last executing test programs: 4.771528292s ago: executing program 3 (id=1977): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x5, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) syz_emit_ethernet(0x4e, &(0x7f0000000680)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000012", 0x18, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5cd2040000000000140003006e657464657673696d3000000000000034001680300001802c000c"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x5, 0x3) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) (async) syz_emit_ethernet(0x4e, &(0x7f0000000680)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000012", 0x18, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local}}}}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5cd2040000000000140003006e657464657673696d3000000000000034001680300001802c000c"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) 4.666640291s ago: executing program 0 (id=1980): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f0000000580)=[{r0, 0x2000}], 0x1, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000600)={[0x3]}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000001c0)=0x7fffffff, 0x4) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000500)=ANY=[@ANYBLOB="9b5d9462fd5bbe86bf334a0e8ee306f23bc3f3eddd5a5b876e7069b6b5c16c09000000000000001d5fad94a024fdb609f2b2c3f963bd5953f94b29cb21cc0840451215184059c7b112293cba4683aa57c9496a77fd4de902d8376a48cde959a2d9156ed3b373d9c4aab090f960c486867514825e9128ab", @ANYRES16=r12, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r13, @ANYBLOB="140004006e696376663000000000000000000000080005000a000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x240048d0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0x4, 0xb}, {0x9, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0xf, 0x5, 0x5f82, 0x8, 0x1b, 0xc, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0x2, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c867}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.491897263s ago: executing program 3 (id=1982): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x20, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008804}, 0x40000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0xc040480) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff1, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async, rerun: 64) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000040)={0x2}, 0x4) (async, rerun: 64) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000001240)='notify_on_release\x00', 0x2, 0x0) pwrite64(r9, 0x0, 0x0, 0x8) 4.308754969s ago: executing program 0 (id=1985): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x80}], 0x1, 0xc8d1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x20, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000804}, 0x20004881) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="c7", 0x1}], 0x1}}], 0x1, 0x20008890) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000340)=@ethtool_rxnfc={0x31, 0x1, 0xe, {0x2, @udp_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x4e22, 0x4e22, 0xa}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, 0x7, 0x8b6, [0x5, 0xb3300]}, @udp_ip6_spec={@local, @private0, 0x4e20, 0x4e24, 0x8f}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x800, 0xf, [0x7, 0x9]}, 0x10, 0x2}}}) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$NL80211_CMD_SET_KEY(r4, 0x0, 0x4004) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000001e80)={0x132c, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x278, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x37}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xeb}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x69}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcfe3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xed}]}, {0x104, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x5, 0x18, 0x1b, 0x5, 0x9, 0x6, 0xb, 0x30, 0x18, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x6, 0xbc, 0xb9a5, 0x7, 0x58e]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x0, 0x8}, {0x2, 0xa}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x39, 0x2, [{}, {0x1, 0x5}, {0x7, 0x6}, {0x4, 0x4}, {0x1, 0x8}, {0x7, 0xa}, {0x0, 0xa}, {0x7, 0x7}, {0x1, 0x1}, {0x7, 0x9}, {0x7, 0x2}, {0x0, 0x7}, {0x5, 0x8}, {0x2}, {0x0, 0x9}, {0x2, 0x1}, {0x6, 0x8}, {0x5, 0x3}, {0x1, 0xa}, {0x6, 0x9}, {0x2, 0x1}, {0x5, 0x5}, {0x5, 0x4}, {0x6, 0x9}, {0x6, 0x6}, {0x6, 0x1}, {0x5, 0x8}, {0x2, 0x2}, {0x0, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x0, 0x2}, {0x5, 0x7}, {0x6, 0xa}, {0x0, 0xa}, {0x4, 0x4}, {0x1, 0x1}, {0x1, 0x9}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x3}, {0x3, 0xa}, {0x3}, {0x3, 0x9}, {0x1, 0x4}, {0x5, 0x3}, {0x1, 0x2}, {0x7, 0x8}, {0x0, 0x8}, {0x1, 0xa}, {0x6, 0x7}, {}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x0, 0x2}, {0x0, 0x8}, {}, {0x7, 0x8}, {0x2, 0x8}, {0x6, 0x9}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0x9}, {0x0, 0x2}, {0x4, 0x1}, {0x3, 0x2}, {0x1, 0x2}, {0x2, 0x5}, {0x6, 0x5}, {0x5, 0xe}, {0x4, 0x9}, {0x1}, {0x0, 0x3}, {0x6, 0x8}, {0x2, 0x6}, {0x6, 0x9}, {0x3, 0x6}, {0x5}, {0x1, 0xa}, {0x0, 0x2}, {0x5, 0x3}, {0x3, 0x4}, {0x0, 0x7}, {0x7, 0x1}, {0x1, 0x3}, {0x5, 0x7}, {0x0, 0x8}, {0x1, 0x4}, {0x0, 0xa}, {0x3, 0x9}, {0x7, 0x6}, {0x7, 0x2}, {0x1, 0xa}, {0x3, 0xa}, {0x4, 0x1}, {0x3, 0xa}, {0x2, 0x3}, {0x3, 0x2}, {0x7, 0x4}, {0x4}, {0x7, 0x5}, {0x7, 0x3}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}, {0xf4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xab}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x70}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xac, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x2, 0x1}, {0x7, 0x6}, {0x7}, {0x1, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x0, 0x3}, {0x1, 0xa}, {0x5, 0x3}, {0x0, 0x4}, {0x4, 0x4}, {0x6, 0x1}, {0x0, 0x8}, {0x7, 0x6}, {0x6, 0x9}, {0x5}, {0x0, 0x6}, {0x6, 0x1}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x7}, {0x0, 0x1}, {0x2, 0xa}, {0x4, 0x9}, {}, {0x7}, {0x0, 0x5}, {0x5, 0x7}, {}, {0x3, 0x4}, {0x5, 0x9}, {0x1}, {0x2, 0x9}, {0x1, 0x6}, {0x7, 0x6}, {0x4, 0xa}, {0x1, 0x9}, {0x1, 0x3}, {0x1, 0x9}, {0x7, 0x7}, {0x7, 0x8}, {0x5, 0x7}, {0x7, 0x9}, {0x6, 0x5}, {0x1, 0x7}, {0x1, 0x5}, {0x7, 0x2}, {0x7, 0x6}, {0x1, 0x4}, {0x1, 0x5}, {0x6, 0x2}, {0x0, 0x6}, {0x3, 0x4}, {0x0, 0x8}, {}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x4}, {0x3, 0x2}, {0x5, 0x5}, {0x6, 0x4}, {0x1, 0x6}, {0x1, 0x8}, {0x5, 0x2}, {0x2, 0x4}, {0x5, 0xa}, {0x6, 0x4}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x5}, {0x5, 0x9}, {0x0, 0x2}, {0x2, 0x6}, {0x0, 0x3}, {0x6, 0x7}, {0x1, 0x4}, {0x1, 0x8}, {0x4}, {0x7, 0x5}, {0x5, 0x5}, {0x4, 0x3}, {0x7, 0x5}, {0x0, 0xa}, {0x3, 0x3}, {0x0, 0x2}, {0x4, 0x3}, {0x1, 0xa}, {0x7}, {0x2, 0x9}, {0x7, 0x1}, {0x2, 0x3}, {0x1, 0x1}, {0x7, 0x4}, {0x0, 0x4}, {0x6, 0x5}, {0x4, 0xa}, {0x2, 0x9}, {0x3, 0x8}, {0x1, 0x1}, {0x4, 0xa}, {0x4, 0xa}, {0x5, 0x3}, {0x5, 0x7}, {0x4, 0x5}, {0x5, 0x7}, {0x1, 0x8}, {0x5, 0x6}, {0x1, 0x8}, {0x1, 0x8}, {0x1}, {0x4, 0x2}, {0x2}, {0x2, 0x6}, {0x4}, {0x7, 0x1}, {}, {0x2, 0x7}, {0x4, 0x2}, {0x0, 0x9}, {0x5}, {0x0, 0x1}, {0x4, 0x7}, {0x4, 0xa}, {0x1, 0x3}, {0x5, 0x7}, {0x6, 0x8}, {0x6, 0x4}, {0x0, 0x8}, {0x1, 0x2}, {0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x35c, 0x11d, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1a}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x70, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0xfff3, 0x4, 0x3, 0x7ff, 0x6, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0xf, 0x1ff, 0x8, 0x0, 0x7, 0xe070]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x846, 0x7, 0x6, 0x8, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x8, 0x0, 0x3, 0x22, 0xd, 0xd7]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x12, 0x6c, 0x2, 0x36, 0x3, 0x6, 0x24, 0x18, 0x16]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x124, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4e}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x67e}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x24}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xdc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xd8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1, 0x80, 0x7fff, 0x5, 0x0, 0xfff, 0x6]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x2, 0x3}, {0x0, 0x7}, {0x7, 0xa}, {0x6, 0xa}, {}, {0x3, 0x8}, {0x1, 0x8}, {0x0, 0x1}, {0x4, 0x3}, {0x7, 0x8}, {0x7}, {0x2, 0x5}, {0x7}, {0x6, 0x9}, {0x5, 0x7}, {0x0, 0x3}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x7}, {0x1, 0x1}, {0x5, 0x4}, {0x4, 0x3}, {0x7, 0x1}, {0x1, 0x9}, {0x2, 0x5}, {0x0, 0x1}, {0x1, 0x3}, {0x7, 0x9}, {0x3, 0x8}, {0x0, 0x5}, {0x0, 0x2}, {0x4, 0x8}, {0x1, 0x6}, {0x2, 0x2}, {0x1, 0x3}, {0x3, 0x5}, {0x1, 0x9}, {0x6}, {0x1, 0x8}, {0x2, 0x9}]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x4, 0x7}, {0x4, 0x2}, {0x7}, {0x6, 0x6}, {0x1, 0x1}, {0x1, 0x8}, {0x4, 0x1}, {0x5, 0x6}, {0x0, 0x7}, {0x0, 0x6}, {0x6, 0xa}, {0x2, 0x7}, {0x7, 0x2}, {0x4, 0x7}, {0x2, 0x9}, {0x5, 0x6}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0x8}, {0x3}, {0x5, 0x6}, {0x1, 0x7}, {0x7, 0x3}, {0x4, 0x6}, {0x3, 0x9}, {0x6, 0x8}, {0x4, 0x4}, {0x4, 0x6}, {0x6, 0x3}, {0x3, 0x8}, {0x1, 0x2}, {0x1, 0x9}, {0x3, 0x2}, {0x7, 0x9}, {0x0, 0x5}, {0x0, 0xa}, {0x4, 0x2}, {0x4, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x3}, {0x7, 0x9}, {0x1, 0x6}, {0x2, 0x4}, {0x4, 0x1}, {0x2, 0x8}, {0x1, 0x9}, {0x1, 0x4}, {0x3, 0x2}, {0x0, 0x2}, {0x5, 0x3}, {0x0, 0x6}, {0x4, 0x7}, {0x4, 0x7}, {0x7, 0x7}, {0x0, 0x4}, {0x3}, {0x4, 0x5}, {0x7, 0x3}, {0x3, 0xa}, {0x1, 0x2}, {0x1, 0xa}, {0x1, 0x3}, {0x1}, {0x2, 0x8}, {0x3, 0xa}, {0x5, 0x3}, {0x1, 0x4}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x30, 0xb, 0x30, 0x12, 0x16, 0x16, 0x24, 0x4, 0x2, 0x9, 0x0, 0x12, 0x1, 0x18, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x0, 0x0, 0x8000, 0xffff, 0x9, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xb, 0x12, 0x1, 0x24, 0x16, 0x24, 0x3, 0xc, 0x60, 0x48, 0x9, 0x60, 0x1b, 0x60, 0x48, 0x30, 0x5, 0x48, 0x12, 0x16, 0x60, 0x1, 0x1b, 0x60, 0x60, 0x1511e81515a417d2, 0x36, 0xc]}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x120, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x3, 0x8}, {0x2, 0x3}, {0x5, 0x2}, {0x2}, {0x2, 0x8}, {0x4, 0x8}, {0x2, 0x2}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x12, 0x36, 0x2, 0x0, 0x2, 0x60, 0x36, 0x5, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x5, 0xb, 0x24, 0x1b, 0x2, 0x2, 0x16]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x4, 0x18, 0xb783cf91d4f24ec4, 0x6, 0x6, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x0, 0x7, 0xa27, 0xffff, 0x8, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x1, 0x4, 0x8, 0x40, 0x0, 0x10, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x14, 0x2, 0x2, 0x6, 0x10, 0x9, 0x8]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x7}, {0x5, 0x1}, {0x6, 0x7}, {0x1, 0x6}, {0x5, 0x7}, {0x6, 0x9}, {0x4, 0x7}, {0x7, 0x3}, {0x4, 0x2}, {0x0, 0x9}, {0x4, 0x5}, {0x0, 0x1}, {0x3, 0x3}, {0x0, 0x8}, {0x1, 0x4}, {0x0, 0x9}, {0x1, 0x1}, {0x3, 0x3}, {0x1, 0x7}, {0x5, 0x3}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x3}, {0x6, 0x9}, {0x5, 0x4}, {0x3, 0x7}, {0x2, 0x8}, {0x7, 0x4}, {0x7, 0x9}, {0x0, 0x3}, {0x6, 0x9}, {0x7, 0x7}, {0x3, 0x4}, {0x1, 0x2}, {0x6, 0xa}, {0x1, 0x2}, {0x0, 0x7}, {0x3, 0x1}, {0x7, 0x9}, {0x6}, {0x2, 0x1}, {0x0, 0x5}, {0x3, 0x3}, {0x0, 0x5}, {0x4, 0x5}, {0x1, 0x8}, {0x5, 0x4}, {0x6, 0x5}, {0x3, 0x8}, {0x5, 0x8}, {0x6, 0x8}, {0x1, 0x9}, {}, {0x7, 0x6}, {0x5, 0x8}, {0x0, 0x3}, {0x1, 0x1}, {0x1, 0x7}, {0x6, 0x4}, {0x7, 0x2}, {0x2, 0x6}, {0x0, 0xa}, {0x7}, {0x4, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x3e0, 0x11d, 0x0, 0x1, [{0x238, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x16}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x0, 0x4}, {0x2}, {0x0, 0x1}, {0x2, 0x8}, {0x0, 0xa}, {0x2, 0xa}, {0x4, 0x1}, {0x7, 0x7}, {0x2, 0x2}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0x2}, {0x1, 0x2}, {0x6, 0x2}, {0x1, 0x2}, {0x6, 0x4}, {0x0, 0x7}, {0x3, 0x4}, {0x1, 0x4}, {0x5, 0x1}, {0x6, 0x8}, {0x0, 0x7}, {0x3, 0x1}, {0x1, 0x1f}, {0x0, 0x8}, {0x6}, {0x5, 0x1}, {0x2, 0x8}, {0x1, 0x1}, {0x0, 0x4}, {0x3}, {0x2, 0x3}, {0x3, 0x5}, {0x7, 0x3}, {0x1, 0x2}, {0x1, 0x4}, {0x3, 0x8}, {0x1, 0x2}, {0x1, 0x9}, {0x4, 0x9}, {0x1, 0x2}, {0x4, 0x8}, {0x4, 0x1}, {0x0, 0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x0, 0x44, 0x7, 0x3, 0xe, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x5, 0x8, 0x3, 0x4, 0x7, 0x6]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x6, 0x8}, {0x1, 0x8}, {0x5, 0x4}, {0x5, 0x8}, {0x3, 0x8}, {0x6, 0x3}, {0x1, 0x4}, {0x1, 0x3}, {0x7, 0x9}, {0x1, 0x9}, {0x6}, {0x1, 0x7}, {0x5}, {0x7, 0x9}, {0x3, 0x2}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0x5}, {0x6, 0x3}, {0x4, 0x2}, {0x4, 0x5}, {0x3, 0x7}, {0x3, 0x9}, {0x1, 0x6}, {}, {0x2, 0x4}, {0x3, 0x2}, {0x1, 0x3}, {0x5, 0x4}, {0x1, 0x1}]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x2, 0x40, 0x9, 0xb5, 0x10, 0x5, 0xa]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0xa}, {0x3, 0x5}, {0x2, 0x8}, {0x6, 0xa}, {0x2, 0x5}, {0x4, 0x4}, {0x4, 0x9}, {0x7, 0x3}, {0x0, 0x6}, {0x6, 0x1}, {0x0, 0x2}, {0x0, 0x1}, {}, {0x5, 0x5}, {0x0, 0x6}, {0x2, 0x6}, {0x4, 0x7}, {0x6, 0x1}, {0x5}, {0x6, 0x3}, {0x7, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x5c4b, 0x6, 0x5, 0x8, 0x2, 0xb]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x1000, 0xb1c, 0x87ca, 0x800, 0x4, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x81, 0x40, 0x0, 0xa986, 0xfff4, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x2, 0x3, 0x16, 0x1, 0x3, 0x6, 0xc, 0x5, 0x0, 0x2, 0x0, 0x6, 0x3, 0x9, 0x4, 0x24, 0x18, 0x1, 0x6, 0x18, 0x1, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0xd68b, 0x6, 0x2, 0x3, 0x5, 0x3ff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xb, 0xc, 0x24, 0x0, 0x48, 0x12, 0x48, 0x2e]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x5, 0x5}, {0x1, 0x4}, {0x1}, {0x6, 0x6}, {0x0, 0x2}, {0x0, 0x9}, {0x5, 0x7}, {0x3, 0x3}, {0x7, 0x6}, {0x1, 0x3}, {0x2, 0x3}, {0x4, 0x6}, {0x6, 0x7}, {0x7, 0x3}, {0x3, 0x7}, {0x0, 0x6}, {0x2, 0x1}, {0x5, 0x2}, {0x2, 0x2}, {0x6, 0x3}, {0x1, 0x6}, {0x5, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x7, 0x9, 0xbf, 0x0, 0x5, 0xc9]}}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x188, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x15c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x2, 0x7}, {0x5, 0x8}, {0x4, 0x3}, {0x6, 0x4}, {0x1, 0x6}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x44f, 0xfffa, 0xfff4, 0x8, 0x5, 0x9c7, 0xfff, 0x40]}}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x0, 0x5}, {0x7, 0x9}, {0x4, 0x3}, {0x3, 0x1}, {0x1, 0x8}, {0x5, 0x4}, {0x7, 0x2}, {0x3}, {0x0, 0x8}, {0x4, 0x7}, {0x4, 0x5}, {}, {0x0, 0x9}, {0x0, 0x5}, {0x6, 0x2}, {0x2}, {0x0, 0x5}, {0x3, 0x9}, {0x7, 0x9}, {0x1, 0x2}, {0x4, 0x2}, {0x2, 0x7}, {0x2, 0x9}, {0x4, 0x4}, {0x1, 0x6}, {0x1, 0x2}, {0x7, 0x1}, {0x0, 0x8}, {0x4, 0x3}, {0x4, 0x5}, {0x4, 0xa}, {0x7, 0x3}, {0x7, 0x7}, {0x4, 0x5}, {0x6}, {0x6, 0x8}, {0x6, 0x7}, {0x6, 0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x3}, {0x4}, {0x3, 0x1}, {0x0, 0x2}, {0x7, 0x5}, {0x2, 0x5}, {0x1, 0xa}, {0x4, 0x1}, {0x6, 0x6}, {0x7, 0x9}, {0x0, 0x1}, {0x5, 0x6}, {0x3, 0x4}, {0x5, 0x6}, {0x3, 0x7}, {0x0, 0x7}, {0x5, 0x8}, {0x0, 0x2}, {0x6, 0x4}, {0x7, 0x3}, {0x2, 0x5}, {0x3, 0x2}, {0x6, 0x4}, {0x6, 0x9}, {0x5, 0x9}, {0x1}, {0x7, 0x1}, {0x2, 0x9}]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x760e, 0x2, 0x40, 0x3, 0x0, 0x2, 0x401, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0x4, 0x36, 0x48, 0x1, 0x30, 0x6c, 0x30, 0x48, 0x5, 0x48, 0x60, 0x12, 0x4, 0x6c, 0x2, 0x2, 0x4, 0x0, 0x1, 0x5, 0x4, 0xc, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0xfff, 0x7000, 0x431, 0x8, 0x1]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x6, 0x8}, {0x1, 0x6}, {0x1, 0x5}, {0x7, 0x6}, {0x2, 0x8}, {0x0, 0x8}, {0x1, 0x8}, {0x3, 0x2}, {0x4, 0x6}, {0x0, 0x5}, {0x7}, {0x2, 0x9}, {0x2, 0x1}, {0x7, 0xa}, {0x7, 0x1}, {0x0, 0x3}, {0x0, 0x4}, {0x6, 0x4}, {0x0, 0x4}, {0x7, 0x6}, {}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x3, 0x9, 0xc, 0x28, 0x3d, 0x30, 0x3, 0x1b, 0x3, 0x1, 0x1, 0x36, 0x16, 0x2, 0x9, 0x9, 0x16, 0x36, 0x0, 0x12, 0x0, 0x30, 0xb, 0x18, 0x30, 0x2, 0x48, 0x63, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x2, 0x9}, {0x5, 0x4}, {0x2, 0x2}, {0x3, 0x2}, {0x4, 0x9}, {0x1, 0x4}, {0x6, 0x7}, {0x1}, {0x2, 0x6}, {0x2, 0xf}, {0x5, 0x7}, {0x4, 0x7}, {0x6, 0x2}, {0x2, 0x2}, {0x6, 0x1}, {0x3, 0x3}, {0x6, 0x7}, {0x1, 0x5}, {0x1, 0x1}, {0x3, 0x5}, {0x6, 0x5}, {0x6, 0x9}, {0x4, 0x6}, {0x3, 0x9}, {0x3, 0x1}, {0x5, 0x5}, {0x4, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x728, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4b2457d6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9c}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2b}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcb}]}, {0x344, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x46}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x10, 0xf452, 0x7, 0x9, 0x7, 0x7, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ca, 0xd, 0xfffa, 0x6, 0x3, 0x6, 0x6, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x8, 0xfff, 0x6, 0x0, 0x4, 0x4, 0x44b]}}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x7, 0x9}, {0x3, 0x6}, {0x7}, {0x6, 0x8}, {0x4, 0x5}, {0x3, 0x1}, {0x6, 0x6}, {0x0, 0x6}, {0x6}, {0x6, 0x7}, {0x4, 0x5}, {0x1, 0x7}, {0x5, 0x2}, {0x3, 0x6}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x1}, {0x4, 0x5}, {0x4, 0xa}, {0x1, 0x4}, {0x7, 0x8}, {0x0, 0x9}, {0x6, 0x3}, {0x2, 0x6}, {0x2, 0x5}, {0x1, 0x6}, {0x3, 0x1}, {0x4, 0x9}, {0x4, 0x6}, {0x4}, {0x6, 0x8}, {0x3, 0x7}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x5}, {0x1, 0x8}, {0x4, 0x5}, {0x5, 0x8}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x8}, {0x6, 0x7}, {0x4, 0x7}]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x30, 0x3, 0xb, 0xc, 0x1b, 0x0, 0x9, 0x16, 0x2, 0x9, 0x3, 0x3, 0x16, 0x30, 0x1, 0x60, 0x93, 0x4, 0x6c, 0x9769178299ba33df, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0xc79f6608b23e33ee}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0x60, 0x9, 0x5, 0x4, 0x48, 0x12, 0x60, 0x3b, 0x6, 0x30, 0x33, 0x0, 0x30, 0x1, 0x30, 0x9, 0x60, 0x24, 0x6c, 0x2, 0x27, 0x48, 0x1, 0x12, 0x48, 0x24]}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x8, 0x2, 0xccd, 0x0, 0x2, 0xd0, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0xd02, 0x7ff, 0x100, 0x4193, 0x544, 0x5, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0xf45, 0xde, 0xa, 0x5, 0x1, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x9, 0x7, 0xb, 0x4a, 0xb559, 0x82, 0x101]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x3, 0x8}, {0x5, 0x7}, {0x3, 0x3}, {0x2, 0x5}, {0x3}, {0x3, 0x6}, {0x0, 0xa}, {0x3, 0x3}, {0x4, 0x2}, {0x5, 0x9}, {0x6, 0x8}, {0x6}, {0x5, 0x4}, {0x0, 0x1}, {0x0, 0x3}, {0x0, 0x2}, {0x1}, {0x7, 0x3}, {0x3}, {0x2, 0x2}, {0x7, 0x2}, {0x1, 0x2}, {0x4, 0x7}, {0x1, 0xa}, {0x6, 0xa}, {0x1, 0x3}, {0x1, 0x1}, {0x0, 0xa}, {0x1, 0x4}, {0x6, 0x8}, {0x7, 0x1}, {0x6, 0xa}, {0x6, 0x5}, {0x5, 0xa}, {0x0, 0xa}, {0x1, 0x4}, {0x7, 0x4}, {0x7, 0x8}, {0x2, 0x5}, {0x2, 0x4}, {0x0, 0x3}, {0x1, 0x2}, {0x4}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x2, 0xc, 0x9, 0x12, 0x6, 0x18, 0x16, 0x16, 0x2, 0x24, 0x0, 0x12, 0x6c, 0x60, 0x20, 0x18, 0x18, 0x5, 0x3, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x128, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x1b, 0x3, 0x5, 0x10]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x18, 0x36, 0xb, 0x9, 0x48, 0x30, 0x16, 0x12, 0x18, 0xb, 0x36, 0xb, 0x5, 0x12, 0x16, 0x48, 0x4, 0x12, 0x6c, 0x0, 0x16]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0x48, 0xb, 0x30, 0x1, 0x3, 0x6, 0x5, 0x24, 0x1, 0x6, 0x4, 0x36, 0x4, 0x4, 0x30, 0x5e, 0x6c, 0x0, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x769, 0x9, 0x8000, 0x873, 0x2, 0x401, 0x3, 0x1]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x9}, {0x0, 0x7}, {0x1, 0x1}, {0x7, 0x8}, {0x7, 0x4}, {0x2, 0x2}, {0x4}, {0x4, 0x3}, {0x0, 0x4}, {0x7, 0x6}, {0x0, 0xa}, {0x4, 0x8}, {0x6, 0x9}, {0x1, 0x6}, {0x7, 0x6}, {0x5, 0x1}, {0x5, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x16, 0x12, 0x12, 0x3, 0x9, 0xb, 0x5, 0x4, 0x9, 0x36, 0x36, 0x6c, 0x3, 0x24, 0x0, 0x9, 0x60, 0x6, 0x18, 0x0, 0x3, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x1, 0x5}, {0x6, 0x4}, {0x2, 0x9}, {0x3, 0x5}, {0x3, 0x3}, {0x0, 0x7}, {0x1, 0x1}, {0x3, 0x9}, {0x7, 0x1}, {0x3, 0x5}, {0x0, 0x2}, {0x5, 0x2}, {0x6, 0x8}, {0x1, 0x4}, {0x4, 0x7}, {0x0, 0xa}, {0x5, 0xa}, {0x3, 0x5}, {0x7, 0x2}, {0x5, 0x3}, {0x7, 0x3}, {0x3, 0x5}, {0x0, 0x5}, {0x6}, {0x0, 0x1}, {0x6, 0x1}, {0x2, 0x3}, {0x6, 0x4}, {0x4, 0x9}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x4}, {0x6, 0x1}, {0x0, 0x3}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2efb, 0xd, 0xb, 0x800, 0x1935, 0x5]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x88}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x40}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x28c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x800}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7cf5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7a}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x244, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x1}, {}, {0x7, 0x1}, {0x3, 0x3}, {0x4, 0x1}, {0x3, 0x5}, {0x0, 0x7}, {0x4, 0x6}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0x3}, {0x0, 0x7}, {0x0, 0x2}, {0x1, 0xa}, {0x0, 0x9}, {0x0, 0x9}, {0x4, 0x9}, {0x5}, {0x4}, {0x7, 0x9}, {0x7, 0x8}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x6}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0xdc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x24, 0x1, 0x2, 0x0, 0x18, 0x12, 0xb, 0x18, 0x24, 0x16, 0x36, 0x6c, 0x1b, 0x9, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x2, 0x6, 0x60, 0x36, 0x6, 0x60, 0x48, 0x1b, 0x48, 0x12, 0x24, 0x9, 0x5, 0x1b, 0xc, 0x1, 0xb, 0x5, 0x1, 0x2, 0x60, 0x16, 0x12, 0x60, 0x1b, 0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x1000, 0x4, 0x2, 0xbfc, 0x5, 0x7]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x0, 0x3}, {0x7, 0x8}, {0x7}, {0x0, 0x4}, {0x4}, {0x0, 0x6}, {0x5, 0x6}, {0x7, 0x5}, {0x5, 0x3}, {0x6, 0x4}, {0x7, 0x9}, {0x2, 0x2}, {0x1, 0x7}, {0x4, 0x6}, {0x1, 0xa}, {0x1, 0xa}, {0x1}, {0x0, 0xa}, {0x1, 0x9}, {0x1, 0x1}, {0x5, 0x1}, {0x7, 0xa}, {0x1, 0x5}, {0x3}, {0x7, 0x4}, {0x0, 0x6}, {0x3, 0x1}, {0x0, 0x5}, {0x3, 0xa}, {0x7, 0x3}, {0x2, 0x2}, {}, {0x2, 0x8}, {0x4, 