last executing test programs: 7.270069829s ago: executing program 0 (id=2482): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x24, 0x7, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2040094}, 0x80) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000ff31ffffffffffdf00000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) 7.080205877s ago: executing program 0 (id=2485): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) r1 = accept(r0, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) close(0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e000000040000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@loopback, @in6=@local, 0x4e21, 0x5, 0x4e23, 0x1, 0x0, 0x0, 0x80, 0x18}, {0x0, 0x3, 0x5, 0xa400000000000000, 0x8, 0x7d, 0x1, 0x3}, {0x49c, 0x8, 0x80000001, 0x7fff}, 0x7, 0x0, 0x2, 0x0, 0x3, 0x2}, {{@in=@remote, 0x4d2, 0x6c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3506, 0x7, 0x2, 0x3, 0x1, 0x1, 0x22c}}, 0xe8) 6.900138811s ago: executing program 0 (id=2488): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b03d0000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000300)=""/224, 0xe0}], 0x2}, 0x2}], 0x1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendto$packet(r1, &(0x7f0000000000)="a9d6ff4a92c4294c98931d97dea0e3dd808b279faf7f56af2daf1a8c8eecac", 0x1f, 0x20008040, &(0x7f0000000240)={0x11, 0x7, r4, 0x1, 0x9, 0x6, @random="b57355d7c471"}, 0x14) r5 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000500)={{r5, &(0x7f0000000440)='\x00)\xb6J\xd4QA8\x02\x9b\xb8\xef\x16\x91]I%\xa2\x04>\xdeN\xae\xe9\x03\x9d4UNb\x13\xb1/+l\xac\xbb\x0fUq\xaf2K^c\x97\xf3\x01jFD\x86\xae\x83\xc6\x81\xe0N\xe1\x8d\x1a\xa9W\xb1\xfb\xdf\xb6\xb73\x89r\n\xeb\x00d6\x01b\xd3t\xed[w3\x12\xfd\x11\xd5z\xa5s&b%\x06b\x19\x16\x10\x1b\x84\tZ\xbf\x9fe\xa9\xeb/\xb1\xe6\x9e\xc6\xc0\xfc\xe4\xd1 \xeb\x12\xf4\xf5\xc58\xd9\xe0\xe8', 0x220000, &(0x7f00000000c0)={@align=0x320, {0x1, 0x23cb, 0x6f800000, 0x5}}, 0x800, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x7}, 0x2, &(0x7f00000004c0)=[{0x2, 0x0, &(0x7f0000000180)='\x00', &(0x7f0000000340)="8a6f97351e9b1434415e8617f38b16f3d62c3d850ba3080e33b25c80c8459d5c1afcf31e41e5b7f7cdb01c1eab238e004b936da0f7f47941e186b25af5ec219aed0b44f7588c92db8d0922ba5aa86f05c8847fe8c900bc0220456a21683daa5d2b75557877ac8a7f0b33f1fcf8928271eb685e7f5544c57215077014e42e879a7b99fef3fdcff11c18f7f7fb60ed8274cf7aab373cddc7dbb8e9de4bc2461627357affa39b55027ae23160772a9e", 0xae}, {0x2, 0x0, &(0x7f0000000400)='\x8at\xc3v\x00', &(0x7f0000000580)="5c858fef00831ded52dd0dbfac4e62c1fb2f5cf0d8c46291c5508a56d230675ffff1ef9b989a83f78b491a1b182bcf720ba4e07f3879debe73a6e9b9b7c50e1e535df354e8932ca9fa2060ec3ce525aec07115bf1dc4176bd44bb6a77bfcb4c6c9616244b7a468689ccba443c590ef97612a21b956656c2b67d778dc74cbdd3868c936e1ebfddbc1935e7e175df654c84bd0a4fb8c8e3b24f29cdd50727b49c1802bb0", 0xa3, 0x2}]}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x1641, @private2, 0xfffffff9}}, 0xfff, 0x9}, &(0x7f0000000200)=0x90) 6.456089931s ago: executing program 4 (id=2491): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000001440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random='@\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES64=0xffffffffffffffff], 0x32600) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="caab00a1b6fed167d42d6a2bbd14a91a5cd23f6160f9e2df0e1a90037d5fd0509b35474524a27ecefd2cea991191fa9be1b9739f5e681fba9532a488357b8d6407bd6dba480aaacd59888e5633973ffa30ada19f47185684e627820438eb85977e47c6a2829a37ec4d1339b63d6ee78ecbe70d841095c2e6bf1c", @ANYRESOCT=r2, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRESDEC=r3, @ANYBLOB="7800000000000000000000000000000000000000020000000000000044a9bb8f2b283f28d274a58bbaab3dd96454e099c770345ca3351e97501b7f4113486e2296f464a5f8e7788f87f948ceda5a286135156da606ebc63b752c36e2339d3b2b47c6c6b966aaf174ad9ad93ca592125dfe6285c0d6e0a067dbe312699992c52d47ca26c074d18da402e2d7e4c28004a9702b2b4c28afcf65388c402bcef3c1315b25fdae31fc5d62f678f7cd5d54c6c7aaaa008a2991d502e5123b449a6204448ad11eb36cd8705745"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, &(0x7f0000000340), &(0x7f0000000300)=""/177}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x14) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x24000000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}}, 0x0) sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_gfeatures}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@deltclass={0x4c, 0x29, 0x300, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffff, 0x15}, {0xfff3, 0xfff1}, {0xc, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x1d}}, @TCA_RATE={0x6, 0x5, {0xe, 0xd}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_prio={0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 6.139273577s ago: executing program 2 (id=2494): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000001b00)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001800)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x29e}}], 0x18}}], 0x2, 0x8000004) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x4000}, 0x20000000) write$cgroup_devices(r2, 0x0, 0x9) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) sendmmsg(r0, &(0x7f0000001c00)=[{{&(0x7f0000000280)=@ax25={{0x3, @bcast, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000300)="f3a657c1107c55555431968c47ec2b06a8125625c80b9f9bc07ed06029781b59e684a93bdbca93fdbd8de4f586b218fa2c7d26f861ed75fd860bece9713417c84dff5cbb8247f5f340dc84f84456b630057d21ad9c7f776a762e0fc9b3ba6f98d2d52647c6df39368c6c5fe90dff6ac68c7aedcd95159250fc04b11d45b1387cd7675b26366716d77e1a24d8dce19d5ef05f0029744fcc44183d37f5254e91317bd3f1c82ab97143b36f2b1dc4ca8cb051cc2a70ed21fa3c2f33a751f2132da07494129a097a1d80", 0xc8}, {&(0x7f00000009c0)="0ec59429a8ca45fe4400fe1d15ffa84a7dee1691159878", 0x17}, {&(0x7f0000000a00)="74bd22a93ae615e086278602b8cce84f64098958f741ef59d61a5eefbe5617af96e53efeb91e7272396e710a06ebcab51dfcd483237a808caf57fc2b0696cfa76da7596d575991f0970172ae6cd98d980ad3d08f8f306c09e75717e1b277b331a2a3dda883ee2eee6e410042b988cc5018f29e6c13ebbe5f11a574a495c457d58947c4aae774ac452c6ff0504c2dd36ed4f188e82a48bfc5347f27e5961dfdf7602277355b4aaee84a74bf1c72ab0b8245e0571a1a9580d70265a45ab1ad72bd1098ec90f57795f3949ed6f6cd92d264dd8b0e8416a5b7792b6d8717c327ed5c288158f49775aece2676bedc6ee2a6db530d7fc224", 0xf5}], 0x3, &(0x7f0000000b40)=[{0x28, 0x103, 0x7c83, "a55415f996ac222cb5b7b69c9253f9a78c59"}], 0x28}}, {{&(0x7f0000000b80)=@nfc={0x27, r7, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000c00)="7457f0ab24169f631e2be6243065ff317b88d2cc392b34ad3414a25448a6bb7b3cd240d11302fa593439bd5f7c4e51fdce132ccb4a805bc955d73312dafa8a02cae97dd87b7c134b01f914b1aaa9b3f082bb833d7db034ce7d2c06bcd16097adbcb03377b0814ce4f8dabc01a97f3d2d14cffa5bf55e39180c0462e6b68a3117c978accf9d422fc3ffa7a13db41f5806ec49f1b79f44ff8dc51370284f1cba93fd280fb4bc57a7997edf849041b08904888d8806ed3f9ced9456f01971edc05551d5bc91c9243a0b1a8eeb0ac1e3671ef0b737eb98d119035f04f951ba6345b0e54cd65e", 0xe4}, {&(0x7f0000000d00)="5576d4c8aac84cb2898cb27cb20c8c914e32e1c52e3b0c3ef83f7b3126ea16388f6414be2fc4d2654d36a29173026903b894a1da6b186e0b96beaf4309d1dc183638f0c7ef0bce357f27cdd5e9db120e9b7f95769abb5906b40b3d6e4eb0ad86cba035df9af6d2afdac0290fb5d90d7df923144dfeec7cecea4a94509ffc019e61f699de115709860b15305cc24b74695f8ba7a499613b99c7ec4f1c71e8a89adfd7609fa139dcf2bd45cf1a12d19a38789866904bcc3deff5ae282cb8469df2302c25689fe21647a1ed9435289ca9fddd0abfe76552df8d9becd0c600fa5a191cd655ca33", 0xe5}, {&(0x7f0000000e00)="1ee04be45121c34795abd8a00f72c5c9875ea505a1d59e05a17a5276c43651ab7aa2c550aec9c935b6718b8f8361ec3e8e29bc4463d5b242c8b24e8f9e859a81572553c8cb4aa49b20d21c516b21185ff83c433713b5e38dcf0f0f478cd6fe1a8a61aa9fb13428f2f6cfff8ca763aae9c1a70ac41c5bf00acba3351b4b1e3642495e0d9027f417fb28f4cf71fc1c8eb62432b0d534cc78719b2509387e63ecad68731d60", 0xa4}, {&(0x7f0000000ec0)="afd37699ed26b71385c3dd560170c546cd9d98490721e8b33867db191b66f24471f0b70b737a9bc3dfbda6c3a7968fe4e5", 0x31}, {&(0x7f0000000f00)="183bf57f2e71b13166a9697b6c705c32e23aff79c40452210be5aae88df5b7c6c091e4900da26ae72bbb5f33722621383c81bd759b6d968d1a82935086463c4c16552fcacbb5d04f5da4e6d42bcbb4ea7ac6e0f1e5a8a3b1790c067063b495f61cd134ebf0c71bb1c332a2729fd71fa268008b46f0d32de2e592f084afb6aebd27134f893650af732fcfe5cee6ecd4086001ef1bae00d63808aa75197e69cb97a955f31634757323bcd0a8ec", 0xac}, {&(0x7f0000000fc0)="686457585c2f81c58f347a3d2da75f3db3ff36ce81dbecc6c324d79ed030053dff7551ed6e826c18b6263266e368e7c33d88f8f5ed92ac91b340dd82d4e14d330ee3c37aee6744a44968cc14780f122696a5694c4a9ea0e6b67980a30cde094ec0aa04b7e16a780501d063ab08dd62093b4439448584da35aee4575a1448199d5c5f22cd7d57f9f287591364fa134986c0d9755eb032e13cb1a0ec1cccc91eaccd98e2931ec079defd08a441", 0xac}, {&(0x7f0000001080)="f11d8a5cdc2893d33dd8d916b5034e6d737d5b6eb1c186dd97e1b2bd8cbc8e762cead6ac852f64d11e1233065537195b8f4fcd99d8191094f6b415046deb6f613f4bcd97539b9651c526e7d174aacfeff45b1b0a4132a4", 0x57}], 0x7, &(0x7f0000001180)=[{0x100, 0x10d, 0x9, "f2d9b454d58d5b7e1ed94e797c8e1e214e2e7a1730fdd7d9ba2ba04015848b4c4f07f8e416b7685a5a58da37e650e5eca2deaf39b655cf9bcd8da085824f5a02f9bc37c65234715ce410a103e29792c2f7036fd051bbea46f815a80313873f0ef0654add95668b9b945adb53fcf762fc4dc9486231371eaa9d28b2e063a47d48d606e533120eee4b57d5eaca54fa3b75393d6dd9a5e44730d102073bcbc4088d62c19071ab45a7711fad48618ad35889d6a12de5f449be84ff43f90534340f3ffebe64f1c4c29d11f1fee2b0ae686b9321209dfb5f3994c757db7d56a8a5a5fd63a3cfe1e35359fbd8"}, {0x60, 0x1f, 0x5ac2, "f632f9bf0ff4eb290422c2d593f33c9230e2ade136bb204b03ce8ffc37a3a26eaa847e2a8b60cdbca8a118744975867b67fe08cf1c1e62dd73d8c2a6cf90a6d802d654235d732577880cca4dede6a6"}, {0x80, 0x84, 0xffffffff, "deb7e1cd6144d3ef359475928816291ae50388d82c7c73d26294bb98f17ffc429f9084ef58e9df76d9157114a17e7e76e5ef4768f8363d4b897d7bda02c367e81161fa6388bfd8de53901e64eb3db00c55fc75c8c06ecc3a96737ba8527afc10529dce0d9c0f5b7b6394d9a01998475d"}, {0x88, 0x1, 0x8, "1dd6010c0548697188deca445402daadff26b19420fa2a234087381c241daddfecf79ad3ddf0a841d616eed71c0c8112dc56e9f19046d2e3417fde117c0f90a1c1b278e59398efbf699fc1c294b3ccf46ac175831d291e4c053c7a87bb1975dea0653ba7180357bf160dd916fe4fcef603efd78743c8b701"}], 0x268}}, {{&(0x7f0000001400)=@llc={0x1a, 0x338, 0x8, 0x4, 0xf9, 0xa, @broadcast}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001480)="eb20336b4f4db4b7692f6a8fd428347557e81afc16f34a593329f07671923798192d2fe40de22e1e04f835494962b56d049dbeeed7be13656acaa9f4bc5b8b2ea82f0f7a655d00e5b31fdd3b83b925b9aad0fcfe173dac564f0c49ffca5a6658bdac9ab3833d424a27c13bdfdc2de3a289cb6466692ed7f7cf9d63acfd1708b12ea7bef430f7b49b5bc5ee2ccde9faac95c8f2865d17471c3e7a7b9a60ed8f050201cbd160552cea967a07f2807d9c756dd4533ed3a477c84447572bfdc1", 0xbe}, {&(0x7f0000001540)="1305883118510074d1c4f102a01d569dfdc8379c3ed45e3c4f11d0c596125a37520e29f132afe6a9aec82e39911a0566437ac70d0aca25129049c587007c39f4b4cfabfd099b18d53d8f0f43ada10ee876810028f7efcc2bb2a5f00a3c273d4574077dda8acc0cff02b9974e73698bbb76a0545c95eef86bf1dfdcfba88bf46a5a246d9d624a834321ac7755012e7b64", 0x90}, {&(0x7f0000001600)="037c871bcbb7a7b667002cf81b3e8c95ef9639eff5e0913958b33adc32d21eae5402bcb8301708a3d8126b2e2c06463e692d95bf083097c734bdefe605bec622e06da7c0f1583bb7ec3cb6344208449bd9d813586edb4989376f490b6896da6beaf99d8a81f80f5ecf3ed354cbe5f22a40dfa9bf31b5cf35f54115e53a3d132c3ac5384c2b97114b291fc43b037de9c0d2701bc5067e2527bf9db31edc4a2e6412", 0xa1}, {&(0x7f00000016c0)="b98def470c4a0d2a9607042c3ff39e6314d2fae8874a953005e81e91208026c5372142cc8acb69ba83c717e63cd00ff223ebc9b3c9213b760b3b78f75461ce94c301ed547f5a199e11975aa6fdbfd3ec4ef5e6b07588bb0808f50c2a3b253a5070b1f7ae93e5bf199b98a9f4efb833f14a35467cdf9c7684e0363ba2883aef6d18e65602cb904c530961b72b918320c0b1656052068e806fcceaf41efd7c92008ab1245422bfec981514392b80e1525bdfce93be7112f560043f075bd8862e6364b8db13e49dc706b8034a5ea92d44c54bbcd8ec8cb3e05c1f304c5b5817d6785c9561cd4dfdf3438df8324323ef6094111ac4df34", 0xf5}], 0x4}}, {{&(0x7f0000001800)=@hci={0x1f, 0x2, 0x4}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001880)="1b8fba3fcd5870c08070c5a8c07bfee946d8d0b6bbe2aa6cfdf8aa6aaa26430b714fa972819a96fb12456ca82107b74cffb325102e4c4134bb8f4adc7c72c81a656929044877438b2f27e59a5f80e18b5f68b1c7e4e67c97bb6eb1f1c1afbcd7a00a33d73e0f8d00c13b5c34f4a88f1d98d1ebde845ea4f02551b906d9bcf8e8b4152c5546ef70d17da575351c08caaab613c17f7b8cb291415cfa9182ebcaf05891804800d622", 0xa7}, {&(0x7f0000001940)="55503b50d5bab63ca707fc1d128785fbbf9e0a119f91d4f7f212752443f6f134c71e7af9d9d7b19f6066e574dc5360b0fef7e10c63666eb589edd7dfa9f45c968a3ce3f901531b12b0cbaf52ec4cd1b01beb580e624992dd1feb72fb35890b50f55e5a0b4cfb13068857c94f50801f50ae98fd8b61f01486b779", 0x7a}, {&(0x7f00000019c0)="7aa2f23ac04fe4635637ac15e2bead32a8463c6531e32584a00dd22340d535ca675c7b2dfdfa58bdf77e774cebfa010432d33b72f3c4f587e6b89e5c4f2af8b8778042b84721c698da69c18a599c7530d0cc4b06c6ee7870a704d5a1fbd0a8496da3ef72f47de5f770df0877fae90af05d26fd008fd32d9f2450b3d2946bc9829941b7e4b6998be1d71a94b7ba98708819e5bc601569d7", 0x97}, {&(0x7f0000001a80)="a5f5dbf84753590464973522eb47da335d31e1808d0b9af8bdc41472835b90024222812796da3da6663f7f67adf757846c321bee6191cd487f5676d4f90d3a7f9bf403278f20800b43c3104b5d4e6aa56b634e4ed7b3119df0edbd65130e9759bd33cc1d140b296cab038ff51dbbad4b6c9d8ef2d383f947eff02d03dcdd96995b9b7577d0c7f6887b5f308be81c87e7e5ecb09a16b7e3ed72cacfb31b00d98639b71a446ac285a398e4326ec2df", 0xae}], 0x4, &(0x7f0000001b80)=[{0x78, 0x108, 0x1, "6d64d2092a12340cf43370431639f328cda5c56f5b29e5d04712dd05fdeecbee6745ff5dda090dbf722c961f840b975f0fb5b9ff8d017bb67ae8613d07f2a8a565566381e14e6cf5ca25704a5541f054bef9f481509a837a399c3779aabd6a71f11b"}], 0x78}}], 0x4, 0x20004011) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r8 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000180)=0x1c) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000040)={0x10000, 0x9, 0x4, 0x5}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x8}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x410, 0xffffffff, 0x120, 0x120, 0x120, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, [0x0, 0xff000000, 0xffffffff, 0xff], [0xffffffff, 0xff, 0x0, 0xffffffff], 'pimreg\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x0, 0x33}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@mcast1, @local, [0xffffffff, 0xff, 0xffffffff, 0xff], [0xffffffff, 0x0, 0x0, 0xff], 'macsec0\x00', 'wg2\x00', {0xff}, {}, 0x84, 0x3, 0xc, 0x2}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x1, 0x3, 0x7}, {{0x1}, 0x3}, {{0x2}, 0x2e}, 0xffff8001}}, @common=@ah={{0x30}, {[0x4d6, 0x4d3], 0x8, 0xe6}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x4, 0x7}, {0x2, 0x4, 0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000002000)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x1d8, 0x11, 0x148, 0x1d8, 0x0, 0x308, 0x2a8, 0x2a8, 0x308, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0xff000000, 0xff, 'syz_tun\x00', 'sit0\x00', {0xff}, {}, 0x7a, 0x1, 0x77}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x3, 0x3, 0x7, 0x0, 0xb0d452e9002af204}, {0x2}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x10000000, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x0, 0x1, 0x7, 0x2, 0x5], 0x3, 0x1}, {0xffffffffffffffff, [0x4, 0x0, 0x2, 0x7, 0x1, 0x2], 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) 5.970912717s ago: executing program 0 (id=2496): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x14, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x400}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048040}, 0x0) 5.913237794s ago: executing program 0 (id=2497): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r5, 0x10f, 0x85) write$tun(r4, &(0x7f00000005c0)={@val={0x0, 0x88be}, @void, @ipv6=@dccp_packet={0x8, 0x6, "45effe", 0x21f, 0x21, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, {[@dstopts={0x19, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xa1}]}, @srh={0x0, 0x4, 0x4, 0x2, 0xf2, 0x0, 0x1, [@loopback, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x6, 0x1f, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x3, 0x10, [0x0, 0x1, 0x200]}}, @calipso={0x7, 0x30, {0x3, 0xa, 0x1, 0x7, [0x2, 0x6, 0x7ff, 0x7, 0x8]}}, @ra={0x5, 0x2, 0x1c1}, @generic={0x5, 0x72, "734e02bbfcfc095a521a85d6c12e6ccd78ca13632261a6a9e0e97b422df594c0fa1bd8552868e6ddd0179b6d9f056a4764cf7fcfb90e1e3cbce52b2eedb71c0b16d1f79d0d4f76251a3e4349955989644b710bf371dadb2fc7d11741a66142c13115fff62be16afa31f32deb9d2ef2d2a5f5"}, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x18, {0x0, 0x4, 0x2, 0xffff, [0x1, 0x80000001]}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x3, 0x0, [0xfffffffffffff000]}}]}, @fragment={0x3a, 0x0, 0x6, 0x0, 0x0, 0x4, 0x66}, @fragment={0x87, 0x0, 0xa7, 0x1, 0x0, 0xc, 0x65}, @hopopts={0x62, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x400}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x7}, @generic={0x9, 0x10, "26e416a1f44d658c27f29eba4314d3da"}, @hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @private2}]}], {{0x4e20, 0x4e22, 0x4, 0x1, 0x4, 0x0, 0x0, 0x3, 0x5, "80a73f", 0x91, 'Isw'}, "37317f3fea284ada9be283851584fa3cf9ccd13719c80991d13d482d319526aae0b798c9c9b8a5720bb5ddba2a4df03271749a9083fae26c3a57f6129f8dac7a3e132a0d6fad8e3ffaa90ee5dbcecf441807345b35b61b5d920cd313ad86b6e8d702a703fae54b"}}}}, 0x24b) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={0x28, r7, 0x1, 0x70bd25, 0x25dfdb7f, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x2400c000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff00000000f1ffffff0000004a", @ANYRES32=0x0, @ANYBLOB="4a840200000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r2, {0x6}}}, 0x24}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x2, @void}, 0x10) 5.796964191s ago: executing program 4 (id=2499): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r0, 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1100000000f336, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r2, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e901000080000000004386dca2b79c43dbfc0205ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r8, 0x3) sendmsg$inet6(r7, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) close(0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, r9, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}, {{@pci={{0xffffffffffffff98}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x3}, {0x5}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000094}, 0x20000000) 3.025925468s ago: executing program 0 (id=2504): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x30, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x10200}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GROUP={0x8, 0x1b, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a6ddf0000000000000000070000000900010073797a33000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a0500000000080005400000000d08000640ffffff400800034000000038"], 0xdc}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000400)={0x14, r3, 0xf03, 0x70bd2a, 0x0, {0x34}}, 0x14}, 0x1, 0x0, 0x0, 0x4044810}, 0x48) 3.023014921s ago: executing program 4 (id=2505): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000003780)=[{{&(0x7f0000002500)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000003580)=[{&(0x7f0000002540)="9d", 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @private=0xa010100}}, 0xfff, 0x4}, &(0x7f0000000640)=0x90) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x901b, 0x8181}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 2.904534771s ago: executing program 2 (id=2506): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@ipv6_getroute={0x34, 0x1a, 0x10, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xa00}, [@RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_PRIORITY={0x8, 0x6, 0x57d}, @RTA_MARK={0x8}]}, 0x34}}, 0x20040810) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}]}]}]}, 0x44}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32=r4, @ANYBLOB="40002f80"], 0x5c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32=r7], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) r9 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r3, 0x18, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, r10}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0xc000) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r11, 0x0, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT_ADD_VIF(r11, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x2003208, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010104}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) r13 = socket$nl_generic(0x10, 0x3, 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) write(0xffffffffffffffff, 0x0, 0x38) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.745541905s ago: executing program 4 (id=2508): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000002cc0)={0xa, 0xfe80, @empty}, 0x27, &(0x7f0000002c80)=[{&(0x7f0000001980)="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", 0x1004}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}, {&(0x7f0000002b80)="14d4c4bf5bc626102171937479b1cb3c53696466d0ad4a4b612125ef4d9b81c1a69a564acfc2d5cc65e2f74fdf5e9e2ba036876350bf81ea6f4e9cbcb244c1766c7d813441cb1382291870019811339fea4bb296d41b6d74493a8c13facb99e2878a429a45b6908d8b16012c1f9db0370d561ef978db4b03218239f8017b40c59b89b7e035fc3e6e320930197c381f39217f874bb2b169bd68d33645893c976624315eda8d1af448ab284ce5520d248637db264cff682991312753779e8ad5449e2faacb63f3898221e1d1b91b689d2e43075a750637ee34dd89cc3777c834ff62960979d02c2bb3d31ea7a022661b4cdcf58de6b9b5818dbd", 0xf9}], 0x3, &(0x7f00000010c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0xff00) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b400000000000000dd0a"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x4, 0x9, 0x44, @local, @empty, 0x20, 0x40, 0xc42, 0x8}}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000004c0)={0x1, 0x0, 0x2, r6, 0x2}, 0xc) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r1, r5, 0xa, 0x0, @void}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x5, 0x4, 0x0, 0x0, @str='\x00'}, @generic="3104d072"]}]}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 2.593976714s ago: executing program 2 (id=2511): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="725eb862"]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x34}, 0x1, 0x0, 0x0, 0xc020}, 0xc044) recvmsg(r0, &(0x7f0000001900)={&(0x7f0000000040)=@qipcrtr, 0x80, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/222, 0xde}, {&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f0000000340)=""/63, 0x3f}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000004c0)=""/110, 0x6e}, {&(0x7f00000005c0)=""/235, 0xeb}, {&(0x7f00000006c0)=""/171, 0xab}, {&(0x7f0000000780)=""/134, 0x86}], 0x9, &(0x7f0000000900)=""/4096, 0x1000}, 0x10042) 2.553995369s ago: executing program 1 (id=2512): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) recvmsg$can_raw(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000380)=""/158, 0x9e}, {&(0x7f0000000040)=""/47, 0x2f}, {&(0x7f0000000440)=""/216, 0xd8}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f00000005c0)=""/209, 0xd1}, {&(0x7f00000006c0)=""/38, 0x26}], 0x8}, 0x1021) recvmsg(r2, &(0x7f0000002e80)={&(0x7f0000000180)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000980)}, {&(0x7f00000009c0)=""/14, 0xe}, {&(0x7f0000000a00)=""/232, 0xe8}, {&(0x7f0000000b00)=""/151, 0x97}, {&(0x7f0000000bc0)=""/166, 0xa6}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/124, 0x7c}, {&(0x7f0000001d00)=""/172, 0xac}, {&(0x7f0000001dc0)=""/4096, 0x1000}], 0xa}, 0x180) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000003c0)=r4, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2.391667646s ago: executing program 4 (id=2513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000380)={0x0, 0x5e, &(0x7f0000000340)={&(0x7f0000000200)={0x58, r1, 0x1, 0x70bd2d, 0x65dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x7c56a6be674c0a11}, 0x800) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, 0x0, 0x22) 2.374033549s ago: executing program 3 (id=2514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x398, 0x188, 0x258, 0xfeffffff, 0x258, 0x0, 0x300, 0x300, 0xffffffff, 0x300, 0x300, 0x5, 0x0, {[{{@ip={@remote, @dev={0xac, 0x14, 0x14, 0xe}, 0xff000000, 0xff000000, 'wg1\x00', 'bridge0\x00', {0xff}, {}, 0x88, 0x0, 0x41}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@ecn={{0x28}, {0x1, 0x2, 0x8, 