last executing test programs: 5.010405211s ago: executing program 4 (id=20504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DREG={0x8}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20044081) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r8 = accept(r0, &(0x7f00000004c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f00000005c0)=0x80) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3ff, 0x48}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xd8}, @NL80211_ATTR_BSS_HT_OPMODE={0x1c, 0x6d, 0xfffc}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0xd1) shutdown(r6, 0x20) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r10, r9}, 0x14) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r9, 0x2, {0x0, 0xf0}, 0xfd}, 0x18) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 3.31980041s ago: executing program 0 (id=20517): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000006000000020000002c0084802800018008000100666962001c0002800800024000000001080001400000000008000340000000110900010073797a3000000000090002"], 0x80}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r5, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff000003e4", @ANYRES32=r5, @ANYBLOB="83000400000000004800128008000100736974003c0002800500090029000000190010"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x34, 0x40, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x17, 0x0, 0x1, [@nested={0x4, 0x14}, @nested={0x4, 0x27}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bind$netlink(r1, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r9, 0x28, 0x6, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000003c0)=r11, 0x4) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904021d006a04000000e8fe55a1180015000600142603600e120900040000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797a3100000000080003400000012708000640ffffff000c0009800800014000000004140000001100010000000000000000000500000a"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 2.424645851s ago: executing program 0 (id=20520): socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)={0x11c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x88, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, @CTA_EXPECT_NAT={0x58, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x48800}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 2.339480757s ago: executing program 4 (id=20523): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x3, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x973d, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x305) (async) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000080)=0x10) (async) close(r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x700, 0xc, 0xff, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @empty, @empty}}}}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xe, 0x10}, {0x3, 0xd}, {0x2, 0xe}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x2000c084) (async) r7 = socket$unix(0x1, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000140)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 2.334314429s ago: executing program 0 (id=20524): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xce) socket$netlink(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x10, 0x803, 0x0) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r1, @ANYRES16=r0], 0xc4}}, 0x48845) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x3c, r4, 0x1, 0xfffffffe, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x3c}}, 0x20000000) 2.19514653s ago: executing program 0 (id=20528): r0 = socket(0x2, 0x80805, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) read(r1, &(0x7f0000000000)=""/131, 0x83) (async) unshare(0x62000000) r2 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r2, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000081c}, 0x200080c4) (async, rerun: 64) recvmsg$can_j1939(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/44, 0x2c}], 0x1}, 0x40010060) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000005380)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) sendmmsg$inet6(r6, &(0x7f0000002380)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000580)='3', 0x1}], 0x1}}], 0x1, 0x44191) (async) listen(r6, 0x100) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000540)={0x3b}, 0x8) accept4(r6, 0x0, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) 2.121363499s ago: executing program 4 (id=20530): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x1) r5 = socket$inet(0xa, 0x801, 0x0) listen(r5, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'wlan0\x00', @broadcast}) accept4(r5, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000100)={r2, 0xfffffffe}, &(0x7f0000000180)=0x8) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x94}]}, 0x2c}}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x8901, &(0x7f0000000040)) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f00000002c0)={r8, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r8, 0x81}, 0x8) sendmsg$inet(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000080)="90", 0x1}], 0x1}, 0x24004011) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r2, 0xfffffffa}, 0x8) 2.092282218s ago: executing program 2 (id=20531): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f00000001c0)) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.951847206s ago: executing program 4 (id=20533): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x2, 0x7, 0x5}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x36, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, 0x1, 0x0, 0x4], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c000000100003052dbd70200000000400000000", @ANYRES32=0x0, @ANYBLOB="0400040000000000340012800e00010069703665727370616e00000020000280040012000800040008000000080001009b310bb5eb6080237ef2523faca541c890f399f6b098a4c68549b6901f75051ec59096650197823ca7f6298e863af1507dfa033c467bdd08550bd4293b5a91f2764c0bb15b4887c900000004000000665787e735e235854196f0b850c7b9f666974f24c7aa5c90000000000000000093646a274353f844ad9a47ff", @ANYRES32=r5, @ANYBLOB="060003000b00000008000a00", @ANYRES32=r5, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x2004c012}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x5, [@enum={0x10, 0x9, 0x0, 0x6, 0x4, [{0x6, 0xb}, {0x5, 0x6}, {0x10, 0x5f}, {0xa, 0x5}, {0x1, 0xb5a}, {0xc, 0x140}, {0x0, 0x6}, {0x7, 0x1}, {0x9, 0x9}]}, @var={0xf, 0x0, 0x0, 0xe, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x3}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x8, 0x1}, {0x3}]}]}, {0x0, [0x0, 0x61, 0x5f]}}, &(0x7f0000000600)=""/123, 0xa9, 0x7b, 0x1, 0xfffffffe}, 0x28) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000800)) 1.734693673s ago: executing program 2 (id=20535): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x62) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @empty}]}}]}, 0x5c}}, 0x4040004) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800", @ANYRES16=r7], 0x44}}, 0x28081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$kcm(r9, &(0x7f00000003c0)={&(0x7f00000001c0)=@qipcrtr={0x2a, 0x5, 0x8000}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)="cefd4995a799d0e91696bfacc2dc0f0e6ef97d08b594e6cca107f511a2cb7bf0cb95ab8fb8", 0x25}], 0x1, &(0x7f0000001dc0)=[{0x48, 0x10c, 0x4, "2c61d6b49b950d6f2d47ecff94213b509fea57e1bc77149bce8212f29058aa235a5009f2fbec11d39a20919a4f4ee342705c2e875b79"}, {0xa8, 0x3ec, 0x204, "0745511de4735da955341f3b2d6a384ba37aca58293edfbed0fe37e219a546a900b03525694a0570b3032110e2301b8c499936c48c5c19280aaf15c970ee696574b38d45f519e9858d6631f1d3c1551758f6e9fd048567300d7d90aee5455e7785fdf6bcb34c91d98f0e0106f8a235682caf608093944a808cbcc45c5a59b29270634f8244a93f0071ba4336abe1cbba4a746a91af01a105"}, {0x1010, 0x3, 0xd, "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"}, {0x90, 0x3916c4244f393be6, 0x2, "2be68c4a8f8b7d5105bd3102a1e094986f49ddc681a48201a79d28b4300f9e4f33c6627c26131adc60b4700a68191c77629ded78ebde41bd713cc3206715da07e4cc027b93f35aa1d7af4ac3d6cb171c249d4b2dd64323adad9fe9f7a1807c222b3fbea568167ecdd771af6601a50a36a57fc0f442c4b31c23d262"}, {0x90, 0x117, 0xffff2e52, "5aa8f4bd154a7e3fc78f2b3411e9483d11484f6df5c50a108cc6a87157b535187c2a70a7ef24fa0ab7211d69cd42cac8c7b91e66150913a56a672a309485ab3701f2335a22371babafa392fd5614e38f1fc038531c74276c79b6c3d1cf2eab137817185785b1342e64dd66a7c35dc1f9a975a04541eaf8fd0855c41a"}, {0x48, 0x88, 0x2, "b65424e1cfea12f6809597f84c32765c0caa52448924ff71f4ccf7198c6ea68e1395d1443d9073a4fa5a80034e54c06cbe41555eb46ccd93"}, {0xd0, 0x103, 0x40, "6ea437e27031039ddbd9d9dd6f4e1cf4e5fddf3112f7c7888052c43418ef14d5777446e5e7f2c571814533ff1cc50399c1e7d589bf38c952e87168ab23fa70a3632352ef547bb9066877f8f9ea29e90cf76f252d57a62bcfb553d9f81a184a2c92832420932c74c1877a35747dd0f83475ccea7156c3b6443b66ac0da36b13473945c57ab5d3a6734896918bd0796a4441e4f458e648955702c7c60434fe4a6ed693e1eaa705d0bb3cc04c33db5b2fa60397b292958fbd6343"}, {0xd0, 0x1, 0x4, "a8d8de1fca3fb3c6f96cce30400e896c23537c47a4e9a65037f97163aaa525136b67f6e1aa4bd82580f0ed1339783046ab88354fd1732cc7baa9db39d17c9871f1a9fe6c663afb3731a506322645ebf63da0a234a47d707148264c159e9967ff86ce3aabf7981ea1f7fa7a6b3ae99251a79958fd2d8b9dbc969d0a3dee7803a447c583583068c2784c7826750497bdc52a9f9f3f90d27f941c963656bf4f1a1dd3cd409ecd4f32760538d9beb3431050fc914293756691b1dbf43dc43b"}], 0x1408}, 0x40001) r12 = socket(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) bind$bt_hci(r0, &(0x7f00000005c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) close(r0) 1.323879002s ago: executing program 1 (id=20537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) close(0x3) r2 = syz_init_net_socket$x25(0x9, 0x2, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000100)={r2, &(0x7f0000000000)='}\x00', 0x4000, &(0x7f0000000040)={@_ha_fsid={[0x5, 0x6]}, {0xd9, 0x8, 0x3, 0x5}}, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x3}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1000000003140c002abd7000fedbdf2518f8104e5ad66d61547d791dc35461dd59d5b3797d5db9a512ce470753edd305c72856122cc572d03f02c720bcffa188d7e1835b4e813e15db6175c8be"], 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000140)=@bpq0, 0x10) 1.323541699s ago: executing program 3 (id=20538): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x1ad72f7) (async) accept4(r0, 0x0, 0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r3], 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef911d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$alg(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)="150a2ff89d6c48c847fe51dbe49feab4116f7f24ff", 0x15}], 0x1, &(0x7f0000000300)=[@assoc={0x18, 0x117, 0x4, 0x1}], 0x18, 0x4000000}, 0x24004840) (async) recvmmsg$unix(r7, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000700)=""/218, 0xda}], 0x1}}], 0x1, 0x41, 0x0) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r7) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r8, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x0) (async) accept$netrom(r7, &(0x7f0000000180)={{}, [@null, @bcast, @null, @bcast, @remote, @rose]}, &(0x7f0000000080)=0x48) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000040)="71e67a15cd7db542377c512979d86bd1", 0x1e) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1.180302793s ago: executing program 1 (id=20539): syz_genetlink_get_family_id$nfc(&(0x7f0000000400), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) (async) mmap(&(0x7f0000c5f000/0x3000)=nil, 0x3000, 0x3000003, 0x100010, r1, 0xc0657000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 1.179934244s ago: executing program 2 (id=20540): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0x44, 0x4, 0x5d0, 0xffffffff, 0x0, 0x0, 0x3f8, 0xffffffff, 0xffffffff, 0x500, 0x500, 0x500, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x200, 0x328, 0x8502, {}, [@common=@inet=@hashlimit3={{0x158}, {'ip6tnl0\x00', {0x7, 0x9, 0x42, 0x5, 0x7, 0xfd6, 0x5, 0x5, 0x18, 0x68}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x500}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xffffffff, 0xff000000, 0xff000000], 0x0, 0x4e21, 0x0, 0x4e23, 0x0, 0x8000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) 1.109525862s ago: executing program 3 (id=20541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x160, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x130, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xe4, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7fffffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}}, 0x0) 1.000192894s ago: executing program 2 (id=20542): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x12}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 883.021734ms ago: executing program 1 (id=20543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0xfffffff5, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}}, 0x0) 717.32763ms ago: executing program 1 (id=20544): setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, {0xa, 0x4e22, 0x9, @mcast2, 0x1afa}, 0x0, {[0x3, 0x5, 0x8e3, 0x18, 0x9, 0x0, 0xfff, 0x7]}}, 0x5c) r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@remote, @netrom, @null, @rose, @default, @default, @null, @rose]}, &(0x7f0000000100)=0x48) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @null}, [@netrom, @default, @bcast, @bcast, @netrom, @default, @null, @netrom]}, &(0x7f0000000200)=0x48) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r0, 0x20}, {r1, 0x304}, {r2, 0x4504}], 0x3, &(0x7f00000002c0)={r3, r4+10000000}, &(0x7f0000000300)={[0x9]}, 0x8) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r7, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x19}}}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x6, 0x97a0, 0xfff2, 0x6, 0x49fd, 0x5, 0x8, 0x0, 0xb, 0x84c7, 0x976, 0x5, 0x2, 0x6, 0x401]}]}, 0x44}}, 0x4048090) getsockopt$inet6_opts(r5, 0x29, 0x1, &(0x7f0000000500)=""/173, &(0x7f00000005c0)=0xad) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f00000017c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001780)={&(0x7f0000000680)={0x10cc, r7, 0x890e1dee72b63e48, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x38c, 0x11d, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x70, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x3, 0x1000, 0x88, 0x0, 0x6, 0x0, 0x9b4f]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x1, 0x3}, {0x1, 0xa}, {0x0, 0x1}, {0x4, 0x9}, {0x1, 0x2}, {0x2, 0xa}, {0x4, 0x2}, {0x0, 0x2}, {0x1, 0x3}, {0x4, 0xa}, {0x2, 0x2}, {0x3, 0x9}, {0x2, 0xa}, {0x0, 0x1}, {0x3, 0x6}, {0x3}, {0x4, 0x2}, {0x2, 0x6}, {0x7, 0x7}, {}, {0x2, 0x9}, {0x0, 0x9}, {0x2, 0x7}, {0x3}, {0x6, 0xa}, {0x3, 0x3}, {0x4, 0x8}, {0x1, 0x7}, {0x5, 0x9}, {0x1}, {0x3, 0x1}, {0x6, 0x4}, {0x7, 0x7}, {0x3, 0x4}, {0x1}, {0x4, 0x2}, {0x0, 0xa}, {0x5}, {0x0, 0x3}, {0x1, 0x7}, {0x4, 0x5}, {0x7, 0x8}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0xa}, {0x1, 0xa}, {0x1, 0x5}, {0x5, 0x2}, {0x1}, {0x1, 0x8}, {0x3, 0x2}, {0x3, 0x4}, {}, {0x0, 0x4}, {0x3, 0x9}, {0x4, 0x3}, {0x3}, {0x0, 0x2}, {0x2, 0x5}, {0x5, 0x3}, {0x5, 0xa}, {0x1, 0x2}, {0x7, 0x9}, {0x1}, {0x0, 0x7}, {0x4, 0x6}, {0x1, 0x6}, {0x3, 0x9}, {0x4, 0x8}, {0x0, 0x5}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7a}]}, {0x2e4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x1, 0x4}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x5}, {0x4, 0x3}, {0x1, 0x1}, {0x4, 0x7}, {0x4, 0x8}, {0x4, 0x8}, {0x6, 0x6}, {0x0, 0x8}, {0x1, 0x1}, {0x2, 0x7}, {0x7, 0x7}, {0x7, 0x2}, {0x4, 0x8}, {0x0, 0x7}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x7}, {0x3, 0x6}, {0x7, 0x8}, {0x5, 0x2}, {0x4, 0x9}, {0x7, 0x3}, {0x7}, {0x5, 0x6}, {0x5, 0x9}, {0x3, 0x1}, {0x2}, {0x6, 0xa}, {0x3, 0x7}, {0x4}, {0x0, 0x3}, {0x5, 0x3}, {0x2}, {0x4, 0x6}, {0x3}, {0x3, 0x2}, {0x3}, {0x3, 0xa}, {0x2, 0x4}, {0x1, 0x9}, {0x7, 0x8}, {0x3, 0x2}, {0x2, 0x8}, {0x1, 0x4}, {0x6, 0x4}, {0x4, 0x5}, {0x1, 0x7}, {0x3, 0x4}, {0x3, 0x2}, {0x0, 0x1}, {0x1, 0x18}, {0x4, 0x6}, {0x3, 0xa}, {0x7, 0x4}, {0x0, 0x3}, {0x1, 0x6}, {0x2, 0x8}, {0x0, 0x8}, {}, {0x1, 0x1}, {0x3, 0x6}, {0x2, 0x6}, {0x7, 0x8}, {0x3, 0x5}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x37, 0x6, 0xc, 0x20, 0xc, 0xb, 0x60, 0x0, 0x2e, 0x16, 0x6, 0x0, 0xb, 0x1b, 0x3, 0x2, 0x24, 0x24, 0x5, 0x36, 0x4b, 0x0]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x5, 0xc, 0x24, 0x3c, 0x4, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa214, 0x1, 0x8, 0x99e, 0x0, 0xff7f, 0x93, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9858, 0x1, 0xfffe, 0xbb, 0x1000, 0x3, 0xffff, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x2, 0x1}, {0x2, 0x9}, {0x3, 0x2}, {0x7, 0x1}, {0x0, 0x8}, {0x2, 0x4}, {0x3, 0x1}, {}, {0x4, 0xa}, {0x2, 0x4}, {0x7, 0x5}, {0x3, 0x7}, {0x1, 0x6}, {0x0, 0x9}, {0x7, 0x4}, {0x6, 0x6}, {0x1}, {0x2, 0x3}, {0x3, 0x3}, {0x1, 0x4}, {0x1, 0x2}, {0x7}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x824, 0x1, 0x2, 0x2, 0x6, 0x200, 0x8, 0x8]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x7, 0x7}, {0x6, 0x1}, {0x3}, {0x1}, {0x6, 0x8}, {0x6, 0x6}, {0x1, 0x1}, {0x6}, {0x5, 0x5}, {0x3, 0x1}, {0x3, 0x4}, {0x4, 0xa}, {0x7, 0x3}, {0x6, 0x7}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x7}, {0x1, 0x2}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x7}, {}, {0x0, 0xa}, {0x5, 0x7}, {0x0, 0x1}, {0x1, 0x3}, {0x5, 0x2}, {0x1, 0x6}, {0x2, 0x6}, {0x6, 0x7}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x8}, {0x2, 0x8}, {0x0, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x6, 0x6}, {0x0, 0x7}, {0x3, 0x6}, {0x4, 0x9}, {0x2, 0xa}, {0x1, 0x9}, {0x2, 0x3}, {0x3, 0x1}, {0x4, 0x2}, {0x3, 0x7}, {0x5, 0x3}]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x4, 0x6}, {0x0, 0x6}, {0x1, 0xa}, {0x3, 0xa}, {0x6}, {0x0, 0x5}, {0x0, 0x4}, {0x2}, {0x5, 0x2}, {0x5, 0xa}, {0x2, 0xa}, {0x1, 0x4}, {0x5, 0x9}, {0x7, 0x1}, {0x5, 0x7}, {0x7, 0x9}, {0x2, 0x3}, {0x4, 0x2}]}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x10, 0x9, 0xb53, 0x100, 0x3, 0x80, 0x1]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x12, 0xb, 0xb, 0x12, 0x48, 0x36, 0x12, 0xb, 0x9, 0x6c, 0xc, 0x4, 0x6c, 0x6c, 0x6c, 0x5, 0x1, 0x12, 0x4f, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xf707, 0x3ff, 0x81, 0x2, 0xe, 0x0, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xd8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x6, 0x6}, {0x1, 0x6}, {0x5, 0x9}, {0x0, 0x9}, {0x4, 0xa}, {0x4, 0x9}, {0x0, 0x1}, {0x6, 0x8}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0x3}, {0x4, 0x9}, {0x3, 0x2}, {0x4, 0x1}, {0x5, 0x2}, {0x3, 0x1}, {0x0, 0x5}, {0x6, 0x9}, {0x6}, {0x4, 0x4}, {0x2, 0x4}, {0x6, 0xa}, {0x5, 0xa}, {0x2, 0xa}, {0x0, 0x9}, {0x7, 0x7}, {0x0, 0x8}, {0x7, 0x2}, {0x2, 0x8}, {0x3, 0xa}, {0x1, 0x5}, {}, {0x3, 0x2}, {0x5, 0x1}, {0x5, 0x6}, {0x0, 0xa}, {0x0, 0xa}, {0x1}, {0x2, 0x9}, {0x1, 0x4}, {0x4, 0x2}, {0x0, 0x9}, {0x6}, {0x0, 0x9}, {0x0, 0x1}, {0x0, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0xc468, 0x7, 0x80, 0x8, 0x9, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6, 0x1, 0x0, 0x1, 0x60, 0x5, 0x3, 0xc, 0x1, 0x5, 0x17, 0x27, 0x5, 0x30, 0x24, 0x3, 0x1, 0x9, 0x3, 0x9]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x6, 0x6}, {0x7, 0x4}, {0x3, 0x4}, {0x7, 0x2}, {0x6}, {0x4, 0x7}, {0x6}, {0x3, 0x6}, {0x0, 0x3}, {0x4, 0x8}, {0x7, 0x4}, {0x6, 0x6}, {0x0, 0x9}, {0x4, 0x6}, {0x6, 0x8}, {0x5, 0x3}, {0x3, 0x6}, {0x3, 0x5}, {0x6, 0xa}, {0x5, 0x2}, {0x0, 0x4}, {0x3, 0x4}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x3}, {0x1, 0x6}, {0x4, 0x3}, {0x0, 0x8}, {0x1, 0x5}, {0x7, 0x2}, {0x3, 0x3}, {0x3, 0x7}, {0x7, 0x2}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0xa}, {0x6, 0x3}, {0x6, 0x6}, {0x5, 0xa}, {0x4, 0x6}, {0x1, 0x9}, {0x6, 0x7}, {0x7, 0x4}, {0x1}, {0x0, 0x4}, {0x4, 0x7}, {0x0, 0x3}, {0x0, 0x5}, {0x7, 0x8}, {0x1, 0x8}, {0x0, 0x5}, {0x5, 0x8}, {0x1, 0x8}, {0x4}, {0x7, 0x2}, {0x7, 0x8}, {0x1, 0x7}, {0x0, 0x1}, {0x0, 0x6}, {0x2}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x1}, {0x5, 0x3}, {0x7, 0x5}, {0x0, 0xa}, {0x7, 0x9}, {0x6}, {0x2, 0x5}, {0x0, 0x9}, {0x7, 0x9}, {0x7}, {0x5, 0xa}, {0x4, 0xa}, {0x3, 0x4}, {0x3, 0x6}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6d51, 0x1, 0x5, 0x5, 0x7, 0xb, 0x1, 0x1000]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0x4, 0x3000, 0x7, 0xb, 0x3, 0xc9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x2f8, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x22}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x4, 0x5}, {0x1, 0x9}, {0x2, 0x8}, {0x3}, {0x3, 0x4}, {}, {0x0, 0x9}, {0x1, 0x2}, {0x6, 0xa}, {0x6, 0x5}, {0x6, 0x7}, {0x0, 0x7}, {0x6, 0x8}, {0x5, 0x3}, {0x0, 0x5}, {0x0, 0xa}, {0x1, 0x4}, {}, {0x2, 0x4}, {0x6, 0x1}, {0x6, 0x6}, {0x4, 0x3}, {0x3, 0x8}, {0x3, 0x9}, {0x0, 0x6}, {0x2, 0x9}, {0x1, 0x8}, {0x5}, {0x0, 0x7}, {0x2, 0x5}, {0x5, 0xa}, {0x6, 0x2}, {0x7, 0x9}, {0x1, 0x5}, {0x5, 0x1}, {0x5, 0x3}, {0x4, 0x4}, {0x0, 0x8}, {0x5}, {0x6, 0x4}, {0x6, 0x9}, {0x7, 0x5}, {0x0, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x16, 0x60, 0x18, 0x1b, 0x12, 0x0, 0x2, 0x3, 0x1, 0x69375d73845ed7b4, 0x1, 0x18, 0xb, 0x5]}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0xd3, 0x6, 0x2, 0xd3, 0x32a, 0x1, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x48, 0x1b, 0x6c, 0x12, 0x48, 0x0, 0x4, 0x48, 0x48, 0x6, 0xb, 0x48, 0x4, 0x24, 0x48, 0x3c, 0x24, 0x36, 0x48, 0x60, 0x12, 0x36, 0x16, 0x30, 0x16, 0x12, 0x12]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x4, 0x4, 0x5, 0x4, 0x5, 0x16, 0x3d, 0x6c, 0x1, 0x3, 0x60, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x880, 0xf79b, 0x8, 0x1, 0x3, 0x1, 0xa575, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb4}]}, {0x1e4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2a2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xee}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x198, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x582d, 0x0, 0xa3, 0x5, 0xb83, 0x81, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x1, 0x1, 0xf, 0x0, 0x35ce, 0xb26a]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8799, 0xfffc, 0x7ff, 0x2, 0x8000, 0x0, 0xe, 0x6642]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x6}, {0x1, 0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x5, 0x5}, {0x3, 0x7}, {0x1, 0x4}, {0x7, 0x6}, {0x6, 0x3}]}, @NL80211_TXRATE_HT={0x31, 0x2, [{}, {0x5}, {0x6, 0x1}, {0x3, 0x3}, {0x2, 0x1}, {0x4, 0x2}, {0x3, 0x8}, {0x0, 0x4}, {0x5, 0x7}, {0x2, 0x5}, {0x0, 0x3}, {0x0, 0x1}, {0x2, 0x3}, {0x6, 0x6}, {0x4, 0xa}, {0x5, 0x1}, {0x4, 0x4}, {0x2, 0x1}, {0x5, 0x5}, {0x3, 0x8}, {0x1, 0x5}, {0x3, 0x3}, {0x4, 0x6}, {0x4, 0x5}, {0x4, 0x7}, {0x0, 0x8}, {0x2, 0x1}, {0x0, 0x7}, {0x3, 