0x1}, {0x7, 0x2}, {0x4, 0x2}, {0x2, 0x1}, {0x1, 0x7}, {0x7, 0xa}, {0x3}, {0x7, 0xa}, {0x7, 0x6}, {0x4}, {0x1, 0x3}, {0x6, 0x4}, {0x2, 0x5}, {0x4, 0x7}, {0x7, 0x8}, {0x6, 0x1}, {0x2}, {0x1, 0x4}, {0x7, 0x5}, {0x0, 0x3}, {0x7, 0x2}, {0x5, 0x5}, {0x3, 0x6}, {0x2, 0x1}, {0x1}, {0x3, 0x6}, {0x6, 0x2}, {0x4, 0x5}, {0x6}, {0x3, 0x6}, {0x4, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0x4, 0x3}, {0x5, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x5, 0x6, 0xb, 0x1, 0x9, 0xff81]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xb, 0xf001, 0x24, 0x7, 0x6, 0xfe01, 0xa81]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x8, 0x351, 0x8, 0x8, 0x3, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6, 0x36, 0x16, 0x2, 0x12, 0x2, 0x60, 0x60, 0x1, 0xc, 0xb, 0x5, 0x9, 0x4, 0x12, 0x1b, 0x60, 0x6c, 0x3, 0x3, 0xfbb81f1b9d01101c, 0x1, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x5, 0x3, 0x10, 0x1, 0x8, 0xd3af]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x60, 0xb, 0x60, 0x30, 0x6, 0x1b, 0x9, 0x36, 0x1, 0xb, 0x1b, 0x18, 0x5, 0x48, 0x4, 0x24, 0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x6}, {0x6, 0x7}, {0x1, 0x3}, {0x1, 0x9}, {0x1, 0x3}, {0x4, 0x5}, {0x2, 0x3}, {0x6, 0x5}]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x6, 0x1}, {0x3, 0x8}, {0x7, 0x1}, {0x2, 0x1}, {0x5, 0x4}, {0x4, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x6, 0x5}, {0x1, 0x8}, {0x3, 0xa}, {0x1, 0x7}, {0x5, 0xa}, {0x3, 0x4}, {0x5, 0x3}, {0x5, 0x8}, {0x7}, {0x6, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x1, 0xa}, {0x3, 0x2}, {0x0, 0x1}, {0x6, 0x2}, {0x5, 0x4}, {0x7, 0x7}, {0x5, 0x9}, {0x0, 0x9}, {0x7, 0x5}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x6, 0x1}, {0x6, 0xa}, {0x1, 0x5}, {0x7, 0x8}, {0x2, 0x7}, {0x1, 0x4}, {0x0, 0x2}, {0x1, 0x3}, {0x5, 0x1}, {0x7, 0x2}, {0x7, 0x5}, {0x0, 0xa}, {0x1, 0x5}, {0x7, 0x9}, {0x1, 0xa}, {0x7, 0x1}, {0x3, 0x6}, {0x3}, {0x6, 0x3}, {0x1, 0x5}, {0x0, 0x7}, {0x0, 0x3}, {0x6, 0x11}, {0x4, 0x7}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x3}, {0x2, 0x8}, {0x5, 0x3}, {0x0, 0x7}, {0x0, 0x5}, {0x5, 0x8}, {0x5, 0xa}, {0x1, 0xa}, {0x5, 0x1d}, {0x2, 0x4}, {0x3, 0x4}, {0x6, 0x5}, {0x7}, {0x5, 0x2}, {0x7, 0x6}, {0x3, 0x5}, {0x2, 0xa}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}, @NL80211_ATTR_TID_CONFIG={0x238, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x98}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x45}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc6}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xae}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x134, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xeb}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6d}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xa, 0x3, 0x7, 0x961, 0xfff9, 0x1000, 0x3]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x95, 0x8, 0x4, 0x4, 0x0, 0x3, 0x6, 0x6]}}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2c, 0x3, 0x7, 0x7, 0x10, 0x1, 0x8, 0x643f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x5, 0x1}, {0x6, 0x6}, {0x6, 0x6}, {0x5, 0x9}, {0x5, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x1, 0x6}, {0x5}, {0x2, 0x5}, {0x0, 0x6}, {0x2, 0x2}, {0x0, 0x5}, {0x0, 0x8}, {0x5, 0x7}, {0x2, 0x6}, {0x1}, {0x0, 0x2}, {0x3}, {0x1, 0x3}, {0x1, 0xa}, {0x4, 0x7}, {0x0, 0x5}, {0x1, 0x6}, {0x1, 0x8}, {0x2, 0x7}, {0x0, 0x2}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x0, 0x5}, {0x1, 0x3}, {0x4, 0x6}, {0x5, 0x9}, {0x7}, {0x4, 0x9}, {0x5, 0x8}, {0x2, 0x4}, {0x5, 0x8}, {0x7, 0x4}, {0x6, 0x2}, {0x3, 0x4}, {0x4}, {0x4}]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x10, 0x9, 0xfffe, 0xe3, 0x6, 0xeb4, 0xaac5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x5, 0x5, 0x30, 0x3, 0xc, 0xc, 0x6c, 0x36, 0x9, 0x24, 0x1e, 0x30, 0x24, 0x24, 0x48]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xcb, 0xff, 0x81, 0x4, 0x1, 0x4, 0x7f]}}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x69}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x132c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20028000) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x9, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000300000000000000040000009586300010000000184b0000f8ffff9a2e59537dea0aabff000000000000000039b1fffff0ffffff180000000700000000000000060000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0xffff0000, 0x7a, &(0x7f00000003c0)=""/122, 0x41100, 0x44, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x10, 0xcc80000, 0x7}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000500)=[{0x4, 0x3, 0x0, 0x8}, {0x3, 0x2, 0xa, 0x7}, {0x5, 0x3, 0x5, 0xb}], 0x10, 0x75a3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='ext4_error\x00', r7, 0x0, 0xf3}, 0x18) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f00000005c0), 0x10) recvmmsg(r8, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/97, 0x38}, {0x0}], 0x2}, 0x3}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$SIOCGSTAMPNS(r8, 0x8907, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, 0x500}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) 4.28871312s ago: executing program 3 (id=1986): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x33, 0xe8, 0xa8, 0x6, 0x53, @mcast1, @private2, 0x20, 0x8000, 0x0, 0x4}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYRES32=r1], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x4e}, 0x94) sendmsg$key(r4, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="020a0000020000000000000000000000c0abb431d0f5eb946fed95cc37677990950388f495e55eaa9d94b56022866ff2e4ac4ebf634323cf745330e953426e94f6e601f0dde6cea051d846850d8aef437e571cbba78b554475f62fb70dabb792077b823052de03728d290143d5df2475fc528bfb2b871e0041a9c7470d4c40b0e969bba172cc5e6064ea6f34f0ca7ecd52f47ed8fcc1"], 0x10}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={0x0}}, 0x48040) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xad7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe6bd}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) r8 = socket(0x10, 0x80003, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x1e}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xdc5e160d}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x9}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x31a}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22000000}, 0x0) recvmsg(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) 4.28746354s ago: executing program 4 (id=1987): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r1}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x44, 0xd7, &(0x7f00000000c0)="547482eb1631fdc660fc84cc29e5021511de11ade699504b783bdc347335e9301555acd2b8796b02fb43e76954fcbbf743306913ab5e7074718a974d4c2b7c4739532170", &(0x7f00000002c0)=""/215, 0x81, 0x0, 0x42, 0x97, &(0x7f00000003c0)="51d9053022c93bf99a7489567411e22d141d0080a1f90eaad35b08ac840999e82d91abac618e472964e4bdecd6dee390d70f0452322a7986698a630b0e479882040d", &(0x7f00000005c0)="2b235069ba5dbe260e7b601b845777ef7d49a37cc7a86e01d49e291a27e299e185dbc84cb484351da5417d8966d92db651698a7d7a9ddcc70c482b2136c31bed3ac472ef51c0ef199ff8f991d1d7affbc2053a2fde993e21a9e1e7ef115ce5495c953aa1e2d2e9a547b855c7c4076e4b41415662c9a127ceed954e87ad8a5088ff56d6c02f366e6e196653d897833e5ba90aa512fa60f9", 0x1, 0x0, 0xe}, 0x50) 4.11498518s ago: executing program 4 (id=1990): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x5, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x62}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0x14, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000008007e227f3ad7a9", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000d4806be155438020df630000000000007d689a34bbf6937e043c5630491ecacc0619987299025e0e4f89339b91995fe3811a173d6888ea9196206a4419f4ea8e0e19b7d957d5c78ed0ae46517ac300307c7a351a0e36e3e26f1100bbfce9104e5fedf8dc37fc80e6e74fcda874"], &(0x7f0000000200)='syzkaller\x00', 0x4}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000d4806be155438020df630000000000007d689a34bbf6937e043c5630491ecacc0619987299025e0e4f89339b91995fe3811a173d6888ea9196206a4419f4ea8e0e19b7d957d5c78ed0ae46517ac300307c7a351a0e36e3e26f1100bbfce9104e5fedf8dc37fc80e6e74fcda874"], &(0x7f0000000200)='syzkaller\x00', 0x4}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001740), 0x2, r0}, 0x38) 3.950558945s ago: executing program 4 (id=1991): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = accept4(r0, &(0x7f00000002c0)=@nl=@unspec, &(0x7f0000000140)=0x80, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000001c0)={0x1, &(0x7f0000000540)=[{@fixed}]}) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x5, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e25, @broadcast}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000002020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xa8}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x98, &(0x7f00000000c0)=""/152}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="140002001000010000000000000000000000004a3c00000027f917baa9eb2bf097da160a01080000000000000000020000010900020073797a04000000000900010073797a30000000001000038008000240000000000400038014000000110001000000"], 0x64}}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1b, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x14e, 0x0, 0x0, 0x0, 0xd7}, @printk={@lx}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000007f0100000000c200f5ba00ffff010000"], 0x14) 3.863253388s ago: executing program 0 (id=1993): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e21, @local}}, 0x800, 0xa0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r1], 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'erspan0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x80, 0x1, 0x4, 0xfffffffe, {{0x22, 0x4, 0x1, 0x19, 0x88, 0x64, 0x0, 0x4, 0x4, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@lsrr={0x83, 0x7, 0x2f, [@private=0xa010100]}, @timestamp_addr={0x44, 0x24, 0xf6, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x25}, 0x1}, {@local, 0x10001}, {@multicast1, 0x3b94c521}, {@remote, 0x7}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xf, 0x3a, [@multicast2, @private=0xa010101, @multicast2]}, @timestamp_prespec={0x44, 0x1c, 0xa5, 0x3, 0x0, [{@broadcast, 0x7}, {@empty, 0x2}, {@broadcast, 0x7f}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0x2c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x16}, @broadcast]}]}}}}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x144, 0x144, 0x3, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x4}, {0x3}]}, @typedef={0x6, 0x0, 0x0, 0x8, 0x5}, @enum64={0x6, 0x7, 0x0, 0x13, 0x0, 0xc, [{0x4, 0x7, 0x8}, {0x1, 0x6, 0x6}, {0x8, 0x5, 0x80000001}, {0x5, 0x0, 0x1}, {0xb, 0x90c, 0x7}, {0x7, 0x1, 0xcc097f2}, {0xa, 0x1, 0x6}]}, @float={0x8, 0x0, 0x0, 0x10, 0x10}, @enum={0x6, 0x5, 0x0, 0x6, 0x4, [{0xc, 0x5}, {0x4, 0xfffffe00}, {0xd, 0x6}, {0x10, 0x1}, {0x6, 0x4}]}, @enum64={0x9, 0x6, 0x0, 0x13, 0x0, 0x4, [{0xb, 0x8}, {0xb, 0x7, 0xd98}, {0x6, 0x7, 0x9}, {0x8, 0x7}, {0xd, 0xcf8b, 0x5}, {0x7, 0x100, 0x8}]}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x5, 0x7}, @fwd={0x4}, @float={0xd, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x61]}}, &(0x7f0000000a00)=""/4096, 0x15f, 0x1000, 0x1, 0x3b4, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d00)={r3, 0xe0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001a40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f0000001b00)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001b40), &(0x7f0000001b80), 0x8, 0x81, 0x8, 0x8, &(0x7f0000001bc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x5, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x0, 0x0, 0x6, 0x7, 0x2, 0x20, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x60, 0xaf, &(0x7f0000000300)=""/175, 0x41100, 0x20, '\x00', r4, @fallback=0x25, r5, 0x8, &(0x7f0000001a00)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, r6, r3, 0x0, &(0x7f0000001d40)=[r2], 0x0, 0x10, 0x6d6c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x1d8, 0x18, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xb0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xe4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'xfrm0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x200}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3fb, 0x8, 0x70bd2d, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40845}, 0x40004) 3.791059941s ago: executing program 4 (id=1994): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000100)=0x22910, 0x4) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120002000200000000000000000010002f0003000000000000000000000010003300000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x3}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r0, &(0x7f0000000200)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d71c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d54c31c000000000000000000000000f1d3b9031c180000", 0x66) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000000)=0xb2, 0x4) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x9}) 3.691727096s ago: executing program 4 (id=1996): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYBLOB="200e58c57faa000100", @ANYRES64=r2, @ANYRES32=r1], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r3 = socket$inet(0x2, 0x4, 0x5) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'macvlan0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x1, 0xa, 0x82, 0x7f, 0x9, 0x0, 0x25, 0x0, 0x41, 0x4, [0x2, 0xd, 0xffffab86, 0x172d, 0x3, 0x7, 0x6, 0x3]}}) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000580)={{r3}, "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"}) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="cd1242bdc9ea", @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @loopback}}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="54010000100001000000000000000000fc000000000000000000000000000001e000000200000000000000000000000000000000000000000000000033000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x154}}, 0x40000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x1, @local, 0x1}}, 0x0, 0x0, 0xc, 0x8, 0x65, 0x401, 0x8}, &(0x7f0000000000)=0x9c) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={r5, 0x7f}, &(0x7f00000003c0)=0x8) 3.50616121s ago: executing program 4 (id=1998): bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000f40), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x24) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000d40), 0x8) sendmsg$nl_generic(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, 0x14, 0x2, 0x70bd29, 0x25dfdbff, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4044001) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000005060000fd192430e7370f212ebe30c8a76cbda6df5e0a9bc534a99c6081d499cec71ef7ea3f1f00909fc8ea7a1c182c0981abd1edf78222a02d54a78f712272b73346affd76138845012b42f3f469f7e5b070cbfc2348a4baebe0d4fdb800000000000000004b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYRESHEX=r7], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdcf}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000a400000095", @ANYRES16=r4, @ANYRES32=0x0, @ANYRES32=r7, @ANYRES64=r5], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000001040)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000891}, 0x20000040) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff7fff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x48000}, 0x40) r10 = socket(0x1f, 0x800, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r11, 0x6180, 0x0) sendmmsg$inet6(r11, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="b8261912ddc34d7e", 0x8}, {0x0}, {0x0}, {0x0, 0x57}, {&(0x7f00000000c0)="55242684a208746812522e1bc4d3c93fe32ccf8cc373a4cec308148b4b72e5948b65c94c93a287bbf98d08721ae656d7beee2707ae0a0f048d86612522fc180f874e53266e6232fbe8cb1b37c98293912ecea8c841fdd10f2a9eb095107b1d9edaedb15d3edb56caeba84cc9a5e2290381cd39b4fa757cc8cec34346e7004ff96846b3876001cb2e65cf44c845073423230886cd0613964596c4b001790e70fa82033bb2f58087986513f47ed7889d45e95f7b16f46fb1b5e383a4208fe40b5e56a2f61221b0a309bbfa35f0bc68b38d0ee06c15bcdafcb84e06b3cab16acee7a3a2b45b977d8b169dc8b0e096802f66644e5f"}, {&(0x7f0000000000)="ce39bddc48194a2bf8184ac0"}], 0x4}}, {{&(0x7f0000003600)={0xa, 0x4e21, 0x3, @private2, 0x8}, 0x1c, 0x0}}], 0x2, 0x20088880) setsockopt$inet6_IPV6_RTHDR(r10, 0x29, 0x39, &(0x7f0000000040)={0x3a, 0xc, 0x2, 0x1, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty]}, 0x68) 3.283052874s ago: executing program 3 (id=2001): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x40000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1, 0x0, 0x3}, 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$rxrpc(0x21, 0x2, 0xa) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x9, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="b7eb290aca"], 0x20000600}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000740)={0x0, 0x1, 0x2, 0x8000000000400}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r5) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000d40)={0xbe99, 0x7, 0x40f, 0x3}) r7 = socket(0x25, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000680)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x0, 0xf5, "b73f91b347996d2b0fcd69e2e88aa00b5f59dc52a2a4aa6bca3de2d651082f03223331f342d93a8fa21a0e3c33249dbc0029aaafae4d9254a5af55dd6c3299b21bfd0b4350cf37252aab6f5ede1764be762269ad5774617548e915138ae29e16376c901bac59a71bb883facdc98bd7bf405f09f2ddb452ffe22e0139c576d40a6420dac10a71f5e11823c63258a2410fdde7a673c013c3f959a902307a1eea92ee4eb527dc22b9104c3a86ff346021d0d46a67726cd59ca3d5110daf8035071db55727b717be3dc3daa69348818752df7cfc6e29b5469e984cbb3594c4d086c10f714541699377e75752a223538d06ccb8c112ffc9"}}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0xfffffffc) setsockopt$inet6_tcp_int(r8, 0x6, 0x1e, &(0x7f00000001c0)=0x1, 0x4) write$cgroup_int(r2, &(0x7f0000000140)=0x7fffffffffffffff, 0x12) write$cgroup_devices(r2, 0x0, 0x8) socket$nl_route(0x10, 0x3, 0x0) 2.962392989s ago: executing program 0 (id=2004): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000900)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d61637365630000140002800500060001000000050007000100000008000500", @ANYRES32=r1], 0x54}}, 0x0) 2.764261915s ago: executing program 0 (id=2006): socket$pppoe(0x18, 0x1, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x2, 0x4) r1 = socket(0x15, 0xa, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socket$netlink(0x10, 0x3, 0xc) r2 = socket(0x1e, 0x805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r3, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) (async) sendto$inet6(r3, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b3"], 0x48) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b3"], 0x48) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) (async) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\t\n'], 0xa) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) (async) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0}}], 0x1, 0x40000) (async) sendmmsg$inet6(r7, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0}}], 0x1, 0x40000) shutdown(r7, 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="aa8e0cf56164be5b", 0x8) sendmsg$inet(r2, 0x0, 0x48c1) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x22, 0x2, 0x2) socket(0x22, 0x2, 0x1) (async) socket(0x22, 0x2, 0x1) 2.617531757s ago: executing program 0 (id=2008): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000001000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0094000100"/25], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, &(0x7f0000000380), 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) socket$packet(0x11, 0x2, 0x300) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x81000000) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x20000040) close(0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x28, 0x0, 0x829, 0x70bd2c, 0x25dfdbfe, {0x1e}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0xc080}, 0x40240c4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') unshare(0x6a040000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0xfff3, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 2.423031152s ago: executing program 2 (id=2009): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000c00)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0x0, 0x0, 0x5}, 0xc2, 0x0, 0x1}, {{@in6=@local, 0x0, 0x6c}, 0xa, @in6=@local, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x0) 2.293526886s ago: executing program 2 (id=2010): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f80)={'pimreg0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="00072bbc709d7995360005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0xfc, 0x3e, 0x107, 0x3, 0x0, {0xfe, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @generic="5b8489db487b9c158ca673ba8a0bcc7dfd1ad3b789dde5c81d4f056f72f8e8d6511afad7c9a745a04dde94d8222e37f4141214fc74800a038794767d482a86aa9ef9088c1cff7dd7630cc05c994d23e987666801fe6dd839383e6c1742b61e89de7c5cc38b86d6a420de569b6488a69da5a7a712af33295c5e5b544017f02664107a8c2029f44dd93ca239212c8d7395fb6f935aea67269ad4ed51b48d45fd9f180b6b20faaf744a16f9cec516cad41996bc514217ed81a08f0c330a3da384d72bbca94e4dae23c0a5a56f05f7d3dc9e7e231ab6418c4c54ff25"]}, 0xfc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffeea, &(0x7f0000000040)={&(0x7f0000001200)=ANY=[@ANYRES8=r4, @ANYRES64=r7, @ANYRESHEX=r4], 0x3c}, 0x1, 0x0, 0x0, 0x400c0}, 0x40000080) bind$alg(r2, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0x12, 0x0, 0x0, 0x8000, 0x4985, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r11, 0x27, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000006000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r13, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e27, @empty}}) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f0000000fc0)=""/208, &(0x7f00000010c0)=0xd0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2825020000080000200012800c0001006d6163766c616e0010f902600a000900000000010000000008000500", @ANYRES32=r1, @ANYBLOB], 0x48}}, 0x800) 2.292901771s ago: executing program 1 (id=2011): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfffffff9}]}}) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000040)=0x3c, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b92d03076003008c2b93b89e88a8", 0x0, 0xfe0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x10001}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x6) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=@base={0xa, 