0x3}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x8, @multicast2, @multicast2, @port=0x4e21, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x847, 0x7, [0x3a, 0x5, 0x3e, 0x1a, 0x6, 0x16, 0x2d, 0x35, 0x1, 0x4, 0x3b, 0x3f, 0x28, 0x33, 0x3f, 0x5], 0x0, 0x2, 0x4}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {}, 0x6c}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x10, @remote, @multicast2, @icmp_id=0x68, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xfdef) 2.224527776s ago: executing program 1 (id=2515): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x102, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x40020) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.220147433s ago: executing program 4 (id=2516): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a0300"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000010027bd7004ffdbdf2500000000", @ANYRES32, @ANYBLOB="104e"], 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 2.123778822s ago: executing program 2 (id=2517): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, &(0x7f0000000500)={0x1d, 0x0, 0x1, {0x0, 0xf0}, 0xfe}, 0x18) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) (rerun: 64) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r1], 0x40}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=@tcp, 0x2}, 0x20) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000880)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x1}}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000005c0)="aa49a0f2547531348d51547c35b4cb0abfaa6d08e9cf35b6cc79f259951de55a34c9ae5025851f33e16114141acadfdcd1643f2ed8e8e37ff9febd1b032be00d6dfa5f1510672064b8fddb37154947ca6bda02af9741951348c3b8a8bcefa4f19a9b0cdf3c7a06833af44029d31c984a74217a8caf54391b4e4e8ffb11092e3ab9a3236688480e70715db5f022b43ba1965cc684fa08fb009163730bcf1a8b01331d729b9e44440d9e7e9788fd2bd988f38f1edbb1fd7d74985926ce63d987f73a43146b38cf700dc78aad2ec0f52b1aa43b31a5ecbe2b785e7ae50dd0ecf085eba62b598b037801fa650ef3a64fce7a32", 0xf1}, {&(0x7f00000006c0)="a713fe7b3a252664fba470eb4359ebc5a582202843d5636f8a948c03d018be68199d153a98b5dd20745ca837ded68b71b00d666da01246a632020dd5ec93f09d4a372bd7fa4f56dad8dd2dc93844dae52960096d9ed76a81d305eb4eb6edb3405ec8483da131cfe1d65eaaba7e37a3c99c670812ccd85135469ecaf38024bab0008a862076ac3c2f39765f8faa3940e5a75969585664f48c4c1d447910bc4900d431924afdc8404ae781c78d2d989c81ebee8a7783813095e076dcf72549af6b00a16e5cfc017fa35cb25cfce3a2832baa53af80efceef68ca262bf31f052262b730cd99c1bffaff229e", 0xea}], 0x2, &(0x7f0000000800)="67f0776373976c964b49f02721acca9ffbda4303358addc88c8a6682f8e20116665895d43f4a031d27eb5242e2c337c6ef7fd726a4ee2241cf848bd2738ced315cf86857e5f9f531121c27535969c80f95f8b07104065dcdadd27d2b6398c3dcb4c52f805c03612b5bebdbb811d9c5a6e0fde5bb4c19043a445e7253f7", 0x7d, 0x5}, 0x800) (async) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e) (async, rerun: 64) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000100)=""/159, 0x9f}], 0x1) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'veth1_to_team\x00', 0x800}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) (async) r8 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r8, 0x2) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000480)={0x67, 0x22, '\x00', [@hao={0xc9, 0x10, @private0}, @hao={0xc9, 0x10, @private2}, @enc_lim={0x4, 0x1, 0x5}, @generic={0x44, 0xe0, "03a8249638e946cdb4d96df0f0915e27eefa11a6b7c66ef5c5c4c263e95c7276a6fa87218a1fde6bc4b802c06da880b9e149b7e01c3d79d1059f496073b3ccc8c6edd0c67db88f8d7d9ee1db4e8e891fa3204e0b19f27247ee0fa342f660c51e6a1aaa141e3b16a5fd510c3a4bd602a5dc6ea94a3b8c57e295f75f13528b023fba67f4827b82efcd22d5a6c26c241692f964032a18ef62000bd4b431225aaff30dcfa1b1027b359542fbc2516c27cade4d4cf7fe28b4f87052f4ddfdc407d92bbfd277b46bf338d063e25735bc45b355aeea773212dbce267c72dba91487e42d"}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0xfffa}]}, 0x120) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x30, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@newlinkprop={0x34, 0x6c, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x14080}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x12) close(0x4) 2.028646848s ago: executing program 1 (id=2518): unshare(0x20000400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x800) writev(r3, &(0x7f0000000200)=[{&(0x7f00000006c0)="e6", 0x1}], 0x1) readv(r2, &(0x7f0000000400)=[{&(0x7f0000003600)=""/4096, 0x1000}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000018000100000000000000000002002000070000000000000008000100e0008dd4a62f86e45bc1009cf84ade37b4ba5ad6b930c42a9973593b386d45ea52f8bf26d5a7ef1b9d0cd45a866c6110595da003e4908aa693cc082981d5b5e718ef4bc4797755f35fb6792d16d4f09586e2283e62b7c67b21b56426363316ad464179ccdcdcb41914cd6181a44bbb30e2104dcd82c219aa3faa4848e2baa2344ff88f09e17c1ff78801df8ad629804b1afb32db796313f0eb41e87dc75f5ad3e7c106000000e3"], 0x24}}, 0x0) ioctl$TUNGETVNETLE(r0, 0x4010744d, 0x0) 2.025643041s ago: executing program 3 (id=2519): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x4c, r2, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x4c}}, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0x1, 0x900, 0x0, 0xffffff80}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f00000028c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002880)={&(0x7f0000001480)={0x13f4, r6, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x46}}}}, [@NL80211_ATTR_TID_CONFIG={0x69c, 0x11d, 0x0, 0x1, [{0x2c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2b4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x7, 0x6}, {0x5, 0x8}, {0x7, 0x5}, {0x0, 0xa}, {0x3, 0x6}, {0x2, 0x1}, {0x2, 0x6}, {0x4, 0x9}, {0x5, 0x4}, {0x6, 0x5}, {0x7, 0x8}, {0x0, 0x8}, {0x4, 0x9}, {0x7, 0x1}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x5}, {}, {0x3, 0x9}, {0x7, 0x2}, {0x0, 0x2}, {0x1, 0x1}, {0x3, 0x8}, {0x3, 0x2}, {0x5}, {0x6, 0x6}, {0x3, 0xa}, {0x7}, {0x1, 0x3}, {0x0, 0x1}, {0x0, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x0, 0x9}, {0x6, 0x3}, {0x1, 0x3}, {0x1, 0x4}, {0x2}, {0x6, 0x5}, {0x2, 0x3}, {0x6, 0x2}, {0x7, 0x9}, {0x7, 0x1}, {0x5, 0xa}, {0x3}, {0x7, 0x3}, {0x4, 0x5}, {0x0, 0x4}, {0x5, 0x4}, {0x0, 0x2}, {0x7, 0x4}, {0x1, 0x2}, {0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x7, 0x4}, {0x4, 0x5}, {0x2, 0x5}, {0x7, 0x3}, {0x7, 0x8}, {0x6, 0xa}, {0x0, 0x2}, {0x0, 0x3}, {0x2, 0x2}, {}, {0x4, 0x7}, {0x0, 0x8}, {0x4, 0x9}, {0x5, 0x1}, {0x1, 0xa}, {0x2, 0x6}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x36, 0x0, 0x1, 0x30, 0x36, 0x6, 0x24, 0x16, 0xb, 0x48, 0x48, 0x2a, 0x24, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0xf001, 0x3, 0x3, 0x5, 0x1]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0x36, 0x24, 0x2, 0x1b, 0x4f, 0x3]}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x3, 0xa}, {0x7, 0xa}, {0x3, 0x4}, {0x6}, {0x0, 0x8}, {0x7, 0x5}, {0x5, 0x5}, {0x0, 0xa}, {0x3, 0x3}, {0x7, 0xa}, {0x4, 0x9}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0x1}, {0x0, 0xa}, {0x2, 0x2}, {0x4, 0x5}, {0x7, 0x8}, {0x6, 0xa}, {0x4, 0x7}, {0x2, 0x4}, {0x0, 0x4}, {0x3, 0x8}, {0x5, 0x2}, {0x7, 0x2}, {0x2, 0x2}, {0x3}, {0x6, 0xa}, {0x0, 0x6}, {}, {0x3, 0x7}, {0x1, 0x9}, {0x4, 0x3}, {0x7, 0x7}, {0x4, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x6, 0x9, 0x4, 0x9d2, 0x9, 0xa]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x6, 0x9}, {0x4, 0x5}, {0x5, 0x9}, {0x1, 0x5}, {0x6, 0x9}, {0x1, 0xa}, {0x4, 0x4}, {0x7, 0x4}, {0x0, 0x7}, {0x2, 0x8}, {0x4, 0x7}, {0x7, 0x4}, {0x0, 0x7}, {0x6, 0x9}, {0x0, 0x4}, {0x1, 0x3}, {0x2, 0x6}, {0x1}, {0x3, 0x2}, {0x7}, {0x6, 0x8}, {0x7, 0x2}, {0x7, 0x5}, {0x4, 0x7}, {0x4, 0x7}, {0x1}, {0x1}, {0x0, 0x7}, {0x4, 0xa}, {0x1, 0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x3, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x2, 0xa}, {0x2, 0xa}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0x2}, {0x3, 0x1}, {0x3, 0x7}, {0x0, 0x5}, {0x4, 0x8}, {0x6, 0x4}, {0x1, 0x3}, {0x7, 0x1}, {0x7, 0x4}, {0x0, 0x9}, {0x1, 0x8}, {0x2, 0x9}, {0x4, 0x9}, {0x2, 0x7}, {0x0, 0x8}, {0x5, 0x1}, {0x0, 0x4}, {0x2, 0x2}, {}, {0x0, 0x4}, {0x3, 0x3}, {0x3, 0xa}, {0x7, 0x9}, {0x5, 0x2}, {0x4, 0x6}, {0x1, 0x5}, {0x7}, {0x1, 0x1}, {0x5, 0x9}, {0x4, 0x7}, {0x4, 0x7}, {0x1}, {0x5, 0x6}, {0x6, 0x4}, {0x3, 0x1}, {0x0, 0x6}, {0x6, 0x6}, {0x7, 0x8}, {0x2, 0x7}, {0x7, 0x4}, {0x5, 0xa}, {0x4, 0x5}, {0x1}, {0x2, 0x5}, {0x7, 0x6}, {0x3, 0x6}, {0x0, 0x6}, {0x5, 0x2}, {0x0, 0x9}, {0x0, 0x7}, {0x2}, {0x3}, {0x5, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x2}, {0x1, 0x2}, {0x1, 0x9}, {0x7, 0x8}, {0x3, 0xa}, {0x3, 0x6}, {0x5, 0x7}, {0x0, 0x2}, {0x4, 0x7}, {0x0, 0x9}, {}, {0x2, 0x5}, {0x0, 0x4}, {0x1, 0x4}, {0x4, 0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x3}, {0x3, 0x2}, {0x0, 0xa}, {0x6, 0x4}, {0x0, 0x4}, {0x6, 0x9}, {0x2}, {0x5, 0x6}, {0x7, 0x1}, {0x5, 0x8}, {0x7, 0x4}, {0x3, 0x6}, {0x3, 0x8}, {0x4, 0x1}, {0x7, 0x5}, {0x6}, {0x0, 0x1}, {0x4, 0x8}, {0x3, 0xa}, {0x4, 0x4}, {0x5, 0x8}, {0x4}, {}, {0x1, 0x5}, {0x5, 0xa}, {0x1, 0xa}, {0x7, 0x4}, {0x1}, {0x7, 0x9}, {0x1, 0xa}, {0x1, 0x6}, {0x0, 0x1}, {0x7, 0x2}, {0x5, 0x7}, {0x0, 0x2}, {0x3, 0x1}, {0x4, 0x4}, {0x0, 0x9}, {0x0, 0x5}, {0x2, 0x2}, {0x2, 0x1}, {0x5, 0x2}, {0x4}, {0x3, 0x6}, {0x2, 0x9}, {0x1, 0xa}, {0x3, 0x3}, {0x2}, {0x6, 0x7}, {0x4, 0xa}, {0x0, 0x6}, {0x5, 0x3}, {0x1, 0x5}, {0x6, 0x8}, {0x1, 0x6}, {0x4, 0xa}, {0x7, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xc, 0x48, 0x4]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x4, 0x16, 0x30, 0x3, 0x18, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x6, 0x2}, {0x6, 0x3}, {0x7, 0x8}, {0x2, 0x3}, {0x5, 0x5}, {0x4}, {0x6, 0x3}, {}, {0x5, 0x2}, {0x6, 0x4}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x9d19, 0x8000, 0x2, 0x200, 0x5, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7ff, 0x0, 0x6, 0xd4, 0x7, 0xffb8, 0x7]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0x16]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0xa}, {0x1}, {0x2, 0x9}, {0x5, 0x7}, {0x2, 0x4}, {0x4, 0x9}, {0x6, 0x3}, {0x7}, {0x6, 0x8}, {0x3, 0x1}, {0x7}, {0x3, 0x4}, {0x2}, {0x1, 0x5}, {0x2, 0x9}, {0x7, 0x7}, {0x0, 0x3}, {0x6, 0x2}, {0x7, 0x6}, {0x1, 0x1}, {0x2, 0x5}, {0x3}, {0x6, 0x5}, {0x7, 0x1}, {0x1, 0x3}, {0x5, 0xa}, {0x6, 0x1}, {0x4, 0x8}, {0x6, 0x2}, {0x7, 0x3}, {0x3, 0x6}, {0x1, 0xa}, {0x1, 0x8}, {0x6, 0x1}, {0x7, 0x4}, {0x0, 0x7}, {0x6, 0xa}, {0x5, 0x2}, {0x6, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x64}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x18, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x54}]}, {0x140, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x24, 0x3, 0x60, 0x2, 0x18, 0x24, 0x60, 0xb, 0x1b]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0xa}, {0x4, 0x4}, {0x3, 0x2}, {0x6, 0xa}, {0x5, 0x7}, {0x1, 0x2}, {0x5, 0x7}, {0x4, 0x1}, {0x5, 0x8}, {0x4, 0x6}, {0x5, 0x9}, {0x7}, {0x3, 0x2}, {0x4, 0xa}, {0x1, 0x2}, {0x0, 0x9}, {0x6, 0x1}, {0x2, 0x3}, {0x6, 0x3}, {0x7}, {0x1, 0x8}, {0x1, 0x5}, {0x2, 0x2}, {0x4, 0x6}, {0x7, 0x8}, {0x4, 0x3}, {0x3, 0x4}, {0x7, 0x2}, {0x2, 0x8}, {0x6, 0x5}, {0x6, 0x5}, {0x1}, {0x1, 0x3}, {0x4, 0x8}, {0x1, 0x4}, {0x7}, {0x3, 0x2}, {0x6, 0x3}, {0x6, 0x7}, {0x6, 0xa}, {0x6, 0x3}, {0x0, 0x5}, {0x6, 0x2}, {0x6, 0x2}, {0x0, 0x7}, {0x5, 0x8}, {0x3, 0x1}, {0x7, 0x9}, {0x1, 0x3}, {0x2, 0xa}, {0x0, 0x2}, {0x3, 0x4}, {0x6, 0x1}, {0x2}, {0x2, 0x5}, {0x3, 0xa}, {0x0, 0x3}, {0x0, 0x3}, {0x1, 0x1}, {0x5, 0x5}, {}, {0x3, 0x9}, {0x0, 0x2}, {0x1, 0xa}, {0x5, 0x9}, {0x1, 0x4}, {0x7, 0x4}, {0x1, 0x7}, {0x7, 0x5}, {0x7, 0x6}, {0x3, 0x9}, {0x3, 0x9}, {0x7, 0x2}, {0x6, 0x5}, {0x5, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x16, 0x16, 0x16, 0x36, 0x5, 0x5, 0x16, 0x6, 0x9, 0x6c, 0x16, 0x12, 0x4, 0x30, 0x2, 0x4, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xce, 0x2, 0x2, 0x14ab, 0x85, 0xfffa, 0x1a3, 0x7]}}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0x2, 0x9, 0x0, 0xffff, 0x1000, 0x81]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x1, 0x9, 0x2000, 0x5, 0x0, 0x5]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1b, 0x6, 0x30, 0x9, 0xc, 0x1b, 0x4, 0xb, 0x9, 0x1b, 0x5]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xe2, 0x7, 0x7, 0x4, 0x1, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x837, 0x43ac, 0x8001, 0x766, 0x0, 0x7, 0x9, 0x100]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xc8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0xa, 0x5, 0xc, 0x9, 0x4, 0x60, 0xb, 0x1, 0x48, 0x6, 0x1, 0x30, 0x30, 0x12, 0xc, 0x3, 0x9, 0x2a, 0x69]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x5}, {0x7}, {0x2, 0x7}, {0x7, 0x8}, {0x3, 0x5}, {0x1, 0x1}, {0x1, 0x2}, {0x0, 0x4}, {0x1, 0x2}, {0x3, 0x7}, {0x6, 0x2}, {0x3, 0x1}, {0x1, 0x6}, {0x3, 0x9}, {0x4, 0xa}, {0x0, 0x4}, {0x7, 0x2}, {0x2, 0x1}, {0x7, 0x2}, {0x3, 0x1}, {0x1, 0xa}, {0x7, 0x1}, {0x0, 0x5}, {0x5, 0x7}, {0x4, 0xa}, {0x1, 0x2}, {0x1, 0x2}, {0x3, 0x1}, {0x1, 0x7}, {0x2, 0x4}, {0x3, 0x6}, {0x3, 0x6}, {0x1, 0xa}, {0x1, 0xa}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0xa}, {0x7}, {0x6, 0x7}, {0x5, 0x7}, {0x0, 0x5}, {0x5, 0x6}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x6}, {0x5, 0x9}, {0x6, 0x9}, {0x1, 0x2}, {0x6, 0x2}, {0x1, 0x3}, {0x4, 0x1}, {0x2, 0x8}, {0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x8001, 0x2, 0x8, 0x0, 0x1, 0x29f6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x7, 0x7, 0x7, 0xa8, 0x401, 0x200, 0x1]}}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffa}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa1}]}, {0x150, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x12c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x9, 0x3d, 0x1ff, 0x9, 0x7, 0x4]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x5, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x1, 0x4}, {0x1, 0xa}, {0x7, 0x6}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x400, 0x0, 0x7d33, 0x7, 0x8, 0x3ff, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x9, 0x16, 0x24, 0x6, 0x18, 0x24, 0x16, 0x6, 0x1b, 0x12, 0x9, 0x30, 0x5, 0x5, 0x1, 0x6c, 0x4, 0xc, 0x12, 0x6, 0x75, 0x2, 0x3, 0xf, 0xb, 0x16, 0xc]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3, 0x9, 0x0, 0x1000, 0x3, 0x6, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x1000, 0xd, 0x401, 0x9, 0x81, 0x3, 0x1000]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0xa}, {0x4, 0xa}, {0x0, 0x8}, {0x0, 0xa}, {0x5, 0x2}, {0x1, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x401, 0x8, 0xef52, 0xc44b, 0xfffc, 0x1ff, 0x200]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xad, 0x1, 0x7, 0xc, 0x2, 0xcc50, 0xe582]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x48, 0x48, 0x36, 0x60, 0x6, 0x24, 0x60, 0x24, 0x1b, 0xb, 0x0, 0x18, 0x16, 0x12, 0x5d, 0x60, 0x1, 0x6c, 0x1, 0x1b, 0x5, 0x24, 0x9, 0x3, 0x30, 0x12, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x6, 0x8000, 0x5a4e, 0x6, 0xb, 0x9]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x7}, {0x2, 0x4}, {0x6, 0x2}, {0x6, 0xa}, {0x2, 0x3}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x35}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x48}]}]}, @NL80211_ATTR_TID_CONFIG={0x23c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe5}]}, {0x1b4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x18c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xac198b3a09c3ad86, 0x36, 0x3, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x2, 0x1, 0x4, 0x89e4, 0xf]}}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0x5, 0x826, 0x0, 0x9, 0x2f4, 0xf, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xa5dc, 0xa, 0x9, 0xff, 0x1, 0x5, 0xd]}}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x3, 0x9}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x6, 0x7}, {0x0, 0x9}, {0x1, 0xa}, {0x6, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x7, 0x4}, {0x2, 0x3}, {0x3, 0x8}, {0x0, 0x1}, {0x7, 0xa}, {0x2, 0x9}, {0x3, 0x7}, {0x0, 0x2}, {0x1, 0x5}, {0x2, 0x9}, {0x0, 0x6}, {0x0, 0x1}, {0x5, 0x6}, {0x4, 0x8}, {0x2, 0x9}, {0x5, 0x6}, {0x6, 0x3}, {0x2, 0x7}, {0x1, 0x3}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x8, 0x1, 0xd, 0x3, 0xf, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0xb, 0x4, 0x5, 0x48, 0xc, 0x24, 0x1b, 0x16, 0x36]}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x7, 0x5}, {0x4, 0xa}, {0x0, 0x7}, {0x3, 0x2}, {0x0, 0x7}, {0x7, 0x3}, {0x4, 0x5}, {0x1, 0x4}, {0x1, 0x2}, {}, {0x7, 0x6}, {0x0, 0xa}, {0x4, 0x5}, {0x6, 0x6}, {0x0, 0x5}, {0x2}, {0x0, 0x2}, {0x6, 0x6}, {0x5, 0x2}, {0x3, 0x3}, {0x4, 0x9}, {0x3, 0x3}, {0x1, 0x5}, {0x3, 0x2}, {0x3, 0x9}, {0x4, 0x7}, {0x1, 0x4}, {0x4, 0x5}, {0x6, 0x6}, {0x6}, {0x1, 0x1}, {0x7, 0x5}, {0x4, 0x6}, {0x0, 0x5}, {0x2, 0x2}, {0x2, 0xa}, {0x6}, {0x2, 0x8}, {0x2}, {0x5, 0x9}, {0x1, 0x7}, {0x4, 0x3}, {0x5, 0x4}, {0x3, 0x7}, {0x0, 0x2}, {0x0, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x6, 0x5, 0x9, 0x7, 0x5, 0x6bf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x40, 0x101, 0x1000, 0xac21, 0x88b, 0x0, 0x576]}}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x6}, {0x1, 0x1}, {0x3}, {0x6, 0x1}, {0x6, 0x4}, {0x7, 0x9}, {0x6, 0x4}, {0x0, 0x5}, {0x6, 0x2}, {0x7, 0x9}, {0x4, 0xa}, {0x4, 0x5}, {0x5, 0x2}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x4, 0x1, 0x0, 0x39, 0x3, 0x18, 0x5, 0x16, 0x1b, 0x48, 0x6, 0x18, 0x48, 0x8, 0xc, 0x60, 0x0, 0x1, 0x9, 0x5, 0x1b, 0x0, 0x16, 0x1b, 0xb, 0x18, 0x1cffc1e09ef4a5fb, 0x4, 0x48, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x959, 0x62, 0x4946, 0x9, 0x100, 0x7ff, 0x6, 0xae]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa09}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x81}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x818, 0x11d, 0x0, 0x1, [{0x138, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x124, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x4, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x3, 0x71, 0x5, 0x6, 0x1000, 0x3, 0x1]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x48, 0x36, 0x1f, 0xe5ace71d88214fef, 0x1b, 0x1, 0x3, 0x5, 0x1b, 0x5, 0x1, 0x4, 0x16, 0x9, 0x5, 0x48, 0x3, 0x9, 0x5, 0x36, 0x4, 0x30, 0x4, 0x0, 0x6c, 0x18, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x80, 0xff, 0x7, 0x1, 0x92, 0x1, 0x8000]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x0, 0x1}, {0x0, 0xa}, {0x1}, {0x0, 0x3}, {0x7, 0x6}, {0x4, 0x9}, {0x1, 0x3}, {0x1, 0x6}, {}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x3, 0xff30, 0x80, 0x0, 0x5, 0xd]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1, 0x1, 0x8508, 0x3, 0x100, 0x6, 0x5cf8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x28bb, 0x5, 0x7, 0x97fb, 0x8, 0x9, 0x7]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x257a584994c2a2a5, 0x6, 0xc, 0x30, 0x4, 0x1b, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x2, 0x0, 0x1, 0x4, 0x40, 0x2]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x7}, {0x3, 0xa}, {0x3, 0x7}, {0x2, 0x7}, {0x7, 0x1}, {0x5, 0x5}, {0x3, 0x5}, {0x6, 0x9}, {0x6}, {0x1, 0x6}, {0x1, 0x7}, {0x6, 0xa}, {0x0, 0xa}, {0x5, 0x6}, {0x5}, {0x4, 0x6}, {0x2, 0xa}, {0x1, 0xa}, {0x0, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x22}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x2e4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x4, 0xfff8, 0x0, 0x500, 0x8001, 0x5, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x60, 0x24, 0x4, 0x0, 0x27, 0x16, 0x0, 0x24, 0x3]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x5, 0x5, 0x80, 0xe12, 0x6, 0x3, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x5, 0x0, 0x2, 0x1, 0x8, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5d21, 0x7, 0xee60, 0x5, 0x85b8, 0x9f0, 0x1, 0x2d]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1b, 0xc, 0x48, 0x2, 0x48, 0x30, 0x36, 0x2, 0x5, 0x1a, 0x2, 0x30, 0x60, 0x4c, 0xc, 0x30, 0x3, 0x1b, 0x16, 0x18, 0x2, 0x12, 0x5, 0x9, 0x18, 0xb, 0x24, 0xb, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0xf5a, 0x41c5, 0xdd4d, 0xf, 0x3, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xed5e, 0xb, 0xe000, 0x1, 0x3, 0xfc, 0x2, 0xa]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x5, 0x3}, {0x7, 0x2}, {0x0, 0x8}, {0x3, 0xa}, {0x5, 0x5}, {0x1, 0x8}, {0x6, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x6, 0x3}, {0x4, 0x8}, {0x1, 0x1}, {0x5, 0x4}, {0x2, 0x9}, {0x0, 0x2}, {0x3, 0xa}, {0x6, 0x8}, {0x4}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x0, 0xa}, {0x0, 0x2}, {0x3, 0x2}, {0x7, 0x7}, {0x4, 0x3}, {0x2}, {0x5, 0xa}, {0x1, 0x2}, {0x0, 0x5}, {0x6, 0x8}, {0x7, 0x9}, {0x3}, {0x7, 0x2}, {0x7, 0x8}, {0x6, 0x8}, {0x3, 0x2}, {0x1, 0x9}, {0x5, 0x2}, {0x0, 0x5}, {0x1, 0x9}, {0x2, 0x9}, {0x7, 0x7}, {0x3, 0x5}, {0x2, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x9, 0x4, 0xbc0, 0x1, 0xb, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x30, 0x48, 0x6, 0x3, 0x6c, 0x16, 0x12, 0x54, 0x5, 0x24, 0x24, 0x136608b27ce96363, 0x6, 0x60, 0x5, 0x1, 0x30, 0x1b]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x1, 0x4}, {0x4, 0x7}, {0x1, 0xa}, {0x6, 0xa}, {0x0, 0x9}, {0x3, 0x4}, {0x7, 0x3}, {0x7, 0x1}, {0x0, 0x3}, {0x4, 0x9}, {0x4, 0x2}, {0x6, 0x6}, {0x6, 0x1}, {0x0, 0x8}, {0x4, 0x7}, {0x1, 0x5}, {0x7, 0x4}, {0x0, 0x9}, {0x6, 0x1}, {0x7, 0x8}, {0x5, 0x6}, {0x1, 0xa}, {0x4, 0x5}, {0x6, 0x5}, {0x3, 0xa}, {0x5, 0xa}, {0x2}, {0x2, 0x7}, {0x1, 0x5}, {0x6, 0x1}, {0x0, 0x7}, {0x3, 0x7}, {0x7, 0x2}, {0x1, 0xa}, {0x3}, {0x5, 0x2}, {0x0, 0x9}, {0x7, 0xa}, {0x4, 0x1}, {0x4, 0x4}, {0x5, 0x3}, {0x5}, {0x6, 0x1a}, {0x0, 0x4}, {0x4, 0x6}, {0x3, 0x1}, {0x2, 0xa}, {0x1, 0x2}, {0x6, 0x6}, {0x2, 0x9}, {0x0, 0x8}, {0x5, 0x7}, {0x2}, {0x2, 0xa}, {0x3, 0x7}, {0x3, 0x4}, {0x2}, {0x1, 0x2}, {0x6, 0x7}, {0x5, 0xa}, {0x1, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x5, 0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xaee6, 0x27e, 0x84b4, 0x6, 0x4, 0x2, 0xe, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x4a20, 0x1, 0x6496, 0x0, 0x9, 0x8000, 0xb]}}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x4, 0x3, 0x8, 0x7ff, 0x8, 0x5]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x60, 0x30, 0x6, 0x1, 0x1c, 0x24, 0xb, 0x9, 0x6c, 0x16, 0xb, 0x6, 0x18, 0x36, 0x193c8ecbc30fe6e, 0x1b, 0x30, 0xc, 0x4, 0x30, 0x60, 0x36, 0x2, 0x6, 0x3, 0x8, 0x16, 0xc, 0xc, 0x1b, 0x24]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x6}, {0x0, 0x2}, {0x3, 0x2}, {0x7, 0x6}, {0x0, 0x3}, {0x5}, {0x2}, {0x3}, {0x5, 0x7}, {0x1, 0x9}, {0x7, 0x5}, {0x2, 0x7}, {0x2, 0x7}, {0x3, 0x5}, {0x2, 0x5}, {}, {0x5, 0x7}, {0x2}, {0x1, 0x5}, {0x7, 0x7}, {0x4, 0x3}, {0x6, 0x2}, {0x6, 0x1}, {0x2, 0x9}, {0x0, 0x2}]}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x1000, 0x8000, 0x1, 0x63d5, 0x6267, 0x2]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x6, 0x8}, {0x4, 0x8}, {0x0, 0x1}, {0x5, 0x5}, {}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0x3}, {0x5, 0x9}, {0x0, 0x6}, {0x4, 0x1}, {0x0, 0xa}, {0x2, 0x8}, {0x0, 0x8}, {0x1, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0xa}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x5}, {0x1, 0x9}, {0x2, 0x4}, {}, {0x1, 0x4}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x1, 0x3}, {0x4, 0x6}, {0x7, 0x7}, {0x4, 0x6}, {0x0, 0x5}, {0x0, 0x2}, {0x2}, {0x1}, {0x4, 0x5}, {0x1, 0x6}]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xee}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x214, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x40, 0x9, 0xb, 0x0, 0x8001, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x2, 0x4, 0x5, 0x6c, 0x9, 0x1b, 0xc, 0x48, 0x3, 0x3, 0x60, 0x2, 0x4, 0x24, 0x36, 0x2, 0x12, 0x24]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x1, 0x7}, {0x0, 0x6}, {0x3, 0x7}, {0x2, 0x7}, {0x0, 0x4}, {0x3, 0x4}, {0x6, 0x2}, {0x5, 0x4}, {0x3, 0x7}, {0x6, 0x3}, {0x7, 0x3}, {0x7, 0x8}, {0x2}, {0x1, 0x2}, {0x6, 0x2}, {0x6, 0xa}, {0x3, 0x7}, {0x6, 0x6}, {0x0, 0x1}, {0x1, 0x7}, {0x1, 0x7}, {0x6, 0x5}, {0x5, 0x6}, {0x3, 0x5}, {0x4, 0x2}, {0x6, 0x2}, {0x2, 0x9}, {0x4, 0x4}, {0x3, 0x2}, {0x0, 0x2}, {0x2, 0x2}, {0x2, 0xa}, {0x1, 0x1}, {0x7, 0xa}, {0x7, 0x6}, {0x0, 0x3}, {0x4, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x6, 0x6, 0x181c, 0x9, 0x0, 0xa591]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x24, 0x12, 0x30, 0x5, 0x36, 0x9, 0x5, 0x36, 0x4c, 0x60, 0xc, 0x2, 0x36, 0x2, 0x76, 0x12, 0x1, 0x5, 0x5, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7f, 0x7, 0x0, 0x920b, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x16, 0x0, 0x1d, 0x1b, 0x9, 0x1b, 0x13, 0x48, 0x2, 0x36, 0x6c, 0x5, 0x48, 0x1b, 0x1b, 0x36, 0x2, 0x6c, 0x5, 0x30, 0x5, 0x2, 