last executing test programs: 21.229846187s ago: executing program 0 (id=944): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@delqdisc={0x34, 0x25, 0x400, 0x70bd28, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff3}, {0x5, 0xc}, {0xfff1, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0xfffffd3c, 0xd, 0xfffffffe}]}, 0x34}}, 0x20040084) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x8, 0x12) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05032200d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x480c1}, 0x20008054) 21.028849315s ago: executing program 1 (id=948): openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 20.780555613s ago: executing program 0 (id=949): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000001780)={0x1, 'vlan1\x00', {}, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000000500000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffdcf}, 0x70) 20.488362278s ago: executing program 4 (id=951): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa0833}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31}]}}}]}, 0x3c}}, 0x80) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb0, 0x1403, 0x800, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 20.249018281s ago: executing program 1 (id=953): syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0xe, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) connect$unix(r2, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", 'O\x00', "ecba26893bcdc493"}, 0x28) write$tun(r2, &(0x7f0000000280)=ANY=[], 0xfdef) sendmsg$nl_route_sched(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000080c0)=@newtaction={0x58, 0x31, 0x901, 0x0, 0x0, {}, [{0x44, 0x1, [@m_nat={0x40, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "02122a1364ca4168600ce2c275478c859e"}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000000)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @random, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000180)=@ctrl_frame=@ack={{}, {0x914}, @broadcast}, 0xa) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, 0x0, 0x0) 20.092487403s ago: executing program 0 (id=954): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2a, 0x25df5bfb, {0x0, 0x0, 0x0, r1, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}}, 0x2000a100) 19.448500466s ago: executing program 4 (id=955): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000040)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @local, @remote, @multicast, @mcast1}}}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x80, 0x8}, @timestamp, @timestamp, @window={0x3, 0x100, 0x9}], 0x4) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x18, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2, 0x300}}, 0x18}, 0x1, 0x5502000000000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 19.173324742s ago: executing program 3 (id=956): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'vlan0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r2, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r3, &(0x7f00000007c0)={&(0x7f0000000200)={0x2c, 0x2, 0x0, 0x3d}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000240)="200db1552304f33df6349169062c57f490eb55d60b6b9693cae878b2a797c34abe8b479031ed3c7e43116a0a5c29fb53f0f623d9831a6f231fca7e35798ee8c5ee5f1f22813c4232ea85b3b0526db6d101ec0f06863d9ae881a75b1abc0a055860a07c", 0x63}, {&(0x7f00000002c0)="c7e754ce7ce79773d9921d1fba701c80416bf296061cc467b07d825656d167e14d10f8d67a1505e4ace33f4e1244db1d24aa85f17d823c054aabed19cbe87737aa1a288d69bacaf0cad5babeb31a5ddb9241fd0a89e29d61c61e810de2d106fbdb6c76f64f0d5d4048909654dc4cc5c8da182a9a09871c054cb79f821bacebd640fe0d1aab665ea32d96dc200ca23050723f39539d54aa5de8bfe69ae36161ca823ed7b528d86ba8bce79e37d678dcc18801c309f48ceacf4dabc7b8bde08759544e8a527abb9236792bfffcf6308f1d7332b1fb8ab10eaa6718144adcd859cb", 0xe0}, {&(0x7f00000003c0)="47b3dd", 0x3}, {&(0x7f0000000400)="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", 0xfb}, {&(0x7f0000000500)="90a7a7c0ae54fbb1bd89bdf56ce43647cc521c7fab82769fdfbf7e0ab91f8f6d76f0409a4ab48475d38b75d1e63775da807b9f103f2a52db5af869b8d44c15e7734a4872f35af2a5b9cca6fbab2ef51d1a4fde5d8d5cf2042583228d8c923b62230c9441b78a2323d51fba210bece4", 0x6f}, {&(0x7f0000000580)="023127b9360841fc4a2963e8eba18b361f69ba097f72ad2287b4c9a52063de4a442a9707626c08bce9ae0b321bd1a3110ec7c84ca8ecafc85126ec7549c59753f1c8b4c5f18e2c01cef007f138902930d702515d3f572432fe52fd41d720c5d33efae12012bd2f821b34a72ef688c1b9e748850a0877db363fd7d4b8956907e485ad5eefc84789f889f8cd7187fdad7754dd40928650e961c8786ae98888584f8e42a410b6c534fb60721e4550de03b4f05355245f3828e08388fe45095eba21b7f9582b3cddca2116c74ca2c9ab53ab7a9c066fb9", 0xd5}, {&(0x7f0000000680)="a96442865ac04e8b5f924fcbb4beab0ccfedae8846e3198c490bb12848748cfcabd816cdb13612d20172bac1c71acebe8e3eee4ea915887bcd9b5215d6af2ee8678ce32160e2f90706a0d9465428f9de4f803058d8a953dcb87e9b5febb3a51094cb97009f5664f7b99364ae87df252a78244e8a66c66727fe6c68dd3f068487e8cf4535a4db937330706642", 0x8c}], 0x7, 0x0, 0x0, 0x48800}, 0xc004) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x60, r2, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x400}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x40880) setsockopt$sock_int(r0, 0x1, 0x13, &(0x7f0000000940)=0x3, 0x4) (async, rerun: 64) r4 = socket$packet(0x11, 0x1, 0x300) (rerun: 64) setsockopt$packet_int(r4, 0x107, 0x11, &(0x7f0000000980)=0x10000, 0x4) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000b00)={'gretap0\x00', &(0x7f0000000a00)={'tunl0\x00', 0x0, 0x700, 0x8000, 0xfffffffe, 0x3, {{0x2d, 0x4, 0x3, 0x0, 0xb4, 0x68, 0x0, 0x0, 0x2f, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x1c, 0x53, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x6}, {@loopback, 0x6}, {@empty, 0x58000000}]}, @ssrr={0x89, 0x27, 0x10, [@remote, @multicast2, @empty, @multicast1, @multicast2, @remote, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x24}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0x44, 0x1, 0x7, [{@multicast1, 0xd}, {@multicast2, 0x4}, {@multicast2, 0x23f}, {@remote, 0xd2}, {@local, 0x7}]}, @ssrr={0x89, 0x13, 0x7d, [@dev={0xac, 0x14, 0x14, 0x3b}, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x7, 0x8f, [@multicast2]}, @ssrr={0x89, 0x13, 0xc3, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, @empty]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000b40)={'wg1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)=@RTM_NEWMDB={0x58, 0x54, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x2, 0x4, {@ip4=@dev={0xac, 0x14, 0x14, 0x2f}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x1, 0x0, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x40441) (async, rerun: 32) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000001f00)={{r5, &(0x7f0000000e00)='gretap0\x00', 0x8080, &(0x7f0000000e40)={@_ha_fsid={[0xffff, 0x7]}, {0x4, 0xfae, 0x1, 0x7f}}, 0xfffffffb, &(0x7f0000000e80)={@_ha_fsid}, &(0x7f0000000ec0)=0x7}, {[0x7fffffff, 0x1ff, 0xf, 0x3]}, 0x6, 0x1000, &(0x7f0000000f00)=""/4096}) (rerun: 32) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x2e, 0x61, 0x30, 0x61]}}, &(0x7f0000000cc0)=""/218, 0x1e, 0xda, 0x1, 0x2, 0x10000, @value=r8}, 0x28) ioctl$NILFS_IOCTL_GET_SUINFO(r5, 0x80186e84, &(0x7f0000002000)={&(0x7f0000001f80)=[{0x1, 0x3, 0x2}, {0x1d, 0x3}, {0x1, 0x1000, 0x2}, {0x0, 0x395, 0x1}, {0xffffffffffff1f7b, 0x91b8, 0x1}, {0x2, 0x80000000, 0x1}], 0x6, 0x10, 0x5, 0x4}) (async, rerun: 32) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002040)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x6, '\x00', r7, r9, 0x2, 0x2, 0x3}, 0x50) (rerun: 32) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r10, 0xc0385868, &(0x7f00000021c0)={r5, &(0x7f00000020c0)='t{\x00', 0x200000, &(0x7f0000002100)={@_ha_fsid={[0x2, 0xd47d]}, {0x3ff, 0x0, 0x9, 0xffffffffffffffff}}, 0x7, &(0x7f0000002140)={@_ha_fsid}, &(0x7f0000002180)}) (async, rerun: 64) r12 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r13 = syz_genetlink_get_family_id$fou(&(0x7f0000002240), r11) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002300)={'syztnl0\x00', &(0x7f0000002280)={'erspan0\x00', r6, 0x8, 0x10, 0x8, 0x1, {{0xd, 0x4, 0x0, 0x33, 0x34, 0x66, 0x0, 0x5f, 0x29, 0x0, @broadcast, @broadcast, {[@timestamp_addr={0x44, 0x14, 0xd4, 0x1, 0x0, [{@empty, 0xff}, {@private=0xa010101, 0x800}]}, @rr={0x7, 0xb, 0x3c, [@dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0x3e}]}]}}}}}) sendmsg$FOU_CMD_DEL(r12, &(0x7f0000002400)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x64, r13, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r14}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0xc011}, 0x4014) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002480), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r15, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x14, r16, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0xc2000008}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x24, 0x0, 0x100, 0x7, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24040014) 18.82719612s ago: executing program 2 (id=957): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1}]}, 0x50}, 0x1, 0x7}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x786c4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x3, 0x2}, 0x10) 18.741522145s ago: executing program 0 (id=958): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@fallback=r1, r0, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@fallback=r1, r0, 0x2f, 0x2028, 0x4, @void, @void, @value=r2}, 0x20) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x1, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x3, 0x8}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtclass={0x58, 0x28, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff2, 0x9}, {0xa, 0x6}, {0x2, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @TCA_RATE={0x6, 0x5, {0xd, 0xe}}, @TCA_RATE={0x6, 0x5, {0x26, 0x6}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0x2}}]}, 0x58}}, 0x20040054) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7}, &(0x7f0000000840), &(0x7f0000000880)=r8}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0x806000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x16, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xeff1, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x636}, 0x94) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x11) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r11, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000500)=0x14) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r12, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x5, 0x0, 0x0, {}, {}, {}, 0x2, @can={{0x3, 0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, "dc9caad646bd7611"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x300, 0x0, 0x0, 0x810}, 0x0) 18.740719015s ago: executing program 4 (id=959): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000000000000081804000000083526d85fded442e920000000000000000bb00"/49], 0x30}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x2, 0x0, 0xfd3c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000180)}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xb543, '\x00', 0x0, r2, 0x1, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x18, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x0, 0x1, 0x0, r2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_val={0x18, 0x7, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) 18.463046794s ago: executing program 4 (id=960): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0xfffc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket(0x400000000010, 0x3, 0x0) 18.425484667s ago: executing program 3 (id=961): r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_eee={0x45, 0x4, 0x6, 0x80000001, 0x81, 0x5, 0x100, 0x7, [0xd9bb, 0xd]}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'macvlan1\x00', 0x2}) (async) ioctl$TUNSETOWNER(r2, 0x400454d4, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = getpid() sendmsg$unix(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003140)="fa", 0x1}], 0x1, &(0x7f0000000900)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="00040000000000000000000001000000010000001b98778ceeb132d5a8753fab2f0fa3f74f5a063b4fd4c8b5a27a36db194b026b8315ef7d4fc9e4da2606eb654927a4688596997d8d178472f9340d1ad4e5076d3ae4f3972361b611ab93bdac54bffd25c5fd78343f6e6cc8e413dde13bf22d0485c2915c582a8925c9295a162e74276e6f55296a5751981b3152ea8913820a40961a9b0598253f324db00a1d"], 0x30}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) (async) r8 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/mnt\x00') (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r10) (async) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r10) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)={0x14, r11, 0x100, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x484}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fddbdf2514000000080001000000000008001c00", @ANYRES32=r6, @ANYBLOB="08001c00", @ANYRES32=r7, @ANYBLOB="08001d00", @ANYRES32=r8, @ANYBLOB="0800010000000000080001000100000008000300", @ANYRES32=r12, @ANYBLOB="c9036f91c9c3c326a4ad773f888b83c10398ddb520780faaf2d482ef095e38a0437a6e9578c51c711e4510ae24c174187127c90d8964cc0df8ae39e3bd59f24bcc8646f195bddebe5e6145a84bd15dab96905fdda4fabca4c617a593e1b9b6364e5411f912f1d8b4df364420e1fcaf983f206209e9c7dd069fd1cef877e2cd573aa18e3329c864132af9b83203d9bf37f8c009e688ad41ad6b70b4ceb13e9a96d04b04ac2bd3e46b3b4f58220fda8ccf3a0d0efb1362de825fb800ec08c2f89bc128641e7a93d8a5fd7c6c6f802629256588bbeffe6dbd4350edf7ea9fa7ce55dcef094ee5"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r13) sendmsg$NFC_CMD_DEP_LINK_UP(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010029bd70000700000004000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="05000a001d2c397c"], 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r3, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r14, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x3}]}, 0x3c}}, 0x20000001) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000055dd6abd69f9ea40eaa39707274b5cfb6860010000000099c9555ed38d34"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) (async) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00000000000000000009a7e00b13f00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, r16, 0x4}, 0x38) 18.353572596s ago: executing program 1 (id=962): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112cb000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "00000000e8460000ffffffff00"}}}]}, 0x48}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r4) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000300)=@ethtool_perm_addr={0x20, 0x6, "fbb020b1c236"}}) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 18.262936238s ago: executing program 2 (id=963): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x201, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x38, r1, 0x200, 0x70bd25, 0x25dfdc00, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xff, 0x27}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xfffffff1}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c801}, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xfe, r6}, [@IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) 17.942577149s ago: executing program 3 (id=964): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000001600)="2700000014000707030e0000120f0a000000008a151f7508003900000000000000000000000200", 0x27) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000340)) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001480)={{r3}, &(0x7f0000001400), &(0x7f0000001440)=r6}, 0x20) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket(0x28, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r10 = socket(0x400000000010, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r11, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x7, 0x1, 0x0, 0x40, 0x20}, @ipv4=@tipc={{0x1e, 0x4, 0x3, 0xc, 0xa8, 0x64, 0x0, 0x5, 0x6, 0x0, @empty, @remote, {[@timestamp_prespec={0x44, 0x54, 0x27, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe000000}, {@loopback, 0x6}, {@rand_addr=0x64010101, 0x2}, {@multicast2, 0x80000000}, {@private=0xa010101, 0xa}, {@multicast2, 0x1}, {@remote, 0x5}, {@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@multicast2, 0xde}]}, @timestamp={0x44, 0xc, 0xa, 0x0, 0x9, [0x7, 0x5]}, @noop]}}, @payload_mcast={{{{{{0x30, 0x0, 0x0, 0x0, 0x1, 0xb, 0x1, 0x2, 0xfff0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x8001, 0x7, 0x0, 0x4e20, 0x4e21}, 0x3, 0x4}, 0x4, 0x3}, 0x4}}, [0x0, 0x0, 0x0, 0x0]}}}, 0xb6) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r13, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4000000) ppoll(&(0x7f0000000180)=[{r13}], 0x1, &(0x7f0000001340), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd24, 0x8004, {0x0, 0x0, 0x0, r14, {0xe}, {}, {0xfffd, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24040812) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) r15 = socket(0x10, 0x80003, 0x0) write(r15, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) 17.888223762s ago: executing program 2 (id=965): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x6}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x89, &(0x7f0000000480), &(0x7f00000004c0)=0x4) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000440)={{0xffffffffffffffff, &(0x7f00000002c0)='\x00', 0x228400, &(0x7f0000000300)={@_ha_fsid={[0x6f73, 0xfaf2]}, {0x7ff0, 0x1acd, 0x4, 0x7fffffff}}, 0x1, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x80000001}, {[0x2, 0x8e6d, 0x78, 0x200]}, 0x7, 0x6e, &(0x7f00000003c0)=""/110}) r8 = accept$packet(r7, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000540)=0x14) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'pimreg\x00'}) (async) connect$inet(r7, &(0x7f00000004c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) r9 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) (async) sendmsg$inet_sctp(r9, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa00000000200000000000000084000000080000002001000000000000000000000000000020"], 0x58, 0x4855}, 0x24000052) (async) ioctl$HCIINQUIRY(r9, 0x800448f0, &(0x7f0000000000)={0x0, 0x8, "b77a31", 0x3c, 0x3a}) (async) r10 = socket$kcm(0x10, 0x2, 0x0) unshare(0x28000600) sendmsg$kcm(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) (async) r11 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000140)={r10, r11}) (async) select(0x40, &(0x7f0000000180)={0xf, 0xffffffffffff46de, 0x80000000, 0x2fa2, 0x80000001, 0x5, 0x9, 0x6}, &(0x7f0000000200)={0x7, 0x5, 0x6b, 0x100, 0x7fff, 0x8, 0x2, 0x6}, &(0x7f0000000240)={0x7, 0x401, 0x8, 0x8, 0x385f, 0xfffffffffffff000, 0x3ff, 0xb9c}, &(0x7f0000000280)={0x0, 0x2710}) 17.88592383s ago: executing program 4 (id=966): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000500)={r1, &(0x7f00000000c0)='syzkaller0\x00', 0x20c0, &(0x7f00000001c0)={@_ha_fsid={[0x9, 0x9]}, {0x8a8, 0x81, 0x0, 0x80000000}}, 0x7, &(0x7f0000000200), &(0x7f00000004c0)=0x9}) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000640)=0x21, 0x4) bind$bt_l2cap(r2, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000000140)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002340)=[{&(0x7f00000002c0)=""/172, 0xac}, {&(0x7f0000000380)=""/134, 0x86}, {&(0x7f0000000440)=""/100, 0x64}, {&(0x7f0000000580)=""/186, 0xba}, {&(0x7f0000000740)=""/231, 0xe7}, {&(0x7f0000000840)=""/117, 0x75}, {&(0x7f0000000900)=""/108, 0x6c}, {&(0x7f0000000980)=""/197, 0xc5}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)}], 0xa, &(0x7f0000002400)=""/46, 0x2e}, 0x100) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180)=0x84000000) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) clock_gettime(0x3, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000040)={r6, r7/1000+60000}, 0x10) accept4(r2, 0x0, 0x0, 0x80800) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r9, 0x0, 0x21, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r0, @ANYBLOB="8000b2000a000200"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) 17.84525265s ago: executing program 0 (id=967): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, 'k`\x00', "9a5d38a17f00571fa54a81b5ff0100", "a1c4776d"}, 0x3) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, 'k`\x00', "9a5d38a17f00571fa54a81b5ff0100", "a1c4776d"}, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="aa8b001069e74139e1f92e5b0e6a4c5af34eacfe6e7eec44b5ff2b1deb3702545a61fb82b51bfceac427161bc2a7835928c3342ee5f373bf343f480f048b8d37530e9c2cb0efdc70b1502a", @ANYRES16=r4, @ANYBLOB="010127bd7000fedbdf254b00000008000300410000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac-aes-ce\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c0002400000000000000001090003"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$kcm(0x11, 0x3, 0x0) (async) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x0, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) (async) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="6ff24da163e4ba2a8cc35f79708bd0157bc1a8e6577e4c359cc4f1c61648e51ad78c68b541bed9e4afbd2afd1976504dcb88f5d5d85bc361fed731d45a38076a308b160e6d00659797", 0x49) 17.791895414s ago: executing program 1 (id=968): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x9e54f29ff072a93b}, 0x14}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="1180c2001e69de02aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000008e11e1583e31fe300000000498ae27dbd3c28f63b74df72d2a085a26e5ad600e977f2d1f09ace98b269491504cb384f65c52f141b2dfa1a3e09ef950b706dd4159d9d34d29bcae731d6439bab671d6eaf72cb0dd01469eb6f78f1648390dab01d1714e7d3c3041f1595bd0b20d2b5942a366d4c5ae640cdae50a04ddc1f3df28d78323535822975cd7f907811269fe9fa1aa8b6044b558089e0c500"/209], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 17.353686093s ago: executing program 2 (id=969): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x84, &(0x7f00000000c0)={r5, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0xfffffffd, 0x79b}, &(0x7f00000001c0)=0x9c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000088000000b7030000000800008500000010000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x8c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x0, 0x17, 0x1, 0x0, 0x4545}, @IPSET_ATTR_SIZE={0x0, 0x17, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x4b}, @IPSET_ATTR_NETMASK={0x0, 0x14, 0x63}, @IPSET_ATTR_BUCKETSIZE={0x0, 0x15, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x19}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7}, @IPSET_ATTR_TIMEOUT={0xfffffffffffffd0f, 0x6, 0x1, 0x0, 0x40}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x8c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 17.35300963s ago: executing program 1 (id=970): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) close(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002bbd70000000000000000000000000000000000000000001ac1414aa00000000000000810000000000000000000000000a00080000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000600000000004400050064010102000000000000000000000000000000003c00000002000000ac1414aa000000000000000000000000060000000403"], 0xfc}}, 0x0) r3 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0xa, 0x87, 0x4, @mcast2}, 0x1c, 0x0}, 0x922bac8556bdad8e) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x10000, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x1b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x2, 