0xc, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x8}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000b00000000000000004000400851000000600000018100000", @ANYRES32=r9, @ANYBLOB="0000000000000000660000000110000018000000f8ffffff00000000000000019500000000000000360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r10 = socket$netlink(0x10, 0x3, 0x4) write(r10, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) 2.285979477s ago: executing program 3 (id=2012): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket(0x2b, 0x80801, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xa, 0x9, 0x0, 0x0, 0x7fffffff, 0x400}, 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000d40a341e1f6311f2c77554f9c4321062f72b732cbd7000fbdbdf2501000005"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) 1.810852513s ago: executing program 1 (id=2013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x565c}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) syz_80211_inject_frame(0x0, &(0x7f0000000b40)=@mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, @device_b, @broadcast, @from_mac=@broadcast, {0x5, 0x3}}, 0xffffffff, @default, 0x8, @void, @val, @void, @void, @void, @void, @void, @void, [{0xdd, 0x82, "ede61ff4067136502e31270c60b5fd362333c946a75c045c449cbb275ac14088cd01395489260083926b7aa2e4fe845bc6263229585ac56fc2ab1c4f07b7282b64709eca43788a198ad51ae1a5f87ff16307f3aab0f9dbca4b22cd7f9bf62d8eb87adaea0ac02b392db116eda5e9a983f6c0c3666467bffde71ff59ce8d93bb88745"}, {0xdd, 0x6, "1fcaba0eb115"}, {0xdd, 0x6, "6da4d4dab7d2"}, {0xdd, 0x16, "c5fa696c2f83867121e6fb4dfed42b451c58f592cef7"}, {0xdd, 0xc7, "e7606aa393b429ba77e6548f49099ce1c98ec69c265eaab00f35cb4f85ffcee618e7c755c7cd8c3e8395647acbbb4e4edf07f55cc2ada98d0e087f41889a1dd09c5f575ba66ad82058f729e3928079a7a5011a9b545f7298b00ff012f41ef03fa23f1f9ba4aa5bc3c151203e224d51f1d6bd05a99c1b8f57cd9fcd2c6d29a168c3945976b8c564257a9a50ee42766ee02f191af3647e54fceb06fb26565272fb6afb0fec43e42c2b95134c50675481de0db79831c62daad294792fa56f65297b30d52916dc1ac1"}, {0xdd, 0x43, "28f2d76563d60c24843b8a128a0f38f21e3dc97b53aaf262dafa53b263af06141fa122d8a08de0b8c35d1db15a5da1f2463f5567e85f7ea224609d005e7ddef787487f"}, {0xdd, 0x16, "8fb09f942f8682dc0b50dda4062527fb8275c2446ae4"}, {0xdd, 0x59, "234feafef0735a9533f875942c227fcd396b164d9598ea98268b5667c6cef369d8047b462941099ac17fbae9eeddd8751bf547292161440a3ebb3b33d963225e04d727467b2fd5bf7791f1195046fb4b213c7d87b21b1f50ea"}]}, 0x253) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0xf5) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x38, 0x48, 0x101, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0xb}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r5, @ANYBLOB="010000000000000d1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.324090333s ago: executing program 3 (id=2014): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)={0x44, r11, 0x11, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xfffffffb, 0xfffffffc}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) 1.137687868s ago: executing program 2 (id=2015): socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet(0x2, 0x80001, 0x84) (async, rerun: 64) r0 = socket$inet(0x2, 0x80001, 0x84) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x2b) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x1000003, 0x4) (async) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r0, 0x3) (async) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000280)=0x3, 0x4) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff, 0x2}, 0xe) (async) writev(r3, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ff7f000000000000000000009500000000000000d1c4183247ea0bbb5d3862950f91ace0319f430925fda88089e3fe65327bef7730896f40535d8cc3c9e2357f8ac13729dd5377c9c47936647690105b100149bfde44adf0e4fae811ad40bb7d9385a4ba07521d9382b1183789c743d76db805ea62c6116d31e6ba78ad33b098cae1289b4b8f007241dff6f9fad1a5f0d161c275d54cbe561ae3842222b780bf1d11"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r5, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r5, r6, 0x0, 0xffffffff000) (async, rerun: 32) recvmmsg(r5, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xde}, {{&(0x7f00000005c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000880)=""/144, 0x90}, 0x3}, {{&(0x7f0000000940), 0x80, &(0x7f00000011c0)=[{&(0x7f00000009c0)=""/176, 0xb0}, {&(0x7f0000000c00)=""/232, 0xe8}, {&(0x7f0000000d00)=""/193, 0xc1}, {&(0x7f0000000480)=""/150, 0x96}, {&(0x7f0000000540)=""/51, 0x33}, {&(0x7f0000000ec0)=""/158, 0x9e}, {&(0x7f0000000f80)=""/168, 0xa8}, {&(0x7f00000010c0)=""/223, 0xdf}, {&(0x7f0000000a80)=""/21, 0x15}], 0x9}, 0x100}], 0x3, 0x40001023, 0x0) (rerun: 32) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x40000083) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bf0600000082565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be820400e900"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="4000000000000000060012810b000100627269646765000100010000ff0f00003004000000242d4400000000"], 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x8044) (async, rerun: 64) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002180)=@o_path={&(0x7f0000001080)='./file0\x00', 0x0, 0x8, r9}, 0x18) 998.708593ms ago: executing program 2 (id=2016): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000540500000e0002006e657464657673696d0000000f0002", @ANYRES64=r0, @ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRES8=0x0], 0x34}}, 0x0) 933.178935ms ago: executing program 1 (id=2017): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000a700000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r3, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x4, @empty, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000001440)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x29, 0x0, 0x2, 0x1}}}], 0x18}, 0x24004800) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) socket$inet(0x2, 0x2, 0x73) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_pktinfo(r5, 0x0, 0x50, 0x0, &(0x7f0000000200)) r6 = socket(0x18, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='c'], 0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$packet(r6, 0x0, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0000000000000700000000080017004e224e24050016000000000008000d00050000000c001400", @ANYRES64], 0x4c}, 0x1, 0x0, 0x0, 0x4040016}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_delrule={0x74, 0x21, 0x100, 0x70bd27, 0x25dfdbff, {0xa, 0x10, 0x10, 0x6, 0x74, 0x0, 0x0, 0x5, 0x10}, [@FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FRA_DST={0x14, 0x1, @loopback}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x3ff}, @FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}, @FRA_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) 822.00647ms ago: executing program 2 (id=2018): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000240)=0x11) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000140)=0x1, 0x4) r2 = socket(0x80000000000000a, 0x2, 0x0) connect$netrom(r2, &(0x7f0000000480)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r3, r4}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x13, 0x1, {0x80000003, 0x0, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x89, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x406) 677.594467ms ago: executing program 1 (id=2019): r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) 410.788361ms ago: executing program 1 (id=2020): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004504000000000011907800000000000000004e244e20004d9078010000000100000065a252e7cb7a5918c004a9971a46afced2c32642b3ec9fe34818d8ccd82041b7c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bfbff283a220c3a9becd8a70d3607ea8270d351ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76980aa8fb8f80d647e93e55dc24bb69e833bd36300b088233545a0000000000000000"], 0x0) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffc, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x8, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000012c0)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x30}], 0x1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/3112], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f0000000100)=0x987, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0x25) recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002780)=""/4071, 0xfffe}], 0x1}, 0x0) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff0b076859268cb89e14f088a8", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) 287.534663ms ago: executing program 2 (id=2021): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e1c, @local}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x48, r2, 0x1, 0x70bd2b, 0xfffffffe, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x48}, 0x1, 0x0, 0x0, 0x40008090}, 0x2048044) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) recvfrom$x25(r0, &(0x7f0000000100)=""/14, 0xe, 0x40000060, &(0x7f0000000140)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) setsockopt$inet_int(r0, 0x0, 0x32, 0x0, 0x0) 0s ago: executing program 1 (id=2022): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x2) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x90000011}) ppoll(&(0x7f0000000040)=[{r1, 0x1250}, {r2, 0x100}], 0x2, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000010000018010000696c6c2500000000002020207b1a12ff000000004fa100000000000007010000f8ffffffb702000008000000b703000000000000850000009900000095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) kernel console output (not intermixed with test programs): 80] batadv0: entered allmulticast mode [ 153.304182][ T8180] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 153.741441][ T8196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.573'. [ 153.788262][ T8198] dvmrp1: entered allmulticast mode [ 153.823392][ T8198] dvmrp1: left allmulticast mode [ 153.910765][ T8199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.114686][ T8204] FAULT_INJECTION: forcing a failure. [ 154.114686][ T8204] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 154.118101][ T8201] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.153389][ T8204] CPU: 1 UID: 0 PID: 8204 Comm: syz.1.576 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 154.153420][ T8204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.153431][ T8204] Call Trace: [ 154.153439][ T8204] [ 154.153448][ T8204] dump_stack_lvl+0x189/0x250 [ 154.153475][ T8204] ? __pfx____ratelimit+0x10/0x10 [ 154.153503][ T8204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.153524][ T8204] ? __pfx__printk+0x10/0x10 [ 154.153549][ T8204] ? __might_fault+0xb0/0x130 [ 154.153591][ T8204] should_fail_ex+0x414/0x560 [ 154.153627][ T8204] _copy_from_user+0x2d/0xb0 [ 154.153656][ T8204] sk_ioctl+0x334/0x600 [ 154.153687][ T8204] ? __pfx_sk_ioctl+0x10/0x10 [ 154.153733][ T8204] ? kasan_quarantine_put+0xdd/0x220 [ 154.153773][ T8204] inet6_ioctl+0x204/0x280 [ 154.153793][ T8204] ? __pfx_inet6_ioctl+0x10/0x10 [ 154.153810][ T8204] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 154.153838][ T8204] ? do_vfs_ioctl+0xbe8/0x1430 [ 154.153866][ T8204] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 154.153900][ T8204] sock_do_ioctl+0xd9/0x300 [ 154.153928][ T8204] ? __pfx_sock_do_ioctl+0x10/0x10 [ 154.153949][ T8204] ? __lock_acquire+0xab9/0xd20 [ 154.153996][ T8204] sock_ioctl+0x576/0x790 [ 154.154023][ T8204] ? __pfx_sock_ioctl+0x10/0x10 [ 154.154048][ T8204] ? __fget_files+0x2a/0x420 [ 154.154066][ T8204] ? __fget_files+0x3a0/0x420 [ 154.154084][ T8204] ? __fget_files+0x2a/0x420 [ 154.154107][ T8204] ? bpf_lsm_file_ioctl+0x9/0x20 [ 154.154143][ T8204] ? __pfx_sock_ioctl+0x10/0x10 [ 154.154167][ T8204] __se_sys_ioctl+0xf9/0x170 [ 154.154196][ T8204] do_syscall_64+0xfa/0x3b0 [ 154.154222][ T8204] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.154249][ T8204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.154268][ T8204] ? clear_bhb_loop+0x60/0xb0 [ 154.154293][ T8204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.154311][ T8204] RIP: 0033:0x7f9fe1b8eb69 [ 154.154330][ T8204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.154345][ T8204] RSP: 002b:00007f9fdf9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.154367][ T8204] RAX: ffffffffffffffda RBX: 00007f9fe1db5fa0 RCX: 00007f9fe1b8eb69 [ 154.154381][ T8204] RDX: 00002000000000c0 RSI: 00000000000089e0 RDI: 0000000000000003 [ 154.154393][ T8204] RBP: 00007f9fdf9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 154.154405][ T8204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.154417][ T8204] R13: 0000000000000000 R14: 00007f9fe1db5fa0 R15: 00007ffe6bef6a78 [ 154.154451][ T8204] [ 154.507648][ T8206] netlink: 40 bytes leftover after parsing attributes in process `syz.1.577'. [ 154.551564][ T8201] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.630592][ T8201] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.748234][ T8201] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.995950][ T8214] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.024444][ T8214] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 155.061238][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.120363][ T6730] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.147055][ T8214] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.193509][ T8214] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 155.269334][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.308989][ T8214] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.320110][ T8223] netlink: 'syz.1.582': attribute type 1 has an invalid length. [ 155.343418][ T8214] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 155.431948][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.512965][ T8223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.596916][ T8214] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.650549][ T8227] netlink: 48 bytes leftover after parsing attributes in process `syz.1.582'. [ 155.673422][ T8214] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 155.756818][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 155.884619][ T6728] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 155.903817][ T6728] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 155.950344][ T6713] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 155.966169][ T6713] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 156.039930][ T6728] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 156.084801][ T6728] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 156.113293][ T6728] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 156.121636][ T6728] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 156.180477][ T8234] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 156.212456][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.584'. [ 156.289007][ T8236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.585'. [ 156.305188][ T8234] bridge0: port 3(macvlan2) entered blocking state [ 156.333561][ T8234] bridge0: port 3(macvlan2) entered disabled state [ 156.363673][ T8234] macvlan2: entered allmulticast mode [ 156.385866][ T8234] bridge0: entered allmulticast mode [ 156.414393][ T8234] macvlan2: left allmulticast mode [ 156.430753][ T8234] bridge0: left allmulticast mode [ 156.430813][ T8241] FAULT_INJECTION: forcing a failure. [ 156.430813][ T8241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.480111][ T8241] CPU: 1 UID: 0 PID: 8241 Comm: syz.1.587 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 156.480143][ T8241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 156.480154][ T8241] Call Trace: [ 156.480163][ T8241] [ 156.480172][ T8241] dump_stack_lvl+0x189/0x250 [ 156.480199][ T8241] ? __pfx____ratelimit+0x10/0x10 [ 156.480229][ T8241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.480249][ T8241] ? __pfx__printk+0x10/0x10 [ 156.480289][ T8241] should_fail_ex+0x414/0x560 [ 156.480327][ T8241] _copy_to_user+0x31/0xb0 [ 156.480358][ T8241] simple_read_from_buffer+0xe1/0x170 [ 156.480403][ T8241] proc_fail_nth_read+0x1b3/0x220 [ 156.480431][ T8241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.480459][ T8241] ? rw_verify_area+0x258/0x650 [ 156.480485][ T8241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.480511][ T8241] vfs_read+0x1fd/0x980 [ 156.480537][ T8241] ? fdget_pos+0x247/0x320 [ 156.480563][ T8241] ? __pfx___mutex_lock+0x10/0x10 [ 156.480593][ T8241] ? __pfx_vfs_read+0x10/0x10 [ 156.480628][ T8241] ? __fget_files+0x2a/0x420 [ 156.480654][ T8241] ? __fget_files+0x3a0/0x420 [ 156.480671][ T8241] ? __fget_files+0x2a/0x420 [ 156.480702][ T8241] ksys_read+0x145/0x250 [ 156.480728][ T8241] ? __fget_files+0x3a0/0x420 [ 156.480749][ T8241] ? __pfx_ksys_read+0x10/0x10 [ 156.480784][ T8241] ? do_syscall_64+0xbe/0x3b0 [ 156.480817][ T8241] do_syscall_64+0xfa/0x3b0 [ 156.480844][ T8241] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.480870][ T8241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.480890][ T8241] ? clear_bhb_loop+0x60/0xb0 [ 156.480915][ T8241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.480942][ T8241] RIP: 0033:0x7f9fe1b8d57c [ 156.480961][ T8241] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 156.480977][ T8241] RSP: 002b:00007f9fdf9f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.481000][ T8241] RAX: ffffffffffffffda RBX: 00007f9fe1db5fa0 RCX: 00007f9fe1b8d57c [ 156.481015][ T8241] RDX: 000000000000000f RSI: 00007f9fdf9f60a0 RDI: 0000000000000004 [ 156.481027][ T8241] RBP: 00007f9fdf9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 156.481039][ T8241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.481051][ T8241] R13: 0000000000000000 R14: 00007f9fe1db5fa0 R15: 00007ffe6bef6a78 [ 156.481086][ T8241] [ 156.768259][ T8096] tipc: Disabling bearer [ 156.888329][ T8243] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.149334][ T8243] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.218537][ T8257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.592'. [ 157.297818][ T8260] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 157.350967][ T8243] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.457300][ T8268] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 157.490031][ T8268] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 157.501073][ T8268] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 157.577931][ T8243] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.867505][ T8293] __nla_validate_parse: 4 callbacks suppressed [ 157.867526][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 157.911234][ T8295] 8021q: VLANs not supported on ip6tnl0 [ 157.997666][ T8299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.080572][ T6713] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.146425][ T6730] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.201383][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.269010][ T6713] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.422863][ T8305] lo speed is unknown, defaulting to 1000 [ 158.460742][ T8314] netlink: 'syz.1.608': attribute type 12 has an invalid length. [ 158.788922][ T8323] syzkaller1: entered promiscuous mode [ 158.819381][ T8323] syzkaller1: entered allmulticast mode [ 159.425310][ T8305] wg1 speed is unknown, defaulting to 1000 [ 159.452897][ T8317] wg0 speed is unknown, defaulting to 1000 [ 159.505088][ T8317] wg0 speed is unknown, defaulting to 1000 [ 159.554313][ T8317] wg0 speed is unknown, defaulting to 1000 [ 159.640244][ T8355] _ÐZ`Ô€@: entered promiscuous mode [ 159.654689][ T8355] netlink: 'syz.2.617': attribute type 10 has an invalid length. [ 159.681043][ T8355] netlink: 52 bytes leftover after parsing attributes in process `syz.2.617'. [ 159.815407][ T8357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.942311][ T8364] netlink: 'syz.3.618': attribute type 3 has an invalid length. [ 160.171309][ T8367] netlink: 'syz.3.619': attribute type 1 has an invalid length. [ 160.179494][ T8367] netlink: 224 bytes leftover after parsing attributes in process `syz.3.619'. [ 160.216164][ T8317] infiniband syz0: set active [ 160.220960][ T8317] infiniband syz0: added wg0 [ 160.226728][ T8317] syz0: rxe_create_cq: returned err = -12 [ 160.237411][ T8317] infiniband syz0: Couldn't create ib_mad CQ [ 160.244216][ T8317] infiniband syz0: Couldn't open port 1 [ 160.278846][ T8317] RDS/IB: syz0: added [ 160.283869][ T8317] smc: adding ib device syz0 with port count 1 [ 160.290092][ T8317] smc: ib device syz0 port 1 has pnetid [ 160.296832][ T5885] wg0 speed is unknown, defaulting to 1000 [ 160.302764][ T5947] wg0 speed is unknown, defaulting to 1000 [ 160.311595][ T8317] wg0 speed is unknown, defaulting to 1000 [ 160.415947][ T8369] netlink: 'syz.3.620': attribute type 1 has an invalid length. [ 160.484368][ T8369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.675685][ T8317] wg0 speed is unknown, defaulting to 1000 [ 160.772164][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.622'. [ 160.782798][ T8377] netlink: 28 bytes leftover after parsing attributes in process `syz.3.623'. [ 160.975570][ T8317] wg0 speed is unknown, defaulting to 1000 [ 161.220743][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 161.398198][ T8391] netlink: 'syz.2.626': attribute type 33 has an invalid length. [ 161.471447][ T8317] wg0 speed is unknown, defaulting to 1000 [ 161.908588][ T8406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.630'. [ 161.979086][ T8409] netlink: 40 bytes leftover after parsing attributes in process `syz.3.631'. [ 162.041433][ T8317] wg0 speed is unknown, defaulting to 1000 [ 162.188682][ T8412] netlink: 'syz.1.632': attribute type 83 has an invalid length. [ 162.317132][ T8416] netlink: 'syz.1.634': attribute type 46 has an invalid length. [ 162.563807][ T8421] netlink: 'syz.2.636': attribute type 1 has an invalid length. [ 162.622163][ T30] audit: type=1107 audit(1754464546.018:2): pid=8423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 162.642219][ T8421] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.873490][ T8420] bond3: (slave gretap1): making interface the new active one [ 162.882819][ T8420] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 162.895334][ T8433] syzkaller1: entered promiscuous mode [ 162.900954][ T8433] syzkaller1: entered allmulticast mode [ 163.279999][ T8455] netlink: 40 bytes leftover after parsing attributes in process `syz.0.644'. [ 163.581106][ T8472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.647'. [ 163.709026][ T8484] veth1_to_team: entered allmulticast mode [ 163.733174][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.648'. [ 163.760574][ T8481] netlink: 24 bytes leftover