0x24, 0x48, 0x4, 0x36, 0x48, 0x12, 0x5, 0x2, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x2, 0x7, 0x7, 0x5, 0x6, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7f, 0x1, 0x2, 0xc2, 0x1, 0x0, 0x9]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x4}, {0x7}, {0x2, 0x6}, {0x4, 0x8}, {0x1, 0x3}, {0x1, 0x8}, {0x2, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x1, 0x3}, {0x2}, {0x0, 0x4}, {0x3, 0x3}, {0x6, 0x9}, {0x1, 0x2}, {0x3, 0x3}, {0x1, 0x9}, {0x4, 0x2}, {0x1, 0x4}, {0x0, 0x9}, {0x3, 0x3}, {0x7, 0x3}, {0x7, 0x6}, {0x5, 0x9}, {0x3, 0x9}, {0x6}, {}, {0x7}, {0x0, 0xa}, {0x6, 0x7}, {0x0, 0x7}, {0x7, 0x8}, {0x4, 0x6}, {0x1, 0x4}, {0x0, 0x6}, {0x2, 0x7}, {0x6, 0xa}, {0x6, 0xa}, {0x2, 0x4}, {0x0, 0x5}, {0x1, 0x7}, {0x1, 0x2}, {0x1, 0x3}, {0x0, 0x1}, {0x2, 0x5}, {0x3}, {0x3, 0x5}, {0x1, 0x6}, {0x2, 0x7}, {0x3, 0x4}, {0x0, 0x8}, {0x7}, {0x0, 0x2}, {0x1, 0x9}, {0x3, 0x1}, {0x5, 0xa}, {0x7, 0x5}, {0x0, 0xa}, {0x1, 0x2}, {0x6, 0x4}, {0x6, 0x3}, {0x7, 0xa}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x842a, 0x1, 0xfffa, 0x80, 0x81, 0x80, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xfff3, 0x2, 0x8, 0x4, 0x2, 0x6, 0x7]}}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x24, 0xb, 0x18, 0x16, 0x5, 0x24, 0xb, 0x2, 0x18, 0x18, 0x36, 0x3, 0x30, 0x30, 0x16, 0x6c, 0x5, 0x5, 0x12, 0x30, 0x48, 0x48, 0x21, 0xb, 0x12, 0xc]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x36e0}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x43}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x108, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa89, 0x592, 0x9, 0xa7ab, 0x2, 0x3, 0x9, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0x4, 0x7, 0x7, 0x1, 0x3cf2, 0x5]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x9, 0x3, 0x9, 0x1, 0x6c, 0x6, 0x12, 0x3, 0x3, 0x36, 0x60, 0x60, 0x2, 0x16]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0xf7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x2, 0x4}, {0x7, 0x8}, {0x7, 0x9}, {0x4, 0x2}, {0x6, 0x2}, {0x1, 0x5}, {0x5, 0x5}, {0x4}, {0x3, 0x8}, {0x2}, {0x6, 0x7}, {0x1, 0x7}, {0x0, 0x9}, {0x7, 0x9}, {0x2, 0x6}, {0x2, 0x2}, {0x6}, {0x5, 0x7}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x3}, {0x3, 0x6}, {0x0, 0x3}, {0x7, 0x2}, {0x4, 0x3}, {0x6, 0x3}, {0x7, 0x8}, {0x5}, {0x5, 0x1}, {0x4, 0x4}, {0x1}, {0x3, 0x4}, {0x2, 0x5}, {0x4, 0xa}, {0x2, 0x2}, {0x0, 0x7}, {0x5, 0xa}, {0x0, 0x4}, {0x3, 0x1}, {0x4, 0xa}, {0x3, 0x8}, {0x4, 0x4}, {0x3, 0x2}, {0x1, 0x5}, {0x3, 0xa}, {0x5, 0x7}, {0x0, 0x2}, {0x0, 0x9}, {0x5, 0x4}, {0x6, 0x9}, {0x0, 0x5}, {0x6, 0x6}, {0x3, 0x5}, {0x1, 0x9}, {0x2}, {0x4, 0x3}, {0x1, 0x8}, {0x4, 0x2}, {0x6, 0x4}, {0x0, 0x6}, {0x7}, {0x3, 0x7}, {0x2, 0x4}, {0x7, 0x1}, {0x2, 0x7}, {0x5, 0x7}, {0x1, 0x3}, {0x4, 0x2}, {0x7, 0x3}, {0x2, 0x8}, {0x0, 0x7}, {0x2, 0x9}, {0x4, 0x8}, {0x4, 0x8}, {0x2, 0x8}, {0x7, 0xa}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x3, 0xc, 0x9, 0x0, 0x48, 0x36, 0x1b, 0x2, 0x6c, 0x12, 0x1b, 0x9, 0x30, 0x12, 0x48, 0x36, 0x9, 0x2, 0x30, 0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x3, 0x6}, {0x5, 0x2}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6c, 0x18, 0x1, 0x2, 0x36, 0x2, 0x5]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x5, 0x6c, 0x1b, 0x48, 0x16, 0x24, 0x24, 0x3, 0x6, 0x60, 0x48, 0x3, 0x3, 0x4, 0x18, 0xeaa3e35272e49cfd, 0x2, 0x36, 0x60, 0x4, 0x3, 0x4]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x7, 0x2}, {0x7, 0xa}, {0x5, 0x9}, {0x3, 0x7}, {0x6}, {0x4, 0x7}, {0x3, 0xa}, {0x3, 0x7}, {0x7, 0x1}, {0x1, 0x8}, {0x3, 0x8}, {0x4, 0x7}, {0x3, 0x8}, {0x3, 0x4}, {0x7, 0x5}, {0x7, 0xa}, {0x3, 0x1}, {0x7, 0x9}, {0x7, 0x9}, {0x0, 0x4}]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x294, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffff2d33}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x30}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xeb}]}, {0x264, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x258, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x5}, {0x6, 0x1}, {0x0, 0x9}, {0x6, 0x3}, {0x4, 0x1}, {0x3, 0x6}, {}, {0x0, 0x6}, {0x7, 0x1}, {0x0, 0x2}, {0x7, 0x5}, {0x3, 0x4}, {0x3}, {0x6, 0x4}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff2, 0x3, 0x6, 0x6, 0xffff, 0x8, 0x81, 0x8001]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x4, 0xd}, {0x0, 0x2}, {0x7, 0x9}, {0x1, 0xa}, {0x4, 0xa}, {0x6}, {0x0, 0x1}, {0x7, 0x3}, {0x4, 0x1}, {0x3, 0x7}, {0x5, 0xa}, {0x0, 0x7}, {0x3, 0x3}, {0x1, 0xa}, {0x6, 0xa}, {0x1, 0x2}, {0x1, 0x8}, {0x6, 0x5}, {0x1, 0x1}, {0x6}, {0x4, 0x5}, {0x4}, {0x2, 0x4}, {0x3, 0x8}, {0x0, 0x1}, {0x1, 0x2}, {0x1, 0x3}, {0x6, 0x5}, {0x2, 0x9}, {0x4, 0x9}, {0x1}, {0x2, 0x6}, {0x3, 0xa}, {0x0, 0xa}, {0x5, 0x8}, {0x1, 0x5}, {0x5, 0x3}, {0x4, 0x8}, {}, {0x5, 0x3}, {0x6, 0x4}, {0x3}, {0x4, 0x1}, {0x1}, {0x1, 0x8}, {0x5, 0x8}, {}, {0x2, 0x2}, {0x6, 0x4}, {0x2, 0x7}, {0x0, 0x9}, {0x1, 0x6}, {0x4, 0xa}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x7}, {0x3, 0x5}, {0x3}, {0x1, 0x2}, {0x1, 0x5}, {0x1, 0xa}, {0x3}, {0x0, 0x6}, {}, {0x2, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0xa}, {0x0, 0x2}, {0x2, 0xa}, {0x4, 0x6}, {0x1, 0x9}, {0x1, 0x6}, {0x3, 0x5}, {0x5}, {0x7, 0x5}, {0x3}, {0x1, 0x6}, {0x7, 0xa}, {0x1, 0x5}, {0x5, 0x8}, {0x7, 0x6}, {0x5, 0x5}, {0x3, 0x2}, {0x0, 0x1}, {0x3, 0x4}, {0x3, 0x4}, {0x1, 0x1}, {0x7}, {0x1, 0x1}, {0x3, 0x7}, {0x7, 0x6}, {0x3}, {0x4, 0xa}, {0x5, 0x6}, {0x6, 0x7}, {0x1, 0x6}, {0x0, 0x7}, {}, {0x0, 0x6}, {0x6, 0xa}, {0x7, 0xa}, {0x0, 0x9}, {0x7, 0x6}, {0x7, 0x3}, {0x6, 0x5}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0x7}, {0x6, 0x3}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x5}, {0x2, 0x5}, {0x0, 0x5}, {0x7, 0xa}, {0x0, 0x4}, {0x1, 0x9}, {0x6, 0x8}, {0x2, 0xa}, {0x1, 0x2}, {0x5}, {0x0, 0x1}, {0x5, 0x7}, {0x1, 0x1}, {0x6, 0x2}, {0x7, 0x4}, {0x5, 0x8}, {0x4, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x5, 0x6, 0xa0, 0x47e, 0x100, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x401, 0x0, 0x0, 0x9, 0x101, 0x8, 0xe9]}}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x60, 0x1, 0x16, 0x9, 0xb, 0x9, 0x9, 0x6, 0x3, 0x36, 0x2e, 0x60, 0xc, 0x1b, 0x9, 0x4, 0x6c, 0x0, 0x48, 0x2, 0x4, 0x4, 0x15, 0x60, 0x6, 0x12, 0x48, 0x4, 0x5, 0x16, 0xb, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8fce, 0x0, 0x7, 0x7, 0x101, 0xfff9, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x3, 0x8}, {0x2, 0x1}, {0x1, 0xa}, {0x2, 0x3}, {0x7, 0x5}, {0x7, 0x7}, {0x0, 0x5}, {0x4, 0x4}, {0x5, 0x5}, {0x5}, {0x7, 0x4}, {0x7, 0xa}, {0x3, 0x5}, {0x3, 0x9}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xb, 0x16, 0x12, 0x0, 0xb, 0x4, 0x5, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x682c, 0x8d, 0x1, 0x3, 0x7f, 0xfffe]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1344, 0xe, 0x0, 0x7, 0x0, 0x7, 0x8]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x36, 0x6, 0x18, 0x60, 0x5, 0x48, 0x12, 0x3, 0x6c]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x2, 0xd12, 0x4, 0x6, 0x1, 0x9]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x0, 0xc, 0x3, 0x16, 0x12, 0xb, 0x3, 0x30, 0x6, 0xf, 0x24, 0x5, 0x16, 0x18, 0x2]}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x60, 0x8, 0x2, 0xb81c, 0xfffc, 0xff00, 0x5, 0x400]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x8}, {0x5, 0x9}, {0x5, 0x7}, {0x1, 0x1}, {0x2, 0x9}, {0x3}, {0x2, 0x6}, {0x0, 0x8}, {0x1, 0xa}, {0x0, 0x9}, {0x6, 0x8}, {0x0, 0x8}, {0x1, 0x3}, {0x3, 0xa}, {0x3, 0x3}, {0x7, 0x3}, {0x6, 0x5}, {0x3, 0x5}, {0x4}, {0x5, 0x3}, {0x1, 0x7}, {0x4, 0x2}, {0x5, 0x4}, {0x0, 0x3}, {0x1, 0x1}, {0x5, 0xa}, {0x2, 0x4}, {0x7, 0x8}, {0x7, 0x2}, {0x7, 0x2}, {0x1, 0x3}, {0x0, 0x9}, {0x1, 0x6}, {0x7, 0x2}, {0x6, 0x3}, {0x6, 0xa}, {0x0, 0x3}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x5}, {0x6, 0xa}, {0x0, 0x3}, {}, {0x5, 0x4}, {0x0, 0x8}, {0x6, 0x3}, {0x5, 0x9}, {0x4}, {0x6, 0x1}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x4}, {0x0, 0x2}, {0x7, 0x7}, {0x5, 0xa}, {0x5, 0x6}, {0x1, 0x3}, {0x4, 0x8}, {0x4, 0x5}, {0x2, 0x4}, {0x5, 0xa}, {0x5, 0x3}, {0x3, 0x7}, {0x2, 0x6}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x88}]}]}]}, 0x13f4}}, 0x5f) socket(0x1, 0x800, 0x749) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000007c0000000000000a64000000060a0b0400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000340100000000800024000000000080001400000001508000440000000020900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, r0, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) 1.853177628s ago: executing program 2 (id=2520): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0xfffffffffffffec6}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xba82}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x3, 0x1}, 0x10) sendmsg$tipc(r4, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x2, 0x3}, 0x2}}, 0x10, &(0x7f0000001a80)=[{&(0x7f0000000a80)="ae0962fcef6eccd7d2014be13d60fd9e9e3f1ce1e27989a9790ddc8a010086b88d516783f8f19db3d2ca1e8de22e48cf01b3a28ea5470271917947faa723a1d1702db2fb7c9fd88d7ae244e1dc4e49d8104254d679dc9d422a7435014c8980e6d0ee17af38aba3560982d316ab02e2c08f988c033b615491b73a1467cf1ec0e774b2790ab1d1d7806a946b4095f033f1a0f2a4a9bb8fd088797c09170382b360cccd632036471c00a3776a2e32d9b8a71b1d99183e17db1099dc77800e467e06435e05cfba1795362e245b6299f32264c97cb24e1830f0e7e0ebd0bb5672ccf21821765e5198729e9a8c5d86b5d6479bd9e9c6d2aa7877aab2c07f0b069b67809e681a2661eb239ba4e03f1c360820bd659e2ab37e278eab7dd0b7b21f8c9cca97b49f1168ddf2815fd81aa1d61807283bf3bdfb96663042ce539cbf98373404e31cbf931a9e9bb6c30ef85bc2f627ad67b1f6fb8620a0eec9b2c9e3a0cda9f58931ba122d81ff68d9125fd6ed060e279e4adba5d110088dbbf1623180d2c9707430d044e8a72ccbd4d4584851ff8e9ac4db6f0ede099ebf77654d59f3996568098ee2f82c401fb1242ac3603339f81d05b35f604059f7d4f7c8a117c09a6a4e6fbaf0253468ba59f50ca014a62ff5603a822faec2c4a88f1ae6fc3fa7e173755db3b57b5031f4ba0904784ae08ec73fb2852af790970be1ca23d0e96bec751f7f9b304d8f7a0ac2498489285f47acb6d69059c4beddf4a981de3f6cfbfe1b4aef1f736b55536dd73f5f8f599724417c22de4bc4657ad1ad0352f9593a7c215c90946b34ce169f583c7ed54213722e5cf19120699bb030da9a0e6a53a0cf3fd5b7caaee66952f773f0159306439d6b4735a5139c8bb72b7975b59c60d773be9b7805ced3966ec4da58d97f4560c8a1ca2316be768bea18bd451cce006bf2d0ffc876d7ebadb79619a2bc4629a73d7175aa5e645bd4ca824a265a2b10e9b420c90b1c63970ce4b00156cadf4d1aa35bfae6fbbe2b8789f9719409736f3267166912b38de180994412248526912fdbd21467015d700a21b96d36121b7bcc93ef930d15a5613fad97af58355202c22494903c19b36e656b8aa39fc004986fdd4def15db6014db531423cddd41d95f1e63e4c7a16d8c9c463a4ec3101be6cb64175a9d993d9d5dd7186b3961d9af2f8117fa46576715ad46c05119bb8adbde7af3ccc50bb88154bf4cd5bad92ba15bc18da574e17e2c0df8fd7443a7c7b293e06803fcd4b67b797d388a5190577278de9cfa8f3601643ac7b1932df599187c95cd84e6e3a9d91427a0dbcc3d7791f692a038b0bf715d0b4ea660cb6ba0e6f75032faa6647091dcd4325c5c85311816f7dbbe14e7c234a814726bf2b9fc601fe313cf2ab740a6d2b354cd46ed51c56ec101da4581c26cea1e58bc7871de192b9543dca24afa8ab02ad2de98fa724fb4c5b0f5476d75e6bb37828e77f94d139d2d73034b2c3fe8d61fc47fb03fd5abc7643d8872458a22d884e22e09ca1de9bbd393c0987c1cbdbe900043523c5afb7593a4c9e0c891ce3568b9e38f094a459ca5a1979576a4f68fb80809d6a3e4e9238a31c95d1ecf765e4968ceb4fa4526a0760c7cc4e74dd37f7bd03dd4d3015ed7d55c8be148991bf54a2a3cdd4be991ee993b2c8efa6bd07ad920ed110338ad8babf1be16074c458a45013bea37901861366758025fa5dbb003c196755f72e384629867a0b900fb48084ea812f9e6088cd59354c4e3bb59a36deecb4572fe5c29c0ae37e6e92dcc90eb719ae915edbdb83fc0ca511d6d70238137fa79bf9b86569d0aed3b06a5cf553374f839c40a5c03d48fbc12aa0582ca6b38d859574667b6f9275aff0958c671d091598924ae0812dece503bff270abc1d9706b42f5c4cc48ee7fbc2f5ec27de78fe37566eb7278e6426b1df8529d07ccc181118e10c0d693036deb149e409611a5ca7cadb3b53c7717a47a5bd33abc9736c36acf5d3a544035bd31e3274e91abaca934df0b9ccc2ee30fa241fe5f6f30eb6639db7fa191306948183f51018163b2b39a99bdf16287e77b6cace88a004d71bbb1416d9ecdaeedcdb3a808cb3d4ae78053e3d1205c4ed66943c56357a798092a038696b5ee728cf238ac547f52055001cc1df8a7bf1f644951a8fc342f331c73dd761a6e44f58777189c27b79bec9e2036619a592d68898b152ab9782a48790d17e6add2154df93a4a3d4dfad963dd72b9155b7664bcac851113faf2b79c69dd746daea1dc914b913d2fd6b122915da1078934887e1086b8945bd809d52b1569631c9bd6ced3e596e1e556ce408fe5b8f0b65f5a93adc33810bf031bb29269a0ce69f8603b805f9ec8c30e00b2faca17500c9de8f78d7c4f34f3aef327a1afe1ccfa8eb2f5f66b810c2b6ed1b5facf1456de8fc96beb49e2af728eca0d11f4401dd8e8503a15948d5d59a44e7ea6da5cfb55a3c7963e66ba0c387540c2fa4ec4dd83f9beada217848ddd5722ac5a3bc70ec21fb5af822545e1ef695c2cf41421220f98c1526e3b55a9c67d54e88f56cb275687a071bb7b07ad12e9e2b7c80605862d8fd2af46ff0386b53a7df8af230a2ca647369f6e83358875f2d831b85081d9d90b2e026f901af3b3f0c4016eb6087ec3497a25c8ade0a303f6e8e94601053cf13199f25ecf5a68fea8cd5d1c7aa905b3b25c1417cfa6b1823d7375040d7b4e652cdaba26136338a63b6a38bba7f233195a799e1865535ecb43b9d29c7b356a55d16a31d5fd287e93b62ceaa7851548b87d07a9386189796eb8769e777be0a2779f565c7f4925073dc314ebb2dc60fdc18e24c741ca0ed9308450e5a56a351c589ff817dbeb989d238716ec6f9383a3d920c5ed80a1c9d67c2cc65387b075a27e73a0e618da3d8542e0facfdfb7bebaeff10b4949d997f292407da25a3b081c84e5554f6f793eafb5de272daf5859f9574ddc2175b042c8fa0cd20601d93680c36c35a91c60bbe1ecf544ed81ca2c9fc280ba3d76b8e1c3efe820072dd2938e99219e7fad3fc67cdabb82c587663766d75a5f028bd9e4751276d305d619928fb385c79a0d5209e40f7d16d74286c68099eb818756bb34872398e30692991c6fe1bb271ad9b9a273357c664b203d72be9eee5f7ab88e918446ad8b580010f831d48f4bdb8edf437ec02d08f674307ca701c222f42fb769d40a5975b75553aadaf631b9a516e082d1e741475bbfccca41aa419775842b208c4c26aeb89c51608e228c16bc5911bde5354dd2c122ac07442247df9c300b79b0040cee0cb42fd58793402b10edc736f196e0cf247ca7266db04c8b83b6198577250691117c6425edf305eb8e490a3e10201cb92c31c8e7f8a0791bb7de52429b4b491248f1a2ec2c3893e31878cc62b83144d0af5de8f9ea1639a349eab4ecd966bd735adb8cfc64f6a9f9a5f18f6099bf907f8238d03648d6ea15362d42da8fd6d7bedf37c450af9bb7fdf12771aee887f7aa51ccab17efa96bd0ffb8ca5cb66a1e55ac5c357a63e028d0ae4a12f7902d13faa7c2a916abf430a353ab3590d5bc33920d03ef8ee1c3dc8c591792e0100f7482315f4796b4357fcfd21a7a3f4e159113e3c6e527201304736d72bca9c4427911564db19a18fb3a355f2de28b1c9dbbec5a4d135e8ee378945ee55502a77328f890d9252da715b8077cdafca06775f7c6648eb1c38f0da854677f4eb6b8fe4bf300b4f0180f0eb8f37c3002e0aa4cf67040ecb76b666c516f24821be7858c3608f200a06ddc1d33ed2cf210cef4f8bee72aea66058edf6b8912c3296492a79deb12a3257643b2c2db7f5644585aa68196715b7f60f9a50c933196d934b7752bb530995464232045f564aa09459ed0a7fec8245039a11137eb8e3f8f473771fce3dd1283ac41ce3f3b5c782e981a070029d0b15538ca21cbdab0b5a5199052d31ad483ca7018dd5563d3044c1a03a8f28b24ca7bb7887f5c8aa98bbced74ca7bdc44114993c60e728f3bfc0430e061ddc1116735e37ea83705b43e71514b39a6a2609ac9ba5041067cc4064f390cf0f8d04df4840013e8df6d2e5d6dde87a8cd43763158f37dc0952de8929fdaf2dfad048f52158e4a9b25754c8dede825f82fc792ecf3fb9dae4bfd9f2ffbcbeb927a42cd21d628011c4854daf4290265d5b7d353c200d3b5cb5aff3f3c589099a948bf6786d9036959ae511479845478675fbdd84a43681172c0c46193e97470008774a6e385809cc7036e7e310cb176d3a1574cb12e3a4feac481c6431c58adf4e547bf6a0ef892fbb7d53cebe8c847aa868252b0e79e0fb446f1f7f38024f06801a242a8e46a1bd0cb468b54b324a20b534447dfd25b50e4505c4373e8735783102828798bbd83feef10d95ef3a46e046c7593ba8de1e7bf4b9aa0f9cf471d7edba3b65019bb8e3ccd6f8456e65f4881832a2f958b383593b8a177989cbbe418bca11a6b587916823402a0a53c542d6bf0f34240fc3e7974c074933f190a85d1d48a14a64b72df16429ad2f432a34f049b1b1be25f8d3dc923b52fc79480885dac2c6215859fd16e2fc26e8de3018ed59c4964679ed812224d1a91176a3e917ed7909a8fb5a9d472d1e5567d7b7ef0b60989754741519dd0a430508efff1ba35cacc31b2b6ad09bb73d754ffa7bf003bd007eae4d042ab65c7373b7134336ed930f7edc211e1430c477898d12847aa1c2d424ba71d079a51d63ff0949a520559fa1b789819837c98cfde8bd2bb1fe55466fd4abc25dd7bc32a4b9907e70dab6e2e3d26e8e34813a389fc4056135fa9f099a03780c03288e3a0a073c070fa083b0cb7f49b4d13b7922e523d347611766fe500c2540f2e779911700eb4e61cc5fb3d026a88347ae6b07a74a3049054342c843514de60abb3e5830691222d3fa447d4e90f9fe273660d2642129d961c3945a1225dbb190350769c18550e68d5e12bda2b9b89e5d963379799a87f0f8026c1367a8d9e8b534810606115523957016af8c6bb5b7f526de6258f24798155d772192e9e42866c7864aab303ad80415858eb479eb3f849ac49b6dbb0bfc5ac9abe871942213a235403d0a90c7245a8483180d425c127b9deadb04460fd561135a6a146cca6d2597e311a9621a83b5904ca9c266749a4b8c933a8572771c03ea821e080ee1e86f2fc6aa571ffd08b03c7ab92dc591bfaec13443a2bf536f512f55b8f5497d6f6adf807ee71d625a7dd9496981d8a5e11831d56a9eacef25954212270c0ccf87a1c2a325b2b7e725badd31fd03a852e89eed88155176d878175c12771f48e9ad818071ebeaddabf498a24f5f6bb9db6243f8594893ccd81629641d22f1c6c97b86f4e23bc3ac8c1898551fb4b4b20c9016a698abb336547f5885bac7614b90ad8ad1b919b5556b90a09b383ae7b3423d267daa8271940f6bf0f16e4925faf2d8c0a6be96457f31aee672b725f219907cb0e9625f9271677e1366e51bb061b7712c58a82de10d350ff0046f072e2f97353ec14f2087f85d9573b94e4d2870b479c501e906ad3d85ba53f07e929de53000fda0f43d33e432828252ff4edee836623853de9742ab09f88fa6cff76f7fca16a6336c7e66a4481459d220b93d2d9a02b8d4647a242e2b60ff4b24f5f97b9b0308dcfa43eab7181d1f59e6cb007bb556102c27921c8e7ee7189a0ddef669fdbae9fba3570fbe250c0bffa19f6b91f9cd4abc8970497e1a3ae28817ee499a49102af1fc8a86f4f6915bdb1d62050299164c55ffc915c659287a9c", 0x1000}], 0x1, &(0x7f0000001ac0)="4ab7e3eba41d3ade2fcd5435f54b5fc364d2732de66c07c17b9dc903af1003dd98506ff4203831cd6f29b152851fcecc0245b032f06971e895fdef2a1672876519ac980abb002029a54b6d682601f01358fefcc40cfa51c2d161ab", 0x5b, 0x40000}, 0x40044) bind$tipc(r4, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r7) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000000)=0x87, 0x4) bind$tipc(r3, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r8, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x8001) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r9, 0x800448d7, &(0x7f0000000180)) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x240080d4) 1.727730006s ago: executing program 1 (id=2521): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000380)="fad33075218151db00316f3a277fedbc6c8e46fe766f486d7ce218d5be2cf4380cc23b64201f3516", 0x28, 0x6008092, &(0x7f0000000080)={0x11, 0x88a8, r1, 0x1, 0xda, 0x6, @remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1805000000000400eeffff7a000000950000000000000000000000000000009c7de1a5c1858e763dd953d735ac00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r3 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80) socket$kcm(0x1e, 0x7, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in=@remote, 0x0, 0x0, 0xf7fb, 0x4, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x20000000000000}, {0x2, 0x9, 0x83, 0x4}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x3506, 0x2, 0x0, 0x2, 0x3}, {{@in=@loopback, 0x4, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@dev={0xac, 0x14, 0x14, 0x24}, 0x4d4, 0x32}, 0x0, @in6=@local}, {{@in=@remote, 0x4d4, 0x3c}, 0x0, @in6=@mcast1, 0x3505, 0x0, 0x0, 0x0, 0xfffffbff}]}]}, 0x1bc}}, 0x4080) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000884}, 0x4004004) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f00000009c0)={0x0, {{0xa, 0x0, 0x40000003, @private2, 0x8}}, {{0xa, 0x4e23, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xa0}}}, 0x108) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r9, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000ffdbdf25040000001400010000000000000000000000000000010400"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x12) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r8, @ANYBLOB="00042abd7000fddbdf25010000005c000280060002004e22008006e50d004e220000140001007f00000100000000000000000000000008000300010000080004000900000014000100ac1414aa000000000000000000000000080008000300000005000d0000000000080005000700000008000600030000000800040007000000403ba10a58dc418c8dd1cae222c65a7f0d35d2ce91555540be456fa09da09d5388d8d0b1f2038a2b201952"], 0x88}, 0x1, 0x0, 0x0, 0x81}, 0x80) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r11, @ANYRES16=r11, @ANYRESHEX=r11], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x2000889}, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1.718604516s ago: executing program 2 (id=2522): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x7) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000004100)=@bloom_filter={0x1e, 0x3, 0x7, 0x60e, 0x65040, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0xf}, 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc00000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x201}], 0x1, 0x20, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x1d, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000540)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x30, 0x80}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r8, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x0, 0x0, @void}}}}}}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r5) 1.205601114s ago: executing program 3 (id=2523): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000700)=ANY=[@ANYRESHEX=r1], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) writev(r2, &(0x7f0000003900)=[{&(0x7f0000002800)="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", 0x1000}, {&(0x7f0000003880)="93ccd2e0c1cae803e401ec8f67b836472019d444db2966758dca33804de5c1eec7f1c4b6b007a19ba56008e9ab313e215df5c94a4a67e2688ef57b7a305d27c41277ee7f94d2f389d9fe", 0x4a}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000280)={r7, 0xfffc}, &(0x7f00000002c0)=0x8) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000540)={r7, @in6={{0xa, 0x4e23, 0xe, @mcast2}}}, &(0x7f0000000600)=0x84) recvmmsg(r3, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) 695.979762ms ago: executing program 1 (id=2524): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180)="00050002", 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4) r1 = socket$inet(0x2, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000340)=ANY=[@ANYRES8=r1, @ANYRESOCT=r1, @ANYRES32=r1, @ANYBLOB="7aec02a66c72f8e9bef1adf3acab449ed7d0bf637564e8bfd95d92143a8a7833ac5537fd0294c9082979f3a667877669bade0886fa0c1a751a99735d0adc1ba2d94f2cb83e52e6e1cb9ed7246b25b9c0712e53d098e39cc2c85f472b5c45a11abf7698740947af18f51758197bc282b95581414ba05e0f1423ec93577f972634", @ANYRES64=r0, @ANYRES32=r1], 0x18) 563.924609ms ago: executing program 3 (id=2525): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r1}, 0xc) syz_emit_ethernet(0x29d, &(0x7f0000000a80)={@empty, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x267, 0x3a, 0xff, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, {[@routing={0x0, 0xa, 0x1, 0x2, 0x0, [@mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x39}]}, @dstopts={0x0, 0xa, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xfda2}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x30, {0x1, 0xa, 0xf, 0x0, [0x7, 0x9, 0x2, 0x3fffffffc0, 0x9]}}, @hao={0xc9, 0x10, @loopback}, @pad1]}, @hopopts={0x84, 0x0, '\x00', [@pad1]}, @fragment={0x2f, 0x0, 0x2, 0x0, 0x0, 0x3, 0x67}, @routing={0x2, 0x8, 0x2, 0x2, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x22}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1]}, @fragment={0x33, 0x0, 0xff, 0x1, 0x0, 0x0, 0x66}, @srh={0x29, 0x8, 0x4, 0x4, 0x81, 0x48, 0x101, [@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote]}], @ni={0x8b, 0x0, 0x0, 0x6, 0xb, 0x9, "c5691cb937a645562dc61822e40b7df825bf7380057faceb2efaee19b3a3ced994de9b24ac623b5a24fb87e00a6ae0663aec3612ab80b8fb0de0bd17432d85faa6a9ea3befcae6fd4e1c9711da6b770b2121d302e7135a9cadd3d4bc278fc490c2ecedf64efe1592685ca949749415cb169c72860ba2c4dd197e5c5e94021739f01280fefbae0269fe993e18192f451aae989f41b86bad074783edfbdac770a96c5a872812fef77cc982a6bff76d22686d19971027ec5df3ec33521920f69c61fd3e3be696cf6e844089f9da075bf34b5ba6859814073ef1d63082126d964228a6e5988926b83e829e0378aaa99a92"}}}}}}, 0x0) 524.476325ms ago: executing program 1 (id=2526): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x60) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000000340)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x3}}, 0x10, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000640)="69710c3e7b90", 0x5dc}], 0x2, 0x0, 0x0, 0xc0090}, 0x4000000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x82, &(0x7f0000000180), &(0x7f0000000200)=0x8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24008090}, 0x40000) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) recvmsg$qrtr(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/17, 