0x10, 0x1000000}}}}]}, 0x78}}, 0xc090) 17.202481752s ago: executing program 0 (id=971): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012000800280070cf00000c001980050006001400000008fe04"], 0x8c}}, 0x0) 16.94639103s ago: executing program 3 (id=972): r0 = socket$inet(0x2, 0xa, 0xa68) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x458, 0x2b8, 0xb8, 0xffffffff, 0x190, 0x2b8, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4=@empty, @port=0x4e21, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x2], 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x15, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast2, @icmp_id=0x67, @gre_key=0x4}}}}, {{@uncond, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0xf, 0x2, 0x2}}, @common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x18, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4=@local, @gre_key=0x200, @gre_key=0xfffe}}}, {{@ip={@loopback, @private=0xa010100, 0xffffff00, 0xff, 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x33, 0x1, 0x40}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e20], [0x4e21, 0x4e22], 0x5, 0xf, 0x2, 0x1}}, @common=@unspec=@cluster={{0x30}, {0x400, 0x1, 0x5}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x2, @multicast1, @loopback, @gre_key=0x8, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000540)=0xe8, &(0x7f0000000580)=0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000600)={0xffffffffffffffff}, 0x4) sendmsg$nl_generic(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x3d, 0x20, 0x70bd26, 0x25dfdbfb, {0xb}, [@typed={0x4, 0x165}, @typed={0x8, 0x1a, 0x0, 0x0, @fd=r3}, @nested={0x17, 0xd2, 0x0, 0x1, [@generic="27ed22f1bcff5377b55a58", @typed={0x8, 0xe1, 0x0, 0x0, @u32=0x800}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x48084) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000700)={0x0, 0x7ff, 0x0, 0x1}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = accept(r4, &(0x7f0000000b00)=@un=@abs, &(0x7f0000000b80)=0x80) r6 = getuid() sendmsg$nl_xfrm(r3, &(0x7f0000000d80)={&(0x7f0000000bc0), 0xc, &(0x7f0000000d40)={&(0x7f0000000c00)=@newsa={0x128, 0x10, 0x100, 0x70bd25, 0x25dfdbfb, {{@in6=@mcast1, @in6=@mcast1, 0x4e23, 0x8667, 0x4e20, 0x94f, 0x2, 0x20, 0x20, 0x89, 0x0, r6}, {@in=@private=0xa010102, 0x4d3, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x56a6, 0x4, 0x6, 0x100, 0x4, 0x7, 0x4}, {0x65c3, 0xf70f, 0x1, 0x6d5}, {0xfffff001, 0x1ff, 0x21c70000}, 0x70bd29, 0x3507, 0xa, 0x2, 0x0, 0x42}, [@coaddr={0x14, 0xe, @in6=@mcast2}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @etimer_thresh={0x8, 0xc, 0x3}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @policy_type={0xa}]}, 0x128}, 0x1, 0x0, 0x0, 0x4840}, 0x8000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000f80)={{r4, &(0x7f0000000dc0)='nat\x00', 0x40, &(0x7f0000000e00)={@_ha_fsid={[0x8, 0x118]}, {0xff4b, 0x9, 0xaf2, 0x80}}, 0x0, &(0x7f0000000e40), &(0x7f0000000e80)=0x4}, 0x1, &(0x7f0000000f40)=[{0x2, 0xdf, &(0x7f0000000ec0)='\x00', &(0x7f0000000f00)="77ab7cc5e6", 0x5, 0x20}]}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002080)={r7, 0x20, &(0x7f0000002040)={&(0x7f0000001000), 0x0, 0x0, &(0x7f0000001040)=""/4096, 0x1000}}, 0x10) setsockopt(r7, 0x1, 0x0, &(0x7f00000020c0)="184f715c79489d363cb6477bddebfcef425a85b1d6f942da69ba43f042a52c8454cbfec2fb428f0404acdf1f67eebb91aacbc9807fe6e19143ae670c3394b46a33", 0x41) setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000002140)=0x3, 0x4) ioctl$NILFS_IOCTL_RESIZE(r7, 0x40086e8b, &(0x7f0000002180)=0x80000000) vmsplice(r4, &(0x7f0000002480)=[{&(0x7f00000021c0)="d6b5a866231bbd2f815eda619a2f5d3fc83a3795c96b675fe560be2ccb0311ad9a2b195576f5739de59d1fc7b084f9a6e3fb30582954ca2bcb865b5c955769e6c4e51889d5bb48302d73b525efff9c3d42994ec5dfea5f1bef3414170f1a5be9cd49b9b250dd7c00e8dc2b54c0dc00bf2e19161427ebf7cabde8e21a0a448c18928b438f661466454f3b9f4ec83348ad0623861e16188c7653b55b330a01dc9e228a5f267f06a8db0f68be9016ef15b06a720f98071dd70b9c1886cb87302c2e870792e4", 0xc4}, {&(0x7f00000022c0)="60274b191cd3cddbd704275c74da73296c33a19bd41ee4855892381430d9008bab14c204f41797a7a5cc57db85ad736b7bf1622a5579e48993ecd5a2e064f91faccc9ec96e6257f6681c7e47da74df9228207353ed188114e681ade81bbe13fc96bce524f391b4c0f53a538e208e9588b29525d062271359ec82047b569678285b26f5c626ae8f7695972029bec69171a3f7a8", 0x93}, {&(0x7f0000002380)="af1cdb37483ef85eff6649309acd29676852af4893c322465e0cac8cbf39987a006543e2a4b28817b031aa51fefb5f02096496f192732d2f2a9468bb9480008be9243c1bd811a8babf51dcb3ec5eea57a7a6f2c070cf970c9cfc4d251ad3", 0x5e}, {&(0x7f0000002400)="89f32a9864384edff9d832a18f31484c1691f676363a7aa063b9ffd93ffe0902c896d621a06e729ba3a6ecf24117bea185ba99ab87858d534928e151794c6ff582a4950fb16036846dad565a1c6e45bc8a", 0x51}], 0x4, 0x9) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f00000024c0)={0x2c, @multicast2, 0x4e20, 0x0, 'lblcr\x00', 0xf, 0x7, 0x28}, 0x2c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000002500)={0x0, @in6={{0xa, 0x4e24, 0x5, @private2, 0xfae}}, 0x2, 0x1, 0x0, 0x7, 0x1, 0x6, 0xfd}, &(0x7f00000025c0)=0x9c) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000002600)=@assoc_value={r8, 0x3}, 0x8) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002680), r2) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000002780)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)={0x50, r9, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) setsockopt$inet_int(r4, 0x0, 0x1, &(0x7f00000027c0)=0x2, 0x4) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000002800)=0x1ff, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000002840)={0xffffffffffffffff, 0x1, 0xffff, 0x10}) bind$bt_sco(r10, &(0x7f0000002880)={0x1f, @none}, 0x8) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002900), r10) sendmsg$NL80211_CMD_START_NAN(r7, &(0x7f0000002a00)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x41000082}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x48, r11, 0x66749e63a28a7da2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x60}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x1800}, 0x4040800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x20, 0x1410, 0x8, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x40) 16.757674008s ago: executing program 4 (id=973): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2e042dbd7000fbdbdf25120000000c000600020400000000000005001300010000000c00060003000000000000000c00060001000000010000000c0006000300000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4004045) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x48, r1, 0x5eae78d9c54e9d3f, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}]}, 0x48}}, 0x40000) 16.206022955s ago: executing program 3 (id=974): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000001780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001740)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5a140000", @ANYRES16=0x0, @ANYBLOB="000427bd7000ffdbdf252d00000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x144c}, 0x1, 0x0, 0x0, 0x81}, 0xc0) sendmsg$nl_route_sched(r1, 0x0, 0x44000) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) 15.896628006s ago: executing program 3 (id=975): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe, 0x6d}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40081) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x44}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3e540d0176dd"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="fbbfd2a42d4b"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000048}, 0x44041) (async) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x44}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3e540d0176dd"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="fbbfd2a42d4b"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000048}, 0x44041) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x0, 0x0, 0x12, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x0, 0x700, 0x4}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x40, 0x40, 0x10, 0x3, {{0xe, 0x4, 0x0, 0x1, 0x38, 0x68, 0x0, 0x7e, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x24, 0x78, 0x0, 0x8, [0x2, 0x10001, 0x8, 0x4, 0x1, 0x7, 0x9, 0x3]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x700, 0x40, 0x2, 0x9, {{0x1a, 0x4, 0x1, 0x0, 0x68, 0x64, 0x0, 0xa, 0x2b, 0x0, @local, @remote, {[@ssrr={0x89, 0xb, 0x2c, [@broadcast, @private=0xa010102]}, @rr={0x7, 0xb, 0x71, [@empty, @broadcast]}, @timestamp_addr={0x44, 0xc, 0xd4, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x2d}, 0xa47f}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0xb4, 0x1, 0x8, [{@rand_addr=0x64010101, 0x10000}, {@multicast2, 0x7}, {@rand_addr=0x64010101, 0x2}, {@local}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x8}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x6, 0xfffffff9, 0x5c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x80, 0x1, 0x4, 0x7fff}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x6, 0xfffffff9, 0x5c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x80, 0x1, 0x4, 0x7fff}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000a00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x134, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x15699fa47bff567b}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000040}, 0x24040000) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000bc0)={&(0x7f0000000a40)=[{0x2, 0x0, 0x9, 0x5, 0x200000000, 0x2, 0xe, 0x1}, {0x3, 0x0, 0x1, 0x7, 0xff, 0x8, 0xffffffffffffffff, 0x9}, {0x1, 0x0, 0x100000000, 0x1, 0x8000, 0x8, 0x7, 0x10000}, {0x3, 0x0, 0x0, 0x5, 0x6, 0x36e, 0x0, 0x9}, {0x0, 0x0, 0xfffffffffffffffa, 0x1, 0x1, 0x8, 0x99, 0x8000}, {0x3, 0x0, 0x319, 0xb3, 0x7, 0x3ff2, 0x9, 0x6dc}], 0x6, 0x38, 0x1, 0xcc60}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, r9, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x200458dc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000d40), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000d40), 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, &(0x7f0000000e00)=0xc) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x3c, 0x3e9, 0x1, 0x70bd29, 0x25dfdbfb, {0x10, 0x0, 0x1, r10, 0x2, 0xfffffffc, 0x1, 0x3, 0x0, 0x79, 0x10000}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x44800) (async) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x3c, 0x3e9, 0x1, 0x70bd29, 0x25dfdbfb, {0x10, 0x0, 0x1, r10, 0x2, 0xfffffffc, 0x1, 0x3, 0x0, 0x79, 0x10000}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x44800) socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000f00)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000f40)=0x1c, 0x800) setsockopt$inet6_int(r14, 0x29, 0x33, &(0x7f0000000f80)=0x9, 0x4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000004, 0x11, r13, 0x70444000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_ENCODED_READ(r13, 0x80809440, &(0x7f0000001840)={&(0x7f00000017c0)=[{&(0x7f00000013c0)="cece2a6344a4d38fd3176e45e65abbb4ec40c8b83d6aa578f8b969a51836bb11df419230281385fef913d6c544c02f0d770f7a46399ca52ef4937617435f729edddfba4a2035b2839a2de43d8cf07f46231da54b999f44de0955848e5a57c147f443369318eb075e15b3", 0x6a}, {&(0x7f0000001440)="97014dacdbf238f42b2f40aeda5f43ded021c2fc640d58dec587a0", 0x1b}, {&(0x7f0000001480)="157bb032d6500025f6a264ab555bfe688bb2c2a12db62aca02b731ef56fe0ad21667eb7d7560e2719cef8ddb4248385107fb317e6c4855787e73abdab8955aebb7d5d94c8f06acd2e7a4d96cd2e4a5cc3295660e3df1fc324c23f5c4b7780e4e1f2630690b72eef20d044e", 0x6b}, {&(0x7f0000001500)="71bcb7099c99a4c41ac969380fc1cbb93a3217bbe1f86c6ab1efba6fdf5a61972c80c8b290eb43413c48a8c7c37e0633a86a17ed07594667d2d988f2f616187fa22ce2eac2af275880bbecc1f51d7dd04cfcd88e2fb55ca5a14d650bbfba7443cc779e93f461f1727364acba3db4fb1725bd2b180829d6ba720c556b64f43e2522ce36c6a2acfa228bb2fc5b95e33c674fa4566129653d6f922e615c651c9fbb215dee", 0xa3}, {&(0x7f00000015c0)="6c6f5e100e03aee48f55541edb9ecc9cdace6925a82a4c98b480d279366ab981f360797357e6d816b0aa97e3a2606bfcbe969c36c6d4b50e296012d794c5680f6cc9e107e1425c39b4d26bf51ec5887f46a1daa953ad658038fc3c60d17cbbc3d63c6657ad", 0x65}, {&(0x7f0000001640)="9a342fcd2ed54ba2170ded04dcbf344fa781dde7700a9046768c3d13dcac2aabbb", 0x21}, {&(0x7f0000001680)="40f08dc5b7e9df32588e4f46017fb6fd5c50f96e5f7152ad08cb1d54657d1a89bbebc7688a7c45b32041f5b232ad770f68c4019a842bcf05920ade4f8e8bb2115ef84fa94e313b2ca11660b5adb581cbd661d31908184ca23469f162ed52fbe713", 0x61}, {&(0x7f0000001700)="23099cd1eb9900c4d8d0de67e8b6d4c7421c29dd4e960fe9b7cd9f5fe9df96e5898915aaa9ad488dede4dae278325f14911e05fc3d9332aaae67110395ce6c072dcf52b267831618c58b0adac273812ef822a4f4148b5c5697d7cc275244f73f606defd8aa45eeb194b33af7a7e066b635706cdc60849cbc7e43cf53c8bdfa3023b8ae02463bc4956ad38636c86054b8ea6d866b778899ede4016d94bc4a561f4c235e24b8b519fd90616a33f7a6fecb", 0xb0}], 0x8, 0x2, 0x0, 0x2, 0x8000, 0x3, 0x8, 0x7}) getsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000001b80)={{{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6}}, &(0x7f0000001c80)=0xe8) socket$pptp(0x18, 0x1, 0x2) (async) r16 = socket$pptp(0x18, 0x1, 0x2) sendmsg$netlink(r13, &(0x7f0000001d80)={&(0x7f00000018c0)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001b40)=[{&(0x7f0000001900)={0x220, 0x3a, 0x1, 0x70bd27, 0x25dfdbfb, "", [@nested={0xa9, 0xe0, 0x0, 0x1, [@nested={0x4, 0x60}, @generic="25ccb7f6176b306ce46a8fe80e51832c83443ef3de418758fdedc164e66243a513a205fb805c36ce032a5a68a18771cfd03648ca387a662ab9814f0dfd6753801430613bebd8be9d8b5006517aa8fb11b935bb3ff2aa63afbe7dfddb582a7d07e9d11695747c41859e961407ad1d513c51bd05bd823fee919d2c05e91e51754001b62896345c124f87a34c402d96c34df6d8015a25", @nested={0x4, 0xd2}, @typed={0x5, 0x10d, 0x0, 0x0, @str='\x00'}]}, @generic="508f4146a5114a04798e9426a369a7defa9c791aa9226f1f7faa42495350995b8f33fa4149f7369e1d20dee71c4d6b52b49b7ccabdd27243aa96e59f537ce9b24b1a8bd388fba1b280e487fc1a3ac9993e309a4e57e5ca8893e92c0c35357bf7b2ef5c3ce9fd99c65de00fdf95a337428790b9932a8fd8c49c0ff926de7867ce9a644e1aa55fc35a0475c3cbb84940c1e89d6fc68a6de90ec240235e7c181710b31bdbc7689f9c616360c9b1181e9ad5d734ecc56827aa23e61762e1cb4a49f5880d5f8a9bd4a83958cbb84e5552d329896dbde44f9489003616004bdb789c18", @typed={0xc, 0x5, 0x0, 0x0, @u64=0x100000000}, @typed={0x5, 0xc3, 0x0, 0x0, @str='\x00'}, @nested={0x6f, 0x6c, 0x0, 0x1, [@nested={0x4, 0x87}, @nested={0x4, 0x127}, @generic="acafde109af07adb56596601ac509bad81491a13f46a1d6c4f98f7131fc54a69a6b3767809a3b72c69ef343a52951277bbc1ceac924e046bd5e1fe4315cd49ff560b9c007e3865b62577c65d6efe06449b1c5a59921bd5721b32771ef46e2a856518bf"]}]}, 0x220}], 0x1, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, r12}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r15}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @rights={{0x18, 0x1, 0x1, [r14, r16]}}, @rights={{0x24, 0x1, 0x1, [r0, r14, r0, r0, r13]}}], 0xb8, 0x4001}, 0x1) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r14, 0x84, 0x77, &(0x7f0000001dc0)={0x0, 0xe, 0x6, [0x80, 0x3, 0x5c0, 0x3, 0x1, 0xd]}, &(0x7f0000001e00)=0x14) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r14, 0x84, 0x76, &(0x7f0000001e40)={r17, 0x885}, &(0x7f0000001e80)=0x8) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r14, 0x84, 0x76, &(0x7f0000001e40)={r17, 0x885}, &(0x7f0000001e80)=0x8) 15.719602881s ago: executing program 1 (id=976): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r1}, 0x2, 0x2, 0x15}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000ff000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x400000000010, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x10}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xfff5, 0x10}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xc3f, 0x2, 0x1, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56) pipe(&(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) 15.717171538s ago: executing program 2 (id=977): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffffffffffe01}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r1, &(0x7f0000002280)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e22, 0x80003, @remote, 0xfffffffd}, 0x15, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYRESHEX], 0x18}}], 0x2, 0x20044800) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$XFS_IOC_GETPARENTS(r1, 0xc028583e, &(0x7f00000001c0)={{[0x0, 0x6, 0x0, 0xb]}, 0x0, 0x0, 0x9, 0x0, &(0x7f00000000c0)=[{{@align=0x4cb, {0x800, 0x401, 0x5, 0x9}}, 0x0, 0x0, '$\x00'}, {{@_ha_fsid={[0xc0000000, 0x4b5c]}, {0x667, 0xd805, 0x8001, 0x1}}, 0x7, 0x0, '\x00'}, {{@align=0x2, {0x6, 0x7, 0x0, 0x7}}, 0x80000000, 0x0, 'team0\x00'}, {{@align=0x3, {0x81, 0x1, 0xc2}}, 0x9, 0x0, '\x00'}, {{@align=0x9, {0x0, 0x2, 0x598, 0x101}}, 0xfffffff8, 0x0, '/[\x00'}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@bridge_delvlan={0x30, 0x71, 0x1, 0x70bd25, 0x25dfdbfc, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xc}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x4001) r4 = accept$inet(r3, &(0x7f0000000380)={0x2, 0x0, @loopback}, &(0x7f00000003c0)=0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000400)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000500)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e24, 0x3, 0x4e22, 0x9ce, 0xa, 0xa0, 0x20, 0x33, r2, r5}, {0x3, 0x1, 0xc, 0x401, 0x8, 0x80, 0x8, 0x1}, {0x49ad, 0x1, 0x71ba, 0xda}, 0x5, 0x6e6bb8, 0x1, 0x1, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x32}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3507, 0x4, 0x3, 0xb4, 0x1ff, 0xe}}, 0xe8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)='2', 0x1}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0x40048000) accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.360959682s ago: executing program 2 (id=978): r0 = socket$inet6(0x10, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) accept$unix(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=0x6e) shutdown(r0, 0x0) shutdown(r1, 0x1) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000001240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001200)={&(0x7f00000007c0)={0xa1c, r5, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x468, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x81}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1f}]}, {0x390, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x220, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x8, 0x6, 0x1, 0x3, 0x3, 0x6]}}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xc, 0x30, 0x12, 0x77, 0x30, 0x4, 0x1b, 0x12, 0x24, 0x30, 0x5, 0x25, 0x4, 0x9, 0x30, 0x24, 0x6, 0x6c, 0x1, 0x60, 0x4, 0xc, 0x6, 0x2, 0x5, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb751, 0x1, 0xf666, 0x4, 0x1, 0x6, 0x7, 0xe22]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0x7fff, 0x4590, 0x7f, 0x7f, 0x8, 0x9, 0x9d9f]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x6, 0x6, 0x8, 0x1, 0x400, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x5, 0x3, 0x5, 0x4, 0x24, 0x60, 0x3, 0x0, 0x1, 0x9, 0x60, 0xb, 0x9, 0x0, 0x12, 0x2f, 0x48, 0x6, 0x16, 0x48, 0x16, 0x5, 0x30, 0x30, 0x6, 0x4, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0x1, 0x1, 0x9, 0x6, 0x8, 0xc]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x2, 0x9, 0xafe, 0x1, 0x57, 0x8000]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xfff, 0xfff, 0x0, 0xd, 0xfffe, 0x9, 0x1]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0x4}]}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x4, 0xd, 0x8000, 0xfff2, 0x5, 0x8001, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x4}, {0x6, 0x8}, {0x7, 0x9}, {0x0, 0x3}, {0x2, 0x6}, {0x4, 0x5}, {0x4, 0x4}, {0x5, 0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x7, 0x6}, {0x3, 0xa}, {0x3, 0x1}, {0x0, 0x7}, {0x2, 0x1}, {0x0, 0x3}, {0x4}, {0x7, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x1}, {0x3, 0x9}, {0x0, 0x4}, {0x5, 0x2}, {0x4, 0xa}, {0x1, 0x7}, {0x4, 0x6}, {0x2}, {0x2, 0x4}, {0x0, 0x6}, {0x1, 0x5}, {0x0, 0x5}, {0x3, 0x3}, {0x0, 0x4}, {0x4, 0xa}, {0x0, 0x8}, {0x0, 0xa}, {0x0, 0x4}, {0x3, 0x9}, {0x4, 0x3}, {0x4, 0x3}, {0x1, 0x7}, {0x6, 0x4}, {0x4, 0x9}, {0x0, 0x6}, {0x6, 0x6}, {0x3, 0x4}, {0x4, 0x3}, {0x7, 0x1}, {0x6, 0x3}]}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6, 0x24, 0x16, 0x2, 0x5, 0x46, 0x18, 0x3, 0x18, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x7ff, 0x8, 0x8, 0x7, 0x6, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x3}, {0x4, 0x2}, {0x3, 0x2}, {0x7, 0x2}, {0x2, 0xa}, {0x4}, {0x6, 0x3}, {0x1}, {0x7, 0x1}, {0x1, 0x6}, {0x4, 0x1}, {0x6, 0x4}, {0x6, 0x8}, {0x3, 0x3}, {0x2, 0x8}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x7}, {0x2}, {0x2, 0x5}, {0x4}, {0x4, 0x2}, {0x3, 0x2}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x24, 0x0, 0x35, 0x16, 0x6, 0x4, 0xc, 0x6, 0x6c, 0x12, 0xb, 0x18, 0x12, 0x24, 0x15fbfb2009fddd6f, 0x30, 0x6c, 0x3, 0x3, 0x6c, 0x48, 0x5, 0x60, 0x3, 0x24, 0x18]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x60, 0x60, 0x18, 0x3, 0x2, 0x9, 0x48, 0x30, 0x30, 0x24, 0x75, 0x48, 0x30, 0x69, 0x6c, 0x2, 0xc, 0x18, 0x12, 0x36, 0x18, 0x6, 0xc, 0x2, 0x4, 0x36, 0x3, 0x48, 0x3, 0x16, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x154, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xffff, 0x397, 0x3, 0x1ff, 0x9, 0x8000, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x1b, 0xc, 0x36, 0x6, 0x6, 0x4, 0x3902bba2e5e6fa16, 0x4, 0x24, 0x5, 0x6, 0x2, 0x60, 0x36, 0x6c, 0x5, 0x6, 0x0, 0x6, 0x1, 0x1b, 0x6, 0x1, 0x24, 0x6, 0x1]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x3, 0x4}, {0x3, 0x8}, {0x1, 0x9}, {0x1, 0x5}, {0x5, 0x1}, {0x5, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x6, 0x3}, {0x3, 0x6}, {0x3, 0x5}, {0x3, 0x5}, {0x2}, {0x1, 0x5}, {0x0, 0x9}, {0x3, 0x7}, {0x4, 0x7}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x6}, {0x1, 0x4}, {0x1, 0x8}, {0x1, 0x8}, {0x4}, {0x1, 0x1}, {0x1, 0x3}, {0x1, 0x2}, {0x6, 0x7}, {0x5, 0x4}, {0x1, 0x7}, {0x1, 0x2}, {0x4, 0x8}, {0x5, 0x4}, {0x1, 0xa}, {0x5, 0x9}, {0x5, 0x1}, {0x7, 0x6}, {0x1, 0x8}, {0x1, 0x5}, {0x1, 0x4}, {0x7, 0x6}, {0x1, 0xa}, {0x4}, {0x3, 0x4}, {0x4, 0x2}, {0x0, 0x4}, {0x6, 0x7}, {0x2, 0xa}, {0x2, 0x3}, {0x6, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x6, 0x435c, 0x8, 0x4, 0x208, 0xb09, 0xf000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x54, 0x8, 0x8, 0x7fff, 0x2, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb6, 0x9, 0x0, 0xf, 0x5, 0xba, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xcad, 0x9, 0x980, 0x0, 0x8000, 0x40, 0x35ed, 0x4000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xf55c, 0x1, 0x5, 0x8000, 0x800, 0x9, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xd28, 0x800, 0x800, 0x0, 0x400, 0x6, 0xc4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xffff, 0x7, 0x5, 0x7, 0x3, 0xf970, 0x400]}}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x3, 0xd9fd, 0x9, 0x6, 0xf, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x42}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffff9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xe8, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x15}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xc44}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xaf}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x34}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x48c, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x82}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x35}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x91}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x70}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x414, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xd8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6c, 