223.955266][T11839] lo speed is unknown, defaulting to 1000 [ 224.001296][T11839] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 224.090075][T11839] lo speed is unknown, defaulting to 1000 [ 224.102768][T11839] lo speed is unknown, defaulting to 1000 [ 224.121557][T11839] lo speed is unknown, defaulting to 1000 [ 224.142950][T11839] lo speed is unknown, defaulting to 1000 [ 224.158573][T11839] lo speed is unknown, defaulting to 1000 [ 224.336525][T11878] syzkaller1: entered promiscuous mode [ 224.342513][T11878] syzkaller1: entered allmulticast mode [ 226.877115][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 226.885190][ C1] lec:lec_tx_timeout: lec0 [ 226.889994][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 227.140432][T11857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.283262][T11891] SET target dimension over the limit! [ 227.316927][T11896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1541'. [ 227.353238][T11901] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1540'. [ 227.362473][T11902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1542'. [ 227.374188][T11897] lo speed is unknown, defaulting to 1000 [ 227.375642][T11902] openvswitch: netlink: Flow actions attr not present in new flow. [ 227.402776][T11896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1541'. [ 227.521409][T11908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1544'. [ 227.883497][T11897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1539'. [ 229.937819][T11932] veth3: entered promiscuous mode [ 230.017864][T11969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1557'. [ 230.134323][T11969] bridge0: port 1(batadv0) entered blocking state [ 230.144677][ T9] syz_tun: tun_net_xmit 106 [ 230.149766][T11969] bridge0: port 1(batadv0) entered disabled state [ 230.176579][T11969] batadv0: entered allmulticast mode [ 230.196298][T11969] batadv0: entered promiscuous mode [ 230.292721][T11971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.304324][T11971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.431970][ T6155] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.445881][ T6155] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.499718][ T6155] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.511690][ T6155] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.521263][ T6155] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.535118][ T6155] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.544968][ T6155] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.553781][ T6155] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.617479][ T6150] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 230.627128][ T6150] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 230.983697][T11938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.200023][T12022] netlink: 'syz.2.1566': attribute type 2 has an invalid length. [ 231.482120][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1570'. [ 231.500770][T12039] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1570'. [ 231.511379][T12044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1571'. [ 231.539855][T12050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.571028][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1571'. [ 231.585023][T12053] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1573'. [ 231.674946][T12039] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1570'. [ 231.897058][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 231.905140][ C1] lec:lec_tx_timeout: lec0 [ 231.909796][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 234.395490][T12036] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 234.414973][T12065] netlink: 'syz.4.1576': attribute type 1 has an invalid length. [ 234.423732][T12065] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1576'. [ 234.433052][T12065] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1576'. [ 234.442316][T12065] netlink: 658 bytes leftover after parsing attributes in process `syz.4.1576'. [ 234.625657][T12104] netlink: 'syz.0.1581': attribute type 1 has an invalid length. [ 234.645816][T12104] macsec0: left promiscuous mode [ 234.657232][T12104] vxlan0: left promiscuous mode [ 234.663912][T12104] ipvlan2: left promiscuous mode [ 234.717972][T12104] ip6erspan0: left promiscuous mode [ 234.940021][T12116] netlink: 'syz.1.1586': attribute type 11 has an invalid length. [ 234.948706][T12116] netlink: 'syz.1.1586': attribute type 23 has an invalid length. [ 234.963774][T12116] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 235.386624][T12126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.404159][T12126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.610130][ T6155] syz_tun: tun_net_xmit 90 [ 235.638614][ T9] syz_tun: tun_net_xmit 90 [ 235.936303][T12147] netlink: 'syz.2.1592': attribute type 11 has an invalid length. [ 235.954709][T12147] netlink: 'syz.2.1592': attribute type 23 has an invalid length. [ 235.992036][T12147] __nla_validate_parse: 2 callbacks suppressed [ 235.992054][T12147] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1592'. [ 235.998109][T12146] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1593'. [ 236.055477][T12146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1593'. [ 236.189303][ T10] syz_tun: tun_net_xmit 90 [ 236.287889][ T10] syz_tun: tun_net_xmit 90 [ 236.457472][T12163] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1597'. [ 236.544033][T12163] team_slave_1: Caught tx_queue_len zero misconfig [ 236.917058][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 236.925192][ C1] lec:lec_tx_timeout: lec0 [ 236.929955][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 236.976575][T12190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1603'. [ 236.994259][T12190] vlan4: entered promiscuous mode [ 237.310869][T12192] lo speed is unknown, defaulting to 1000 [ 237.315114][T12198] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1607'. [ 237.689889][T12215] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1611'. [ 237.800212][T12218] Cannot find del_set index 2 as target [ 237.823119][T12218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1612'. [ 238.024327][T12227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1614'. [ 238.041446][T12227] vlan3: entered promiscuous mode [ 238.297866][T12240] lo speed is unknown, defaulting to 1000 [ 238.406293][T12240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1616'. [ 239.692332][T12175] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.202547][T12280] netlink: 'syz.1.1629': attribute type 4 has an invalid length. [ 240.263633][T12278] sctp: [Deprecated]: syz.3.1626 (pid 12278) Use of int in max_burst socket option deprecated. [ 240.263633][T12278] Use struct sctp_assoc_value instead [ 240.440778][T12291] bond4: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 240.455848][T12291] bond4 (unregistering): Released all slaves [ 240.669481][T12305] lo speed is unknown, defaulting to 1000 [ 240.784378][T12320] xfrm0: entered promiscuous mode [ 240.793848][T12320] xfrm0: entered allmulticast mode [ 241.077258][T12338] netlink: 'syz.2.1640': attribute type 1 has an invalid length. [ 241.077915][T12333] lo speed is unknown, defaulting to 1000 [ 241.121490][T12338] __nla_validate_parse: 2 callbacks suppressed [ 241.121509][T12338] netlink: 174 bytes leftover after parsing attributes in process `syz.2.1640'. [ 241.171131][T12339] netlink: 'syz.2.1640': attribute type 1 has an invalid length. [ 241.937051][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 241.945088][ C1] lec:lec_tx_timeout: lec0 [ 241.950731][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 241.994982][T12361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1649'. [ 