0x11}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="38000000400007012bbd7000fadbdf25037c00000400c2801c00018003000000000000000000000000000000000000000000000104000800e50c51e6e39ddda0216e833fdaa411120b697534eb9caa28a6f84527f4de6c90f9320a0cc47c9365a4d0e0ac347a8b2cc16db7890c5405211977c0abc44ed3a93254decaddfec9a87eee3654f0166a8d685b1d8936a2e811c4f2ec0f1e480c7552f018138f09a3addd35e9c4934c"], 0x38}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[], 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa000000000000711037000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x4}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r8) 198.160725ms ago: executing program 3 (id=2527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62", 0x94}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d21", 0x50}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c", 0x89}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f3", 0x1b}], 0x3}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000)=0x8aa, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62", 0x94}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d21", 0x50}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c", 0x89}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f3", 0x1b}], 0x3}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) (async) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000)=0x8aa, 0x4) (async) 0s ago: executing program 3 (id=2528): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf25250000000e0001006e6574646576736964657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$inet(r5, &(0x7f0000000580)={&(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000200)}, {&(0x7f0000000280)="59979a6cc7581c7df9018da26a61825666efe80a95eea990c3e0fe3f7bf28187a69be3e491798881718619", 0x2b}, {&(0x7f0000000340)="946b54234e726cab01f8aaf3f9cf0a753a5b0609d38f5b4597f80f83d6882b43a8b1e25ebb6bac6bf05574b8fbd8d8966ee370cb81306a4faf7bcf1c01415b142e03ee0b67a7d6d8bfcf09866b403385cba2e2582e73d226c9ff7d15c21fcc5aa3c00d03f7818f03c78f0574aa5aae6ef02449", 0x73}], 0x3, &(0x7f00000005c0)}, 0x1) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x6, 0x1, {0x0, 0xa}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r2, 0x1) kernel console output (not intermixed with test programs): 498164][T10207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.498173][T10207] Call Trace: [ 190.498179][T10207] [ 190.498185][T10207] dump_stack_lvl+0xe8/0x150 [ 190.498212][T10207] should_fail_ex+0x412/0x560 [ 190.498241][T10207] should_failslab+0xa8/0x100 [ 190.498270][T10207] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 190.498294][T10207] ? __alloc_skb+0x186/0x7d0 [ 190.498323][T10207] ? __alloc_skb+0x1d0/0x7d0 [ 190.498340][T10207] ? __local_bh_enable_ip+0xd0/0x130 [ 190.498364][T10207] __alloc_skb+0x1d0/0x7d0 [ 190.498384][T10207] ? __might_fault+0xaf/0x130 [ 190.498408][T10207] alloc_skb_with_frags+0xc8/0x760 [ 190.498439][T10207] sock_alloc_send_pskb+0x878/0x990 [ 190.498479][T10207] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 190.498503][T10207] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 190.498523][T10207] ? lockdep_hardirqs_on+0x7a/0x110 [ 190.498542][T10207] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 190.498560][T10207] ? skb_put+0x11b/0x210 [ 190.498582][T10207] bt_skb_sendmsg+0xd8/0x5d0 [ 190.498607][T10207] ? __pfx_bt_skb_sendmsg+0x10/0x10 [ 190.498630][T10207] ? __local_bh_enable_ip+0xd0/0x130 [ 190.498652][T10207] rfcomm_sock_sendmsg+0x2ac/0x470 [ 190.498675][T10207] ? __pfx_rfcomm_sock_sendmsg+0x10/0x10 [ 190.498692][T10207] sock_write_iter+0x49b/0x4f0 [ 190.498717][T10207] ? __pfx_sock_write_iter+0x10/0x10 [ 190.498763][T10207] do_iter_readv_writev+0x619/0x8c0 [ 190.498791][T10207] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 190.498820][T10207] ? bpf_lsm_file_permission+0x9/0x20 [ 190.498844][T10207] ? security_file_permission+0x75/0x260 [ 190.498864][T10207] ? rw_verify_area+0x255/0x4d0 [ 190.498891][T10207] vfs_writev+0x33c/0x990 [ 190.498919][T10207] ? __pfx_vfs_writev+0x10/0x10 [ 190.498935][T10207] ? vfs_write+0x9bc/0xb90 [ 190.498969][T10207] ? do_sys_openat2+0x14c/0x200 [ 190.498986][T10207] ? kmem_cache_free+0x182/0x650 [ 190.499023][T10207] do_writev+0x154/0x2e0 [ 190.499045][T10207] ? __pfx_do_writev+0x10/0x10 [ 190.499072][T10207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.499092][T10207] do_syscall_64+0x15f/0xf80 [ 190.499110][T10207] ? trace_irq_disable+0x3b/0x140 [ 190.499135][T10207] ? clear_bhb_loop+0x40/0x90 [ 190.499157][T10207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.499174][T10207] RIP: 0033:0x7f9cd399cdd9 [ 190.499191][T10207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.499206][T10207] RSP: 002b:00007f9cd4837028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 190.499225][T10207] RAX: ffffffffffffffda RBX: 00007f9cd3c15fa0 RCX: 00007f9cd399cdd9 [ 190.499238][T10207] RDX: 0000000000000002 RSI: 0000200000019880 RDI: 0000000000000004 [ 190.499249][T10207] RBP: 00007f9cd4837090 R08: 0000000000000000 R09: 0000000000000000 [ 190.499260][T10207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.499271][T10207] R13: 00007f9cd3c16038 R14: 00007f9cd3c15fa0 R15: 00007ffe066ba1f8 [ 190.499301][T10207] [ 191.038353][T10225] netlink: 'syz.3.1137': attribute type 1 has an invalid length. [ 191.079381][T10225] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.082407][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 191.086117][ T5618] Bluetooth: hci2: command 0x0406 tx timeout [ 191.099720][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 191.427235][T10244] nr0: tun_chr_ioctl cmd 1074025677 [ 191.455008][T10244] nr0: linktype set to 774 [ 191.703469][T10251] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.710760][T10251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.718345][T10251] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.725548][T10251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.751182][T10255] netlink: 'syz.3.1144': attribute type 2 has an invalid length. [ 191.811692][T10253] bond0: left allmulticast mode [ 191.825903][T10253] bond_slave_0: left allmulticast mode [ 191.832543][T10253] bond_slave_1: left allmulticast mode [ 191.841413][T10253] dummy0: left allmulticast mode [ 191.847550][T10253] bond0: left promiscuous mode [ 191.852413][T10253] bond_slave_0: left promiscuous mode [ 191.858523][T10253] bond_slave_1: left promiscuous mode [ 191.870268][T10253] dummy0: left promiscuous mode [ 191.880538][T10253] bridge0: port 3(bond0) entered disabled state [ 191.897797][T10261] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1144'. [ 191.918798][T10253] bond0: (slave dummy0): Releasing backup interface [ 191.991449][T10262] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.008367][T10253] bridge_slave_1: left allmulticast mode [ 192.014220][T10253] bridge_slave_1: left promiscuous mode [ 192.024990][T10253] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.037040][T10253] vlan2: left promiscuous mode [ 192.041909][T10253] geneve0: left promiscuous mode [ 192.049683][T10253] bond0: (slave bond_slave_0): Releasing backup interface [ 192.059891][T10253] bond0: (slave bond_slave_1): Releasing backup interface [ 192.085242][T10253] team0: Port device team_slave_0 removed [ 192.102215][T10253] team0: Port device team_slave_1 removed [ 192.117004][T10253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.129657][T10253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.142960][T10253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.152075][T10253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.162623][T10253] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 192.209979][T10253] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 192.281587][T10261] bond5: option primary_reselect: invalid value (227) [ 192.318626][T10277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1148'. [ 192.328916][T10277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1148'. [ 192.331874][T10261] bond5 (unregistering): Released all slaves [ 192.379017][T10253] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1144'. [ 192.416858][T10277] tipc: Enabled bearer , priority 0 [ 192.452725][T10277] syzkaller0: entered promiscuous mode [ 192.458707][T10277] syzkaller0: entered allmulticast mode [ 192.513305][T10282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1149'. [ 192.523666][T10282] nbd: must specify a size in bytes for the device [ 192.543584][T10275] tipc: Resetting bearer [ 192.601820][T10275] tipc: Disabling bearer [ 192.752079][T10288] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1151'. [ 192.801531][T10288] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1151'. [ 193.101248][T10295] bond3: entered promiscuous mode [ 193.107678][T10295] bond3: entered allmulticast mode [ 193.114791][T10295] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.322213][T10317] netlink: 'syz.1.1159': attribute type 12 has an invalid length. [ 193.355392][T10317] netlink: 'syz.1.1159': attribute type 29 has an invalid length. [ 193.364772][T10317] netlink: 'syz.1.1159': attribute type 2 has an invalid length. [ 193.373283][T10317] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1159'. [ 193.410607][T10317] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1159'. [ 193.423521][T10317] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 193.432754][T10317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.596705][T10323] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1160'. [ 193.625573][T10323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.052840][T10341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.134636][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.141126][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.107420][T10365] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 195.262304][T10365] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 195.329205][T10365] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 195.443291][T10365] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 195.521887][T10381] IPVS: Scheduler module ip_vs_ not found [ 195.603887][T10381] syzkaller1: entered promiscuous mode [ 195.642376][T10381] syzkaller1: entered allmulticast mode [ 195.861507][ T35] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 196.710094][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 196.927204][ T35] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 196.989465][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 197.157896][T10429] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 197.223583][T10441] netlink: 'syz.4.1193': attribute type 1 has an invalid length. [ 197.379226][T10441] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.440881][T10449] bond3: (slave geneve2): making interface the new active one [ 197.456515][T10441] netlink: 'syz.4.1193': attribute type 1 has an invalid length. [ 197.473047][T10449] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 197.487293][ T35] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 197.510038][T10456] netlink: 'syz.3.1196': attribute type 1 has an invalid length. [ 197.513766][ T35] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 197.537945][ T35] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 197.607943][T10469] __nla_validate_parse: 5 callbacks suppressed [ 197.607960][T10469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'. [ 197.695858][T10456] bond5: entered promiscuous mode [ 197.716341][T10456] 8021q: adding VLAN 0 to HW filter on device bond5 [ 197.729751][ T35] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 197.754154][T10456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1196'. [ 197.916939][T10473] bond5: (slave bridge3): making interface the new active one [ 197.925469][T10473] bridge3: entered promiscuous mode [ 197.931576][T10473] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 197.963297][ T1039] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 197.973333][ T1039] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 197.989592][ T6213] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 198.424403][ T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 198.632935][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1213'. [ 198.680488][T10520] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 198.838948][T10528] netlink: 'syz.0.1214': attribute type 8 has an invalid length. [ 198.995407][ T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 199.450898][T10567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1227'. [ 199.779069][T10580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.850221][T10591] syzkaller0: entered promiscuous mode [ 199.856157][T10591] syzkaller0: entered allmulticast mode [ 200.072511][T10600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1235'. [ 200.082065][T10600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1235'. [ 200.114902][T10601] ip6t_srh: unknown srh invflags BA61 [ 200.130304][T10602] ip6t_srh: unknown srh invflags BA61 [ 200.187725][T10593] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.195283][T10593] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.295626][T10608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.599112][T10593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.636223][T10593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.883755][T10593] batman_adv: batadv0: Interface deactivated: gretap1 [ 201.078590][ T1039] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.110181][ T1039] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.133865][ T1039] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.200304][ T1039] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.236693][T10620] FAULT_INJECTION: forcing a failure. [ 201.236693][T10620] name failslab, interval 1, probability 0, space 0, times 0 [ 201.280439][T10620] CPU: 0 UID: 0 PID: 10620 Comm: syz.2.1242 Not tainted syzkaller #0 PREEMPT(full) [ 201.280464][T10620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 201.280474][T10620] Call Trace: [ 201.280480][T10620] [ 201.280487][T10620] dump_stack_lvl+0xe8/0x150 [ 201.280520][T10620] should_fail_ex+0x412/0x560 [ 201.280547][T10620] should_failslab+0xa8/0x100 [ 201.280575][T10620] __kmalloc_node_noprof+0xf0/0x7c0 [ 201.280598][T10620] ? lock_acquire+0x106/0x350 [ 201.280616][T10620] ? qdisc_alloc+0x92/0x9e0 [ 201.280641][T10620] qdisc_alloc+0x92/0x9e0 [ 201.280670][T10620] qdisc_create+0x12c/0xf20 [ 201.280689][T10620] ? lockdep_rtnl_is_held+0x26/0x40 [ 201.280713][T10620] ? qdisc_lookup+0x36d/0x6d0 [ 201.280739][T10620] tc_modify_qdisc+0x16f0/0x2290 [ 201.280765][T10620] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 201.280802][T10620] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 201.280857][T10620] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 201.280883][T10620] rtnetlink_rcv_msg+0x77e/0xbe0 [ 201.280902][T10620] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 201.280926][T10620] ? netlink_sendmsg+0x5d4/0xb40 [ 201.280948][T10620] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 201.280968][T10620] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 201.280990][T10620] ? __lock_acquire+0x6b5/0x2cf0 [ 201.281022][T10620] netlink_rcv_skb+0x232/0x4b0 [ 201.281044][T10620] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 201.281066][T10620] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.281100][T10620] ? netlink_deliver_tap+0x2e/0x1b0 [ 201.281121][T10620] ? netlink_deliver_tap+0x2e/0x1b0 [ 201.281147][T10620] netlink_unicast+0x75c/0x8e0 [ 201.281178][T10620] netlink_sendmsg+0x813/0xb40 [ 201.281209][T10620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.281233][T10620] ? aa_sock_msg_perm+0xf1/0x1b0 [ 201.281257][T10620] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 201.281285][T10620] ____sys_sendmsg+0x972/0x9f0 [ 201.281308][T10620] ? __might_fault+0xaf/0x130 [ 201.281337][T10620] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.281369][T10620] ? import_iovec+0x73/0xa0 [ 201.281397][T10620] ___sys_sendmsg+0x2a5/0x360 [ 201.281421][T10620] ? __lock_acquire+0x6b5/0x2cf0 [ 201.281445][T10620] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.281503][T10620] ? __fget_files+0x2a/0x420 [ 201.281531][T10620] ? __fget_files+0x3a0/0x420 [ 201.281561][T10620] __x64_sys_sendmsg+0x1bd/0x2a0 [ 201.281588][T10620] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 201.281621][T10620] ? __pfx_ksys_write+0x10/0x10 [ 201.281655][T10620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.281676][T10620] do_syscall_64+0x15f/0xf80 [ 201.281696][T10620] ? trace_irq_disable+0x3b/0x140 [ 201.281722][T10620] ? clear_bhb_loop+0x40/0x90 [ 201.281745][T10620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.281764][T10620] RIP: 0033:0x7ff1cff9cdd9 [ 201.281782][T10620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.281798][T10620] RSP: 002b:00007ff1d0f28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.281818][T10620] RAX: ffffffffffffffda RBX: 00007ff1d0215fa0 RCX: 00007ff1cff9cdd9 [ 201.281831][T10620] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 201.281843][T10620] RBP: 00007ff1d0f28090 R08: 0000000000000000 R09: 0000000000000000 [ 201.281855][T10620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.281866][T10620] R13: 00007ff1d0216038 R14: 00007ff1d0215fa0 R15: 00007ffc52af3bf8 [ 201.281898][T10620] [ 201.328470][T10629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1243'. [ 201.682344][T10635] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 201.917832][T10656] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1252'. [ 202.034242][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 202.076303][T10668] netlink: 'syz.3.1255': attribute type 1 has an invalid length. [ 202.200903][T10674] FAULT_INJECTION: forcing a failure. [ 202.200903][T10674] name failslab, interval 1, probability 0, space 0, times 0 [ 202.214617][T10674] CPU: 1 UID: 0 PID: 10674 Comm: syz.4.1258 Not tainted syzkaller #0 PREEMPT(full) [ 202.214641][T10674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 202.214651][T10674] Call Trace: [ 202.214657][T10674] [ 202.214663][T10674] dump_stack_lvl+0xe8/0x150 [ 202.214686][T10674] should_fail_ex+0x412/0x560 [ 202.214709][T10674] should_failslab+0xa8/0x100 [ 202.214730][T10674] ? skb_clone+0x212/0x3a0 [ 202.214750][T10674] kmem_cache_alloc_noprof+0x87/0x650 [ 202.214769][T10674] ? __netlink_lookup+0xc6/0x8b0 [ 202.214791][T10674] skb_clone+0x212/0x3a0 [ 202.214812][T10674] __netlink_deliver_tap+0x404/0x850 [ 202.214838][T10674] ? netlink_deliver_tap+0x2e/0x1b0 [ 202.214856][T10674] netlink_deliver_tap+0x19c/0x1b0 [ 202.214874][T10674] netlink_unicast+0x730/0x8e0 [ 202.214897][T10674] netlink_sendmsg+0x813/0xb40 [ 202.214921][T10674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.214940][T10674] ? aa_sock_msg_perm+0xf1/0x1b0 [ 202.214960][T10674] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 202.214982][T10674] ____sys_sendmsg+0x972/0x9f0 [ 202.215001][T10674] ? __might_fault+0xaf/0x130 [ 202.215028][T10674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.215053][T10674] ? import_iovec+0x73/0xa0 [ 202.215075][T10674] ___sys_sendmsg+0x2a5/0x360 [ 202.215091][T10674] ? __lock_acquire+0x6b5/0x2cf0 [ 202.215110][T10674] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.215155][T10674] ? __fget_files+0x2a/0x420 [ 202.215172][T10674] ? __fget_files+0x3a0/0x420 [ 202.215196][T10674] __x64_sys_sendmsg+0x1bd/0x2a0 [ 202.215216][T10674] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 202.215242][T10674] ? __pfx_ksys_write+0x10/0x10 [ 202.215269][T10674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.215285][T10674] do_syscall_64+0x15f/0xf80 [ 202.215301][T10674] ? trace_irq_disable+0x3b/0x140 [ 202.215322][T10674] ? clear_bhb_loop+0x40/0x90 [ 202.215339][T10674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.215354][T10674] RIP: 0033:0x7fdce399cdd9 [ 202.215367][T10674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.215386][T10674] RSP: 002b:00007fdce488c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.215402][T10674] RAX: ffffffffffffffda RBX: 00007fdce3c15fa0 RCX: 00007fdce399cdd9 [ 202.215412][T10674] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 202.215421][T10674] RBP: 00007fdce488c090 R08: 0000000000000000 R09: 0000000000000000 [ 202.215430][T10674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.215439][T10674] R13: 00007fdce3c16038 R14: 00007fdce3c15fa0 R15: 00007fffded6be08 [ 202.215462][T10674] [ 202.721277][T10682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1261'. [ 202.994249][T10691] netlink: 'syz.2.1264': attribute type 1 has an invalid length. [ 203.108508][T10691] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.246355][T10705] netlink: 'syz.4.1267': attribute type 8 has an invalid length. [ 203.257368][T10696] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 203.303584][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1267'. [ 203.330760][T10708] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 203.361269][T10708] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 203.385908][T10705] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.429529][T10714] netlink: 'syz.0.1269': attribute type 28 has an invalid length. [ 203.657385][T10717] FAULT_INJECTION: forcing a failure. [ 203.657385][T10717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.694277][T10717] CPU: 1 UID: 0 PID: 10717 Comm: syz.0.1270 Not tainted syzkaller #0 PREEMPT(full) [ 203.694311][T10717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 203.694321][T10717] Call Trace: [ 203.694329][T10717] [ 203.694337][T10717] dump_stack_lvl+0xe8/0x150 [ 203.694364][T10717] should_fail_ex+0x412/0x560 [ 203.694391][T10717] _copy_to_user+0x31/0xb0 [ 203.694418][T10717] simple_read_from_buffer+0xe1/0x170 [ 203.694444][T10717] proc_fail_nth_read+0x1bb/0x230 [ 203.694470][T10717] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.694496][T10717] ? rw_verify_area+0x2a6/0x4d0 [ 203.694519][T10717] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.694542][T10717] vfs_read+0x20c/0xa70 [ 203.694575][T10717] ? __pfx___mutex_lock+0x10/0x10 [ 203.694597][T10717] ? __pfx_vfs_read+0x10/0x10 [ 203.694622][T10717] ? __fget_files+0x2a/0x420 [ 203.694648][T10717] ? __fget_files+0x3a0/0x420 [ 203.694668][T10717] ? __fget_files+0x2a/0x420 [ 203.694697][T10717] ksys_read+0x150/0x270 [ 203.694724][T10717] ? __pfx_ksys_read+0x10/0x10 [ 203.694756][T10717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.694777][T10717] do_syscall_64+0x15f/0xf80 [ 203.694796][T10717] ? trace_irq_disable+0x3b/0x140 [ 203.694821][T10717] ? clear_bhb_loop+0x40/0x90 [ 203.694844][T10717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.694862][T10717] RIP: 0033:0x7f9cd395d60e [ 203.694878][T10717] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 203.694893][T10717] RSP: 002b:00007f9cd4836fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 203.694912][T10717] RAX: ffffffffffffffda RBX: 00007f9cd48376c0 RCX: 00007f9cd395d60e [ 203.694925][T10717] RDX: 000000000000000f RSI: 00007f9cd48370a0 RDI: 0000000000000004 [ 203.694936][T10717] RBP: 00007f9cd4837090 R08: 0000000000000000 R09: 0000000000000000 [ 203.694947][T10717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.694957][T10717] R13: 00007f9cd3c16038 R14: 00007f9cd3c15fa0 R15: 00007ffe066ba1f8 [ 203.694988][T10717] [ 204.161069][T10728] netlink: 'syz.2.1276': attribute type 1 has an invalid length. [ 204.263572][T10729] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.622641][T10738] gre3: entered allmulticast mode [ 204.822053][T10743] IPVS: length: 132 != 8 [ 204.850413][T10743] pimreg: entered allmulticast mode [ 204.873938][T10743] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1278'. [ 204.885720][T10743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.031168][T10748] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20002 [ 205.252554][T10760] netlink: 560 bytes leftover after parsing attributes in process `syz.4.1285'. [ 206.040790][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1297'. [ 206.100422][T10799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.121379][T10801] x_tables: unsorted underflow at hook 2 [ 206.133380][T10799] netlink: 'syz.2.1299': attribute type 4 has an invalid length. [ 206.157342][T10799] netlink: 