0x48, 0x3, 0xb, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x7, 0x1, 0xfff9, 0x1, 0x100, 0xfffa]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1e, 0x8, 0xffff, 0x2, 0x1, 0x9, 0xe, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x0, 0x2, 0x2, 0x9, 0x3, 0x8689]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x3}, {0x5, 0x5}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x65, 0x4, 0x400, 0x6, 0x9, 0xad0]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x30, 0x3, 0x30, 0x3, 0x30, 0x30, 0x4, 0x4, 0x60]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x9}, {0x5}, {0x2, 0xa}, {0x7, 0x6}, {0x5, 0x9}, {0x1, 0x4}, {0x7}, {0x4, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x1}, {0x1, 0x2}, {0x6, 0x3}, {0x1, 0x5}, {0x5, 0x1}, {0x1, 0x7}, {0x1, 0x5}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x314, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x11c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xbd, 0x1, 0x0, 0x800, 0x7fff, 0x4, 0xf, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x7, 0x0, 0x2, 0x81, 0x80]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x3, 0x3}, {0x5, 0x9}, {0x0, 0x1}, {0x2, 0x5}, {0x7, 0x3}, {0x0, 0x6}, {0x5}, {0x5, 0xa}, {0x4, 0x6}, {0x6, 0x5}, {0x7, 0x3}, {0x4, 0x2}, {0x3, 0x8}, {0x4, 0x8}, {0x3}, {0x4, 0x3}, {0x1}, {0x2}, {0x6, 0x3}, {0x5, 0x2}, {0x7}, {0x1, 0x5}, {0x0, 0x3}, {0x2, 0x1}, {0x1, 0x9}, {0x4, 0x8}, {0x4, 0x9}, {0x6}, {0x1, 0x9}, {0x0, 0xa}, {0x2, 0x6}, {0x7, 0x2}, {0x4, 0x3}, {0x7, 0x7}, {0x7, 0x5}, {0x1, 0x7}, {0x4, 0xa}, {0x1, 0x3}, {0x5, 0x1}, {0x6}, {0x0, 0x4}, {0x6}, {0x6, 0x6}, {0x5, 0x6}, {0x3, 0x6}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x6, 0x3}, {0x3, 0x5}, {0x6, 0x3}, {0x1, 0x5}, {0x3, 0x2}, {0x7, 0x7}, {0x0, 0x3}, {0x4, 0x2}, {0x0, 0x2}, {0x2, 0x6}, {0x5, 0x6}, {0x7, 0x1}, {0x6, 0x1}, {0x4, 0x5}, {0x0, 0x8}, {0x5, 0xa}, {0x7}, {0x3, 0x6}, {0x4}, {0x0, 0x2}, {0x3, 0x3}, {0x3, 0x3}, {0x1}, {0x5, 0xa}, {0x3, 0x4}, {0x0, 0x2}, {0x5, 0x1}, {0x3, 0xa}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x2, 0x7}, {0x1, 0x3}, {0x3}, {0x6, 0x7}, {0x1, 0x9}, {0x1, 0x1}, {0x7, 0xa}, {0x7, 0x8}, {0x4, 0x9}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0x2}, {0x3, 0x3}, {0x3, 0x6}, {0x1, 0x6}, {0x5, 0x5}, {0x7, 0x6}, {0x2, 0x3}, {0x5, 0x6}, {0x2, 0x7}, {0x5, 0x5}, {0x0, 0x8}, {0x0, 0x1}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0xa}, {0x7, 0x5}, {0x1}, {0x1, 0x2}, {0x5, 0x1}, {0x5, 0x2}, {0x1, 0x8}, {0x0, 0x6}, {0x4, 0x1}, {0x7, 0xa}, {0x0, 0x1}, {0x1, 0x5}, {0x6, 0x8}, {0x0, 0x9}, {0x6, 0x1}, {0x6, 0x2}, {0x6, 0x8}, {0x5, 0x1}, {0x3, 0x7}, {0x3, 0x2}, {0x6, 0x9}, {0x5, 0x3}, {0x6, 0x7}, {0x2, 0x8}, {0x7, 0x1}, {0x2, 0x6}, {0x3, 0x1}, {0x0, 0x4}, {0x5, 0x9}, {0x1, 0x4}, {0x0, 0x7}, {0x6, 0x4}, {0x5, 0x9}, {0x6}, {0x3, 0x8}, {0x4, 0x5}, {0x6, 0x6}, {0x4, 0x7}, {0x4, 0x6}, {0x1, 0x6}, {0x3}, {0x0, 0x1}, {0x1, 0x6}, {0x1}, {0x4, 0x8}, {0x2, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x18, 0x3, 0x24, 0x12, 0x59, 0xb, 0x36, 0x18, 0x6c, 0x60, 0x18, 0x28, 0x60, 0x3, 0x1, 0x1, 0x6c, 0x9, 0xc, 0x4f, 0x6c, 0x4, 0x24, 0x3, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x33f, 0x9, 0x6, 0x4, 0x9, 0x7ff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x3, 0xa}, {0x3, 0x4}, {0x2, 0x3}, {0x6, 0x8}, {0x3, 0x4}, {0x7, 0x1}, {0x2, 0xa}, {0x1, 0x2}, {0x7, 0x1}, {0x5}, {0x0, 0x7}, {0x3, 0x9}, {0x0, 0x9}, {0x7}, {0x1, 0x8}, {0x3, 0x4}, {0x5, 0x1}, {0x5, 0x5}, {0x3, 0x4}, {0x4, 0x5}, {0x1, 0x4}, {0x0, 0x8}, {0x7, 0x4}, {0x1, 0x1}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x3}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x3}, {0x7, 0xa}, {0x0, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x8, 0x3, 0x1, 0x7, 0x75, 0x26ac]}}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x4, 0xa, 0x8, 0x4, 0x8, 0x0, 0xa]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x24, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xa0, 0x9, 0x6, 0x101, 0x3, 0x5, 0x7fff]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0x1, 0xfffe, 0x80, 0x7, 0x5, 0x80]}}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xc65f, 0xfff, 0x1, 0x9, 0x7, 0x0, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff44, 0x7, 0x8001, 0x2, 0x3, 0xdfd, 0x4, 0xc9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x2, 0x2}, {0x4, 0x6}, {0x0, 0x3}, {0x6, 0x8}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x8}, {0x4, 0x5}, {0x0, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x3, 0x5}, {0x0, 0x1}, {0x2, 0x8}, {0x2, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x3, 0x3}, {0x1, 0x1}, {0x2, 0x5}, {0x1, 0x8}, {0x3}, {0x4, 0x9}, {0x7, 0x4}, {0x4, 0x9}, {0x2}, {0x3, 0x9}, {0x4, 0x8}, {0x6, 0x2}, {0x1, 0x5}, {0x1, 0x6}, {0x2, 0x1}, {0x7, 0x1}, {0x3, 0x8}, {0x3, 0x2}, {0x1, 0x6}, {0x4, 0x7}, {0x5, 0x3}, {0x5, 0x3}, {0x3, 0x4}, {0x4, 0x9}, {0x0, 0x8}, {0x6, 0x6}, {0x0, 0x9}, {0x7}, {0x0, 0x5}, {0x5, 0x2}, {0x6, 0x3}, {0x1, 0x7}, {0x4, 0x4}, {0x4, 0x8}, {0x7, 0x8}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x3}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0x1}, {0x4, 0x3}, {0x5, 0x1}, {0x0, 0x9}, {0x2, 0x6}, {0x1, 0x5}, {0x0, 0x8}, {0x3, 0x3}, {0x7, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x0, 0x1}, {0x1}, {0x1, 0x2}, {0x1, 0x1}, {0x6, 0xa}, {0x0, 0x9}, {0x2, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5e6, 0x5, 0xda, 0xfa28, 0xb, 0x3, 0x4, 0x4]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x7, 0x0, 0x40, 0x5, 0x3, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7, 0x0, 0x6, 0x2, 0xee8e, 0x8, 0xc]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0x6, 0x2, 0x4, 0x60, 0x18, 0x9, 0x6, 0x22b1a38f7114e78a, 0x3, 0x48, 0x30, 0x1b, 0x48, 0x16, 0x60, 0x4a, 0x1b, 0x16, 0x16, 0x3, 0xa06c963917c4b8b4, 0x65, 0x18, 0x5, 0x60]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x9, 0xfff2, 0x4, 0x4, 0x6, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0xa1c}, 0x1, 0x0, 0x0, 0xc084}, 0x14) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c260400000000000023edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async) close(0x3) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) (async, rerun: 32) r7 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r7, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x24000088, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) (async) sendto$inet6(r7, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) (async) recvmmsg(r7, &(0x7f0000005080)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2160, 0x0) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000400)={r6, @in6={{0xa, 0x1103, 0x4, @private0={0xfc, 0x0, '\x00', 0x4}, 0x2}}}, &(0x7f0000000040)=0x84) (async) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) (async, rerun: 32) r8 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r8, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r10}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000001c0)="7213dd54b3793f8b6fa90fa5892f", 0xe}], 0x1}}], 0x1, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) 1.298323481s ago: executing program 32 (id=971): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012000800280070cf00000c001980050006001400000008fe04"], 0x8c}}, 0x0) 1.181272938s ago: executing program 33 (id=973): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2e042dbd7000fbdbdf25120000000c000600020400000000000005001300010000000c00060003000000000000000c00060001000000010000000c0006000300000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4004045) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x48, r1, 0x5eae78d9c54e9d3f, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}]}, 0x48}}, 0x40000) 141.561451ms ago: executing program 34 (id=976): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r1}, 0x2, 0x2, 0x15}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000ff000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x400000000010, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x10}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xfff5, 0x10}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xc3f, 0x2, 0x1, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56) pipe(&(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) 80.874817ms ago: executing program 35 (id=978): r0 = socket$inet6(0x10, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) accept$unix(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=0x6e) shutdown(r0, 0x0) shutdown(r1, 0x1) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000001240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001200)={&(0x7f00000007c0)={0xa1c, r5, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x468, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x81}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1f}]}, {0x390, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x220, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x8, 0x6, 0x1, 0x3, 0x3, 0x6]}}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0xc, 0x30, 0x12, 0x77, 0x30, 0x4, 0x1b, 0x12, 0x24, 0x30, 0x5, 0x25, 0x4, 0x9, 0x30, 0x24, 0x6, 0x6c, 0x1, 0x60, 0x4, 0xc, 0x6, 0x2, 0x5, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb751, 0x1, 0xf666, 0x4, 0x1, 0x6, 0x7, 0xe22]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0x7fff, 0x4590, 0x7f, 0x7f, 0x8, 0x9, 0x9d9f]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x81, 0x6, 0x6, 0x8, 0x1, 0x400, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x5, 0x3, 0x5, 0x4, 0x24, 0x60, 0x3, 0x0, 0x1, 0x9, 0x60, 0xb, 0x9, 0x0, 0x12, 0x2f, 0x48, 0x6, 0x16, 0x48, 0x16, 0x5, 0x30, 0x30, 0x6, 0x4, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0x1, 0x1, 0x9, 0x6, 0x8, 0xc]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x2, 0x9, 0xafe, 0x1, 0x57, 0x8000]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xfff, 0xfff, 0x0, 0xd, 0xfffe, 0x9, 0x1]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0x4}]}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x4, 0xd, 0x8000, 0xfff2, 0x5, 0x8001, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x4}, {0x6, 0x8}, {0x7, 0x9}, {0x0, 0x3}, {0x2, 0x6}, {0x4, 0x5}, {0x4, 0x4}, {0x5, 0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x7, 0x6}, {0x3, 0xa}, {0x3, 0x1}, {0x0, 0x7}, {0x2, 0x1}, {0x0, 0x3}, {0x4}, {0x7, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x5, 0x6}, {0x4, 0x1}, {0x3, 0x9}, {0x0, 0x4}, {0x5, 0x2}, {0x4, 0xa}, {0x1, 0x7}, {0x4, 0x6}, {0x2}, {0x2, 0x4}, {0x0, 0x6}, {0x1, 0x5}, {0x0, 0x5}, {0x3, 0x3}, {0x0, 0x4}, {0x4, 0xa}, {0x0, 0x8}, {0x0, 0xa}, {0x0, 0x4}, {0x3, 0x9}, {0x4, 0x3}, {0x4, 0x3}, {0x1, 0x7}, {0x6, 0x4}, {0x4, 0x9}, {0x0, 0x6}, {0x6, 0x6}, {0x3, 0x4}, {0x4, 0x3}, {0x7, 0x1}, {0x6, 0x3}]}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6, 0x24, 0x16, 0x2, 0x5, 0x46, 0x18, 0x3, 0x18, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x7ff, 0x8, 0x8, 0x7, 0x6, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x3}, {0x4, 0x2}, {0x3, 0x2}, {0x7, 0x2}, {0x2, 0xa}, {0x4}, {0x6, 0x3}, {0x1}, {0x7, 0x1}, {0x1, 0x6}, {0x4, 0x1}, {0x6, 0x4}, {0x6, 0x8}, {0x3, 0x3}, {0x2, 0x8}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x7}, {0x2}, {0x2, 0x5}, {0x4}, {0x4, 0x2}, {0x3, 0x2}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x24, 0x0, 0x35, 0x16, 0x6, 0x4, 0xc, 0x6, 0x6c, 0x12, 0xb, 0x18, 0x12, 0x24, 0x15fbfb2009fddd6f, 0x30, 0x6c, 0x3, 0x3, 0x6c, 0x48, 0x5, 0x60, 0x3, 0x24, 0x18]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x60, 0x60, 0x18, 0x3, 0x2, 0x9, 0x48, 0x30, 0x30, 0x24, 0x75, 0x48, 0x30, 0x69, 0x6c, 0x2, 0xc, 0x18, 0x12, 0x36, 0x18, 0x6, 0xc, 0x2, 0x4, 0x36, 0x3, 0x48, 0x3, 0x16, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x52}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x154, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xffff, 0x397, 0x3, 0x1ff, 0x9, 0x8000, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x1b, 0xc, 0x36, 0x6, 0x6, 0x4, 0x3902bba2e5e6fa16, 0x4, 0x24, 0x5, 0x6, 0x2, 0x60, 0x36, 0x6c, 0x5, 0x6, 0x0, 0x6, 0x1, 0x1b, 0x6, 0x1, 0x24, 0x6, 0x1]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x3, 0x4}, {0x3, 0x8}, {0x1, 0x9}, {0x1, 0x5}, {0x5, 0x1}, {0x5, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x6, 0x3}, {0x3, 0x6}, {0x3, 0x5}, {0x3, 0x5}, {0x2}, {0x1, 0x5}, {0x0, 0x9}, {0x3, 0x7}, {0x4, 0x7}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x6}, {0x1, 0x4}, {0x1, 0x8}, {0x1, 0x8}, {0x4}, {0x1, 0x1}, {0x1, 0x3}, {0x1, 0x2}, {0x6, 0x7}, {0x5, 0x4}, {0x1, 0x7}, {0x1, 0x2}, {0x4, 0x8}, {0x5, 0x4}, {0x1, 0xa}, {0x5, 0x9}, {0x5, 0x1}, {0x7, 0x6}, {0x1, 0x8}, {0x1, 0x5}, {0x1, 0x4}, {0x7, 0x6}, {0x1, 0xa}, {0x4}, {0x3, 0x4}, {0x4, 0x2}, {0x0, 0x4}, {0x6, 0x7}, {0x2, 0xa}, {0x2, 0x3}, {0x6, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x6, 0x435c, 0x8, 0x4, 0x208, 0xb09, 0xf000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x54, 0x8, 0x8, 0x7fff, 0x2, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb6, 0x9, 0x0, 0xf, 0x5, 0xba, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xcad, 0x9, 0x980, 0x0, 0x8000, 0x40, 0x35ed, 0x4000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xf55c, 0x1, 0x5, 0x8000, 0x800, 0x9, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xd28, 0x800, 0x800, 0x0, 0x400, 0x6, 0xc4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xffff, 0x7, 0x5, 0x7, 0x3, 0xf970, 0x400]}}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x3, 0xd9fd, 0x9, 0x6, 0xf, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x42}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffff9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xe8, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x15}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xc44}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xaf}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x34}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x48c, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x82}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x35}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x91}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x70}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x414, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xd8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6c, 0x48, 0x3, 0xb, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x7, 0x1, 0xfff9, 0x1, 0x100, 0xfffa]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1e, 0x8, 0xffff, 0x2, 0x1, 0x9, 0xe, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x0, 0x2, 0x2, 0x9, 0x3, 0x8689]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x3}, {0x5, 0x5}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x65, 0x4, 0x400, 0x6, 0x9, 0xad0]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x30, 0x3, 0x30, 0x3, 0x30, 0x30, 0x4, 0x4, 0x60]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x9}, {0x5}, {0x2, 0xa}, {0x7, 0x6}, {0x5, 0x9}, {0x1, 0x4}, {0x7}, {0x4, 0x6}, {0x1, 0x2}, {0x1, 0x8}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x1}, {0x1, 0x2}, {0x6, 0x3}, {0x1, 0x5}, {0x5, 0x1}, {0x1, 0x7}, {0x1, 0x5}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x314, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x11c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xbd, 0x1, 0x0, 0x800, 0x7fff, 0x4, 0xf, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x7, 0x0, 0x2, 0x81, 0x80]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x3, 0x3}, {0x5, 0x9}, {0x0, 0x1}, {0x2, 0x5}, {0x7, 0x3}, {0x0, 0x6}, {0x5}, {0x5, 0xa}, {0x4, 0x6}, {0x6, 0x5}, {0x7, 0x3}, {0x4, 0x2}, {0x3, 0x8}, {0x4, 0x8}, {0x3}, {0x4, 0x3}, {0x1}, {0x2}, {0x6, 0x3}, {0x5, 0x2}, {0x7}, {0x1, 0x5}, {0x0, 0x3}, {0x2, 0x1}, {0x1, 0x9}, {0x4, 0x8}, {0x4, 0x9}, {0x6}, {0x1, 0x9}, {0x0, 0xa}, {0x2, 0x6}, {0x7, 0x2}, {0x4, 0x3}, {0x7, 0x7}, {0x7, 0x5}, {0x1, 0x7}, {0x4, 0xa}, {0x1, 0x3}, {0x5, 0x1}, {0x6}, {0x0, 0x4}, {0x6}, {0x6, 0x6}, {0x5, 0x6}, {0x3, 0x6}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x6, 0x3}, {0x3, 0x5}, {0x6, 0x3}, {0x1, 0x5}, {0x3, 0x2}, {0x7, 0x7}, {0x0, 0x3}, {0x4, 0x2}, {0x0, 0x2}, {0x2, 0x6}, {0x5, 0x6}, {0x7, 0x1}, {0x6, 0x1}, {0x4, 0x5}, {0x0, 0x8}, {0x5, 0xa}, {0x7}, {0x3, 0x6}, {0x4}, {0x0, 0x2}, {0x3, 0x3}, {0x3, 0x3}, {0x1}, {0x5, 0xa}, {0x3, 0x4}, {0x0, 0x2}, {0x5, 0x1}, {0x3, 0xa}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x2, 0x7}, {0x1, 0x3}, {0x3}, {0x6, 0x7}, {0x1, 0x9}, {0x1, 0x1}, {0x7, 0xa}, {0x7, 0x8}, {0x4, 0x9}, {0x0, 0x8}, {0x0, 0x4}, {0x3, 0x2}, {0x3, 0x3}, {0x3, 0x6}, {0x1, 0x6}, {0x5, 0x5}, {0x7, 0x6}, {0x2, 0x3}, {0x5, 0x6}, {0x2, 0x7}, {0x5, 0x5}, {0x0, 0x8}, {0x0, 0x1}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0xa}, {0x7, 0x5}, {0x1}, {0x1, 0x2}, {0x5, 0x1}, {0x5, 0x2}, {0x1, 0x8}, {0x0, 0x6}, {0x4, 0x1}, {0x7, 0xa}, {0x0, 0x1}, {0x1, 0x5}, {0x6, 0x8}, {0x0, 0x9}, {0x6, 0x1}, {0x6, 0x2}, {0x6, 0x8}, {0x5, 0x1}, {0x3, 0x7}, {0x3, 0x2}, {0x6, 0x9}, {0x5, 0x3}, {0x6, 0x7}, {0x2, 0x8}, {0x7, 0x1}, {0x2, 0x6}, {0x3, 0x1}, {0x0, 0x4}, {0x5, 0x9}, {0x1, 0x4}, {0x0, 0x7}, {0x6, 0x4}, {0x5, 0x9}, {0x6}, {0x3, 0x8}, {0x4, 0x5}, {0x6, 0x6}, {0x4, 0x7}, {0x4, 0x6}, {0x1, 0x6}, {0x3}, {0x0, 0x1}, {0x1, 0x6}, {0x1}, {0x4, 0x8}, {0x2, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x18, 0x3, 0x24, 0x12, 0x59, 0xb, 0x36, 0x18, 0x6c, 0x60, 0x18, 0x28, 0x60, 0x3, 0x1, 0x1, 0x6c, 0x9, 0xc, 0x4f, 0x6c, 0x4, 0x24, 0x3, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x33f, 0x9, 0x6, 0x4, 0x9, 0x7ff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x3, 0xa}, {0x3, 0x4}, {0x2, 0x3}, {0x6, 0x8}, {0x3, 0x4}, {0x7, 0x1}, {0x2, 0xa}, {0x1, 0x2}, {0x7, 0x1}, {0x5}, {0x0, 0x7}, {0x3, 0x9}, {0x0, 0x9}, {0x7}, {0x1, 0x8}, {0x3, 0x4}, {0x5, 0x1}, {0x5, 0x5}, {0x3, 0x4}, {0x4, 0x5}, {0x1, 0x4}, {0x0, 0x8}, {0x7, 0x4}, {0x1, 0x1}, {0x2, 0x8}, {0x5, 0x5}, {0x2, 0x3}, {0x5, 0x6}, {0x2, 0x3}, {0x5, 0x3}, {0x7, 0xa}, {0x0, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x8, 0x3, 0x1, 0x7, 0x75, 0x26ac]}}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x4, 0xa, 0x8, 0x4, 0x8, 0x0, 0xa]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x24, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xa0, 0x9, 0x6, 0x101, 0x3, 0x5, 0x7fff]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0x1, 0xfffe, 0x80, 0x7, 0x5, 0x80]}}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xc65f, 0xfff, 0x1, 0x9, 0x7, 0x0, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff44, 0x7, 0x8001, 0x2, 0x3, 0xdfd, 0x4, 0xc9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x2, 0x2}, {0x4, 0x6}, {0x0, 0x3}, {0x6, 0x8}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x8}, {0x4, 0x5}, {0x0, 0x5}, {0x2, 0xa}, {0x2, 0x1}, {0x3, 0x5}, {0x0, 0x1}, {0x2, 0x8}, {0x2, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x3, 0x3}, {0x1, 0x1}, {0x2, 0x5}, {0x1, 0x8}, {0x3}, {0x4, 0x9}, {0x7, 0x4}, {0x4, 0x9}, {0x2}, {0x3, 0x9}, {0x4, 0x8}, {0x6, 0x2}, {0x1, 0x5}, {0x1, 0x6}, {0x2, 0x1}, {0x7, 0x1}, {0x3, 0x8}, {0x3, 0x2}, {0x1, 0x6}, {0x4, 0x7}, {0x5, 0x3}, {0x5, 0x3}, {0x3, 0x4}, {0x4, 0x9}, {0x0, 0x8}, {0x6, 0x6}, {0x0, 0x9}, {0x7}, {0x0, 0x5}, {0x5, 0x2}, {0x6, 0x3}, {0x1, 0x7}, {0x4, 0x4}, {0x4, 0x8}, {0x7, 0x8}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x3}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0x1}, {0x4, 0x3}, {0x5, 0x1}, {0x0, 0x9}, {0x2, 0x6}, {0x1, 0x5}, {0x0, 0x8}, {0x3, 0x3}, {0x7, 0x7}, {0x6, 0x5}, {0x2, 0x6}, {0x0, 0x1}, {0x1}, {0x1, 0x2}, {0x1, 0x1}, {0x6, 0xa}, {0x0, 0x9}, {0x2, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5e6, 0x5, 0xda, 0xfa28, 0xb, 0x3, 0x4, 0x4]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x7, 0x0, 0x40, 0x5, 0x3, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7, 0x0, 0x6, 0x2, 0xee8e, 0x8, 0xc]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0x6, 0x2, 0x4, 0x60, 0x18, 0x9, 0x6, 0x22b1a38f7114e78a, 0x3, 0x48, 0x30, 0x1b, 0x48, 0x16, 0x60, 0x4a, 0x1b, 0x16, 0x16, 0x3, 0xa06c963917c4b8b4, 0x65, 0x18, 0x5, 0x60]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x9, 0xfff2, 0x4, 0x4, 0x6, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0xa1c}, 0x1, 0x0, 0x0, 0xc084}, 0x14) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c260400000000000023edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async) close(0x3) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) (async, rerun: 32) r7 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r7, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x24000088, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) (async) sendto$inet6(r7, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) (async) recvmmsg(r7, &(0x7f0000005080)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2160, 0x0) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000400)={r6, @in6={{0xa, 0x1103, 0x4, @private0={0xfc, 0x0, '\x00', 0x4}, 0x2}}}, &(0x7f0000000040)=0x84) (async) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) (async, rerun: 32) r8 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r8, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r10}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000001c0)="7213dd54b3793f8b6fa90fa5892f", 0xe}], 0x1}}], 0x1, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) 0s ago: executing program 36 (id=975): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe, 0x6d}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40081) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x44}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3e540d0176dd"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="fbbfd2a42d4b"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000048}, 0x44041) (async) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x44}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3e540d0176dd"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="fbbfd2a42d4b"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000048}, 0x44041) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x0, 0x0, 0x12, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x0, 0x700, 0x4}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x40, 0x40, 0x10, 0x3, {{0xe, 0x4, 0x0, 0x1, 0x38, 0x68, 0x0, 0x7e, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x24, 0x78, 0x0, 0x8, [0x2, 0x10001, 0x8, 0x4, 0x1, 0x7, 0x9, 0x3]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x700, 0x40, 0x2, 0x9, {{0x1a, 0x4, 0x1, 0x0, 0x68, 0x64, 0x0, 0xa, 0x2b, 0x0, @local, @remote, {[@ssrr={0x89, 0xb, 0x2c, [@broadcast, @private=0xa010102]}, @rr={0x7, 0xb, 0x71, [@empty, @broadcast]}, @timestamp_addr={0x44, 0xc, 0xd4, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x2d}, 0xa47f}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0xb4, 0x1, 0x8, [{@rand_addr=0x64010101, 0x10000}, {@multicast2, 0x7}, {@rand_addr=0x64010101, 0x2}, {@local}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x8}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x6, 0xfffffff9, 0x5c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x80, 0x1, 0x4, 0x7fff}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x6, 0xfffffff9, 0x5c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x80, 0x1, 0x4, 