0x6}, {0x7, 0x9}, {0x1}, {0x0, 0x1}, {0x0, 0x2}, {0x7, 0x5}, {0x2, 0x7}, {0x6}, {0x4, 0x3}, {0x6, 0x7}, {0x4, 0x8}, {}, {0x6, 0x2}, {0x5, 0x7}, {0x4, 0x8}, {0x0, 0x7}, {0x7, 0x4}]}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0x12, 0x12, 0xb, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x1}, {0x2, 0x5}, {0x1, 0x6}, {0x0, 0x8}, {0x2, 0x11}, {0x1, 0x8}, {0x0, 0x2}, {0x0, 0x1}, {0x7, 0xa}, {0x7, 0x8}, {0x2, 0x6}, {0x7, 0x6}, {0x6, 0x2}, {0x2, 0x7}, {0x0, 0x8}, {0x1, 0x4}, {0x0, 0x6}, {0x6, 0x7}, {0x3, 0x1}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x4}, {0x1, 0x7}, {0x2, 0x3}, {0x1}, {0x3, 0x5}, {0x0, 0x4}, {0x1, 0x5}, {0x1, 0x1}, {0x0, 0x2}, {0x1, 0x2}, {0x0, 0x2}, {0x1, 0x4}, {0x3}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x2}, {0x1, 0x6}, {0x3, 0x7}, {0x7}, {0x0, 0x3}, {0x4, 0xa}, {0x6, 0x5}, {0x2, 0x8}, {0x2, 0x4}, {0x3, 0x5}, {0x1, 0xa}, {0x2, 0x7}, {0x6, 0x1}, {0x4, 0x5}, {0x5}, {0x3, 0x5}, {0x3, 0x1}, {0x0, 0x4}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x3b, 0x5, 0x30, 0x12, 0x5, 0x5, 0x4, 0x16, 0x3, 0x1b, 0xb, 0x2, 0x5, 0xc, 0x18, 0x30, 0xb, 0x4, 0x3, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x4, 0xa}, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x4}, {0x3, 0x8}, {0x5, 0x3}, {0x2, 0x1}, {0x5, 0x2}, {0x7, 0x8}, {0x2}, {0x2, 0x8}, {0x6, 0x1}, {0x4, 0x9}, {0x1, 0x6}, {0x7, 0x5}, {0x7, 0x7}, {0x0, 0x6}, {0x0, 0x7}, {0x7, 0x1}, {0x7, 0x5}, {0x4, 0xa}, {0x7, 0xa}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x4}, {0x4, 0x5}, {0x1, 0xa}, {0x7, 0x3}, {0x1, 0x2}, {0x6, 0x9}, {0x5, 0x4}, {0x3, 0x7}, {0x6, 0x5}, {0x4, 0x8}, {0x4, 0x5}, {0x1}, {0x3, 0x1}, {0x2, 0xa}, {0x5}, {0x7, 0x6}, {0x0, 0x9}, {0x6}, {0x5, 0xa}, {0x1, 0x3}, {0x3}]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x9}, {0x2, 0xa}, {0x5, 0x3}, {0x1, 0x7}, {0x6}, {0x1}, {0x1, 0x1}, {0x6, 0x7}, {0x6, 0x2}, {0x5, 0x4}, {0x1, 0x1}, {0x1, 0x8}, {0x6, 0x3}, {0x3, 0x7}, {0x2, 0x2}, {0x1, 0x9}, {0x0, 0x8}, {0x6, 0xa}, {0x1, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x8, 0x1, 0x1, 0x101, 0x0, 0x0, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x1a0, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x80}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3d}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x60}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x92}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x4}, {0x84, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x48, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x85a, 0x7, 0x5, 0x7ff, 0x101, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0xeddca52a9eb074ea}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x40, 0x3, 0x8, 0x1, 0x101, 0x200]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5f}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x67}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xef}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcc}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x238, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x40}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x24, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x5, 0x2, 0x9, 0x36, 0x1b, 0x6, 0x24, 0x24, 0xb, 0x60, 0x30, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x41}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7f}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x44}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x92}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffff9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x38000000000000}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xeb}]}, {0xd4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1, 0x30, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x8, 0x5, 0x3ff, 0x8, 0xf45a, 0x7, 0x4]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x36, 0x2, 0x24, 0x24, 0x3, 0x4, 0x3, 0xc, 0x6c, 0x24, 0x18, 0x6c, 0x48, 0x1, 0x6, 0x4, 0x9, 0x36, 0x60, 0xb, 0x24, 0x18, 0x2e, 0x4, 0x2, 0x48, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x3}, {0x3, 0xa}, {0x2, 0x4}, {0x4, 0x7}, {0x4}, {0x3, 0x5}, {0x3, 0x4}, {0x3, 0x7}, {0x0, 0x8}, {0x1, 0x1}, {0x1, 0x3}, {0x3, 0xa}, {0x6, 0x5}, {0x1, 0xa}, {0x3, 0x9}, {}, {0x4, 0x9}, {0x2, 0x6}, {0x7, 0x3}, {0x4, 0x5}, {0x7, 0x4}, {0x3, 0xa}, {0x6, 0x7}, {0x0, 0x6}, {0x5, 0x9}, {0x0, 0x9}, {0x1, 0x5}, {0x4, 0xa}, {0x5, 0x7}, {0x7, 0x7}, {0x4, 0x7}, {0x7, 0x4}, {0x3, 0x3}, {0x6, 0xa}, {0x5, 0x7}, {0x5, 0x6}, {0x2}, {0x3, 0x5}, {0x1, 0x9}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x2}, {0x7, 0x3}, {0x0, 0x8}, {0x7, 0x5}, {0x0, 0x9}, {0x6, 0x4}, {0x0, 0x8}, {0x6, 0x2}, {0x5, 0x4}, {0x3}, {0x1, 0x8}, {}, {0x6, 0x8}, {0x4, 0x4}, {0x3, 0x6}, {0x2, 0x5}, {0x5, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x3, 0x3ac0, 0xfffa, 0x762, 0xbc6d, 0x100]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}]}]}, @NL80211_ATTR_TID_CONFIG={0x63c, 0x11d, 0x0, 0x1, [{0x320, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdf}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5ca}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x10}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x300, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x16, 0x6c, 0x48, 0x4, 0x18, 0xc]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x3, 0xa}, {0x1}, {0x1, 0x7}, {0x4, 0x1}, {0x1, 0xa}, {}, {0x2, 0x9}, {0x6, 0x6}, {0x1, 0x1}, {0x6, 0x2}, {0x7, 0x6}, {0x6}, {0x6, 0xa}, {0x4, 0x1}, {0x6, 0x5}, {0x0, 0x1}, {0x5}, {0x0, 0x6}, {0x3, 0x6}, {0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x5, 0x11, 0x18, 0x94c0be687b96181b, 0x16, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9, 0x8, 0x0, 0xc2, 0x4, 0x3, 0x7]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x2, 0x2}, {0x4, 0x1}, {0x7, 0x2}, {0x4, 0x7}, {0x4, 0x3}, {}, {0x3, 0x4}, {0x4, 0x8}, {0x1, 0x3}, {0x0, 0x5}, {0x0, 0x1}, {0x5, 0x5}, {0x3, 0x6}, {0x7, 0x2}, {0x6, 0x6}, {0x4, 0x8}, {0x3, 0x1}, {0x1, 0x3}, {0x1, 0x7}, {0x6, 0x4}, {0x0, 0xa}, {0x0, 0x5}, {0x1, 0x2}, {0x4, 0x4}, {0x0, 0x5}, {0x3, 0x1}, {0x7, 0x7}, {0x3, 0x4}, {0x0, 0x2}, {0x0, 0x4}, {0x6, 0x8}, {0x0, 0x3}, {0x4}, {0x6, 0x8}, {0x1, 0x4}, {0x1, 0x3}, {0x4, 0x1}, {0x2, 0x6}, {0x7, 0x7}, {0x0, 0x7}, {0x3, 0x3}, {0x2}, {0x7, 0x9}, {0x7, 0x1}, {0x6, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x2, 0x8}, {0x5, 0x8}, {0x2, 0x1}, {0x2, 0x7}, {0x5, 0x2}, {0x1, 0x1}, {0x6, 0x7}, {0x3, 0x7}, {0x0, 0x4}, {0x1, 0x7}, {0x0, 0x9}, {0x2, 0x9}, {0x5, 0x8}]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7fff, 0x1000, 0x1, 0x81, 0xaf56, 0x69, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0xdc1, 0x9f74, 0x9, 0x5, 0x1bcd, 0x4]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x855, 0x766, 0x4, 0x1, 0x40, 0x1, 0xaf6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x83, 0x5, 0x81, 0x5, 0x8000, 0x7fff, 0x6]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x6, 0x9, 0x9, 0x100, 0x1, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0x1}, {0x5, 0x4}, {0x6, 0x1}, {0x7, 0x9}, {0x2, 0x8}, {0x5, 0x1}, {0x4, 0x2}, {0x4, 0x1}, {0x0, 0x2}, {0x3, 0x4}, {0x5}, {0x1, 0x6}, {0x3, 0x1}, {0x1}, {0x1, 0x3}, {0x2, 0x8}, {0x3, 0x2}, {0x3, 0x2}, {0x6}, {0x2, 0x2}, {0x3, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x7fff, 0x21, 0x0, 0x9, 0x2, 0xffff, 0x7e98]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xa, 0x7, 0x5, 0xa, 0xa5a6, 0x0, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x4}, {0x0, 0x2}, {0x6, 0x6}, {0x0, 0x5}, {0x0, 0x3}, {0x4, 0x4}, {0x5, 0x9}, {0x1}, {0x5, 0x6}, {0x2, 0x9}, {0x6, 0x1}, {0x4, 0x8}, {}, {0x7, 0x1}, {0x3, 0x7}, {0x2, 0x5}, {0x6, 0x5}, {0x0, 0x4}, {0x4, 0x2}, {0x3, 0x8}, {}, {0x0, 0xa}, {0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x7, 0x1}, {0x5, 0x3}, {0x0, 0x9}, {0x1}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x30, 0x3, 0x1, 0x4, 0x6c, 0xb, 0x6, 0x1b, 0x36, 0x4, 0x6, 0x5, 0x6c, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x3, 0x60, 0x7a, 0x3]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x2, 0x2, 0x1b, 0xc, 0x32, 0x12, 0xc, 0x4, 0xb, 0x9, 0x6, 0x12, 0x1b, 0x24, 0x12, 0x30, 0x18, 0x24]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x3}, {0x0, 0x1}, {0x0, 0x7}, {0x2, 0x2}, {0x5, 0x4}, {0x7, 0x2}, {0x1, 0x6}, {0x0, 0xa}]}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x5, 0x60, 0x60, 0x16, 0x9, 0xb, 0x5, 0x0, 0x48, 0x6, 0x30, 0x2, 0x18, 0x12, 0xd, 0x3, 0x18, 0x9, 0x5, 0x18, 0x3, 0x24, 0x4, 0x30, 0xb, 0x6, 0x24, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x99, 0x2, 0x991f, 0x101, 0x9e, 0x8, 0x5, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x7fff, 0x8cc7, 0xf4cd, 0x7, 0x1, 0x1, 0x29ae]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x6, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x1, 0x9}, {0x2, 0x4}, {0x6, 0x4}, {0x6, 0x5}, {0x5, 0x7}, {0x0, 0x9}, {0x4, 0x5}, {0x7, 0x8}, {0x0, 0xa}, {0x0, 0x9}, {0x6}, {0x6, 0x4}, {0x4, 0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x1, 0x8}, {0x3, 0x4}, {0x1}, {0x6, 0x7}, {0x7, 0x5}, {0x4, 0x4}, {0x0, 0x1}, {0x2, 0x2}, {}, {0x3, 0x3}, {}, {0x5, 0x2}, {0x7, 0x8}, {0x3}, {0x5}, {0x0, 0x4}, {0x3, 0x5}, {0x7, 0x7}, {0x5, 0x3}, {0x0, 0x3}, {0x4, 0x9}, {0x1, 0x3}, {0x4, 0xa}, {0x0, 0xa}, {0x1, 0x8}, {0x3, 0xa}, {0x3, 0x4}, {0x4, 0x2}, {0x3, 0x8}, {0x0, 0x9}, {0x4}, {0x6, 0x3}, {0x3, 0xa}, {0x2, 0x9}, {0x1, 0x6}, {0x1, 0x7}, {0x1, 0x7}, {0x0, 0x5}, {0x2, 0x6}, {0x5}, {0x1, 0x4}, {0x4, 0x8}, {0x4}, {0x4}, {0x5, 0x8}, {0x6, 0x1}, {0x6, 0x9}, {0x5, 0x8}, {0x0, 0x3}, {0x2, 0x4}, {0x6, 0x7}, {0x1, 0x2}, {0x0, 0x4}, {0x4}, {0x6, 0x9}, {0x4, 0x9}, {0x4, 0x7}, {0x1, 0x1}, {0x4, 0x3}]}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x60, 0x6, 0x0, 0xb, 0x18, 0x6, 0x12, 0x4, 0x4, 0x30, 0x36, 0x24, 0x30, 0xc, 0x6c, 0x1, 0x11, 0x36, 0x6, 0x16, 0x4b, 0x0, 0x60, 0x60, 0x4, 0xc]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x4, 0xa}, {0x2, 0x1}, {0x0, 0x9}, {0x2}, {0x0, 0x9}, {0x0, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x5, 0x6}, {0x5, 0x3}, {0x4}, {0x3, 0x3}, {0x4, 0x6}, {0x2, 0x8}, {0x1, 0x7}, {0x3}, {0x0, 0x9}, {0x6, 0x3}, {0x2, 0x3}, {0x4, 0xa}, {0x4, 0x5}, {0x1, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x6, 0x3}, {0x1, 0x6}, {0x2, 0x7}, {0x0, 0xa}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x5}, {0x6, 0xa}, {0x0, 0x1}, {0x4, 0x2}, {0x1, 0x8}]}]}]}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000000}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x1cc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x36}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x30, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xb, 0x5, 0x3, 0xff, 0x7fff, 0xd, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x160, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0xf600, 0x80f0, 0x95, 0x2d7, 0x1, 0xcb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xac, 0x5, 0x2, 0x7, 0x6, 0x5, 0x6, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x993, 0x2, 0x100, 0x5, 0x5, 0x4, 0x9]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x7, 0x8, 0x81, 0x1ff, 0x48, 0xe, 0xe]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8000, 0x7ff, 0x1000, 0x2, 0x2, 0x5, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x2d, 0x48, 0x30, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6c, 0xbfd, 0xe, 0x7f, 0x3, 0x1, 0x26e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x0, 0xb5d6, 0x400, 0x101, 0x9, 0x401]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x5}, {0x0, 0x9}, {0x1, 0x6}, {0x0, 0x6}, {0x7, 0x3}, {}, {0x2}, {0x3}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6, 0x0, 0x5, 0x4, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x89, 0x0, 0x4, 0x4, 0x7fff, 0xb9c3]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x0, 0x36, 0x19, 0x24, 0x24, 0xb, 0x18, 0x9, 0x18, 0x9, 0xc, 0x48, 0x36, 0x1b, 0x2, 0x0, 0x16, 0x24, 0x36, 0x0, 0xc, 0x60, 0x657734863d618460, 0x12, 0x36, 0xb, 0x4]}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xba}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5c}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x44}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7c}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x37}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}]}]}, 0x10cc}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x24, r7, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1d}}}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20008000) sendmsg$AUDIT_GET(r5, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x10, 0x3e8, 0x20, 0x70bd28, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4800}, 0x24042801) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000001b80)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a40)={0xc4, 0x1, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x7}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xec4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x4000000}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0xd03d}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8906}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001bc0)) sendmsg$NL80211_CMD_LEAVE_IBSS(r5, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x28, r7, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x7e}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000001d00)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001d80)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x88040020}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5e9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0xe41e120de947e6a2) r10 = socket(0x15, 0xedff66b6fed186d6, 0x9c3) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f0000002140)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002100)={&(0x7f0000001f00)={0x1f4, r11, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffc01}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xca6f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @private0, 0xf}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff440}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf47e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40000840}, 0x40) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x24, r7, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x48}, @val={0x8, 0x3, r8}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x1) bind$bt_hci(r5, &(0x7f0000002280)={0x1f, 0x4, 0x2}, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000022c0)={0xffffffffffffffff}) recvmmsg$unix(r12, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002300)=""/96, 0x60}, {&(0x7f0000002380)=""/119, 0x77}, {&(0x7f0000002400)=""/29, 0x1d}], 0x3}}, {{&(0x7f0000002480)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000003540)=@abs, 0x6e, &(0x7f0000003700)=[{&(0x7f00000035c0)=""/12, 0xc}, {&(0x7f0000003600)=""/209, 0xd1}], 0x2, &(0x7f0000003740)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000003780), 0x6e, &(0x7f0000003880)=[{&(0x7f0000003800)=""/71, 0x47}], 0x1, &(0x7f00000038c0)=[@rights={{0x10}}], 0x10}}], 0x4, 0x40000001, &(0x7f0000003a00)) write(r13, &(0x7f0000003a40)="ec322422963576b1d5134e886644126b6a07fd4234d4e8e03a723645a510fb73f137c38f37586448e841e3f95a1f024e7cb523c44859d0dead2785e31fce5e10a57dc0d7b742355d9b2ab73c712bfd9eadb9efbf4c5522e8ca8bc567c2867d15b71314407724bfd27854cde172035cb2ddf1803d9bd50dcd4486aa586338b00f8a10771dc635db36e716b668eafdd1b07a35ae9cb345ec1f741a57ee1848340bc3748024d952eb690662707a7761fa6129a68ed0d90eab378d70440914a7e9b24abe6d487d5e0fc7cb36e022651592ceda5a4ca3adc2574b5cad5f3d2961e79ec7", 0xe1) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000003d40)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003d00)={&(0x7f0000003bc0)={0x134, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x10c, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62ad3d60}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f29f206}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62cc47c3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d0909d0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62bb6975}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x550387ee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3dd5e75a}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49ed944c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24e76d96}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f016f31}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xde149a0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f6d61c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79adc90}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4299ac00}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17534024}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c2c9d69}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) 703.290833ms ago: executing program 4 (id=20545): r0 = socket$inet(0x2, 0x80001, 0x84) socket(0x1d, 0x2, 0x6) (async) r1 = socket(0x1d, 0x2, 0x6) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0xef17, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x9], 0x0, 0x0, &(0x7f0000000200)=ANY=[]}, 0x78) (async) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0xef17, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x9], 0x0, 0x0, &(0x7f0000000200)=ANY=[]}, 0x78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYBLOB="b3f8c799f449d9ac6f83"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000040) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) accept$alg(r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 611.952521ms ago: executing program 3 (id=20546): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000040)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r1}) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000080)={@default, @null, @null, 0x63, 0xffffffffffff0001, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 548.340465ms ago: executing program 1 (id=20547): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0, 0x20000000008, 0xfffffffffffffffd}, {0x0, 0x1, 0xcc}, {0xf6}, 0x70bd2c, 0x0, 0xa, 0x1, 0x9}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x200480c5}, 0x1000000) 543.633525ms ago: executing program 2 (id=20548): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000240), &(0x7f0000000380)=r4}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030400000000fedbdf25000000008f77611a0bcc255a8c438e338baab602207b5711e26355b439e71e048d73ff98e90aa2c530541a3c9e3171c9773cf861bd1b082af086ce9bb29cd4ef503d927af9ef83c9b717dc67d952724f19dc61bc50e2c0af53bb94dbab7e2cc7f1297b3ebd73fc615e2dfcfc752807090304137ed3cbf2a7f1b8168617debbb301472be2372a6b7cdf", @ANYRES32=0x0, @ANYBLOB="05020000000000002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) 443.717877ms ago: executing program 4 (id=20549): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x40000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x81}}}}]}, 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r3, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048014}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x800, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x1, 0x788a1bb3d1feb3f6}, {0xfff1, 0xffff}, {0x6, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000001340), &(0x7f00000001c0)=0x8) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="15060000002000010000010000003000018014000400ff020000000000000000000000000001060005004e220000060001000a000000080098c647d492842ca43bc9cdbc2847aba6abf98f8322487a0778c2f9c4fe04ea234be093134bbd3d9030ad70c4a425c47740eea87c136bd9cac606c1480aced5e8cfcb4a22ee1d449ee182fc497789b63073377697c36b6f2327cdb4927200d5aa9d1ee553504dab55ba9c2888761a10d33e"], 0x44}, 0x5}, 0x0) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xfe}, @empty, 0x0, 0x0, 0x0, 0xb}}) 423.30884ms ago: executing program 0 (id=20550): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb01001800000000000000630000006300000003000000010000000500000f030000000100000007000000fbffffff0400000001000100500a0000020000d351eab4d6d18a3e0000010000060000000300000083ffffff00ffe980040000002e00000008000000a0ce9600000000000000030000000003000000050000000100000000002e00"], &(0x7f0000000180)=""/45, 0x7f, 0x2d, 0x0, 0x9}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000a00)=ANY=[@ANYBLOB="abb71b509e6cfd3d8eda72ff1e1c428670eb85afe0070d44bcd6c5d95b2f3586e877fab5310a1b5622fcafa37d8d1d6e1813c92b5c728ff1ab86619e16bedf9daf100b958e916e0b2102b02b8cbdb44c4418b0b1caf32f7cec740fdb51e5e7d93e2b6cbd4ae279951526939edf29f6dbe760d35068e7e1740b3dfc85381be6d7a8f5ae857d788f67dbcaf9a999a0850dedb9b648925c08aff4cdce812e0235aac9a87dcc38f461d1868a9e4bdea60cfdc60822f8dcfe926c8ffd334d322163935314f5fee0a36875826d59f3536a5b26191dc685aa6d"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702fc8014000000b70300000000009e18d3f0d8ebe63bb8bbff85008500000083000000bf090000000000005509af20d5418c90d623b7dd9355b32e4001000000000095000000000800000000000000000000b7020000000000008500000000000000e493d7fcd5986c9698a26f6cf6bd7eda5a0d8abeb74249c97a749b077167f39fe24429e8bcfa7fbfd0bff0a8c8c6c466e721e172c834d553c17012c3ccb3eb2f330f7a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1}, 0x90) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000014c0)={'syztnl1\x00', &(0x7f0000001f40)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0xd, 0x7, 0x0, @empty, @rand_addr=' \x01\x00', 0x80, 0x8000, 0x7, 0x6}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000014c0)={'syztnl1\x00', &(0x7f0000001f40)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0xd, 0x7, 0x0, @empty, @rand_addr=' \x01\x00', 0x80, 0x8000, 0x7, 0x6}}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x1, 0x1, 0x80000000}, 0x4, r7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x1, 0x1, 0x80000000}, 0x4, r7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r9, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r8, &(0x7f00000020c0)="7eeb99b6f78c67515ea270d01d766b91e3d3c86a1a51f4ad3fc9eff172cb06bf0721aa1f23fe71e238523b317a5067eccbf0a8412316257972", 0x39, 0x20000858, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async) sendto$packet(r8, &(0x7f00000020c0)="7eeb99b6f78c67515ea270d01d766b91e3d3c86a1a51f4ad3fc9eff172cb06bf0721aa1f23fe71e238523b317a5067eccbf0a8412316257972", 0x39, 0x20000858, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000002080)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="100029bd7000ffdbdf25190000005c0001801400020067656e6576653100000000000000000014000200697036746e6c3000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="14000200766574683075746f5f626f6e64000000140002006d6163766c616e30000000000014000180080003000000000000000000f303c17f683d71c8e1ec3677e26e1830500a13ca0f566005f84ff8dd7830f2060cbb36479f95e76edc8dcb27c162bf2e438cd40f8d54a564c0", @ANYRES32=r9, @ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x1805}, 