242.214503][T12366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1648'. [ 242.798360][T12405] smc: net device wlan0 applied user defined pnetid SYZ0 [ 242.941321][T12415] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1656'. [ 243.086374][T12391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1654'. [ 243.679543][T12451] netlink: 'syz.1.1666': attribute type 1 has an invalid length. [ 243.911928][T12450] bond4: entered promiscuous mode [ 243.944457][T12450] bond4: entered allmulticast mode [ 243.954513][T12450] 8021q: adding VLAN 0 to HW filter on device bond4 [ 244.044888][T12466] syzkaller0: entered promiscuous mode [ 244.083025][T12466] syzkaller0: entered allmulticast mode [ 244.115857][T12475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1672'. [ 244.428624][ T6155] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.456899][ T6155] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.479892][ T6155] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.503323][ T6155] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.522925][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1677'. [ 244.558410][T12496] xt_hashlimit: size too large, truncated to 1048576 [ 244.565147][T12496] xt_hashlimit: max too large, truncated to 1048576 [ 244.895469][T12509] netlink: 'syz.1.1682': attribute type 1 has an invalid length. [ 244.910996][T12516] netlink: 'syz.0.1685': attribute type 4 has an invalid length. [ 244.985852][T12517] syzkaller0: entered promiscuous mode [ 244.997670][T12517] syzkaller0: entered allmulticast mode [ 245.207322][T12517] lo speed is unknown, defaulting to 1000 [ 245.236471][T12517] lo speed is unknown, defaulting to 1000 [ 245.244232][T12517] lo speed is unknown, defaulting to 1000 [ 245.443158][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1693'. [ 245.471398][T12536] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1693'. [ 245.492426][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1693'. [ 245.515317][T12543] xt_bpf: check failed: parse error [ 245.642381][T12538] xt_hashlimit: size too large, truncated to 1048576 [ 245.649416][T12538] xt_hashlimit: max too large, truncated to 1048576 [ 245.935705][T12517] infiniband syz0: set active [ 245.950663][T12517] infiniband syz0: added lo [ 245.968536][T12552] xt_hashlimit: size too large, truncated to 1048576 [ 245.973060][ T9] lo speed is unknown, defaulting to 1000 [ 245.982269][T12517] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 245.996037][T12517] infiniband syz0: Couldn't open port 1 [ 246.012927][T12552] xt_hashlimit: max too large, truncated to 1048576 [ 246.117974][T12517] RDS/IB: syz0: added [ 246.145211][T12517] smc: adding ib device syz0 with port count 1 [ 246.194157][T12517] smc: ib device syz0 port 1 has no pnetid [ 246.203163][T11634] lo speed is unknown, defaulting to 1000 [ 246.213446][T12517] lo speed is unknown, defaulting to 1000 [ 246.340759][T12578] __nla_validate_parse: 2 callbacks suppressed [ 246.340777][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1702'. [ 246.411391][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1702'. [ 246.953651][T12517] lo speed is unknown, defaulting to 1000 [ 246.967058][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 246.975335][ C1] lec:lec_tx_timeout: lec0 [ 246.980487][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 247.338507][T12583] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 247.415683][T12517] lo speed is unknown, defaulting to 1000 [ 247.588392][T12616] syzkaller0: entered promiscuous mode [ 247.637926][T12616] syzkaller0: entered allmulticast mode [ 247.761668][T12621] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.780129][T12621] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.818582][T12623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1710'. [ 247.908830][T12621] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.975442][T12621] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.141254][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1712'. [ 248.148304][T12517] lo speed is unknown, defaulting to 1000 [ 248.179345][T12621] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.183493][T12629] xt_hashlimit: size too large, truncated to 1048576 [ 248.203082][T12629] xt_hashlimit: max too large, truncated to 1048576 [ 248.227362][T12621] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.304347][T12621] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.324728][T12621] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.512710][ T6150] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.529383][ T6150] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.590769][ T6150] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.607394][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 248.610492][ T6150] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.673953][ T6150] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.688487][ T6150] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.729036][ T6150] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.760902][ T6150] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.797319][T12517] lo speed is unknown, defaulting to 1000 [ 249.009307][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1719'. [ 249.037992][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1719'. [ 249.236453][T12664] pimreg: tun_chr_ioctl cmd 1074025673 [ 249.250828][T12662] pimreg: tun_chr_ioctl cmd 1074025677 [ 249.256556][T12662] pimreg: linktype set to 6 [ 249.277565][T12662] pimreg: tun_chr_ioctl cmd 1074025677 [ 249.283205][T12662] pimreg: linktype set to 6 [ 249.310691][T12664] pimreg: tun_chr_ioctl cmd 1074025673 [ 249.317342][T12664] pimreg: tun_chr_ioctl cmd 1074025673 [ 249.335450][T12662] pimreg: tun_chr_ioctl cmd 1074025677 [ 249.356477][T12662] pimreg: linktype set to 6 [ 249.369385][T12662] pimreg: tun_chr_ioctl cmd 1074025677 [ 249.387405][T12662] pimreg: linktype set to 6 [ 249.392536][T12662] pimreg: tun_chr_ioctl cmd 1074025677 [ 249.436045][T12662] pimreg: linktype set to 6 [ 249.441230][T12664] pimreg: tun_chr_ioctl cmd 1074025673 [ 249.472263][T12675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1724'. [ 249.477225][T12664] pimreg: tun_chr_ioctl cmd 1074025673 [ 249.487577][T12662] pimreg: tun_chr_ioctl cmd 1074025677 [ 249.493712][T12662] pimreg: linktype set to 6 [ 249.499282][T12662] pimreg: tun_chr_ioctl cmd 1074025677 [ 249.505264][T12662] pimreg: linktype set to 6 [ 249.530412][T12664] pimreg: tun_chr_ioctl cmd 1074025673 [ 249.546196][T12662] pimreg: tun_chr_ioctl cmd 1074025677 [ 249.558571][T12662] pimreg: linktype set to 6 [ 249.563836][T12664] pimreg: tun_chr_ioctl cmd 1074025673 [ 249.569856][T12664] pimreg: tun_chr_ioctl cmd 1074025673 [ 249.575663][T12662] pimreg: tun_chr_ioctl cmd 1074025677 [ 249.591204][T12662] pimreg: linktype set to 6 [ 249.607714][T12662] pimreg: tun_chr_ioctl cmd 1074025677 [ 249.614759][T12662] pimreg: linktype set to 6 [ 249.669215][T12664] pimreg: tun_chr_ioctl cmd 1074025673 [ 249.676408][T12662] pimreg: tun_chr_ioctl cmd 1074025677 [ 249.682117][T12681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1725'. [ 249.682231][T12662] pimreg: linktype set to 6 [ 249.702241][T12662] pimreg: tun_chr_ioctl cmd 1074025677 [ 249.708126][T12678] xt_hashlimit: size too large, truncated to 1048576 [ 249.708144][T12678] xt_hashlimit: max too large, truncated to 1048576 [ 249.724917][T12662] pimreg: linktype set to 6 [ 249.730502][T12664] pimreg: tun_chr_ioctl cmd 1074025673 [ 249.750956][T12662] pimreg: tun_chr_ioctl cmd 1074025677 [ 249.762855][T12662] pimreg: linktype set to 6 [ 249.777494][T12662] pimreg: tun_chr_ioctl cmd 1074025677 [ 249.783105][T12662] pimreg: linktype set to 6 [ 249.814814][T12662] pimreg: tun_chr_ioctl