0x7fff}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000a00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x134, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x15699fa47bff567b}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000040}, 0x24040000) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000bc0)={&(0x7f0000000a40)=[{0x2, 0x0, 0x9, 0x5, 0x200000000, 0x2, 0xe, 0x1}, {0x3, 0x0, 0x1, 0x7, 0xff, 0x8, 0xffffffffffffffff, 0x9}, {0x1, 0x0, 0x100000000, 0x1, 0x8000, 0x8, 0x7, 0x10000}, {0x3, 0x0, 0x0, 0x5, 0x6, 0x36e, 0x0, 0x9}, {0x0, 0x0, 0xfffffffffffffffa, 0x1, 0x1, 0x8, 0x99, 0x8000}, {0x3, 0x0, 0x319, 0xb3, 0x7, 0x3ff2, 0x9, 0x6dc}], 0x6, 0x38, 0x1, 0xcc60}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, r9, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x200458dc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000d40), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000d40), 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, &(0x7f0000000e00)=0xc) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x3c, 0x3e9, 0x1, 0x70bd29, 0x25dfdbfb, {0x10, 0x0, 0x1, r10, 0x2, 0xfffffffc, 0x1, 0x3, 0x0, 0x79, 0x10000}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x44800) (async) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x3c, 0x3e9, 0x1, 0x70bd29, 0x25dfdbfb, {0x10, 0x0, 0x1, r10, 0x2, 0xfffffffc, 0x1, 0x3, 0x0, 0x79, 0x10000}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x44800) socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000f00)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000f40)=0x1c, 0x800) setsockopt$inet6_int(r14, 0x29, 0x33, &(0x7f0000000f80)=0x9, 0x4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000004, 0x11, r13, 0x70444000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_ENCODED_READ(r13, 0x80809440, &(0x7f0000001840)={&(0x7f00000017c0)=[{&(0x7f00000013c0)="cece2a6344a4d38fd3176e45e65abbb4ec40c8b83d6aa578f8b969a51836bb11df419230281385fef913d6c544c02f0d770f7a46399ca52ef4937617435f729edddfba4a2035b2839a2de43d8cf07f46231da54b999f44de0955848e5a57c147f443369318eb075e15b3", 0x6a}, {&(0x7f0000001440)="97014dacdbf238f42b2f40aeda5f43ded021c2fc640d58dec587a0", 0x1b}, {&(0x7f0000001480)="157bb032d6500025f6a264ab555bfe688bb2c2a12db62aca02b731ef56fe0ad21667eb7d7560e2719cef8ddb4248385107fb317e6c4855787e73abdab8955aebb7d5d94c8f06acd2e7a4d96cd2e4a5cc3295660e3df1fc324c23f5c4b7780e4e1f2630690b72eef20d044e", 0x6b}, {&(0x7f0000001500)="71bcb7099c99a4c41ac969380fc1cbb93a3217bbe1f86c6ab1efba6fdf5a61972c80c8b290eb43413c48a8c7c37e0633a86a17ed07594667d2d988f2f616187fa22ce2eac2af275880bbecc1f51d7dd04cfcd88e2fb55ca5a14d650bbfba7443cc779e93f461f1727364acba3db4fb1725bd2b180829d6ba720c556b64f43e2522ce36c6a2acfa228bb2fc5b95e33c674fa4566129653d6f922e615c651c9fbb215dee", 0xa3}, {&(0x7f00000015c0)="6c6f5e100e03aee48f55541edb9ecc9cdace6925a82a4c98b480d279366ab981f360797357e6d816b0aa97e3a2606bfcbe969c36c6d4b50e296012d794c5680f6cc9e107e1425c39b4d26bf51ec5887f46a1daa953ad658038fc3c60d17cbbc3d63c6657ad", 0x65}, {&(0x7f0000001640)="9a342fcd2ed54ba2170ded04dcbf344fa781dde7700a9046768c3d13dcac2aabbb", 0x21}, {&(0x7f0000001680)="40f08dc5b7e9df32588e4f46017fb6fd5c50f96e5f7152ad08cb1d54657d1a89bbebc7688a7c45b32041f5b232ad770f68c4019a842bcf05920ade4f8e8bb2115ef84fa94e313b2ca11660b5adb581cbd661d31908184ca23469f162ed52fbe713", 0x61}, {&(0x7f0000001700)="23099cd1eb9900c4d8d0de67e8b6d4c7421c29dd4e960fe9b7cd9f5fe9df96e5898915aaa9ad488dede4dae278325f14911e05fc3d9332aaae67110395ce6c072dcf52b267831618c58b0adac273812ef822a4f4148b5c5697d7cc275244f73f606defd8aa45eeb194b33af7a7e066b635706cdc60849cbc7e43cf53c8bdfa3023b8ae02463bc4956ad38636c86054b8ea6d866b778899ede4016d94bc4a561f4c235e24b8b519fd90616a33f7a6fecb", 0xb0}], 0x8, 0x2, 0x0, 0x2, 0x8000, 0x3, 0x8, 0x7}) getsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000001b80)={{{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6}}, &(0x7f0000001c80)=0xe8) socket$pptp(0x18, 0x1, 0x2) (async) r16 = socket$pptp(0x18, 0x1, 0x2) sendmsg$netlink(r13, &(0x7f0000001d80)={&(0x7f00000018c0)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001b40)=[{&(0x7f0000001900)={0x220, 0x3a, 0x1, 0x70bd27, 0x25dfdbfb, "", [@nested={0xa9, 0xe0, 0x0, 0x1, [@nested={0x4, 0x60}, @generic="25ccb7f6176b306ce46a8fe80e51832c83443ef3de418758fdedc164e66243a513a205fb805c36ce032a5a68a18771cfd03648ca387a662ab9814f0dfd6753801430613bebd8be9d8b5006517aa8fb11b935bb3ff2aa63afbe7dfddb582a7d07e9d11695747c41859e961407ad1d513c51bd05bd823fee919d2c05e91e51754001b62896345c124f87a34c402d96c34df6d8015a25", @nested={0x4, 0xd2}, @typed={0x5, 0x10d, 0x0, 0x0, @str='\x00'}]}, @generic="508f4146a5114a04798e9426a369a7defa9c791aa9226f1f7faa42495350995b8f33fa4149f7369e1d20dee71c4d6b52b49b7ccabdd27243aa96e59f537ce9b24b1a8bd388fba1b280e487fc1a3ac9993e309a4e57e5ca8893e92c0c35357bf7b2ef5c3ce9fd99c65de00fdf95a337428790b9932a8fd8c49c0ff926de7867ce9a644e1aa55fc35a0475c3cbb84940c1e89d6fc68a6de90ec240235e7c181710b31bdbc7689f9c616360c9b1181e9ad5d734ecc56827aa23e61762e1cb4a49f5880d5f8a9bd4a83958cbb84e5552d329896dbde44f9489003616004bdb789c18", @typed={0xc, 0x5, 0x0, 0x0, @u64=0x100000000}, @typed={0x5, 0xc3, 0x0, 0x0, @str='\x00'}, @nested={0x6f, 0x6c, 0x0, 0x1, [@nested={0x4, 0x87}, @nested={0x4, 0x127}, @generic="acafde109af07adb56596601ac509bad81491a13f46a1d6c4f98f7131fc54a69a6b3767809a3b72c69ef343a52951277bbc1ceac924e046bd5e1fe4315cd49ff560b9c007e3865b62577c65d6efe06449b1c5a59921bd5721b32771ef46e2a856518bf"]}]}, 0x220}], 0x1, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, r12}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r15}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @rights={{0x18, 0x1, 0x1, [r14, r16]}}, @rights={{0x24, 0x1, 0x1, [r0, r14, r0, r0, r13]}}], 0xb8, 0x4001}, 0x1) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r14, 0x84, 0x77, &(0x7f0000001dc0)={0x0, 0xe, 0x6, [0x80, 0x3, 0x5c0, 0x3, 0x1, 0xd]}, &(0x7f0000001e00)=0x14) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r14, 0x84, 0x76, &(0x7f0000001e40)={r17, 0x885}, &(0x7f0000001e80)=0x8) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r14, 0x84, 0x76, &(0x7f0000001e40)={r17, 0x885}, &(0x7f0000001e80)=0x8) kernel console output (not intermixed with test programs): mmand tx timeout [ 89.260140][ T50] Bluetooth: hci4: command tx timeout [ 89.281154][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.307727][ T5839] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3'. [ 89.325759][ T5840] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7'. [ 89.343286][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.416684][ T5841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7'. [ 89.471179][ T5840] ip6erspan0: entered promiscuous mode [ 89.537616][ T5847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'. [ 89.551330][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.565791][ T5851] veth0_to_bond: entered allmulticast mode [ 89.567722][ T5847] Zero length message leads to an empty skb [ 89.601092][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.631446][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.662710][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.795725][ T5857] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 89.891778][ T172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.921503][ T172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.023606][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.049044][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.070624][ T5866] x_tables: duplicate underflow at hook 2 [ 90.403504][ T5880] netlink: 'syz.2.17': attribute type 13 has an invalid length. [ 90.523091][ T5888] netlink: 'syz.2.17': attribute type 1 has an invalid length. [ 90.743078][ T5895] syzkaller0: entered promiscuous mode [ 90.792008][ T5895] syzkaller0: entered allmulticast mode [ 91.233680][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'. [ 91.261272][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'. [ 91.557618][ T5925] netlink: 'syz.2.30': attribute type 4 has an invalid length. [ 91.758719][ T46] cfg80211: failed to load regulatory.db [ 91.814752][ T5940] tipc: Started in network mode [ 91.833674][ T5940] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 91.863408][ T5940] tipc: Enabled bearer , priority 10 [ 91.990036][ T5949] netlink: 52 bytes leftover after parsing attributes in process `syz.3.37'. [ 92.040433][ T5949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37'. [ 92.203219][ T5958] netlink: 20 bytes leftover after parsing attributes in process `syz.1.40'. [ 92.246943][ T5958] netlink: 'syz.1.40': attribute type 1 has an invalid length. [ 92.261522][ T5958] netlink: 228 bytes leftover after parsing attributes in process `syz.1.40'. [ 92.281866][ T5965] netlink: 'syz.4.41': attribute type 1 has an invalid length. [ 92.873724][ T5991] Bluetooth: MGMT ver 1.23 [ 92.985126][ T5961] : entered promiscuous mode [ 93.067552][ T24] tipc: Node number set to 10136234 [ 93.094312][ T6000] netlink: 'syz.4.54': attribute type 10 has an invalid length. [ 93.166656][ T6000] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 93.181518][ T5998] syzkaller0: entered promiscuous mode [ 93.192674][ T5998] syzkaller0: entered allmulticast mode [ 93.320661][ T6005] syz.2.56 uses obsolete (PF_INET,SOCK_PACKET) [ 93.993177][ T6041] netlink: 'syz.2.65': attribute type 11 has an invalid length. [ 94.023776][ T6041] netlink: 'syz.2.65': attribute type 11 has an invalid length. [ 94.060242][ T6044] netlink: 'syz.3.67': attribute type 1 has an invalid length. [ 94.082531][ T6049] netlink: 'syz.2.65': attribute type 11 has an invalid length. [ 94.113991][ T6042] netlink: 'syz.1.68': attribute type 1 has an invalid length. [ 94.143360][ T6049] netlink: 'syz.2.65': attribute type 11 has an invalid length. [ 94.223217][ T6058] netlink: 'syz.4.70': attribute type 83 has an invalid length. [ 94.310830][ T6055] geneve2: entered promiscuous mode [ 94.420877][ T142] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.467002][ T142] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.498196][ T142] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.533615][ T142] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.611419][ T6079] netlink: 'syz.2.75': attribute type 12 has an invalid length. [ 94.638813][ T6079] __nla_validate_parse: 13 callbacks suppressed [ 94.638830][ T6079] netlink: 148 bytes leftover after parsing attributes in process `syz.2.75'. [ 94.661870][ T6079] netlink: 59 bytes leftover after parsing attributes in process `syz.2.75'. [ 95.166818][ T6107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.170035][ T6104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.312858][ T5639] block nbd0: Receive control failed (result -32) [ 95.574535][ T6120] netlink: 68 bytes leftover after parsing attributes in process `syz.4.86'. [ 95.624430][ T6122] validate_nla: 1 callbacks suppressed [ 95.624449][ T6122] netlink: 'syz.2.87': attribute type 1 has an invalid length. [ 95.678532][ T6122] netlink: 88 bytes leftover after parsing attributes in process `syz.2.87'. [ 95.726564][ T6126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.87'. [ 95.770974][ T6122] netlink: 1 bytes leftover after parsing attributes in process `syz.2.87'. [ 95.780577][ T6122] netlink: 'syz.2.87': attribute type 1 has an invalid length. [ 95.797031][ T6133] bridge0: port 3(gretap0) entered blocking state [ 95.809135][ T6122] netlink: 634 bytes leftover after parsing attributes in process `syz.2.87'. [ 95.818473][ T6133] bridge0: port 3(gretap0) entered disabled state [ 95.835783][ T6133] gretap0: entered allmulticast mode [ 95.850680][ T6133] gretap0: entered promiscuous mode [ 95.856648][ T6133] bridge0: port 3(gretap0) entered blocking state [ 95.863717][ T6133] bridge0: port 3(gretap0) entered forwarding state [ 95.875883][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.90'. [ 95.981520][ T6138] netlink: 'syz.3.90': attribute type 1 has an invalid length. [ 96.016189][ T6138] netlink: 'syz.3.90': attribute type 2 has an invalid length. [ 96.157246][ T6151] netlink: 'syz.2.92': attribute type 1 has an invalid length. [ 96.250962][ T6151] macvlan0: entered promiscuous mode [ 96.273109][ T6151] macvlan0: entered allmulticast mode [ 96.517662][ T6168] netlink: 'syz.3.96': attribute type 13 has an invalid length. [ 96.574594][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 96.886842][ T6181] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 96.915045][ T6187] netlink: 60 bytes leftover after parsing attributes in process `syz.4.103'. [ 96.933271][ T6181] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 96.959592][ T6181] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 96.981008][ T5756] IPVS: starting estimator thread 0... [ 97.088737][ T6195] IPVS: using max 37 ests per chain, 88800 per kthread [ 97.399215][ T6214] netlink: 'syz.4.110': attribute type 1 has an invalid length. [ 97.428725][ T6216] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 97.435999][ T6216] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 97.491776][ T6214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.500838][ T6216] hsr_slave_0: left promiscuous mode [ 97.515078][ T6216] hsr_slave_1: left promiscuous mode [ 97.641603][ T6222] bond1: (slave veth0_to_bond): making interface the new active one [ 97.677745][ T6222] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 97.725964][ T6214] bond1: entered promiscuous mode [ 97.736994][ T6214] veth0_to_bond: entered promiscuous mode [ 97.747348][ T6214] bond1: entered allmulticast mode [ 97.757309][ T6214] veth0_to_bond: entered allmulticast mode [ 97.797886][ T6230] macvlan2: entered promiscuous mode [ 97.803820][ T6230] macvlan2: entered allmulticast mode [ 97.813745][ T6230] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 97.827864][ T6230] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 97.972351][ T6241] warning: `syz.1.117' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.153487][ T6254] netlink: 'syz.4.120': attribute type 1 has an invalid length. [ 98.343790][ T6266] netlink: 'syz.2.124': attribute type 1 has an invalid length. [ 98.358888][ T6260] ip6gretap1: entered promiscuous mode [ 98.364540][ T6260] ip6gretap1: entered allmulticast mode [ 98.584741][ T6273] syz_tun: entered allmulticast mode [ 98.628373][ T6278] netlink: 'syz.4.129': attribute type 1 has an invalid length. [ 98.874215][ T6295] geneve2: entered promiscuous mode [ 99.028901][ T6306] xt_bpf: check failed: parse error [ 99.703677][ T6342] __nla_validate_parse: 10 callbacks suppressed [ 99.703696][ T6342] netlink: 188 bytes leftover after parsing attributes in process `syz.2.149'. [ 99.942460][ T6358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.151'. [ 99.965270][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'. [ 100.107517][ T6366] ieee802154 phy0 wpan0: encryption failed: -22 [ 100.131642][ T6367] netlink: 20 bytes leftover after parsing attributes in process `syz.4.153'. [ 100.486887][ T6381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.158'. [ 100.657500][ T6381] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 100.848778][ T6381] gretap1: entered promiscuous mode [ 100.925593][ T6381] gretap1: entered allmulticast mode [ 101.004891][ T6414] xfrm0: Caught tx_queue_len zero misconfig [ 101.077255][ T6414] validate_nla: 2 callbacks suppressed [ 101.077270][ T6414] netlink: 'syz.3.159': attribute type 1 has an invalid length. [ 101.125257][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 101.711395][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'. [ 101.758685][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'. [ 101.786380][ T6450] netlink: 'syz.3.165': attribute type 10 has an invalid length. [ 101.809409][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'. [ 101.867372][ T6456] netlink: 'syz.2.166': attribute type 1 has an invalid length. [ 101.903253][ T6450] team0: Port device dummy0 added [ 101.965773][ T6418] FAULT_INJECTION: forcing a failure. [ 101.965773][ T6418] name failslab, interval 1, probability 0, space 0, times 1 [ 101.983982][ T6418] CPU: 1 UID: 0 PID: 6418 Comm: syz.1.160 Not tainted syzkaller #0 PREEMPT(full) [ 101.984006][ T6418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 101.984026][ T6418] Call Trace: [ 101.984034][ T6418] [ 101.984046][ T6418] dump_stack_lvl+0xe8/0x150 [ 101.984081][ T6418] should_fail_ex+0x412/0x560 [ 101.984108][ T6418] should_failslab+0xa8/0x100 [ 101.984130][ T6418] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 101.984159][ T6418] ? trace_kmalloc+0x2a/0xf0 [ 101.984184][ T6418] ? page_pool_create_percpu+0x76/0xc80 [ 101.984214][ T6418] page_pool_create_percpu+0x76/0xc80 [ 101.984239][ T6418] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 101.984273][ T6418] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 101.984299][ T6418] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 101.984346][ T6418] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 101.984388][ T6418] ? 0xffffffffa02019d0 [ 101.984438][ T6418] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 101.984470][ T6418] ? _copy_from_user+0x94/0xb0 [ 101.984495][ T6418] ? bpf_test_init+0x113/0x150 [ 101.984521][ T6418] ? xdp_convert_md_to_buff+0x5b/0x330 [ 101.984543][ T6418] bpf_prog_test_run_xdp+0x81c/0x1160 [ 101.984590][ T6418] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 101.984625][ T6418] ? __fget_files+0x2a/0x420 [ 101.984655][ T6418] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 101.984686][ T6418] bpf_prog_test_run+0x2c7/0x340 [ 101.984710][ T6418] __sys_bpf+0x643/0x950 [ 101.984741][ T6418] ? __pfx___sys_bpf+0x10/0x10 [ 101.984843][ T6418] ? rcu_is_watching+0x15/0xb0 [ 101.984875][ T6418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.984898][ T6418] __x64_sys_bpf+0x7c/0x90 [ 101.984926][ T6418] do_syscall_64+0x174/0x580 [ 101.984947][ T6418] ? trace_irq_disable+0x3b/0x140 [ 101.984977][ T6418] ? clear_bhb_loop+0x40/0x90 [ 101.985001][ T6418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.985021][ T6418] RIP: 0033:0x7f41eed9ce59 [ 101.985039][ T6418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.985055][ T6418] RSP: 002b:00007f41ecff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 101.985076][ T6418] RAX: ffffffffffffffda RBX: 00007f41ef015fa0 RCX: 00007f41eed9ce59 [ 101.985090][ T6418] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 101.985102][ T6418] RBP: 00007f41ecff6090 R08: 0000000000000000 R09: 0000000000000000 [ 101.985113][ T6418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.985125][ T6418] R13: 00007f41ef016038 R14: 00007f41ef015fa0 R15: 00007ffea7ec68a8 [ 101.985157][ T6418] [ 102.287092][ T6456] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.328625][ T6460] bond2: (slave gretap1): making interface the new active one [ 102.339059][ T6460] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 102.544395][ T6472] gtp0: entered promiscuous mode [ 102.560453][ T6472] gtp0: entered allmulticast mode [ 102.572711][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.172'. [ 102.917700][ T5646] IPVS: starting estimator thread 0... [ 102.983660][ T6497] Illegal XDP return value 4294967274 on prog (id 25) dev N/A, expect packet loss! [ 103.018470][ T6496] IPVS: using max 29 ests per chain, 69600 per kthread [ 103.185998][ T6504] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.722910][ T6541] rdma_op ffff888028cc51f0 conn xmit_rdma 0000000000000000 [ 103.759112][ T6542] netlink: 'syz.1.187': attribute type 2 has an invalid length. [ 103.985536][ T6552] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 104.033088][ T6554] netlink: 'syz.1.191': attribute type 1 has an invalid length. [ 104.099516][ T6554] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.117153][ T6554] bond2: (slave veth0_to_bond): making interface the new active one [ 104.126984][ T6554] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 104.155932][ T6554] bond2: entered promiscuous mode [ 104.162156][ T6554] veth0_to_bond: entered promiscuous mode [ 104.168132][ T6554] bond2: entered allmulticast mode [ 104.173948][ T6554] veth0_to_bond: entered allmulticast mode [ 104.210953][ T6554] macvlan2: entered promiscuous mode [ 104.217043][ T6554] macvlan2: entered allmulticast mode [ 104.224533][ T6554] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 104.242677][ T6554] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 104.311240][ T6567] netlink: 'syz.4.194': attribute type 1 has an invalid length. [ 104.444147][ T6574] netlink: 'syz.3.195': attribute type 1 has an invalid length. [ 104.502641][ T6567] 8021q: adding VLAN 0 to HW filter on device bond3 [ 104.611547][ T6573] bond3: (slave veth3): Enslaving as an active interface with a down link [ 104.687082][ T6575] bond1: (slave veth0_to_bond): Releasing active interface [ 104.702338][ T6575] veth0_to_bond: left promiscuous mode [ 104.711129][ T6587] sctp: [Deprecated]: syz.1.198 (pid 6587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.711129][ T6587] Use struct sctp_sack_info instead [ 104.732881][ T6575] veth0_to_bond: left allmulticast mode [ 104.746054][ T6575] bond3: (slave veth0_to_bond): making interface the new active one [ 104.755909][ T6575] veth0_to_bond: entered promiscuous mode [ 104.768927][ T6575] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 104.856340][ T6574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.875232][ T6572] bond1: (slave veth0_to_bond): making interface the new active one [ 104.888066][ T6572] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 104.924290][ T6585] bond1: entered promiscuous mode [ 104.952732][ T6585] veth0_to_bond: entered promiscuous mode [ 104.996387][ T6585] bond1: entered allmulticast mode [ 105.011449][ T6585] veth0_to_bond: entered allmulticast mode [ 105.282938][ T6602] __nla_validate_parse: 10 callbacks suppressed [ 105.282956][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.202'. [ 105.657730][ T6617] team0: No ports can be present during mode change [ 105.751269][ T6622] openvswitch: netlink: EtherType 50a is less than min 600 [ 105.845228][ T6624] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.210'. [ 105.864847][ T6628] netlink: 180 bytes leftover after parsing attributes in process `syz.1.212'. [ 105.977104][ T6633] Cannot find del_set index 4 as target [ 106.305588][ T6643] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 106.343548][ T6645] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 106.355778][ T46] IPVS: starting estimator thread 0... [ 106.451044][ T6649] IPVS: using max 39 ests per chain, 93600 per kthread [ 106.612301][ T6656] : entered promiscuous mode [ 106.922508][ T6671] netlink: 84 bytes leftover after parsing attributes in process `syz.4.222'. [ 106.957110][ T6672] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.006237][ T6672] bridge_slave_0 (unregistering): left allmulticast mode [ 107.041637][ T6672] bridge_slave_0 (unregistering): left promiscuous mode [ 107.068653][ T6672] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.521951][ T6694] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 107.649883][ T6707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.230'. [ 107.703889][ T6707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.230'. [ 107.749459][ T6707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.230'. [ 107.793360][ T6707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.230'. [ 107.834787][ T6707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.230'. [ 107.847871][ T6711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.866608][ T6707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.230'. [ 107.891573][ T6714] ipvlan0: Caught tx_queue_len zero misconfig [ 108.112360][ T6725] ±ÿª¨úrBº“: renamed from lo (while UP) [ 108.192334][ T6731] netlink: 'syz.2.237': attribute type 1 has an invalid length. [ 108.193488][ T6732] netlink: 'syz.2.237': attribute type 1 has an invalid length. [ 108.441312][ T6737] bond3: (slave gretap2): making interface the new active one [ 108.471167][ T6737] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 108.652140][ T6749] block nbd1: Unsupported socket: should be TCP or UNIX. [ 108.766285][ T6754] veth0_to_bond: Caught tx_queue_len zero misconfig [ 108.791939][ T6758] netlink: 'syz.1.244': attribute type 1 has an invalid length. [ 109.596160][ T6795] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 109.960408][ T6807] team0: entered allmulticast mode [ 109.968174][ T6812] netlink: 'syz.3.255': attribute type 8 has an invalid length. [ 109.984238][ T6807] team_slave_0: entered allmulticast mode [ 109.992374][ T6807] team_slave_1: entered allmulticast mode [ 110.237805][ T6819] pimreg: entered allmulticast mode [ 110.533805][ T6833] netlink: 'syz.2.263': attribute type 1 has an invalid length. [ 110.711992][ T6838] netlink: 'syz.1.264': attribute type 21 has an invalid length. [ 110.728916][ T6836] netlink: 'syz.1.264': attribute type 21 has an invalid length. [ 110.743799][ T6838] __nla_validate_parse: 31 callbacks suppressed [ 110.743814][ T6838] netlink: 156 bytes leftover after parsing attributes in process `syz.1.264'. [ 110.779976][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 110.788648][ T6836] netlink: 156 bytes leftover after parsing attributes in process `syz.1.264'. [ 110.880535][ T6824] netlink: 'syz.3.260': attribute type 29 has an invalid length. [ 110.895173][ T6824] netlink: 'syz.3.260': attribute type 29 has an invalid length. [ 111.036581][ T6848] netlink: 'syz.2.268': attribute type 12 has an invalid length. [ 111.094332][ T6848] netlink: 148 bytes leftover after parsing attributes in process `syz.2.268'. [ 111.121428][ T6848] netlink: 59 bytes leftover after parsing attributes in process `syz.2.268'. [ 111.194939][ T6854] netlink: 68 bytes leftover after parsing attributes in process `syz.4.270'. [ 111.325429][ T6860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.459576][ T6863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.273'. [ 111.491681][ T6865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.273'. [ 111.520533][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 111.532931][ T6868] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.561278][ T6868] bond0: (slave team0): Enslaving as an active interface with an up link [ 111.577172][ T6867] lo: Caught tx_queue_len zero misconfig [ 111.804363][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'. [ 111.827349][ T6872] syzkaller0: entered promiscuous mode [ 111.843437][ T6872] syzkaller0: entered allmulticast mode [ 111.921142][ T6882] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 111.995161][ T6882] bond4 (unregistering): Released all slaves [ 113.287003][ T6910] validate_nla: 2 callbacks suppressed [ 113.287021][ T6910] netlink: 'syz.4.283': attribute type 1 has an invalid length. [ 113.435206][ T6910] 8021q: adding VLAN 0 to HW filter on device bond4 [ 113.455767][ T6919] bond3: (slave veth0_to_bond): Releasing active interface [ 113.467969][ T6919] veth0_to_bond: left promiscuous mode [ 113.501689][ T6919] bond4: (slave veth0_to_bond): making interface the new active one [ 113.519990][ T6919] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 113.546413][ T6928] sctp: [Deprecated]: syz.3.290 (pid 6928) Use of int in maxseg socket option. [ 113.546413][ T6928] Use struct sctp_assoc_value instead [ 113.632811][ T6910] bond4: entered promiscuous mode [ 113.649830][ T6910] veth0_to_bond: entered promiscuous mode [ 113.669633][ T6910] bond4: entered allmulticast mode [ 113.697432][ T6910] veth0_to_bond: entered allmulticast mode [ 113.760127][ T6925] macvlan2: entered promiscuous mode [ 113.780959][ T6925] macvlan2: entered allmulticast mode [ 113.791319][ T6925] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 113.807431][ T6925] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 114.848725][ T6987] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 115.004680][ T6992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 115.013048][ T6992] IPv6: NLM_F_CREATE should be set when creating new route [ 115.020359][ T6992] IPv6: NLM_F_CREATE should be set when creating new route [ 115.407381][ T7014] netlink: 'syz.4.321': attribute type 1 has an invalid length. [ 115.502677][ T7025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.587863][ T7014] bond6: entered promiscuous mode [ 115.594728][ T7014] 8021q: adding VLAN 0 to HW filter on device bond6 [ 115.602248][ T7009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.621092][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.634323][ T7009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.642196][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.759314][ T7014] 8021q: adding VLAN 0 to HW filter on device bond6 [ 115.769485][ T7014] bond6: (slave ipip0): The slave device specified does not support setting the MAC address [ 115.781647][ T7014] bond6: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 115.794214][ T7014] bond6: (slave ipip0): making interface the new active one [ 115.817374][ T7014] ipip0: entered promiscuous mode [ 115.841464][ T7014] bond6: (slave ipip0): Enslaving as an active interface with an up link [ 116.025034][ T7044] bond4: entered promiscuous mode [ 116.043307][ T7044] bond4: entered allmulticast mode [ 116.080928][ T7051] __nla_validate_parse: 13 callbacks suppressed [ 116.080948][ T7051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.329'. [ 116.435694][ T7068] netlink: 60 bytes leftover after parsing attributes in process `syz.3.335'. [ 116.657194][ T7083] netlink: 44 bytes leftover after parsing attributes in process `syz.3.340'. [ 117.122371][ T7103] netlink: 'syz.1.347': attribute type 1 has an invalid length. [ 117.144893][ T7103] netlink: 224 bytes leftover after parsing attributes in process `syz.1.347'. [ 117.259012][ T7112] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 117.304009][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.350'. [ 117.343987][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.350'. [ 117.874340][ T7140] netlink: 176 bytes leftover after parsing attributes in process `syz.1.353'. [ 117.902361][ T7140] netlink: 32 bytes leftover after parsing attributes in process `syz.1.353'. [ 117.933154][ T7151] netlink: 112 bytes leftover after parsing attributes in process `syz.3.354'. [ 118.156032][ T7158] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 118.395078][ T7170] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 118.413953][ T7170] netlink: 228 bytes leftover after parsing attributes in process `syz.1.359'. [ 118.664908][ T7184] netlink: 'syz.1.362': attribute type 39 has an invalid length. [ 119.297518][ T7225] Bluetooth: MGMT ver 1.23 [ 119.422112][ T29] audit: type=1107 audit(1781234492.308:2): pid=7228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 119.516866][ T7233] bond0: Caught tx_queue_len zero misconfig [ 119.586264][ T7236] syzkaller0: entered promiscuous mode [ 119.596081][ T7236] syzkaller0: entered allmulticast mode [ 119.744435][ T7245] netlink: 'syz.4.379': attribute type 4 has an invalid length. [ 120.256262][ T7281] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 120.516993][ T7292] netlink: 'syz.4.391': attribute type 1 has an invalid length. [ 120.623984][ T7292] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 120.641284][ T5756] IPVS: starting estimator thread 0... [ 120.758445][ T7303] IPVS: using max 27 ests per chain, 64800 per kthread [ 120.769711][ T7309] : entered promiscuous mode [ 120.806762][ T7310] xt_hashlimit: size too large, truncated to 1048576 [ 120.826143][ T7312] netlink: 'syz.0.397': attribute type 1 has an invalid length. [ 121.005854][ T7312] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.038952][ T7315] veth0_to_bond: left allmulticast mode [ 121.095402][ T7315] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 121.144855][ T7318] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 121.317386][ T7339] __nla_validate_parse: 9 callbacks suppressed [ 121.317404][ T7339] netlink: 27 bytes leftover after parsing attributes in process `syz.3.400'. [ 121.618006][ T7354] netlink: 'syz.4.403': attribute type 12 has an invalid length. [ 121.641003][ T7357] openvswitch: netlink: Flow actions attr not present in new flow. [ 121.807419][ T7367] netlink: 'syz.2.408': attribute type 1 has an invalid length. [ 121.915999][ T7367] 8021q: adding VLAN 0 to HW filter on device bond5 [ 121.962896][ T7367] bond5: (slave geneve2): making interface the new active one [ 121.973526][ T7367] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 122.488947][ T7397] bridge0: port 3(veth1_to_bridge) entered blocking state [ 122.512185][ T7397] bridge0: port 3(veth1_to_bridge) entered disabled state [ 122.544348][ T7397] veth1_to_bridge: entered allmulticast mode [ 122.578840][ T7397] veth1_to_bridge: entered promiscuous mode [ 122.600482][ T7397] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 122.642167][ T7397] bridge0: port 3(veth1_to_bridge) entered blocking state [ 122.649524][ T7397] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 122.720296][ T7409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.419'. [ 122.918181][ T7418] netlink: 'syz.2.421': attribute type 1 has an invalid length. [ 122.954374][ T7419] netlink: 228 bytes leftover after parsing attributes in process `syz.3.420'. [ 123.075529][ T7418] 8021q: adding VLAN 0 to HW filter on device bond6 [ 123.115464][ T7418] macvlan2: entered promiscuous mode [ 123.122497][ T7418] macvlan2: entered allmulticast mode [ 123.129434][ T7433] netlink: 32 bytes leftover after parsing attributes in process `syz.1.425'. [ 123.135644][ T7418] bond6: entered promiscuous mode [ 123.144381][ T7418] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 123.157039][ T7418] bond6: left promiscuous mode [ 123.212173][ T7421] bond6: (slave veth0_to_bond): making interface the new active one [ 123.220486][ T7438] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.424'. [ 123.237315][ T7421] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 123.275241][ T7429] bond6: entered promiscuous mode [ 123.297317][ T7429] veth0_to_bond: entered promiscuous mode [ 123.313464][ T7429] bond6: entered allmulticast mode [ 123.331426][ T7429] veth0_to_bond: entered allmulticast mode [ 123.555005][ T7450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.428'. [ 123.573836][ T7454] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 124.199637][ T6398] bond0: (slave bond_slave_0): interface is now down [ 124.212632][ T6398] bond0: (slave bond_slave_1): interface is now down [ 124.222330][ T6398] bond0: now running without any active interface! [ 124.565216][ T7497] netlink: 27 bytes leftover after parsing attributes in process `syz.4.437'. [ 124.755592][ T7500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.438'. [ 124.768157][ T7500] syzkaller0: entered promiscuous mode [ 124.774030][ T7500] syzkaller0: entered allmulticast mode [ 124.787566][ T7500] netlink: 144 bytes leftover after parsing attributes in process `syz.0.438'. [ 126.821450][ T7463] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.834689][ T7484] netlink: 'syz.3.435': attribute type 1 has an invalid length. [ 127.194349][ T7520] netlink: 20 bytes leftover after parsing attributes in process `syz.4.445'. [ 127.296594][ T7521] netlink: 32 bytes leftover after parsing attributes in process `syz.0.446'. [ 127.514884][ T7535] netlink: 52 bytes leftover after parsing attributes in process `syz.2.449'. [ 127.558100][ T7535] bridge0: port 3(veth1_to_bridge) entered disabled state [ 127.566280][ T7535] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.573591][ T7535] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.647770][ T7540] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.655785][ T7540] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.671001][ T7545] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 128.263827][ T7562] netlink: 'syz.3.456': attribute type 1 has an invalid length. [ 128.350499][ T7573] netlink: 'syz.1.459': attribute type 1 has an invalid length. [ 128.558324][ T7579] xt_hl: Unknown Hop Limit match mode: 206 [ 128.586680][ T7573] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.625501][ T7575] bond3: (slave gretap1): making interface the new active one [ 128.646626][ T7575] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 128.897305][ T7594] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 129.350352][ T7614] netlink: 96 bytes leftover after parsing attributes in process `syz.0.473'. [ 129.391287][ T7614] netlink: 52 bytes leftover after parsing attributes in process `syz.0.473'. [ 129.590917][ T7626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.475'. [ 129.631977][ T7626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.475'. [ 129.815152][ T7638] syzkaller0: entered promiscuous mode [ 129.828859][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.481'. [ 129.842575][ T7642] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 129.849241][ T7638] syzkaller0: entered allmulticast mode [ 129.858084][ T7640] IPv6: NLM_F_CREATE should be specified when creating new route [ 129.872017][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.482'. [ 129.884920][ T7638] bridge_slave_1: left allmulticast mode [ 129.891665][ T7638] bridge_slave_1: left promiscuous mode [ 129.897493][ T7638] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.908101][ T7638] bridge_slave_0: left allmulticast mode [ 129.921150][ T7638] bridge_slave_0: left promiscuous mode [ 129.927659][ T7645] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 129.940702][ T7638] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.126214][ T7649] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 130.207252][ T7656] netlink: 'syz.2.487': attribute type 1 has an invalid length. [ 130.343925][ T7661] netlink: 'syz.3.489': attribute type 3 has an invalid length. [ 130.599214][ T7675] netlink: 'syz.1.493': attribute type 1 has an invalid length. [ 130.624469][ T7675] netlink: 228 bytes leftover after parsing attributes in process `syz.1.493'. [ 130.654467][ T7680] netlink: 'syz.1.493': attribute type 1 has an invalid length. [ 130.721874][ T7680] netlink: 'syz.1.493': attribute type 1 has an invalid length. [ 130.926389][ T7693] SET target dimension over the limit! [ 131.028147][ T7691] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 131.065921][ T7691] bond7 (unregistering): Released all slaves [ 131.147555][ T7706] batadv_slave_0: Caught tx_queue_len zero misconfig [ 131.159138][ T7706] netem: change failed [ 131.339364][ T7713] netlink: 'syz.1.505': attribute type 16 has an invalid length. [ 131.368880][ T7713] veth0_macvtap: entered allmulticast mode [ 131.393796][ T7717] bridge0: port 3(gretap0) entered disabled state [ 131.400529][ T7717] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.455609][ T7717] netlink: 'syz.3.508': attribute type 3 has an invalid length. [ 131.685773][ T7733] Bluetooth: MGMT ver 1.23 [ 131.718857][ T7733] Bluetooth: hci1: too big key_count value 32778 [ 131.935518][ T7744] sctp: [Deprecated]: syz.1.516 (pid 7744) Use of int in max_burst socket option. [ 131.935518][ T7744] Use struct sctp_assoc_value instead [ 132.415919][ T7757] bond2 (unregistering): Released all slaves [ 132.554665][ T7766] nbd: must specify at least one socket [ 132.673909][ T7768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.698860][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.708960][ T7768] batadv_slave_1: entered promiscuous mode [ 132.972626][ T7794] __nla_validate_parse: 6 callbacks suppressed [ 132.972659][ T7794] netlink: 640 bytes leftover after parsing attributes in process `syz.2.528'. [ 133.030811][ T7794] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 133.316662][ T7810] FAULT_INJECTION: forcing a failure. [ 133.316662][ T7810] name failslab, interval 1, probability 0, space 0, times 0 [ 133.332662][ T7810] CPU: 1 UID: 0 PID: 7810 Comm: syz.3.533 Not tainted syzkaller #0 PREEMPT(full) [ 133.332683][ T7810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 133.332693][ T7810] Call Trace: [ 133.332700][ T7810] [ 133.332708][ T7810] dump_stack_lvl+0xe8/0x150 [ 133.332753][ T7810] should_fail_ex+0x412/0x560 [ 133.332778][ T7810] should_failslab+0xa8/0x100 [ 133.332798][ T7810] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 133.332824][ T7810] ? __alloc_skb+0x1d0/0x7d0 [ 133.332848][ T7810] ? __local_bh_enable_ip+0xd0/0x130 [ 133.332868][ T7810] __alloc_skb+0x1d0/0x7d0 [ 133.332896][ T7810] rtmsg_ifinfo_build_skb+0x84/0x260 [ 133.332923][ T7810] rtmsg_ifinfo+0x8c/0x1a0 [ 133.332952][ T7810] netif_state_change+0x297/0x3a0 [ 133.332979][ T7810] ? __pfx_netif_state_change+0x10/0x10 [ 133.333002][ T7810] ? ip_tunnel_find+0x48f/0x520 [ 133.333050][ T7810] ? ip_tunnel_update+0x669/0xb40 [ 133.333073][ T7810] netdev_state_change+0x10a/0x220 [ 133.333099][ T7810] ip_tunnel_changelink+0x246/0x310 [ 133.333116][ T7810] ? ipgre_netlink_parms+0x666/0x9c0 [ 133.333133][ T7810] erspan_changelink+0x65f/0x8c0 [ 133.333148][ T7810] ? rtnl_newlink+0x883/0x1bb0 [ 133.333171][ T7810] ? __pfx_erspan_changelink+0x10/0x10 [ 133.333195][ T7810] ? ns_capable+0x89/0xe0 [ 133.333217][ T7810] rtnl_newlink+0x1607/0x1bb0 [ 133.333253][ T7810] ? __pfx_rtnl_newlink+0x10/0x10 [ 133.333274][ T7810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.333319][ T7810] ? kasan_quarantine_put+0xbb/0x1f0 [ 133.333341][ T7810] ? lockdep_hardirqs_on+0x7a/0x110 [ 133.333362][ T7810] ? nlmon_xmit+0xb0/0x100 [ 133.333378][ T7810] ? kmem_cache_free+0x182/0x650 [ 133.333414][ T7810] ? __lock_acquire+0x6b5/0x2cf0 [ 133.333438][ T7810] ? __dev_queue_xmit+0x2b6/0x3950 [ 133.333462][ T7810] ? __local_bh_enable_ip+0xd0/0x130 [ 133.333481][ T7810] ? lockdep_hardirqs_on+0x7a/0x110 [ 133.333499][ T7810] ? __dev_queue_xmit+0x2b6/0x3950 [ 133.333516][ T7810] ? __local_bh_enable_ip+0xd0/0x130 [ 133.333532][ T7810] ? __dev_queue_xmit+0x2b6/0x3950 [ 133.333559][ T7810] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 133.333600][ T7810] ? __pfx_rtnl_newlink+0x10/0x10 [ 133.333626][ T7810] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 133.333655][ T7810] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 133.333680][ T7810] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 133.333705][ T7810] ? ref_tracker_free+0x693/0x840 [ 133.333740][ T7810] ? __pfx_ref_tracker_free+0x10/0x10 [ 133.333756][ T7810] ? __asan_memcpy+0x40/0x70 [ 133.333771][ T7810] ? __skb_clone+0x63/0x7a0 [ 133.333790][ T7810] netlink_rcv_skb+0x232/0x4b0 [ 133.333811][ T7810] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 133.333831][ T7810] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 133.333859][ T7810] ? netlink_deliver_tap+0x2e/0x1b0 [ 133.333879][ T7810] ? netlink_deliver_tap+0x2e/0x1b0 [ 133.333902][ T7810] netlink_unicast+0x75c/0x8e0 [ 133.333928][ T7810] netlink_sendmsg+0x813/0xb40 [ 133.333946][ T7810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.333963][ T7810] ? aa_sock_msg_perm+0xf1/0x1b0 [ 133.333984][ T7810] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 133.334004][ T7810] ____sys_sendmsg+0x972/0x9f0 [ 133.334024][ T7810] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.334043][ T7810] ? import_iovec+0x73/0xa0 [ 133.334062][ T7810] ___sys_sendmsg+0x2a5/0x360 [ 133.334074][ T7810] ? __lock_acquire+0x6b5/0x2cf0 [ 133.334090][ T7810] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.334127][ T7810] ? __fget_files+0x2a/0x420 [ 133.334143][ T7810] ? __fget_files+0x3a0/0x420 [ 133.334165][ T7810] __x64_sys_sendmsg+0x1bd/0x2a0 [ 133.334181][ T7810] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 133.334200][ T7810] ? rcu_is_watching+0x15/0xb0 [ 133.334222][ T7810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.334238][ T7810] do_syscall_64+0x174/0x580 [ 133.334251][ T7810] ? trace_irq_disable+0x3b/0x140 [ 133.334271][ T7810] ? clear_bhb_loop+0x40/0x90 [ 133.334287][ T7810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.334300][ T7810] RIP: 0033:0x7f5afe19ce59 [ 133.334318][ T7810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.334328][ T7810] RSP: 002b:00007f5aff004028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.334346][ T7810] RAX: ffffffffffffffda RBX: 00007f5afe416090 RCX: 00007f5afe19ce59 [ 133.334355][ T7810] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 133.334363][ T7810] RBP: 00007f5aff004090 R08: 0000000000000000 R09: 0000000000000000 [ 133.334370][ T7810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.334378][ T7810] R13: 00007f5afe416128 R14: 00007f5afe416090 R15: 00007ffff2cd6a38 [ 133.334399][ T7810] [ 133.336486][ T7814] syz.2.535: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 133.876293][ T7821] validate_nla: 1 callbacks suppressed [ 133.876308][ T7821] netlink: 'syz.4.537': attribute type 1 has an invalid length. [ 133.924067][ T7814] CPU: 0 UID: 0 PID: 7814 Comm: syz.2.535 Not tainted syzkaller #0 PREEMPT(full) [ 133.924097][ T7814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 133.924109][ T7814] Call Trace: [ 133.924117][ T7814] [ 133.924126][ T7814] dump_stack_lvl+0xe8/0x150 [ 133.924155][ T7814] warn_alloc+0x249/0x340 [ 133.924188][ T7814] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 133.924225][ T7814] ? __pfx_warn_alloc+0x10/0x10 [ 133.924262][ T7814] ? kasan_save_track+0x4f/0x80 [ 133.924288][ T7814] ? kasan_save_track+0x3e/0x80 [ 133.924314][ T7814] ? __kasan_kmalloc+0x93/0xb0 [ 133.924341][ T7814] ? __kmalloc_cache_noprof+0x31c/0x660 [ 133.924367][ T7814] ? xskq_create+0x56/0x170 [ 133.924406][ T7814] ? xsk_setsockopt+0x54c/0x990 [ 133.924429][ T7814] ? do_sock_setsockopt+0x17c/0x1b0 [ 133.924464][ T7814] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 133.924492][ T7814] ? do_syscall_64+0x174/0x580 [ 133.924516][ T7814] __vmalloc_node_range_noprof+0x132/0x1750 [ 133.924573][ T7814] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 133.924605][ T7814] ? __kasan_kmalloc+0x93/0xb0 [ 133.924645][ T7814] vmalloc_user_noprof+0xad/0xe0 [ 133.924670][ T7814] ? xskq_create+0xbf/0x170 [ 133.924699][ T7814] xskq_create+0xbf/0x170 [ 133.924728][ T7814] xsk_init_queue+0x8a/0xe0 [ 133.924757][ T7814] xsk_setsockopt+0x54c/0x990 [ 133.924786][ T7814] ? __pfx_xsk_setsockopt+0x10/0x10 [ 133.924812][ T7814] ? __pfx_aa_sk_perm+0x10/0x10 [ 133.924842][ T7814] ? aa_sock_opt_perm+0xff/0x1a0 [ 133.924872][ T7814] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 133.924897][ T7814] ? __pfx_xsk_setsockopt+0x10/0x10 [ 133.924923][ T7814] do_sock_setsockopt+0x17c/0x1b0 [ 133.924956][ T7814] __x64_sys_setsockopt+0x13d/0x1b0 [ 133.924987][ T7814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.925008][ T7814] do_syscall_64+0x174/0x580 [ 133.925026][ T7814] ? trace_irq_disable+0x3b/0x140 [ 