0x40000) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) recvmmsg$unix(r10, 0x0, 0x0, 0x10000, 0x0) (async) recvmmsg$unix(r10, 0x0, 0x0, 0x10000, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001600)={{}, &(0x7f0000001580), &(0x7f00000015c0)='%-010d \x00'}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="018000"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="050000807a040000000000000000000000a700"/28], 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="018000"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="050000807a040000000000000000000000a700"/28], 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001700)=@generic={&(0x7f00000016c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000013c0)=@bpf_tracing={0x1a, 0x12, &(0x7f0000002100)=ANY=[@ANYBLOB="1800000003000000000000005d0000003f41f4ff040000008510000001000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000088c7a77e85f67e3bb3277efddf689e736bfa5cc74cb84854b21dd478c6b6ef039874e5b813a48f993b861420c7219fafc2a40ee659aa6eb4aba5637b1fa5b7ffe8b72d699639bcb30d864b72f53b5e466ebdece025d7c78642b2e0a5e66f9b7ff40cbab1df2fabaafdbebd7bd75e945ba98095ca9ba6a062cf45a8adcb1b186a7ad59ca32bc4e113ed6fa2e7c0373ae033be791a4a849ae0dcac105311", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000001480)='GPL\x00', 0x7a, 0x0, &(0x7f00000014c0), 0x41000, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x3, 0x1, 0x3, 0x5}, 0x10, 0x2a67e, r10, 0x6, &(0x7f0000001740), &(0x7f0000000480)=[{0x1, 0x3, 0xa, 0x9}, {0x2, 0x2, 0x8, 0x8}, {0x402, 0x4, 0x0, 0xc}, {0x1, 0x1, 0x8, 0x2}, {0x3, 0x3, 0x6, 0x9}, {0x1, 0x1, 0xc}], 0x10, 0x1}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) (async) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNATTACHFILTER(r12, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x3, 0x4}]}) (async) ioctl$TUNATTACHFILTER(r12, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x3, 0x4}]}) ioctl$TUNDETACHFILTER(r12, 0x401054d6, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r11, 0x4) 419.637957ms ago: executing program 3 (id=20551): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x27, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x2100, 0x8840}, 0xc000) 367.850468ms ago: executing program 1 (id=20552): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x60, 0xb1, 0xfffffd85, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 276.736708ms ago: executing program 3 (id=20553): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_newrule={0x48, 0x20, 0x400, 0x70bd26, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x0, 0x7, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'rose0\x00'}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x2}, @FRA_FLOW={0x8, 0xb, 0x781}, @FRA_DST={0x8, 0x1, @multicast1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040801}, 0x10) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086", 0x17}], 0x1}, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r2, 0x11, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20010000120013070000000000000000e000000100b11743b4463fe797c9e7e4b16d0000000000020000000000fc0000000000000000000000000000000000000000000000000000000000e4dd184973b93aa40000", @ANYRES16=r1, @ANYRESHEX=r2, @ANYBLOB="56cdf3e4fe669b75cf33a41e67eb21ab1536563e3c176b26396669300ddca7f5ef621eb704054854e6c1bdb7814b0879ea2ecc44175705a60378072d48e95b74bf1a683f42ffe380b2882b209a0865d542053f5c90eacfd6b46e28af71d59abb444f53f8f00d1b370ff4c219c832ba1bc7f1e9a3442540a664db92ad"], 0x120}}, 0xc000) 171.326545ms ago: executing program 2 (id=20554): socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000018000000bca3000000000000240300f840feffff720af0ff0000000071a4f1ff000000001f030000000000002e0a0200000000002600030008ff000e61148c00000000001d430000000000007a0a00fe00581c1f61144f0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58d"], 0x0}, 0x94) r1 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x94}}, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:* rr'], 0x9) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="300000001100010000000000000000000400000008"], 0x30}], 0x1}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000040)={&(0x7f0000000200)={0x78, r5, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x8, 0x3, @mcast2}]}, 0x78}, 0x1, 0xffffffff00000003}, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000ed000085f7ffff674237f462f4e5e40002000000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r7) sendmsg$IEEE802154_SCAN_REQ(r8, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40cc001}, 0x20040041) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r10, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xcd5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x4800) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r11, 0x890c, &(0x7f0000000140)={0x1, @bcast, @bpq0, 0x8, 'syz0\x00', @bcast, 0x7, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000380)="09ea5b4c0835a55a12f794165338a85e3584e2aacb39a03677b74c6dcf071c5eb750cd0cec955877ea7bdc5c4793edb872d72f2fa7a776def436c708f66091d5dd713f059e55aa876d6bf55d824abc425443fdda487ea057ae6cf5abba42bdbed5d7e214bb0ff6133088128e874ba6db545c3c75779b2b33fa3696fc4e726398f151e586e369ec77b7b0bba311931dfb48021a83aa935ba37477ce57a5cef49eba0073ecf9a084be09f3f5b567bef6c100ecbb0a92a43f0ce0a27e1c9ea00fa39095c169c7dbb3d7a3c6fd68699e5636adaefa17c1ef4803a6e05744ac4e26a740117664f21517482df0b8e401f2b5e62e1c63c1b78021d724e535e8e8bc", &(0x7f0000000480)=@tcp6, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@private2, @in6=@dev}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000000500)=0xe8) 31.637396ms ago: executing program 0 (id=20555): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={r1, 0x1, 0x9}, 0x8) r2 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000180)={0x0, @dev, @dev}, &(0x7f00000001c0)=0xc) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r4, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmmsg$inet(r2, &(0x7f0000005e80)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000300), 0x28}}], 0x1, 0x4044) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x7800, 0x700, 0x8, 0x1, {{0xb, 0x4, 0x2, 0x1, 0x2c, 0x66, 0x0, 0xfd, 0x6, 0x0, @private=0xa010101, @local, {[@noop, @timestamp_prespec={0x44, 0xc, 0xf1, 0x3, 0x2, [{@multicast2, 0x9}]}, @cipso={0x86, 0xb, 0x0, [{0x1, 0x5, "cd68ce"}]}]}}}}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x802, 0x1, 0x2000000}, 0x50) r6 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r6, 0x1, 0x3e, &(0x7f00000003c0), &(0x7f0000000140)=0x32) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r7, 0x89e2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x39}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112db000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x7, 0x0, r5, 0x1, '\x00', 0x0, r8, 0x2, 0x2, 0x3}, 0x50) ioctl$BTRFS_IOC_QGROUP_LIMIT(r9, 0x8030942b, &(0x7f0000000380)={0xfffffffffffffffa, {0x4, 0x73, 0x1, 0x8, 0x2}}) 0s ago: executing program 3 (id=20556): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r2, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x841}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000380)={r3, &(0x7f0000000000)='filter\x00', 0x103, &(0x7f0000000080)={@align=0x6, {0xa, 0x7, 0xbe9, 0x7}}, 0x6, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x6317}) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x120, 0x1, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0x78, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb413ffd6c912ee98}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x48000}, 0x6040841) kernel console output (not intermixed with test programs): ailed to send port change of device batadv2 via netlink (err -105) [ 1270.308111][T24118] team0: Failed to send options change via netlink (err -105) [ 1270.316481][T24118] team0: Port device batadv2 added [ 1270.335338][T24115] bridge31: entered promiscuous mode [ 1270.341590][T24115] bridge31: entered allmulticast mode [ 1270.803216][T24149] sctp: [Deprecated]: syz.2.19198 (pid 24149) Use of int in maxseg socket option. [ 1270.803216][T24149] Use struct sctp_assoc_value instead [ 1271.074482][T24165] netlink: 'syz.3.19201': attribute type 10 has an invalid length. [ 1271.101154][T24170] netlink: 'syz.0.19203': attribute type 10 has an invalid length. [ 1271.109762][T24165] veth1_macvtap: left promiscuous mode [ 1271.118551][T24165] team0: Device veth1_macvtap failed to register rx_handler [ 1271.837668][T24215] netlink: 766 bytes leftover after parsing attributes in process `syz.2.19219'. [ 1271.867682][T24217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19218'. [ 1271.892423][T24217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19218'. [ 1271.916298][T24220] netlink: 52 bytes leftover after parsing attributes in process `syz.2.19219'. [ 1272.001411][T24221] 1·: left allmulticast mode [ 1272.008824][T24221] bridge19: left promiscuous mode [ 1272.014895][T24221] bridge19: left allmulticast mode [ 1272.020896][T24221] bond25: left promiscuous mode [ 1272.025919][T24221] bridge20: left promiscuous mode [ 1272.032390][T24221] bridge21: left promiscuous mode [ 1272.037739][T24221] bridge21: left allmulticast mode [ 1272.045041][T24221] team0: left promiscuous mode [ 1272.050688][T24221] batadv2: left promiscuous mode [ 1272.055983][T24221] team0: left allmulticast mode [ 1272.061597][T24221] batadv2: left allmulticast mode [ 1272.618117][T24261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19234'. [ 1272.823827][T24274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19239'. [ 1273.881150][T24332] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1273.914597][T24332] bond0 (unregistering): Released all slaves [ 1274.224383][T24367] FAULT_INJECTION: forcing a failure. [ 1274.224383][T24367] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.262803][T24367] CPU: 1 UID: 0 PID: 24367 Comm: syz.1.19268 Not tainted syzkaller #0 PREEMPT(full) [ 1274.262834][T24367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1274.262848][T24367] Call Trace: [ 1274.262857][T24367] [ 1274.262867][T24367] dump_stack_lvl+0xe8/0x150 [ 1274.262910][T24367] should_fail_ex+0x412/0x560 [ 1274.262942][T24367] should_failslab+0xa8/0x100 [ 1274.262971][T24367] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1274.263003][T24367] ? __alloc_skb+0x186/0x7d0 [ 1274.263027][T24367] ? __alloc_skb+0x1d0/0x7d0 [ 1274.263049][T24367] ? __local_bh_enable_ip+0xd0/0x130 [ 1274.263081][T24367] __alloc_skb+0x1d0/0x7d0 [ 1274.263115][T24367] netlink_sendmsg+0x5d4/0xb40 [ 1274.263152][T24367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1274.263183][T24367] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1274.263210][T24367] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1274.263234][T24367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1274.263256][T24367] ____sys_sendmsg+0xa68/0xad0 [ 1274.263297][T24367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1274.263338][T24367] ? import_iovec+0x73/0xa0 [ 1274.263371][T24367] ___sys_sendmsg+0x2a5/0x360 [ 1274.263409][T24367] ? __pfx____sys_sendmsg+0x10/0x10 [ 1274.263477][T24367] ? __fget_files+0x2a/0x420 [ 1274.263506][T24367] ? __fget_files+0x3a0/0x420 [ 1274.263547][T24367] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1274.263582][T24367] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1274.263624][T24367] ? __pfx_ksys_write+0x10/0x10 [ 1274.263659][T24367] do_syscall_64+0x14d/0xf80 [ 1274.263690][T24367] ? trace_irq_disable+0x3b/0x150 [ 1274.263720][T24367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.263744][T24367] ? clear_bhb_loop+0x40/0x90 [ 1274.263769][T24367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.263797][T24367] RIP: 0033:0x7f9aaed9c629 [ 1274.263819][T24367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1274.263837][T24367] RSP: 002b:00007f9aafc69028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1274.263860][T24367] RAX: ffffffffffffffda RBX: 00007f9aaf016090 RCX: 00007f9aaed9c629 [ 1274.263876][T24367] RDX: 0000000000004000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1274.263896][T24367] RBP: 00007f9aafc69090 R08: 0000000000000000 R09: 0000000000000000 [ 1274.263910][T24367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1274.263922][T24367] R13: 00007f9aaf016128 R14: 00007f9aaf016090 R15: 00007fff695c2308 [ 1274.263957][T24367] [ 1274.748418][T24382] netlink: 'syz.2.19276': attribute type 1 has an invalid length. [ 1274.836136][T24382] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1274.884177][T24386] vlan1: entered promiscuous mode [ 1274.890027][T24386] bond29: entered promiscuous mode [ 1274.895479][T24386] vlan1: entered allmulticast mode [ 1274.901053][T24386] bond29: entered allmulticast mode [ 1300.034132][T24403] __nla_validate_parse: 7 callbacks suppressed [ 1300.034155][T24403] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19284'. [ 1300.054937][T24404] tipc: Enabling of bearer rejected, failed to enable media [ 1300.225537][T24418] FAULT_INJECTION: forcing a failure. [ 1300.225537][T24418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1300.264025][T24418] CPU: 0 UID: 0 PID: 24418 Comm: syz.3.19285 Not tainted syzkaller #0 PREEMPT(full) [ 1300.264055][T24418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1300.264070][T24418] Call Trace: [ 1300.264079][T24418] [ 1300.264089][T24418] dump_stack_lvl+0xe8/0x150 [ 1300.264126][T24418] should_fail_ex+0x412/0x560 [ 1300.264158][T24418] _copy_from_iter+0x1d3/0x1670 [ 1300.264190][T24418] ? rcu_is_watching+0x15/0xb0 [ 1300.264226][T24418] ? __pfx__copy_from_iter+0x10/0x10 [ 1300.264263][T24418] ? netlink_sendmsg+0x650/0xb40 [ 1300.264288][T24418] ? skb_put+0x11b/0x210 [ 1300.264320][T24418] netlink_sendmsg+0x6c0/0xb40 [ 1300.264357][T24418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1300.264387][T24418] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1300.264415][T24418] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1300.264440][T24418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1300.264465][T24418] ____sys_sendmsg+0xa68/0xad0 [ 1300.264506][T24418] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1300.264547][T24418] ? import_iovec+0x73/0xa0 [ 1300.264581][T24418] ___sys_sendmsg+0x2a5/0x360 [ 1300.264619][T24418] ? __pfx____sys_sendmsg+0x10/0x10 [ 1300.264689][T24418] ? __fget_files+0x2a/0x420 [ 1300.264719][T24418] ? __fget_files+0x3a0/0x420 [ 1300.264760][T24418] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1300.264795][T24418] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1300.264837][T24418] ? __pfx_ksys_write+0x10/0x10 [ 1300.264872][T24418] do_syscall_64+0x14d/0xf80 [ 1300.264904][T24418] ? trace_irq_disable+0x3b/0x150 [ 1300.264934][T24418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.264964][T24418] ? clear_bhb_loop+0x40/0x90 [ 1300.264991][T24418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.265012][T24418] RIP: 0033:0x7f4badd9c629 [ 1300.265039][T24418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1300.265057][T24418] RSP: 002b:00007f4baece7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1300.265081][T24418] RAX: ffffffffffffffda RBX: 00007f4bae016090 RCX: 00007f4badd9c629 [ 1300.265097][T24418] RDX: 0000000000004000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1300.265111][T24418] RBP: 00007f4baece7090 R08: 0000000000000000 R09: 0000000000000000 [ 1300.265125][T24418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1300.265138][T24418] R13: 00007f4bae016128 R14: 00007f4bae016090 R15: 00007ffce53a83b8 [ 1300.265173][T24418] [ 1300.293319][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1300.369431][T24420] netlink: 'syz.2.19287': attribute type 11 has an invalid length. [ 1300.397558][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1300.732354][T24432] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.19292'. [ 1300.788500][T24439] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19292'. [ 1301.008251][T24449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19297'. [ 1301.220438][T24463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19302'. [ 1301.270685][T24470] FAULT_INJECTION: forcing a failure. [ 1301.270685][T24470] name failslab, interval 1, probability 0, space 0, times 0 [ 1301.339819][T24470] CPU: 0 UID: 0 PID: 24470 Comm: syz.3.19303 Not tainted syzkaller #0 PREEMPT(full) [ 1301.339849][T24470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1301.339863][T24470] Call Trace: [ 1301.339872][T24470] [ 1301.339882][T24470] dump_stack_lvl+0xe8/0x150 [ 1301.339926][T24470] should_fail_ex+0x412/0x560 [ 1301.339958][T24470] should_failslab+0xa8/0x100 [ 1301.339986][T24470] __kmalloc_noprof+0xe8/0x760 [ 1301.340009][T24470] ? rcu_is_watching+0x15/0xb0 [ 1301.340037][T24470] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1301.340078][T24470] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1301.340120][T24470] genl_family_rcv_msg_doit+0xd9/0x330 [ 1301.340153][T24470] ? __asan_memcpy+0x40/0x70 [ 1301.340187][T24470] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1301.340228][T24470] ? apparmor_capable+0x137/0x1a0 [ 1301.340260][T24470] ? bpf_lsm_capable+0x9/0x20 [ 1301.340287][T24470] ? security_capable+0x7e/0x2c0 [ 1301.340318][T24470] genl_rcv_msg+0x61c/0x7a0 [ 1301.340355][T24470] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1301.340383][T24470] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 1301.340410][T24470] ? __pfx_nl802154_set_llsec_params+0x10/0x10 [ 1301.340440][T24470] ? __pfx_nl802154_post_doit+0x10/0x10 [ 1301.340469][T24470] ? __lock_acquire+0x6b5/0x2cf0 [ 1301.340510][T24470] netlink_rcv_skb+0x232/0x4b0 [ 1301.340536][T24470] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1301.340569][T24470] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1301.340613][T24470] ? down_read+0x272/0x2e0 [ 1301.340633][T24470] ? genl_rcv+0xd/0x40 [ 1301.340663][T24470] genl_rcv+0x28/0x40 [ 1301.340690][T24470] netlink_unicast+0x80f/0x9b0 [ 1301.340720][T24470] ? __pfx_netlink_unicast+0x10/0x10 [ 1301.340744][T24470] ? netlink_sendmsg+0x650/0xb40 [ 1301.340766][T24470] ? skb_put+0x11b/0x210 [ 1301.340796][T24470] netlink_sendmsg+0x813/0xb40 [ 1301.340831][T24470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1301.340860][T24470] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1301.340885][T24470] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1301.340917][T24470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1301.340940][T24470] ____sys_sendmsg+0xa68/0xad0 [ 1301.340982][T24470] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1301.341022][T24470] ? import_iovec+0x73/0xa0 [ 1301.341057][T24470] ___sys_sendmsg+0x2a5/0x360 [ 1301.341093][T24470] ? __pfx____sys_sendmsg+0x10/0x10 [ 1301.341165][T24470] ? __fget_files+0x2a/0x420 [ 1301.341195][T24470] ? __fget_files+0x3a0/0x420 [ 1301.341238][T24470] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1301.341274][T24470] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1301.341316][T24470] ? __pfx_ksys_write+0x10/0x10 [ 1301.341352][T24470] do_syscall_64+0x14d/0xf80 [ 1301.341383][T24470] ? trace_irq_disable+0x3b/0x150 [ 1301.341413][T24470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.341434][T24470] ? clear_bhb_loop+0x40/0x90 [ 1301.341461][T24470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.341482][T24470] RIP: 0033:0x7f4badd9c629 [ 1301.341503][T24470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1301.341523][T24470] RSP: 002b:00007f4baece7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1301.341546][T24470] RAX: ffffffffffffffda RBX: 00007f4bae016090 RCX: 00007f4badd9c629 [ 1301.341562][T24470] RDX: 0000000000004000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1301.341576][T24470] RBP: 00007f4baece7090 R08: 0000000000000000 R09: 0000000000000000 [ 1301.341589][T24470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1301.341601][T24470] R13: 00007f4bae016128 R14: 00007f4bae016090 R15: 00007ffce53a83b8 [ 1301.341637][T24470] [ 1302.016069][T24491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19312'. [ 1302.304656][T24509] tipc: Enabled bearer , priority 0 [ 1302.318260][T24509] syzkaller0: entered promiscuous mode [ 1302.331623][T24509] syzkaller0: entered allmulticast mode [ 1302.355193][ T29] audit: type=1107 audit(1772069820.188:13): pid=24512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 1302.435712][T24518] tipc: Resetting bearer [ 1302.486815][T24508] tipc: Resetting bearer [ 1302.569779][T24508] tipc: Disabling bearer [ 1302.693053][T24531] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19326'. [ 1302.720616][T24531] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19326'. [ 1302.780119][T24535] netlink: 104 bytes leftover after parsing attributes in process `syz.3.19328'. [ 1302.929903][T24541] netlink: 'syz.2.19331': attribute type 2 has an invalid length. [ 1303.250646][T24563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19337'. [ 1303.402828][T24568] bond29: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1303.425110][T24572] FAULT_INJECTION: forcing a failure. [ 1303.425110][T24572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1303.491164][T24572] CPU: 0 UID: 0 PID: 24572 Comm: syz.4.19338 Not tainted syzkaller #0 PREEMPT(full) [ 1303.491195][T24572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1303.491209][T24572] Call Trace: [ 1303.491218][T24572] [ 1303.491227][T24572] dump_stack_lvl+0xe8/0x150 [ 1303.491263][T24572] should_fail_ex+0x412/0x560 [ 1303.491294][T24572] _copy_to_user+0x31/0xb0 [ 1303.491327][T24572] simple_read_from_buffer+0xe1/0x170 [ 1303.491362][T24572] proc_fail_nth_read+0x1bb/0x230 [ 1303.491395][T24572] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1303.491428][T24572] ? rw_verify_area+0x2a6/0x4d0 [ 1303.491449][T24572] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1303.491480][T24572] vfs_read+0x20c/0xa70 [ 1303.491499][T24572] ? fdget_pos+0x246/0x320 [ 1303.491534][T24572] ? __pfx___mutex_lock+0x10/0x10 [ 1303.491556][T24572] ? __pfx_vfs_read+0x10/0x10 [ 1303.491580][T24572] ? __fget_files+0x2a/0x420 [ 1303.491622][T24572] ? __fget_files+0x3a0/0x420 [ 1303.491650][T24572] ? __fget_files+0x2a/0x420 [ 1303.491695][T24572] ksys_read+0x150/0x270 [ 1303.491720][T24572] ? __pfx_ksys_read+0x10/0x10 [ 1303.491771][T24572] do_syscall_64+0x14d/0xf80 [ 1303.491801][T24572] ? trace_irq_disable+0x3b/0x150 [ 1303.491837][T24572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.491871][T24572] ? clear_bhb_loop+0x40/0x90 [ 1303.491903][T24572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.491929][T24572] RIP: 0033:0x7f6cb535cece [ 1303.491955][T24572] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1303.491980][T24572] RSP: 002b:00007f6cb35d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1303.492009][T24572] RAX: ffffffffffffffda RBX: 00007f6cb35d56c0 RCX: 00007f6cb535cece [ 1303.492057][T24572] RDX: 000000000000000f RSI: 00007f6cb35d50a0 RDI: 0000000000000003 [ 1303.492070][T24572] RBP: 00007f6cb35d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1303.492085][T24572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1303.492098][T24572] R13: 00007f6cb5616128 R14: 00007f6cb5616090 R15: 00007ffe941d7ee8 [ 1303.492152][T24572] [ 1303.814692][T24588] openvswitch: netlink: Invalid VLAN frame [ 1303.987913][T24603] netlink: 'syz.1.19350': attribute type 1 has an invalid length. [ 1304.445474][T24635] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1304.886101][T24662] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1304.907396][T24662] batadv3: entered promiscuous mode [ 1304.917226][T24662] batadv3: entered allmulticast mode [ 1304.924791][T24662] team0: Port device batadv3 added [ 1304.993299][T24665] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1305.023066][T24665] syzkaller1: linktype set to 823 [ 1305.056311][T24670] __nla_validate_parse: 5 callbacks suppressed [ 1305.056332][T24670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19372'. [ 1305.087391][T24670] : entered promiscuous mode [ 1305.104935][T24673] tipc: Enabled bearer , priority 0 [ 1305.128408][T24673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19371'. [ 1305.140902][T24673] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 1305.180722][T24673] tipc: Resetting bearer [ 1305.352450][T24685] syzkaller1: entered promiscuous mode [ 1305.360763][T24685] syzkaller1: entered allmulticast mode [ 1305.390593][T23871] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 1305.400066][T23871] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 1305.454291][T24689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19377'. [ 1305.490839][T24689] bond0 (unregistering): Released all slaves [ 1305.514572][T24691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19378'. [ 1305.524964][T24691] netlink: 80 bytes leftover after parsing attributes in process `syz.0.19378'. [ 1305.539891][T24692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19377'. [ 1305.664595][T24697] netlink: 48 bytes leftover after parsing attributes in process `syz.2.19380'. [ 1305.758464][T24701] tipc: Resetting bearer [ 1305.774220][T24701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19380'. [ 1305.793849][T24701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19380'. [ 1305.803676][T24699] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19379'. [ 1305.831523][T24701] erspan0: entered promiscuous mode [ 1305.843604][T24701] erspan0: left promiscuous mode [ 1305.949305][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5420 ms [ 1305.957412][ C0] lec:lec_tx_timeout: lec0 [ 1306.023218][T24695] tipc: Resetting bearer [ 1306.089397][T24708] netlink: 'syz.0.19382': attribute type 1 has an invalid length. [ 1306.140075][T24708] netlink: 'syz.0.19382': attribute type 1 has an invalid length. [ 1306.362648][T24740] FAULT_INJECTION: forcing a failure. [ 1306.362648][T24740] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.403154][T24740] CPU: 0 UID: 0 PID: 24740 Comm: syz.1.19391 Not tainted syzkaller #0 PREEMPT(full) [ 1306.403186][T24740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1306.403199][T24740] Call Trace: [ 1306.403208][T24740] [ 1306.403218][T24740] dump_stack_lvl+0xe8/0x150 [ 1306.403254][T24740] should_fail_ex+0x412/0x560 [ 1306.403286][T24740] should_failslab+0xa8/0x100 [ 1306.403315][T24740] __kmalloc_noprof+0xe8/0x760 [ 1306.403337][T24740] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1306.403373][T24740] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1306.403412][T24740] ? tomoyo_path_number_perm+0x219/0x630 [ 1306.403435][T24740] tomoyo_path_number_perm+0x246/0x630 [ 1306.403462][T24740] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1306.403488][T24740] ? __lock_acquire+0x6b5/0x2cf0 [ 1306.403529][T24740] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1306.403584][T24740] ? __fget_files+0x2a/0x420 [ 1306.403619][T24740] ? __fget_files+0x2a/0x420 [ 1306.403646][T24740] ? __fget_files+0x3a0/0x420 [ 1306.403674][T24740] ? __fget_files+0x2a/0x420 [ 1306.403708][T24740] security_file_ioctl+0xc3/0x2a0 [ 1306.403744][T24740] __se_sys_ioctl+0x47/0x170 [ 1306.403771][T24740] do_syscall_64+0x14d/0xf80 [ 1306.403801][T24740] ? trace_irq_disable+0x3b/0x150 [ 1306.403842][T24740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.403864][T24740] ? clear_bhb_loop+0x40/0x90 [ 1306.403890][T24740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.403912][T24740] RIP: 0033:0x7f9aaed9c629 [ 1306.403933][T24740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1306.403951][T24740] RSP: 002b:00007f9aafc8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1306.403974][T24740] RAX: ffffffffffffffda RBX: 00007f9aaf015fa0 RCX: 00007f9aaed9c629 [ 1306.403990][T24740] RDX: 0000200000000040 RSI: 00000000800448f0 RDI: 0000000000000004 [ 1306.404004][T24740] RBP: 00007f9aafc8a090 R08: 0000000000000000 R09: 0000000000000000 [ 1306.404017][T24740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1306.404030][T24740] R13: 00007f9aaf016038 R14: 00007f9aaf015fa0 R15: 00007fff695c2308 [ 1306.404067][T24740] [ 1306.404141][T24740] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1306.568751][T24747] netlink: 'syz.4.19393': attribute type 1 has an invalid length. [ 1306.584545][T24740] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 1306.620718][T24743] tipc: Resetting bearer [ 1307.269380][T23847] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1307.278067][T23847] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1307.310105][T23847] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1307.338795][T23847] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1307.360813][T23847] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 2816 - 0 [ 1307.368818][T23847] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1307.394665][T23847] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1307.409237][T23847] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1307.468358][T24779] FAULT_INJECTION: forcing a failure. [ 1307.468358][T24779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1307.499188][T24761] syzkaller0 speed is unknown, defaulting to 1000 [ 1307.513108][T24779] CPU: 0 UID: 0 PID: 24779 Comm: syz.0.19403 Not tainted syzkaller #0 PREEMPT(full) [ 1307.513137][T24779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1307.513149][T24779] Call Trace: [ 1307.513159][T24779] [ 1307.513169][T24779] dump_stack_lvl+0xe8/0x150 [ 1307.513205][T24779] should_fail_ex+0x412/0x560 [ 1307.513242][T24779] _copy_from_user+0x2d/0xb0 [ 1307.513274][T24779] bpf_test_init+0xd8/0x150 [ 1307.513305][T24779] bpf_prog_test_run_skb+0x36f/0x1c90 [ 1307.513343][T24779] ? __fget_files+0x2a/0x420 [ 1307.513373][T24779] ? __fget_files+0x3a0/0x420 [ 1307.513401][T24779] ? __fget_files+0x2a/0x420 [ 1307.513435][T24779] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1307.513460][T24779] bpf_prog_test_run+0x2c7/0x340 [ 1307.513486][T24779] __sys_bpf+0x643/0x950 [ 1307.513521][T24779] ? __pfx___sys_bpf+0x10/0x10 [ 1307.513570][T24779] ? ksys_write+0x242/0x270 [ 1307.513606][T24779] ? __pfx_ksys_write+0x10/0x10 [ 1307.513637][T24779] __x64_sys_bpf+0x7c/0x90 [ 1307.513667][T24779] do_syscall_64+0x14d/0xf80 [ 1307.513699][T24779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.513721][T24779] ? clear_bhb_loop+0x40/0x90 [ 1307.513748][T24779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.513769][T24779] RIP: 0033:0x7f1c03f9c629 [ 1307.513790][T24779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1307.513809][T24779] RSP: 002b:00007f1c04f37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1307.513832][T24779] RAX: ffffffffffffffda RBX: 00007f1c04215fa0 RCX: 00007f1c03f9c629 [ 1307.513848][T24779] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1307.513863][T24779] RBP: 00007f1c04f37090 R08: 0000000000000000 R09: 0000000000000000 [ 1307.513877][T24779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1307.513890][T24779] R13: 00007f1c04216038 R14: 00007f1c04215fa0 R15: 00007fff00182fa8 [ 1307.513926][T24779] [ 1307.777620][T24782] syzkaller1: entered promiscuous mode [ 1307.792593][T24782] syzkaller1: entered allmulticast mode [ 1308.170721][T23838] tipc: Resetting bearer [ 1308.397158][T24817] netlink: 'syz.4.19414': attribute type 10 has an invalid length. [ 1308.595699][T24826] FAULT_INJECTION: forcing a failure. [ 1308.595699][T24826] name failslab, interval 1, probability 0, space 0, times 0 [ 1308.620699][T24826] CPU: 1 UID: 0 PID: 24826 Comm: syz.0.19417 Not tainted syzkaller #0 PREEMPT(full) [ 1308.620730][T24826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1308.620751][T24826] Call Trace: [ 1308.620760][T24826] [ 1308.620770][T24826] dump_stack_lvl+0xe8/0x150 [ 1308.620806][T24826] should_fail_ex+0x412/0x560 [ 1308.620836][T24826] should_failslab+0xa8/0x100 [ 1308.620864][T24826] __kmalloc_noprof+0xe8/0x760 [ 1308.620886][T24826] ? sk_prot_alloc+0xe7/0x210 [ 1308.620921][T24826] sk_prot_alloc+0xe7/0x210 [ 1308.620948][T24826] ? sk_alloc+0x27/0x390 [ 1308.620978][T24826] sk_alloc+0x3a/0x390 [ 1308.621010][T24826] bpf_prog_test_run_skb+0x3ed/0x1c90 [ 1308.621049][T24826] ? __fget_files+0x2a/0x420 [ 1308.621078][T24826] ? __fget_files+0x3a0/0x420 [ 1308.621105][T24826] ? __fget_files+0x2a/0x420 [ 1308.621139][T24826] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1308.621163][T24826] bpf_prog_test_run+0x2c7/0x340 [ 1308.621186][T24826] __sys_bpf+0x643/0x950 [ 1308.621219][T24826] ? __pfx___sys_bpf+0x10/0x10 [ 1308.621268][T24826] ? ksys_write+0x242/0x270 [ 1308.621292][T24826] ? __pfx_ksys_write+0x10/0x10 [ 1308.621320][T24826] __x64_sys_bpf+0x7c/0x90 [ 1308.621349][T24826] do_syscall_64+0x14d/0xf80 [ 1308.621380][T24826] ? trace_irq_disable+0x3b/0x150 [ 1308.621408][T24826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.621430][T24826] ? clear_bhb_loop+0x40/0x90 [ 1308.621456][T24826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.621477][T24826] RIP: 0033:0x7f1c03f9c629 [ 1308.621498][T24826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1308.621515][T24826] RSP: 002b:00007f1c04f37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1308.621538][T24826] RAX: ffffffffffffffda RBX: 00007f1c04215fa0 RCX: 00007f1c03f9c629 [ 1308.621553][T24826] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1308.621566][T24826] RBP: 00007f1c04f37090 R08: 0000000000000000 R09: 0000000000000000 [ 1308.621579][T24826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1308.621591][T24826] R13: 00007f1c04216038 R14: 00007f1c04215fa0 R15: 00007fff00182fa8 [ 1308.621627][T24826] [ 1309.025397][T23872] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1309.034212][T23872] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1309.042848][T23872] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1309.051315][T23872] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1309.168777][T24846] tipc: Enabled bearer , priority 0 [ 1309.203281][T24839] syzkaller0: entered promiscuous mode [ 1309.228003][T24839] syzkaller0: entered allmulticast mode [ 1309.319621][T24839] tipc: Resetting bearer [ 1309.377658][T24838] tipc: Resetting bearer [ 1309.500607][T24838] tipc: Disabling bearer [ 1309.818514][T24860] netlink: 'syz.3.19429': attribute type 10 has an invalid length. [ 1309.976562][T24868] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1310.047481][T24874] bridge0: entered allmulticast mode [ 1310.266515][T24890] FAULT_INJECTION: forcing a failure. [ 1310.266515][T24890] name failslab, interval 1, probability 0, space 0, times 0 [ 1310.309950][T24890] CPU: 1 UID: 0 PID: 24890 Comm: syz.0.19438 Not tainted syzkaller #0 PREEMPT(full) [ 1310.309979][T24890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1310.309993][T24890] Call Trace: [ 1310.310002][T24890] [ 1310.310012][T24890] dump_stack_lvl+0xe8/0x150 [ 1310.310048][T24890] should_fail_ex+0x412/0x560 [ 1310.310080][T24890] should_failslab+0xa8/0x100 [ 1310.310106][T24890] ? vm_area_dup+0x2b/0x680 [ 1310.310129][T24890] kmem_cache_alloc_noprof+0x87/0x650 [ 1310.310161][T24890] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1310.310185][T24890] ? arch_stack_walk+0xfb/0x150 [ 1310.310223][T24890] vm_area_dup+0x2b/0x680 [ 1310.310250][T24890] __split_vma+0x1dc/0xa40 [ 1310.310290][T24890] ? __pfx___split_vma+0x10/0x10 [ 1310.310330][T24890] ? mas_find+0xb0e/0xd30 [ 1310.310365][T24890] vms_gather_munmap_vmas+0x4fa/0x1370 [ 1310.310412][T24890] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1310.310452][T24890] ? mas_find+0xa7d/0xd30 [ 1310.310488][T24890] mmap_region+0x85b/0x2240 [ 1310.310525][T24890] ? tomoyo_check_open_permission+0x1d3/0x470 [ 1310.310556][T24890] ? __pfx_mmap_region+0x10/0x10 [ 1310.310592][T24890] ? __lock_acquire+0x6b5/0x2cf0 [ 1310.310622][T24890] ? __lock_acquire+0x6b5/0x2cf0 [ 1310.310728][T24890] ? arch_get_unmapped_area_topdown+0x264/0xb60 [ 1310.310784][T24890] ? mm_get_unmapped_area+0xd3/0x100 [ 1310.310827][T24890] ? apparmor_capable+0x137/0x1a0 [ 1310.310859][T24890] ? bpf_lsm_capable+0x9/0x20 [ 1310.310886][T24890] ? security_capable+0x7e/0x2c0 [ 1310.310909][T24890] ? shmem_mapping+0xd/0x50 [ 1310.310934][T24890] ? memfd_check_seals_mmap+0x165/0x200 [ 1310.310969][T24890] do_mmap+0xc39/0x10c0 [ 1310.311012][T24890] ? __pfx_do_mmap+0x10/0x10 [ 1310.311038][T24890] ? down_write_killable+0x180/0x240 [ 1310.311062][T24890] ? ksys_write+0x1e6/0x270 [ 1310.311084][T24890] ? __pfx_down_write_killable+0x10/0x10 [ 1310.311107][T24890] ? apparmor_mmap_file+0x23e/0x2b0 [ 1310.311145][T24890] vm_mmap_pgoff+0x2c9/0x4f0 [ 1310.311183][T24890] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1310.311214][T24890] ? __fget_files+0x2a/0x420 [ 1310.311249][T24890] ? __fget_files+0x3a0/0x420 [ 1310.311277][T24890] ? __fget_files+0x2a/0x420 [ 1310.311311][T24890] ksys_mmap_pgoff+0x51e/0x760 [ 1310.311349][T24890] do_syscall_64+0x14d/0xf80 [ 1310.311379][T24890] ? trace_irq_disable+0x3b/0x150 [ 1310.311409][T24890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.311433][T24890] ? clear_bhb_loop+0x40/0x90 [ 1310.311459][T24890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.311481][T24890] RIP: 0033:0x7f1c03f9c629 [ 1310.311502][T24890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1310.311520][T24890] RSP: 002b:00007f1c04ef5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1310.311543][T24890] RAX: ffffffffffffffda RBX: 00007f1c04216180 RCX: 00007f1c03f9c629 [ 1310.311560][T24890] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 1310.311574][T24890] RBP: 00007f1c04ef5090 R08: 0000000000000003 R09: 0000000000000000 [ 1310.311588][T24890] R10: 0000000000022052 R11: 0000000000000246 R12: 0000000000000001 [ 1310.311601][T24890] R13: 00007f1c04216218 R14: 00007f1c04216180 R15: 00007fff00182fa8 [ 1310.311647][T24890] [ 1310.317720][T24892] tipc: Resetting bearer [ 1311.043246][T24910] netlink: 'syz.3.19444': attribute type 10 has an invalid length. [ 1311.155318][T24891] tipc: Resetting bearer [ 1311.430614][T24925] __nla_validate_parse: 23 callbacks suppressed [ 1311.430635][T24925] netlink: 152 bytes leftover after parsing attributes in process `syz.0.19450'. [ 1311.462387][T24928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19449'. [ 1311.641857][T24940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19454'. [ 1311.665759][T23871] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1311.687593][T24945] netlink: 'syz.4.19456': attribute type 10 has an invalid length. [ 1311.695984][T24940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19454'. [ 1311.708939][T23871] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1311.806406][T23843] tipc: Resetting bearer [ 1311.839252][T23871] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1311.848580][T23871] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1311.874765][T24947] wireguard: wg1: Could not create IPv4 socket [ 1312.074199][T24966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19463'. [ 1312.094429][T24966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19463'. [ 1312.336001][T24982] netlink: 'syz.2.19470': attribute type 10 has an invalid length. [ 1312.472211][T24991] netlink: 'syz.3.19473': attribute type 10 has an invalid length. [ 1312.814623][T25008] netlink: 'syz.0.19478': attribute type 21 has an invalid length. [ 1312.857559][T25008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1312.864954][T25008] IPv6: NLM_F_CREATE should be set when creating new route [ 1312.872334][T25008] IPv6: NLM_F_CREATE should be set when creating new route [ 1312.879652][T25008] IPv6: NLM_F_CREATE should be set when creating new route [ 1313.088775][T25024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19481'. [ 1313.153624][T25028] netlink: 'syz.1.19482': attribute type 10 has an invalid length. [ 1313.167648][T25028] bond0: (slave wlan1): Opening slave failed [ 1313.471468][T25045] FAULT_INJECTION: forcing a failure. [ 1313.471468][T25045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1313.485974][T25043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19489'. [ 1313.511919][T25045] CPU: 1 UID: 0 PID: 25045 Comm: syz.1.19488 Not tainted syzkaller #0 PREEMPT(full) [ 1313.511951][T25045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1313.511965][T25045] Call Trace: [ 1313.511974][T25045] [ 1313.511984][T25045] dump_stack_lvl+0xe8/0x150 [ 1313.512020][T25045] should_fail_ex+0x412/0x560 [ 1313.512052][T25045] _copy_from_user+0x2d/0xb0 [ 1313.512083][T25045] ___sys_sendmsg+0x1c6/0x360 [ 1313.512122][T25045] ? __pfx____sys_sendmsg+0x10/0x10 [ 1313.512209][T25045] __sys_sendmmsg+0x27c/0x4e0 [ 1313.512247][T25045] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1313.512275][T25045] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1313.512336][T25045] ? ksys_write+0x242/0x270 [ 1313.512367][T25045] ? __pfx_ksys_write+0x10/0x10 [ 1313.512397][T25045] __x64_sys_sendmmsg+0xa0/0xc0 [ 1313.512430][T25045] do_syscall_64+0x14d/0xf80 [ 1313.512461][T25045] ? trace_irq_disable+0x3b/0x150 [ 1313.512490][T25045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.512512][T25045] ? clear_bhb_loop+0x40/0x90 [ 1313.512539][T25045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.512560][T25045] RIP: 0033:0x7f9aaed9c629 [ 1313.512581][T25045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1313.512599][T25045] RSP: 002b:00007f9aafc8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1313.512622][T25045] RAX: ffffffffffffffda RBX: 00007f9aaf015fa0 RCX: 00007f9aaed9c629 [ 1313.512638][T25045] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1313.512653][T25045] RBP: 00007f9aafc8a090 R08: 0000000000000000 R09: 0000000000000000 [ 1313.512666][T25045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1313.512679][T25045] R13: 00007f9aaf016038 R14: 00007f9aaf015fa0 R15: 00007fff695c2308 [ 1313.512714][T25045] [ 1313.998217][T25063] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19494'. [ 1314.039199][T25063] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1314.128794][T25072] netlink: 'syz.0.19495': attribute type 10 has an invalid length. [ 1314.274520][T25077] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19497'. [ 1315.008745][T25110] netlink: 'syz.4.19508': attribute type 5 has an invalid length. [ 1315.035197][T23847] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1315.044643][T23847] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1315.061946][T25110] netlink: 'syz.4.19508': attribute type 5 has an invalid length. [ 1315.074016][T23847] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1315.091863][T23847] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1315.164809][T25117] netlink: 'syz.0.19510': attribute type 10 has an invalid length. [ 1315.827109][T25155] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1316.053272][T25165] netlink: 'syz.0.19525': attribute type 10 has an invalid length. [ 1316.072799][T25164] netlink: 'syz.3.19527': attribute type 5 has an invalid length. [ 1316.184228][T25171] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1316.810086][T25208] netlink: 'syz.2.19542': attribute type 10 has an invalid length. [ 1316.811965][T25203] __nla_validate_parse: 14 callbacks suppressed [ 1316.812021][T25203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19541'. [ 1316.891546][T25203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19541'. [ 1316.955428][T25212] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19544'. [ 1316.980563][T25215] nbd: nbd1 already in use [ 1317.527659][T25250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19554'. [ 1317.603919][T25255] netlink: 'syz.4.19557': attribute type 10 has an invalid length. [ 1318.109538][T25290] : renamed from bond0 [ 1318.122934][T25292] netlink: 'syz.1.19569': attribute type 10 has an invalid length. [ 1318.143134][T25292] bond0: (slave wlan1): Opening slave failed [ 1318.947145][T25336] netlink: 'syz.0.19581': attribute type 10 has an invalid length. [ 1319.230157][T25347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19586'. [ 1319.258753][T25347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19586'. [ 1319.369781][T25353] bond4: option mode: unable to set because the bond device has slaves [ 1319.387417][T25356] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19590'. [ 1319.405103][T25355] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 1319.421286][T25358] netlink: 'syz.3.19591': attribute type 11 has an invalid length. [ 1319.432095][T25358] netlink: 228 bytes leftover after parsing attributes in process `syz.3.19591'. [ 1319.442009][T25359] bond4: (slave ªªªªª9oïß+Œü4€): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1319.455449][T25359] A link change request failed with some changes committed already. Interface