cmd 1074025677 [ 249.834676][T12662] pimreg: linktype set to 6 [ 249.841687][T12664] pimreg: tun_chr_ioctl cmd 1074025673 [ 249.867901][T12662] pimreg: tun_chr_ioctl cmd 1074025677 [ 249.873741][T12662] pimreg: linktype set to 6 [ 249.878971][T12662] pimreg: tun_chr_ioctl cmd 1074025677 [ 249.884801][T12662] pimreg: linktype set to 6 [ 249.890972][T12664] pimreg: tun_chr_ioctl cmd 1074025673 [ 249.938586][T12664] pimreg: tun_chr_ioctl cmd 1074025673 [ 249.944475][T12664] pimreg: tun_chr_ioctl cmd 1074025673 [ 249.952926][T12662] pimreg: tun_chr_ioctl cmd 1074025677 [ 249.988026][T12662] pimreg: linktype set to 6 [ 250.046573][T12664] pimreg: tun_chr_ioctl cmd 1074025673 [ 250.055902][T12662] pimreg: tun_chr_ioctl cmd 1074025677 [ 250.065965][T12662] pimreg: linktype set to 6 [ 250.076291][T12691] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1727'. [ 250.354905][T12714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1733'. [ 250.403748][T12714] : entered promiscuous mode [ 250.425047][T12714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.436817][T12717] erspan0: entered promiscuous mode [ 250.459292][T12717] macsec1: entered promiscuous mode [ 250.480957][T12717] erspan0: left promiscuous mode [ 250.574152][T12727] netlink: zone id is out of range [ 250.581894][T12727] netlink: zone id is out of range [ 250.592116][T12727] netlink: zone id is out of range [ 250.602222][T12727] netlink: zone id is out of range [ 250.611100][T12727] netlink: zone id is out of range [ 250.626527][T12727] netlink: zone id is out of range [ 250.639755][T12727] netlink: zone id is out of range [ 250.650820][T12727] netlink: zone id is out of range [ 250.656208][T12727] netlink: zone id is out of range [ 250.811150][T12732] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 251.678665][T12792] netlink: 'syz.0.1753': attribute type 4 has an invalid length. [ 251.833344][T12801] netlink: 'syz.2.1756': attribute type 1 has an invalid length. [ 251.895788][T12801] 8021q: adding VLAN 0 to HW filter on device bond5 [ 251.909443][T12809] __nla_validate_parse: 4 callbacks suppressed [ 251.909455][T12809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1760'. [ 251.955778][T12798] bond5: (slave veth7): Enslaving as an active interface with a down link [ 251.987102][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 251.995179][ C1] lec:lec_tx_timeout: lec0 [ 252.000115][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 252.020595][T12809] 8021q: adding VLAN 0 to HW filter on device bond5 [ 252.042324][T12812] macvlan2: entered allmulticast mode [ 252.058221][T12812] bond_slave_1: entered allmulticast mode [ 252.066699][T12812] bond5: (slave macvlan2): Enslaving as an active interface with an up link [ 252.399406][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1766'. [ 252.416005][T12839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1767'. [ 252.438732][T12837] ip6gretap1: entered promiscuous mode [ 252.448527][T12837] ip6gretap1: entered allmulticast mode [ 252.922875][T12866] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1774'. [ 252.954800][T12866] netlink: 'syz.2.1774': attribute type 1 has an invalid length. [ 252.973147][T12866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1774'. [ 253.277838][T12895] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1782'. [ 253.369333][T12905] xt_hashlimit: max too large, truncated to 1048576 [ 253.667755][ T5971] syz_tun: tun_net_xmit 90 [ 253.867481][ T5971] syz_tun: tun_net_xmit 90 [ 253.893298][T12932] tipc: New replicast peer: 255.255.255.255 [ 253.912937][T12932] tipc: Enabled bearer , priority 10 [ 253.951431][T12934] netlink: 'syz.1.1796': attribute type 9 has an invalid length. [ 253.969201][T12934] netlink: 'syz.1.1796': attribute type 6 has an invalid length. [ 254.175410][T12955] siw: device registration error -23 [ 254.237823][T12957] netlink: 'syz.1.1803': attribute type 142 has an invalid length. [ 254.510439][T12976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1809'. [ 254.671233][T12987] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1813'. [ 254.776378][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1812'. [ 254.787349][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1812'. [ 254.902781][T12998] netlink: 'syz.4.1814': attribute type 39 has an invalid length. [ 255.027195][ T5971] tipc: Node number set to 4016049898 [ 255.649554][ T1301] net_ratelimit: 771 callbacks suppressed [ 255.649575][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.664852][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.401312][T12968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 257.411023][T12983] netlink: 'syz.2.1812': attribute type 1 has an invalid length. [ 257.419522][T12983] __nla_validate_parse: 1 callbacks suppressed [ 257.419537][T12983] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1812'. [ 257.590261][T13015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1817'. [ 257.614836][T13012] lo speed is unknown, defaulting to 1000 [ 257.622257][T13013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1819'. [ 257.661406][T13012] lo speed is unknown, defaulting to 1000 [ 257.682596][T13017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1820'. [ 257.735971][T13022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1821'. [ 258.140491][T13018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1818'. [ 258.207027][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6210 ms [ 258.215133][ C1] lec:lec_tx_timeout: lec0 [ 258.219877][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 258.379740][T13051] lo speed is unknown, defaulting to 1000 [ 258.410029][T13051] lo speed is unknown, defaulting to 1000 [ 258.802019][T13064] xt_hashlimit: size too large, truncated to 1048576 [ 258.821290][T13064] xt_hashlimit: max too large, truncated to 1048576 [ 258.831154][T13063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1832'. [ 259.114301][T13074] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1834'. [ 260.942606][T13037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 261.124725][T13110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.152334][T13108] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.162760][T13108] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.176382][T13106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1836'. [ 261.187688][T13106] netlink: 'syz.2.1836': attribute type 15 has an invalid length. [ 261.233110][T13108] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.244070][T13108] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.312985][T13108] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.328900][T13108] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.382165][T13108] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.392290][T13108] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.483337][ T6161] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.492190][ T6161] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.514121][ T6161] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.522842][ T6161] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.532448][ T6161] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.541338][ T6161] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.556672][ T6161] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.565662][ T6161] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.592400][T13123] lo speed is unknown, defaulting to 1000 [ 261.599717][T13123] lo speed is unknown, defaulting to 1000 [ 261.626452][T13125] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1840'. [ 263.967064][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 263.975116][ C1] lec:lec_tx_timeout: lec0 [ 263.979851][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 