'syz.2.1299': attribute type 4 has an invalid length. [ 206.227938][T10805] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1302'. [ 206.420619][T10819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1306'. [ 206.461967][T10821] macvtap0: entered promiscuous mode [ 206.509456][T10823] IPv6: NLM_F_CREATE should be specified when creating new route [ 206.531020][T10823] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.538327][T10823] IPv6: NLM_F_CREATE should be set when creating new route [ 206.545658][T10823] IPv6: NLM_F_CREATE should be set when creating new route [ 206.552877][T10823] IPv6: NLM_F_CREATE should be set when creating new route [ 206.607199][T10828] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.832227][T10840] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1314'. [ 206.898679][T10841] bond6 (unregistering): Released all slaves [ 207.198842][T10854] IPVS: ip_vs_edit_dest(): server weight less than zero [ 207.228462][T10857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1321'. [ 207.548061][T10870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 207.555355][T10870] IPv6: NLM_F_CREATE should be set when creating new route [ 207.562618][T10870] IPv6: NLM_F_CREATE should be set when creating new route [ 207.692626][T10886] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1328'. [ 207.727916][T10884] tipc: Started in network mode [ 207.733156][T10884] tipc: Node identity 263bbf13c5d9, cluster identity 4711 [ 207.741392][T10884] tipc: Enabled bearer , priority 0 [ 207.753772][T10884] syzkaller0: entered promiscuous mode [ 207.775033][T10884] syzkaller0: entered allmulticast mode [ 207.810177][T10883] tipc: Resetting bearer [ 207.845570][T10883] tipc: Disabling bearer [ 207.857352][T10888] syzkaller1: entered promiscuous mode [ 207.864116][T10888] syzkaller1: entered allmulticast mode [ 208.323606][T10913] __nla_validate_parse: 1 callbacks suppressed [ 208.323626][T10913] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1336'. [ 208.412193][T10913] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1336'. [ 208.500787][T10925] veth0: entered promiscuous mode [ 208.548568][T10925] bond0: entered promiscuous mode [ 208.818237][T10923] bond0: left promiscuous mode [ 208.823588][T10923] veth0: left promiscuous mode [ 209.013619][T10948] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1343'. [ 209.093649][T10948] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1343'. [ 209.127768][T10949] netlink: 'syz.1.1345': attribute type 32 has an invalid length. [ 209.266212][T10958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1347'. [ 209.279534][T10948] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1343'. [ 209.410532][T10968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1351'. [ 209.464369][T10973] netlink: 'syz.2.1352': attribute type 2 has an invalid length. [ 209.485243][T10973] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1352'. [ 209.499426][T10973] tipc: Enabling of bearer rejected, failed to enable media [ 209.527680][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1352'. [ 209.713272][T10986] netlink: 'syz.4.1356': attribute type 21 has an invalid length. [ 209.724979][T10986] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1356'. [ 209.907948][T11000] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 209.929472][T11000] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 209.946744][T11000] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 209.959963][T11000] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 209.977962][T11000] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 210.114247][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 210.134163][T11005] FAULT_INJECTION: forcing a failure. [ 210.134163][T11005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.150336][T11005] CPU: 0 UID: 0 PID: 11005 Comm: syz.0.1361 Not tainted syzkaller #0 PREEMPT(full) [ 210.150360][T11005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 210.150374][T11005] Call Trace: [ 210.150381][T11005] [ 210.150389][T11005] dump_stack_lvl+0xe8/0x150 [ 210.150414][T11005] should_fail_ex+0x412/0x560 [ 210.150441][T11005] _copy_from_iter+0x3b0/0x1670 [ 210.150474][T11005] ? __pfx__copy_from_iter+0x10/0x10 [ 210.150497][T11005] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 210.150517][T11005] ? lockdep_hardirqs_on+0x7a/0x110 [ 210.150536][T11005] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 210.150556][T11005] ? skb_put+0x11b/0x210 [ 210.150587][T11005] bt_skb_sendmsg+0x34a/0x5d0 [ 210.150614][T11005] ? __pfx_bt_skb_sendmsg+0x10/0x10 [ 210.150638][T11005] ? __local_bh_enable_ip+0xd0/0x130 [ 210.150661][T11005] rfcomm_sock_sendmsg+0x2ac/0x470 [ 210.150686][T11005] ? __pfx_rfcomm_sock_sendmsg+0x10/0x10 [ 210.150706][T11005] sock_write_iter+0x49b/0x4f0 [ 210.150733][T11005] ? __pfx_sock_write_iter+0x10/0x10 [ 210.150766][T11005] ? lapic_next_event+0x11/0x20 [ 210.150784][T11005] ? clockevents_program_event+0x491/0x630 [ 210.150807][T11005] ? do_raw_spin_unlock+0xf5/0x210 [ 210.150840][T11005] do_iter_readv_writev+0x619/0x8c0 [ 210.150869][T11005] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 210.150899][T11005] ? bpf_lsm_file_permission+0x9/0x20 [ 210.150923][T11005] ? security_file_permission+0x75/0x260 [ 210.150943][T11005] ? rw_verify_area+0x255/0x4d0 [ 210.150971][T11005] vfs_writev+0x33c/0x990 [ 210.150998][T11005] ? __pfx_vfs_writev+0x10/0x10 [ 210.151049][T11005] do_writev+0x154/0x2e0 [ 210.151070][T11005] ? __pfx_do_writev+0x10/0x10 [ 210.151097][T11005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.151116][T11005] do_syscall_64+0x15f/0xf80 [ 210.151136][T11005] ? clear_bhb_loop+0x40/0x90 [ 210.151159][T11005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.151176][T11005] RIP: 0033:0x7f9cd399cdd9 [ 210.151193][T11005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.151208][T11005] RSP: 002b:00007f9cd4837028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 210.151227][T11005] RAX: ffffffffffffffda RBX: 00007f9cd3c15fa0 RCX: 00007f9cd399cdd9 [ 210.151240][T11005] RDX: 0000000000000002 RSI: 0000200000019880 RDI: 0000000000000004 [ 210.151252][T11005] RBP: 00007f9cd4837090 R08: 0000000000000000 R09: 0000000000000000 [ 210.151263][T11005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 210.151273][T11005] R13: 00007f9cd3c16038 R14: 00007f9cd3c15fa0 R15: 00007ffe066ba1f8 [ 210.151302][T11005] [ 210.372430][T11011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.529511][T11016] vxcan2: entered allmulticast mode [ 210.647133][T11027] sctp: [Deprecated]: syz.2.1369 (pid 11027) Use of int in maxseg socket option. [ 210.647133][T11027] Use struct sctp_assoc_value instead [ 210.710567][T11025] netlink: 'syz.1.1368': attribute type 32 has an invalid length. [ 210.913435][T11032] netlink: 'syz.0.1370': attribute type 29 has an invalid length. [ 210.933745][T11035] netlink: 'syz.2.1373': attribute type 6 has an invalid length. [ 210.948946][T11036] netlink: 'syz.4.1372': attribute type 21 has an invalid length. [ 210.948977][T11032] netlink: 'syz.0.1370': attribute type 29 has an invalid length. [ 210.965121][T11035] netlink: 'syz.2.1373': attribute type 1 has an invalid length. [ 210.973860][T11035] block nbd1: Unsupported socket: should be TCP or UNIX. [ 211.007227][T11040] netlink: 'syz.0.1370': attribute type 32 has an invalid length. [ 211.101731][T11040] syzkaller0: entered promiscuous mode [ 211.127452][T11040] syzkaller0: entered allmulticast mode [ 211.552673][T11062] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.635587][T11128] netlink: 'syz.1.1397': attribute type 64 has an invalid length. [ 214.704311][T11119] syzkaller1: entered promiscuous mode [ 214.709930][T11119] syzkaller1: entered allmulticast mode [ 214.731043][T11123] geneve1: left promiscuous mode [ 214.740245][T11123] ip6gre1: left promiscuous mode [ 214.746218][T11123] ip6gre1: left allmulticast mode [ 214.752566][T11123] bond1: left allmulticast mode [ 214.757638][T11123] ip6gretap1: left allmulticast mode [ 214.763518][T11123] veth3: left allmulticast mode [ 214.770711][T11123] veth5: left promiscuous mode [ 214.784667][T11123] bond3: left promiscuous mode [ 214.795496][T11123] syzkaller1: left promiscuous mode [ 214.800742][T11123] syzkaller1: left allmulticast mode [ 214.809880][T11129] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 215.216216][T11172] __nla_validate_parse: 16 callbacks suppressed [ 215.216234][T11172] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1404'. [ 215.375587][T11183] IPv6: Can't replace route, no match found [ 215.385937][T11183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1408'. [ 215.395240][T11183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1408'. [ 215.489846][T11187] netlink: 'syz.3.1409': attribute type 10 has an invalid length. [ 215.501513][T11189] netlink: 'syz.0.1410': attribute type 1 has an invalid length. [ 215.515850][T11189] netlink: 'syz.0.1410': attribute type 2 has an invalid length. [ 215.524719][T11187] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.536612][ T5766] bond0: (slave team0): interface is now down [ 215.542974][T11187] bond0: (slave team0): Enslaving as an active interface with an up link [ 215.556845][ T6784] bond0: (slave team0): interface is now down [ 215.575491][ T5766] bond0: (slave team0): interface is now down [ 215.582378][ T5766] bond0: now running without any active interface! [ 215.692905][T11199] netlink: 'syz.0.1411': attribute type 89 has an invalid length. [ 215.802023][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1412'. [ 215.881474][T11207] xfrm1: entered promiscuous mode [ 215.896775][T11207] xfrm1: entered allmulticast mode [ 215.913476][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1412'. [ 215.922772][T11212] netlink: 'syz.1.1414': attribute type 1 has an invalid length. [ 216.041885][T11212] 8021q: adding VLAN 0 to HW filter on device bond4 [ 216.109600][T11214] bond4 (unregistering): Released all slaves [ 217.199177][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1432'. [ 217.219223][T11284] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1435'. [ 217.225550][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1432'. [ 217.263522][T11285] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1435'. [ 217.277043][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1432'. [ 217.472052][T11297] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 217.478237][T11297] syzkaller1: linktype set to 768 [ 218.346371][T11328] xfrm1: left allmulticast mode [ 218.381150][ T5766] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.396569][ T5766] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.436503][ T5766] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.464583][ T5766] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.484363][ T5766] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.508844][ T5766] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.528626][ T35] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.553553][ T35] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.593534][T11355] netlink: 'syz.2.1455': attribute type 10 has an invalid length. [ 218.629620][T11355] team0: Port device dummy0 added [ 218.724424][T11363] veth1_to_batadv: entered allmulticast mode [ 218.737772][T11363] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 218.785575][T11364] veth0: entered promiscuous mode [ 219.236807][T11353] veth0: left promiscuous mode [ 219.452401][T11385] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 219.803432][T11397] syzkaller0: entered promiscuous mode [ 219.810831][T11397] syzkaller0: entered allmulticast mode [ 220.337051][T11414] __nla_validate_parse: 7 callbacks suppressed [ 220.337070][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1473'. [ 220.363931][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1473'. [ 220.374815][T11414] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1473'. [ 220.478309][T11419] netlink: 'syz.1.1475': attribute type 1 has an invalid length. [ 220.594488][T11419] bond4: entered promiscuous mode [ 220.600130][T11419] 8021q: adding VLAN 0 to HW filter on device bond4 [ 220.647810][T11424] vlan2: entered allmulticast mode [ 220.653076][T11424] bond4: entered allmulticast mode [ 220.747146][T11419] bond4: (slave bridge2): making interface the new active one [ 220.766600][T11419] bridge2: entered promiscuous mode [ 220.772048][T11419] bridge2: entered allmulticast mode [ 220.781934][T11419] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 220.856120][T11431] bond4: option arp_interval: invalid value (18446744073709551615) [ 220.874359][T11431] bond4: option arp_interval: allowed values 0 - 2147483647 [ 220.895502][T11431] bond4 (unregistering): Released all slaves [ 221.388147][T11462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1485'. [ 221.613598][T11477] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1486'. [ 221.662913][T11476] syzkaller0: entered promiscuous mode [ 221.673455][T11476] syzkaller0: entered allmulticast mode [ 222.152221][T11487] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1491'. [ 222.418797][T11496] FAULT_INJECTION: forcing a failure. [ 222.418797][T11496] name failslab, interval 1, probability 0, space 0, times 0 [ 222.443341][T11496] CPU: 0 UID: 0 PID: 11496 Comm: syz.0.1493 Not tainted syzkaller #0 PREEMPT(full) [ 222.443386][T11496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 222.443401][T11496] Call Trace: [ 222.443409][T11496] [ 222.443416][T11496] dump_stack_lvl+0xe8/0x150 [ 222.443443][T11496] should_fail_ex+0x412/0x560 [ 222.443469][T11496] should_failslab+0xa8/0x100 [ 222.443497][T11496] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 222.443521][T11496] ? __alloc_skb+0x186/0x7d0 [ 222.443539][T11496] ? __alloc_skb+0x1d0/0x7d0 [ 222.443559][T11496] ? __local_bh_enable_ip+0xd0/0x130 [ 222.443582][T11496] __alloc_skb+0x1d0/0x7d0 [ 222.443601][T11496] ? __might_fault+0xaf/0x130 [ 222.443625][T11496] alloc_skb_with_frags+0xc8/0x760 [ 222.443656][T11496] sock_alloc_send_pskb+0x878/0x990 [ 222.443696][T11496] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 222.443720][T11496] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 222.443738][T11496] ? lockdep_hardirqs_on+0x7a/0x110 [ 222.443757][T11496] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 222.443776][T11496] ? skb_put+0x11b/0x210 [ 222.443799][T11496] bt_skb_sendmsg+0xd8/0x5d0 [ 222.443825][T11496] ? __pfx_bt_skb_sendmsg+0x10/0x10 [ 222.443849][T11496] ? __local_bh_enable_ip+0xd0/0x130 [ 222.443870][T11496] rfcomm_sock_sendmsg+0x2ac/0x470 [ 222.443894][T11496] ? __pfx_rfcomm_sock_sendmsg+0x10/0x10 [ 222.443912][T11496] sock_write_iter+0x49b/0x4f0 [ 222.443939][T11496] ? __pfx_sock_write_iter+0x10/0x10 [ 222.443982][T11496] do_iter_readv_writev+0x619/0x8c0 [ 222.444009][T11496] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 222.444038][T11496] ? bpf_lsm_file_permission+0x9/0x20 [ 222.444061][T11496] ? security_file_permission+0x75/0x260 [ 222.444079][T11496] ? rw_verify_area+0x255/0x4d0 [ 222.444105][T11496] vfs_writev+0x33c/0x990 [ 222.444133][T11496] ? __pfx_vfs_writev+0x10/0x10 [ 222.444157][T11496] ? vfs_write+0x9bc/0xb90 [ 222.444192][T11496] ? do_sys_openat2+0x14c/0x200 [ 222.444210][T11496] ? kmem_cache_free+0x182/0x650 [ 222.444247][T11496] do_writev+0x154/0x2e0 [ 222.444269][T11496] ? __pfx_do_writev+0x10/0x10 [ 222.444295][T11496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.444314][T11496] do_syscall_64+0x15f/0xf80 [ 222.444333][T11496] ? trace_irq_disable+0x3b/0x140 [ 222.444358][T11496] ? clear_bhb_loop+0x40/0x90 [ 222.444378][T11496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.444395][T11496] RIP: 0033:0x7f9cd399cdd9 [ 222.444412][T11496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.444427][T11496] RSP: 002b:00007f9cd4837028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 222.444446][T11496] RAX: ffffffffffffffda RBX: 00007f9cd3c15fa0 RCX: 00007f9cd399cdd9 [ 222.444458][T11496] RDX: 0000000000000002 RSI: 0000200000019880 RDI: 0000000000000004 [ 222.444468][T11496] RBP: 00007f9cd4837090 R08: 0000000000000000 R09: 0000000000000000 [ 222.444479][T11496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 222.444488][T11496] R13: 00007f9cd3c16038 R14: 00007f9cd3c15fa0 R15: 00007ffe066ba1f8 [ 222.444515][T11496] [ 222.833403][T11503] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1497'. [ 222.953096][T11510] netlink: 'syz.0.1499': attribute type 8 has an invalid length. [ 223.110114][T11522] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1502'. [ 223.550465][T11532] bond4: option resend_igmp: invalid value (2878) [ 223.557750][T11532] bond4: option resend_igmp: allowed values 0 - 255 [ 223.566269][T11532] bond4 (unregistering): Released all slaves [ 223.759980][T11549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 223.778526][T11551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1509'. [ 223.828188][T11556] netlink: 'syz.1.1511': attribute type 1 has an invalid length. [ 223.979230][T11556] bond6: entered promiscuous mode [ 223.992965][T11556] 8021q: adding VLAN 0 to HW filter on device bond6 [ 224.129394][T11560] 8021q: adding VLAN 0 to HW filter on device bond6 [ 224.139633][T11560] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 224.150032][T11560] bond6: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 224.164194][T11560] bond6: (slave vcan1): making interface the new active one [ 224.171508][T11560] vcan1: entered promiscuous mode [ 224.182664][T11560] bond6: (slave vcan1): Enslaving as an active interface with an up link [ 224.422377][T11568] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 224.618475][T11587] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 224.640567][T11587] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 224.830691][T11606] netlink: 'syz.2.1523': attribute type 2 has an invalid length. [ 224.998008][T11621] netlink: 'syz.1.1528': attribute type 58 has an invalid length. [ 225.034983][T11620] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 225.187718][T11635] netlink: 'syz.0.1531': attribute type 1 has an invalid length. [ 225.280223][T11635] 8021q: adding VLAN 0 to HW filter on device bond5 [ 225.290621][T11640] bond0: (slave dummy0): Releasing backup interface [ 225.319424][T11640] bond5: (slave dummy0): making interface the new active one [ 225.335862][T11640] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 225.562389][T11606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.975361][T11678] ip6gre1: entered promiscuous mode [ 226.213552][T11702] __nla_validate_parse: 3 callbacks suppressed [ 226.213570][T11702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1549'. [ 226.333658][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1550'. [ 226.596098][T11675] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 226.864662][T11737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1560'. [ 226.888406][T11737] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1560'. [ 227.010726][T11749] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1560'. [ 227.292871][T11772] netlink: 'syz.2.1566': attribute type 10 has an invalid length. [ 227.322501][T11772] team0: Port device veth0 added [ 227.333864][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1566'. [ 227.352343][T11772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1566'. [ 227.422650][T11773] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 227.600295][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 227.807207][T11783] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.1567'. [ 227.839675][T11783] openvswitch: netlink: Missing key (keys=40, expected=80) [ 227.884448][T11790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1569'. [ 228.544621][T11825] FAULT_INJECTION: forcing a failure. [ 228.544621][T11825] name failslab, interval 1, probability 0, space 0, times 0 [ 228.560286][T11825] CPU: 0 UID: 0 PID: 11825 Comm: syz.0.1579 Not tainted syzkaller #0 PREEMPT(full) [ 228.560311][T11825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 228.560322][T11825] Call Trace: [ 228.560328][T11825] [ 228.560336][T11825] dump_stack_lvl+0xe8/0x150 [ 228.560362][T11825] should_fail_ex+0x412/0x560 [ 228.560389][T11825] should_failslab+0xa8/0x100 [ 228.560417][T11825] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 228.560440][T11825] ? __alloc_skb+0x186/0x7d0 [ 228.560459][T11825] ? __alloc_skb+0x1d0/0x7d0 [ 228.560473][T11825] ? __local_bh_enable_ip+0xd0/0x130 [ 228.560493][T11825] __alloc_skb+0x1d0/0x7d0 [ 228.560512][T11825] ? __might_fault+0xaf/0x130 [ 228.560537][T11825] alloc_skb_with_frags+0xc8/0x760 [ 228.560570][T11825] sock_alloc_send_pskb+0x878/0x990 [ 228.560611][T11825] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 228.560634][T11825] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 228.560653][T11825] ? lockdep_hardirqs_on+0x7a/0x110 [ 228.560672][T11825] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 228.560692][T11825] ? skb_put+0x11b/0x210 [ 228.560723][T11825] bt_skb_sendmsg+0xd8/0x5d0 [ 228.560749][T11825] ? __pfx_bt_skb_sendmsg+0x10/0x10 [ 228.560773][T11825] ? __local_bh_enable_ip+0xd0/0x130 [ 228.560796][T11825] rfcomm_sock_sendmsg+0x2ac/0x470 [ 228.560820][T11825] ? __pfx_rfcomm_sock_sendmsg+0x10/0x10 [ 228.560837][T11825] sock_write_iter+0x49b/0x4f0 [ 228.560864][T11825] ? __pfx_sock_write_iter+0x10/0x10 [ 228.560907][T11825] do_iter_readv_writev+0x619/0x8c0 [ 228.560936][T11825] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 228.560965][T11825] ? bpf_lsm_file_permission+0x9/0x20 [ 228.560990][T11825] ? security_file_permission+0x75/0x260 [ 228.561010][T11825] ? rw_verify_area+0x255/0x4d0 [ 228.561037][T11825] vfs_writev+0x33c/0x990 [ 228.561065][T11825] ? __pfx_vfs_writev+0x10/0x10 [ 228.561082][T11825] ? vfs_write+0x9bc/0xb90 [ 228.561117][T11825] ? do_sys_openat2+0x14c/0x200 [ 228.561136][T11825] ? kmem_cache_free+0x182/0x650 [ 228.561177][T11825] do_writev+0x154/0x2e0 [ 228.561199][T11825] ? __pfx_do_writev+0x10/0x10 [ 228.561225][T11825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.561245][T11825] do_syscall_64+0x15f/0xf80 [ 228.561264][T11825] ? trace_irq_disable+0x3b/0x140 [ 228.561289][T11825] ? clear_bhb_loop+0x40/0x90 [ 228.561311][T11825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.561329][T11825] RIP: 0033:0x7f9cd399cdd9 [ 228.561346][T11825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.561361][T11825] RSP: 002b:00007f9cd4837028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 228.561379][T11825] RAX: ffffffffffffffda RBX: 00007f9cd3c15fa0 RCX: 00007f9cd399cdd9 [ 228.561392][T11825] RDX: 0000000000000002 RSI: 0000200000019880 RDI: 0000000000000004 [ 228.561404][T11825] RBP: 00007f9cd4837090 R08: 0000000000000000 R09: 0000000000000000 [ 228.561415][T11825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 228.561425][T11825] R13: 00007f9cd3c16038 R14: 00007f9cd3c15fa0 R15: 00007ffe066ba1f8 [ 228.561454][T11825] [ 229.813547][T11879] macsec1: entered promiscuous mode [ 229.819329][T11879] macsec1: entered allmulticast mode [ 229.831146][T11884] netlink: 'syz.1.1589': attribute type 1 has an invalid length. [ 230.043238][T11892] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 230.059495][T11892] dvmrp1: linktype set to 804 [ 230.100723][T11899] lo speed is unknown, defaulting to 1000 [ 230.132378][T11902] netlink: 'syz.2.1599': attribute type 6 has an invalid length. [ 230.186845][T11899] lo speed is unknown, defaulting to 1000 [ 230.218068][T11899] lo speed is unknown, defaulting to 1000 [ 231.526920][T11899] infiniband sqz0: set down [ 231.531535][ T42] lo speed is unknown, defaulting to 1000 [ 231.544091][T11899] infiniband sqz0: added lo [ 231.562075][T11899] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 231.567562][T11899] infiniband sqz0: Couldn't open port 1 [ 231.626505][T11899] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 231.662310][T11899] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 231.668622][T11972] netlink: 'syz.0.1618': attribute type 1 has an invalid length. [ 231.690524][T11899] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 231.718567][T11972] __nla_validate_parse: 8 callbacks suppressed [ 