ªªªªª9oïß+Œü4€ may have been left with an inconsistent configuration, please check. [ 1319.560199][T31505] lec:lec_start_xmit: lec0:No lecd attached [ 1319.623146][T25363] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.19593'. [ 1319.796035][T25373] netlink: 'syz.2.19596': attribute type 1 has an invalid length. [ 1319.809643][T25374] netlink: 'syz.3.19595': attribute type 10 has an invalid length. [ 1319.838334][T25373] netlink: 244 bytes leftover after parsing attributes in process `syz.2.19596'. [ 1319.992967][T25389] netlink: 'syz.1.19600': attribute type 15 has an invalid length. [ 1320.149618][T25389] netlink: 'syz.1.19600': attribute type 15 has an invalid length. [ 1320.187336][T23838] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 12132 - 0 [ 1320.199492][T23838] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 12132 - 0 [ 1320.215011][T23838] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 12132 - 0 [ 1320.225445][T23838] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 12132 - 0 [ 1320.479881][ T5487] veth0_macvtap: left promiscuous mode [ 1324.989397][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms [ 1324.997448][ C0] lec:lec_tx_timeout: lec0 [ 1341.704349][T25446] __nla_validate_parse: 4 callbacks suppressed [ 1341.704370][T25446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19602'. [ 1341.708861][T25445] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 1341.734781][T25448] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 1342.033722][T25467] netlink: 'syz.1.19611': attribute type 10 has an invalid length. [ 1342.042578][T25467] bond0: (slave wlan1): Opening slave failed [ 1342.103527][T25471] netlink: 'syz.4.19612': attribute type 1 has an invalid length. [ 1342.112021][T25471] netlink: 244 bytes leftover after parsing attributes in process `syz.4.19612'. [ 1342.197522][T25478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19615'. [ 1342.239930][T25481] netlink: 'syz.2.19614': attribute type 1 has an invalid length. [ 1342.674008][T25511] netlink: 'syz.4.19629': attribute type 1 has an invalid length. [ 1342.683106][T25511] netlink: 244 bytes leftover after parsing attributes in process `syz.4.19629'. [ 1342.839756][T25523] netlink: 'syz.3.19632': attribute type 2 has an invalid length. [ 1342.900337][T25526] netlink: 'syz.2.19633': attribute type 4 has an invalid length. [ 1343.073335][T25538] FAULT_INJECTION: forcing a failure. [ 1343.073335][T25538] name failslab, interval 1, probability 0, space 0, times 0 [ 1343.086170][T25538] CPU: 1 UID: 0 PID: 25538 Comm: syz.2.19638 Not tainted syzkaller #0 PREEMPT(full) [ 1343.086200][T25538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1343.086222][T25538] Call Trace: [ 1343.086231][T25538] [ 1343.086241][T25538] dump_stack_lvl+0xe8/0x150 [ 1343.086278][T25538] should_fail_ex+0x412/0x560 [ 1343.086309][T25538] should_failslab+0xa8/0x100 [ 1343.086336][T25538] ? skb_clone+0x212/0x3a0 [ 1343.086367][T25538] kmem_cache_alloc_noprof+0x87/0x650 [ 1343.086402][T25538] ? __bpf_redirect+0x9b4/0x12a0 [ 1343.086432][T25538] skb_clone+0x212/0x3a0 [ 1343.086468][T25538] bpf_clone_redirect+0x16a/0x4b0 [ 1343.086504][T25538] ? bpf_test_run+0x1d1/0x830 [ 1343.086529][T25538] bpf_prog_bd919e7baf24f63c+0x5f/0x68 [ 1343.086553][T25538] ? __lock_acquire+0x6b5/0x2cf0 [ 1343.086607][T25538] ? ktime_get+0x45/0x200 [ 1343.086631][T25538] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1343.086653][T25538] ? lockdep_hardirqs_on+0x7a/0x110 [ 1343.086684][T25538] ? ktime_get+0x45/0x200 [ 1343.086702][T25538] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1343.086723][T25538] ? bpf_test_run+0x1d1/0x830 [ 1343.086751][T25538] ? bpf_test_timer_continue+0x10c/0x320 [ 1343.086781][T25538] bpf_test_run+0x354/0x830 [ 1343.086830][T25538] ? __pfx_bpf_test_run+0x10/0x10 [ 1343.086865][T25538] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1343.086897][T25538] ? slab_build_skb+0x52/0x410 [ 1343.086926][T25538] ? __kasan_krealloc+0xeb/0x110 [ 1343.086951][T25538] ? eth_type_trans+0x35e/0x6d0 [ 1343.086988][T25538] ? convert___skb_to_skb+0x3d/0x5b0 [ 1343.087017][T25538] bpf_prog_test_run_skb+0xd22/0x1c90 [ 1343.087055][T25538] ? __fget_files+0x2a/0x420 [ 1343.087083][T25538] ? __fget_files+0x3a0/0x420 [ 1343.087110][T25538] ? __fget_files+0x2a/0x420 [ 1343.087145][T25538] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1343.087172][T25538] bpf_prog_test_run+0x2c7/0x340 [ 1343.087198][T25538] __sys_bpf+0x643/0x950 [ 1343.087249][T25538] ? __pfx___sys_bpf+0x10/0x10 [ 1343.087298][T25538] ? ksys_write+0x242/0x270 [ 1343.087323][T25538] ? __pfx_ksys_write+0x10/0x10 [ 1343.087353][T25538] __x64_sys_bpf+0x7c/0x90 [ 1343.087384][T25538] do_syscall_64+0x14d/0xf80 [ 1343.087415][T25538] ? trace_irq_disable+0x3b/0x150 [ 1343.087445][T25538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1343.087467][T25538] ? clear_bhb_loop+0x40/0x90 [ 1343.087494][T25538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1343.087516][T25538] RIP: 0033:0x7fd08879c629 [ 1343.087537][T25538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1343.087556][T25538] RSP: 002b:00007fd089643028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1343.087577][T25538] RAX: ffffffffffffffda RBX: 00007fd088a15fa0 RCX: 00007fd08879c629 [ 1343.087594][T25538] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1343.087607][T25538] RBP: 00007fd089643090 R08: 0000000000000000 R09: 0000000000000000 [ 1343.087620][T25538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1343.087632][T25538] R13: 00007fd088a16038 R14: 00007fd088a15fa0 R15: 00007ffdbd10dcb8 [ 1343.087667][T25538] [ 1343.697741][T25563] netlink: 'syz.4.19645': attribute type 1 has an invalid length. [ 1343.706513][T25563] netlink: 244 bytes leftover after parsing attributes in process `syz.4.19645'. [ 1343.731343][T25559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19641'. [ 1343.742071][T25564] netlink: 'syz.1.19646': attribute type 2 has an invalid length. [ 1344.002778][T25579] openvswitch: netlink: Multiple metadata blocks provided [ 1344.230791][T25593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19656'. [ 1344.250217][T25593] openvswitch: netlink: nsh attr 255 is out of range max 3 [ 1344.306056][T25595] netlink: 'syz.4.19657': attribute type 2 has an invalid length. [ 1344.385454][T25601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19660'. [ 1344.421574][T25603] netlink: 'syz.4.19661': attribute type 1 has an invalid length. [ 1344.450108][T25603] netlink: 244 bytes leftover after parsing attributes in process `syz.4.19661'. [ 1344.577608][T25610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19663'. [ 1344.700553][T25617] tipc: Enabling of bearer rejected, failed to enable media [ 1344.733970][T25615] openvswitch: netlink: Multiple metadata blocks provided [ 1345.201634][T25651] tipc: Resetting bearer [ 1345.387751][T23845] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1345.403669][T23845] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1345.434478][T23845] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1345.463919][T23845] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1345.658962][T25650] tipc: Resetting bearer [ 1345.673817][T25668] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1345.826633][T23845] tipc: Resetting bearer [ 1345.846003][T25676] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1345.885754][T25674] openvswitch: netlink: Message has 8 unknown bytes. [ 1345.929339][T25674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1346.262040][T25696] tipc: Resetting bearer [ 1346.302329][T25694] tipc: Resetting bearer [ 1346.312080][T25701] tipc: Enabling of bearer rejected, failed to enable media [ 1346.428497][T25708] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1346.612313][T25722] IPVS: set_ctl: invalid protocol: 47 172.30.1.3:20000 [ 1346.837793][ T65] tipc: Resetting bearer [ 1346.918074][T25737] __nla_validate_parse: 9 callbacks suppressed [ 1346.918094][T25737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19710'. [ 1347.016413][T25735] syzkaller0: entered promiscuous mode [ 1347.022355][T25735] syzkaller0: entered allmulticast mode [ 1347.030174][T25742] tipc: Resetting bearer [ 1347.334183][T25766] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1347.432705][T25771] FAULT_INJECTION: forcing a failure. [ 1347.432705][T25771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1347.456829][T25771] CPU: 0 UID: 0 PID: 25771 Comm: syz.0.19718 Not tainted syzkaller #0 PREEMPT(full) [ 1347.456858][T25771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1347.456872][T25771] Call Trace: [ 1347.456881][T25771] [ 1347.456890][T25771] dump_stack_lvl+0xe8/0x150 [ 1347.456924][T25771] should_fail_ex+0x412/0x560 [ 1347.456967][T25771] _copy_from_iter+0x1d3/0x1670 [ 1347.457000][T25771] ? rcu_is_watching+0x15/0xb0 [ 1347.457035][T25771] ? __pfx__copy_from_iter+0x10/0x10 [ 1347.457070][T25771] ? netlink_sendmsg+0x650/0xb40 [ 1347.457094][T25771] ? skb_put+0x11b/0x210 [ 1347.457126][T25771] netlink_sendmsg+0x6c0/0xb40 [ 1347.457167][T25771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1347.457196][T25771] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1347.457224][T25771] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1347.457249][T25771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1347.457273][T25771] ____sys_sendmsg+0xa68/0xad0 [ 1347.457314][T25771] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1347.457355][T25771] ? import_iovec+0x73/0xa0 [ 1347.457388][T25771] ___sys_sendmsg+0x2a5/0x360 [ 1347.457425][T25771] ? __pfx____sys_sendmsg+0x10/0x10 [ 1347.457492][T25771] ? __fget_files+0x2a/0x420 [ 1347.457520][T25771] ? __fget_files+0x3a0/0x420 [ 1347.457558][T25771] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1347.457592][T25771] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1347.457649][T25771] ? __pfx_ksys_write+0x10/0x10 [ 1347.457684][T25771] do_syscall_64+0x14d/0xf80 [ 1347.457713][T25771] ? trace_irq_disable+0x3b/0x150 [ 1347.457742][T25771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.457762][T25771] ? clear_bhb_loop+0x40/0x90 [ 1347.457787][T25771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.457807][T25771] RIP: 0033:0x7f1c03f9c629 [ 1347.457828][T25771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1347.457845][T25771] RSP: 002b:00007f1c04f37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1347.457868][T25771] RAX: ffffffffffffffda RBX: 00007f1c04215fa0 RCX: 00007f1c03f9c629 [ 1347.457884][T25771] RDX: 0000000020000084 RSI: 0000200000004340 RDI: 0000000000000003 [ 1347.457897][T25771] RBP: 00007f1c04f37090 R08: 0000000000000000 R09: 0000000000000000 [ 1347.457909][T25771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1347.457921][T25771] R13: 00007f1c04216038 R14: 00007f1c04215fa0 R15: 00007fff00182fa8 [ 1347.457963][T25771] [ 1347.753365][T25773] netlink: 'syz.0.19720': attribute type 1 has an invalid length. [ 1347.786021][T25775] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1349.749456][T25739] tipc: Resetting bearer [ 1349.756661][T25773] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1349.805913][T25778] bond0: entered promiscuous mode [ 1349.827303][T25778] bond_slave_0: entered promiscuous mode [ 1349.834147][T25778] bond_slave_1: entered promiscuous mode [ 1349.840996][T25778] bond0: entered allmulticast mode [ 1349.846167][T25778] bond_slave_0: entered allmulticast mode [ 1349.852682][T25778] bond_slave_1: entered allmulticast mode [ 1349.861329][T25778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1349.923365][T23838] tipc: Resetting bearer [ 1350.007704][T25803] FAULT_INJECTION: forcing a failure. [ 1350.007704][T25803] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.058425][T25803] CPU: 1 UID: 0 PID: 25803 Comm: syz.1.19725 Not tainted syzkaller #0 PREEMPT(full) [ 1350.058455][T25803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1350.058468][T25803] Call Trace: [ 1350.058477][T25803] [ 1350.058486][T25803] dump_stack_lvl+0xe8/0x150 [ 1350.058522][T25803] should_fail_ex+0x412/0x560 [ 1350.058554][T25803] should_failslab+0xa8/0x100 [ 1350.058583][T25803] __kmalloc_noprof+0xe8/0x760 [ 1350.058604][T25803] ? ib_device_get_by_netdev+0x480/0x4f0 [ 1350.058632][T25803] ? _ib_alloc_device+0x40/0x680 [ 1350.058655][T25803] ? ib_device_get_by_netdev+0x81/0x4f0 [ 1350.058686][T25803] _ib_alloc_device+0x40/0x680 [ 1350.058713][T25803] rxe_net_add+0x2a/0x110 [ 1350.058750][T25803] rxe_newlink+0xdd/0x190 [ 1350.058781][T25803] nldev_newlink+0x5bd/0x650 [ 1350.058806][T25803] ? __pfx_nldev_newlink+0x10/0x10 [ 1350.058931][T25803] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1350.058956][T25803] ? arch_stack_walk+0xfb/0x150 [ 1350.059014][T25803] ? bpf_lsm_capable+0x9/0x20 [ 1350.059044][T25803] ? security_capable+0x7e/0x2c0 [ 1350.059071][T25803] ? __pfx_nldev_newlink+0x10/0x10 [ 1350.059094][T25803] rdma_nl_rcv+0x6d7/0xa10 [ 1350.059129][T25803] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1350.059152][T25803] ? __netlink_lookup+0x7e4/0x8b0 [ 1350.059198][T25803] ? netlink_deliver_tap+0x2e/0x1b0 [ 1350.059234][T25803] netlink_unicast+0x80f/0x9b0 [ 1350.059266][T25803] ? __pfx_netlink_unicast+0x10/0x10 [ 1350.059290][T25803] ? netlink_sendmsg+0x650/0xb40 [ 1350.059314][T25803] ? skb_put+0x11b/0x210 [ 1350.059345][T25803] netlink_sendmsg+0x813/0xb40 [ 1350.059381][T25803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1350.059411][T25803] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1350.059439][T25803] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1350.059463][T25803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1350.059482][T25803] ____sys_sendmsg+0xa68/0xad0 [ 1350.059516][T25803] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1350.059550][T25803] ? import_iovec+0x73/0xa0 [ 1350.059578][T25803] ___sys_sendmsg+0x2a5/0x360 [ 1350.059608][T25803] ? __pfx____sys_sendmsg+0x10/0x10 [ 1350.059665][T25803] ? __fget_files+0x2a/0x420 [ 1350.059689][T25803] ? __fget_files+0x3a0/0x420 [ 1350.059723][T25803] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1350.059751][T25803] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1350.059785][T25803] ? __pfx_ksys_write+0x10/0x10 [ 1350.059814][T25803] do_syscall_64+0x14d/0xf80 [ 1350.059846][T25803] ? trace_irq_disable+0x3b/0x150 [ 1350.059872][T25803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.059889][T25803] ? clear_bhb_loop+0x40/0x90 [ 1350.059911][T25803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.059929][T25803] RIP: 0033:0x7f9aaed9c629 [ 1350.059946][T25803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1350.059962][T25803] RSP: 002b:00007f9aafc8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1350.059984][T25803] RAX: ffffffffffffffda RBX: 00007f9aaf015fa0 RCX: 00007f9aaed9c629 [ 1350.060000][T25803] RDX: 000000000000c000 RSI: 0000200000000480 RDI: 0000000000000005 [ 1350.060014][T25803] RBP: 00007f9aafc8a090 R08: 0000000000000000 R09: 0000000000000000 [ 1350.060027][T25803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.060037][T25803] R13: 00007f9aaf016038 R14: 00007f9aaf015fa0 R15: 00007fff695c2308 [ 1350.060066][T25803] [ 1350.425615][T25803] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1350.619652][T25818] FAULT_INJECTION: forcing a failure. [ 1350.619652][T25818] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.632471][T25818] CPU: 1 UID: 0 PID: 25818 Comm: syz.4.19731 Not tainted syzkaller #0 PREEMPT(full) [ 1350.632500][T25818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1350.632514][T25818] Call Trace: [ 1350.632523][T25818] [ 1350.632533][T25818] dump_stack_lvl+0xe8/0x150 [ 1350.632569][T25818] should_fail_ex+0x412/0x560 [ 1350.632601][T25818] should_failslab+0xa8/0x100 [ 1350.632626][T25818] ? skb_clone+0x212/0x3a0 [ 1350.632658][T25818] kmem_cache_alloc_noprof+0x87/0x650 [ 1350.632692][T25818] ? __bpf_redirect+0x9b4/0x12a0 [ 1350.632722][T25818] skb_clone+0x212/0x3a0 [ 1350.632758][T25818] bpf_clone_redirect+0x16a/0x4b0 [ 1350.632794][T25818] ? bpf_test_run+0x1d1/0x830 [ 1350.632819][T25818] bpf_prog_bd919e7baf24f63c+0x5f/0x68 [ 1350.632843][T25818] ? __lock_acquire+0x6b5/0x2cf0 [ 1350.632896][T25818] ? ktime_get+0x45/0x200 [ 1350.632920][T25818] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1350.632942][T25818] ? lockdep_hardirqs_on+0x7a/0x110 [ 1350.632973][T25818] ? ktime_get+0x45/0x200 [ 1350.632990][T25818] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1350.633011][T25818] ? bpf_test_run+0x1d1/0x830 [ 1350.633043][T25818] ? bpf_test_timer_continue+0x10c/0x320 [ 1350.633074][T25818] bpf_test_run+0x354/0x830 [ 1350.633121][T25818] ? __pfx_bpf_test_run+0x10/0x10 [ 1350.633154][T25818] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1350.633181][T25818] ? slab_build_skb+0x52/0x410 [ 1350.633203][T25818] ? __kasan_krealloc+0xeb/0x110 [ 1350.633223][T25818] ? eth_type_trans+0x35e/0x6d0 [ 1350.633253][T25818] ? convert___skb_to_skb+0x3d/0x5b0 [ 1350.633275][T25818] bpf_prog_test_run_skb+0xd22/0x1c90 [ 1350.633306][T25818] ? __fget_files+0x2a/0x420 [ 1350.633329][T25818] ? __fget_files+0x3a0/0x420 [ 1350.633352][T25818] ? __fget_files+0x2a/0x420 [ 1350.633380][T25818] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1350.633401][T25818] bpf_prog_test_run+0x2c7/0x340 [ 1350.633421][T25818] __sys_bpf+0x643/0x950 [ 1350.633449][T25818] ? __pfx___sys_bpf+0x10/0x10 [ 1350.633488][T25818] ? ksys_write+0x242/0x270 [ 1350.633507][T25818] ? __pfx_ksys_write+0x10/0x10 [ 1350.633531][T25818] __x64_sys_bpf+0x7c/0x90 [ 1350.633555][T25818] do_syscall_64+0x14d/0xf80 [ 1350.633580][T25818] ? trace_irq_disable+0x3b/0x150 [ 1350.633605][T25818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.633623][T25818] ? clear_bhb_loop+0x40/0x90 [ 1350.633643][T25818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.633661][T25818] RIP: 0033:0x7f6cb539c629 [ 1350.633677][T25818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1350.633692][T25818] RSP: 002b:00007f6cb35f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1350.633710][T25818] RAX: ffffffffffffffda RBX: 00007f6cb5615fa0 RCX: 00007f6cb539c629 [ 1350.633724][T25818] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1350.633735][T25818] RBP: 00007f6cb35f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1350.633746][T25818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1350.633756][T25818] R13: 00007f6cb5616038 R14: 00007f6cb5615fa0 R15: 00007ffe941d7ee8 [ 1350.633786][T25818] [ 1351.043255][T25822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19730'. [ 1351.057971][T25824] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 1351.364626][T25841] bond32: option resend_igmp: invalid value (32767) [ 1351.371521][T25841] bond32: option resend_igmp: allowed values 0 - 255 [ 1351.386377][T25841] bond32 (unregistering): Released all slaves [ 1351.437693][T25852] veth0_to_bridge: left allmulticast mode [ 1351.445590][T25852] veth0_to_bridge: left promiscuous mode [ 1351.453379][T25852] bridge0: port 1(veth0_to_bridge) entered disabled state [ 1351.477716][T25852] : (slave bond_slave_0): Releasing backup interface [ 1351.526642][T25852] : (slave bond_slave_1): Releasing backup interface [ 1351.554383][T25852] : (slave wlan1): Releasing backup interface [ 1351.571710][T25852] bond4: (slave geneve2): Releasing active interface [ 1351.582091][T25852] bond6: (slave bridge2): Releasing active interface [ 1351.592629][T25852] bond7: (slave gretap2): Releasing active interface [ 1351.615454][T25852] bond9: (slave ip6gre1): Releasing backup interface [ 1351.631335][T25852] bond10: (slave batadv0): Releasing active interface [ 1351.653374][T25852] bond11: (slave bridge8): Removing an active aggregator [ 1351.663018][T25852] bond11: (slave bridge8): Releasing backup interface [ 1351.670907][T25852] bond11: (slave bridge8): the permanent HWaddr of slave - f2:85:5d:f3:a9:d9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1351.692155][T25852] bond11: (slave bridge9): Releasing backup interface [ 1351.703526][T25852] bond13: (slave bridge14): Releasing active interface [ 1351.715521][T25852] team0: Port device wireguard0 removed [ 1351.727241][T25852] bond22: (slave bridge17): Releasing active interface [ 1351.738554][T25852] bond23: (slave bridge19): Releasing active interface [ 1351.751330][T25852] bond24: (slave bridge20): Releasing active interface [ 1351.761512][T25852] tipc: Resetting bearer [ 1351.772823][T25852] bond26: (slave gretap4): Releasing active interface [ 1351.940342][T25868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19747'. [ 1351.980008][T25870] tipc: Resetting bearer [ 1352.007075][T25869] tipc: Resetting bearer [ 1352.082335][T25872] FAULT_INJECTION: forcing a failure. [ 1352.082335][T25872] name failslab, interval 1, probability 0, space 0, times 0 [ 1352.105296][T25874] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19750'. [ 1352.107257][T25872] CPU: 0 UID: 0 PID: 25872 Comm: syz.1.19749 Not tainted syzkaller #0 PREEMPT(full) [ 1352.107339][T25872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1352.107372][T25872] Call Trace: [ 1352.107401][T25872] [ 1352.107424][T25872] dump_stack_lvl+0xe8/0x150 [ 1352.107519][T25872] should_fail_ex+0x412/0x560 [ 1352.107603][T25872] should_failslab+0xa8/0x100 [ 1352.107685][T25872] __kmalloc_cache_noprof+0x88/0x660 [ 1352.107749][T25872] ? rdma_restrack_init+0x4f/0x520 [ 1352.107844][T25872] rdma_restrack_init+0x4f/0x520 [ 1352.107944][T25872] _ib_alloc_device+0x53/0x680 [ 1352.108027][T25872] rxe_net_add+0x2a/0x110 [ 1352.108134][T25872] rxe_newlink+0xdd/0x190 [ 1352.108227][T25872] nldev_newlink+0x5bd/0x650 [ 1352.108313][T25872] ? __pfx_nldev_newlink+0x10/0x10 [ 1352.108627][T25872] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1352.108668][T25872] ? arch_stack_walk+0xfb/0x150 [ 1352.108828][T25872] ? bpf_lsm_capable+0x9/0x20 [ 1352.108911][T25872] ? security_capable+0x7e/0x2c0 [ 1352.108985][T25872] ? __pfx_nldev_newlink+0x10/0x10 [ 1352.109044][T25872] rdma_nl_rcv+0x6d7/0xa10 [ 1352.109140][T25872] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1352.109202][T25872] ? __netlink_lookup+0x7e4/0x8b0 [ 1352.109326][T25872] ? netlink_deliver_tap+0x2e/0x1b0 [ 1352.109419][T25872] netlink_unicast+0x80f/0x9b0 [ 1352.109506][T25872] ? __pfx_netlink_unicast+0x10/0x10 [ 1352.109569][T25872] ? netlink_sendmsg+0x650/0xb40 [ 1352.109649][T25872] ? skb_put+0x11b/0x210 [ 1352.109755][T25872] netlink_sendmsg+0x813/0xb40 [ 1352.109854][T25872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1352.109929][T25872] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1352.110011][T25872] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1352.110068][T25872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1352.110139][T25872] ____sys_sendmsg+0xa68/0xad0 [ 1352.110247][T25872] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1352.110354][T25872] ? import_iovec+0x73/0xa0 [ 1352.110447][T25872] ___sys_sendmsg+0x2a5/0x360 [ 1352.110545][T25872] ? __pfx____sys_sendmsg+0x10/0x10 [ 1352.110734][T25872] ? __fget_files+0x2a/0x420 [ 1352.110809][T25872] ? __fget_files+0x3a0/0x420 [ 1352.110926][T25872] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1352.111026][T25872] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1352.111160][T25872] ? __pfx_ksys_write+0x10/0x10 [ 1352.111257][T25872] do_syscall_64+0x14d/0xf80 [ 1352.111340][T25872] ? trace_irq_disable+0x3b/0x150 [ 1352.111414][T25872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.111475][T25872] ? clear_bhb_loop+0x40/0x90 [ 1352.111540][T25872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.111602][T25872] RIP: 0033:0x7f9aaed9c629 [ 1352.111658][T25872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1352.111709][T25872] RSP: 002b:00007f9aafc8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1352.111773][T25872] RAX: ffffffffffffffda RBX: 00007f9aaf015fa0 RCX: 00007f9aaed9c629 [ 1352.111814][T25872] RDX: 000000000000c000 RSI: 0000200000000480 RDI: 0000000000000005 [ 1352.111848][T25872] RBP: 00007f9aafc8a090 R08: 0000000000000000 R09: 0000000000000000 [ 1352.111888][T25872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1352.111931][T25872] R13: 00007f9aaf016038 R14: 00007f9aaf015fa0 R15: 00007fff695c2308 [ 1352.112019][T25872] [ 1352.145235][T25872] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1352.452292][ T65] tipc: Resetting bearer [ 1352.458399][T25874] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19750'. [ 1352.882121][T25909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19760'. [ 1352.992814][T25913] tipc: Resetting bearer [ 1353.079765][T25919] FAULT_INJECTION: forcing a failure. [ 1353.079765][T25919] name failslab, interval 1, probability 0, space 0, times 0 [ 1353.094282][T25919] CPU: 1 UID: 0 PID: 25919 Comm: syz.4.19763 Not tainted syzkaller #0 PREEMPT(full) [ 1353.094316][T25919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1353.094330][T25919] Call Trace: [ 1353.094340][T25919] [ 1353.094350][T25919] dump_stack_lvl+0xe8/0x150 [ 1353.094387][T25919] should_fail_ex+0x412/0x560 [ 1353.094415][T25919] should_failslab+0xa8/0x100 [ 1353.094443][T25919] __kmalloc_noprof+0xe8/0x760 [ 1353.094464][T25919] ? alloc_port_data+0xfb/0x360 [ 1353.094495][T25919] alloc_port_data+0xfb/0x360 [ 1353.094531][T25919] ib_device_set_netdev+0xd3/0x6d0 [ 1353.094555][T25919] ? mutex_init_lockep+0xf9/0x130 [ 1353.094586][T25919] ? ib_set_device_ops+0x40d4/0x4220 [ 1353.094620][T25919] rxe_register_device+0x1bb/0x350 [ 1353.094657][T25919] rxe_net_add+0x81/0x110 [ 1353.094691][T25919] rxe_newlink+0xdd/0x190 [ 1353.094718][T25919] nldev_newlink+0x5bd/0x650 [ 1353.094740][T25919] ? __pfx_nldev_newlink+0x10/0x10 [ 1353.094862][T25919] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1353.094887][T25919] ? arch_stack_walk+0xfb/0x150 [ 1353.094930][T25919] ? bpf_lsm_capable+0x9/0x20 [ 1353.094951][T25919] ? security_capable+0x7e/0x2c0 [ 1353.094970][T25919] ? __pfx_nldev_newlink+0x10/0x10 [ 1353.094987][T25919] rdma_nl_rcv+0x6d7/0xa10 [ 1353.095013][T25919] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1353.095030][T25919] ? __netlink_lookup+0x7e4/0x8b0 [ 1353.095065][T25919] ? netlink_deliver_tap+0x2e/0x1b0 [ 1353.095089][T25919] netlink_unicast+0x80f/0x9b0 [ 1353.095113][T25919] ? __pfx_netlink_unicast+0x10/0x10 [ 1353.095131][T25919] ? netlink_sendmsg+0x650/0xb40 [ 1353.095148][T25919] ? skb_put+0x11b/0x210 [ 1353.095172][T25919] netlink_sendmsg+0x813/0xb40 [ 1353.095198][T25919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1353.095220][T25919] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1353.095239][T25919] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1353.095257][T25919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1353.095275][T25919] ____sys_sendmsg+0xa68/0xad0 [ 1353.095305][T25919] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1353.095335][T25919] ? import_iovec+0x73/0xa0 [ 1353.095360][T25919] ___sys_sendmsg+0x2a5/0x360 [ 1353.095388][T25919] ? __pfx____sys_sendmsg+0x10/0x10 [ 1353.095439][T25919] ? __fget_files+0x2a/0x420 [ 1353.095460][T25919] ? __fget_files+0x3a0/0x420 [ 1353.095490][T25919] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1353.095515][T25919] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1353.095546][T25919] ? __pfx_ksys_write+0x10/0x10 [ 1353.095573][T25919] do_syscall_64+0x14d/0xf80 [ 1353.095630][T25919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.095652][T25919] ? clear_bhb_loop+0x40/0x90 [ 1353.095678][T25919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.095699][T25919] RIP: 0033:0x7f6cb539c629 [ 1353.095719][T25919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1353.095737][T25919] RSP: 002b:00007f6cb35f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1353.095759][T25919] RAX: ffffffffffffffda RBX: 00007f6cb5615fa0 RCX: 00007f6cb539c629 [ 1353.095774][T25919] RDX: 000000000000c000 RSI: 0000200000000480 RDI: 0000000000000005 [ 1353.095788][T25919] RBP: 00007f6cb35f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1353.095800][T25919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1353.095812][T25919] R13: 00007f6cb5616038 R14: 00007f6cb5615fa0 R15: 00007ffe941d7ee8 [ 1353.095855][T25919] [ 1353.095957][T25919] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1353.535322][T25912] tipc: Resetting bearer [ 1353.687672][T25936] Cannot find add_set index 65532 as target [ 1353.749291][T25940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19768'. [ 1353.776812][T25940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19768'. [ 1353.876270][T25947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19774'. [ 1354.066497][T25960] FAULT_INJECTION: forcing a failure. [ 1354.066497][T25960] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.109252][T25960] CPU: 1 UID: 0 PID: 25960 Comm: syz.4.19776 Not tainted syzkaller #0 PREEMPT(full) [ 1354.109283][T25960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1354.109296][T25960] Call Trace: [ 1354.109305][T25960] [ 1354.109314][T25960] dump_stack_lvl+0xe8/0x150 [ 1354.109350][T25960] should_fail_ex+0x412/0x560 [ 1354.109380][T25960] should_failslab+0xa8/0x100 [ 1354.109408][T25960] __kmalloc_cache_noprof+0x88/0x660 [ 1354.109432][T25960] ? nfnetlink_rcv+0xfe1/0x27b0 [ 1354.109460][T25960] nfnetlink_rcv+0xfe1/0x27b0 [ 1354.109480][T25960] ? is_bpf_text_address+0x26/0x2b0 [ 1354.109548][T25960] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1354.109583][T25960] ? __lock_acquire+0x6b5/0x2cf0 [ 1354.109650][T25960] ? netlink_deliver_tap+0x2e/0x1b0 [ 1354.109696][T25960] netlink_unicast+0x80f/0x9b0 [ 1354.109729][T25960] ? __pfx_netlink_unicast+0x10/0x10 [ 1354.109754][T25960] ? netlink_sendmsg+0x650/0xb40 [ 1354.109777][T25960] ? skb_put+0x11b/0x210 [ 1354.109810][T25960] netlink_sendmsg+0x813/0xb40 [ 1354.109847][T25960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1354.109877][T25960] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1354.109904][T25960] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1354.109930][T25960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1354.109954][T25960] ____sys_sendmsg+0xa68/0xad0 [ 1354.109993][T25960] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1354.110034][T25960] ? import_iovec+0x73/0xa0 [ 1354.110068][T25960] ___sys_sendmsg+0x2a5/0x360 [ 1354.110104][T25960] ? __pfx____sys_sendmsg+0x10/0x10 [ 1354.110176][T25960] ? __fget_files+0x2a/0x420 [ 1354.110204][T25960] ? __fget_files+0x3a0/0x420 [ 1354.110245][T25960] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1354.110279][T25960] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1354.110320][T25960] ? __pfx_ksys_write+0x10/0x10 [ 1354.110356][T25960] do_syscall_64+0x14d/0xf80 [ 1354.110386][T25960] ? trace_irq_disable+0x3b/0x150 [ 1354.110416][T25960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.110437][T25960] ? clear_bhb_loop+0x40/0x90 [ 1354.110463][T25960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.110484][T25960] RIP: 0033:0x7f6cb539c629 [ 1354.110505][T25960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1354.110532][T25960] RSP: 002b:00007f6cb35d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1354.110555][T25960] RAX: ffffffffffffffda RBX: 00007f6cb5616090 RCX: 00007f6cb539c629 [ 1354.110571][T25960] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000008 [ 1354.110585][T25960] RBP: 00007f6cb35d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1354.110599][T25960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1354.110611][T25960] R13: 00007f6cb5616128 R14: 00007f6cb5616090 R15: 00007ffe941d7ee8 [ 1354.110647][T25960] [ 1354.560714][T23871] tipc: Resetting bearer [ 1354.722036][T25988] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1354.728548][T25988] FAULT_INJECTION: forcing a failure. [ 1354.728548][T25988] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.742009][T25988] CPU: 1 UID: 0 PID: 25988 Comm: syz.0.19789 Not tainted syzkaller #0 PREEMPT(full) [ 1354.742036][T25988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1354.742050][T25988] Call Trace: [ 1354.742059][T25988] [ 1354.742069][T25988] dump_stack_lvl+0xe8/0x150 [ 1354.742104][T25988] should_fail_ex+0x412/0x560 [ 1354.742135][T25988] should_failslab+0xa8/0x100 [ 1354.742162][T25988] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1354.742196][T25988] ? __alloc_skb+0x186/0x7d0 [ 1354.742222][T25988] ? __alloc_skb+0x1d0/0x7d0 [ 1354.742246][T25988] ? __local_bh_enable_ip+0xd0/0x130 [ 1354.742279][T25988] __alloc_skb+0x1d0/0x7d0 [ 1354.742306][T25988] ? netlink_ack_tlv_len+0x6c/0x210 [ 1354.742335][T25988] netlink_ack+0x146/0xa50 [ 1354.742363][T25988] ? __pfx___up_read+0x10/0x10 [ 1354.742395][T25988] rdma_nl_rcv+0x3f1/0xa10 [ 1354.742431][T25988] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1354.742453][T25988] ? __netlink_lookup+0x7e4/0x8b0 [ 1354.742499][T25988] ? netlink_deliver_tap+0x2e/0x1b0 [ 1354.742532][T25988] netlink_unicast+0x80f/0x9b0 [ 1354.742574][T25988] ? __pfx_netlink_unicast+0x10/0x10 [ 1354.742598][T25988] ? netlink_sendmsg+0x650/0xb40 [ 1354.742621][T25988] ? skb_put+0x11b/0x210 [ 1354.742653][T25988] netlink_sendmsg+0x813/0xb40 [ 1354.742689][T25988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1354.742718][T25988] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1354.742746][T25988] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1354.742770][T25988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1354.742795][T25988] ____sys_sendmsg+0xa68/0xad0 [ 1354.742834][T25988] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1354.742875][T25988] ? import_iovec+0x73/0xa0 [ 1354.742909][T25988] ___sys_sendmsg+0x2a5/0x360 [ 1354.742947][T25988] ? __pfx____sys_sendmsg+0x10/0x10 [ 1354.743017][T25988] ? __fget_files+0x2a/0x420 [ 1354.743046][T25988] ? __fget_files+0x3a0/0x420 [ 1354.743087][T25988] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1354.743121][T25988] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1354.743163][T25988] ? __pfx_ksys_write+0x10/0x10 [ 1354.743198][T25988] do_syscall_64+0x14d/0xf80 [ 1354.743230][T25988] ? trace_irq_disable+0x3b/0x150 [ 1354.743260][T25988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.743283][T25988] ? clear_bhb_loop+0x40/0x90 [ 1354.743309][T25988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.743331][T25988] RIP: 0033:0x7f1c03f9c629 [ 1354.743352][T25988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1354.743371][T25988] RSP: 002b:00007f1c04f37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1354.743394][T25988] RAX: ffffffffffffffda RBX: 00007f1c04215fa0 RCX: 00007f1c03f9c629 [ 1354.743409][T25988] RDX: 000000000000c000 RSI: 0000200000000480 RDI: 0000000000000005 [ 1354.743423][T25988] RBP: 00007f1c04f37090 R08: 0000000000000000 R09: 0000000000000000 [ 1354.743455][T25988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1354.743468][T25988] R13: 00007f1c04216038 R14: 00007f1c04215fa0 R15: 00007fff00182fa8 [ 1354.743501][T25988] [ 1355.130374][T25996] netlink: 256 bytes leftover after parsing attributes in process `syz.2.19790'. [ 1355.246512][T26005] FAULT_INJECTION: forcing a failure. [ 1355.246512][T26005] name failslab, interval 1, probability 0, space 0, times 0 [ 1355.292263][T26005] CPU: 0 UID: 0 PID: 26005 Comm: syz.2.19793 Not tainted syzkaller #0 PREEMPT(full) [ 1355.292295][T26005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1355.292309][T26005] Call Trace: [ 1355.292318][T26005] [ 1355.292328][T26005] dump_stack_lvl+0xe8/0x150 [ 1355.292365][T26005] should_fail_ex+0x412/0x560 [ 1355.292397][T26005] should_failslab+0xa8/0x100 [ 1355.292435][T26005] __kmalloc_cache_noprof+0x88/0x660 [ 1355.292459][T26005] ? nfnetlink_rcv+0xfe1/0x27b0 [ 1355.292489][T26005] nfnetlink_rcv+0xfe1/0x27b0 [ 1355.292510][T26005] ? is_bpf_text_address+0x26/0x2b0 [ 1355.292573][T26005] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1355.292608][T26005] ? __lock_acquire+0x6b5/0x2cf0 [ 1355.292678][T26005] ? netlink_deliver_tap+0x2e/0x1b0 [ 1355.292725][T26005] netlink_unicast+0x80f/0x9b0 [ 1355.292758][T26005] ? __pfx_netlink_unicast+0x10/0x10 [ 1355.292783][T26005] ? netlink_sendmsg+0x650/0xb40 [ 1355.292807][T26005] ? skb_put+0x11b/0x210 [ 1355.292840][T26005] netlink_sendmsg+0x813/0xb40 [ 1355.292877][T26005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1355.292908][T26005] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1355.292935][T26005] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1355.292960][T26005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1355.292984][T26005] ____sys_sendmsg+0xa68/0xad0 [ 1355.293026][T26005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1355.293068][T26005] ? import_iovec+0x73/0xa0 [ 1355.293102][T26005] ___sys_sendmsg+0x2a5/0x360 [ 1355.293144][T26005] ? __pfx____sys_sendmsg+0x10/0x10 [ 1355.293217][T26005] ? __fget_files+0x2a/0x420 [ 1355.293247][T26005] ? __fget_files+0x3a0/0x420 [ 1355.293288][T26005] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1355.293323][T26005] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1355.293366][T26005] ? __pfx_ksys_write+0x10/0x10 [ 1355.293402][T26005] do_syscall_64+0x14d/0xf80 [ 1355.293439][T26005] ? trace_irq_disable+0x3b/0x150 [ 1355.293469][T26005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.293491][T26005] ? clear_bhb_loop+0x40/0x90 [ 1355.293518][T26005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.293540][T26005] RIP: 0033:0x7fd08879c629 [ 1355.293562][T26005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1355.293580][T26005] RSP: 002b:00007fd089643028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1355.293604][T26005] RAX: ffffffffffffffda RBX: 00007fd088a15fa0 RCX: 00007fd08879c629 [ 1355.293620][T26005] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000008 [ 1355.293633][T26005] RBP: 00007fd089643090 R08: 0000000000000000 R09: 0000000000000000 [ 1355.293647][T26005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1355.293660][T26005] R13: 00007fd088a16038 R14: 00007fd088a15fa0 R15: 00007ffdbd10dcb8 [ 1355.293697][T26005] [ 1355.603519][T26007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19794'. [ 1355.615210][T26007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19794'. [ 1356.021775][T26027] dvmrp6: left allmulticast mode [ 1356.068403][T26027] pimreg: left allmulticast mode [ 1356.218787][T26043] bond12: (slave vcan0): Releasing backup interface [ 1356.227948][T26043] bond12: Destroying bond [ 1356.243145][T26043] bond12 (unregistering): Released all slaves [ 1356.283929][T26047] netlink: 'syz.0.19809': attribute type 13 has an invalid length. [ 1356.443655][T26052] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 1356.736678][T26068] netlink: 'syz.1.19816': attribute type 10 has an invalid length. [ 1356.785604][T26073] netlink: 'syz.2.19819': attribute type 10 has an invalid length. [ 1356.807925][T26073] : (slave wlan1): Opening slave failed [ 1356.917476][T26078] veth0: entered promiscuous mode [ 1356.960333][T26076] veth0: left promiscuous mode [ 1357.124633][T26095] __nla_validate_parse: 2 callbacks suppressed [ 1357.124656][T26095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19827'. [ 1357.291552][T26106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19832'. [ 1357.317265][T26108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19833'. [ 1357.340261][T23872] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1357.340322][T26106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19832'. [ 1357.358719][T26108] tipc: Enabling of bearer rejected, already enabled [ 1357.381047][T23872] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1357.394487][T26112] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 1357.396472][T23872] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1357.424709][T23872] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1357.502471][T26120] tipc: Enabled bearer , priority 0 [ 1357.513637][T26120] syzkaller0: MTU too low for tipc bearer [ 1357.520237][T26120] tipc: Disabling bearer [ 1357.562237][T26122] netlink: 104 bytes leftover after parsing attributes in process `syz.3.19838'. [ 1357.705970][T26130] netlink: 'syz.3.19842': attribute type 2 has an invalid length. [ 1358.203034][T26161] netlink: 'syz.3.19853': attribute type 21 has an invalid length. [ 1358.222229][T26161] netlink: 156 bytes leftover after parsing attributes in process `syz.3.19853'. [ 1358.264239][T26164] netlink: 44 bytes leftover after parsing attributes in process `syz.2.19854'. [ 1358.303951][T26166] syzkaller0: entered promiscuous mode [ 1358.317653][T26166] syzkaller0: entered allmulticast mode [ 1358.378907][T26172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19858'. [ 1358.630485][T26187] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1358.664474][T26187] bond0 (unregistering): Released all slaves [ 1358.723478][T26192] team0: Device gtp1 is up. Set it down before adding it as a team port [ 1358.885046][T26201] sctp: [Deprecated]: syz.3.19868 (pid 26201) Use of int in max_burst socket option. [ 1358.885046][T26201] Use struct sctp_assoc_value instead [ 1358.906896][T26205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19870'. [ 1359.125461][T26211] Cannot find del_set index 0 as target [ 1359.255291][T26217] netlink: 'syz.2.19875': attribute type 2 has an invalid length. [ 1359.364151][T26223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19877'. [ 1359.434680][T26225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1360.660381][T26292] tipc: Enabling of bearer rejected, failed to enable media [ 1360.686463][T26288] 8021q: VLANs not supported on gre0 [ 1360.692675][T26288] C: renamed from lo [ 1360.698752][T26288] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1360.867703][T26304] netlink: 'syz.1.19904': attribute type 2 has an invalid length. [ 1361.065317][T26318] netlink: 'syz.1.19908': attribute type 4 has an invalid length. [ 1361.387244][T26328] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1361.432932][T26328] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1361.472334][T26339] netlink: 'syz.2.19914': attribute type 1 has an invalid length. [ 1361.612933][T26347] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1361.663500][T26351] netlink: 'syz.2.19918': attribute type 23 has an invalid length. [ 1361.712990][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1361.725165][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1361.834756][T26361] FAULT_INJECTION: forcing a failure. [ 1361.834756][T26361] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.874299][T26361] CPU: 0 UID: 0 PID: 26361 Comm: syz.2.19922 Not tainted syzkaller #0 PREEMPT(full) [ 1361.874327][T26361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1361.874339][T26361] Call Trace: [ 1361.874350][T26361] [ 1361.874359][T26361] dump_stack_lvl+0xe8/0x150 [ 1361.874395][T26361] should_fail_ex+0x412/0x560 [ 1361.874425][T26361] should_failslab+0xa8/0x100 [ 1361.874454][T26361] __kmalloc_noprof+0xe8/0x760 [ 1361.874477][T26361] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1361.874511][T26361] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1361.874549][T26361] ? tomoyo_path_number_perm+0x219/0x630 [ 1361.874572][T26361] tomoyo_path_number_perm+0x246/0x630 [ 1361.874599][T26361] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1361.874626][T26361] ? __lock_acquire+0x6b5/0x2cf0 [ 1361.874665][T26361] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1361.874722][T26361] ? __fget_files+0x2a/0x420 [ 1361.874756][T26361] ? __fget_files+0x2a/0x420 [ 1361.874784][T26361] ? __fget_files+0x3a0/0x420 [ 1361.874812][T26361] ? __fget_files+0x2a/0x420 [ 1361.874845][T26361] security_file_ioctl+0xc3/0x2a0 [ 1361.874882][T26361] __se_sys_ioctl+0x47/0x170 [ 1361.874908][T26361] do_syscall_64+0x14d/0xf80 [ 1361.874938][T26361] ? trace_irq_disable+0x3b/0x150 [ 1361.874967][T26361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.874988][T26361] ? clear_bhb_loop+0x40/0x90 [ 1361.875014][T26361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.875034][T26361] RIP: 0033:0x7fd08879c629 [ 1361.875055][T26361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1361.875073][T26361] RSP: 002b:00007fd089643028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1361.875096][T26361] RAX: ffffffffffffffda RBX: 00007fd088a15fa0 RCX: 00007fd08879c629 [ 1361.875112][T26361] RDX: 0000200000000300 RSI: 000000000000890b RDI: 0000000000000005 [ 1361.875126][T26361] RBP: 00007fd089643090 R08: 0000000000000000 R09: 0000000000000000 [ 1361.875139][T26361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1361.875151][T26361] R13: 00007fd088a16038 R14: 00007fd088a15fa0 R15: 00007ffdbd10dcb8 [ 1361.875186][T26361] [ 1361.875351][T26361] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1362.167419][T26373] erspan0: entered allmulticast mode [ 1362.201267][T26375] __nla_validate_parse: 