264.077849][T13106] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 264.264491][T13145] __nla_validate_parse: 2 callbacks suppressed [ 264.264510][T13145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1844'. [ 264.400171][T13153] sctp: [Deprecated]: syz.1.1847 (pid 13153) Use of int in maxseg socket option. [ 264.400171][T13153] Use struct sctp_assoc_value instead [ 264.466074][T13165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1850'. [ 264.502777][T13149] netlink: 'syz.1.1847': attribute type 29 has an invalid length. [ 264.555030][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1851'. [ 264.608638][T13172] xt_hashlimit: size too large, truncated to 1048576 [ 264.622313][T13167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1848'. [ 264.632728][T13156] lo speed is unknown, defaulting to 1000 [ 264.643031][T13156] lo speed is unknown, defaulting to 1000 [ 264.643297][T13165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1850'. [ 264.660791][T13172] xt_hashlimit: max too large, truncated to 1048576 [ 264.853467][T13177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1853'. [ 265.002560][T13185] netlink: set zone limit has 8 unknown bytes [ 265.024180][T13185] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1856'. [ 265.047359][T13185] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 265.395905][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1860'. [ 265.485345][T13205] lo speed is unknown, defaulting to 1000 [ 265.530323][T13205] lo speed is unknown, defaulting to 1000 [ 266.248524][T13224] xt_hashlimit: size too large, truncated to 1048576 [ 266.255223][T13224] xt_hashlimit: max too large, truncated to 1048576 [ 266.299658][T13226] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1865'. [ 268.331759][T13199] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.575506][T13246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1873'. [ 268.987038][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 268.995085][ C1] lec:lec_tx_timeout: lec0 [ 268.999667][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 269.453996][T13264] bridge0: port 1(macsec0) entered disabled state [ 269.559143][T13264] veth1: left promiscuous mode [ 269.563971][T13264] veth1: left allmulticast mode [ 269.798051][T13264] xfrm0: left promiscuous mode [ 269.802853][T13264] xfrm0: left allmulticast mode [ 269.992453][T13264] veth0_macvtap: left allmulticast mode [ 270.013059][T13264] veth1_macvtap: left allmulticast mode [ 270.071610][T13264] erspan1: left promiscuous mode [ 270.076576][T13264] erspan1: left allmulticast mode [ 270.084073][T13264] bond1: left promiscuous mode [ 270.089283][T13264] bridge1: left promiscuous mode [ 270.111956][T13264] vlan2: left promiscuous mode [ 270.116773][T13264] erspan0: left promiscuous mode [ 270.122705][T13264] vlan2: left allmulticast mode [ 270.128153][T13264] erspan0: left allmulticast mode [ 270.142226][T13264] batman_adv: batadv0: Interface deactivated: geneve2 [ 270.161537][T13264] gretap2: left allmulticast mode [ 270.168607][T13264] batman_adv: batadv0: Interface deactivated: macsec1 [ 270.176257][T13264] veth5: left promiscuous mode [ 270.184802][T13264] vlan4: left promiscuous mode [ 270.203542][T13264] ip6gretap1: left promiscuous mode [ 270.209045][T13264] ip6gretap1: left allmulticast mode [ 270.230924][T13272] __nla_validate_parse: 3 callbacks suppressed [ 270.230940][T13272] netlink: 41 bytes leftover after parsing attributes in process `syz.4.1880'. [ 270.237057][T11630] lo speed is unknown, defaulting to 1000 [ 270.275096][T11630] syz0: Port: 1 Link DOWN [ 270.298587][T13283] hsr_slave_0: left promiscuous mode [ 270.319974][T13283] hsr_slave_1: left promiscuous mode [ 270.401091][ T6153] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.412518][ T6153] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.421951][ T5905] lo speed is unknown, defaulting to 1000 [ 270.462498][ T6153] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.476075][ T6153] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.604235][T13318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1883'. [ 270.632577][T13314] xt_hashlimit: size too large, truncated to 1048576 [ 270.640148][T13314] xt_hashlimit: max too large, truncated to 1048576 [ 271.225963][T13333] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1892'. [ 271.370414][T13340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1892'. [ 271.716790][T13350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1897'. [ 271.733201][T13352] netlink: 'syz.3.1896': attribute type 1 has an invalid length. [ 271.741604][T13352] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1896'. [ 271.759926][ T6161] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.768388][T13352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1896'. [ 271.785128][T13353] netlink: 'syz.3.1896': attribute type 1 has an invalid length. [ 271.795257][ T6161] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.804817][ T6161] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.813190][T13353] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1896'. [ 271.822819][ T6161] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.830383][T13353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1896'. [ 271.901501][T13357] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1899'. [ 272.186518][T13379] xt_hashlimit: size too large, truncated to 1048576 [ 272.193756][T13379] xt_hashlimit: max too large, truncated to 1048576 [ 272.238617][T13382] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 272.382107][T13388] 8021q: VLANs not supported on ip6gre0 [ 272.813371][T13408] vlan3: entered promiscuous mode [ 272.918983][T13411] netlink: 'syz.0.1914': attribute type 6 has an invalid length. [ 273.395105][T13445] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 273.404369][T13445] openvswitch: netlink: Message has 16 unknown bytes. [ 273.451432][T13449] ip6tnl3: entered promiscuous mode [ 273.807160][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 274.857039][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5860 ms [ 274.865133][ C1] lec:lec_tx_timeout: lec0 [ 274.869727][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 276.216656][T13438] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 276.237304][T13454] __nla_validate_parse: 15 callbacks suppressed [ 276.237327][T13454] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1925'. [ 276.350340][T13499] vlan5: entered promiscuous mode [ 276.355411][T13499] hsr_slave_1: entered promiscuous mode [ 276.364804][T13499] vlan5: entered allmulticast mode [ 276.372599][T13499] hsr_slave_1: entered allmulticast mode [ 276.529740][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1932'. [ 276.541821][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1932'. [ 276.622884][T13516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1936'. [ 276.656132][T13516] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1936'. [ 276.698051][T13516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1936'. [ 276.802748][T13527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1939'. [ 276.862247][T13531] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.907144][T13536] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1942'. [ 277.018096][T13531] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.083388][T13531] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.105299][T13543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1945'. [ 277.214094][T13531] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.253446][T13547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1946'. [ 277.279870][T13547] macvtap1: entered promiscuous mode [ 277.285505][T13547] veth1_to_hsr: entered promiscuous mode [ 277.293303][T13547] macvtap1: entered allmulticast mode [ 277.299611][T13547] veth1_to_hsr: entered allmulticast mode [ 277.386819][ T78] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.430019][ T6161] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.450960][ T6161] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.534149][ T6155] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.836158][T13572] xt_bpf: check failed: parse error [ 278.622741][T13606] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.860894][T13606] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.882122][T13628] xt_bpf: check failed: parse error [ 278.924112][T13606] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.994203][T13606] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.056849][T13614] Cannot find set identified by id 0 to match [ 279.544452][ T1009] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.561528][ T1009] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.801085][ T5971] lo speed is unknown, defaulting to 1000 [ 279.806863][ T5971] syz2: Port: 1 Link DOWN [ 279.877030][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 279.885155][ C1] lec:lec_tx_timeout: lec0 [ 279.890312][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 279.919667][ T78] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.928116][ T78] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.340846][T13668] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 280.348527][T13668] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 280.535166][T13678] xt_bpf: check failed: parse error [ 280.631691][T13683] xt_hashlimit: size too large, truncated to 1048576 [ 280.647379][T13683] xt_hashlimit: max too large, truncated to 1048576 [ 280.721695][T13684] syzkaller0: entered promiscuous mode [ 280.727287][T13684] syzkaller0: entered allmulticast mode [ 281.051544][T13698] bond5: option mode: invalid value (34) [ 281.121664][T13698] bond5 (unregistering): Released all slaves [ 281.234095][T13705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.464760][T13527] Set syz1 is full, maxelem 65536 reached [ 281.478328][T13718] __nla_validate_parse: 4 callbacks suppressed [ 281.478345][T13718] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1990'. [ 281.585266][T13726] netlink: 'syz.0.1993': attribute type 9 has an invalid length. [ 281.598018][T13724] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1991'. [ 281.691286][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1994'. [ 281.701119][T13729] netlink: 'syz.3.1995': attribute type 4 has an invalid length. [ 281.709172][T13729] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1995'. [ 281.720595][T13731] xt_hashlimit: size too large, truncated to 1048576 [ 281.737306][T13731] xt_hashlimit: max too large, truncated to 1048576 [ 281.840565][T13739] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1996'. [ 281.967735][T13745] netlink: 'syz.3.1998': attribute type 83 has an invalid length. [ 281.994771][T13742] lo speed is unknown, defaulting to 1000 [ 282.021721][T13742] lo speed is unknown, defaulting to 1000 [ 282.040901][T13751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1999'. [ 282.288290][T13758] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2003'. [ 282.298241][T13758] netlink: 'syz.2.2003': attribute type 1 has an invalid length. [ 282.419781][T13757] delete_channel: no stack [ 282.551456][T13776] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2006'. [ 282.610403][T13780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2008'. [ 282.676455][T13774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2008'. [ 282.693762][T13767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.116212][T13804] netlink: 'syz.3.2012': attribute type 1 has an invalid length. [ 283.215904][T13804] bond6: entered promiscuous mode [ 283.222408][T13804] 8021q: adding VLAN 0 to HW filter on device bond6 [ 283.491464][T13819] sock: sock_set_timeout: `syz.2.2015' (pid 13819) tries to set negative timeout [ 284.897035][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 284.905128][ C1] lec:lec_tx_timeout: lec0 [ 284.909882][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 285.894252][T13786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.060490][T13829] netlink: 'syz.1.2017': attribute type 1 has an invalid length. [ 286.134774][T13833] netlink: 'syz.3.2018': attribute type 83 has an invalid length. [ 286.455715][T13859] lo speed is unknown, defaulting to 1000 [ 286.491134][T13859] lo speed is unknown, defaulting to 1000 [ 286.627049][T13871] __nla_validate_parse: 2 callbacks suppressed [ 286.627067][T13871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2031'. [ 286.676500][T13871] gre0: left promiscuous mode [ 286.687129][T13871] gre0: left allmulticast mode [ 286.698721][T13871] gretap0: left promiscuous mode [ 286.732300][T13866] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 286.745010][T13871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.762236][T11633] syz_tun: tun_net_xmit 90 [ 286.952115][T13883] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2035'. [ 287.012145][T13883] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 287.280685][T13893] xt_bpf: check failed: parse error [ 287.329627][T13900] lo speed is unknown, defaulting to 1000 [ 287.346141][T13900] lo speed is unknown, defaulting to 1000 [ 287.471601][T13880] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2033'. [ 287.489606][ T5905] syz_tun: tun_net_xmit 90 [ 288.295235][T13928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2045'. [ 288.347904][T13929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2045'. [ 289.629140][T13931] tipc: Enabled bearer , priority 14 [ 289.635820][T13933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2046'. [ 289.688505][T13937] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2047'. [ 289.758533][T13937] .70·: renamed from hsr0 [ 289.773826][T13937] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 289.807718][T13937] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.819101][T13937] .70·: entered allmulticast mode [ 289.824155][T13937] hsr_slave_0: entered allmulticast mode [ 289.830198][T13937] hsr_slave_1: entered allmulticast mode [ 289.837760][T13937] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 289.927039][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 289.935065][ C1] lec:lec_tx_timeout: lec0 [ 289.946892][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 289.961131][T13944] bond3: option xmit_hash_policy: invalid value (10) [ 289.982661][T13944] bond3 (unregistering): Released all slaves [ 290.145717][T13958] netlink: 644 bytes leftover after parsing attributes in process `syz.4.2052'. [ 290.609261][T13965] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2054'. [ 290.709705][T13970] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2055'. [ 290.958129][T13982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.025975][T13984] syzkaller0: entered promiscuous mode [ 291.036505][T13984] syzkaller0: entered allmulticast mode [ 291.197712][T13992] IPVS: set_ctl: invalid protocol: 60 172.20.20.20:20001 [ 291.256644][T13992] vlan3: entered promiscuous mode [ 291.450362][T14004] netlink: 'syz.4.2067': attribute type 4 has an invalid length. [ 291.845980][T14026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2075'. [ 291.942728][T14033] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2078'. [ 292.227891][T14061] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2084'. [ 292.271676][T14063] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2084'. [ 292.292658][ T5883] IPVS: starting estimator thread 0... [ 292.301026][T14068] smc: net device wlan0 erased user defined pnetid SYZ0 [ 292.387311][T14070] IPVS: using max 38 ests per chain, 91200 per kthread [ 292.591111][T14083] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 292.602213][T14087] tipc: Enabled bearer , priority 0 [ 292.614549][T14079] syz_tun: tun_net_xmit 34 [ 292.873805][T14102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2094'. [ 292.926821][T14085] lo speed is unknown, defaulting to 1000 [ 292.945207][T14099] gretap3: entered promiscuous mode [ 293.008875][T14098] IPVS: fo: FWM 3 0x00000003 - no destination available [ 293.060684][T14085] lo speed is unknown, defaulting to 1000 [ 293.100091][T14109] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.110741][T14109] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.140054][T14110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2097'. [ 293.269739][T14109] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.291751][T14109] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.379395][T14116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2098'. [ 293.424084][T14109] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.447329][T14109] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.497757][T14120] dvmrp1: tun_chr_ioctl cmd 2147767506 [ 293.523742][T14109] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.537395][T14109] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.758204][ T65] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.768457][ T65] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.806599][ T65] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.821863][ T65] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.825177][T14129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2103'. [ 293.847180][T14129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2103'. [ 293.861146][ T65] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.875638][ T65] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.884519][T14129] netlink: 26 bytes leftover after parsing attributes in process `syz.2.2103'. [ 294.006646][ T1166] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.027165][ T1166] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.412021][T14144] nbd: couldn't find a device at index 65546 [ 294.431101][T14143] nbd: couldn't find a device at index 65546 [ 294.539110][T14151] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.588010][T14151] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.708366][T14151] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.725134][T14151] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.899087][T14151] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.925353][T14151] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.957056][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 294.965136][ C1] lec:lec_tx_timeout: lec0 [ 294.970188][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 295.119559][T14151] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.145119][T14151] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.334520][T14190] xt_bpf: check failed: parse error [ 295.569287][T14198] veth1^macvtap: renamed from veth0_to_hsr [ 296.373807][T14228] syzkaller0: entered promiscuous mode [ 296.388001][T14228] syzkaller0: entered allmulticast mode [ 296.418047][T14228] netlink: 'syz.2.2136': attribute type 83 has an invalid length. [ 296.774679][T14248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.829701][ T3563] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.849111][ T3563] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.861625][ T29] audit: type=1107 audit(1771899390.000:5): pid=14253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 296.888141][ T3563] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.913436][ T3563] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.933475][T14254] __nla_validate_parse: 12 callbacks suppressed [ 296.933494][T14254] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2140'. [ 296.968383][T14254] tipc: Invalid UDP bearer configuration [ 296.968438][T14254] tipc: Enabling of bearer rejected, failed to enable media [ 297.190756][T14274] openvswitch: netlink: IPv6 tunnel dst address is zero [ 297.328793][T14287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2150'. [ 297.430523][T14285] netlink: 'syz.4.2151': attribute type 16 has an invalid length. [ 297.487499][T14285] netlink: 'syz.4.2151': attribute type 17 has an invalid length. [ 297.547855][T14285] sit0: left promiscuous mode [ 297.599654][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2155'. [ 297.649683][T14285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 298.017554][T14312] block nbd2: server does not support multiple connections per device. [ 298.027933][T14312] block nbd2: shutting down sockets [ 298.298528][T14320] openvswitch: netlink: IPv6 tunnel dst address is zero [ 298.308538][T14320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2162'. [ 298.322863][T14321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2162'. [ 298.337272][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2162'. [ 298.346664][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2162'. [ 298.432471][ T1005] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.457310][ T1005] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.498967][ T78] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.512198][ T78] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.521420][T14328] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2164'. [ 298.530690][T14327] netlink: 'syz.2.2165': attribute type 12 has an invalid length. [ 298.556242][T14328] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2164'. [ 298.558683][ T78] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.588968][ T78] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.614106][T14328] erspan0: entered promiscuous mode [ 298.626336][T14328] gretap0: entered promiscuous mode [ 298.645365][ T65] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.668329][ T65] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.839469][T14343] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2170'. [ 298.883658][T14343] netlink: Unknown conntrack attr (0) [ 298.911398][T14348] bond0: entered promiscuous mode [ 298.928018][T14348] bond0: left promiscuous mode [ 299.202186][T14374] xt_hashlimit: overflow, try lower: 64/16140901064495857664 [ 299.334343][T14376] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.359806][T14376] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.402186][T14384] vlan3: entered promiscuous mode [ 299.408324][T14384] bridge0: entered promiscuous mode [ 299.512425][T14376] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.534141][T14376] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.620689][T14376] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.652533][T14376] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.746758][T14376] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.760540][T14376] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.805677][T14411] syzkaller0: entered promiscuous mode [ 299.816428][T14411] syzkaller0: entered allmulticast mode [ 299.977079][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 299.985162][ C1] lec:lec_tx_timeout: lec0 [ 299.989884][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 300.519393][T14461] hsr0: entered promiscuous mode [ 300.539145][T14461] erspan0: left promiscuous mode [ 300.569139][T14461] gretap0: left promiscuous mode [ 300.610973][T14461] hsr0 (unregistering): left promiscuous mode [ 301.373901][T14503] netlink: 'syz.0.2213': attribute type 1 has an invalid length. [ 301.817850][T14527] bond0 (unregistering): Released all slaves [ 301.871154][T14533] netlink: 'syz.4.2215': attribute type 3 has an invalid length. [ 