after parsing attributes in process `syz.4.648'. [ 163.900406][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.654'. [ 163.920002][ T8487] netlink: 20 bytes leftover after parsing attributes in process `syz.3.651'. [ 163.938667][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.654'. [ 163.939338][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.654'. [ 163.958285][ T8500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.654'. [ 163.967608][ T8500] netlink: 'syz.4.654': attribute type 11 has an invalid length. [ 163.975819][ T8499] netlink: 'syz.4.654': attribute type 11 has an invalid length. [ 164.106605][ T8510] netlink: 28 bytes leftover after parsing attributes in process `syz.0.656'. [ 164.284412][ T8514] syzkaller0: entered promiscuous mode [ 164.293775][ T8514] syzkaller0: entered allmulticast mode [ 164.480802][ T8524] wg2: entered promiscuous mode [ 164.497402][ T8524] wg2: entered allmulticast mode [ 164.618677][ T8533] netlink: 'syz.4.664': attribute type 33 has an invalid length. [ 164.642690][ T8536] netlink: 'syz.0.674': attribute type 4 has an invalid length. [ 164.659041][ T8533] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 164.694848][ T8538] netlink: 'syz.0.674': attribute type 4 has an invalid length. [ 164.824066][ T8542] netlink: zone id is out of range [ 164.829300][ T8542] netlink: zone id is out of range [ 164.848179][ T8542] netlink: zone id is out of range [ 164.857774][ T8542] netlink: zone id is out of range [ 164.865279][ T8542] netlink: zone id is out of range [ 164.870641][ T8542] netlink: zone id is out of range [ 164.877080][ T8542] netlink: zone id is out of range [ 164.883388][ T8542] netlink: zone id is out of range [ 164.888802][ T8542] netlink: zone id is out of range [ 164.896563][ T8542] netlink: zone id is out of range [ 165.458503][ T8574] lo speed is unknown, defaulting to 1000 [ 166.200491][ T8600] netlink: 'syz.0.684': attribute type 1 has an invalid length. [ 166.373098][ T8600] bond2: entered promiscuous mode [ 166.386028][ T8600] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.414992][ T8593] lo speed is unknown, defaulting to 1000 [ 166.452902][ T8574] wg1 speed is unknown, defaulting to 1000 [ 166.484394][ T8574] wg0 speed is unknown, defaulting to 1000 [ 166.665152][ T43] IPVS: starting estimator thread 0... [ 166.773654][ T8616] IPVS: using max 24 ests per chain, 57600 per kthread [ 166.846647][ T8620] syzkaller1: entered promiscuous mode [ 166.859091][ T8620] syzkaller1: entered allmulticast mode [ 167.165969][ T8593] wg1 speed is unknown, defaulting to 1000 [ 167.213092][ T8593] wg0 speed is unknown, defaulting to 1000 [ 167.368116][ T8640] tipc: Enabling of bearer rejected, failed to enable media [ 167.466338][ T8640] ipvlan2: entered promiscuous mode [ 167.475785][ T8640] bridge0: port 3(ipvlan2) entered blocking state [ 167.482534][ T8640] bridge0: port 3(ipvlan2) entered disabled state [ 167.489621][ T8640] ipvlan2: entered allmulticast mode [ 167.495691][ T8640] bridge0: entered allmulticast mode [ 167.504364][ T8640] ipvlan2: left allmulticast mode [ 167.509491][ T8640] bridge0: left allmulticast mode [ 168.067809][ T8658] block nbd0: server does not support multiple connections per device. [ 168.099036][ T8658] block nbd0: shutting down sockets [ 168.299990][ T8663] netlink: 'syz.1.706': attribute type 1 has an invalid length. [ 168.732148][ T8676] __nla_validate_parse: 9 callbacks suppressed [ 168.732168][ T8676] netlink: 28 bytes leftover after parsing attributes in process `syz.1.710'. [ 168.808889][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.711'. [ 168.829094][ T8680] netlink: 20 bytes leftover after parsing attributes in process `syz.2.711'. [ 169.009599][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 169.019329][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 169.063064][ T8686] erspan0: entered promiscuous mode [ 169.072799][ T8686] macvtap1: entered promiscuous mode [ 169.084385][ T8686] macvtap1: entered allmulticast mode [ 169.094633][ T8686] erspan0: entered allmulticast mode [ 169.115110][ T8687] macvtap1: left promiscuous mode [ 169.120665][ T8687] macvtap1: left allmulticast mode [ 169.128134][ T8687] erspan0: left allmulticast mode [ 169.301834][ T8697] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 169.350120][ T8699] bridge_slave_0: left allmulticast mode [ 169.356336][ T8699] bridge_slave_0: left promiscuous mode [ 169.362202][ T8699] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.386113][ T8699] bridge_slave_1: left allmulticast mode [ 169.392030][ T8699] bridge_slave_1: left promiscuous mode [ 169.416622][ T8699] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.442827][ T8699] bond0: (slave bond_slave_0): Releasing backup interface [ 169.483821][ T8699] bond0: (slave bond_slave_1): Releasing backup interface [ 169.508085][ T8699] team0: Port device team_slave_0 removed [ 169.549247][ T8699] team0: Port device team_slave_1 removed [ 169.578813][ T8699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.601314][ T8699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.631025][ T8699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.643863][ T8699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.682146][ T8699] veth1_vlan: left allmulticast mode [ 169.710578][ T8699] team0: Port device macvlan0 removed [ 169.718316][ T8716] netlink: 'syz.3.720': attribute type 21 has an invalid length. [ 169.735852][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.720'. [ 169.749197][ T8699] bond2: (slave geneve2): Releasing backup interface [ 169.781348][ T8699] bond3: (slave gretap1): Releasing active interface [ 169.867604][ T36] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 169.889085][ T36] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 169.908524][ T36] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 169.918094][ T36] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 169.979241][ T8726] tipc: Enabled bearer , priority 0 [ 169.991037][ T8726] syzkaller0: entered promiscuous mode [ 169.997811][ T8726] syzkaller0: entered allmulticast mode [ 170.048325][ T8726] tipc: Resetting bearer [ 170.052587][ T8728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.724'. [ 170.066506][ T8725] tipc: Resetting bearer [ 170.092469][ T8725] tipc: Disabling bearer [ 170.252329][ T8734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.726'. [ 170.284622][ T8736] netlink: 24 bytes leftover after parsing attributes in process `syz.1.726'. [ 170.301506][ T8734] netlink: 60 bytes leftover after parsing attributes in process `syz.1.726'. [ 171.582898][ T8786] sctp: [Deprecated]: syz.0.735 (pid 8786) Use of int in max_burst socket option deprecated. [ 171.582898][ T8786] Use struct sctp_assoc_value instead [ 173.114803][ T8813] team0: Port device team_slave_0 removed [ 173.281281][ T8835] netlink: 'syz.1.749': attribute type 12 has an invalid length. [ 173.323555][ T8818] lo speed is unknown, defaulting to 1000 [ 173.890618][ T8875] tipc: Enabled bearer , priority 0 [ 173.932403][ T8875] syzkaller0: entered promiscuous mode [ 173.953438][ T8875] syzkaller0: entered allmulticast mode [ 173.986047][ T8878] tipc: Enabled bearer , priority 0 [ 174.948660][ T8886] tipc: Resetting bearer [ 174.964240][ T8818] wg1 speed is unknown, defaulting to 1000 [ 174.970938][ T8866] tipc: Resetting bearer [ 175.113860][ T5947] tipc: Node number set to 4186082461 [ 175.143457][ T5947] tipc: Node number set to 3623085579 [ 175.565479][ T8866] tipc: Disabling bearer [ 175.924550][ T8818] wg0 speed is unknown, defaulting to 1000 [ 175.934384][ T8909] veth1_to_batadv: entered promiscuous mode [ 176.560648][ T8942] netlink: 'syz.3.767': attribute type 1 has an invalid length. [ 176.809474][ T8953] tipc: Enabled bearer , priority 0 [ 176.880968][ T8957] netlink: 'syz.3.774': attribute type 42 has an invalid length. [ 176.901984][ T8953] syzkaller0: entered promiscuous mode [ 176.908118][ T8953] syzkaller0: entered allmulticast mode [ 176.948574][ T8953] tipc: Resetting bearer [ 176.977045][ T8950] tipc: Resetting bearer [ 177.066864][ T8950] tipc: Disabling bearer [ 177.103801][ T8960] tipc: Enabled bearer , priority 0 [ 177.135620][ T8961] syzkaller0: entered promiscuous mode [ 177.141244][ T8961] syzkaller0: entered allmulticast mode [ 177.286651][ T8960] tipc: Resetting bearer [ 177.286929][ T8970] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 177.319733][ T8974] __nla_validate_parse: 3 callbacks suppressed [ 177.319754][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.777'. [ 177.511544][ T8980] netlink: 24 bytes leftover after parsing attributes in process `syz.3.780'. [ 177.588349][ T8958] tipc: Resetting bearer [ 177.624080][ T8958] tipc: Disabling bearer [ 177.834017][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.782'. [ 177.844368][ T8991] netlink: 20 bytes leftover after parsing attributes in process `syz.3.782'. [ 177.962356][ T6730] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.975069][ T6730] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.996418][ T6730] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.006646][ T6730] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.416461][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 180.150151][ T9028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.792'. [ 180.172939][ T9028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.792'. [ 180.268837][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.793'. [ 180.429244][ T9033] net_ratelimit: 15 callbacks suppressed [ 180.429268][ T9033] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 180.462699][ T43] IPVS: starting estimator thread 0... [ 180.560362][ T9043] IPVS: using max 31 ests per chain, 74400 per kthread [ 180.625843][ T9044] netlink: 44 bytes leftover after parsing attributes in process `syz.2.795'. [ 180.892755][ T9062] netlink: 830 bytes leftover after parsing attributes in process `syz.3.801'. [ 180.937727][ T9066] netlink: 40 bytes leftover after parsing attributes in process `syz.2.802'. [ 181.354236][ T9078] netlink: zone id is out of range [ 181.363048][ T9078] netlink: zone id is out of range [ 181.374798][ T9078] netlink: zone id is out of range [ 181.380569][ T9078] netlink: get zone limit has 8 unknown bytes [ 181.393433][ T9088] lo speed is unknown, defaulting to 1000 [ 181.878497][ T9105] netlink: 'syz.1.814': attribute type 18 has an invalid length. [ 182.183096][ T9120] tipc: Enabling of bearer rejected, failed to enable media [ 182.252894][ T9120] lo speed is unknown, defaulting to 1000 [ 182.259075][ T9088] wg1 speed is unknown, defaulting to 1000 [ 182.277408][ T9088] wg0 speed is unknown, defaulting to 1000 [ 182.339139][ T9131] netlink: 'syz.1.819': attribute type 16 has an invalid length. [ 182.353385][ T9131] netlink: 'syz.1.819': attribute type 27 has an invalid length. [ 182.395062][ T9132] netlink: 'syz.0.823': attribute type 72 has an invalid length. [ 182.402920][ T9132] __nla_validate_parse: 14 callbacks suppressed [ 182.402940][ T9132] netlink: 40 bytes leftover after parsing attributes in process `syz.0.823'. [ 183.297406][ T9131] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 183.341165][ T9120] wg1 speed is unknown, defaulting to 1000 [ 183.371480][ T6730] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.380511][ T6730] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.406906][ T9120] wg0 speed is unknown, defaulting to 1000 [ 183.429701][ T6730] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.461813][ T6730] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.886072][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 211.888114][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 211.893091][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 288.683507][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 293.478530][ T9167] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.512930][ T9167] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.535502][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.826'. [ 293.609743][ T9166] lo speed is unknown, defaulting to 1000 [ 293.637642][ T9167] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.693425][ T9167] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.798730][ T9167] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.817014][ T9167] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.879473][ T9187] syzkaller1: entered allmulticast mode [ 293.911708][ T9167] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.925866][ T9167] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.944306][ T9187] netlink: 'syz.0.831': attribute type 6 has an invalid length. [ 293.970514][ T9187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.831'. [ 294.019516][ T59] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.033058][ T59] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.052980][ T59] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.078673][ T59] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.101006][ T9166] wg1 speed is unknown, defaulting to 1000 [ 294.128893][ T9166] wg0 speed is unknown, defaulting to 1000 [ 294.171138][ T6728] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.190208][ T6728] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.291720][ T6728] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.327660][ T6728] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.369590][ T59] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.393855][ T59] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.442382][ T59] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.461123][ T59] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.614010][ T9203] netlink: 40 bytes leftover after parsing attributes in process `syz.3.836'. [ 294.839829][ T9208] netlink: 'syz.0.837': attribute type 2 has an invalid length. [ 294.932595][ T9214] netlink: 'syz.3.838': attribute type 21 has an invalid length. [ 295.030506][ T9214] netlink: 156 bytes leftover after parsing attributes in process `syz.3.838'. [ 295.370306][ T9229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.840'. [ 295.427929][ T9231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.841'. [ 295.543550][ T9233] netlink: 16 bytes leftover after parsing attributes in process `syz.1.841'. [ 295.554385][ T9233] netlink: 16 bytes leftover after parsing attributes in process `syz.1.841'. [ 295.566071][ T9233] netlink: 5 bytes leftover after parsing attributes in process `syz.1.841'. [ 295.580899][ T9231] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.841'. [ 295.875094][ T9236] 8021q: adding VLAN 0 to HW filter on device bond2 [ 296.509989][ T9283] pimreg: entered allmulticast mode [ 297.489742][ T9319] batadv0: entered promiscuous mode [ 297.753790][ T9331] netlink: 'syz.1.866': attribute type 5 has an invalid length. [ 297.771745][ T9331] netlink: 'syz.1.866': attribute type 7 has an invalid length. [ 297.778647][ T9333] sctp: [Deprecated]: syz.2.868 (pid 9333) Use of int in max_burst socket option. [ 297.778647][ T9333] Use struct sctp_assoc_value instead [ 297.836988][ T9331] : entered promiscuous mode [ 298.272449][ T9342] lo speed is unknown, defaulting to 1000 [ 298.419683][ T9340] netlink: 'syz.0.870': attribute type 3 has an invalid length. [ 299.203117][ T9342] wg1 speed is unknown, defaulting to 1000 [ 299.211523][ T9342] wg0 speed is unknown, defaulting to 1000 [ 299.226922][ T9357] tipc: Enabled bearer , priority 0 [ 299.258773][ T9351] tipc: Resetting bearer [ 300.858316][ T9351] tipc: Disabling bearer [ 301.021382][ T1209] IPVS: starting estimator thread 0... [ 301.046613][ T9375] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 301.116499][ T9376] IPVS: using max 26 ests per chain, 62400 per kthread [ 301.371713][ T9397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.456127][ T9393] vlan2: entered promiscuous mode [ 301.461466][ T9393] vlan2: entered allmulticast mode [ 301.477568][ T9393] hsr_slave_1: entered allmulticast mode [ 301.594185][ T9401] __nla_validate_parse: 8 callbacks suppressed [ 301.594207][ T9401] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.886'. [ 301.650246][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.887'. [ 302.024789][ T9428] netlink: 48 bytes leftover after parsing attributes in process `syz.1.892'. [ 302.903229][ T9454] lo speed is unknown, defaulting to 1000 [ 303.037070][ T9464] delete_channel: no stack [ 303.131513][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.907'. [ 303.234735][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.907'. [ 303.527906][ T9497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.910'. [ 303.754237][ T9505] 8021q: VLANs not supported on vxcan1 [ 303.893886][ T9499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.959405][ T9454] wg1 speed is unknown, defaulting to 1000 [ 303.965693][ T9467] lo speed is unknown, defaulting to 1000 [ 303.979054][ T9454] wg0 speed is unknown, defaulting to 1000 [ 304.466923][ T9521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.915'. [ 304.516311][ T9521] bond0: entered promiscuous mode [ 304.519401][ T9523] netlink: 28 bytes leftover after parsing attributes in process `syz.4.916'. [ 304.543624][ T9521] bond_slave_0: entered promiscuous mode [ 304.555307][ T9521] bond_slave_1: entered promiscuous mode [ 304.593580][ T9521] bond0: left promiscuous mode [ 304.598531][ T9521] bond_slave_0: left promiscuous mode [ 304.606023][ T9521] bond_slave_1: left promiscuous mode [ 304.929632][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.919'. [ 304.931734][ T9536] netlink: 72 bytes leftover after parsing attributes in process `syz.2.920'. [ 304.981537][ T9540] IPv6: Can't replace route, no match found [ 305.425740][ T9467] wg1 speed is unknown, defaulting to 1000 [ 305.474476][ T9467] wg0 speed is unknown, defaulting to 1000 [ 306.262735][ T9603] syzkaller1: entered promiscuous mode [ 306.279391][ T9603] syzkaller1: entered allmulticast mode [ 306.554606][ T9607] lo speed is unknown, defaulting to 1000 [ 307.021210][ T9607] wg1 speed is unknown, defaulting to 1000 [ 307.078306][ T9613] tipc: Enabled bearer , priority 0 [ 307.120170][ T9607] wg0 speed is unknown, defaulting to 1000 [ 307.122424][ T9613] syzkaller0: entered promiscuous mode [ 307.141789][ T9624] __nla_validate_parse: 10 callbacks suppressed [ 307.141810][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.940'. [ 307.163963][ T9613] syzkaller0: entered allmulticast mode [ 307.194922][ T9613] tipc: Resetting bearer [ 307.488201][ T9612] tipc: Resetting bearer [ 307.521488][ T9612] tipc: Disabling bearer [ 307.783086][ T9652] netlink: 224 bytes leftover after parsing attributes in process `syz.1.947'. [ 307.897147][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'. [ 308.010586][ T9653] bridge: RTM_NEWNEIGH with invalid ether address [ 308.795797][ T9671] syzkaller1: entered promiscuous mode [ 308.801775][ T9671] syzkaller1: entered allmulticast mode [ 309.466104][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.958'. [ 309.747531][ T9701] netlink: 'syz.4.961': attribute type 1 has an invalid length. [ 310.184057][ T9702] bond1: entered promiscuous mode [ 310.199951][ T9702] bond1: entered allmulticast mode [ 310.206471][ T9702] 8021q: adding VLAN 0 to HW filter on device bond1 [ 310.360485][ T9701] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.368478][ T9701] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.524207][ T9701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.546061][ T9701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.705667][ T9701] dummy0: left allmulticast mode [ 310.769823][ T9729] netem: change failed [ 310.815933][ T6726] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.836374][ T6726] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.850348][ T6726] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.867758][ T6726] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.953049][ T9734] netlink: 28 bytes leftover after parsing attributes in process `syz.1.969'. [ 311.000561][ T9734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.969'. [ 311.021854][ T9739] netlink: 24 bytes leftover after parsing attributes in process `syz.3.972'. [ 311.057516][ T9734] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.969'. [ 311.102170][ T9747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.974'. [ 311.208067][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.975'. [ 312.601435][ T9806] tipc: Enabling of bearer rejected, already enabled [ 312.646943][ T9808] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 312.682265][ T9808] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 312.772405][ T9806] tipc: Resetting bearer [ 312.779104][ T1209] IPVS: starting estimator thread 0... [ 312.893742][ T9811] IPVS: using max 31 ests per chain, 74400 per kthread [ 312.941013][ T9823] __nla_validate_parse: 3 callbacks suppressed [ 312.941033][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.991'. [ 312.963116][ T9823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.991'. [ 312.972233][ T9823] netlink: 'syz.0.991': attribute type 11 has an invalid length. [ 313.015626][ T9825] tipc: Enabling of bearer rejected, media not registered [ 313.127252][ T9836] macvtap0: refused to change device tx_queue_len [ 313.163489][ T9836] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 313.246508][ T9845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.451511][ T9851] netlink: 'syz.4.1001': attribute type 13 has an invalid length. [ 313.471148][ T30] audit: type=1804 audit(1754464696.868:3): pid=9856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1002" name="/newroot/200/cgroup.controllers" dev="tmpfs" ino=1033 res=1 errno=0 [ 313.506408][ T9851] netlink: 'syz.4.1001': attribute type 17 has an invalid length. [ 313.506494][ T9857] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1000'. [ 313.526191][ T30] audit: type=1800 audit(1754464696.868:4): pid=9856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1002" name="cgroup.controllers" dev="tmpfs" ino=1033 res=0 errno=0 [ 313.548113][ T30] audit: type=1800 audit(1754464696.868:5): pid=9856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1002" name="cgroup.controllers" dev="tmpfs" ino=1033 res=0 errno=0 [ 313.578832][ T9853] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1001'. [ 313.852538][ T9851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.861664][ T9851] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.872893][ T9851] dummy0: left promiscuous mode [ 313.881652][ T9851] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 313.939303][ T9852] lo speed is unknown, defaulting to 1000 [ 314.015482][ T5977] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 314.052088][ T5977] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 314.082081][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1006'. [ 314.085146][ T5977] bond0: now running without any active interface! [ 314.101659][ T9878] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1006'. [ 314.126817][ T9876] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1005'. [ 314.158151][ T9882] netlink: 'syz.0.1007': attribute type 9 has an invalid length. [ 314.183312][ T9882] netlink: 'syz.0.1007': attribute type 9 has an invalid length. [ 314.246722][ T9884] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1009'. [ 314.447458][ T9852] wg1 speed is unknown, defaulting to 1000 [ 314.448346][ T9871] lo speed is unknown, defaulting to 1000 [ 314.455297][ T9852] wg0 speed is unknown, defaulting to 1000 [ 314.600850][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1011'. [ 315.141004][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1015'. [ 315.194337][ T9869] lo speed is unknown, defaulting to 1000 [ 315.201991][ T9871] wg1 speed is unknown, defaulting to 1000 [ 315.297102][ T9871] wg0 speed is unknown, defaulting to 1000 [ 316.082345][ T9930] openvswitch: netlink: Message has 4 unknown bytes. [ 316.113008][ T9930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.171834][ T9869] wg1 speed is unknown, defaulting to 1000 [ 316.232775][ T9869] wg0 speed is unknown, defaulting to 1000 [ 316.322101][ T9935] netlink: 'syz.0.1022': attribute type 9 has an invalid length. [ 317.484531][ T9961] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20003 [ 317.699482][ T9958] lo speed is unknown, defaulting to 1000 [ 318.805133][ T9958] wg1 speed is unknown, defaulting to 1000 [ 318.858543][ T9958] wg0 speed is unknown, defaulting to 1000 [ 318.890875][ T9983] netlink: 'syz.4.1033': attribute type 10 has an invalid length. [ 318.899577][ T9983] veth0_vlan: left promiscuous mode [ 318.910219][ T9983] veth0_vlan: entered promiscuous mode [ 318.970541][ T9983] team0: Device veth0_vlan failed to register rx_handler [ 319.313551][ T9987] tipc: Enabled bearer , priority 0 [ 319.336563][ T9989] netlink: 'syz.4.1035': attribute type 10 has an invalid length. [ 319.343413][ T9987] syzkaller0: entered promiscuous mode [ 319.349901][ T9987] syzkaller0: entered allmulticast mode [ 319.388664][ T9991] netlink: 'syz.4.1035': attribute type 10 has an invalid length. [ 319.396320][ T9989] team0: Device dummy0 failed to register rx_handler [ 319.450859][ T9987] tipc: Resetting bearer [ 319.511690][ T9986] tipc: Resetting bearer [ 319.552047][ T9986] tipc: Disabling bearer [ 320.237291][T10011] netlink: 'syz.1.1041': attribute type 1 has an invalid length. [ 320.267386][T10011] __nla_validate_parse: 1 callbacks suppressed [ 320.267410][T10011] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1041'. [ 320.403065][T10022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1045'. [ 320.950697][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1043'. [ 321.421418][T10051] FAULT_INJECTION: forcing a failure. [ 321.421418][T10051] name failslab, interval 1, probability 0, space 0, times 0 [ 321.503222][T10051] CPU: 1 UID: 0 PID: 10051 Comm: syz.2.1053 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 321.503254][T10051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 321.503266][T10051] Call Trace: [ 321.503276][T10051] [ 321.503284][T10051] dump_stack_lvl+0x189/0x250 [ 321.503310][T10051] ? __pfx____ratelimit+0x10/0x10 [ 321.503338][T10051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.503358][T10051] ? __pfx__printk+0x10/0x10 [ 321.503388][T10051] ? __pfx___might_resched+0x10/0x10 [ 321.503424][T10051] should_fail_ex+0x414/0x560 [ 321.503460][T10051] should_failslab+0xa8/0x100 [ 321.503482][T10051] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 321.503510][T10051] ? __alloc_skb+0x112/0x2d0 [ 321.503543][T10051] __alloc_skb+0x112/0x2d0 [ 321.503576][T10051] netlink_sendmsg+0x5c6/0xb30 [ 321.503615][T10051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.503648][T10051] ? aa_sock_msg_perm+0x94/0x160 [ 321.503676][T10051] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 321.503697][T10051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.503726][T10051] __sock_sendmsg+0x219/0x270 [ 321.503757][T10051] ____sys_sendmsg+0x505/0x830 [ 321.503785][T10051] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.503817][T10051] ? import_iovec+0x74/0xa0 [ 321.503848][T10051] ___sys_sendmsg+0x21f/0x2a0 [ 321.503873][T10051] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.503936][T10051] ? __fget_files+0x2a/0x420 [ 321.503955][T10051] ? __fget_files+0x3a0/0x420 [ 321.503987][T10051] __x64_sys_sendmsg+0x19b/0x260 [ 321.504011][T10051] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 321.504043][T10051] ? __pfx_ksys_write+0x10/0x10 [ 321.504076][T10051] ? do_syscall_64+0xbe/0x3b0 [ 321.504108][T10051] do_syscall_64+0xfa/0x3b0 [ 321.504134][T10051] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.504171][T10051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.504190][T10051] ? clear_bhb_loop+0x60/0xb0 [ 321.504215][T10051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.504233][T10051] RIP: 0033:0x7fd18138eb69 [ 321.504251][T10051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.504268][T10051] RSP: 002b:00007fd182191038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.504290][T10051] RAX: ffffffffffffffda RBX: 00007fd1815b5fa0 RCX: 00007fd18138eb69 [ 321.504304][T10051] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000003 [ 321.504317][T10051] RBP: 00007fd182191090 R08: 0000000000000000 R09: 0000000000000000 [ 321.504330][T10051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.504341][T10051] R13: 0000000000000000 R14: 00007fd1815b5fa0 R15: 00007ffdae275c58 [ 321.504375][T10051] [ 321.862804][T10059] bridge4: entered allmulticast mode [ 322.049101][T10067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1058'. [ 322.068875][ T6734] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 322.071485][T10067] netlink: 62 bytes leftover after parsing attributes in process `syz.0.1058'. [ 322.091605][ T6734] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 322.127199][T10070] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1059'. [ 322.130649][ T6734] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 322.136523][T10070] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1059'. [ 322.154185][T10070] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1059'. [ 322.166561][ T6734] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 322.191917][T10070] openvswitch: netlink: IP tunnel dst address not specified [ 322.201581][T10073] openvswitch: netlink: IP tunnel dst address not specified [ 322.202083][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1060'. [ 322.213975][T10072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1059'. [ 322.397819][T10081] lo speed is unknown, defaulting to 1000 [ 322.461828][T10085] netlink: 'syz.0.1061': attribute type 16 has an invalid length. [ 322.470254][T10085] netlink: 'syz.0.1061': attribute type 17 has an invalid length. [ 322.544932][T10088] netlink: 'syz.0.1061': attribute type 7 has an invalid length. [ 322.545760][T10085] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.579965][T10085] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.581194][T10088] netlink: 'syz.0.1061': attribute type 8 has an invalid length. [ 322.797414][T10093] veth0: entered promiscuous mode [ 322.812610][T10093] gtp0: entered promiscuous mode [ 322.838808][T10093] vxcan1: Master is either lo or non-ether device [ 322.857153][T10091] veth0: left promiscuous mode [ 322.984519][T10081] wg1 speed is unknown, defaulting to 1000 [ 322.992853][T10081] wg0 speed is unknown, defaulting to 1000 [ 323.076943][T10099] tipc: Enabling of bearer rejected, already enabled [ 323.352537][T10109] vti0: entered promiscuous mode [ 323.702022][T10127] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 323.784362][T10135] FAULT_INJECTION: forcing a failure. [ 323.784362][T10135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.805552][T10135] CPU: 1 UID: 0 PID: 10135 Comm: syz.1.1079 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 323.805582][T10135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 323.805594][T10135] Call Trace: [ 323.805602][T10135] [ 323.805610][T10135] dump_stack_lvl+0x189/0x250 [ 323.805637][T10135] ? __pfx____ratelimit+0x10/0x10 [ 323.805664][T10135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.805685][T10135] ? __pfx__printk+0x10/0x10 [ 323.805709][T10135] ? __might_fault+0xb0/0x130 [ 323.805751][T10135] should_fail_ex+0x414/0x560 [ 323.805787][T10135] _copy_from_iter+0x1db/0x16f0 [ 323.805828][T10135] ? rcu_is_watching+0x15/0xb0 [ 323.805858][T10135] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 323.805890][T10135] ? __pfx__copy_from_iter+0x10/0x10 [ 323.805916][T10135] ? __build_skb_around+0x257/0x3e0 [ 323.805950][T10135] ? netlink_sendmsg+0x642/0xb30 [ 323.805977][T10135] ? skb_put+0x11b/0x210 [ 323.806000][T10135] netlink_sendmsg+0x6b2/0xb30 [ 323.806040][T10135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.806073][T10135] ? aa_sock_msg_perm+0x94/0x160 [ 323.806101][T10135] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 323.806123][T10135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.806153][T10135] __sock_sendmsg+0x219/0x270 [ 323.806182][T10135] ____sys_sendmsg+0x505/0x830 [ 323.806210][T10135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.806242][T10135] ? import_iovec+0x74/0xa0 [ 323.806272][T10135] ___sys_sendmsg+0x21f/0x2a0 [ 323.806296][T10135] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.806360][T10135] ? __fget_files+0x2a/0x420 [ 323.806379][T10135] ? __fget_files+0x3a0/0x420 [ 323.806410][T10135] __x64_sys_sendmsg+0x19b/0x260 [ 323.806435][T10135] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 323.806467][T10135] ? __pfx_ksys_write+0x10/0x10 [ 323.806491][T10135] ? rcu_is_watching+0x15/0xb0 [ 323.806526][T10135] ? do_syscall_64+0xbe/0x3b0 [ 323.806558][T10135] do_syscall_64+0xfa/0x3b0 [ 323.806584][T10135] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.806610][T10135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.806630][T10135] ? clear_bhb_loop+0x60/0xb0 [ 323.806654][T10135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.806672][T10135] RIP: 0033:0x7f9fe1b8eb69 [ 323.806690][T10135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.806706][T10135] RSP: 002b:00007f9fdf9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.806728][T10135] RAX: ffffffffffffffda RBX: 00007f9fe1db5fa0 RCX: 00007f9fe1b8eb69 [ 323.806743][T10135] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000003 [ 323.806756][T10135] RBP: 00007f9fdf9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 323.806768][T10135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.806781][T10135] R13: 0000000000000000 R14: 00007f9fe1db5fa0 R15: 00007ffe6bef6a78 [ 323.806823][T10135] [ 324.243082][T10139] tipc: Enabling of bearer rejected, already enabled [ 324.839093][T10161] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 325.009018][T10171] FAULT_INJECTION: forcing a failure. [ 325.009018][T10171] name failslab, interval 1, probability 0, space 0, times 0 [ 325.023540][T10171] CPU: 0 UID: 0 PID: 10171 Comm: syz.1.1094 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 325.023570][T10171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 325.023581][T10171] Call Trace: [ 325.023590][T10171] [ 325.023598][T10171] dump_stack_lvl+0x189/0x250 [ 325.023626][T10171] ? __pfx____ratelimit+0x10/0x10 [ 325.023655][T10171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.023675][T10171] ? __pfx__printk+0x10/0x10 [ 325.023703][T10171] ? __pfx___might_resched+0x10/0x10 [ 325.023733][T10171] ? fs_reclaim_acquire+0x7d/0x100 [ 325.023761][T10171] should_fail_ex+0x414/0x560 [ 325.023799][T10171] should_failslab+0xa8/0x100 [ 325.023819][T10171] __kmalloc_noprof+0xcb/0x4f0 [ 325.023846][T10171] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 325.023877][T10171] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 325.023909][T10171] genl_family_rcv_msg_doit+0xb8/0x300 [ 325.023939][T10171] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 325.023964][T10171] ? rcu_is_watching+0x15/0xb0 [ 325.023996][T10171] ? apparmor_capable+0x137/0x1b0 [ 325.024017][T10171] ? bpf_lsm_capable+0x9/0x20 [ 325.024043][T10171] ? security_capable+0x7e/0x2e0 [ 325.024090][T10171] genl_rcv_msg+0x60e/0x790 [ 325.024122][T10171] ? __pfx_genl_rcv_msg+0x10/0x10 [ 325.024142][T10171] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 325.024162][T10171] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 325.024185][T10171] ? __pfx_nl80211_post_doit+0x10/0x10 [ 325.024226][T10171] netlink_rcv_skb+0x205/0x470 [ 325.024252][T10171] ? __lock_acquire+0xab9/0xd20 [ 325.024279][T10171] ? __pfx_genl_rcv_msg+0x10/0x10 [ 325.024304][T10171] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 325.024355][T10171] ? down_read+0x1ad/0x2e0 [ 325.024379][T10171] genl_rcv+0x28/0x40 [ 325.024398][T10171] netlink_unicast+0x82c/0x9e0 [ 325.024432][T10171] ? __pfx_netlink_unicast+0x10/0x10 [ 325.024459][T10171] ? netlink_sendmsg+0x642/0xb30 [ 325.024482][T10171] ? skb_put+0x11b/0x210 [ 325.024501][T10171] netlink_sendmsg+0x805/0xb30 [ 325.024534][T10171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.024562][T10171] ? aa_sock_msg_perm+0x94/0x160 [ 325.024584][T10171] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 325.024602][T10171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.024626][T10171] __sock_sendmsg+0x219/0x270 [ 325.024650][T10171] ____sys_sendmsg+0x505/0x830 [ 325.024672][T10171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 325.024698][T10171] ? import_iovec+0x74/0xa0 [ 325.024724][T10171] ___sys_sendmsg+0x21f/0x2a0 [ 325.024743][T10171] ? __pfx____sys_sendmsg+0x10/0x10 [ 325.024820][T10171] ? __fget_files+0x2a/0x420 [ 325.024836][T10171] ? __fget_files+0x3a0/0x420 [ 325.024861][T10171] __x64_sys_sendmsg+0x19b/0x260 [ 325.024881][T10171] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 325.024911][T10171] ? rcu_is_watching+0x15/0xb0 [ 325.024935][T10171] ? trace_sys_enter+0x25/0x100 [ 325.024963][T10171] do_syscall_64+0xfa/0x3b0 [ 325.024987][T10171] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.025011][T10171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.025027][T10171] ? clear_bhb_loop+0x60/0xb0 [ 325.025046][T10171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.025061][T10171] RIP: 0033:0x7f9fe1b8eb69 [ 325.025084][T10171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.025097][T10171] RSP: 002b:00007f9fdf9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.025116][T10171] RAX: ffffffffffffffda RBX: 00007f9fe1db5fa0 RCX: 00007f9fe1b8eb69 [ 325.025127][T10171] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000003 [ 325.025137][T10171] RBP: 00007f9fdf9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 325.025147][T10171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.025156][T10171] R13: 0000000000000000 R14: 00007f9fe1db5fa0 R15: 00007ffe6bef6a78 [ 325.025183][T10171] [ 325.723381][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 325.892721][T10200] batadv1: entered promiscuous mode [ 325.899587][T10202] __nla_validate_parse: 6 callbacks suppressed [ 325.899608][T10202] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1104'. [ 325.972026][T10207] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1104'. [ 326.207455][T10210] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 326.218822][T10223] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1108'. [ 326.238028][T10217] lo speed is unknown, defaulting to 1000 [ 326.488474][T10230] netlink: 724 bytes leftover after parsing attributes in process `syz.4.1110'. [ 326.504946][T10230] netlink: 724 bytes leftover after parsing attributes in process `syz.4.1110'. [ 326.542273][T10227] netlink: 'syz.1.1109': attribute type 303 has an invalid length. [ 326.977840][T10217] wg1 speed is unknown, defaulting to 1000 [ 326.986212][T10217] wg0 speed is unknown, defaulting to 1000 [ 327.209813][T10264] tipc: Enabled bearer , priority 0 [ 327.249436][T10264] syzkaller0: entered promiscuous mode [ 327.256534][T10264] syzkaller0: entered allmulticast mode [ 327.319997][T10269] tipc: Resetting bearer [ 327.384269][T10261] tipc: Resetting bearer [ 327.444272][T10261] tipc: Disabling bearer [ 327.556373][T10277] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 327.610062][T10277] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 327.653197][T10280] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 327.787059][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1121'. [ 327.912122][T10296] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1124'. [ 327.929842][T10287] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 327.966970][T10293] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 327.975303][T10296] FAULT_INJECTION: forcing a failure. [ 327.975303][T10296] name failslab, interval 1, probability 0, space 0, times 0 [ 327.984334][T10293] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 327.995523][T10296] CPU: 0 UID: 0 PID: 10296 Comm: syz.4.1124 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 327.995551][T10296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 327.995563][T10296] Call Trace: [ 327.995571][T10296] [ 327.995578][T10296] dump_stack_lvl+0x189/0x250 [ 327.995605][T10296] ? __pfx____ratelimit+0x10/0x10 [ 327.995633][T10296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.995654][T10296] ? __pfx__printk+0x10/0x10 [ 327.995684][T10296] ? __pfx___might_resched+0x10/0x10 [ 327.995712][T10296] ? fs_reclaim_acquire+0x7d/0x100 [ 327.995739][T10296] should_fail_ex+0x414/0x560 [ 327.995774][T10296] should_failslab+0xa8/0x100 [ 327.995795][T10296] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 327.995825][T10296] ? __alloc_skb+0x112/0x2d0 [ 327.995859][T10296] __alloc_skb+0x112/0x2d0 [ 327.995891][T10296] netlink_ack+0x146/0xa50 [ 327.995916][T10296] ? __pfx_genl_rcv_msg+0x10/0x10 [ 327.995937][T10296] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 327.995958][T10296] ? __pfx_nl80211_post_doit+0x10/0x10 [ 327.995982][T10296] ? __asan_memcpy+0x40/0x70 [ 327.996006][T10296] ? __pfx_ref_tracker_free+0x10/0x10 [ 327.996037][T10296] netlink_rcv_skb+0x28c/0x470 [ 327.996062][T10296] ? __lock_acquire+0xab9/0xd20 [ 327.996114][T10296] ? __pfx_genl_rcv_msg+0x10/0x10 [ 327.996139][T10296] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 327.996193][T10296] ? down_read+0x1ad/0x2e0 [ 327.996214][T10296] genl_rcv+0x28/0x40 [ 327.996234][T10296] netlink_unicast+0x82c/0x9e0 [ 327.996272][T10296] ? __pfx_netlink_unicast+0x10/0x10 [ 327.996300][T10296] ? netlink_sendmsg+0x642/0xb30 [ 327.996325][T10296] ? skb_put+0x11b/0x210 [ 327.996348][T10296] netlink_sendmsg+0x805/0xb30 [ 327.996387][T10296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.996420][T10296] ? aa_sock_msg_perm+0x94/0x160 [ 327.996448][T10296] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 327.996470][T10296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.996501][T10296] __sock_sendmsg+0x219/0x270 [ 327.996537][T10296] ____sys_sendmsg+0x505/0x830 [ 327.996563][T10296] ? __pfx_____sys_sendmsg+0x10/0x10 [ 327.996594][T10296] ? import_iovec+0x74/0xa0 [ 327.996624][T10296] ___sys_sendmsg+0x21f/0x2a0 [ 327.996646][T10296] ? __pfx____sys_sendmsg+0x10/0x10 [ 327.996707][T10296] ? __fget_files+0x2a/0x420 [ 327.996724][T10296] ? __fget_files+0x3a0/0x420 [ 327.996755][T10296] __x64_sys_sendmsg+0x19b/0x260 [ 327.996778][T10296] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 327.996810][T10296] ? __pfx_ksys_write+0x10/0x10 [ 327.996833][T10296] ? rcu_is_watching+0x15/0xb0 [ 327.996867][T10296] ? do_syscall_64+0xbe/0x3b0 [ 327.996899][T10296] do_syscall_64+0xfa/0x3b0 [ 327.996924][T10296] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.996949][T10296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.996967][T10296] ? clear_bhb_loop+0x60/0xb0 [ 327.996991][T10296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.997008][T10296] RIP: 0033:0x7fb754d8eb69 [ 327.997026][T10296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.997042][T10296] RSP: 002b:00007fb755c31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.997063][T10296] RAX: ffffffffffffffda RBX: 00007fb754fb5fa0 RCX: 00007fb754d8eb69 [ 327.997088][T10296] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000003 [ 327.997100][T10296] RBP: 00007fb755c31090 R08: 0000000000000000 R09: 0000000000000000 [ 327.997111][T10296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.997122][T10296] R13: 0000000000000000 R14: 00007fb754fb5fa0 R15: 00007ffe442f8178 [ 327.997153][T10296] [ 328.444711][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1122'. [ 328.463631][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1122'. [ 328.672854][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1126'. [ 329.245664][T10340] bridge_slave_0: left allmulticast mode [ 329.251555][T10340] bridge_slave_0: left promiscuous mode [ 329.281528][T10340] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.328593][T10340] bridge_slave_1: left allmulticast mode [ 329.353767][T10340] bridge_slave_1: left promiscuous mode [ 329.376867][T10340] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.401962][T10340] bond0: (slave bond_slave_0): Releasing backup interface [ 329.432576][T10340] bond0: (slave bond_slave_1): Releasing backup interface [ 329.452473][T10340] team0: Port device team_slave_1 removed [ 329.466445][T10340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.476333][T10340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.523418][T10342] FAULT_INJECTION: forcing a failure. [ 329.523418][T10342] name failslab, interval 1, probability 0, space 0, times 0 [ 329.551579][T10342] CPU: 1 UID: 0 PID: 10342 Comm: syz.3.1136 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 329.551606][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 329.551616][T10342] Call Trace: [ 329.551623][T10342] [ 329.551631][T10342] dump_stack_lvl+0x189/0x250 [ 329.551654][T10342] ? __pfx____ratelimit+0x10/0x10 [ 