17 callbacks suppressed [ 1362.201292][T26375] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19927'. [ 1362.291078][T26379] xt_l2tp: wrong L2TP version: 0 [ 1362.406463][T26387] netlink: 'syz.2.19931': attribute type 1 has an invalid length. [ 1362.417953][T26387] netlink: 15934 bytes leftover after parsing attributes in process `syz.2.19931'. [ 1362.773855][T26404] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1362.804610][T26407] tipc: Enabling of bearer rejected, already enabled [ 1363.000264][T26423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19943'. [ 1363.365376][T26441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19952'. [ 1363.506578][T26455] Cannot find del_set index 4 as target [ 1363.552150][T26456] netlink: 40 bytes leftover after parsing attributes in process `syz.4.19956'. [ 1363.677386][T26461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19958'. [ 1363.899343][T26475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19961'. [ 1364.055382][T26482] syzkaller0: entered promiscuous mode [ 1364.063825][T26485] FAULT_INJECTION: forcing a failure. [ 1364.063825][T26485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1364.070679][T26482] syzkaller0: entered allmulticast mode [ 1364.108248][T26485] CPU: 1 UID: 0 PID: 26485 Comm: syz.2.19965 Not tainted syzkaller #0 PREEMPT(full) [ 1364.108279][T26485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1364.108291][T26485] Call Trace: [ 1364.108299][T26485] [ 1364.108309][T26485] dump_stack_lvl+0xe8/0x150 [ 1364.108342][T26485] should_fail_ex+0x412/0x560 [ 1364.108371][T26485] _copy_from_user+0x2d/0xb0 [ 1364.108399][T26485] ax25_rt_ioctl+0x1ae/0x12d0 [ 1364.108435][T26485] ? __pfx_ax25_rt_ioctl+0x10/0x10 [ 1364.108461][T26485] ? do_raw_spin_lock+0x12b/0x2f0 [ 1364.108494][T26485] ? bpf_lsm_capable+0x9/0x20 [ 1364.108520][T26485] ? security_capable+0x7e/0x2c0 [ 1364.108548][T26485] ax25_ioctl+0x8af/0xd40 [ 1364.108570][T26485] ? __pfx_ax25_ioctl+0x10/0x10 [ 1364.108589][T26485] ? tomoyo_path_number_perm+0x219/0x630 [ 1364.108611][T26485] ? tomoyo_path_number_perm+0x219/0x630 [ 1364.108634][T26485] ? do_vfs_ioctl+0x1166/0x1530 [ 1364.108659][T26485] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1364.108687][T26485] sock_do_ioctl+0x101/0x320 [ 1364.108712][T26485] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1364.108730][T26485] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1364.108777][T26485] sock_ioctl+0x5c6/0x7f0 [ 1364.108799][T26485] ? __pfx_sock_ioctl+0x10/0x10 [ 1364.108819][T26485] ? __fget_files+0x2a/0x420 [ 1364.108845][T26485] ? __fget_files+0x3a0/0x420 [ 1364.108871][T26485] ? __fget_files+0x2a/0x420 [ 1364.108902][T26485] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1364.108925][T26485] ? __pfx_sock_ioctl+0x10/0x10 [ 1364.108944][T26485] __se_sys_ioctl+0xfc/0x170 [ 1364.108969][T26485] do_syscall_64+0x14d/0xf80 [ 1364.108997][T26485] ? trace_irq_disable+0x3b/0x150 [ 1364.109024][T26485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.109043][T26485] ? clear_bhb_loop+0x40/0x90 [ 1364.109068][T26485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.109087][T26485] RIP: 0033:0x7fd08879c629 [ 1364.109106][T26485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1364.109132][T26485] RSP: 002b:00007fd089643028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1364.109153][T26485] RAX: ffffffffffffffda RBX: 00007fd088a15fa0 RCX: 00007fd08879c629 [ 1364.109168][T26485] RDX: 0000200000000300 RSI: 000000000000890b RDI: 0000000000000005 [ 1364.109180][T26485] RBP: 00007fd089643090 R08: 0000000000000000 R09: 0000000000000000 [ 1364.109192][T26485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1364.109203][T26485] R13: 00007fd088a16038 R14: 00007fd088a15fa0 R15: 00007ffdbd10dcb8 [ 1364.109236][T26485] [ 1364.664384][T26502] netlink: 'syz.2.19972': attribute type 2 has an invalid length. [ 1365.046581][T26533] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1365.085266][T26537] FAULT_INJECTION: forcing a failure. [ 1365.085266][T26537] name failslab, interval 1, probability 0, space 0, times 0 [ 1365.107220][T26537] CPU: 1 UID: 0 PID: 26537 Comm: syz.4.19985 Not tainted syzkaller #0 PREEMPT(full) [ 1365.107249][T26537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1365.107263][T26537] Call Trace: [ 1365.107273][T26537] [ 1365.107282][T26537] dump_stack_lvl+0xe8/0x150 [ 1365.107319][T26537] should_fail_ex+0x412/0x560 [ 1365.107351][T26537] should_failslab+0xa8/0x100 [ 1365.107377][T26537] ? skb_clone+0x212/0x3a0 [ 1365.107409][T26537] kmem_cache_alloc_noprof+0x87/0x650 [ 1365.107443][T26537] ? __bpf_redirect+0x9b4/0x12a0 [ 1365.107473][T26537] skb_clone+0x212/0x3a0 [ 1365.107508][T26537] bpf_clone_redirect+0x16a/0x4b0 [ 1365.107544][T26537] ? bpf_test_run+0x1d1/0x830 [ 1365.107569][T26537] bpf_prog_bd919e7baf24f63c+0x5f/0x68 [ 1365.107593][T26537] ? __lock_acquire+0x6b5/0x2cf0 [ 1365.107638][T26537] ? __pfx___schedule+0x10/0x10 [ 1365.107684][T26537] ? preempt_schedule_thunk+0x16/0x30 [ 1365.107710][T26537] ? preempt_schedule_common+0x82/0xd0 [ 1365.107739][T26537] ? bpf_test_run+0x1d1/0x830 [ 1365.107767][T26537] ? bpf_test_timer_continue+0x10c/0x320 [ 1365.107798][T26537] bpf_test_run+0x354/0x830 [ 1365.107846][T26537] ? __pfx_bpf_test_run+0x10/0x10 [ 1365.107881][T26537] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1365.107912][T26537] ? slab_build_skb+0x52/0x410 [ 1365.107941][T26537] ? __kasan_krealloc+0xeb/0x110 [ 1365.107965][T26537] ? eth_type_trans+0x35e/0x6d0 [ 1365.108004][T26537] ? convert___skb_to_skb+0x3d/0x5b0 [ 1365.108031][T26537] bpf_prog_test_run_skb+0xd22/0x1c90 [ 1365.108070][T26537] ? __fget_files+0x2a/0x420 [ 1365.108099][T26537] ? __fget_files+0x3a0/0x420 [ 1365.108136][T26537] ? __fget_files+0x2a/0x420 [ 1365.108171][T26537] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1365.108197][T26537] bpf_prog_test_run+0x2c7/0x340 [ 1365.108223][T26537] __sys_bpf+0x643/0x950 [ 1365.108258][T26537] ? __pfx___sys_bpf+0x10/0x10 [ 1365.108308][T26537] ? ksys_write+0x242/0x270 [ 1365.108332][T26537] ? __pfx_ksys_write+0x10/0x10 [ 1365.108363][T26537] __x64_sys_bpf+0x7c/0x90 [ 1365.108393][T26537] do_syscall_64+0x14d/0xf80 [ 1365.108424][T26537] ? trace_irq_disable+0x3b/0x150 [ 1365.108454][T26537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.108476][T26537] ? clear_bhb_loop+0x40/0x90 [ 1365.108503][T26537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.108524][T26537] RIP: 0033:0x7f6cb539c629 [ 1365.108544][T26537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1365.108562][T26537] RSP: 002b:00007f6cb35f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1365.108584][T26537] RAX: ffffffffffffffda RBX: 00007f6cb5615fa0 RCX: 00007f6cb539c629 [ 1365.108600][T26537] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1365.108613][T26537] RBP: 00007f6cb35f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1365.108626][T26537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1365.108639][T26537] R13: 00007f6cb5616038 R14: 00007f6cb5615fa0 R15: 00007ffe941d7ee8 [ 1365.108674][T26537] [ 1366.020125][T26577] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1366.170133][T26591] netlink: 'syz.4.20007': attribute type 1 has an invalid length. [ 1366.178371][T26591] netlink: 280 bytes leftover after parsing attributes in process `syz.4.20007'. [ 1366.267787][T26605] netlink: 'syz.4.20010': attribute type 29 has an invalid length. [ 1366.278340][T26605] netlink: 'syz.4.20010': attribute type 29 has an invalid length. [ 1366.315656][T26609] netlink: 'syz.4.20010': attribute type 29 has an invalid length. [ 1366.483812][T26625] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 1366.572131][T26632] FAULT_INJECTION: forcing a failure. [ 1366.572131][T26632] name failslab, interval 1, probability 0, space 0, times 0 [ 1366.584913][T26632] CPU: 1 UID: 0 PID: 26632 Comm: syz.0.20017 Not tainted syzkaller #0 PREEMPT(full) [ 1366.584948][T26632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1366.584961][T26632] Call Trace: [ 1366.584970][T26632] [ 1366.584978][T26632] dump_stack_lvl+0xe8/0x150 [ 1366.585014][T26632] should_fail_ex+0x412/0x560 [ 1366.585045][T26632] should_failslab+0xa8/0x100 [ 1366.585069][T26632] ? skb_clone+0x212/0x3a0 [ 1366.585100][T26632] kmem_cache_alloc_noprof+0x87/0x650 [ 1366.585132][T26632] ? __bpf_redirect+0x9b4/0x12a0 [ 1366.585161][T26632] skb_clone+0x212/0x3a0 [ 1366.585195][T26632] bpf_clone_redirect+0x16a/0x4b0 [ 1366.585228][T26632] ? bpf_test_run+0x1d1/0x830 [ 1366.585253][T26632] bpf_prog_bd919e7baf24f63c+0x5f/0x68 [ 1366.585277][T26632] ? __lock_acquire+0x6b5/0x2cf0 [ 1366.585316][T26632] ? __pfx___schedule+0x10/0x10 [ 1366.585362][T26632] ? preempt_schedule_thunk+0x16/0x30 [ 1366.585388][T26632] ? preempt_schedule_common+0x82/0xd0 [ 1366.585417][T26632] ? bpf_test_run+0x1d1/0x830 [ 1366.585444][T26632] ? bpf_test_timer_continue+0x10c/0x320 [ 1366.585475][T26632] bpf_test_run+0x354/0x830 [ 1366.585524][T26632] ? __pfx_bpf_test_run+0x10/0x10 [ 1366.585559][T26632] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1366.585591][T26632] ? slab_build_skb+0x52/0x410 [ 1366.585618][T26632] ? __kasan_krealloc+0xeb/0x110 [ 1366.585642][T26632] ? eth_type_trans+0x35e/0x6d0 [ 1366.585680][T26632] ? convert___skb_to_skb+0x3d/0x5b0 [ 1366.585707][T26632] bpf_prog_test_run_skb+0xd22/0x1c90 [ 1366.585744][T26632] ? __fget_files+0x2a/0x420 [ 1366.585774][T26632] ? __fget_files+0x3a0/0x420 [ 1366.585802][T26632] ? __fget_files+0x2a/0x420 [ 1366.585836][T26632] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1366.585862][T26632] bpf_prog_test_run+0x2c7/0x340 [ 1366.585888][T26632] __sys_bpf+0x643/0x950 [ 1366.585922][T26632] ? __pfx___sys_bpf+0x10/0x10 [ 1366.585980][T26632] ? ksys_write+0x242/0x270 [ 1366.586005][T26632] ? __pfx_ksys_write+0x10/0x10 [ 1366.586035][T26632] __x64_sys_bpf+0x7c/0x90 [ 1366.586065][T26632] do_syscall_64+0x14d/0xf80 [ 1366.586096][T26632] ? trace_irq_disable+0x3b/0x150 [ 1366.586126][T26632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.586147][T26632] ? clear_bhb_loop+0x40/0x90 [ 1366.586173][T26632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.586195][T26632] RIP: 0033:0x7f1c03f9c629 [ 1366.586216][T26632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1366.586234][T26632] RSP: 002b:00007f1c04f37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1366.586255][T26632] RAX: ffffffffffffffda RBX: 00007f1c04215fa0 RCX: 00007f1c03f9c629 [ 1366.586270][T26632] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1366.586283][T26632] RBP: 00007f1c04f37090 R08: 0000000000000000 R09: 0000000000000000 [ 1366.586296][T26632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1366.586308][T26632] R13: 00007f1c04216038 R14: 00007f1c04215fa0 R15: 00007fff00182fa8 [ 1366.586343][T26632] [ 1366.977049][T23845] tipc: Subscription rejected, illegal request [ 1366.989203][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms [ 1366.997314][ C0] lec:lec_tx_timeout: lec0 [ 1367.127576][T26648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20021'. [ 1367.182212][T26653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20024'. [ 1367.272210][T26648] vlan1: entered allmulticast mode [ 1367.291662][T26648] bridge19: entered allmulticast mode [ 1367.373120][T26659] bridge19: port 1(veth21) entered blocking state [ 1367.381141][T26659] bridge19: port 1(veth21) entered disabled state [ 1367.429504][T26659] veth21: entered allmulticast mode [ 1367.437246][T26659] veth21: entered promiscuous mode [ 1367.547096][T26675] delete_channel: no stack [ 1367.565096][T26675] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20033'. [ 1367.864100][T26691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20034'. [ 1368.547302][T26725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20047'. [ 1368.601251][T26725] netlink: 'syz.3.20047': attribute type 1 has an invalid length. [ 1368.838834][T26738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20051'. [ 1368.863856][T26738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20051'. [ 1368.994204][T26749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20054'. [ 1369.161362][T26755] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.20056'. [ 1369.805916][T26780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20065'. [ 1369.856362][T26784] netlink: 'syz.0.20067': attribute type 1 has an invalid length. [ 1369.910692][T26787] tipc: Resetting bearer [ 1369.921761][T26787] sch_tbf: burst 1 is lower than device syzkaller0 mtu (299) ! [ 1369.952689][T26790] xfrm1: entered allmulticast mode [ 1369.982518][T26784] macvlan0: entered promiscuous mode [ 1370.001446][T26784] macvlan0: entered allmulticast mode [ 1370.013332][T26784] bond0: entered promiscuous mode [ 1370.041036][T26784] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1370.104330][T26784] bond0: left promiscuous mode [ 1370.200652][T26786] tipc: Resetting bearer [ 1370.346613][T26814] netlink: 256 bytes leftover after parsing attributes in process `syz.4.20076'. [ 1370.468256][T26819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20073'. [ 1370.936647][T26841] syzkaller0: entered promiscuous mode [ 1370.951793][T26841] syzkaller0: entered allmulticast mode [ 1370.980347][T26841] 0: reclassify loop, rule prio 0, protocol 800 [ 1371.171014][T23843] tipc: Resetting bearer [ 1371.516533][T26876] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1372.239404][T26915] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1372.341121][T26924] netlink: 'syz.3.20111': attribute type 4 has an invalid length. [ 1372.816397][T26955] __nla_validate_parse: 8 callbacks suppressed [ 1372.816421][T26955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20121'. [ 1372.844875][T26956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20120'. [ 1372.873174][T26951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20119'. [ 1372.897440][T26951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20119'. [ 1372.979568][T26951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1373.034146][T26965] netlink: 'syz.4.20125': attribute type 10 has an invalid length. [ 1373.123207][T26971] tipc: Enabling of bearer rejected, failed to enable media [ 1373.258061][T26978] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20130'. [ 1373.290383][T26975] pim6reg1: entered promiscuous mode [ 1373.295751][T26975] pim6reg1: entered allmulticast mode [ 1373.668900][T27008] netlink: 'syz.4.20139': attribute type 10 has an invalid length. [ 1373.686930][T27009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20138'. [ 1373.748428][T27011] tipc: Enabling of bearer rejected, failed to enable media [ 1373.851928][T27019] netlink: 'syz.2.20144': attribute type 2 has an invalid length. [ 1373.858411][T27016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20142'. [ 1373.871644][T27018] netlink: 40 bytes leftover after parsing attributes in process `syz.1.20143'. [ 1373.892051][T27021] netlink: 'syz.2.20144': attribute type 2 has an invalid length. [ 1374.105470][T27025] syzkaller1: entered promiscuous mode [ 1374.122348][T27025] syzkaller1: entered allmulticast mode [ 1374.279841][T27040] syzkaller0: entered promiscuous mode [ 1374.294560][T27040] syzkaller0: entered allmulticast mode [ 1374.333468][T27042] netlink: 'syz.1.20151': attribute type 10 has an invalid length. [ 1374.403953][T27042] bond0: (slave wlan1): Opening slave failed [ 1374.605223][T27054] tipc: Enabling of bearer rejected, failed to enable media [ 1374.658152][T27063] wireguard1: entered promiscuous mode [ 1374.764422][T27070] netlink: 40 bytes leftover after parsing attributes in process `syz.4.20158'. [ 1374.833860][T27056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20154'. [ 1375.283226][T27105] erspan0: entered promiscuous mode [ 1375.300793][T27105] erspan0: entered allmulticast mode [ 1375.432667][T27114] Cannot find add_set index 65532 as target [ 1375.675748][T27129] netlink: 'syz.1.20181': attribute type 24 has an invalid length. [ 1375.694458][T27129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1375.744924][T27134] netlink: 'syz.4.20183': attribute type 1 has an invalid length. [ 1376.362226][T27165] FAULT_INJECTION: forcing a failure. [ 1376.362226][T27165] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.374968][T27165] CPU: 0 UID: 0 PID: 27165 Comm: syz.0.20193 Not tainted syzkaller #0 PREEMPT(full) [ 1376.374996][T27165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1376.375011][T27165] Call Trace: [ 1376.375020][T27165] [ 1376.375031][T27165] dump_stack_lvl+0xe8/0x150 [ 1376.375067][T27165] should_fail_ex+0x412/0x560 [ 1376.375098][T27165] should_failslab+0xa8/0x100 [ 1376.375123][T27165] ? skb_clone+0x212/0x3a0 [ 1376.375154][T27165] kmem_cache_alloc_noprof+0x87/0x650 [ 1376.375189][T27165] ? __bpf_redirect+0x9b4/0x12a0 [ 1376.375219][T27165] skb_clone+0x212/0x3a0 [ 1376.375253][T27165] bpf_clone_redirect+0x16a/0x4b0 [ 1376.375289][T27165] ? bpf_test_run+0x1d1/0x830 [ 1376.375320][T27165] bpf_prog_bd919e7baf24f63c+0x5f/0x68 [ 1376.375344][T27165] ? __lock_acquire+0x6b5/0x2cf0 [ 1376.375396][T27165] ? ktime_get+0x45/0x200 [ 1376.375420][T27165] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1376.375442][T27165] ? lockdep_hardirqs_on+0x7a/0x110 [ 1376.375472][T27165] ? ktime_get+0x45/0x200 [ 1376.375489][T27165] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1376.375510][T27165] ? bpf_test_run+0x1d1/0x830 [ 1376.375537][T27165] ? bpf_test_timer_continue+0x10c/0x320 [ 1376.375567][T27165] bpf_test_run+0x354/0x830 [ 1376.375615][T27165] ? __pfx_bpf_test_run+0x10/0x10 [ 1376.375650][T27165] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1376.375681][T27165] ? slab_build_skb+0x52/0x410 [ 1376.375709][T27165] ? __kasan_krealloc+0xeb/0x110 [ 1376.375733][T27165] ? eth_type_trans+0x35e/0x6d0 [ 1376.375770][T27165] ? convert___skb_to_skb+0x3d/0x5b0 [ 1376.375797][T27165] bpf_prog_test_run_skb+0xd22/0x1c90 [ 1376.375836][T27165] ? __fget_files+0x2a/0x420 [ 1376.375864][T27165] ? __fget_files+0x3a0/0x420 [ 1376.375891][T27165] ? __fget_files+0x2a/0x420 [ 1376.375924][T27165] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1376.375948][T27165] bpf_prog_test_run+0x2c7/0x340 [ 1376.375974][T27165] __sys_bpf+0x643/0x950 [ 1376.376008][T27165] ? __pfx___sys_bpf+0x10/0x10 [ 1376.376057][T27165] ? ksys_write+0x242/0x270 [ 1376.376082][T27165] ? __pfx_ksys_write+0x10/0x10 [ 1376.376113][T27165] __x64_sys_bpf+0x7c/0x90 [ 1376.376142][T27165] do_syscall_64+0x14d/0xf80 [ 1376.376172][T27165] ? trace_irq_disable+0x3b/0x150 [ 1376.376202][T27165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.376223][T27165] ? clear_bhb_loop+0x40/0x90 [ 1376.376250][T27165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.376271][T27165] RIP: 0033:0x7f1c03f9c629 [ 1376.376292][T27165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1376.376311][T27165] RSP: 002b:00007f1c04f37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1376.376340][T27165] RAX: ffffffffffffffda RBX: 00007f1c04215fa0 RCX: 00007f1c03f9c629 [ 1376.376356][T27165] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1376.376370][T27165] RBP: 00007f1c04f37090 R08: 0000000000000000 R09: 0000000000000000 [ 1376.376383][T27165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1376.376396][T27165] R13: 00007f1c04216038 R14: 00007f1c04215fa0 R15: 00007fff00182fa8 [ 1376.376431][T27165] [ 1376.771936][T27136] syzkaller0 speed is unknown, defaulting to 1000 [ 1376.849437][T27150] nbd3: detected capacity change from 0 to 63 [ 1376.856404][T27155] block nbd3: NBD_DISCONNECT [ 1376.865375][T27155] block nbd3: Disconnected due to user request. [ 1376.873053][T27155] block nbd3: shutting down sockets [ 1376.882561][ C1] blk_print_req_error: 138 callbacks suppressed [ 1376.882580][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1376.898396][ C1] buffer_io_error: 18 callbacks suppressed [ 1376.898414][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1376.912176][ C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1376.921731][ C1] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1376.929617][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1376.939175][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1376.947065][ C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1376.956712][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1376.965789][T27169] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1377.013571][T27169] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1377.039620][T27169] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1377.089174][T27169] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1377.116343][T27169] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1377.139549][T27169] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1377.169421][T27169] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1377.200969][T27169] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1377.239732][T27169] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1377.288834][T27169] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1377.298651][T27181] netlink: 'syz.0.20198': attribute type 1 has an invalid length. [ 1377.319261][T27169] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1377.343579][T27169] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1377.371727][T27169] ldm_validate_partition_table(): Disk read failed. [ 1377.400058][T27169] Dev nbd3: unable to read RDB block 0 [ 1377.406271][T27169] nbd3: unable to read partition table [ 1377.439855][T27169] ldm_validate_partition_table(): Disk read failed. [ 1377.449783][T27169] Dev nbd3: unable to read RDB block 0 [ 1377.480941][T27169] nbd3: unable to read partition table [ 1377.746801][T27200] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1377.894366][T27204] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1377.951353][T27203] bond0: entered promiscuous mode [ 1377.957013][T27203] bond0: entered allmulticast mode [ 1377.963981][T27203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1378.223145][T27212] __nla_validate_parse: 6 callbacks suppressed [ 1378.223166][T27212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20208'. [ 1378.470047][T27221] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1379.028091][T27257] netlink: 'syz.2.20222': attribute type 1 has an invalid length. [ 1379.283771][T27272] C: Caught tx_queue_len zero misconfig [ 1379.579703][T27285] netlink: 80 bytes leftover after parsing