302.078224][T14545] __nla_validate_parse: 19 callbacks suppressed [ 302.078250][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2220'. [ 302.096187][T14543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2221'. [ 302.112334][T14543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2221'. [ 302.750352][T14557] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2225'. [ 302.844401][T14561] netlink: 'syz.1.2226': attribute type 2 has an invalid length. [ 303.223125][ T65] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.231468][ T65] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.246158][ T6159] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.254589][ T6159] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.268899][ T6159] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.277446][ T6159] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.291801][ T6159] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.300303][ T6159] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.657459][T14514] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.912553][T14576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2231'. [ 305.101051][T14588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2233'. [ 305.624623][T14651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2241'. [ 305.691576][T14648] netlink: 744 bytes leftover after parsing attributes in process `syz.4.2242'. [ 305.807072][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 305.815166][ C1] lec:lec_tx_timeout: lec0 [ 305.820494][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 305.895691][T14661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2241'. [ 305.917890][T14656] gtp0: left promiscuous mode [ 305.945563][T14656] vxlan0: left promiscuous mode [ 305.951768][T14656] vxlan0: left allmulticast mode [ 305.957868][T14656] ip6erspan0: left promiscuous mode [ 305.973172][T14656] bond4: left promiscuous mode [ 305.982345][T14656] bond4: left allmulticast mode [ 305.995828][T14656] ip6tnl3: left promiscuous mode [ 306.003031][T14661] hsr_slave_0: left promiscuous mode [ 306.017925][T14661] hsr_slave_1: left promiscuous mode [ 306.060926][T14614] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.079529][T14614] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.124736][T14614] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.153144][T14614] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.173590][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2246'. [ 306.277287][T14680] FAULT_INJECTION: forcing a failure. [ 306.277287][T14680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.298088][T14680] CPU: 1 UID: 0 PID: 14680 Comm: syz.3.2248 Not tainted syzkaller #0 PREEMPT(full) [ 306.298113][T14680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 306.298137][T14680] Call Trace: [ 306.298145][T14680] [ 306.298152][T14680] dump_stack_lvl+0xe8/0x150 [ 306.298180][T14680] should_fail_ex+0x412/0x560 [ 306.298203][T14680] _copy_from_user+0x2d/0xb0 [ 306.298228][T14680] __sys_bpf+0x229/0x950 [ 306.298254][T14680] ? __pfx___sys_bpf+0x10/0x10 [ 306.298292][T14680] ? ksys_write+0x242/0x270 [ 306.298313][T14680] ? __pfx_ksys_write+0x10/0x10 [ 306.298336][T14680] __x64_sys_bpf+0x7c/0x90 [ 306.298360][T14680] do_syscall_64+0x14d/0xf80 [ 306.298383][T14680] ? trace_irq_disable+0x3b/0x150 [ 306.298406][T14680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.298424][T14680] ? clear_bhb_loop+0x40/0x90 [ 306.298444][T14680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.298461][T14680] RIP: 0033:0x7feb3e79c629 [ 306.298478][T14680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.298492][T14680] RSP: 002b:00007feb3f5db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 306.298512][T14680] RAX: ffffffffffffffda RBX: 00007feb3ea15fa0 RCX: 00007feb3e79c629 [ 306.298524][T14680] RDX: 0000000000000094 RSI: 0000200000000dc0 RDI: 0000000000000005 [ 306.298534][T14680] RBP: 00007feb3f5db090 R08: 0000000000000000 R09: 0000000000000000 [ 306.298545][T14680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.298555][T14680] R13: 00007feb3ea16038 R14: 00007feb3ea15fa0 R15: 00007fffc5bafbc8 [ 306.298584][T14680] [ 306.785100][T14691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.178058][T14710] __nla_validate_parse: 1 callbacks suppressed [ 307.178078][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2256'. [ 307.700857][T14742] netlink: 'syz.2.2261': attribute type 1 has an invalid length. [ 307.821502][T14746] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2263'. [ 308.031241][T14757] netlink: 'syz.0.2266': attribute type 10 has an invalid length. [ 308.054499][T14757] netlink: 'syz.0.2266': attribute type 10 has an invalid length. [ 308.088970][T14755] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2267'. [ 308.112848][T14755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2267'. [ 308.265305][T14765] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2268'. [ 308.386002][T14767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2269'. [ 308.446296][T14767] vlan4: entered promiscuous mode [ 308.578398][T14775] 8021q: VLANs not supported on ip6gre0 [ 308.772639][ T30] INFO: task kworker/1:1H:2265 blocked for more than 143 seconds. [ 308.788431][ T30] Not tainted syzkaller #0 [ 308.816934][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 308.854179][ T30] task:kworker/1:1H state:D stack:26536 pid:2265 tgid:2265 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 308.887058][ T30] Workqueue: kblockd blk_mq_requeue_work [ 308.897289][ T30] Call Trace: [ 308.900631][ T30] [ 308.913889][ T30] __schedule+0x1585/0x5340 [ 308.924020][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 308.934147][ T30] ? __pfx___schedule+0x10/0x10 [ 308.944267][ T30] ? schedule+0x90/0x360 [ 308.949515][ T30] schedule+0x164/0x360 [ 308.953799][ T30] schedule_timeout+0x158/0x2c0 [ 308.969001][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 308.974446][ T30] ? __pfx_process_timeout+0x10/0x10 [ 308.990123][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 308.995997][ T30] ? prepare_to_wait_event+0x436/0x480 [ 309.017131][ T30] nbd_queue_rq+0x857/0x1100 [ 309.021818][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 309.057366][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 309.063497][ T30] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 309.089096][ T30] ? sbitmap_get+0x229/0x390 [ 309.097827][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 309.103861][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 309.121881][ T30] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 309.136798][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 309.154063][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 309.162333][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 309.169254][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 309.174531][ T30] blk_mq_run_hw_queues+0x26c/0x3f0 [ 309.179883][ T30] blk_mq_requeue_work+0x71c/0x780 [ 309.187116][ T30] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 309.192817][ T30] ? process_scheduled_works+0xa25/0x1830 [ 309.198629][ T30] ? process_scheduled_works+0xa25/0x1830 [ 309.204364][ T30] process_scheduled_works+0xb02/0x1830 [ 309.210464][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 309.216494][ T30] ? assign_work+0x3d5/0x5e0 [ 309.221182][ T30] worker_thread+0xa50/0xfc0 [ 309.225817][ T30] kthread+0x388/0x470 [ 309.230155][ T30] ? __pfx_worker_thread+0x10/0x10 [ 309.235305][ T30] ? __pfx_kthread+0x10/0x10 [ 309.239992][ T30] ret_from_fork+0x51e/0xb90 [ 309.244606][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 309.250360][ T30] ? __switch_to+0xc7d/0x1450 [ 309.255113][ T30] ? __pfx_kthread+0x10/0x10 [ 309.259997][ T30] ret_from_fork_asm+0x1a/0x30 [ 309.265030][ T30] [ 309.268337][ T30] [ 309.268337][ T30] Showing all locks held in the system: [ 309.276134][ T30] 1 lock held by khungtaskd/30: [ 309.281084][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 309.291057][ T30] 4 locks held by kworker/1:1H/2265: [ 309.296349][ T30] #0: ffff88801e6bcd48 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 309.307643][ T30] #1: ffffc900062f7c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 309.320957][ T30] #2: ffff888026767698 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 309.330871][ T30] #3: ffff888026ed0580 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 309.339935][ T30] 2 locks held by getty/5578: [ 309.344708][ T30] #0: ffff888036f400a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 309.354577][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 309.364934][ T30] 1 lock held by syz-executor/5807: [ 309.370459][ T30] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 309.380824][ T30] 1 lock held by udevd/5813: [ 309.385423][ T30] #0: ffff888026d81358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 309.394764][ T30] 3 locks held by kworker/u8:35/14614: [ 309.400269][ T30] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 309.419231][ T30] #1: ffffc900037e7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 309.430600][ T30] #2: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 309.439682][ T30] 1 lock held by syz.3.2252/14698: [ 309.444801][ T30] 1 lock held by syz.2.2273/14794: [ 309.450022][ T30] #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 309.459429][ T30] 1 lock held by syz.2.2273/14797: [ 309.464550][ T30] #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30 [ 309.473812][ T30] 2 locks held by syz.4.2276/14787: [ 309.479272][ T30] #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 309.493666][ T30] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 309.504689][ T30] 2 locks held by syz.1.2275/14792: [ 309.510085][ T30] #0: ffffffff8fbbcff0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 309.519586][ T30] #1: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 309.530604][ T30] 2 locks held by syz.1.2275/14795: [ 309.535826][ T30] #0: ffffffff8fbbcff0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 309.545608][ T30] #1: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 309.556151][ T30] 1 lock held by syz.1.2275/14796: [ 309.561345][ T30] #0: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 309.573402][ T30] [ 309.575751][ T30] ============================================= [ 309.575751][ T30] [ 309.584277][ T30] NMI backtrace for cpu 1 [ 309.584293][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 309.584311][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 309.584320][ T30] Call Trace: [ 309.584326][ T30] [ 309.584333][ T30] dump_stack_lvl+0xe8/0x150 [ 309.584376][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 309.584420][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 309.584447][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 309.584468][ T30] sys_info+0x135/0x170 [ 309.584484][ T30] watchdog+0xfd9/0x1030 [ 309.584512][ T30] ? watchdog+0x21a/0x1030 [ 309.584541][ T30] kthread+0x388/0x470 [ 309.584557][ T30] ? __pfx_watchdog+0x10/0x10 [ 309.584578][ T30] ? __pfx_kthread+0x10/0x10 [ 309.584595][ T30] ret_from_fork+0x51e/0xb90 [ 309.584618][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 309.584638][ T30] ? __switch_to+0xc7d/0x1450 [ 309.584661][ T30] ? __pfx_kthread+0x10/0x10 [ 309.584679][ T30] ret_from_fork_asm+0x1a/0x30 [ 309.584725][ T30] [ 309.584732][ T30] Sending NMI from CPU 1 to CPUs 0: [ 309.700142][ C0] NMI backtrace for cpu 0 [ 309.700159][ C0] CPU: 0 UID: 0 PID: 14698 Comm: syz.3.2252 Not tainted syzkaller #0 PREEMPT(full) [ 309.700176][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 309.700185][ C0] RIP: 0010:__lock_acquire+0x439/0x2cf0 [ 309.700208][ C0] Code: 84 db 0f 84 d6 01 00 00 41 8b 45 20 66 85 c0 0f 88 c9 01 00 00 4c 89 ed 0f b6 89 c5 00 00 00 84 c9 0f b6 d3 0f b6 c9 0f 44 ca <89> 0c 24 45 8b a6 10 0b 00 00 41 8d 4c 24 ff 83 f9 ff 41 bd ff ff [ 309.700221][ C0] RSP: 0018:ffffc90003167828 EFLAGS: 00000046 [ 309.700234][ C0] RAX: 00000000000501c5 RBX: 0000000000000004 RCX: 0000000000000004 [ 309.700243][ C0] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 309.700252][ C0] RBP: ffff88802a3965d8 R08: ffffffff82162fdf R09: ffff88807764e540 [ 309.700262][ C0] R10: ffffc90003167aa0 R11: fffff5200062cf5b R12: 00000000000001c5 [ 309.700273][ C0] R13: ffff88802a3965d8 R14: ffff88802a395ac0 R15: ffff88802a3965d8 [ 309.700283][ C0] FS: 00007feb3f5ba6c0(0000) GS:ffff888125466000(0000) knlGS:0000000000000000 [ 309.700295][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.700305][ C0] CR2: 0000200000a27030 CR3: 0000000075b84000 CR4: 00000000003526f0 [ 309.700319][ C0] Call Trace: [ 309.700324][ C0] [ 309.700335][ C0] ? sock_recvmsg_nosec+0xa1/0x1c0 [ 309.700353][ C0] ? ____sys_recvmsg+0x363/0x4a0 [ 309.700376][ C0] lock_acquire+0xf0/0x2e0 [ 309.700392][ C0] ? __might_fault+0xaf/0x130 [ 309.700415][ C0] ? __might_fault+0xaf/0x130 [ 309.700433][ C0] __might_fault+0xcb/0x130 [ 309.700452][ C0] ? __might_fault+0xaf/0x130 [ 309.700472][ C0] _copy_from_user+0x28/0xb0 [ 309.700514][ C0] ___sys_recvmsg+0x175/0x590 [ 309.700533][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 309.700551][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 309.700587][ C0] do_recvmmsg+0x334/0x800 [ 309.700609][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 309.700640][ C0] __x64_sys_recvmmsg+0x198/0x250 [ 309.700666][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 309.700690][ C0] do_syscall_64+0x14d/0xf80 [ 309.700710][ C0] ? trace_irq_disable+0x3b/0x150 [ 309.700729][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.700743][ C0] ? clear_bhb_loop+0x40/0x90 [ 309.700759][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.700773][ C0] RIP: 0033:0x7feb3e79c629 [ 309.700786][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.700798][ C0] RSP: 002b:00007feb3f5ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 309.700812][ C0] RAX: ffffffffffffffda RBX: 00007feb3ea16090 RCX: 00007feb3e79c629 [ 309.700822][ C0] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000006 [ 309.700832][ C0] RBP: 00007feb3e832b39 R08: 0000000000000000 R09: 0000000000000000 [ 309.700841][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.700849][ C0] R13: 00007feb3ea16128 R14: 00007feb3ea16090 R15: 00007fffc5bafbc8 [ 309.700867][ C0] [ 309.747877][T14792] lo speed is unknown, defaulting to 1000 [ 309.781923][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 309.781955][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 309.781975][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 309.781987][ T30] Call Trace: [ 309.781994][ T30] [ 309.782002][ T30] vpanic+0x56c/0xa60 [ 309.782030][ T30] ? __pfx___schedule+0x10/0x10 [ 309.782054][ T30] ? __pfx_vpanic+0x10/0x10 [ 309.782075][ T30] ? __pfx_console_unlock+0x10/0x10 [ 309.782105][ T30] panic+0xc5/0xd0 [ 309.782126][ T30] ? __pfx_panic+0x10/0x10 [ 309.782149][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 309.782173][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 309.782197][ T30] watchdog+0x1023/0x1030 [ 309.782228][ T30] ? watchdog+0x21a/0x1030 [ 309.782259][ T30] kthread+0x388/0x470 [ 309.782276][ T30] ? __pfx_watchdog+0x10/0x10 [ 309.782298][ T30] ? __pfx_kthread+0x10/0x10 [ 309.782316][ T30] ret_from_fork+0x51e/0xb90 [ 309.782340][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 309.782360][ T30] ? __switch_to+0xc7d/0x1450 [ 309.782383][ T30] ? __pfx_kthread+0x10/0x10 [ 309.782400][ T30] ret_from_fork_asm+0x1a/0x30 [ 309.782437][ T30] [ 309.789799][ T30] Kernel Offset: disabled