231.718584][T11972] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1618'. [ 231.799325][T11899] RDS/IB: sqz0: added [ 231.821317][T11899] smc: adding ib device sqz0 with port count 1 [ 231.850714][T11899] smc: ib device sqz0 port 1 has no pnetid [ 231.945923][ T6184] lo speed is unknown, defaulting to 1000 [ 232.291015][T11899] lo speed is unknown, defaulting to 1000 [ 232.342002][T11987] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1622'. [ 232.461055][T11987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1622'. [ 232.542789][T11992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1623'. [ 232.596874][T11993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1623'. [ 232.777171][T12001] netlink: 'syz.3.1625': attribute type 1 has an invalid length. [ 233.143373][T12012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.212768][T12024] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1628'. [ 233.234711][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1630'. [ 233.251129][T11899] lo speed is unknown, defaulting to 1000 [ 233.283451][T12026] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 233.496308][T12041] sch_tbf: burst 240 is lower than device lo mtu (11337746) ! [ 233.762112][T11899] lo speed is unknown, defaulting to 1000 [ 234.019257][T12053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1638'. [ 234.365727][T11899] lo speed is unknown, defaulting to 1000 [ 234.594154][T12070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1641'. [ 234.822590][T12080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1646'. [ 234.846631][T12080] geneve2: entered promiscuous mode [ 234.853307][ T48] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.869230][ T48] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.922183][ T48] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.951223][ T48] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.977624][T11899] lo speed is unknown, defaulting to 1000 [ 235.193061][T11899] lo speed is unknown, defaulting to 1000 [ 235.549835][T11899] lo speed is unknown, defaulting to 1000 [ 236.033839][T12105] sit0: entered promiscuous mode [ 236.048171][T12105] netlink: 'syz.4.1654': attribute type 1 has an invalid length. [ 236.090999][T12109] xt_socket: unknown flags 0x4 [ 236.165130][T12109] xt_socket: unknown flags 0x4 [ 237.619335][T12157] bridge_slave_1: left allmulticast mode [ 237.651393][T12157] bridge_slave_1: left promiscuous mode [ 237.660690][T12157] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.676699][T12157] bridge_slave_0: left allmulticast mode [ 237.686513][T12157] bridge_slave_0: left promiscuous mode [ 237.699424][T12157] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.112062][T12173] __nla_validate_parse: 7 callbacks suppressed [ 238.112080][T12173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1671'. [ 238.133053][T12173] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1671'. [ 238.464305][T12182] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.610774][T12160] sch_tbf: burst 0 is lower than device sit0 mtu (1280) ! [ 239.769184][T12216] x_tables: duplicate underflow at hook 3 [ 239.821527][T12216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1684'. [ 239.837928][T12220] bridge4: entered promiscuous mode [ 239.851022][T12220] bridge4: entered allmulticast mode [ 239.880741][T12220] team0: Port device bridge4 added [ 239.904123][T12222] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1685'. [ 239.965697][T12230] bridge0: port 1(team0) entered blocking state [ 240.003739][T12230] bridge0: port 1(team0) entered disabled state [ 240.034719][T12218] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 240.045100][T12230] team0: entered allmulticast mode [ 240.051012][T12230] dummy0: entered allmulticast mode [ 240.073911][T12230] veth0: entered allmulticast mode [ 240.107098][T12230] team0: entered promiscuous mode [ 240.147966][T12230] dummy0: entered promiscuous mode [ 240.172890][T12230] veth0: entered promiscuous mode [ 240.251640][T12238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1689'. [ 240.405379][T12236] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.453060][T12244] bond0: (slave bond_slave_0): Releasing backup interface [ 240.465245][T12244] bond0: (slave bond_slave_1): Releasing backup interface [ 240.475969][T12244] team0: Port device team_slave_0 removed [ 240.488605][T12244] team0: Port device team_slave_1 removed [ 240.504806][T12244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.536151][T12244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.555212][T12244] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 240.621329][T12247] netlink: 'syz.2.1692': attribute type 1 has an invalid length. [ 240.759290][T12247] bond4: entered promiscuous mode [ 240.787345][T12247] 8021q: adding VLAN 0 to HW filter on device bond4 [ 240.829689][T12256] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1695'. [ 240.861042][T12222] lo speed is unknown, defaulting to 1000 [ 241.169921][T12265] netlink: 'syz.3.1699': attribute type 12 has an invalid length. [ 241.194772][T12265] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1699'. [ 241.278929][T12269] FAULT_INJECTION: forcing a failure. [ 241.278929][T12269] name failslab, interval 1, probability 0, space 0, times 0 [ 241.306025][T12269] CPU: 0 UID: 0 PID: 12269 Comm: syz.1.1701 Not tainted syzkaller #0 PREEMPT(full) [ 241.306074][T12269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 241.306097][T12269] Call Trace: [ 241.306104][T12269] [ 241.306112][T12269] dump_stack_lvl+0xe8/0x150 [ 241.306139][T12269] should_fail_ex+0x412/0x560 [ 241.306167][T12269] should_failslab+0xa8/0x100 [ 241.306205][T12269] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 241.306230][T12269] ? __alloc_skb+0x186/0x7d0 [ 241.306249][T12269] ? __alloc_skb+0x1d0/0x7d0 [ 241.306267][T12269] ? __local_bh_enable_ip+0xd0/0x130 [ 241.306290][T12269] __alloc_skb+0x1d0/0x7d0 [ 241.306309][T12269] ? __might_fault+0xaf/0x130 [ 241.306334][T12269] alloc_skb_with_frags+0xc8/0x760 [ 241.306367][T12269] sock_alloc_send_pskb+0x878/0x990 [ 241.306408][T12269] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 241.306432][T12269] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 241.306451][T12269] ? lockdep_hardirqs_on+0x7a/0x110 [ 241.306471][T12269] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 241.306492][T12269] ? skb_put+0x11b/0x210 [ 241.306515][T12269] bt_skb_sendmsg+0xd8/0x5d0 [ 241.306542][T12269] ? __pfx_bt_skb_sendmsg+0x10/0x10 [ 241.306566][T12269] ? __local_bh_enable_ip+0xd0/0x130 [ 241.306589][T12269] rfcomm_sock_sendmsg+0x2ac/0x470 [ 241.306614][T12269] ? __pfx_rfcomm_sock_sendmsg+0x10/0x10 [ 241.306633][T12269] sock_write_iter+0x49b/0x4f0 [ 241.306661][T12269] ? __pfx_sock_write_iter+0x10/0x10 [ 241.306705][T12269] do_iter_readv_writev+0x619/0x8c0 [ 241.306734][T12269] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 241.306764][T12269] ? bpf_lsm_file_permission+0x9/0x20 [ 241.306789][T12269] ? security_file_permission+0x75/0x260 [ 241.306809][T12269] ? rw_verify_area+0x255/0x4d0 [ 241.306836][T12269] vfs_writev+0x33c/0x990 [ 241.306864][T12269] ? __pfx_vfs_writev+0x10/0x10 [ 241.306881][T12269] ? vfs_write+0x9bc/0xb90 [ 241.306921][T12269] ? do_sys_openat2+0x14c/0x200 [ 241.306940][T12269] ? kmem_cache_free+0x182/0x650 [ 241.306977][T12269] do_writev+0x154/0x2e0 [ 241.306997][T12269] ? __pfx_do_writev+0x10/0x10 [ 241.307022][T12269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.307042][T12269] do_syscall_64+0x15f/0xf80 [ 241.307061][T12269] ? trace_irq_disable+0x3b/0x140 [ 241.307084][T12269] ? clear_bhb_loop+0x40/0x90 [ 241.307105][T12269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.307122][T12269] RIP: 0033:0x7fea7e79cdd9 [ 241.307140][T12269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.307154][T12269] RSP: 002b:00007fea7f591028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 241.307172][T12269] RAX: ffffffffffffffda RBX: 00007fea7ea15fa0 RCX: 00007fea7e79cdd9 [ 241.307182][T12269] RDX: 0000000000000002 RSI: 0000200000019880 RDI: 0000000000000004 [ 241.307198][T12269] RBP: 00007fea7f591090 R08: 0000000000000000 R09: 0000000000000000 [ 241.307207][T12269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.307217][T12269] R13: 00007fea7ea16038 R14: 00007fea7ea15fa0 R15: 00007ffcd86ca578 [ 241.307247][T12269] [ 241.513512][T12276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1704'. [ 241.639509][T12276] tipc: Invalid UDP bearer configuration [ 241.639563][T12276] tipc: Enabling of bearer rejected, failed to enable media [ 241.821341][T12279] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 241.851608][T12279] bond5 (unregistering): Released all slaves [ 242.182594][T12294] netlink: 'syz.4.1707': attribute type 1 has an invalid length. [ 242.195176][T12294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.058657][T12331] raw_sendmsg: syz.4.1718 forgot to set AF_INET. Fix it! [ 243.443195][T12317] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 243.451741][T12345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1722'. [ 243.691813][T12350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1723'. [ 243.756643][T12347] netlink: 'syz.3.1723': attribute type 11 has an invalid length. [ 243.827807][T12353] netlink: 'syz.2.1724': attribute type 2 has an invalid length. [ 243.867225][T12339] lo speed is unknown, defaulting to 1000 [ 243.885981][T12353] netlink: 'syz.2.1724': attribute type 2 has an invalid length. [ 243.964805][T12356] macsec0: entered promiscuous mode [ 244.727669][T12342] lo speed is unknown, defaulting to 1000 [ 244.915224][T12363] netlink: 'syz.3.1727': attribute type 1 has an invalid length. [ 244.932647][T12362] netlink: 'syz.3.1727': attribute type 1 has an invalid length. [ 245.013018][T12369] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1729'. [ 245.044216][T12369] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1729'. [ 245.245560][T12379] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1731'. [ 245.269319][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1733'. [ 245.280123][T12379] bond0: entered promiscuous mode [ 245.285981][T12379] team0: entered promiscuous mode [ 245.291203][T12379] batadv3: entered promiscuous mode [ 245.302645][T12379] bond0: left promiscuous mode [ 245.308431][T12379] team0: left promiscuous mode [ 245.313282][T12379] batadv3: left promiscuous mode [ 245.433390][T12388] netlink: 'syz.3.1734': attribute type 18 has an invalid length. [ 245.446250][T12387] netlink: 'syz.3.1734': attribute type 1 has an invalid length. [ 245.455790][T12388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1734'. [ 245.519299][T12387] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 246.305345][T12417] block nbd0: reconnected socket [ 246.501248][T12423] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1741'. [ 246.579175][ T5624] block nbd0: Receive control failed (result -32) [ 246.776682][T12431] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 246.889463][T12429] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 247.359805][T12444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1748'. [ 247.421558][T12444] netlink: 'syz.0.1748': attribute type 15 has an invalid length. [ 247.481478][T12439] lo speed is unknown, defaulting to 1000 [ 247.649782][T12446] syzkaller0: entered promiscuous mode [ 247.656354][T12446] syzkaller0: entered allmulticast mode [ 247.766957][T12453] pimreg0: tun_chr_ioctl cmd 1074025681 [ 247.772684][T12452] netlink: 'syz.0.1752': attribute type 10 has an invalid length. [ 247.781433][T12452] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1752'. [ 247.792886][T12452] syzkaller0: entered promiscuous mode [ 247.798937][T12452] syzkaller0: entered allmulticast mode [ 247.892734][T12457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.817866][T12490] __nla_validate_parse: 2 callbacks suppressed [ 248.817883][T12490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1759'. [ 248.950206][T12496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1760'. [ 248.979600][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1760'. [ 249.123107][T12490] xt_connbytes: Forcing CT accounting to be enabled [ 249.256663][T12489] ip6gretap0: left promiscuous mode [ 249.270783][T12489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.295663][T12489] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.322078][T12489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.388318][T12489] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 249.424429][T12489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.467240][T12489] veth1_vlan: left promiscuous mode [ 249.476693][T12489] veth0_vlan: left promiscuous mode [ 249.483248][T12489] veth0_vlan: entered promiscuous mode [ 249.500468][T12489] veth1_vlan: entered promiscuous mode [ 249.527863][T12489] veth1_macvtap: left promiscuous mode [ 249.555441][T12489] veth0_macvtap: left promiscuous mode [ 249.562973][T12489] veth0_macvtap: entered promiscuous mode [ 249.573911][T12489] veth1_macvtap: entered promiscuous mode [ 249.585696][T12489] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 249.593845][T12489] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 249.612822][ T6216] lo speed is unknown, defaulting to 1000 [ 249.625701][ T6216] sqz0: Port: 1 Link ACTIVE [ 249.744580][T12507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1763'. [ 249.853116][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.881907][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.899805][T12508] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1763'. [ 249.929445][ T5356] lo speed is unknown, defaulting to 1000 [ 249.953182][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.990977][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.047029][T12532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1767'. [ 250.057382][T12532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1767'. [ 250.088303][T12526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1765'. [ 250.632996][T12556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1774'. [ 250.840507][T12561] syzkaller0: entered promiscuous mode [ 250.851608][T12561] syzkaller0: entered allmulticast mode [ 250.943020][T12561] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 250.968268][T12561] bond6 (unregistering): Released all slaves [ 250.992968][T12558] netlink: 'syz.4.1768': attribute type 11 has an invalid length. [ 251.105167][T12571] tipc: Failed to remove unknown binding: 66,1,1/0:1679357265/1679357267 [ 251.132865][T12571] tipc: Failed to remove unknown binding: 66,1,1/0:1679357265/1679357267 [ 251.143246][T12571] tipc: Failed to remove unknown binding: 66,1,1/0:1679357265/1679357267 [ 252.273266][T12605] block nbd1: not configured, cannot reconfigure [ 252.311295][T12613] netlink: 'syz.4.1788': attribute type 8 has an invalid length. [ 252.337640][T12613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1788'. [ 252.342907][T12573] lo speed is unknown, defaulting to 1000 [ 253.370152][T12656] syz_tun: entered allmulticast mode [ 253.460498][T12656] syz_tun: left allmulticast mode [ 253.722486][T12670] netlink: 'syz.0.1801': attribute type 1 has an invalid length. [ 254.080131][T12682] can: request_module (can-proto-0) failed. [ 254.116541][T12670] 8021q: adding VLAN 0 to HW filter on device bond6 [ 254.481505][T12706] netlink: 'syz.1.1810': attribute type 13 has an invalid length. [ 254.506520][T12706] netlink: 'syz.1.1810': attribute type 17 has an invalid length. [ 254.617665][T12714] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1809'. [ 254.803294][T12706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 254.842518][T12706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 254.876135][T12706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 254.935107][T12706] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 255.266544][T12730] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.290780][T12733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1814'. [ 255.517669][T12730] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.559561][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.567122][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.706574][T12746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1816'. [ 255.787841][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1816'. [ 255.812411][T12744] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1815'. [ 256.481649][T12750] netlink: 'syz.0.1817': attribute type 1 has an invalid length. [ 256.525281][T12730] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.579854][T12759] syzkaller0: entered promiscuous mode [ 256.586418][T12759] syzkaller0: entered allmulticast mode [ 257.781963][T12797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1828'. [ 257.846955][T12798] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1828'. [ 259.160292][T12730] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.181404][T12797] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 259.465046][ T48] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.530026][T12811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.531993][ T48] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.560123][T12817] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1833'. [ 259.570100][T12817] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1833'. [ 259.588214][ T35] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.621733][ T35] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.791495][T12821] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1834'. [ 259.805044][T12821] netlink: Conntrack attr has 4 unknown bytes [ 259.816590][T12821] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1834'. [ 260.020410][T12825] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1836'. [ 260.052014][T12825] unsupported nlmsg_type 40 [ 260.229848][T12801] lo speed is unknown, defaulting to 1000 [ 260.322692][T12835] netlink: 'syz.1.1838': attribute type 1 has an invalid length. [ 260.518479][T12840] bond0: entered promiscuous mode [ 260.530600][T12840] bond_slave_0: entered promiscuous mode [ 260.538806][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1842'. [ 260.544829][T12840] bond_slave_1: entered promiscuous mode [ 260.567291][T12840] batadv0: entered promiscuous mode [ 260.577894][T12840] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 260.604292][T12840] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 260.650717][T12840] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 260.661066][T12840] bond0: left promiscuous mode [ 260.666323][T12840] bond_slave_0: left promiscuous mode [ 260.672006][T12840] bond_slave_1: left promiscuous mode [ 260.682872][T12840] batadv0: left promiscuous mode [ 261.502616][T12882] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 262.080863][T12901] netlink: 'syz.0.1861': attribute type 1 has an invalid length. [ 262.213241][T12909] netlink: 'syz.2.1862': attribute type 4 has an invalid length. [ 262.273745][T12912] netlink: 'syz.2.1862': attribute type 4 has an invalid length. [ 262.403219][T12904] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 262.430974][T12904] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 262.472238][T12911] macvlan2: entered promiscuous mode [ 262.484044][T12911] macvlan2: entered allmulticast mode [ 262.491208][T12911] bond7: entered promiscuous mode [ 262.503348][T12911] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 262.512136][T12911] bond7: left promiscuous mode [ 262.676579][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1865'. [ 262.765946][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1865'. [ 262.785564][ T136] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.803686][ T136] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.843043][ T136] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.922113][ T136] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.922558][T12931] openvswitch: netlink: Flow actions attr not present in new flow. [ 263.248611][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1871'. [ 263.365652][T12960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1875'. [ 263.799070][T12975] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1879'. [ 264.115536][T12984] netlink: 'syz.3.1880': attribute type 3 has an invalid length. [ 264.160196][T12977] ip6erspan0: entered allmulticast mode [ 264.379531][T12984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.398905][T12984] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.431508][T12984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.626882][T12984] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 264.640897][T12984] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.662743][T12984] veth1_vlan: left promiscuous mode [ 264.669559][T12984] veth0_vlan: left promiscuous mode [ 264.677297][T12984] veth0_vlan: entered promiscuous mode [ 264.687476][T12984] veth1_vlan: entered promiscuous mode [ 264.717694][T12984] veth0_macvtap: left promiscuous mode [ 264.736163][T12984] veth0_macvtap: entered promiscuous mode [ 264.752721][T12984] macvtap0: left promiscuous mode [ 264.768668][T12984] bridge0: port 1(vlan2) entered blocking state [ 264.775118][T12984] bridge0: port 1(vlan2) entered forwarding state [ 264.786034][T12984] geneve0: entered promiscuous mode [ 264.921661][T12984] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 264.950201][T12966] lo speed is unknown, defaulting to 1000 [ 265.236455][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 266.188190][ T48] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.197498][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 266.900842][ T48] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.925821][ T48] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.993801][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1885'. [ 267.003926][ T48] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.186023][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 267.202030][T13021] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1889'. [ 267.488460][T13029] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1890'. [ 267.575645][T13027] xt_CT: No such helper "netbios-ns" [ 267.827213][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 267.849448][T13039] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.201061][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 268.431688][T13065] netlink: 'syz.3.1904': attribute type 16 has an invalid length. [ 268.707898][T13078] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1906'. [ 268.782305][T13084] ip6t_srh: unknown srh invflags 4000 [ 268.831822][T13078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1906'. [ 268.886830][T13082] netlink: 'syz.3.1906': attribute type 1 has an invalid length. [ 269.157581][T13096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1910'. [ 269.196964][T13100] FAULT_INJECTION: forcing a failure. [ 269.196964][T13100] name failslab, interval 1, probability 0, space 0, times 0 [ 269.218443][T13100] CPU: 0 UID: 0 PID: 13100 Comm: syz.2.1912 Not tainted syzkaller #0 PREEMPT(full) [ 269.218470][T13100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 269.218481][T13100] Call Trace: [ 269.218489][T13100] [ 269.218496][T13100] dump_stack_lvl+0xe8/0x150 [ 269.218522][T13100] should_fail_ex+0x412/0x560 [ 269.218549][T13100] should_failslab+0xa8/0x100 [ 269.218576][T13100] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 269.218602][T13100] ? __get_vm_area_node+0x13f/0x300 [ 269.218629][T13100] __get_vm_area_node+0x13f/0x300 [ 269.218656][T13100] __vmalloc_node_range_noprof+0x36a/0x1750 [ 269.218679][T13100] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 269.218700][T13100] ? __lock_acquire+0x6b5/0x2cf0 [ 269.218740][T13100] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 269.218764][T13100] ? __lock_acquire+0x6b5/0x2cf0 [ 269.218784][T13100] ? _parse_integer_limit+0x1ae/0x1f0 [ 269.218808][T13100] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 269.218823][T13100] __vmalloc_noprof+0xd2/0x120 [ 269.218846][T13100] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 