attributes in process `syz.3.20230'. [ 1379.744323][T27291] openvswitch: netlink: IP tunnel dst address not specified [ 1379.756989][T27291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20234'. [ 1379.955403][T27300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20238'. [ 1379.990328][T27300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1380.122283][T27307] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20240'. [ 1380.156246][T27307] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1380.266155][T27319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20244'. [ 1380.292748][T27320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20244'. [ 1380.331215][T27322] netlink: 'syz.2.20245': attribute type 1 has an invalid length. [ 1380.392604][T27300] syzkaller0 speed is unknown, defaulting to 1000 [ 1380.738579][T27338] netlink: zone id is out of range [ 1380.752514][T27338] netlink: zone id is out of range [ 1380.757962][T27338] netlink: zone id is out of range [ 1380.764870][T27338] netlink: zone id is out of range [ 1380.770646][T27338] netlink: zone id is out of range [ 1380.807648][T27338] netlink: zone id is out of range [ 1380.829477][T27338] netlink: zone id is out of range [ 1380.901645][T27344] netlink: 40 bytes leftover after parsing attributes in process `syz.0.20253'. [ 1380.931282][T27344] ip6tnl0: Caught tx_queue_len zero misconfig [ 1381.185346][T27356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20254'. [ 1381.223893][T27356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20254'. [ 1381.426530][T27369] netlink: 'syz.3.20260': attribute type 21 has an invalid length. [ 1382.459596][T27421] syzkaller0: entered promiscuous mode [ 1382.465136][T27421] syzkaller0: entered allmulticast mode [ 1383.247632][T31505] lec:lec_start_xmit: lec0:No lecd attached [ 1384.270275][T27437] tipc: Enabling of bearer rejected, already enabled [ 1384.406315][T27450] __nla_validate_parse: 3 callbacks suppressed [ 1384.406338][T27450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20287'. [ 1384.428054][T27448] Unsupported ieee802154 address type: 0 [ 1384.434222][T27450] netlink: 212304 bytes leftover after parsing attributes in process `syz.3.20287'. [ 1384.449407][T27448] netlink: 276 bytes leftover after parsing attributes in process `syz.4.20288'. [ 1384.641293][T27474] netlink: 48 bytes leftover after parsing attributes in process `syz.1.20294'. [ 1384.845470][T27490] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20299'. [ 1384.994163][T27501] tipc: Enabling of bearer rejected, failed to enable media [ 1385.085240][T27506] netlink: 72 bytes leftover after parsing attributes in process `syz.2.20304'. [ 1385.207690][T27510] netlink: 68 bytes leftover after parsing attributes in process `syz.2.20306'. [ 1385.223480][T27510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20306'. [ 1385.254449][T27510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20306'. [ 1385.451552][T27526] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20312'. [ 1385.497294][T27527] netlink: 'syz.4.20309': attribute type 27 has an invalid length. [ 1385.522094][T27531] tipc: Enabling of bearer rejected, failed to enable media [ 1385.631692][T27533] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1386.674580][T27588] netlink: 'syz.0.20330': attribute type 10 has an invalid length. [ 1388.278122][T27681] xt_nat: multiple ranges no longer supported [ 1388.315899][T23845] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 20000 - 0 [ 1388.333319][T23845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1388.367549][T23845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1388.400340][T23845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1388.512032][T27692] sctp: [Deprecated]: syz.4.20365 (pid 27692) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1388.512032][T27692] Use struct sctp_sack_info instead [ 1388.611025][T27701] netlink: 'syz.0.20366': attribute type 1 has an invalid length. [ 1388.686747][T27701] ipt_rpfilter: unknown options [ 1388.730750][T27709] netlink: 'syz.3.20368': attribute type 10 has an invalid length. [ 1388.989087][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 1388.997154][ C0] lec:lec_tx_timeout: lec0 [ 1389.050373][T27726] bridge24: port 1(veth19) entered blocking state [ 1389.062188][T27726] bridge24: port 1(veth19) entered disabled state [ 1389.081595][T27726] veth19: entered allmulticast mode [ 1389.113381][T27726] veth19: entered promiscuous mode [ 1389.153805][T27728] bridge24: port 2(veth0_to_bond) entered blocking state [ 1389.219305][T27728] bridge24: port 2(veth0_to_bond) entered disabled state [ 1389.254442][T27728] veth0_to_bond: entered allmulticast mode [ 1389.271152][T27728] veth0_to_bond: entered promiscuous mode [ 1389.462114][T27752] __nla_validate_parse: 14 callbacks suppressed [ 1389.462135][T27752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20376'. [ 1389.493413][T27751] tipc: Enabled bearer , priority 0 [ 1389.601431][T27759] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20379'. [ 1389.619420][T27751] syzkaller0: entered promiscuous mode [ 1389.625079][T27751] syzkaller0: entered allmulticast mode [ 1389.652127][T27751] tipc: Resetting bearer [ 1389.682532][T27750] tipc: Resetting bearer [ 1389.691704][T27766] netlink: 'syz.4.20381': attribute type 10 has an invalid length. [ 1389.759963][T27770] netlink: 'syz.2.20380': attribute type 13 has an invalid length. [ 1389.796288][T27773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20382'. [ 1389.806034][T27773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20382'. [ 1391.671877][T27750] tipc: Disabling bearer [ 1391.781569][T27770] tipc: Resetting bearer [ 1391.821652][T27775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20382'. [ 1391.831340][T27775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20382'. [ 1391.864290][T27792] netlink: 'syz.1.20387': attribute type 2 has an invalid length. [ 1391.879971][T27792] netlink: 244 bytes leftover after parsing attributes in process `syz.1.20387'. [ 1391.950003][T27795] FAULT_INJECTION: forcing a failure. [ 1391.950003][T27795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1391.963950][T27795] CPU: 0 UID: 0 PID: 27795 Comm: syz.3.20389 Not tainted syzkaller #0 PREEMPT(full) [ 1391.963978][T27795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1391.963990][T27795] Call Trace: [ 1391.963999][T27795] [ 1391.964009][T27795] dump_stack_lvl+0xe8/0x150 [ 1391.964045][T27795] should_fail_ex+0x412/0x560 [ 1391.964076][T27795] _copy_from_user+0x2d/0xb0 [ 1391.964108][T27795] ___sys_sendmsg+0x1c6/0x360 [ 1391.964146][T27795] ? __pfx____sys_sendmsg+0x10/0x10 [ 1391.964216][T27795] ? __fget_files+0x2a/0x420 [ 1391.964246][T27795] ? __fget_files+0x3a0/0x420 [ 1391.964285][T27795] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1391.964319][T27795] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1391.964362][T27795] ? __pfx_ksys_write+0x10/0x10 [ 1391.964405][T27795] do_syscall_64+0x14d/0xf80 [ 1391.964436][T27795] ? trace_irq_disable+0x3b/0x150 [ 1391.964466][T27795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.964488][T27795] ? clear_bhb_loop+0x40/0x90 [ 1391.964515][T27795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.964537][T27795] RIP: 0033:0x7f4badd9c629 [ 1391.964556][T27795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1391.964576][T27795] RSP: 002b:00007f4baed08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1391.964599][T27795] RAX: ffffffffffffffda RBX: 00007f4bae015fa0 RCX: 00007f4badd9c629 [ 1391.964615][T27795] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 1391.964629][T27795] RBP: 00007f4baed08090 R08: 0000000000000000 R09: 0000000000000000 [ 1391.964642][T27795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1391.964656][T27795] R13: 00007f4bae016038 R14: 00007f4bae015fa0 R15: 00007ffce53a83b8 [ 1391.964690][T27795] [ 1392.195373][T27803] netlink: 'syz.2.20393': attribute type 1 has an invalid length. [ 1392.205887][T27800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20392'. [ 1392.228306][T27800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20392'. [ 1392.266507][T27800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20392'. [ 1392.280945][T27809] net_ratelimit: 9 callbacks suppressed [ 1392.280967][T27809] openvswitch: netlink: Flow key attr not present in new flow. [ 1392.371328][T27803] 8021q: adding VLAN 0 to HW filter on device bond30 [ 1392.431855][T27810] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1392.462234][T27810] bond30: (slave batadv1): making interface the new active one [ 1392.473769][T27810] bond30: (slave batadv1): Enslaving as an active interface with an up link [ 1392.762102][T27831] tipc: Enabling of bearer rejected, already enabled [ 1392.772520][T27831] sch_tbf: burst 8 is lower than device syzkaller0 mtu (299) ! [ 1393.210042][T27856] macvtap1: entered allmulticast mode [ 1393.215983][T27856] veth0_macvtap: entered allmulticast mode [ 1393.674459][T27893] openvswitch: netlink: Tunnel attr 3 has unexpected len 16 expected 1 [ 1393.951093][T27902] syzkaller0: entered promiscuous mode [ 1393.961811][T27902] syzkaller0: entered allmulticast mode [ 1394.211832][T27920] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 1394.500250][T27935] __nla_validate_parse: 14 callbacks suppressed [ 1394.500272][T27935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20442'. [ 1394.696112][T27950] netlink: 44 bytes leftover after parsing attributes in process `syz.4.20448'. [ 1394.834109][T27952] block nbd0: NBD_DISCONNECT [ 1395.043075][T27967] nbd: must specify a device to reconfigure [ 1395.100360][T27971] netlink: 296 bytes leftover after parsing attributes in process `syz.4.20456'. [ 1395.124126][T27976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20457'. [ 1395.280273][T27973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20458'. [ 1395.314262][T27984] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 1395.322947][T27984] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1395.430010][T27991] tipc: Resetting bearer [ 1395.459979][T27991] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20461'. [ 1395.506906][T27996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1395.666085][T28002] netlink: 'syz.3.20467': attribute type 2 has an invalid length. [ 1395.715652][T27986] tipc: Resetting bearer [ 1395.808809][T23843] tipc: Resetting bearer [ 1395.860044][T28017] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20471'. [ 1396.022484][T28024] veth23: entered allmulticast mode [ 1396.121606][T28040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20477'. [ 1396.242913][T28048] FAULT_INJECTION: forcing a failure. [ 1396.242913][T28048] name failslab, interval 1, probability 0, space 0, times 0 [ 1396.290227][T28048] CPU: 0 UID: 0 PID: 28048 Comm: syz.3.20481 Not tainted syzkaller #0 PREEMPT(full) [ 1396.290259][T28048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1396.290273][T28048] Call Trace: [ 1396.290282][T28048] [ 1396.290292][T28048] dump_stack_lvl+0xe8/0x150 [ 1396.290326][T28048] should_fail_ex+0x412/0x560 [ 1396.290358][T28048] should_failslab+0xa8/0x100 [ 1396.290386][T28048] __kmalloc_noprof+0xe8/0x760 [ 1396.290408][T28048] ? security_sk_alloc+0x52/0x360 [ 1396.290445][T28048] security_sk_alloc+0x52/0x360 [ 1396.290479][T28048] sk_prot_alloc+0x101/0x210 [ 1396.290506][T28048] ? sk_alloc+0x27/0x390 [ 1396.290536][T28048] sk_alloc+0x3a/0x390 [ 1396.290569][T28048] bpf_prog_test_run_skb+0x3ed/0x1c90 [ 1396.290609][T28048] ? __fget_files+0x2a/0x420 [ 1396.290638][T28048] ? __fget_files+0x3a0/0x420 [ 1396.290665][T28048] ? __fget_files+0x2a/0x420 [ 1396.290700][T28048] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1396.290725][T28048] bpf_prog_test_run+0x2c7/0x340 [ 1396.290751][T28048] __sys_bpf+0x643/0x950 [ 1396.290794][T28048] ? __pfx___sys_bpf+0x10/0x10 [ 1396.290850][T28048] ? ksys_write+0x242/0x270 [ 1396.290875][T28048] ? __pfx_ksys_write+0x10/0x10 [ 1396.290905][T28048] __x64_sys_bpf+0x7c/0x90 [ 1396.290934][T28048] do_syscall_64+0x14d/0xf80 [ 1396.290966][T28048] ? trace_irq_disable+0x3b/0x150 [ 1396.290994][T28048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.291016][T28048] ? clear_bhb_loop+0x40/0x90 [ 1396.291043][T28048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.291064][T28048] RIP: 0033:0x7f4badd9c629 [ 1396.291085][T28048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1396.291103][T28048] RSP: 002b:00007f4baed08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1396.291125][T28048] RAX: ffffffffffffffda RBX: 00007f4bae015fa0 RCX: 00007f4badd9c629 [ 1396.291141][T28048] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 1396.291155][T28048] RBP: 00007f4baed08090 R08: 0000000000000000 R09: 0000000000000000 [ 1396.291168][T28048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1396.291180][T28048] R13: 00007f4bae016038 R14: 00007f4bae015fa0 R15: 00007ffce53a83b8 [ 1396.291215][T28048] [ 1396.846394][T28072] netlink: 'syz.1.20488': attribute type 1 has an invalid length. [ 1397.167429][T28093] sctp: [Deprecated]: syz.1.20492 (pid 28093) Use of int in max_burst socket option. [ 1397.167429][T28093] Use struct sctp_assoc_value instead [ 1397.216920][T28095] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1397.238023][T28093] A link change request failed with some changes committed already. Interface ªªªªª9 may have been left with an inconsistent configuration, please check. [ 1397.272475][T28103] netlink: 48 bytes leftover after parsing attributes in process `syz.1.20492'. [ 1397.382597][T28109] netlink: 'syz.0.20497': attribute type 1 has an invalid length. [ 1397.414357][T28109] netlink: 224 bytes leftover after parsing attributes in process `syz.0.20497'. [ 1397.906440][T28151] netlink: 'syz.4.20504': attribute type 1 has an invalid length. [ 1397.972842][T28138] syzkaller0: entered promiscuous mode [ 1397.986966][T28138] syzkaller0: entered allmulticast mode [ 1398.218665][ T29] audit: type=1800 audit(1772069916.048:14): pid=28166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.20513" name="memory.events" dev="tmpfs" ino=20789 res=0 errno=0 [ 1398.253269][ T29] audit: type=1804 audit(1772069916.048:15): pid=28166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.20513" name="/newroot/4116/memory.events" dev="tmpfs" ino=20789 res=1 errno=0 [ 1399.385134][T28184] netlink: 'syz.0.20517': attribute type 16 has an invalid length. [ 1399.440225][T28185] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 1399.457342][T28185] openvswitch: netlink: Missing valid actions attribute. [ 1399.464966][T28185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1399.477406][T28185] netlink: 'syz.0.20517': attribute type 21 has an invalid length. [ 1400.403351][T28202] nbd: must specify a size in bytes for the device [ 1400.955040][T28236] __nla_validate_parse: 13 callbacks suppressed [ 1400.955063][T28236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20533'. [ 1401.002836][T28239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20535'. [ 1401.049250][T28236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20533'. [ 1401.344327][T28216] syzkaller0 speed is unknown, defaulting to 1000 [ 1401.371537][T28252] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20537'. [ 1401.491233][T28255] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1401.912626][T28268] tipc: Resetting bearer [ 1402.026962][T28267] tipc: Resetting bearer [ 1402.262051][T28292] netlink: 32 bytes leftover after parsing attributes in process `syz.2.20548'. [ 1402.462117][T28307] netlink: 48 bytes leftover after parsing attributes in process `syz.3.20553'. [ 1402.512154][T28310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20554'. [ 1402.651013][T28311] [ 1402.653418][T28311] ====================================================== [ 1402.660590][T28311] WARNING: possible circular locking dependency detected [ 1402.667658][T28311] syzkaller #0 Not tainted [ 1402.672113][T28311] ------------------------------------------------------ [ 1402.679166][T28311] syz.2.20554/28311 is trying to acquire lock: [ 1402.685354][T28311] ffffffff8fd47ad8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_del_node+0x57d/0xbb0 [ 1402.694575][T28311] [ 1402.694575][T28311] but task is already holding lock: [ 1402.701982][T28311] ffff8880778b9d70 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0 [ 1402.711335][T28311] [ 1402.711335][T28311] which lock already depends on the new lock. [ 1402.711335][T28311] [ 1402.721782][T28311] [ 1402.721782][T28311] the existing dependency chain (in reverse order) is: [ 1402.730838][T28311] [ 1402.730838][T28311] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1402.738895][T28311] _raw_spin_lock_bh+0x36/0x50 [ 1402.744241][T28311] nr_rt_device_down+0x153/0x860 [ 1402.749776][T28311] nr_device_event+0x137/0x150 [ 1402.755119][T28311] notifier_call_chain+0x1be/0x400 [ 1402.760808][T28311] __dev_notify_flags+0x16d/0x310 [ 1402.766418][T28311] netif_change_flags+0xe8/0x1a0 [ 1402.772029][T28311] dev_change_flags+0x130/0x260 [ 1402.777499][T28311] dev_ioctl+0x7b4/0x1150 [ 1402.782401][T28311] sock_do_ioctl+0x23e/0x320 [ 1402.787560][T28311] sock_ioctl+0x5c6/0x7f0 [ 1402.792452][T28311] __se_sys_ioctl+0xfc/0x170 [ 1402.797628][T28311] do_syscall_64+0x14d/0xf80 [ 1402.802807][T28311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.809266][T28311] [ 1402.809266][T28311] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1402.817155][T28311] _raw_spin_lock_bh+0x36/0x50 [ 1402.822504][T28311] nr_rt_device_down+0xbe/0x860 [ 1402.827938][T28311] nr_device_event+0x137/0x150 [ 1402.833277][T28311] notifier_call_chain+0x1be/0x400 [ 1402.839062][T28311] __dev_notify_flags+0x16d/0x310 [ 1402.844664][T28311] netif_change_flags+0xe8/0x1a0 [ 1402.850179][T28311] dev_change_flags+0x130/0x260 [ 1402.855614][T28311] dev_ioctl+0x7b4/0x1150 [ 1402.860513][T28311] sock_do_ioctl+0x23e/0x320 [ 1402.865676][T28311] sock_ioctl+0x5c6/0x7f0 [ 1402.870569][T28311] __se_sys_ioctl+0xfc/0x170 [ 1402.875772][T28311] do_syscall_64+0x14d/0xf80 [ 1402.880947][T28311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.887421][T28311] [ 1402.887421][T28311] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1402.895383][T28311] __lock_acquire+0x15a5/0x2cf0 [ 1402.900824][T28311] lock_acquire+0xf0/0x2e0 [ 1402.905907][T28311] _raw_spin_lock_bh+0x36/0x50 [ 1402.911253][T28311] nr_del_node+0x57d/0xbb0 [ 1402.916248][T28311] nr_rt_ioctl+0xb34/0xf90 [ 1402.921241][T28311] sock_do_ioctl+0x101/0x320 [ 1402.926406][T28311] sock_ioctl+0x5c6/0x7f0 [ 1402.931338][T28311] __se_sys_ioctl+0xfc/0x170 [ 1402.936503][T28311] do_syscall_64+0x14d/0xf80 [ 1402.941668][T28311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.948134][T28311] [ 1402.948134][T28311] other info that might help us debug this: [ 1402.948134][T28311] [ 1402.958404][T28311] Chain exists of: [ 1402.958404][T28311] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1402.958404][T28311] [ 1402.972416][T28311] Possible unsafe locking scenario: [ 1402.972416][T28311] [ 1402.979913][T28311] CPU0 CPU1 [ 1402.985320][T28311] ---- ---- [ 1402.990730][T28311] lock(&nr_node->node_lock); [ 1402.995546][T28311] lock(nr_node_list_lock); [ 1403.002705][T28311] lock(&nr_node->node_lock); [ 1403.010050][T28311] lock(nr_neigh_list_lock); [ 1403.014781][T28311] [ 1403.014781][T28311] *** DEADLOCK *** [ 1403.014781][T28311] [ 1403.022961][T28311] 2 locks held by syz.2.20554/28311: [ 1403.028290][T28311] #0: ffffffff8fd47b38 (nr_node_list_lock){+...}-{3:3}, at: nr_del_node+0x253/0xbb0 [ 1403.037726][T23871] tipc: Resetting bearer [ 1403.038032][T28311] #1: ffff8880778b9d70 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0 [ 1403.053482][T28311] [ 1403.053482][T28311] stack backtrace: [ 1403.059413][T28311] CPU: 1 UID: 0 PID: 28311 Comm: syz.2.20554 Not tainted syzkaller #0 PREEMPT(full) [ 1403.059444][T28311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1403.059459][T28311] Call Trace: [ 1403.059467][T28311] [ 1403.059478][T28311] dump_stack_lvl+0xe8/0x150 [ 1403.059513][T28311] print_circular_bug+0x2e1/0x300 [ 1403.059551][T28311] check_noncircular+0x12e/0x150 [ 1403.059588][T28311] __lock_acquire+0x15a5/0x2cf0 [ 1403.059629][T28311] lock_acquire+0xf0/0x2e0 [ 1403.059655][T28311] ? nr_del_node+0x57d/0xbb0 [ 1403.059688][T28311] ? nr_del_node+0x247/0xbb0 [ 1403.059722][T28311] ? nr_del_node+0x57d/0xbb0 [ 1403.059751][T28311] _raw_spin_lock_bh+0x36/0x50 [ 1403.059778][T28311] ? nr_del_node+0x57d/0xbb0 [ 1403.059810][T28311] nr_del_node+0x57d/0xbb0 [ 1403.059846][T28311] nr_rt_ioctl+0xb34/0xf90 [ 1403.059882][T28311] ? kasan_quarantine_put+0xbb/0x1f0 [ 1403.059904][T28311] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1403.059944][T28311] ? apparmor_capable+0x137/0x1a0 [ 1403.059980][T28311] ? capable+0x88/0xe0 [ 1403.060008][T28311] ? nr_ioctl+0x1b1/0x3b0 [ 1403.060037][T28311] sock_do_ioctl+0x101/0x320 [ 1403.060061][T28311] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1403.060081][T28311] ? do_futex+0x333/0x420 [ 1403.060116][T28311] sock_ioctl+0x5c6/0x7f0 [ 1403.060138][T28311] ? __pfx_sock_ioctl+0x10/0x10 [ 1403.060159][T28311] ? __fget_files+0x2a/0x420 [ 1403.060188][T28311] ? __fget_files+0x3a0/0x420 [ 1403.060216][T28311] ? __fget_files+0x2a/0x420 [ 1403.060247][T28311] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1403.060272][T28311] ? __pfx_sock_ioctl+0x10/0x10 [ 1403.060293][T28311] __se_sys_ioctl+0xfc/0x170 [ 1403.060318][T28311] do_syscall_64+0x14d/0xf80 [ 1403.060372][T28311] ? trace_irq_disable+0x3b/0x150 [ 1403.060411][T28311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.060433][T28311] ? clear_bhb_loop+0x40/0x90 [ 1403.060458][T28311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.060480][T28311] RIP: 0033:0x7fd08879c629 [ 1403.060500][T28311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1403.060519][T28311] RSP: 002b:00007fd089622028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1403.060543][T28311] RAX: ffffffffffffffda RBX: 00007fd088a16090 RCX: 00007fd08879c629 [ 1403.060559][T28311] RDX: 0000200000000140 RSI: 000000000000890c RDI: 000000000000000e [ 1403.060574][T28311] RBP: 00007fd088832b39 R08: 0000000000000000 R09: 0000000000000000 [ 1403.060588][T28311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1403.060600][T28311] R13: 00007fd088a16128 R14: 00007fd088a16090 R15: 00007ffdbd10dcb8 [ 1403.060627][T28311]