329.551685][T10342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.551703][T10342] ? __pfx__printk+0x10/0x10 [ 329.551732][T10342] ? __pfx___might_resched+0x10/0x10 [ 329.551756][T10342] ? fs_reclaim_acquire+0x7d/0x100 [ 329.551780][T10342] should_fail_ex+0x414/0x560 [ 329.551823][T10342] should_failslab+0xa8/0x100 [ 329.551841][T10342] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 329.551867][T10342] ? __alloc_skb+0x112/0x2d0 [ 329.551899][T10342] __alloc_skb+0x112/0x2d0 [ 329.551930][T10342] nl80211_send_scan_start+0x2f/0x170 [ 329.551958][T10342] nl80211_trigger_scan+0x1a86/0x1ef0 [ 329.551999][T10342] genl_family_rcv_msg_doit+0x215/0x300 [ 329.552028][T10342] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 329.552064][T10342] ? bpf_lsm_capable+0x9/0x20 [ 329.552090][T10342] ? security_capable+0x7e/0x2e0 [ 329.552126][T10342] genl_rcv_msg+0x60e/0x790 [ 329.552156][T10342] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.552177][T10342] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 329.552196][T10342] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 329.552220][T10342] ? __pfx_nl80211_post_doit+0x10/0x10 [ 329.552243][T10342] ? __asan_memcpy+0x40/0x70 [ 329.552267][T10342] ? __pfx_ref_tracker_free+0x10/0x10 [ 329.552299][T10342] netlink_rcv_skb+0x205/0x470 [ 329.552326][T10342] ? __lock_acquire+0xab9/0xd20 [ 329.552352][T10342] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.552374][T10342] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 329.552421][T10342] ? down_read+0x1ad/0x2e0 [ 329.552441][T10342] genl_rcv+0x28/0x40 [ 329.552459][T10342] netlink_unicast+0x82c/0x9e0 [ 329.552495][T10342] ? __pfx_netlink_unicast+0x10/0x10 [ 329.552521][T10342] ? netlink_sendmsg+0x642/0xb30 [ 329.552545][T10342] ? skb_put+0x11b/0x210 [ 329.552567][T10342] netlink_sendmsg+0x805/0xb30 [ 329.552605][T10342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.552638][T10342] ? aa_sock_msg_perm+0x94/0x160 [ 329.552666][T10342] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 329.552686][T10342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.552715][T10342] __sock_sendmsg+0x219/0x270 [ 329.552746][T10342] ____sys_sendmsg+0x505/0x830 [ 329.552774][T10342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.552816][T10342] ? import_iovec+0x74/0xa0 [ 329.552848][T10342] ___sys_sendmsg+0x21f/0x2a0 [ 329.552873][T10342] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.552935][T10342] ? __fget_files+0x2a/0x420 [ 329.552952][T10342] ? __fget_files+0x3a0/0x420 [ 329.552985][T10342] __x64_sys_sendmsg+0x19b/0x260 [ 329.553008][T10342] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 329.553041][T10342] ? __pfx_ksys_write+0x10/0x10 [ 329.553064][T10342] ? rcu_is_watching+0x15/0xb0 [ 329.553099][T10342] ? do_syscall_64+0xbe/0x3b0 [ 329.553130][T10342] do_syscall_64+0xfa/0x3b0 [ 329.553156][T10342] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.553183][T10342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.553203][T10342] ? clear_bhb_loop+0x60/0xb0 [ 329.553227][T10342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.553247][T10342] RIP: 0033:0x7f52ebb8eb69 [ 329.553266][T10342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.553283][T10342] RSP: 002b:00007f52ecab0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.553305][T10342] RAX: ffffffffffffffda RBX: 00007f52ebdb5fa0 RCX: 00007f52ebb8eb69 [ 329.553320][T10342] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000003 [ 329.553332][T10342] RBP: 00007f52ecab0090 R08: 0000000000000000 R09: 0000000000000000 [ 329.553344][T10342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.553356][T10342] R13: 0000000000000000 R14: 00007f52ebdb5fa0 R15: 00007ffc9aaa9d38 [ 329.553391][T10342] [ 330.212114][T10366] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0 [ 330.239721][T10366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.459749][T10375] lo speed is unknown, defaulting to 1000 [ 330.916704][T10402] __nla_validate_parse: 43 callbacks suppressed [ 330.916726][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1150'. [ 331.050133][T10379] lo speed is unknown, defaulting to 1000 [ 331.071168][T10375] wg1 speed is unknown, defaulting to 1000 [ 331.079848][T10375] wg0 speed is unknown, defaulting to 1000 [ 331.494425][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1155'. [ 332.153704][T10444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1161'. [ 332.259823][T10405] lo speed is unknown, defaulting to 1000 [ 332.278323][T10448] netlink: 'syz.4.1161': attribute type 29 has an invalid length. [ 332.305528][T10448] netlink: 'syz.4.1161': attribute type 29 has an invalid length. [ 332.328082][T10448] netlink: 488 bytes leftover after parsing attributes in process `syz.4.1161'. [ 333.037455][T10405] wg1 speed is unknown, defaulting to 1000 [ 333.077506][T10379] wg1 speed is unknown, defaulting to 1000 [ 333.086650][T10379] wg0 speed is unknown, defaulting to 1000 [ 333.292553][T10467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.872327][T10405] wg0 speed is unknown, defaulting to 1000 [ 334.382863][T10466] rdma_rxe: rxe_newlink: failed to add lo [ 334.726107][T10475] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1168'. [ 335.437070][T10490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1172'. [ 336.197910][T10507] netlink: 'syz.0.1178': attribute type 3 has an invalid length. [ 336.534379][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1185'. [ 336.655843][T10526] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1186'. [ 336.725746][T10530] netlink: 'syz.0.1188': attribute type 1 has an invalid length. [ 336.770578][T10530] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1188'. [ 336.836864][T10536] bridge_slave_0: entered promiscuous mode [ 336.842877][T10536] bridge_slave_0: entered allmulticast mode [ 336.917729][T10538] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 336.969247][T10538] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 337.071069][T10549] macsec0: entered promiscuous mode [ 337.084086][T10549] macvlan1: entered promiscuous mode [ 337.102374][T10549] macsec0: entered allmulticast mode [ 337.108743][T10549] macvlan1: entered allmulticast mode [ 337.141647][T10549] macvlan1: left allmulticast mode [ 337.153700][T10549] macvlan1: left promiscuous mode [ 337.197483][ T9136] lo speed is unknown, defaulting to 1000 [ 337.251875][T10551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.276064][T10563] netlink: 'syz.3.1195': attribute type 1 has an invalid length. [ 337.277230][T10552] lo speed is unknown, defaulting to 1000 [ 337.284741][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1195'. [ 337.373431][ T9136] IPVS: starting estimator thread 0... [ 337.473388][T10568] IPVS: using max 25 ests per chain, 60000 per kthread [ 337.812494][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1203'. [ 337.847124][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1203'. [ 337.950701][T10593] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1205'. [ 337.982901][T10552] wg1 speed is unknown, defaulting to 1000 [ 337.999675][T10552] wg0 speed is unknown, defaulting to 1000 [ 338.622999][T10619] netlink: 'syz.3.1210': attribute type 10 has an invalid length. [ 338.695176][T10615] syzkaller1: entered promiscuous mode [ 338.700717][T10615] syzkaller1: entered allmulticast mode [ 338.956186][T10611] lo speed is unknown, defaulting to 1000 [ 339.381732][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1214'. [ 339.702397][T10641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1217'. [ 340.024159][T10651] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1221'. [ 340.060780][T10651] unsupported nlmsg_type 40 [ 340.415815][T10611] wg1 speed is unknown, defaulting to 1000 [ 340.517986][T10611] wg0 speed is unknown, defaulting to 1000 [ 340.678614][T10675] netlink: 'syz.4.1227': attribute type 8 has an invalid length. [ 342.184467][T10718] netlink: 'syz.4.1239': attribute type 8 has an invalid length. [ 342.304142][T10721] __nla_validate_parse: 1 callbacks suppressed [ 342.304163][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1240'. [ 342.346581][T10723] netlink: 'syz.1.1240': attribute type 1 has an invalid length. [ 342.864753][T10742] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 2, id = 0 [ 343.380969][T10766] lo speed is unknown, defaulting to 1000 [ 343.408829][T10770] netlink: 'syz.2.1254': attribute type 1 has an invalid length. [ 343.604344][T10776] bond4: (slave gretap2): making interface the new active one [ 343.624453][T10776] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 343.676251][T10770] vlan2: entered allmulticast mode [ 343.681653][T10770] bond4: entered allmulticast mode [ 343.690467][T10770] gretap2: entered allmulticast mode [ 343.698102][T10770] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 343.878628][T10775] syzkaller1: entered promiscuous mode [ 343.886462][T10775] syzkaller1: entered allmulticast mode [ 343.893709][T10790] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1256'. [ 343.896013][T10766] wg1 speed is unknown, defaulting to 1000 [ 343.903201][T10790] openvswitch: netlink: Flow key attr not present in new flow. [ 343.928424][T10766] wg0 speed is unknown, defaulting to 1000 [ 343.972438][T10794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1258'. [ 344.294205][T10800] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 344.310076][T10807] netlink: 'syz.3.1261': attribute type 1 has an invalid length. [ 344.317997][T10807] netlink: 'syz.3.1261': attribute type 4 has an invalid length. [ 344.355135][T10807] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.1261'. [ 344.490825][T10811] smc: net device bond0 applied user defined pnetid SYZ2 [ 344.871124][T10824] lo speed is unknown, defaulting to 1000 [ 344.876318][T10833] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1270'. [ 345.055148][T10839] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1271'. [ 345.134573][T10824] wg1 speed is unknown, defaulting to 1000 [ 345.148453][T10824] wg0 speed is unknown, defaulting to 1000 [ 345.932783][T10846] lo speed is unknown, defaulting to 1000 [ 345.991319][T10849] netlink: 83 bytes leftover after parsing attributes in process `syz.3.1274'. [ 346.142459][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1275'. [ 346.717879][T10844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.005769][T10846] wg1 speed is unknown, defaulting to 1000 [ 347.027119][T10846] wg0 speed is unknown, defaulting to 1000 [ 347.163474][T10841] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 347.497672][T10884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1284'. [ 347.555761][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1284'. [ 347.565330][T10886] netlink: 'syz.1.1285': attribute type 6 has an invalid length. [ 347.611183][T10886] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1285'. [ 347.828603][T10892] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1286'. [ 348.557285][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1291'. [ 348.898460][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1295'. [ 349.010337][T10930] lo speed is unknown, defaulting to 1000 [ 349.140251][T10942] veph0[virt_wifi: renamed from vlan0 [ 349.165481][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'. [ 349.195210][T10947] bridge_slave_1: left allmulticast mode [ 349.206770][T10947] bridge_slave_1: left promiscuous mode [ 349.223664][T10947] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.261129][T10947] bridge_slave_0: left allmulticast mode [ 349.272959][T10947] bridge_slave_0: left promiscuous mode [ 349.279156][T10947] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.565545][T10930] wg1 speed is unknown, defaulting to 1000 [ 349.586104][T10930] wg0 speed is unknown, defaulting to 1000 [ 349.861152][T10971] IPv6: sit1: Disabled Multicast RS [ 349.988357][T10973] veth7: entered promiscuous mode [ 350.139211][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1307'. [ 350.163712][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1307'. [ 350.468733][T10995] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1310'. [ 350.840357][T11020] netlink: 'syz.4.1314': attribute type 1 has an invalid length. [ 350.862454][T11018] netlink: 'syz.2.1315': attribute type 1 has an invalid length. [ 350.975863][T11020] 8021q: adding VLAN 0 to HW filter on device bond2 [ 351.102607][T10989] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 351.124528][T11022] bond2: (slave ip6gretap1): making interface the new active one [ 351.139773][T11022] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 351.259656][T11023] veth3: entered promiscuous mode [ 351.359044][T11038] !: renamed from dummy0 (while UP) [ 351.389326][T11031] IPVS: Scheduler module ip_vs_ not found [ 352.269554][T11052] lo speed is unknown, defaulting to 1000 [ 352.717328][T11093] tipc: Enabling of bearer rejected, failed to enable media [ 353.762491][T11052] wg1 speed is unknown, defaulting to 1000 [ 353.799715][T11052] wg0 speed is unknown, defaulting to 1000 [ 354.121104][T11144] !: renamed from dummy0 [ 354.580719][T11165] netlink: 'syz.2.1341': attribute type 1 has an invalid length. [ 354.820842][T11174] netlink: 47 bytes leftover after parsing attributes in process `syz.3.1342'. [ 354.857197][T11165] bond5: entered promiscuous mode [ 354.877329][T11165] 8021q: adding VLAN 0 to HW filter on device bond5 [ 354.909291][T11178] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1342'. [ 354.925962][T11159] lo speed is unknown, defaulting to 1000 [ 355.090662][T11182] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1343'. [ 355.634831][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'. [ 355.662274][T11204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.907318][T11208] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1348'. [ 356.037966][T11159] wg1 speed is unknown, defaulting to 1000 [ 356.066102][T11159] wg0 speed is unknown, defaulting to 1000 [ 356.097325][T11224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1352'. [ 356.890760][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1360'. [ 356.925200][T11243] veth0: entered promiscuous mode [ 356.931110][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1359'. [ 357.017725][T11243] veth0 (unregistering): left promiscuous mode [ 357.090151][T11247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1361'. [ 357.673989][T11261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1366'. [ 357.691564][T11263] sctp: [Deprecated]: syz.4.1367 (pid 11263) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.691564][T11263] Use struct sctp_sack_info instead [ 357.761494][T11263] sctp: [Deprecated]: syz.4.1367 (pid 11263) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.761494][T11263] Use struct sctp_sack_info instead [ 357.770376][T11261] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 357.810211][T11261] macvtap1: entered allmulticast mode [ 357.818325][T11261] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 357.970147][T11267] syzkaller0: entered promiscuous mode [ 357.979876][T11267] syzkaller0: entered allmulticast mode [ 358.019191][T11275] netlink: 'syz.4.1371': attribute type 7 has an invalid length. [ 358.040513][T11267] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 358.139692][T11277] netlink: 'syz.2.1372': attribute type 11 has an invalid length. [ 358.876428][T11309] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 359.485598][T11344] sctp: [Deprecated]: syz.2.1389 (pid 11344) Use of struct sctp_assoc_value in delayed_ack socket option. [ 359.485598][T11344] Use struct sctp_sack_info instead [ 360.180104][T11376] lo speed is unknown, defaulting to 1000 [ 360.284051][T11381] __nla_validate_parse: 10 callbacks suppressed [ 360.284074][T11381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1403'. [ 360.591835][T11376] wg1 speed is unknown, defaulting to 1000 [ 360.600534][T11376] wg0 speed is unknown, defaulting to 1000 [ 360.944374][T11397] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1409'. [ 361.790094][T11425] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1418'. [ 361.815306][T11427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1419'. [ 361.833632][T11425] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1418'. [ 362.641286][T11456] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1432'. [ 362.659197][T11456] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1432'. [ 362.668448][T11456] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1432'. [ 362.683296][T11456] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1432'. [ 362.692585][T11456] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1432'. [ 362.783917][T11459] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 363.041532][T11468] vlan0: entered promiscuous mode [ 363.450142][T11484] tipc: Enabled bearer , priority 0 [ 363.495963][T11484] syzkaller0: entered promiscuous mode [ 363.540291][T11484] syzkaller0: entered allmulticast mode [ 363.666359][T11484] tipc: Resetting bearer [ 364.137014][T11506] ipvlan2: entered promiscuous mode [ 364.147756][T11506] bridge0: port 3(ipvlan2) entered blocking state [ 364.166939][T11506] bridge0: port 3(ipvlan2) entered disabled state [ 364.184532][T11506] ipvlan2: entered allmulticast mode [ 364.184600][T11508] netlink: 'syz.0.1444': attribute type 20 has an invalid length. [ 364.200558][T11506] bridge0: entered allmulticast mode [ 364.220465][T11506] ipvlan2: left allmulticast mode [ 364.230567][T11506] bridge0: left allmulticast mode [ 364.312915][T11482] tipc: Resetting bearer [ 364.368537][T11482] tipc: Disabling bearer [ 364.844100][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 365.608986][T11546] __nla_validate_parse: 173 callbacks suppressed [ 365.609008][T11546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1453'. [ 365.830117][T11546] team0: Port device team_slave_0 removed [ 365.991873][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'. [ 366.033953][T11557] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1455'. [ 366.079391][T11557] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1455'. [ 366.584964][T11579] lo speed is unknown, defaulting to 1000 [ 366.591107][T11585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.614955][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.627020][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.783039][T11582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.084285][T11576] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 367.098971][T11579] wg1 speed is unknown, defaulting to 1000 [ 367.102288][T11576] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 367.107263][T11579] wg0 speed is unknown, defaulting to 1000 [ 367.871554][T11616] geneve2: entered promiscuous mode [ 367.942149][ T6717] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.960952][ T6717] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.972959][ T6717] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.006875][T11616] netlink: 'syz.4.1468': attribute type 5 has an invalid length. [ 368.023810][T11616] netlink: 'syz.4.1468': attribute type 7 has an invalid length. [ 368.031813][ T6717] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.064187][T11616] : entered promiscuous mode [ 368.283695][T11633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1473'. [ 368.307546][T11633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1473'. [ 368.347386][T11637] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1473'. [ 368.433230][T11637] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1473'. [ 368.480762][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1475'. [ 369.067913][T11644] lo speed is unknown, defaulting to 1000 [ 369.257929][T11656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1478'. [ 369.873050][T11674] netlink: 'syz.0.1481': attribute type 10 has an invalid length. [ 369.998406][T11674] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 370.680765][T11707] __nla_validate_parse: 1 callbacks suppressed [ 370.680784][T11707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1486'. [ 370.733466][T11644] wg1 speed is unknown, defaulting to 1000 [ 370.787458][T11707] team1: entered promiscuous mode [ 370.792728][T11707] team1: entered allmulticast mode [ 370.798429][T11644] wg0 speed is unknown, defaulting to 1000 [ 370.806937][T11698] lo speed is unknown, defaulting to 1000 [ 371.187119][T11715] syzkaller1: entered promiscuous mode [ 371.233447][T11715] syzkaller1: entered allmulticast mode [ 371.267748][T11698] wg1 speed is unknown, defaulting to 1000 [ 371.576307][T11698] wg0 speed is unknown, defaulting to 1000 [ 371.596628][T11734] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20001 [ 371.723457][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1495'. [ 371.745737][T11743] netlink: 'syz.2.1495': attribute type 1 has an invalid length. [ 371.784723][T11748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1494'. [ 372.143200][ T6730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.151107][ T6730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.280925][T11763] netlink: 87 bytes leftover after parsing attributes in process `syz.4.1496'. [ 372.339563][T11760] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 372.380106][T11766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1498'. [ 372.422361][T11760] syzkaller0: entered promiscuous mode [ 372.453759][T11760] syzkaller0: entered allmulticast mode [ 372.467777][T11770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1499'. [ 372.975772][T11783] netlink: 'syz.2.1502': attribute type 99 has an invalid length. [ 374.389502][T11804] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1504'. [ 374.409041][T11804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.508605][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1505'. [ 375.606557][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1506'. [ 375.618273][T11808] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 375.631702][T11808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.769883][T11811] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1507'. [ 375.829795][T11816] tun0: tun_chr_ioctl cmd 2147767520 [ 376.031736][T11832] netlink: 'syz.0.1516': attribute type 13 has an invalid length. [ 376.052232][T11832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1516'. [ 376.069430][T11832] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 376.141224][T11838] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1517'. [ 