269.218866][T13100] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 269.218887][T13100] bpf_prog_alloc+0x3c/0x1a0 [ 269.218906][T13100] bpf_prog_load+0x779/0x1a10 [ 269.218943][T13100] ? __pfx_bpf_prog_load+0x10/0x10 [ 269.218971][T13100] ? __might_fault+0xaf/0x130 [ 269.219007][T13100] ? bpf_lsm_bpf+0x9/0x20 [ 269.219022][T13100] ? security_bpf+0x7e/0x2d0 [ 269.219044][T13100] __sys_bpf+0x618/0x950 [ 269.219072][T13100] ? __pfx___sys_bpf+0x10/0x10 [ 269.219111][T13100] ? ksys_write+0x242/0x270 [ 269.219136][T13100] ? __pfx_ksys_write+0x10/0x10 [ 269.219164][T13100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.219184][T13100] __x64_sys_bpf+0x7c/0x90 [ 269.219208][T13100] do_syscall_64+0x15f/0xf80 [ 269.219227][T13100] ? trace_irq_disable+0x3b/0x140 [ 269.219252][T13100] ? clear_bhb_loop+0x40/0x90 [ 269.219274][T13100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.219291][T13100] RIP: 0033:0x7ff1cff9cdd9 [ 269.219309][T13100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.219324][T13100] RSP: 002b:00007ff1d0f28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 269.219341][T13100] RAX: ffffffffffffffda RBX: 00007ff1d0215fa0 RCX: 00007ff1cff9cdd9 [ 269.219354][T13100] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 269.219366][T13100] RBP: 00007ff1d0f28090 R08: 0000000000000000 R09: 0000000000000000 [ 269.219377][T13100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.219387][T13100] R13: 00007ff1d0216038 R14: 00007ff1d0215fa0 R15: 00007ffc52af3bf8 [ 269.219416][T13100] [ 269.219517][T13100] syz.2.1912: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 269.504892][T13100] CPU: 0 UID: 0 PID: 13100 Comm: syz.2.1912 Not tainted syzkaller #0 PREEMPT(full) [ 269.504915][T13100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 269.504925][T13100] Call Trace: [ 269.504933][T13100] [ 269.504940][T13100] dump_stack_lvl+0xe8/0x150 [ 269.504964][T13100] warn_alloc+0x249/0x340 [ 269.504993][T13100] ? __pfx_warn_alloc+0x10/0x10 [ 269.505017][T13100] ? __get_vm_area_node+0x13f/0x300 [ 269.505043][T13100] ? __get_vm_area_node+0x2b5/0x300 [ 269.505071][T13100] __vmalloc_node_range_noprof+0x38f/0x1750 [ 269.505097][T13100] ? __lock_acquire+0x6b5/0x2cf0 [ 269.505135][T13100] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 269.505158][T13100] ? __lock_acquire+0x6b5/0x2cf0 [ 269.505179][T13100] ? _parse_integer_limit+0x1ae/0x1f0 [ 269.505204][T13100] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 269.505220][T13100] __vmalloc_noprof+0xd2/0x120 [ 269.505243][T13100] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 269.505262][T13100] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 269.505283][T13100] bpf_prog_alloc+0x3c/0x1a0 [ 269.505302][T13100] bpf_prog_load+0x779/0x1a10 [ 269.505339][T13100] ? __pfx_bpf_prog_load+0x10/0x10 [ 269.505366][T13100] ? __might_fault+0xaf/0x130 [ 269.505412][T13100] ? bpf_lsm_bpf+0x9/0x20 [ 269.505428][T13100] ? security_bpf+0x7e/0x2d0 [ 269.505451][T13100] __sys_bpf+0x618/0x950 [ 269.505478][T13100] ? __pfx___sys_bpf+0x10/0x10 [ 269.505516][T13100] ? ksys_write+0x242/0x270 [ 269.505543][T13100] ? __pfx_ksys_write+0x10/0x10 [ 269.505571][T13100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.505590][T13100] __x64_sys_bpf+0x7c/0x90 [ 269.505615][T13100] do_syscall_64+0x15f/0xf80 [ 269.505633][T13100] ? trace_irq_disable+0x3b/0x140 [ 269.505658][T13100] ? clear_bhb_loop+0x40/0x90 [ 269.505680][T13100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.505698][T13100] RIP: 0033:0x7ff1cff9cdd9 [ 269.505715][T13100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.505729][T13100] RSP: 002b:00007ff1d0f28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 269.505748][T13100] RAX: ffffffffffffffda RBX: 00007ff1d0215fa0 RCX: 00007ff1cff9cdd9 [ 269.505760][T13100] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 269.505770][T13100] RBP: 00007ff1d0f28090 R08: 0000000000000000 R09: 0000000000000000 [ 269.505781][T13100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.505791][T13100] R13: 00007ff1d0216038 R14: 00007ff1d0215fa0 R15: 00007ffc52af3bf8 [ 269.505820][T13100] [ 269.505827][T13100] Mem-Info: [ 269.771643][T13100] active_anon:6130 inactive_anon:0 isolated_anon:0 [ 269.771643][T13100] active_file:3529 inactive_file:40015 isolated_file:0 [ 269.771643][T13100] unevictable:768 dirty:220 writeback:0 [ 269.771643][T13100] slab_reclaimable:11114 slab_unreclaimable:147997 [ 269.771643][T13100] mapped:31799 shmem:1295 pagetables:1342 [ 269.771643][T13100] sec_pagetables:0 bounce:0 [ 269.771643][T13100] kernel_misc_reclaimable:0 [ 269.771643][T13100] free:1267219 free_pcp:11638 free_cma:0 [ 269.817756][T13100] Node 0 active_anon:24620kB inactive_anon:0kB active_file:14116kB inactive_file:159864kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127196kB dirty:876kB writeback:0kB shmem:3644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14044kB pagetables:5224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 269.819987][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 269.853133][T13100] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 269.887130][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 269.927182][T13100] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 269.965678][T13100] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 269.972731][T13100] Node 0 DMA32 free:1102844kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24620kB inactive_anon:0kB active_file:14116kB inactive_file:159864kB unevictable:1536kB writepending:876kB zspages:0kB present:3129332kB managed:2552716kB mlocked:0kB bounce:0kB free_pcp:46836kB local_pcp:25356kB free_cma:0kB [ 270.034682][T13100] lowmem_reserve[]: 0 0 0 0 0 [ 270.039557][T13100] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:20kB free_cma:0kB [ 270.075627][T13100] lowmem_reserve[]: 0 0 0 0 0 [ 270.080415][T13100] Node 1 Normal free:3950968kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 270.113091][T13100] lowmem_reserve[]: 0 0 0 0 0 [ 270.121905][T13100] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 270.135580][T13100] Node 0 DMA32: 4083*4kB (UME) 3031*8kB (UME) 1022*16kB (UM) 365*32kB (UM) 391*64kB (UME) 155*128kB (UM) 111*256kB (UME) 136*512kB (UME) 67*1024kB (UME) 26*2048kB (UME) 188*4096kB (UM) = 1103428kB [ 270.185164][T13100] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 270.237865][T13100] Node 1 Normal: 0*4kB 3*8kB (UM) 10*16kB (UM) 10*32kB (UM) 4*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 963*4096kB (UM) = 3950968kB [ 270.261922][T13101] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.284726][T13100] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.298377][T13101] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 270.324106][T13100] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 270.333764][T13100] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.344876][T13100] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 270.373243][T13100] 44835 total pagecache pages [ 270.378912][T13100] 0 pages in swap cache [ 270.383493][T13100] Free swap = 124996kB [ 270.388250][T13100] Total swap = 124996kB [ 270.392493][T13100] 2097051 pages RAM [ 270.396666][T13100] 0 pages HighMem/MovableOnly [ 270.401365][T13100] 427089 pages reserved [ 270.415787][T13100] 0 pages cma reserved [ 270.495996][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 270.515659][T13101] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.546714][T13101] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 270.744918][T13101] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.762782][T13101] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 270.876875][T13101] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.898330][T13101] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 271.080082][T13144] xt_l2tp: v2 doesn't support IP mode [ 271.630224][ T6413] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 271.659282][ T6413] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 271.762548][ T6413] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 271.792145][ T6413] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 271.803190][T13176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1932'. [ 271.803190][T13175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1932'. [ 271.803213][T13175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1932'. [ 271.838606][T13176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1932'. [ 271.879342][ T6784] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 271.903587][ T6784] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 271.997356][ T6784] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 272.017683][ T6784] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 272.044180][T13178] gretap0: mtu less than device minimum [ 272.342718][T13192] syzkaller0: entered promiscuous mode [ 272.382144][T13192] syzkaller0: entered allmulticast mode [ 272.423968][T13194] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 272.431285][T13194] IPv6: NLM_F_CREATE should be set when creating new route [ 272.438601][T13194] IPv6: NLM_F_CREATE should be set when creating new route [ 272.449724][T13192] netlink: 'syz.4.1937': attribute type 3 has an invalid length. [ 272.521570][T13192] __nla_validate_parse: 3 callbacks suppressed [ 272.521587][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1937'. [ 272.955975][T13218] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1942'. [ 272.987509][T13218] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.122653][T13218] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.211864][T13218] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.271782][T13218] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.369917][ T35] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.384832][ T35] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.402661][ T35] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.418430][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.875382][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 290.896446][T13227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1945'. [ 291.022301][T13231] syzkaller1: entered promiscuous mode [ 291.044770][T13231] syzkaller1: entered allmulticast mode [ 291.074443][T13231] netlink: 'syz.3.1946': attribute type 8 has an invalid length. [ 291.113371][T13231] netlink: 'syz.3.1946': attribute type 4 has an invalid length. [ 291.510237][T13251] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 291.541716][T13251] pim6reg1: entered promiscuous mode [ 291.564071][T13251] pim6reg1: entered allmulticast mode [ 291.697207][T13262] xt_bpf: check failed: parse error [ 291.972952][T13277] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.1960'. [ 292.118508][T13288] netlink: 'syz.4.1960': attribute type 3 has an invalid length. [ 292.136496][T13288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1960'. [ 292.393059][T13303] sctp: [Deprecated]: syz.3.1968 (pid 13303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.393059][T13303] Use struct sctp_sack_info instead [ 292.525750][T13313] netlink: 'syz.3.1968': attribute type 1 has an invalid length. [ 292.531217][T13312] Bluetooth: MGMT ver 1.23 [ 292.596534][T13317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.628234][T13313] 8021q: adding VLAN 0 to HW filter on device bond6 [ 292.776478][T13323] bond8: option all_slaves_active: invalid value (5) [ 292.791556][T13323] bond8 (unregistering): Released all slaves [ 293.030468][T13336] pimreg: entered allmulticast mode [ 293.076147][T13334] pimreg: left allmulticast mode [ 293.637254][T13346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1975'. [ 294.415332][T13341] lo speed is unknown, defaulting to 1000 [ 294.883488][T13437] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1997'. [ 295.528046][T13471] pim6reg1: entered promiscuous mode [ 295.552151][T13471] pim6reg1: entered allmulticast mode [ 295.609694][T13471] Cannot find set identified by id 0 to match [ 295.667744][T13471] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2001'. [ 296.465027][T13487] tipc: Enabled bearer , priority 0 [ 296.485235][T13487] syzkaller0: entered promiscuous mode [ 296.492038][T13487] syzkaller0: entered allmulticast mode [ 296.512888][T13489] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2005'. [ 296.574438][T13487] tipc: Resetting bearer [ 296.597398][T13489] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2005'. [ 296.621621][T13486] tipc: Resetting bearer [ 296.677008][T13486] tipc: Disabling bearer [ 296.723169][T13492] pimreg9: entered allmulticast mode [ 296.826390][T13492] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 296.855901][T13492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.940773][ T48] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 296.969376][ T48] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 296.990414][ T48] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 297.021515][T13514] syzkaller1: entered promiscuous mode [ 297.027925][T13516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2011'. [ 297.044975][T13514] syzkaller1: entered allmulticast mode [ 297.099359][ T48] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 297.583751][T13543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2019'. [ 297.591405][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2020'. [ 297.612837][T13547] ip6tnl1: entered allmulticast mode [ 298.516164][T13596] netlink: 'syz.0.2030': attribute type 4 has an invalid length. [ 298.563895][T13596] netlink: 'syz.0.2030': attribute type 4 has an invalid length. [ 298.656875][T13596] netlink: 'syz.0.2030': attribute type 4 has an invalid length. [ 298.901276][T13617] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2036'. [ 298.922268][T13620] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2033'. [ 298.945461][T13618] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2036'. [ 298.953721][T13622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2038'. [ 298.962570][T13614] netlink: 'syz.4.2036': attribute type 15 has an invalid length. [ 298.972339][T13618] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2036'. [ 299.465561][T13648] bond0: Error: Cannot enslave bond to itself. [ 299.487183][T13648] syzkaller0: entered promiscuous mode [ 299.510523][T13648] syzkaller0: entered allmulticast mode [ 300.782738][T13717] syzkaller1: entered promiscuous mode [ 300.783117][T13713] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 300.788391][T13717] syzkaller1: entered allmulticast mode [ 301.515136][T13759] __nla_validate_parse: 16 callbacks suppressed [ 301.515154][T13759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2077'. [ 301.865601][T13781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2083'. [ 302.325911][T13793] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 302.372571][T13800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2085'. [ 302.394554][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2085'. [ 304.505335][T13759] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.683308][T13807] xt_TPROXY: Can be used only with -p tcp or -p udp [ 304.745758][T13813] xt_limit: Overflow, try lower: 28676/2147483648 [ 304.843482][T13813] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 304.875686][T13813] bridge4: entered allmulticast mode [ 304.882829][T13814] 8021q: VLANs not supported on vcan0 [ 304.901235][T13820] macvlan0: entered allmulticast mode [ 304.933454][T13820] veth1_vlan: entered allmulticast mode [ 304.959179][T13820] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 305.087907][ T6184] bridge0: entered promiscuous mode [ 305.104132][ T6184] vlan2: entered promiscuous mode [ 305.200669][T13834] tipc: Invalid UDP bearer configuration [ 305.200731][T13834] tipc: Enabling of bearer rejected, failed to enable media [ 305.317758][T13831] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2096'. [ 305.337363][T13831] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2096'. [ 305.406049][T13848] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2099'. [ 305.440109][T13853] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2101'. [ 305.682068][T13862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2103'. [ 305.864843][T13869] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2106'. [ 305.963714][T13871] netlink: 'syz.1.2107': attribute type 2 has an invalid length. [ 306.130370][T13871] smbdirect: ib_dev[syz1] removed [ 306.480415][T13883] xt_addrtype: ipv6 does not support BROADCAST matching [ 306.935590][T13875] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2108'. [ 307.021823][T13904] team0: Port device syz_tun added [ 307.044813][T13908] FAULT_INJECTION: forcing a failure. [ 307.044813][T13908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.067246][T13908] CPU: 0 UID: 0 PID: 13908 Comm: syz.2.2119 Not tainted syzkaller #0 PREEMPT(full) [ 307.067269][T13908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 307.067292][T13908] Call Trace: [ 307.067300][T13908] [ 307.067307][T13908] dump_stack_lvl+0xe8/0x150 [ 307.067333][T13908] should_fail_ex+0x412/0x560 [ 307.067360][T13908] _copy_to_user+0x31/0xb0 [ 307.067387][T13908] simple_read_from_buffer+0xe1/0x170 [ 307.067414][T13908] proc_fail_nth_read+0x1bb/0x230 [ 307.067440][T13908] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.067465][T13908] ? rw_verify_area+0x2a6/0x4d0 [ 307.067488][T13908] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.067521][T13908] vfs_read+0x20c/0xa70 [ 307.067550][T13908] ? __pfx___mutex_lock+0x10/0x10 [ 307.067572][T13908] ? __pfx_vfs_read+0x10/0x10 [ 307.067597][T13908] ? __fget_files+0x2a/0x420 [ 307.067622][T13908] ? __fget_files+0x3a0/0x420 [ 307.067641][T13908] ? __fget_files+0x2a/0x420 [ 307.067670][T13908] ksys_read+0x150/0x270 [ 307.067697][T13908] ? __pfx_ksys_read+0x10/0x10 [ 307.067727][T13908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.067747][T13908] do_syscall_64+0x15f/0xf80 [ 307.067765][T13908] ? trace_irq_disable+0x3b/0x140 [ 307.067790][T13908] ? clear_bhb_loop+0x40/0x90 [ 307.067813][T13908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.067831][T13908] RIP: 0033:0x7ff1cff5d60e [ 307.067848][T13908] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 307.067863][T13908] RSP: 002b:00007ff1d0f27fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 307.067882][T13908] RAX: ffffffffffffffda RBX: 00007ff1d0f286c0 RCX: 00007ff1cff5d60e [ 307.067894][T13908] RDX: 000000000000000f RSI: 00007ff1d0f280a0 RDI: 0000000000000004 [ 307.067905][T13908] RBP: 00007ff1d0f28090 R08: 0000000000000000 R09: 0000000000000000 [ 307.067916][T13908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.067926][T13908] R13: 00007ff1d0216038 R14: 00007ff1d0215fa0 R15: 00007ffc52af3bf8 [ 307.067957][T13908] [ 307.498467][T13886] lo speed is unknown, defaulting to 1000 [ 308.189238][T13946] netlink: 'syz.3.2129': attribute type 13 has an invalid length. [ 308.219584][T13946] netlink: 'syz.3.2129': attribute type 17 has an invalid length. [ 308.299709][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2129'. [ 308.445945][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 308.510612][ T29] audit: type=1804 audit(1777271599.117:2): pid=13955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2132" name="/newroot/447/cgroup.controllers" dev="tmpfs" ino=2310 res=1 errno=0 [ 308.526325][T13946] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 308.585389][ T29] audit: type=1800 audit(1777271599.117:3): pid=13955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2132" name="cgroup.controllers" dev="tmpfs" ino=2310 res=0 errno=0 [ 308.641682][ T29] audit: type=1800 audit(1777271599.117:4): pid=13955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2132" name="cgroup.controllers" dev="tmpfs" ino=2310 res=0 errno=0 [ 308.665131][T13956] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 308.672367][T13956] IPv6: NLM_F_CREATE should be set when creating new route [ 308.679643][T13956] IPv6: NLM_F_CREATE should be set when creating new route [ 308.907563][T13966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2137'. [ 308.918187][T13967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2137'. [ 309.337374][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 309.349344][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 309.477809][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 309.479388][T13991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2143'. [ 309.506172][T13991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2143'. [ 309.756418][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 309.794154][ T5624] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 310.244940][T14012] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.426121][T14012] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.555529][T14012] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.646360][T14012] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.670301][T14030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2155'. [ 310.785961][T14030] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 310.845285][T14041] syz_tun: entered allmulticast mode [ 310.868367][T14041] syz_tun (unregistering): left allmulticast mode [ 310.930585][ T35] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.983919][ T35] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.052671][ T35] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.125239][ T136] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.172688][T14052] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2161'. [ 311.330331][T14059] No such timeout policy "syz0" [ 311.533636][T14061] netlink: 'syz.0.2163': attribute type 1 has an invalid length. [ 311.576542][T14061] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2163'. [ 312.065238][T14087] tipc: Enabling of bearer rejected, failed to enable media [ 312.082574][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2169'. [ 312.242845][T14091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2172'. [ 312.542483][T14104] sctp: [Deprecated]: syz.1.2176 (pid 14104) Use of struct sctp_assoc_value in delayed_ack socket option. [ 312.542483][T14104] Use struct sctp_sack_info instead [ 312.582736][T14103] sctp: [Deprecated]: syz.1.2176 (pid 14103) Use of struct sctp_assoc_value in delayed_ack socket option. [ 312.582736][T14103] Use struct sctp_sack_info instead [ 312.784879][T14118] netlink: 'syz.3.2180': attribute type 4 has an invalid length. [ 312.811515][T14118] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2180'. [ 312.869572][T14118] .