133.925053][ T7814] ? clear_bhb_loop+0x40/0x90 [ 133.925075][ T7814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.925093][ T7814] RIP: 0033:0x7f461f19ce59 [ 133.925111][ T7814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.925126][ T7814] RSP: 002b:00007f461ff89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 133.925146][ T7814] RAX: ffffffffffffffda RBX: 00007f461f415fa0 RCX: 00007f461f19ce59 [ 133.925160][ T7814] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 133.925178][ T7814] RBP: 00007f461f232d6f R08: 0000000000000004 R09: 0000000000000000 [ 133.925190][ T7814] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.925201][ T7814] R13: 00007f461f416038 R14: 00007f461f415fa0 R15: 00007ffd89c18318 [ 133.925232][ T7814] [ 133.925994][ T7814] Mem-Info: [ 134.214029][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 134.270216][ T7814] active_anon:5728 inactive_anon:0 isolated_anon:0 [ 134.270216][ T7814] active_file:3019 inactive_file:39968 isolated_file:0 [ 134.270216][ T7814] unevictable:768 dirty:258 writeback:0 [ 134.270216][ T7814] slab_reclaimable:10341 slab_unreclaimable:96632 [ 134.270216][ T7814] mapped:33503 shmem:1288 pagetables:1239 [ 134.270216][ T7814] sec_pagetables:0 bounce:0 [ 134.270216][ T7814] kernel_misc_reclaimable:0 [ 134.270216][ T7814] free:1326584 free_pcp:11391 free_cma:0 [ 134.362960][ T7814] Node 0 active_anon:22912kB inactive_anon:0kB active_file:12076kB inactive_file:159672kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138012kB dirty:1032kB writeback:0kB shmem:3616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13296kB pagetables:4908kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 134.437513][ T7841] netlink: 24 bytes leftover after parsing attributes in process `syz.4.539'. [ 134.451880][ T7814] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 134.527324][ T7814] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 134.567577][ T7814] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 134.583395][ T7814] Node 0 DMA32 free:1348652kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23012kB inactive_anon:0kB active_file:12076kB inactive_file:159672kB unevictable:1536kB writepending:1032kB zspages:0kB present:3129332kB managed:2552776kB mlocked:0kB bounce:0kB free_pcp:45760kB local_pcp:20680kB free_cma:0kB [ 134.646991][ T7814] lowmem_reserve[]: 0 0 0 0 0 [ 134.657004][ T7814] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 134.690934][ T7814] lowmem_reserve[]: 0 0 0 0 0 [ 134.695791][ T7814] Node 1 Normal free:3942704kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 134.744943][ T7814] lowmem_reserve[]: 0 0 0 0 0 [ 134.750592][ T7814] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 134.767320][ T7814] Node 0 DMA32: 3319*4kB (UM) 1448*8kB (UME) 705*16kB (UE) 146*32kB (UME) 441*64kB (UME) 374*128kB (UME) 212*256kB (UME) 111*512kB (UM) 50*1024kB (UM) 8*2048kB (UME) 257*4096kB (UM) = 1348268kB [ 134.791574][ T7814] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 134.806428][ T7814] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 8*16kB (UM) 11*32kB (UM) 7*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3942704kB [ 134.829806][ T7814] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.845403][ T7814] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.883596][ T7814] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.916257][ T7814] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.973163][ T7814] 44271 total pagecache pages [ 134.992427][ T7814] 0 pages in swap cache [ 135.001617][ T7814] Free swap = 124996kB [ 135.012368][ T7853] xt_connbytes: Forcing CT accounting to be enabled [ 135.024715][ T7814] Total swap = 124996kB [ 135.029373][ T7814] 2097051 pages RAM [ 135.035057][ T7814] 0 pages HighMem/MovableOnly [ 135.042842][ T7857] netlink: 'syz.4.543': attribute type 10 has an invalid length. [ 135.058803][ T7814] 427072 pages reserved [ 135.063955][ T7814] 0 pages cma reserved [ 135.137599][ T7857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.146366][ T7857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.155263][ T7857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.162943][ T7857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.542461][ T7878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.552'. [ 135.721171][ T7891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.731340][ T7872] syzkaller0: entered promiscuous mode [ 135.740389][ T7872] syzkaller0: entered allmulticast mode [ 136.388508][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'. [ 137.254892][ T7928] netlink: 'syz.0.567': attribute type 3 has an invalid length. [ 137.264531][ T7928] netlink: 666 bytes leftover after parsing attributes in process `syz.0.567'. [ 137.430234][ T7943] x_tables: unsorted underflow at hook 4 [ 137.731998][ T7958] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 137.761346][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 137.801935][ T7958] netlink: 'syz.4.573': attribute type 12 has an invalid length. [ 137.922848][ T7971] netlink: 16 bytes leftover after parsing attributes in process `syz.1.576'. [ 138.644714][ T8004] netlink: 'syz.0.583': attribute type 2 has an invalid length. [ 138.660829][ T8004] netlink: 'syz.0.583': attribute type 2 has an invalid length. [ 139.320388][ T8037] sctp: [Deprecated]: syz.3.595 (pid 8037) Use of int in max_burst socket option. [ 139.320388][ T8037] Use struct sctp_assoc_value instead [ 139.367237][ T8041] netlink: 'syz.2.596': attribute type 17 has an invalid length. [ 139.375252][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'. [ 139.405283][ T8041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.596'. [ 139.510132][ T8041] gretap0: entered promiscuous mode [ 139.516294][ T8041] gretap0: left promiscuous mode [ 140.164672][ T8067] syzkaller1: entered promiscuous mode [ 140.178838][ T8067] syzkaller1: entered allmulticast mode [ 140.385910][ T8079] netlink: 48 bytes leftover after parsing attributes in process `syz.1.607'. [ 140.524159][ T8086] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 140.552330][ T8086] xt_hashlimit: size too large, truncated to 1048576 [ 140.876758][ T8110] IPv6: addrconf: prefix option has invalid lifetime [ 141.609225][ T8148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.629'. [ 141.648746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.805732][ T8157] netlink: 24 bytes leftover after parsing attributes in process `syz.0.631'. [ 141.834296][ T8151] bond7: Removing last arp target with arp_interval on [ 141.955091][ T8163] tipc: Failed to remove unknown binding: 66,0,0/0:1225603052/1225603054 [ 141.966378][ T8163] tipc: Failed to remove unknown binding: 66,0,0/0:1225603052/1225603053 [ 141.975529][ T8163] tipc: Failed to remove unknown binding: 66,0,0/0:1225603052/1225603054 [ 141.984647][ T8163] tipc: Failed to remove unknown binding: 66,0,0/0:1225603052/1225603053 [ 142.126117][ T8168] netlink: 108 bytes leftover after parsing attributes in process `syz.1.637'. [ 142.137597][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.637'. [ 142.264310][ T8173] mac80211_hwsim hwsim9 ÿ: renamed from wlan1 [ 142.288140][ T8175] xt_hashlimit: size too large, truncated to 1048576 [ 142.307577][ T8173] netlink: 'syz.0.639': attribute type 39 has an invalid length. [ 142.323205][ T8178] vcan1: entered promiscuous mode [ 142.338394][ T8178] vcan1: entered allmulticast mode [ 142.368169][ T8180] –: renamed from vxcan1 (while UP) [ 142.506023][ T8183] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.574044][ T8180] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.842192][ T8205] xt_hashlimit: size too large, truncated to 1048576 [ 142.858951][ T5639] Bluetooth: hci4: link tx timeout [ 142.865011][ T5639] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 142.875845][ T5639] Bluetooth: hci4: link tx timeout [ 142.885310][ T5639] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 143.142952][ T29] audit: type=1804 audit(1781234516.028:3): pid=8221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.652" name="/newroot/146/cgroup.controllers" dev="tmpfs" ino=760 res=1 errno=0 [ 143.181506][ T29] audit: type=1800 audit(1781234516.028:4): pid=8221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.652" name="cgroup.controllers" dev="tmpfs" ino=760 res=0 errno=0 [ 143.635165][ T8254] netlink: 36 bytes leftover after parsing attributes in process `syz.3.662'. [ 143.741687][ T8250] openvswitch: netlink: Key type 30 is not supported [ 143.756439][ T8261] netlink: 'syz.0.663': attribute type 1 has an invalid length. [ 144.001973][ T8275] netlink: 44 bytes leftover after parsing attributes in process `syz.2.668'. [ 144.389842][ T8296] netlink: 'syz.2.673': attribute type 1 has an invalid length. [ 144.520493][ T8306] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 144.536823][ T8296] bond8: (slave bridge3): making interface the new active one [ 144.549981][ T8306] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 144.563451][ T8307] netlink: 48 bytes leftover after parsing attributes in process `syz.3.674'. [ 144.575787][ T8296] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 144.590750][ T8306] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 144.634543][ T8306] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 144.674042][ T8306] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 144.689308][ T8302] macvlan2: entered promiscuous mode [ 144.701325][ T8302] macvlan2: entered allmulticast mode [ 144.707798][ T8306] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 144.720644][ T8302] bond8: entered promiscuous mode [ 144.732944][ T8306] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 144.738357][ T8302] bridge3: entered promiscuous mode [ 144.757640][ T8306] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 144.769678][ T8302] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 144.787826][ T8306] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 144.803390][ T8302] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 144.821047][ T8306] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 144.860907][ T8302] bond8: left promiscuous mode [ 144.877047][ T8302] bridge3: left promiscuous mode [ 144.930773][ T5639] Bluetooth: hci4: command 0x0406 tx timeout [ 145.129731][ T8311] syzkaller0: entered promiscuous mode [ 145.134006][ T8328] nbd: must specify a size in bytes for the device [ 145.135526][ T8311] syzkaller0: entered allmulticast mode [ 145.176638][ T8332] xt_hl: Unknown Hop Limit match mode: 206 [ 145.421276][ T8345] FAULT_INJECTION: forcing a failure. [ 145.421276][ T8345] name failslab, interval 1, probability 0, space 0, times 0 [ 145.469953][ T8345] CPU: 0 UID: 0 PID: 8345 Comm: syz.3.685 Not tainted syzkaller #0 PREEMPT(full) [ 145.469976][ T8345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 145.469987][ T8345] Call Trace: [ 145.469993][ T8345] [ 145.470000][ T8345] dump_stack_lvl+0xe8/0x150 [ 145.470025][ T8345] should_fail_ex+0x412/0x560 [ 145.470049][ T8345] should_failslab+0xa8/0x100 [ 145.470068][ T8345] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 145.470093][ T8345] ? __alloc_skb+0x186/0x7d0 [ 145.470117][ T8345] ? __alloc_skb+0x1d0/0x7d0 [ 145.470144][ T8345] ? __local_bh_enable_ip+0xd0/0x130 [ 145.470166][ T8345] __alloc_skb+0x1d0/0x7d0 [ 145.470195][ T8345] netlink_sendmsg+0x5d4/0xb40 [ 145.470238][ T8345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.470261][ T8345] ? aa_sock_msg_perm+0xf1/0x1b0 [ 145.470292][ T8345] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 145.470321][ T8345] ____sys_sendmsg+0x972/0x9f0 [ 145.470342][ T8345] ? __might_fault+0xaf/0x130 [ 145.470374][ T8345] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.470403][ T8345] ? import_iovec+0x73/0xa0 [ 145.470431][ T8345] ___sys_sendmsg+0x2a5/0x360 [ 145.470450][ T8345] ? __lock_acquire+0x6b5/0x2cf0 [ 145.470475][ T8345] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.470531][ T8345] ? __fget_files+0x2a/0x420 [ 145.470554][ T8345] ? __fget_files+0x3a0/0x420 [ 145.470589][ T8345] __x64_sys_sendmsg+0x1bd/0x2a0 [ 145.470612][ T8345] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 145.470641][ T8345] ? __pfx_ksys_write+0x10/0x10 [ 145.470678][ T8345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.470701][ T8345] do_syscall_64+0x174/0x580 [ 145.470721][ T8345] ? trace_irq_disable+0x3b/0x140 [ 145.470749][ T8345] ? clear_bhb_loop+0x40/0x90 [ 145.470773][ T8345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.470792][ T8345] RIP: 0033:0x7f5afe19ce59 [ 145.470810][ T8345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.470834][ T8345] RSP: 002b:00007f5afefe3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.470854][ T8345] RAX: ffffffffffffffda RBX: 00007f5afe416180 RCX: 00007f5afe19ce59 [ 145.470868][ T8345] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000005 [ 145.470879][ T8345] RBP: 00007f5afefe3090 R08: 0000000000000000 R09: 0000000000000000 [ 145.470891][ T8345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.470902][ T8345] R13: 00007f5afe416218 R14: 00007f5afe416180 R15: 00007ffff2cd6a38 [ 145.470934][ T8345] [ 145.731969][ T8349] xt_bpf: check failed: parse error [ 146.935424][ T8358] FAULT_INJECTION: forcing a failure. [ 146.935424][ T8358] name failslab, interval 1, probability 0, space 0, times 0 [ 146.968772][ T8358] CPU: 1 UID: 0 PID: 8358 Comm: syz.1.688 Not tainted syzkaller #0 PREEMPT(full) [ 146.968795][ T8358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 146.968805][ T8358] Call Trace: [ 146.968812][ T8358] [ 146.968820][ T8358] dump_stack_lvl+0xe8/0x150 [ 146.968845][ T8358] should_fail_ex+0x412/0x560 [ 146.968870][ T8358] should_failslab+0xa8/0x100 [ 146.968890][ T8358] __kmalloc_cache_noprof+0x88/0x660 [ 146.968916][ T8358] ? __hw_addr_create+0x60/0x250 [ 146.968939][ T8358] __hw_addr_create+0x60/0x250 [ 146.968955][ T8358] ? stack_depot_init+0x36/0x1a0 [ 146.968977][ T8358] __hw_addr_add_ex+0x1c2/0x520 [ 146.969001][ T8358] dev_addr_init+0x15e/0x240 [ 146.969029][ T8358] ? __pfx_dev_addr_init+0x10/0x10 [ 146.969051][ T8358] ? alloc_netdev_mqs+0xa8/0x1210 [ 146.969080][ T8358] alloc_netdev_mqs+0x2b3/0x1210 [ 146.969098][ T8358] ? __pfx_erspan_setup+0x10/0x10 [ 146.969122][ T8358] rtnl_create_link+0x31f/0xd70 [ 146.969149][ T8358] rtnl_newlink_create+0x277/0xb70 [ 146.969167][ T8358] ? __pfx___nla_validate_parse+0x10/0x10 [ 146.969195][ T8358] ? __mutex_lock+0x608/0x1550 [ 146.969216][ T8358] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 146.969237][ T8358] ? __pfx___mutex_lock+0x10/0x10 [ 146.969266][ T8358] ? ns_capable+0x89/0xe0 [ 146.969288][ T8358] rtnl_newlink+0x166a/0x1bb0 [ 146.969331][ T8358] ? __pfx_rtnl_newlink+0x10/0x10 [ 146.969353][ T8358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.969407][ T8358] ? kasan_quarantine_put+0xbb/0x1f0 [ 146.969431][ T8358] ? lockdep_hardirqs_on+0x7a/0x110 [ 146.969453][ T8358] ? nlmon_xmit+0xb0/0x100 [ 146.969469][ T8358] ? kmem_cache_free+0x182/0x650 [ 146.969505][ T8358] ? __lock_acquire+0x6b5/0x2cf0 [ 146.969528][ T8358] ? __dev_queue_xmit+0x2b6/0x3950 [ 146.969550][ T8358] ? __local_bh_enable_ip+0xd0/0x130 [ 146.969569][ T8358] ? lockdep_hardirqs_on+0x7a/0x110 [ 146.969586][ T8358] ? __dev_queue_xmit+0x2b6/0x3950 [ 146.969603][ T8358] ? __local_bh_enable_ip+0xd0/0x130 [ 146.969619][ T8358] ? __dev_queue_xmit+0x2b6/0x3950 [ 146.969645][ T8358] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 146.969684][ T8358] ? __pfx_rtnl_newlink+0x10/0x10 [ 146.969709][ T8358] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 146.969738][ T8358] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 146.969762][ T8358] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 146.969785][ T8358] ? ref_tracker_free+0x693/0x840 [ 146.969809][ T8358] ? __pfx_ref_tracker_free+0x10/0x10 [ 146.969827][ T8358] ? __asan_memcpy+0x40/0x70 [ 146.969848][ T8358] ? __skb_clone+0x63/0x7a0 [ 146.969874][ T8358] netlink_rcv_skb+0x232/0x4b0 [ 146.969902][ T8358] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 146.969929][ T8358] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 146.969968][ T8358] ? netlink_deliver_tap+0x2e/0x1b0 [ 146.969994][ T8358] ? netlink_deliver_tap+0x2e/0x1b0 [ 146.970031][ T8358] netlink_unicast+0x75c/0x8e0 [ 146.970067][ T8358] netlink_sendmsg+0x813/0xb40 [ 146.970093][ T8358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.970114][ T8358] ? aa_sock_msg_perm+0xf1/0x1b0 [ 146.970142][ T8358] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 146.970173][ T8358] ____sys_sendmsg+0x972/0x9f0 [ 146.970221][ T8358] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.970252][ T8358] ? import_iovec+0x73/0xa0 [ 146.970280][ T8358] ___sys_sendmsg+0x2a5/0x360 [ 146.970300][ T8358] ? __lock_acquire+0x6b5/0x2cf0 [ 146.970326][ T8358] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.970386][ T8358] ? __fget_files+0x2a/0x420 [ 146.970410][ T8358] ? __fget_files+0x3a0/0x420 [ 146.970445][ T8358] __x64_sys_sendmsg+0x1bd/0x2a0 [ 146.970469][ T8358] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 146.970501][ T8358] ? __pfx_ksys_write+0x10/0x10 [ 146.970540][ T8358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.970562][ T8358] do_syscall_64+0x174/0x580 [ 146.970582][ T8358] ? trace_irq_disable+0x3b/0x140 [ 146.970612][ T8358] ? clear_bhb_loop+0x40/0x90 [ 146.970636][ T8358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.970657][ T8358] RIP: 0033:0x7f41eed9ce59 [ 146.970676][ T8358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.970692][ T8358] RSP: 002b:00007f41ecfd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.970713][ T8358] RAX: ffffffffffffffda RBX: 00007f41ef016090 RCX: 00007f41eed9ce59 [ 146.970728][ T8358] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 146.970740][ T8358] RBP: 00007f41ecfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 146.970752][ T8358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 146.970763][ T8358] R13: 00007f41ef016128 R14: 00007f41ef016090 R15: 00007ffea7ec68a8 [ 146.970796][ T8358] [ 147.519203][ T5639] Bluetooth: hci4: command 0x0406 tx timeout [ 147.947352][ T8380] xt_l2tp: v2 doesn't support IP mode [ 147.964773][ T8380] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 147.971255][ T8380] syzkaller1: linktype set to 823 [ 147.978801][ T8380] netlink: 'syz.0.698': attribute type 1 has an invalid length. [ 148.045537][ T8385] netlink: 'syz.1.694': attribute type 9 has an invalid length. [ 148.141050][ T8385] netlink: 'syz.1.694': attribute type 6 has an invalid length. [ 148.175153][ T8392] netlink: 'syz.3.695': attribute type 1 has an invalid length. [ 148.553179][ T8393] netlink: 'syz.4.699': attribute type 2 has an invalid length. [ 148.606791][ T8409] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.701'. [ 148.676160][ T8409] openvswitch: netlink: Message has 5 unknown bytes. [ 148.765171][ T8414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.701'. [ 148.915549][ T8413] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 149.046776][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.704'. [ 149.385376][ T8438] xt_TCPMSS: Only works on TCP SYN packets [ 149.427683][ T8438] netlink: 1124 bytes leftover after parsing attributes in process `syz.0.704'. [ 149.589153][ T8423] netlink: 'syz.0.704': attribute type 1 has an invalid length. [ 149.642170][ T8423] netlink: 476 bytes leftover after parsing attributes in process `syz.0.704'. [ 149.693193][ T8423] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.704'. [ 149.769096][ T8418] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.792785][ T8426] netlink: 72 bytes leftover after parsing attributes in process `syz.2.706'. [ 150.134393][ T8464] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 150.199743][ T8463] ip6tnl0: Caught tx_queue_len zero misconfig [ 150.465435][ T8471] syzkaller0: entered promiscuous mode [ 150.493975][ T8471] syzkaller0: entered allmulticast mode [ 150.637448][ T8476] tipc: Enabled bearer , priority 0 [ 150.699281][ T8469] tipc: Resetting bearer [ 150.847057][ T8469] tipc: Disabling bearer [ 151.075425][ T5293] veth1_vlan: left promiscuous mode [ 151.142780][ T8487] netlink: 76 bytes leftover after parsing attributes in process `syz.2.716'. [ 151.263624][ T8477] syzkaller0: entered promiscuous mode [ 151.306765][ T8477] syzkaller0: entered allmulticast mode [ 151.970921][ T8528] netlink: 'syz.2.727': attribute type 9 has an invalid length. [ 153.172257][ T8563] x_tables: duplicate underflow at hook 2 [ 153.190187][ T8564] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.733'. [ 153.220176][ T8564] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 153.360803][ T8567] netlink: 156 bytes leftover after parsing attributes in process `syz.1.733'. [ 153.635554][ T8582] netlink: 165 bytes leftover after parsing attributes in process `syz.3.737'. [ 153.640010][ T8570] bond7: option resend_igmp: invalid value (32767) [ 153.657692][ T8582] netlink: 165 bytes leftover after parsing attributes in process `syz.3.737'. [ 153.669959][ T8582] netlink: 165 bytes leftover after parsing attributes in process `syz.3.737'. [ 153.681037][ T8582] netlink: 165 bytes leftover after parsing attributes in process `syz.3.737'. [ 153.702992][ T8570] bond7: option resend_igmp: allowed values 0 - 255 [ 153.753201][ T8570] bond7 (unregistering): Released all slaves [ 154.988576][ T8635] __nla_validate_parse: 61 callbacks suppressed [ 154.988612][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 155.119717][ T8638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.752'. [ 155.141824][ T8638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.752'. [ 155.213000][ T8638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.752'. [ 155.258135][ T8638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.752'. [ 155.345561][ T8645] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.638007][ T8648] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 155.710462][ T8648] bond5: (slave lo): Enslaving as an active interface with an up link [ 155.744878][ T8648] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 155.859320][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.754'. [ 156.636760][ T8684] netlink: 'syz.0.762': attribute type 10 has an invalid length. [ 156.674079][ T8684] netlink: 228 bytes leftover after parsing attributes in process `syz.0.762'. [ 157.357874][ T8714] IPv6: sit1: Disabled Multicast RS [ 158.877608][ T8736] netlink: 64 bytes leftover after parsing attributes in process `syz.2.767'. [ 158.900277][ T8737] syzkaller1: entered promiscuous mode [ 158.905794][ T8737] syzkaller1: entered allmulticast mode [ 159.093325][ T8745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.769'. [ 159.106927][ T8745] lo: Caught tx_queue_len zero misconfig [ 159.653490][ T8688] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 160.112508][ T8764] netlink: 20 bytes leftover after parsing attributes in process `syz.2.775'. [ 160.144036][ T8771] netlink: 60 bytes leftover after parsing attributes in process `syz.2.775'. [ 160.172068][ T8772] netlink: 176 bytes leftover after parsing attributes in process `syz.4.776'. [ 160.209256][ T8772] netlink: 32 bytes leftover after parsing attributes in process `syz.4.776'. [ 160.507003][ T8781] netlink: 48 bytes leftover after parsing attributes in process `syz.1.778'. [ 160.556911][ T8787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.584963][ T8781] nbd: must specify a size in bytes for the device [ 160.779309][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'. [ 160.820623][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'. [ 160.936307][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.785'. [ 161.020611][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.785'. [ 161.240757][ T8813] netlink: 'syz.0.787': attribute type 29 has an invalid length. [ 161.287617][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 161.455982][ T8821] netlink: 'syz.0.787': attribute type 29 has an invalid length. [ 161.505282][ T8826] bond6: (slave veth0_to_bond): Releasing active interface [ 161.514183][ T8826] veth0_to_bond: left promiscuous mode [ 161.529301][ T8826] veth0_to_bond: left allmulticast mode [ 161.585285][ T8826] bridge4: port 1(veth0_to_bond) entered blocking state [ 161.612964][ T8826] bridge4: port 1(veth0_to_bond) entered disabled state [ 161.635587][ T8826] veth0_to_bond: entered allmulticast mode [ 161.655882][ T8826] veth0_to_bond: entered promiscuous mode [ 162.265425][ T8850] xt_limit: Overflow, try lower: 271964/0 [ 162.466908][ T8853] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 162.633320][ T8859] syzkaller0: entered promiscuous mode [ 162.655339][ T8859] syzkaller0: entered allmulticast mode [ 163.170458][ T8869] netlink: 'syz.3.804': attribute type 1 has an invalid length. [ 163.628612][ T8886] ieee802154 phy1 wpan1: encryption failed: -22 [ 163.789198][ T8892] tc_dump_action: action bad kind [ 163.806528][ T8895] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 163.849548][ T8898] xt_policy: output policy not valid in PREROUTING and INPUT [ 163.863194][ T8895] 0ªX¹¦Dö»: entered allmulticast mode [ 164.164526][ T8901] syzkaller0: entered promiscuous mode [ 164.185013][ T8901] syzkaller0: entered allmulticast mode [ 165.031996][ T8940] ve: renamed from veth0_vlan (while UP) [ 165.151583][ T8945] bond0: entered promiscuous mode [ 165.188639][ T8945] bond_slave_0: entered promiscuous mode [ 165.227542][ T8945] bond_slave_1: entered promiscuous mode [ 165.291620][ T8949] __nla_validate_parse: 11 callbacks suppressed [ 165.291635][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.817'. [ 165.505391][ T8945] netlink: 'syz.1.817': attribute type 4 has an invalid length. [ 165.553718][ T8945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.817'. [ 165.673963][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'. [ 165.931687][ T8971] sctp: [Deprecated]: syz.2.821 (pid 8971) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.931687][ T8971] Use struct sctp_sack_info instead [ 166.060207][ T8971] openvswitch: netlink: Invalid VLAN frame [ 166.345393][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035d18800: rx timeout, send abort [ 166.457996][ T8952] syz.0.820 (8952) used greatest stack depth: 18600 bytes left [ 166.770345][ T8993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.827'. [ 166.820531][ T8995] netlink: 108 bytes leftover after parsing attributes in process `syz.1.827'. [ 166.848025][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058424c00: rx timeout, send abort [ 166.858228][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035d18800: abort rx timeout. Force session deactivation [ 166.979564][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.828'. [ 167.050196][ T9004] netlink: 72 bytes leftover after parsing attributes in process `syz.4.829'. [ 167.117229][ T9004] netlink: 72 bytes leftover after parsing attributes in process `syz.4.829'. [ 167.357326][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058424c00: abort rx timeout. Force session deactivation [ 168.282012][ T9053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.840'. [ 169.826858][ T142] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 170.347733][ T9086] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 170.705996][ T9133] netlink: 56 bytes leftover after parsing attributes in process `syz.2.855'. [ 171.234397][ T9155] openvswitch: netlink: EtherType 0 is less than min 600 [ 171.296873][ T9153] netlink: 32 bytes leftover after parsing attributes in process `syz.1.862'. [ 171.537714][ T9169] netlink: 'syz.4.863': attribute type 1 has an invalid length. [ 171.560264][ T9164] netlink: 'syz.2.864': attribute type 1 has an invalid length. [ 171.592952][ T9164] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.600256][ T9164] IPv6: NLM_F_CREATE should be set when creating new route [ 171.705415][ T9161] netlink: 'syz.2.864': attribute type 1 has an invalid length. [ 171.738137][ T9174] openvswitch: netlink: IP tunnel dst address not specified [ 171.775785][ T9161] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.863895][ T9142] netlink: 'syz.0.859': attribute type 1 has an invalid length. [ 172.073756][ T9142] 8021q: adding VLAN 0 to HW filter on device bond4 [ 172.082053][ T9189] netlink: 28 bytes leftover after parsing attributes in process `syz.4.868'. [ 172.193178][ T9196] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 172.221412][ T9179] bond4: (slave geneve2): making interface the new active one [ 172.250167][ T9179] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 172.309577][ T9198] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 172.427637][ T9203] xt_TPROXY: Can be used only with -p tcp or -p udp [ 172.623780][ T9207] netlink: 'syz.4.873': attribute type 1 has an invalid length. [ 172.754053][ T9214] xt_check_match_common: 23 callbacks suppressed [ 172.754097][ T9214] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 172.843855][ T9207] 8021q: adding VLAN 0 to HW filter on device bond8 [ 172.969517][ T9225] netlink: 'syz.4.873': attribute type 10 has an invalid length. [ 173.006567][ T9225] netlink: 40 bytes leftover after parsing attributes in process `syz.4.873'. [ 173.046289][ T9226] netlink: 27 bytes leftover after parsing attributes in process `syz.3.875'. [ 173.076694][ T9229] netlink: 256 bytes leftover after parsing attributes in process `syz.0.877'. [ 173.113075][ T9229] netlink: 256 bytes leftover after parsing attributes in process `syz.0.877'. [ 173.221077][ T9213] bond8: (slave veth7): Enslaving as an active interface with a down link [ 173.296643][ T9236] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 173.320199][ T9216] bond0: (slave dummy0): Releasing backup interface [ 173.351418][ T9216] bond8: (slave dummy0): making interface the new active one [ 173.372143][ T9216] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 173.420529][ T9225] dummy0: entered promiscuous mode [ 173.452524][ T9245] netlink: 232 bytes leftover after parsing attributes in process `syz.0.881'. [ 173.453153][ T9246] netlink: 232 bytes leftover after parsing attributes in process `syz.0.881'. [ 173.472779][ T9225] bond8: (slave dummy0): Releasing active interface [ 173.795050][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.882'. [ 175.128948][ T9319] trusted_key: syz.0.899 sent an empty control message without MSG_MORE. [ 175.735542][ T9339] __nla_validate_parse: 2 callbacks suppressed [ 175.735569][ T9339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.901'. [ 176.000507][ T9351] netlink: 104 bytes leftover after parsing attributes in process `syz.2.902'. [ 176.170896][ T9344] 8021q: adding VLAN 0 to HW filter on device bond7 [ 176.241039][ T9344] bond7 (unregistering): Released all slaves [ 176.337438][ T9365] netlink: 'syz.4.906': attribute type 4 has an invalid length. [ 176.374954][ T9367] netlink: 'syz.4.906': attribute type 4 has an invalid length. [ 176.669264][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.909'. [ 176.718039][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.909'. [ 176.759313][ T9377] xt_l2tp: unknown flags: 10 [ 177.266358][ T9397] IPv6: NLM_F_CREATE should be specified when creating new route [ 177.379918][ T9397] mac80211_hwsim hwsim6 wlan0: Caught tx_queue_len zero misconfig [ 177.608937][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.921'. [ 177.986677][ T9430] netlink: 'syz.0.922': attribute type 33 has an invalid length. [ 178.370967][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.926'. [ 178.405264][ T9450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.926'. [ 178.815018][ T9469] bridge3: entered allmulticast mode [ 179.312281][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.934'. [ 179.340527][ T9486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'. [ 179.427823][ T9494] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.936'. [ 179.805556][ T9507] team0: Caught tx_queue_len zero misconfig [ 180.161905][ T9524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.211790][ T9526] veth0_macvtap: Caught tx_queue_len zero misconfig [ 180.966612][ T9548] netlink: 'syz.2.950': attribute type 1 has an invalid length. [ 181.117909][ T9552] __nla_validate_parse: 3 callbacks suppressed [ 181.117949][ T9552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.950'. [ 181.453886][ T9548] 8021q: adding VLAN 0 to HW filter on device bond9 [ 181.488039][ T9562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.524930][ T9548] netlink: 'syz.2.950': attribute type 10 has an invalid length. [ 181.582185][ T9568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.598148][ T9548] netlink: 40 bytes leftover after parsing attributes in process `syz.2.950'. [ 181.655579][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.952'. [ 181.949752][ T9555] bond9: (slave dummy0): Enslaving as a backup interface with an up link [ 182.001632][ T6392] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 182.075680][ T9548] dummy0: entered promiscuous mode [ 182.145840][ T9548] bond9: (slave dummy0): Removing an active aggregator [ 182.180868][ T6404] bond9: (slave dummy0): link status up again after 0 ms [ 182.205418][ T9548] bond9: (slave dummy0): Releasing backup interface [ 182.704976][ T9588] geneve3: entered allmulticast mode [ 183.493566][ T9613] syzkaller0: entered promiscuous mode [ 183.514665][ T9613] syzkaller0: entered allmulticast mode [ 183.605848][ T9629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.964'. [ 183.771778][ T9634] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.968'. [ 183.844309][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.966'. [ 183.974447][ T9640] bridge0: port 3(veth1_to_bridge) entered blocking state [ 183.981787][ T9640] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 183.989452][ T9640] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.996629][ T9640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.004028][ T9640] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.011194][ T9640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.079973][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 184.094054][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 184.107982][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 184.121911][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 184.135920][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 184.136748][ T9643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.971'. [ 184.151780][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 184.172635][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 184.277485][ T9644] netlink: 88 bytes leftover after parsing attributes in process `syz.2.969'. [ 184.393670][ T9648] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 184.912262][ T9640] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 184.942080][ T9640] veth1_vlan: entered promiscuous mode [ 184.993777][ T9640] veth1_vlan: entered allmulticast mode [ 185.059849][ T9640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 185.100552][ T9640] 0ªX¹¦Dö»: entered promiscuous mode [ 185.123584][ T9640] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.155713][ T9640] 8021q: adding VLAN 0 to HW filter on device bond3 [ 185.168524][ C1] net_ratelimit: 1379 callbacks suppressed [ 185.168576][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 185.188855][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 185.201706][ T9640] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.210242][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 185.224597][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 185.239026][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 185.253257][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 185.267614][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 185.281976][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 185.294481][ T9640] 8021q: adding VLAN 0 to HW filter on device bond6 [ 185.303815][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 185.317654][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 185.350004][ T9640] 8021q: adding VLAN 0 to HW filter on device bond7 [ 185.375087][ T9640] 8021q: adding VLAN 0 to HW filter on device bond8 [ 185.416653][ T6402] bridge4: port 1(veth0_to_bond) entered blocking state [ 185.423781][ T6402] bridge4: port 1(veth0_to_bond) entered forwarding state [ 185.617111][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 185.698163][ T9665] team1: entered promiscuous mode [ 185.711272][ T9665] team1: entered allmulticast mode [ 190.178461][ C1] net_ratelimit: 8870 callbacks suppressed [ 190.178492][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 190.198370][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 190.211617][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 190.225490][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 190.239257][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 190.252660][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 190.266325][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 190.279488][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 190.292690][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 190.305995][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 194.145568][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.189799][ C1] net_ratelimit: 5296 callbacks suppressed [ 195.189822][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 195.210773][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 195.229780][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 195.244033][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 195.259984][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 195.275426][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 195.289721][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 195.305609][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 195.321486][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 195.336839][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 200.183342][ T5639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 200.196815][ T5639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 200.205044][ T5639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 200.206184][ C1] net_ratelimit: 3025 callbacks suppressed [ 200.206278][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 200.216058][ T5639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 200.225711][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 200.246496][ T5639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 200.258488][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 200.274144][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 200.290036][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 200.305288][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 200.320419][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 200.335396][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 200.351642][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 200.366322][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 200.535789][ T5639] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 200.551947][ T5639] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 200.560235][ T5639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 200.571539][ T5639] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 200.582047][ T5639] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 201.520286][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 201.532878][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 201.544824][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 201.560567][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 201.569570][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 201.664470][ T5639] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 201.677989][ T5639] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 201.686128][ T5639] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 201.699615][ T5639] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 201.713573][ T5639] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 201.806436][ T5639] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 201.826712][ T5639] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 201.841492][ T5639] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 201.851217][ T5639] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 201.859622][ T5639] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 202.378404][ T5639] Bluetooth: hci5: command tx timeout [ 202.608596][ T5639] Bluetooth: hci6: command tx timeout [ 203.648674][ T5639] Bluetooth: hci7: command tx timeout [ 203.808290][ T5639] Bluetooth: hci8: command tx timeout [ 203.889481][ T5639] Bluetooth: hci9: command tx timeout [ 204.198231][ C1] sched: DL replenish lagged too much [ 204.427808][ T6398] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.450599][ T9725] Bluetooth: hci5: command tx timeout [ 204.474614][ T6398] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.781593][ T9725] Bluetooth: hci6: command tx timeout [ 205.208414][ C0] net_ratelimit: 3928 callbacks suppressed [ 205.208434][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.215334][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 205.226569][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.227005][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.227389][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.246917][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 205.251798][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.252227][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.253149][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.271708][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 208.598556][ T9725] Bluetooth: hci7: command tx timeout [ 208.631038][ T9725] Bluetooth: hci8: command tx timeout [ 208.649874][ T9725] Bluetooth: hci9: command tx timeout [ 208.655301][ T9725] Bluetooth: hci3: command 0x0406 tx timeout [ 208.740912][ T9725] Bluetooth: hci2: command 0x0406 tx timeout [ 208.760982][ T9725] Bluetooth: hci1: command 0x0406 tx timeout [ 208.767034][ T9725] Bluetooth: hci0: command 0x0406 tx timeout [ 210.218477][ C0] net_ratelimit: 13498 callbacks suppressed [ 210.218497][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.220475][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.224822][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.225715][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.244477][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.249112][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.249495][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.250334][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.270584][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.273838][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.517570][ T9725] Bluetooth: hci5: command tx timeout [ 210.536974][ T9725] Bluetooth: hci6: command tx timeout [ 215.003217][ T9725] Bluetooth: hci6: command tx timeout [ 215.022987][ T9725] Bluetooth: hci5: command tx timeout [ 215.042522][ T9725] Bluetooth: hci9: command tx timeout [ 215.047955][ T9725] Bluetooth: hci8: command tx timeout [ 215.104076][ T9725] Bluetooth: hci7: command tx timeout [ 215.228721][ C0] net_ratelimit: 13274 callbacks suppressed [ 215.228739][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.232096][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.235947][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.255610][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.258941][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.259604][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.279534][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.283683][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.284149][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.303919][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 217.355962][ T9725] Bluetooth: hci8: command tx timeout [ 217.375175][ T9725] Bluetooth: hci9: command tx timeout [ 217.396369][ T9725] Bluetooth: hci7: command tx timeout [ 220.238479][ C0] net_ratelimit: 13019 callbacks suppressed [ 220.238500][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.256622][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.257374][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.276891][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.280911][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.281343][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.282278][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.301610][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.305694][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.306134][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.248245][ C0] net_ratelimit: 13829 callbacks suppressed [ 225.248266][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 225.259308][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 225.266707][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.267277][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.289242][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 225.291503][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 225.292182][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 225.312612][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 225.316331][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.316927][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.258538][ C0] net_ratelimit: 13149 callbacks suppressed [ 230.258564][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.276957][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.289334][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 230.295781][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.301765][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.302422][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.324044][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.326307][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.326720][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 230.328305][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.268315][ C0] net_ratelimit: 13750 callbacks suppressed [ 235.268337][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.286747][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 235.298743][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 235.299590][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 