376.437896][T11848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1520'. [ 376.474120][T11848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1520'. [ 377.020055][T11870] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1528'. [ 377.037075][T11870] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1528'. [ 377.094321][T11877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.475157][T11894] netlink: 'syz.3.1532': attribute type 21 has an invalid length. [ 377.485197][T11894] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1532'. [ 377.551795][T11899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.595453][T11899] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1534'. [ 377.620189][T11899] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1534'. [ 377.645371][T11899] tipc: Enabled bearer , priority 0 [ 377.655555][T11899] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 377.674288][T11899] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 377.707607][T11898] team0: Mode changed to "loadbalance" [ 377.891917][T11907] IPVS: set_ctl: invalid protocol: 47 172.20.20.63:20000 [ 378.125812][T11919] tipc: Enabling of bearer rejected, already enabled [ 378.150115][T11919] tipc: Resetting bearer [ 378.397717][T11925] netlink: 'syz.3.1542': attribute type 10 has an invalid length. [ 378.464938][T11938] netlink: 'syz.3.1542': attribute type 10 has an invalid length. [ 378.487678][T11925] team0: Port device dummy0 added [ 378.607967][T11938] team0: Port device dummy0 removed [ 378.630308][T11938] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 378.666608][T11944] tipc: Enabled bearer , priority 0 [ 378.684997][T11944] syzkaller0: entered promiscuous mode [ 378.713394][T11944] syzkaller0: entered allmulticast mode [ 378.802718][T11941] tipc: Resetting bearer [ 378.858517][T11941] tipc: Disabling bearer [ 378.985649][T11951] pim6reg: entered allmulticast mode [ 379.003621][T11958] pim6reg: left allmulticast mode [ 379.175105][T11967] tipc: Enabling of bearer rejected, already enabled [ 380.051604][T12011] netlink: 'syz.1.1565': attribute type 10 has an invalid length. [ 380.061958][T12011] team0: entered promiscuous mode [ 380.068481][T12011] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.278916][T12021] lo: entered promiscuous mode [ 380.310427][T12021] lo: entered allmulticast mode [ 380.341628][T12021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.960327][T12068] __nla_validate_parse: 13 callbacks suppressed [ 380.960348][T12068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'. [ 381.071736][T12072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1583'. [ 381.307560][T12072] team0 (unregistering): left promiscuous mode [ 381.316926][T12084] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1586'. [ 381.326685][T12072] team_slave_1: left promiscuous mode [ 381.332895][T12084] netlink: 'syz.4.1586': attribute type 10 has an invalid length. [ 381.335046][T12072] geneve0: left promiscuous mode [ 381.341076][T12084] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1586'. [ 381.360135][T12072] team0 (unregistering): Port device team_slave_1 removed [ 381.372176][T12072] team0 (unregistering): Port device geneve0 removed [ 381.397942][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1585'. [ 381.432656][T12084] !: entered promiscuous mode [ 381.462370][T12084] !: entered allmulticast mode [ 381.478531][T12084] bridge0: port 1(0!) entered blocking state [ 381.481566][T12081] netlink: 'syz.4.1586': attribute type 3 has an invalid length. [ 381.488421][T12084] bridge0: port 1(0!) entered disabled state [ 381.513687][T12084] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 381.639152][T12090] tipc: Enabling of bearer rejected, already enabled [ 381.668351][T12090] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1587'. [ 381.682669][T12090] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 381.777210][T12097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1589'. [ 381.806240][T12099] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1590'. [ 381.828031][T12101] FAULT_INJECTION: forcing a failure. [ 381.828031][T12101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.842917][T12097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1589'. [ 381.855777][T12101] CPU: 0 UID: 0 PID: 12101 Comm: syz.0.1591 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 381.855809][T12101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 381.855821][T12101] Call Trace: [ 381.855830][T12101] [ 381.855839][T12101] dump_stack_lvl+0x189/0x250 [ 381.855866][T12101] ? __pfx____ratelimit+0x10/0x10 [ 381.855895][T12101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.855916][T12101] ? __pfx__printk+0x10/0x10 [ 381.855942][T12101] ? __might_fault+0xb0/0x130 [ 381.855985][T12101] should_fail_ex+0x414/0x560 [ 381.856022][T12101] _copy_from_user+0x2d/0xb0 [ 381.856051][T12101] do_ip_vs_set_ctl+0x2d3/0xa60 [ 381.856088][T12101] ? rcu_is_watching+0x15/0xb0 [ 381.856118][T12101] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 381.856139][T12101] ? trace_contention_end+0x39/0x120 [ 381.856181][T12101] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 381.856218][T12101] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 381.856245][T12101] ? aa_sk_perm+0x81e/0x950 [ 381.856275][T12101] ? __pfx_aa_sk_perm+0x10/0x10 [ 381.856307][T12101] nf_setsockopt+0x26c/0x290 [ 381.856330][T12101] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 381.856362][T12101] do_sock_setsockopt+0x17c/0x1b0 [ 381.856389][T12101] __x64_sys_setsockopt+0x13f/0x1b0 [ 381.856416][T12101] do_syscall_64+0xfa/0x3b0 [ 381.856444][T12101] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.856472][T12101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.856493][T12101] ? clear_bhb_loop+0x60/0xb0 [ 381.856518][T12101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.856537][T12101] RIP: 0033:0x7f821018eb69 [ 381.856556][T12101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.856574][T12101] RSP: 002b:00007f8210f76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 381.856596][T12101] RAX: ffffffffffffffda RBX: 00007f82103b5fa0 RCX: 00007f821018eb69 [ 381.856612][T12101] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 0000000000000003 [ 381.856624][T12101] RBP: 00007f8210f76090 R08: 0000000000000044 R09: 0000000000000000 [ 381.856637][T12101] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.856650][T12101] R13: 0000000000000000 R14: 00007f82103b5fa0 R15: 00007ffe8ed525f8 [ 381.856685][T12101] [ 382.153363][T12097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1589'. [ 382.257675][T12112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.409434][T12119] bridge1: entered allmulticast mode [ 382.461049][T12125] netlink: 'syz.3.1601': attribute type 8 has an invalid length. [ 382.767532][T12152] syzkaller0: entered promiscuous mode [ 382.777183][T12152] syzkaller0: entered allmulticast mode [ 383.288623][T12121] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 383.531452][T12167] tipc: Enabled bearer , priority 0 [ 383.554352][T12167] syzkaller0: entered promiscuous mode [ 383.559883][T12167] syzkaller0: entered allmulticast mode [ 383.912640][T12164] tipc: Resetting bearer [ 383.935717][T12164] tipc: Disabling bearer [ 384.055564][T12194] lo speed is unknown, defaulting to 1000 [ 384.340414][T12166] delete_channel: no stack [ 384.416008][T12194] wg1 speed is unknown, defaulting to 1000 [ 384.427878][T12194] wg0 speed is unknown, defaulting to 1000 [ 384.651282][T12222] openvswitch: netlink: Flow key attr not present in new flow. [ 384.747539][T12225] IPVS: ip_vs_add_dest(): server weight less than zero [ 385.037173][T12227] netlink: 'syz.2.1624': attribute type 10 has an invalid length. [ 385.131308][T12227] team0: Port device geneve0 added [ 386.539508][T12275] __nla_validate_parse: 8 callbacks suppressed [ 386.539530][T12275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1635'. [ 387.135676][T12299] tipc: Enabled bearer , priority 0 [ 387.143459][T12299] syzkaller0: entered promiscuous mode [ 387.152316][T12299] syzkaller0: entered allmulticast mode [ 387.184768][T12298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.205548][T12299] tipc: Resetting bearer [ 387.249809][T12302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1642'. [ 387.313969][T12294] tipc: Resetting bearer [ 387.326787][T12305] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1643'. [ 387.379777][T12294] tipc: Disabling bearer [ 387.851776][T12321] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1649'. [ 388.380593][T12331] tipc: Enabling of bearer rejected, already enabled [ 388.535402][T12336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1653'. [ 388.609902][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1655'. [ 388.656021][T12344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1656'. [ 388.702360][T12344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1656'. [ 388.897762][T12351] macsec0: entered promiscuous mode [ 392.084346][T12375] bridge0: port 3(erspan0) entered blocking state [ 392.091296][T12375] bridge0: port 3(erspan0) entered disabled state [ 392.101035][T12375] erspan0: entered promiscuous mode [ 392.111617][T12375] erspan0: left promiscuous mode [ 392.118512][T12375] bridge0: port 3(erspan0) entered disabled state [ 392.482946][T12388] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20001 [ 392.661538][T12391] netlink: 'syz.2.1669': attribute type 26 has an invalid length. [ 392.986420][ T30] audit: type=1800 audit(1754464776.388:6): pid=12395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1671" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1567 res=0 errno=0 [ 393.031948][T12397] rdma_op ffff88802694f9f0 conn xmit_rdma 0000000000000000 [ 393.076539][T12397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.420565][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 393.557725][T12406] wg2: entered promiscuous mode [ 393.562677][T12406] wg2: entered allmulticast mode [ 393.820833][T12422] batadv_slave_0: entered promiscuous mode [ 393.920893][T12416] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1676'. [ 394.046895][T12427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.402173][T12431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1680'. [ 394.403399][T12428] lo speed is unknown, defaulting to 1000 [ 394.458725][T12415] batadv_slave_0: left promiscuous mode [ 394.620009][T12434] sctp: [Deprecated]: syz.3.1682 (pid 12434) Use of struct sctp_assoc_value in delayed_ack socket option. [ 394.620009][T12434] Use struct sctp_sack_info instead [ 395.323511][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 395.604822][T12465] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1689'. [ 395.615696][T12462] netlink: 'syz.4.1678': attribute type 13 has an invalid length. [ 395.646900][T12467] netlink: 'syz.3.1690': attribute type 1 has an invalid length. [ 395.693752][T12467] netlink: 'syz.3.1690': attribute type 3 has an invalid length. [ 395.713901][T12467] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1690'. [ 395.791408][T12462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.867285][T12462] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.914615][T12462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 395.969787][T12428] wg1 speed is unknown, defaulting to 1000 [ 396.004334][T12428] wg0 speed is unknown, defaulting to 1000 [ 396.416595][T12481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1696'. [ 396.580847][T12488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1695'. [ 396.959376][T12492] lo speed is unknown, defaulting to 1000 [ 397.175846][T12500] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1700'. [ 397.480913][T12513] netlink: 'syz.0.1704': attribute type 21 has an invalid length. [ 397.517589][T12513] netlink: 'syz.0.1704': attribute type 1 has an invalid length. [ 397.612640][T12520] netlink: 336 bytes leftover after parsing attributes in process `syz.2.1706'. [ 397.653466][T12520] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1706'. [ 397.662741][T12520] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1706'. [ 397.824462][T12492] wg1 speed is unknown, defaulting to 1000 [ 397.832673][T12492] wg0 speed is unknown, defaulting to 1000 [ 399.071845][T12551] netlink: 'syz.2.1711': attribute type 10 has an invalid length. [ 399.930942][T12574] netlink: 'syz.2.1717': attribute type 15 has an invalid length. [ 400.108016][T12578] netlink: 'syz.4.1719': attribute type 1 has an invalid length. [ 400.327362][T12576] lo speed is unknown, defaulting to 1000 [ 400.460150][T12587] bond3: (slave gretap1): making interface the new active one [ 400.490045][T12587] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 400.580494][T12600] veth8: entered promiscuous mode [ 400.669534][T12600] veth8: entered allmulticast mode [ 401.503617][T12636] __nla_validate_parse: 1 callbacks suppressed [ 401.503639][T12636] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1730'. [ 401.598848][T12576] wg1 speed is unknown, defaulting to 1000 [ 401.598882][T12586] lo speed is unknown, defaulting to 1000 [ 401.662101][T12576] wg0 speed is unknown, defaulting to 1000 [ 401.693041][T12641] netlink: 'syz.4.1731': attribute type 1 has an invalid length. [ 401.732732][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1731'. [ 402.562719][T12672] bond0: Device is already in use. [ 402.673081][T12644] lo speed is unknown, defaulting to 1000 [ 402.689994][T12586] wg1 speed is unknown, defaulting to 1000 [ 402.798381][T12586] wg0 speed is unknown, defaulting to 1000 [ 402.917677][T12677] scsi_nl_rcv_msg: discarding partial skb [ 403.152147][T12665] lo speed is unknown, defaulting to 1000 [ 403.435149][T12664] lo speed is unknown, defaulting to 1000 [ 403.592892][T12679] lo speed is unknown, defaulting to 1000 [ 403.741560][T12679] wg1 speed is unknown, defaulting to 1000 [ 403.750707][T12665] wg1 speed is unknown, defaulting to 1000 [ 403.759755][T12679] wg0 speed is unknown, defaulting to 1000 [ 403.768559][T12644] wg1 speed is unknown, defaulting to 1000 [ 403.778880][T12664] wg1 speed is unknown, defaulting to 1000 [ 404.169043][T12644] wg0 speed is unknown, defaulting to 1000 [ 404.690629][T12665] wg0 speed is unknown, defaulting to 1000 [ 404.932025][T12664] wg0 speed is unknown, defaulting to 1000 [ 406.648393][T12686] netlink: 'syz.1.1741': attribute type 11 has an invalid length. [ 406.687549][T12686] openvswitch: netlink: Multiple metadata blocks provided [ 407.250614][T12706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 407.316707][T12715] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1748'. [ 407.492274][T12724] netlink: 'syz.4.1752': attribute type 21 has an invalid length. [ 407.534298][T12724] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1752'. [ 407.755067][T12736] netlink: 'syz.0.1756': attribute type 13 has an invalid length. [ 407.768327][T12736] netlink: 'syz.0.1756': attribute type 17 has an invalid length. [ 407.832732][T12743] netlink: 'syz.2.1754': attribute type 5 has an invalid length. [ 407.908319][T12744] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1756'. [ 408.003512][T12748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.081906][T12750] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 408.098929][T12748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.194831][T12748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.222621][T12751] netlink: 'syz.3.1758': attribute type 2 has an invalid length. [ 408.250402][T12751] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1758'. [ 408.735256][T12731] batadv0: left promiscuous mode [ 409.272201][T12770] netlink: 'syz.4.1764': attribute type 1 has an invalid length. [ 409.315841][T12771] netlink: 'syz.3.1763': attribute type 4 has an invalid length. [ 409.451263][T12731] macvlan0: left allmulticast mode [ 409.556155][T12731] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 409.565914][T12731] vti0: left promiscuous mode [ 409.579641][T12731] ip6gre1: left allmulticast mode [ 409.619249][T12731] veth7: left promiscuous mode [ 409.625211][T12731] bond5: left promiscuous mode [ 409.635595][T12731] veth8: left promiscuous mode [ 409.641338][T12731] veth8: left allmulticast mode [ 409.649702][T12736] lo: left promiscuous mode [ 409.663384][T12736] lo: left allmulticast mode [ 409.685644][T12736] 0ªî{X¹¦: left allmulticast mode [ 409.786155][T12778] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2 [ 409.809609][T12736] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 409.886680][ T1338] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 409.903700][T10254] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 409.932951][ T9] lo speed is unknown, defaulting to 1000 [ 409.940181][T10254] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 409.947356][T12780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1766'. [ 409.954522][ T9] syz1: Port: 1 Link DOWN [ 409.962556][T12742] lo speed is unknown, defaulting to 1000 [ 409.969140][T10254] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 409.998142][ T9] lo speed is unknown, defaulting to 1000 [ 410.127775][T12788] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1768'. [ 410.147406][T12789] pimreg: entered allmulticast mode [ 410.272641][T12789] pimreg: left allmulticast mode [ 410.321988][T12795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1769'. [ 410.460670][T12742] wg1 speed is unknown, defaulting to 1000 [ 410.482801][T12742] wg0 speed is unknown, defaulting to 1000 [ 410.968377][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1778'. [ 410.980962][T12830] netlink: 'syz.4.1776': attribute type 1 has an invalid length. [ 410.982395][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1778'. [ 411.018414][T12828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 411.024889][T12831] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1778'. [ 411.137436][T12830] 8021q: adding VLAN 0 to HW filter on device bond4 [ 411.161592][T12832] bond4: (slave geneve3): making interface the new active one [ 411.178378][T12832] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 413.179706][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1811'. [ 413.510817][T12953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1815'. [ 413.522184][T12953] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1815'. [ 413.539753][T12953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1815'. [ 413.550112][T12953] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1815'. [ 413.629321][T12948] lo speed is unknown, defaulting to 1000 [ 413.883387][ T9146] page_pool_release_retry() stalled pool shutdown: id 38, 3329 inflight 60 sec [ 414.297943][T12980] netlink: 'syz.2.1823': attribute type 2 has an invalid length. [ 414.353665][T12980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1823'. [ 414.492130][T12986] sctp: [Deprecated]: syz.0.1825 (pid 12986) Use of struct sctp_assoc_value in delayed_ack socket option. [ 414.492130][T12986] Use struct sctp_sack_info instead [ 414.527779][T12948] wg1 speed is unknown, defaulting to 1000 [ 414.545858][T12948] wg0 speed is unknown, defaulting to 1000 [ 414.571256][T12990] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1826'. [ 414.779679][T12990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1826'. [ 414.801834][T13002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1830'. [ 414.896927][T12990] hsr_slave_1 (unregistering): left promiscuous mode [ 414.919609][T13005] tipc: Enabling of bearer rejected, already enabled [ 415.330902][T13023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1835'. [ 416.058844][T13045] tipc: Enabled bearer , priority 0 [ 416.279253][T13045] syzkaller0: entered promiscuous mode [ 416.342532][T13045] syzkaller0: entered allmulticast mode [ 416.348730][T13067] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 416.451552][T13071] tipc: Enabling of bearer rejected, already enabled [ 416.510395][T13060] tipc: Resetting bearer [ 416.576720][T13044] tipc: Resetting bearer [ 417.153227][ T9142] tipc: Node number set to 4163052516 [ 418.494496][T13044] tipc: Disabling bearer [ 418.504638][T13066] __nla_validate_parse: 2 callbacks suppressed [ 418.504658][T13066] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1846'. [ 418.521316][T13066] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1846'. [ 418.530617][T13066] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1846'. [ 418.553373][T13087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1849'. [ 418.562509][T13087] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1849'. [ 418.614147][T13087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1849'. [ 418.633543][T13087] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1849'. [ 419.037694][T13116] rdma_rxe: rxe_newlink: failed to add macvlan1 [ 419.089718][T13115] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.162945][T13115] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.387612][T13115] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.432001][T13115] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.530810][T13115] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.576278][T13115] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.737319][T13158] netlink: zone id is out of range [ 419.742693][T13158] netlink: zone id is out of range [ 419.763237][T13158] netlink: zone id is out of range [ 419.771359][T13158] netlink: zone id is out of range [ 419.795722][T13158] netlink: zone id is out of range [ 419.846864][T13158] netlink: zone id is out of range [ 419.852041][T13158] netlink: zone id is out of range [ 419.909375][T13158] netlink: zone id is out of range [ 419.917587][T13158] netlink: zone id is out of range [ 419.950221][T13152] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1867'. [ 419.971466][T13158] netlink: zone id is out of range [ 420.199766][T13115] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.215450][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1869'. [ 420.224794][T13175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1869'. [ 420.240374][T13115] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.692429][T13190] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.723054][T13190] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.740595][T13190] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 420.760523][ T5977] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.769398][ T5977] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.809906][T13190] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.841460][T13190] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.877856][T13190] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 420.971983][ T6728] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.992961][ T6728] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.018336][T13208] tipc: Enabled bearer , priority 0 [ 421.032080][T13190] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.045611][T13190] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.056237][T13190] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 421.110102][ T5977] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.122342][ T5977] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.203909][T13210] syzkaller0: entered promiscuous mode [ 421.209460][T13210] syzkaller0: entered allmulticast mode [ 421.216018][T13210] tipc: Resetting bearer [ 421.228979][T13190] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.244947][T13190] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.257808][T13190] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 421.284392][ T5977] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.293636][ T5977] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.302669][T13196] tipc: Resetting bearer [ 422.149095][ T9] tipc: Node number set to 775306814 [ 423.262363][T13196] tipc: Disabling bearer [ 423.431321][ T5977] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.452204][ T5977] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 423.483615][ T5977] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 423.509582][ T5977] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.531736][ T5977] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 423.548868][T13254] Bluetooth: MGMT ver 1.23 [ 423.566812][T13254] __nla_validate_parse: 2 callbacks suppressed [ 423.566836][T13254] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1884'. [ 423.567092][ T5977] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 423.581397][T13254] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1884'. [ 423.675947][T13247] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 423.695049][ T6728] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.703980][ T6728] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 423.722506][ T6728] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 423.738552][ T6728] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.757805][ T6728] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 423.795045][ T6728] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 423.844021][T13259] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 423.869153][T13262] lo speed is unknown, defaulting to 1000 [ 424.298938][T13264] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 424.341872][T13262] wg1 speed is unknown, defaulting to 1000 [ 424.342020][T13269] lo speed is unknown, defaulting to 1000 [ 424.352544][T13262] wg0 speed is unknown, defaulting to 1000 [ 424.443522][T13281] syzkaller1: entered allmulticast mode [ 424.752569][T13276] lo speed is unknown, defaulting to 1000 [ 424.775674][T13269] wg1 speed is unknown, defaulting to 1000 [ 425.059825][T13269] wg0 speed is unknown, defaulting to 1000 [ 425.249673][T13276] wg1 speed is unknown, defaulting to 1000 [ 425.253213][T13290] lo speed is unknown, defaulting to 1000 [ 425.450547][T13276] wg0 speed is unknown, defaulting to 1000 [ 425.643371][ T5850] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 425.643914][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 425.875326][T13301] wg2: left promiscuous mode [ 425.879995][T13301] wg2: left allmulticast mode [ 425.887355][T13301] bridge_slave_0: left promiscuous mode [ 425.892942][T13301] bridge_slave_0: left allmulticast mode [ 425.905384][T13301] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 425.917499][T13301] macvtap1: left allmulticast mode [ 425.925337][T13301] hsr1: left allmulticast mode [ 425.930236][T13301] bond0: left allmulticast mode [ 425.935778][T13301] batadv0: left allmulticast mode [ 425.947525][T13301] vlan2: left promiscuous mode [ 425.952687][T13301] vlan2: left allmulticast mode [ 425.959544][T13301] hsr_slave_1: left allmulticast mode [ 425.978213][T13301] vlan0: left promiscuous mode [ 426.026642][T13301] bridge1: left allmulticast mode [ 426.111486][T13290] wg1 speed is unknown, defaulting to 1000 [ 426.144045][T13302] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1898'. [ 426.153572][T13302] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1898'. [ 426.162745][T13290] wg0 speed is unknown, defaulting to 1000 [ 428.101699][T13339] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 428.134207][T13335] lo speed is unknown, defaulting to 1000 [ 428.393646][T13351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1908'. [ 428.414844][T13352] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1909'. [ 428.894355][T13335] wg1 speed is unknown, defaulting to 1000 [ 428.927001][T13335] wg0 speed is unknown, defaulting to 1000 [ 429.073913][T13385] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 429.158467][T13386] lo speed is unknown, defaulting to 1000 [ 429.595101][T13406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1923'. [ 429.630290][T13406] 8021q: VLANs not supported on vxcan0 [ 430.068133][T13386] wg1 speed is unknown, defaulting to 1000 [ 430.089204][T13386] wg0 speed is unknown, defaulting to 1000 [ 430.106446][T13422] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1929'. [ 430.130661][T13425] sctp: [Deprecated]: syz.0.1930 (pid 13425) Use of struct sctp_assoc_value in delayed_ack socket option. [ 430.130661][T13425] Use struct sctp_sack_info instead [ 430.447213][T13427] lo speed is unknown, defaulting to 1000 [ 430.580726][T13439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1934'. [ 430.597881][T13439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1934'. [ 430.780497][T13443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1936'. [ 430.848934][T13443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1936'. [ 431.144675][T13427] wg1 speed is unknown, defaulting to 1000 [ 431.165914][T13427] wg0 speed is unknown, defaulting to 1000 [ 431.194224][T13458] netlink: 'syz.2.1941': attribute type 1 has an invalid length. [ 431.202245][T13458] netlink: 'syz.2.1941': attribute type 1 has an invalid length. [ 431.349633][T13465] netlink: 'syz.1.1944': attribute type 1 has an invalid length. [ 431.408124][T13465] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1944'. [ 432.375214][T13495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1952'. [ 432.559950][T13504] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1953'. [ 432.663754][T13504] lo speed is unknown, defaulting to 1000 [ 433.171050][T13517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1957'. [ 433.677636][T13532] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 433.805870][T13504] wg1 speed is unknown, defaulting to 1000 [ 433.837958][T13504] wg0 speed is unknown, defaulting to 1000 [ 434.061388][T13539] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma? [ 434.379912][T13550] net_ratelimit: 181 callbacks suppressed [ 434.379933][T13550] netlink: zone id is out of range [ 434.395009][T13550] netlink: zone id is out of range [ 434.400280][T13550] netlink: zone id is out of range [ 434.408861][T13550] netlink: zone id is out of range [ 434.415886][T13550] netlink: zone id is out of range [ 434.421105][T13550] netlink: zone id is out of range [ 434.450732][T13550] netlink: zone id is out of range [ 434.483167][T13550] netlink: zone id is out of range [ 434.513306][T13550] netlink: zone id is out of range [ 434.518567][T13550] netlink: zone id is out of range [ 434.747794][T13567] __nla_validate_parse: 4 callbacks suppressed [ 434.747814][T13567] netlink: 564 bytes leftover after parsing attributes in process `syz.1.1970'. [ 434.767416][T13567] netlink: 171 bytes leftover after parsing attributes in process `syz.1.1970'. [ 434.776964][T13567] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1970'. [ 434.786532][T13567] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1970'. [ 434.795635][T13567] netlink: 102 bytes leftover after parsing attributes in process `syz.1.1970'. [ 434.804868][T13567] netlink: 4728 bytes leftover after parsing attributes in process `syz.1.1970'. [ 434.814020][T13567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1970'. [ 434.977830][T13572] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1971'. [ 435.063162][T13574] netlink: 'syz.1.1972': attribute type 3 has an invalid length. [ 435.093244][T13574] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1972'. [ 435.610319][T13595] IPv6: sit2: Disabled Multicast RS [ 435.695599][T10245] tipc: Resetting bearer [ 435.950135][T13618] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 435.964659][T13614] netlink: 'syz.0.1985': attribute type 1 has an invalid length. [ 436.070105][T13614] 8021q: adding VLAN 0 to HW filter on device bond4 [ 436.104849][T13625] netlink: 'syz.1.1983': attribute type 16 has an invalid length. [ 436.112845][T13625] netlink: 'syz.1.1983': attribute type 17 has an invalid length. [ 436.138242][T13635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1989'. [ 436.224241][T13627] bond4: entered promiscuous mode [ 436.365342][T13646] pim6reg: entered allmulticast mode [ 436.372581][T13646] pim6reg: left allmulticast mode [ 436.578732][T13658] netlink: 'syz.4.1996': attribute type 29 has an invalid length. [ 436.743781][T13668] netlink: 'syz.2.1999': attribute type 1 has an invalid length. [ 436.839285][T13669] lo speed is unknown, defaulting to 1000 [ 437.320789][T13688] veth1_macvtap: entered promiscuous mode [ 437.502266][T13669] wg1 speed is unknown, defaulting to 1000 [ 437.525422][T13669] wg0 speed is unknown, defaulting to 1000 [ 437.798429][T13705] lo speed is unknown, defaulting to 1000 [ 437.823944][T13702] netlink: 'syz.0.2008': attribute type 13 has an invalid length. [ 437.852363][T13702] netlink: 'syz.0.2008': attribute type 17 has an invalid length. [ 438.580530][T13726] vlan4: entered allmulticast mode [ 438.587865][T13726] veth1: entered allmulticast mode [ 438.606049][T13705] wg1 speed is unknown, defaulting to 1000 [ 438.621196][T13705] wg0 speed is unknown, defaulting to 1000 [ 438.651146][T13724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.029205][T13729] netlink: 'syz.3.2014': attribute type 13 has an invalid length. [ 439.037679][T13729] netlink: 'syz.3.2014': attribute type 17 has an invalid length. [ 439.099639][T13729] erspan0: left allmulticast mode [ 439.229884][ T9] lo speed is unknown, defaulting to 1000 [ 439.245301][ T9] syz1: Port: 1 Link ACTIVE [ 439.258510][ T9] lo speed is unknown, defaulting to 1000 [ 439.300327][T13729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.430801][T13735] lo speed is unknown, defaulting to 1000 [ 439.843962][T13755] __nla_validate_parse: 8 callbacks suppressed [ 439.843983][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2020'. [ 439.889031][T13755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2020'. [ 439.923670][T13755] netlink: 'syz.1.2020': attribute type 11 has an invalid length. [ 440.165422][T13758] [ 440.167816][T13758] ====================================================== [ 440.174854][T13758] WARNING: possible circular locking dependency detected [ 440.181898][T13758] 6.16.0-syzkaller-06574-gd9104cec3e8f #0 Not tainted [ 440.188693][T13758] ------------------------------------------------------ [ 440.195743][T13758] syz.2.2021/13758 is trying to acquire lock: [ 440.201839][T13758] ffff888142f85e38 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0xf0/0x320 [ 440.204918][T13735] wg1 speed is unknown, defaulting to 1000 [ 440.211187][T13758] [ 440.211187][T13758] but task is already holding lock: [ 440.211198][T13758] ffff888142f858f8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 440.234671][T13758] [ 440.234671][T13758] which lock already depends on the new lock. [ 440.234671][T13758] [ 440.245121][T13758] [ 440.245121][T13758] the existing dependency chain (in reverse order) is: [ 440.254140][T13758] [ 440.254140][T13758] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 440.262758][T13758] lock_acquire+0x120/0x360 [ 440.267799][T13758] blk_alloc_queue+0x538/0x620 [ 440.273346][T13758] __blk_mq_alloc_disk+0x15c/0x340 [ 440.278984][T13758] nbd_dev_add+0x46c/0xae0 [ 440.283925][T13758] nbd_init+0x168/0x1f0 [ 440.288697][T13758] do_one_initcall+0x233/0x820 [ 440.293983][T13758] do_initcall_level+0x104/0x190 [ 440.299444][T13758] do_initcalls+0x59/0xa0 [ 440.304293][T13758] kernel_init_freeable+0x334/0x4a0 [ 440.310019][T13758] kernel_init+0x1d/0x1d0 [ 440.314871][T13758] ret_from_fork+0x3fc/0x770 [ 440.319998][T13758] ret_from_fork_asm+0x1a/0x30 [ 440.325288][T13758] [ 440.325288][T13758] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 440.332502][T13758] lock_acquire+0x120/0x360 [ 440.337541][T13758] fs_reclaim_acquire+0x72/0x100 [ 440.343002][T13758] prepare_alloc_pages+0x153/0x610 [ 440.348645][T13758] __alloc_frozen_pages_noprof+0x123/0x370 [ 440.355088][T13758] __alloc_pages_noprof+0xa/0x30 [ 440.360565][T13758] pcpu_populate_chunk+0x182/0xb30 [ 440.366220][T13758] pcpu_alloc_noprof+0xcbf/0x16b0 [ 440.371802][T13758] bpf_map_alloc_percpu+0xbc/0x1b0 [ 440.377447][T13758] prealloc_init+0x225/0x630 [ 440.382582][T13758] htab_map_alloc+0x6ce/0xc70 [ 440.387788][T13758] map_create+0xaa3/0x1310 [ 440.392733][T13758] __sys_bpf+0x60f/0x870 [ 440.397501][T13758] __x64_sys_bpf+0x7c/0x90 [ 440.402443][T13758] do_syscall_64+0xfa/0x3b0 [ 440.407475][T13758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.413889][T13758] [ 440.413889][T13758] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 440.421638][T13758] lock_acquire+0x120/0x360 [ 440.426756][T13758] __mutex_lock+0x187/0x1340 [ 440.431878][T13758] pcpu_alloc_noprof+0x286/0x16b0 [ 440.437609][T13758] sbitmap_init_node+0x1e1/0x630 [ 440.443158][T13758] sbitmap_queue_init_node+0x41/0x660 [ 440.449053][T13758] blk_mq_init_tags+0x110/0x280 [ 440.454439][T13758] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 440.460429][T13758] blk_mq_init_sched+0x28a/0x710 [ 440.465894][T13758] elevator_switch+0x19c/0x5f0 [ 440.471185][T13758] elevator_change+0x21b/0x320 [ 440.476471][T13758] elevator_set_default+0x186/0x260 [ 440.482279][T13758] blk_register_queue+0x35d/0x400 [ 440.488259][T13758] __add_disk+0x677/0xd50 [ 440.493115][T13758] add_disk_fwnode+0xfc/0x480 [ 440.498331][T13758] nbd_dev_add+0x717/0xae0 [ 440.503278][T13758] nbd_init+0x168/0x1f0 [ 440.507969][T13758] do_one_initcall+0x233/0x820 [ 440.513365][T13758] do_initcall_level+0x104/0x190 [ 440.518833][T13758] do_initcalls+0x59/0xa0 [ 440.523856][T13758] kernel_init_freeable+0x334/0x4a0 [ 440.529593][T13758] kernel_init+0x1d/0x1d0 [ 440.534457][T13758] ret_from_fork+0x3fc/0x770 [ 440.539580][T13758] ret_from_fork_asm+0x1a/0x30 [ 440.544876][T13758] [ 440.544876][T13758] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 440.552874][T13758] validate_chain+0xb9b/0x2140 [ 440.558158][T13758] __lock_acquire+0xab9/0xd20 [ 440.563371][T13758] lock_acquire+0x120/0x360 [ 440.568485][T13758] __mutex_lock+0x187/0x1340 [ 440.573692][T13758] elevator_change+0xf0/0x320 [ 440.578900][T13758] elevator_set_none+0x42/0xb0 [ 440.584279][T13758] blk_mq_update_nr_hw_queues+0x68f/0x1890 [ 440.590611][T13758] nbd_start_device+0x17f/0xb10 [ 440.595985][T13758] nbd_genl_connect+0x135b/0x18f0 [ 440.601532][T13758] genl_family_rcv_msg_doit+0x215/0x300 [ 440.607609][T13758] genl_rcv_msg+0x60e/0x790 [ 440.612634][T13758] netlink_rcv_skb+0x205/0x470 [ 440.617925][T13758] genl_rcv+0x28/0x40 [ 440.622428][T13758] netlink_unicast+0x82c/0x9e0 [ 440.627716][T13758] netlink_sendmsg+0x805/0xb30 [ 440.633009][T13758] __sock_sendmsg+0x219/0x270 [ 440.638230][T13758] ____sys_sendmsg+0x505/0x830 [ 440.643615][T13758] ___sys_sendmsg+0x21f/0x2a0 [ 440.648841][T13758] __x64_sys_sendmsg+0x19b/0x260 [ 440.654322][T13758] do_syscall_64+0xfa/0x3b0 [ 440.659364][T13758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.665784][T13758] [ 440.665784][T13758] other info that might help us debug this: [ 440.665784][T13758] [ 440.676012][T13758] Chain exists of: [ 440.676012][T13758] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 440.676012][T13758] [ 440.689758][T13758] Possible unsafe locking scenario: [ 440.689758][T13758] [ 440.697290][T13758] CPU0 CPU1 [ 440.702686][T13758] ---- ---- [ 440.708087][T13758] lock(&q->q_usage_counter(io)#49); [ 440.713491][T13758] lock(fs_reclaim); [ 440.720103][T13758] lock(&q->q_usage_counter(io)#49); [ 440.728178][T13758] lock(&q->elevator_lock); [ 440.732774][T13758] [ 440.732774][T13758] *** DEADLOCK *** [ 440.732774][T13758] [ 440.741001][T13758] 6 locks held by syz.2.2021/13758: [ 440.746204][T13758] #0: ffffffff8f56e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 440.754500][T13758] #1: ffffffff8f56e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 440.763478][T13758] #2: ffff888025317188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa6/0x1890 [ 440.774884][T13758] #3: ffff8880253170d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xb9/0x1890 [ 440.785854][T13758] #4: ffff888142f858f8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 440.796566][T13758] #5: ffff888142f85930 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 440.807280][T13758] [ 440.807280][T13758] stack backtrace: [ 440.813170][T13758] CPU: 0 UID: 0 PID: 13758 Comm: syz.2.2021 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 440.813193][T13758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 440.813203][T13758] Call Trace: [ 440.813209][T13758] [ 440.813217][T13758] dump_stack_lvl+0x189/0x250 [ 440.813237][T13758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.813254][T13758] ? __pfx__printk+0x10/0x10 [ 440.813273][T13758] ? print_lock_name+0xde/0x100 [ 440.813293][T13758] print_circular_bug+0x2ee/0x310 [ 440.813310][T13758] check_noncircular+0x134/0x160 [ 440.813328][T13758] validate_chain+0xb9b/0x2140 [ 440.813351][T13758] __lock_acquire+0xab9/0xd20 [ 440.813375][T13758] ? elevator_change+0xf0/0x320 [ 440.813391][T13758] lock_acquire+0x120/0x360 [ 440.813411][T13758] ? elevator_change+0xf0/0x320 [ 440.813432][T13758] __mutex_lock+0x187/0x1340 [ 440.813456][T13758] ? elevator_change+0xf0/0x320 [ 440.813473][T13758] ? xa_find_after+0xae/0x430 [ 440.813489][T13758] ? xa_find_after+0x402/0x430 [ 440.813504][T13758] ? elevator_change+0xf0/0x320 [ 440.813518][T13758] ? xa_find_after+0xae/0x430 [ 440.813534][T13758] ? __pfx___mutex_lock+0x10/0x10 [ 440.813559][T13758] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 440.813580][T13758] ? __blk_freeze_queue_start+0x275/0x380 [ 440.813612][T13758] elevator_change+0xf0/0x320 [ 440.813629][T13758] ? elevator_set_none+0x37/0xb0 [ 440.813646][T13758] elevator_set_none+0x42/0xb0 [ 440.813663][T13758] blk_mq_update_nr_hw_queues+0x68f/0x1890 [ 440.813689][T13758] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 440.813713][T13758] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 440.813737][T13758] ? sysfs_add_file_mode_ns+0x259/0x300 [ 440.813755][T13758] nbd_start_device+0x17f/0xb10 [ 440.813773][T13758] ? device_create_file+0xf4/0x1c0 [ 440.813792][T13758] nbd_genl_connect+0x135b/0x18f0 [ 440.813811][T13758] ? __pfx_nbd_genl_connect+0x10/0x10 [ 440.813829][T13758] ? __nla_parse+0x40/0x60 [ 440.813848][T13758] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 440.813871][T13758] genl_family_rcv_msg_doit+0x215/0x300 [ 440.813892][T13758] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 440.813915][T13758] ? stack_trace_save+0x9c/0xe0 [ 440.813934][T13758] genl_rcv_msg+0x60e/0x790 [ 440.813953][T13758] ? __pfx_genl_rcv_msg+0x10/0x10 [ 440.813970][T13758] ? __pfx_nbd_genl_connect+0x10/0x10 [ 440.813989][T13758] netlink_rcv_skb+0x205/0x470 [ 440.814011][T13758] ? __lock_acquire+0xab9/0xd20 [ 440.814032][T13758] ? __pfx_genl_rcv_msg+0x10/0x10 [ 440.814051][T13758] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 440.814079][T13758] ? down_read+0x1ad/0x2e0 [ 440.814094][T13758] genl_rcv+0x28/0x40 [ 440.814109][T13758] netlink_unicast+0x82c/0x9e0 [ 440.814133][T13758] ? __pfx_netlink_unicast+0x10/0x10 [ 440.814154][T13758] ? netlink_sendmsg+0x642/0xb30 [ 440.814176][T13758] ? skb_put+0x11b/0x210 [ 440.814192][T13758] netlink_sendmsg+0x805/0xb30 [ 440.814219][T13758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.814244][T13758] ? aa_sock_msg_perm+0x94/0x160 [ 440.814264][T13758] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 440.814283][T13758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.814307][T13758] __sock_sendmsg+0x219/0x270 [ 440.814328][T13758] ____sys_sendmsg+0x505/0x830 [ 440.814346][T13758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.814366][T13758] ? import_iovec+0x74/0xa0 [ 440.814388][T13758] ___sys_sendmsg+0x21f/0x2a0 [ 440.814404][T13758] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.814432][T13758] ? __fget_files+0x2a/0x420 [ 440.814446][T13758] ? __fget_files+0x3a0/0x420 [ 440.814464][T13758] __x64_sys_sendmsg+0x19b/0x260 [ 440.814481][T13758] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 440.814501][T13758] ? rcu_is_watching+0x15/0xb0 [ 440.814526][T13758] ? do_syscall_64+0xbe/0x3b0 [ 440.814550][T13758] do_syscall_64+0xfa/0x3b0 [ 440.814572][T13758] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.814601][T13758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.814616][T13758] ? clear_bhb_loop+0x60/0xb0 [ 440.814634][T13758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.814649][T13758] RIP: 0033:0x7fd18138eb69 [ 440.814664][T13758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.814678][T13758] RSP: 002b:00007fd182191038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.814695][T13758] RAX: ffffffffffffffda RBX: 00007fd1815b5fa0 RCX: 00007fd18138eb69 [ 440.814707][T13758] RDX: 0000000002048044 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 440.814719][T13758] RBP: 00007fd181411df1 R08: 0000000000000000 R09: 0000000000000000 [ 440.814729][T13758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.814739][T13758] R13: 0000000000000000 R14: 00007fd1815b5fa0 R15: 00007ffdae275c58 [ 440.814755][T13758] [ 441.320974][T13735] wg0 speed is unknown, defaulting to 1000 [ 441.438452][ T5846] block nbd0: Receive control failed (result -32) [ 441.438472][ T5850] block nbd0: Receive control failed (result -32)