`: renamed from bond0 (while UP) [ 313.635912][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 313.672325][T14141] syzkaller0: entered promiscuous mode [ 313.703123][T14141] syzkaller0: entered allmulticast mode [ 313.880632][T14153] geneve4: entered promiscuous mode [ 314.072928][T14161] syzkaller0: entered promiscuous mode [ 314.095009][T14161] syzkaller0: entered allmulticast mode [ 314.222682][T14163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2193'. [ 314.273822][T14136] lo speed is unknown, defaulting to 1000 [ 314.281423][T14170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2197'. [ 314.305706][T14170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2197'. [ 314.332075][T14170] netlink: 'syz.4.2197': attribute type 15 has an invalid length. [ 314.404748][T14170] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2197'. [ 314.964844][T14195] lo speed is unknown, defaulting to 1000 [ 315.003790][T14197] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2202'. [ 315.066978][T14195] lo speed is unknown, defaulting to 1000 [ 315.124926][T14195] lo speed is unknown, defaulting to 1000 [ 315.234864][T14195] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 315.289550][T14195] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 315.334098][T14195] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 315.452467][T14195] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 315.583629][T14195] lo speed is unknown, defaulting to 1000 [ 315.622733][T14195] lo speed is unknown, defaulting to 1000 [ 315.652200][T14195] lo speed is unknown, defaulting to 1000 [ 315.660232][T14215] netlink: 'syz.4.2206': attribute type 1 has an invalid length. [ 315.687049][T14195] lo speed is unknown, defaulting to 1000 [ 315.922272][T14215] bond4: entered promiscuous mode [ 315.950384][T14215] 8021q: adding VLAN 0 to HW filter on device bond4 [ 315.991769][T14195] lo speed is unknown, defaulting to 1000 [ 316.181885][T14220] 8021q: adding VLAN 0 to HW filter on device bond5 [ 316.228728][T14220] bond4: (slave bond5): making interface the new active one [ 316.245015][T14220] bond5: entered promiscuous mode [ 316.251431][T14220] bond4: (slave bond5): Enslaving as an active interface with an up link [ 316.329857][T14230] syzkaller1: entered promiscuous mode [ 316.351105][T14230] syzkaller1: entered allmulticast mode [ 316.435295][T14238] veth0: entered promiscuous mode [ 316.546426][T14238] veth0: left promiscuous mode [ 316.665287][T14249] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2214'. [ 316.679093][T14251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2215'. [ 316.999291][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.097905][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'. [ 319.136860][T14227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 319.145841][T14229] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2209'. [ 319.396637][T14274] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 319.424137][ T35] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96 [ 319.751837][T14300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2227'. [ 319.783258][T14300] bond0: entered promiscuous mode [ 319.788453][T14300] bond_slave_0: entered promiscuous mode [ 319.801630][T14300] bond_slave_1: entered promiscuous mode [ 319.821253][T14300] batadv_slave_0: entered promiscuous mode [ 319.840614][T14300] batadv_slave_0: left promiscuous mode [ 319.859983][T14300] bond0: left promiscuous mode [ 319.866635][T14300] bond_slave_0: left promiscuous mode [ 319.876221][T14300] bond_slave_1: left promiscuous mode [ 319.898626][T14307] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2232'. [ 319.928886][T14307] netlink: 'syz.3.2232': attribute type 28 has an invalid length. [ 320.173371][T14325] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2234'. [ 320.221145][T14325] bridge0: port 1(vlan2) entered disabled state [ 320.416872][T14335] batadv_slave_1: entered promiscuous mode [ 320.572691][T14335] batadv_slave_1: left promiscuous mode [ 320.631834][T14342] IPVS: set_ctl: invalid protocol: 135 172.20.20.49:20000 [ 320.802519][T14360] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2244'. [ 320.833663][T14360] netlink: 'syz.3.2244': attribute type 1 has an invalid length. [ 320.861630][T14360] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2244'. [ 321.312528][T14374] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2248'. [ 321.760669][T14390] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 321.805072][T14390] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 321.823549][T14360] lo speed is unknown, defaulting to 1000 [ 321.970727][T14396] veth1_to_bond: entered allmulticast mode [ 321.979056][T14396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2254'. [ 322.046091][T14396] veth1_to_bond (unregistering): left allmulticast mode [ 322.069311][T14396] bond0: (slave bond_slave_1): Releasing backup interface [ 322.349000][T14360] lo speed is unknown, defaulting to 1000 [ 322.478909][T14407] tipc: Enabled bearer , priority 0 [ 322.522157][T14411] netlink: 'syz.2.2261': attribute type 21 has an invalid length. [ 322.537555][T14411] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2261'. [ 322.572116][T14407] syzkaller0: entered promiscuous mode [ 322.589936][T14407] syzkaller0: entered allmulticast mode [ 322.655590][T14407] tipc: Resetting bearer [ 322.691814][T14406] tipc: Resetting bearer [ 322.791889][T14406] tipc: Disabling bearer [ 322.856578][T14424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2264'. [ 322.879232][T14424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2264'. [ 322.931775][T14423] x_tables: unsorted entry at hook 3 [ 323.086670][T14428] x_tables: duplicate underflow at hook 1 [ 324.836453][T14509] netlink: 'syz.1.2287': attribute type 8 has an invalid length. [ 324.864090][T14509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2287'. [ 324.962219][T14520] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2291'. [ 325.024016][T14525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2293'. [ 325.065174][T14525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2293'. [ 325.322152][T14536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2297'. [ 325.439893][T14541] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2298'. [ 325.451483][T14538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2296'. [ 325.471419][T14538] bond0: entered promiscuous mode [ 325.485474][T14538] batadv_slave_0: entered promiscuous mode [ 325.678700][T14553] netlink: 'syz.4.2300': attribute type 1 has an invalid length. [ 325.756109][T14520] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 325.844941][T14558] sctp: [Deprecated]: syz.1.2302 (pid 14558) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.844941][T14558] Use struct sctp_sack_info instead [ 326.411170][T14584] bridge0: port 1(vlan2) entered blocking state [ 326.432187][T14584] bridge0: port 1(vlan2) entered disabled state [ 326.457974][T14584] vlan2: entered allmulticast mode [ 326.475136][T14584] geneve0: entered allmulticast mode [ 326.868765][T14561] lo speed is unknown, defaulting to 1000 [ 326.880735][T14596] netlink: 'syz.1.2315': attribute type 4 has an invalid length. [ 327.549856][T14614] __nla_validate_parse: 3 callbacks suppressed [ 327.549873][T14614] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2319'. [ 327.681496][T14616] tipc: New replicast peer: 255.255.255.255 [ 327.754028][T14616] tipc: Enabled bearer , priority 5 [ 327.789339][T14561] lo speed is unknown, defaulting to 1000 [ 327.868157][T14576] lo speed is unknown, defaulting to 1000 [ 328.426098][T14628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2325'. [ 328.487400][T14628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2325'. [ 328.708214][T14576] lo speed is unknown, defaulting to 1000 [ 328.847791][ T6199] tipc: Node number set to 4263233766 [ 329.049882][T14641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2329'. [ 329.497034][T14649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2331'. [ 329.516299][T14649] xt_TCPMSS: Only works on TCP SYN packets [ 329.925127][T14655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2334'. [ 330.066255][T14658] sctp: [Deprecated]: syz.0.2333 (pid 14658) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.066255][T14658] Use struct sctp_sack_info instead [ 330.089514][T14658] sctp: [Deprecated]: syz.0.2333 (pid 14658) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.089514][T14658] Use struct sctp_sack_info instead [ 330.361323][T14668] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2337'. [ 330.389464][T14670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2338'. [ 330.765357][T14685] xt_hashlimit: size too large, truncated to 1048576 [ 331.129766][T14697] syzkaller1: entered promiscuous mode [ 331.157372][T14697] syzkaller1: entered allmulticast mode [ 331.414625][T14712] gtp0: entered promiscuous mode [ 331.460480][T14712] gtp0: entered allmulticast mode [ 331.608703][T14725] hsr0: entered promiscuous mode [ 331.713793][T14736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2354'. [ 331.791024][T14740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2354'. [ 331.947835][T14725] hsr0: left promiscuous mode [ 332.062003][T14750] netlink: 'syz.1.2358': attribute type 1 has an invalid length. [ 332.089626][T14750] netlink: 'syz.1.2358': attribute type 1 has an invalid length. [ 332.396879][T14768] netlink: 'syz.1.2361': attribute type 8 has an invalid length. [ 333.142844][T14798] __nla_validate_parse: 9 callbacks suppressed [ 333.142862][T14798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2367'. [ 333.708678][T14822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2375'. [ 334.020472][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2378'. [ 334.106122][T14838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2380'. [ 334.699887][T14864] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2384'. [ 334.943497][T14853] lo speed is unknown, defaulting to 1000 [ 335.332664][T14853] lo speed is unknown, defaulting to 1000 [ 335.869496][T14897] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 335.878222][T14897] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 337.091039][T14844] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 337.307651][T14914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2398'. [ 337.325904][T14917] tipc: Enabled bearer , priority 0 [ 337.341607][T14918] tipc: Enabling of bearer rejected, already enabled [ 337.379163][T14910] tipc: Resetting bearer [ 337.455047][T14921] netlink: 'syz.2.2400': attribute type 5 has an invalid length. [ 337.757024][T14927] xt_hashlimit: max too large, truncated to 1048576 [ 337.775563][T14927] xt_hashlimit: Unknown mode mask 300, kernel too old? [ 337.821658][T14940] netlink: 'syz.1.2405': attribute type 29 has an invalid length. [ 337.891956][T14941] netlink: 'syz.0.2406': attribute type 5 has an invalid length. [ 337.992046][T14947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2408'. [ 338.173019][T14958] netlink: 'syz.0.2410': attribute type 83 has an invalid length. [ 338.623317][T14970] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 338.862733][T14977] netlink: 'syz.3.2417': attribute type 1 has an invalid length. [ 339.030311][T14946] lo speed is unknown, defaulting to 1000 [ 339.085026][T14980] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 339.372306][T14992] netlink: 'syz.3.2420': attribute type 1 has an invalid length. [ 339.397719][T14992] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2420'. [ 339.487437][T15000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2422'. [ 339.533522][T14995] bond5 (unregistering): Released all slaves [ 339.555738][T14946] lo speed is unknown, defaulting to 1000 [ 339.807737][T15012] netlink: 'syz.3.2424': attribute type 1 has an invalid length. [ 339.929362][T15018] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2424'. [ 339.943902][T15012] 8021q: adding VLAN 0 to HW filter on device bond7 [ 339.969584][T15014] vlan3: entered promiscuous mode [ 339.975171][T15014] bond7: entered promiscuous mode [ 339.980437][T15014] vlan3: entered allmulticast mode [ 339.986774][T15014] bond7: entered allmulticast mode [ 340.228879][T15024] xt_policy: output policy not valid in PREROUTING and INPUT [ 340.480485][T15028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2431'. [ 341.035163][T15049] netlink: 404 bytes leftover after parsing attributes in process `syz.2.2436'. [ 341.046199][T15049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2436'. [ 341.056371][T15049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2436'. [ 341.082412][T15049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2436'. [ 341.196537][T15053] netlink: 'syz.1.2439': attribute type 4 has an invalid length. [ 341.208539][T15055] syzkaller0: entered promiscuous mode [ 341.212654][T15056] netlink: 'syz.1.2439': attribute type 4 has an invalid length. [ 341.223512][T15055] syzkaller0: entered allmulticast mode [ 341.492515][T15064] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2443'. [ 341.988045][T15093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2453'. [ 342.235114][T15106] netlink: 'syz.4.2454': attribute type 1 has an invalid length. [ 342.421803][ T6417] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.432667][ T6417] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.444665][ T6417] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.462877][ T6417] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.804185][T15130] syzkaller0: entered promiscuous mode [ 342.816846][T15130] syzkaller0: entered allmulticast mode [ 343.006371][T15135] sit0: left promiscuous mode [ 343.123079][T15135] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.130338][T15135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.287169][T15135] xfrm1: left allmulticast mode [ 343.305126][T15135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.329444][T15135] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 343.373654][T15135] vlan2: left promiscuous mode [ 343.386146][T15135] geneve1: left promiscuous mode [ 343.398436][T15135] vlan2: left allmulticast mode [ 343.410275][T15135] geneve1: left allmulticast mode [ 343.428657][T15135] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 343.489419][T15135] virt_wifi0: entered promiscuous mode [ 343.495926][T15135] virt_wifi0: entered allmulticast mode [ 343.501835][T15135] macsec1: left promiscuous mode [ 343.508214][T15135] macsec1: left allmulticast mode [ 343.513350][T15135] virt_wifi0: left allmulticast mode [ 343.523478][T15135] 8021q: adding VLAN 0 to HW filter on device eth0 [ 343.532226][T15135] 8021q: adding VLAN 0 to HW filter on device eth1 [ 343.541562][T15135] 8021q: adding VLAN 0 to HW filter on device eth2 [ 343.551215][T15135] 8021q: adding VLAN 0 to HW filter on device eth3 [ 343.571155][T15135] bond4: left promiscuous mode [ 343.576268][T15135] bond5: left promiscuous mode [ 343.593486][T15132] lo speed is unknown, defaulting to 1000 [ 343.594291][ T136] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.640067][ T136] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.672443][ T136] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.710802][ T136] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.757438][T15154] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 343.767214][T15154] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 343.780458][T15154] tipc: Resetting bearer [ 344.180901][T15168] netlink: 'syz.1.2476': attribute type 1 has an invalid length. [ 344.229732][T15168] bond7: entered promiscuous mode [ 344.235013][T15168] bond7: entered allmulticast mode [ 344.240597][T15168] 8021q: adding VLAN 0 to HW filter on device bond7 [ 344.249144][T15132] lo speed is unknown, defaulting to 1000 [ 344.259354][T15174] erspan2: entered allmulticast mode [ 344.280402][T15174] bond7: (slave erspan2): making interface the new active one [ 344.293410][T15174] erspan2: entered promiscuous mode [ 344.338274][T15174] bond7: (slave erspan2): Enslaving as an active interface with an up link [ 344.545343][T15183] __nla_validate_parse: 91 callbacks suppressed [ 344.545361][T15183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2480'. [ 344.639706][T15186] netlink: 364 bytes leftover after parsing attributes in process `syz.4.2481'. [ 345.186584][T15202] netlink: 'syz.1.2487': attribute type 29 has an invalid length. [ 345.218416][T15202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2487'. [ 345.239402][T15202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2487'. [ 345.779998][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2493'. [ 345.867560][T15216] bond6: invalid ARP target 0.0.0.0 specified for addition [ 345.911223][T15216] bond6: option arp_ip_target: invalid value (0) [ 345.940663][T15216] bond6 (unregistering): Released all slaves [ 346.223472][T15245] xt_CT: You must specify a L4 protocol and not use inversions on it [ 346.229278][T15246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2497'. [ 346.280574][T15246] 8021q: adding VLAN 0 to HW filter on device bond8 [ 346.323659][T15253] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2499'. [ 346.339335][T15253] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2499'. [ 346.348628][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2499'. [ 346.410572][T15252] 8021q: adding VLAN 0 to HW filter on device bond9 [ 346.423661][T15252] bond8: (slave bond9): Enslaving as an active interface with an up link [ 346.433277][T15258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2497'. [ 346.459024][T15258] bond8 (unregistering): (slave bond9): Releasing backup interface [ 346.469190][T15258] bond8 (unregistering): Released all slaves [ 348.839521][T15235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 349.252190][T15280] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 349.285834][T15280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.330766][T15283] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:19241 [ 349.393827][T15287] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 349.688492][T15297] : entered promiscuous mode [ 349.706643][T15306] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 349.735239][T15306] syzkaller1: entered promiscuous mode [ 349.744956][T15306] syzkaller1: entered allmulticast mode [ 349.873166][ T6184] lo speed is unknown, defaulting to 1000 [ 349.891590][ T6184] sqz0: Port: 1 Link DOWN [ 349.989187][ T6184] lo speed is unknown, defaulting to 1000 [ 350.166920][T15326] __nla_validate_parse: 4 callbacks suppressed [ 350.166940][T15326] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2520'. [ 350.185503][T15326] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2520'. [ 350.208827][T15279] lo speed is unknown, defaulting to 1000 [ 350.445152][T15329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2521'. [ 351.061539][T15279] lo speed is unknown, defaulting to 1000 [ 351.596671][T15315] lo speed is unknown, defaulting to 1000 [ 351.678394][T15348] netlink: 'syz.1.2526': attribute type 13 has an invalid length. [ 351.843449][T15351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2526'. [ 352.035999][ T6417] [ 352.038365][ T6417] ============================================ [ 352.044504][ T6417] WARNING: possible recursive locking detected [ 352.050662][ T6417] syzkaller #0 Not tainted [ 352.055078][ T6417] -------------------------------------------- [ 352.061224][ T6417] kworker/u8:12/6417 is trying to acquire lock: [ 352.067457][ T6417] ffff88802b4a5558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 352.077307][ T6417] [ 352.077307][ T6417] but task is already holding lock: [ 352.084754][ T6417] ffff88806be81958 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 352.094601][ T6417] [ 352.094601][ T6417] other info that might help us debug this: [ 352.102654][ T6417] Possible unsafe locking scenario: [ 352.102654][ T6417] [ 352.110098][ T6417] CPU0 [ 352.113370][ T6417] ---- [ 352.116643][ T6417] lock(&qdisc_xmit_lock_key#3); [ 352.121678][ T6417] lock(&qdisc_xmit_lock_key#3); [ 352.126715][ T6417] [ 352.126715][ T6417] *** DEADLOCK *** [ 352.126715][ T6417] [ 352.134849][ T6417] May be due to missing lock nesting notation [ 352.134849][ T6417] [ 352.143159][ T6417] 10 locks held by kworker/u8:12/6417: [ 352.148622][ T6417] #0: ffff888020330940 ((wq_completion)bond7#3){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 352.159691][ T6417] #1: ffffc9000d3afc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 352.172575][ T6417] #2: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 352.182164][ T6417] #3: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 352.192119][ T6417] #4: ffff8880862db228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 352.204763][ T6417] #5: ffff88806be81958 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 352.215047][ T6417] #6: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 352.223934][ T6417] #7: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 352.233704][ T6417] #8: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 352.243639][ T6417] #9: ffff88807962d228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 352.256274][ T6417] [ 352.256274][ T6417] stack backtrace: [ 352.262172][ T6417] CPU: 0 UID: 0 PID: 6417 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 352.262206][ T6417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 352.262217][ T6417] Workqueue: bond7 bond_alb_monitor [ 352.262241][ T6417] Call Trace: [ 352.262248][ T6417] [ 352.262255][ T6417] dump_stack_lvl+0xe8/0x150 [ 352.262274][ T6417] print_deadlock_bug+0x279/0x290 [ 352.262296][ T6417] __lock_acquire+0x253f/0x2cf0 [ 352.262318][ T6417] ? unwind_next_frame+0xa6/0x2550 [ 352.262338][ T6417] ? unwind_next_frame+0x1bbf/0x2550 [ 352.262377][ T6417] ? sch_direct_xmit+0x15f/0x4c0 [ 352.262393][ T6417] lock_acquire+0x106/0x350 [ 352.262410][ T6417] ? sch_direct_xmit+0x15f/0x4c0 [ 352.262433][ T6417] _raw_spin_lock+0x2e/0x40 [ 352.262458][ T6417] ? sch_direct_xmit+0x15f/0x4c0 [ 352.262473][ T6417] sch_direct_xmit+0x15f/0x4c0 [ 352.262492][ T6417] ? __pfx_sch_direct_xmit+0x10/0x10 [ 352.262513][ T6417] __dev_queue_xmit+0x180f/0x3950 [ 352.262540][ T6417] ? __dev_queue_xmit+0x2b6/0x3950 [ 352.262566][ T6417] ? __pfx___dev_queue_xmit+0x10/0x10 [ 352.262588][ T6417] ? neigh_resolve_output+0x438/0x750 [ 352.262606][ T6417] ? eth_header+0x11b/0x200 [ 352.262627][ T6417] ? __asan_memcpy+0x40/0x70 [ 352.262656][ T6417] ? ip_finish_output2+0x3c2/0x1070 [ 352.262679][ T6417] ip_finish_output2+0xca9/0x1070 [ 352.262701][ T6417] ? ip_skb_dst_mtu+0x80b/0xa50 [ 352.262723][ T6417] ? ip_finish_output+0x40e/0x530 [ 352.262744][ T6417] ip_output+0x29f/0x450 [ 352.262765][ T6417] ? ip_output+0x5b/0x450 [ 352.262783][ T6417] iptunnel_xmit+0x621/0xd10 [ 352.262811][ T6417] ip_tunnel_xmit+0x193a/0x1f20 [ 352.262840][ T6417] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 352.262864][ T6417] ? __pfx_gre_build_header+0x10/0x10 [ 352.262884][ T6417] ? kfree+0x1c5/0x640 [ 352.262903][ T6417] ? pskb_expand_head+0x458/0x1390 [ 352.262927][ T6417] __gre_xmit+0x19e/0x240 [ 352.262945][ T6417] ? __pfx___gre_xmit+0x10/0x10 [ 352.262966][ T6417] erspan_xmit+0xa41/0x14d0 [ 352.262988][ T6417] ? ret_from_fork_asm+0x1a/0x30 [ 352.263008][ T6417] ? __pfx_erspan_xmit+0x10/0x10 [ 352.263031][ T6417] dev_hard_start_xmit+0x2cd/0x830 [ 352.263058][ T6417] sch_direct_xmit+0x251/0x4c0 [ 352.263078][ T6417] ? __pfx_sch_direct_xmit+0x10/0x10 [ 352.263094][ T6417] ? kthread+0x370/0x470 [ 352.263119][ T6417] __dev_queue_xmit+0x180f/0x3950 [ 352.263143][ T6417] ? __dev_queue_xmit+0x2b6/0x3950 [ 352.263170][ T6417] ? __pfx___dev_queue_xmit+0x10/0x10 [ 352.263199][ T6417] ? rcu_is_watching+0x15/0xb0 [ 352.263218][ T6417] ? trace_kmem_cache_alloc+0x29/0xe0 [ 352.263239][ T6417] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 352.263268][ T6417] ? alb_send_lp_vid+0x14e/0x550 [ 352.263292][ T6417] alb_send_lp_vid+0x348/0x550 [ 352.263315][ T6417] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 352.263343][ T6417] alb_send_learning_packets+0x12c/0x300 [ 352.263365][ T6417] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 352.263386][ T6417] ? bond_alb_monitor+0xf8/0x17e0 [ 352.263409][ T6417] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 352.263429][ T6417] bond_alb_monitor+0x3d5/0x17e0 [ 352.263452][ T6417] ? bond_alb_monitor+0xf8/0x17e0 [ 352.263472][ T6417] ? __pfx_bond_alb_monitor+0x10/0x10 [ 352.263494][ T6417] ? process_scheduled_works+0xa70/0x1860 [ 352.263511][ T6417] ? process_scheduled_works+0xa70/0x1860 [ 352.263529][ T6417] process_scheduled_works+0xb5d/0x1860 [ 352.263560][ T6417] ? __pfx_process_scheduled_works+0x10/0x10 [ 352.263580][ T6417] ? assign_work+0x3d5/0x5e0 [ 352.263598][ T6417] worker_thread+0xa53/0xfc0 [ 352.263628][ T6417] kthread+0x388/0x470 [ 352.263648][ T6417] ? __pfx_worker_thread+0x10/0x10 [ 352.263665][ T6417] ? __pfx_kthread+0x10/0x10 [ 352.263686][ T6417] ret_from_fork+0x514/0xb70 [ 352.263706][ T6417] ? __pfx_ret_from_fork+0x10/0x10 [ 352.263723][ T6417] ? __switch_to+0xc79/0x1410 [ 352.263748][ T6417] ? __pfx_kthread+0x10/0x10 [ 352.263769][ T6417] ret_from_fork_asm+0x1a/0x30 [ 352.263796][ T6417] [ 353.548031][T15348] tipc: Resetting bearer [ 353.689463][T15315] lo speed is unknown, defaulting to 1000 [ 353.696240][ T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.720571][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.791257][ T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.816169][ T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.834855][ T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.843655][ T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.882819][ T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.891543][ T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0