235.321441][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 235.335091][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.335537][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.335939][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 235.357773][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 235.360252][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 240.278508][ C0] net_ratelimit: 13651 callbacks suppressed [ 240.278528][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 240.290377][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 240.296854][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.297244][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.298001][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 240.318953][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 240.321653][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 240.322069][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.322977][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.343828][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 245.288256][ C0] net_ratelimit: 13916 callbacks suppressed [ 245.288279][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.306551][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.312438][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 245.318956][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 245.319571][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 245.340677][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 245.343467][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.343913][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.344853][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 245.365960][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 250.298371][ C0] net_ratelimit: 13429 callbacks suppressed [ 250.298392][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 250.313042][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 250.316890][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.338706][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 250.341005][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.341426][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 250.342384][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 250.363389][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 250.365931][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.366327][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.308256][ C0] net_ratelimit: 13840 callbacks suppressed [ 255.308277][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 255.326754][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.339150][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.351267][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 255.351998][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 255.372962][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 255.375579][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 255.375964][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.376740][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.398126][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 260.318314][ C0] net_ratelimit: 13659 callbacks suppressed [ 260.318336][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 260.328760][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 260.336555][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 260.336955][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.337771][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.359136][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 260.361484][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 260.361857][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 260.362667][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.383621][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 265.328477][ C0] net_ratelimit: 13923 callbacks suppressed [ 265.328500][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 265.346971][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.359200][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 265.359500][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.381918][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 265.383585][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 265.383977][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 265.384897][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.405674][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 265.408282][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.338505][ C0] net_ratelimit: 13913 callbacks suppressed [ 270.338526][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.356761][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.366214][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 270.369300][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 270.393368][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 270.395189][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 270.405853][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.406243][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.406653][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 270.407566][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 275.348562][ C0] net_ratelimit: 13627 callbacks suppressed [ 275.348585][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.358971][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 275.366949][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 275.367345][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 275.368355][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.388958][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 275.391743][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.392162][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 275.393217][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 275.423097][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 280.358393][ C0] net_ratelimit: 13723 callbacks suppressed [ 280.358416][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 280.368494][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 280.376693][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 280.377069][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.377829][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.397791][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 280.401486][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 280.401859][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 280.402628][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.427101][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 285.368449][ C0] net_ratelimit: 13974 callbacks suppressed [ 285.368470][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 285.377982][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 285.386818][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 285.387237][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.387976][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.407576][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 285.411654][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 285.412024][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 285.412689][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.432536][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 290.378309][ C0] net_ratelimit: 13911 callbacks suppressed [ 290.378332][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 290.391958][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 290.396705][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.397175][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.398289][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 290.419209][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 290.421448][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 290.421915][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.423017][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.444553][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 295.388355][ C0] net_ratelimit: 13439 callbacks suppressed [ 295.388396][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 295.392935][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 295.395401][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.418348][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 295.430784][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.431200][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 295.431628][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 295.432024][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.432723][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.458684][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 300.398291][ C0] net_ratelimit: 13411 callbacks suppressed [ 300.398313][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 300.411330][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 300.416738][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.417196][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.418204][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 300.439910][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 300.453592][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 300.454045][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.454446][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.455432][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 305.408632][ C0] net_ratelimit: 13260 callbacks suppressed [ 305.408655][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.408702][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 305.415053][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.415934][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 305.437477][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 305.439644][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 305.440073][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.441025][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.462298][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 305.464576][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.418410][ C0] net_ratelimit: 13286 callbacks suppressed [ 310.418433][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.436829][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.443870][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.449232][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 310.450149][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.470101][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.473616][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.473993][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.474669][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 310.499666][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.428242][ C0] net_ratelimit: 13825 callbacks suppressed [ 315.428262][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.439580][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.446604][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.447045][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.447870][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 315.469290][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.471558][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.471981][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.472828][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.493677][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.438339][ C0] net_ratelimit: 13551 callbacks suppressed [ 320.438361][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.456647][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 320.460905][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.469104][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.469498][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.469895][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.492190][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.494155][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 320.494559][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.495459][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.448570][ C0] net_ratelimit: 13664 callbacks suppressed [ 325.448592][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.466992][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.471467][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.479339][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 325.479777][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.480218][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.481221][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.502004][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.504691][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 325.505068][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.988145][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 329.995242][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9728/1:b..l P57/1:b..l P9643/1:b..l P9678/1:b..l P9730/1:b..l P9731/3:b..l P9658/1:b..l [ 330.010260][ C1] rcu: (detected by 1, t=10502 jiffies, g=36449, q=1856 ncpus=2) [ 330.018140][ C1] task:syz.3.975 state:R running task stack:26312 pid:9658 tgid:9656 ppid:5641 task_flags:0x40044c flags:0x00080001 [ 330.032576][ C1] Call Trace: [ 330.035931][ C1] [ 330.038894][ C1] __schedule+0x1821/0x5740 [ 330.043429][ C1] ? rcu_is_watching+0x15/0xb0 [ 330.048234][ C1] ? trace_sched_exit_tp+0x3a/0x130 [ 330.053488][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 330.058474][ C1] ? __pfx___schedule+0x10/0x10 [ 330.063361][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 330.068345][ C1] preempt_schedule_irq+0x4d/0xa0 [ 330.074110][ C1] irqentry_exit+0x14f/0x8b0 [ 330.078737][ C1] ? trace_irq_disable+0x3b/0x140 [ 330.083814][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 330.089833][ C1] RIP: 0010:unwind_next_frame+0x10f/0x2550 [ 330.095766][ C1] Code: 43 a3 0e 00 75 1f c6 05 63 43 a3 0e 01 48 c7 c7 40 a3 c9 8b be 48 03 00 00 48 c7 c2 80 a3 c9 8b e8 c6 0c 2b 00 4c 89 64 24 78 <48> 89 5c 24 70 49 8d 5e 50 48 89 d8 48 c1 e8 03 48 89 44 24 40 80 [ 330.115406][ C1] RSP: 0018:ffffc900059c7538 EFLAGS: 00000202 [ 330.121506][ C1] RAX: 0000000000000001 RBX: ffffffff823ace11 RCX: 0000000080000001 [ 330.129506][ C1] RDX: 000000005a44979c RSI: ffffffff8c28b9c0 RDI: ffffffff8c28b980 [ 330.137510][ C1] RBP: dffffc0000000000 R08: ffffffff8176e256 R09: ffffffff8e95cd20 [ 330.145515][ C1] R10: ffffc900059c7658 R11: ffffffff81b0e210 R12: ffffc900059c7640 [ 330.153522][ C1] R13: 1ffff92000b38ec1 R14: ffffc900059c7608 R15: ffffffff8176e256 [ 330.161527][ C1] ? unwind_next_frame+0xa6/0x2550 [ 330.166685][ C1] ? __reset_page_owner+0x71/0x1f0 [ 330.171833][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 330.178037][ C1] ? unwind_next_frame+0xa6/0x2550 [ 330.183188][ C1] ? unwind_next_frame+0xd5/0x2550 [ 330.188336][ C1] ? unwind_next_frame+0xa6/0x2550 [ 330.193483][ C1] ? save_stack+0x122/0x230 [ 330.198022][ C1] ? __reset_page_owner+0x71/0x1f0 [ 330.203188][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 330.209388][ C1] arch_stack_walk+0x11b/0x150 [ 330.214199][ C1] ? __reset_page_owner+0x71/0x1f0 [ 330.219356][ C1] stack_trace_save+0xa9/0x100 [ 330.224159][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 330.229585][ C1] save_stack+0x122/0x230 [ 330.233960][ C1] ? __pfx_save_stack+0x10/0x10 [ 330.238867][ C1] ? page_ext_put+0x97/0xc0 [ 330.243419][ C1] __reset_page_owner+0x71/0x1f0 [ 330.248407][ C1] __free_frozen_pages+0xc1c/0xd30 [ 330.253571][ C1] ? ___free_pages+0x9a/0x1b0 [ 330.258276][ C1] vfree+0x1d1/0x2f0 [ 330.262211][ C1] ? __pfx_kcov_close+0x10/0x10 [ 330.267097][ C1] kcov_close+0x28/0x50 [ 330.271280][ C1] __fput+0x44f/0xa60 [ 330.275304][ C1] task_work_run+0x1d9/0x270 [ 330.279936][ C1] ? __pfx_task_work_run+0x10/0x10 [ 330.285084][ C1] ? do_exit+0x70a/0x22c0 [ 330.289444][ C1] ? kmem_cache_free+0x182/0x650 [ 330.294418][ C1] ? put_net+0x191/0x260 [ 330.298703][ C1] do_exit+0x70f/0x22c0 [ 330.302884][ C1] ? netlink_unicast+0x7c0/0x8e0 [ 330.307862][ C1] ? __pfx_do_exit+0x10/0x10 [ 330.312500][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 330.317571][ C1] do_group_exit+0x21b/0x2d0 [ 330.322210][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 330.327461][ C1] get_signal+0x1284/0x1330 [ 330.332016][ C1] arch_do_signal_or_restart+0xbc/0x840 [ 330.337607][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 330.343825][ C1] ? fd_install+0x94/0x3d0 [ 330.348292][ C1] exit_to_user_mode_loop+0xa9/0x680 [ 330.353608][ C1] ? rcu_is_watching+0x15/0xb0 [ 330.358404][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.364499][ C1] do_syscall_64+0x353/0x580 [ 330.369116][ C1] ? trace_irq_disable+0x3b/0x140 [ 330.374184][ C1] ? clear_bhb_loop+0x40/0x90 [ 330.378894][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.384808][ C1] RIP: 0033:0x7f5afe15d68e [ 330.389250][ C1] RSP: 002b:00007f5aff002e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 330.397698][ C1] RAX: 0000000000000020 RBX: 00007f5aff0046c0 RCX: 00007f5afe15d68e [ 330.405699][ C1] RDX: 0000000000000020 RSI: 00007f5aff003000 RDI: 0000000000000005 [ 330.413710][ C1] RBP: 0000000000000000 R08: 00007f5aff002f04 R09: 000000000000000c [ 330.421715][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 330.429707][ C1] R13: 00007f5aff002f58 R14: 00007f5aff003000 R15: 0000000000000000 [ 330.437717][ C1] [ 330.440774][ C1] task:modprobe state:R running task stack:24216 pid:9731 tgid:9731 ppid:6402 task_flags:0x400000 flags:0x00080000 [ 330.454315][ C1] Call Trace: [ 330.457617][ C1] [ 330.460587][ C1] __schedule+0x1821/0x5740 [ 330.465163][ C1] ? lock_acquire+0x106/0x350 [ 330.469891][ C1] ? __pfx___schedule+0x10/0x10 [ 330.474782][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 330.479848][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 330.485260][ C1] ? xas_find+0x842/0x990 [ 330.488303][ C0] net_ratelimit: 12502 callbacks suppressed [ 330.488330][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 330.489629][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 330.496693][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 330.507433][ C1] preempt_schedule_common+0x82/0xd0 [ 330.507461][ C1] preempt_schedule_thunk+0x16/0x30 [ 330.513998][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.524837][ C1] _raw_spin_unlock+0x3f/0x50 [ 330.531287][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.535357][ C1] filemap_map_pages+0x1a2a/0x2100 [ 330.549005][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 330.551983][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 330.565167][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 330.569034][ C1] ? filemap_map_pages+0x1e6/0x2100 [ 330.569087][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 330.582172][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.585920][ C1] ? __pte_offset_map+0x29/0x240 [ 330.599377][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.603089][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 330.609777][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 330.620441][ C1] ? do_pte_missing+0x125b/0x33f0 [ 330.620476][ C1] do_pte_missing+0x1f38/0x33f0 [ 330.626498][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 330.637398][ C1] ? handle_mm_fault+0xf1/0x3170 [ 330.681599][ C1] handle_mm_fault+0x1bf2/0x3170 [ 330.686586][ C1] ? handle_mm_fault+0xf1/0x3170 [ 330.691572][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 330.696902][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 330.702163][ C1] do_user_addr_fault+0xa73/0x1340 [ 330.707314][ C1] ? rcu_is_watching+0x15/0xb0 [ 330.712113][ C1] ? trace_page_fault_user+0x84/0x1e0 [ 330.717524][ C1] exc_page_fault+0x6a/0xc0 [ 330.722058][ C1] asm_exc_page_fault+0x26/0x30 [ 330.726939][ C1] RIP: 0033:0x7ff8ee0a0c50 [ 330.731385][ C1] RSP: 002b:00007ffd2a750ec8 EFLAGS: 00010246 [ 330.737500][ C1] RAX: 00007ff8ee0a0c50 RBX: 00007ff8ee008068 RCX: 00007ff8ee2835f0 [ 330.745504][ C1] RDX: 00007ff8edfea580 RSI: 0000000000000000 RDI: 0000000000000000 [ 330.753504][ C1] RBP: 00007ffd2a750ff0 R08: 0000000000000000 R09: 0000000000000000 [ 330.761508][ C1] R10: 00007ff8edfea580 R11: 00007ff8edfe1000 R12: 00007ff8ee2835f0 [ 330.769508][ C1] R13: 00007ff8ee0082d8 R14: 00007ff8ee1b1ca0 R15: 00007ff8edfe1000 [ 330.777553][ C1] [ 330.780608][ C1] task:modprobe state:R running task stack:24312 pid:9730 tgid:9730 ppid:6392 task_flags:0x40000c flags:0x00080000 [ 330.794167][ C1] Call Trace: [ 330.797478][ C1] [ 330.800445][ C1] __schedule+0x1821/0x5740 [ 330.804981][ C1] ? unwind_next_frame+0xa6/0x2550 [ 330.810127][ C1] ? __x64_sys_exit_group+0x3f/0x40 [ 330.815373][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 330.820362][ C1] ? __pfx___schedule+0x10/0x10 [ 330.825251][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 330.830230][ C1] preempt_schedule_irq+0x4d/0xa0 [ 330.835294][ C1] irqentry_exit+0x14f/0x8b0 [ 330.839918][ C1] ? trace_irq_disable+0x3b/0x140 [ 330.845002][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 330.851021][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 330.856344][ C1] Code: ff ff ff e8 01 de 05 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 db 68 96 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 c0 d3 08 0a cc 48 8d 3d e8 ee 91 [ 330.875981][ C1] RSP: 0018:ffffc90005ea72f8 EFLAGS: 00000282 [ 330.882082][ C1] RAX: 348a3b92e84ee600 RBX: 0000000000000000 RCX: 0000000000000046 [ 330.890088][ C1] RDX: 000000004cfe2b93 RSI: ffffffff8e217416 RDI: ffffffff8c28b9e0 [ 330.898103][ C1] RBP: ffffffff8176e256 R08: ffffffff8176e256 R09: ffffffff8e95cd20 [ 330.906115][ C1] R10: ffffc90005ea7468 R11: fffff52000bd4e99 R12: 0000000000000002 [ 330.914117][ C1] R13: ffffffff8e95cd20 R14: 0000000000000000 R15: 0000000000000246 [ 330.922124][ C1] ? unwind_next_frame+0xa6/0x2550 [ 330.927295][ C1] ? unwind_next_frame+0xa6/0x2550 [ 330.932457][ C1] ? __unwind_start+0xf7/0x760 [ 330.937265][ C1] ? unwind_next_frame+0xa6/0x2550 [ 330.942416][ C1] unwind_next_frame+0xc3/0x2550 [ 330.947396][ C1] ? unwind_next_frame+0xa6/0x2550 [ 330.952544][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 330.957780][ C1] ? get_stack_info_noinstr+0x1b/0x130 [ 330.963289][ C1] __unwind_start+0x5b8/0x760 [ 330.968014][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 330.974211][ C1] arch_stack_walk+0xe3/0x150 [ 330.978930][ C1] ? __unwind_start+0xf7/0x760 [ 330.983741][ C1] stack_trace_save+0xa9/0x100 [ 330.988611][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 330.994038][ C1] ? kasan_save_track+0x4f/0x80 [ 330.998930][ C1] ? kmem_cache_free+0x156/0x650 [ 331.003931][ C1] ? __put_anon_vma+0x12b/0x2d0 [ 331.008822][ C1] ? unlink_anon_vmas+0x58b/0x730 [ 331.013879][ C1] ? free_pgtables+0x836/0xb70 [ 331.018679][ C1] ? exit_mmap+0x490/0x9e0 [ 331.023125][ C1] ? __mmput+0x118/0x430 [ 331.027398][ C1] kasan_save_stack+0x3e/0x60 [ 331.032169][ C1] ? __put_anon_vma+0x12b/0x2d0 [ 331.037052][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 331.042281][ C1] kmem_cache_free+0x44f/0x650 [ 331.047092][ C1] __put_anon_vma+0x12b/0x2d0 [ 331.051808][ C1] unlink_anon_vmas+0x58b/0x730 [ 331.056722][ C1] free_pgtables+0x836/0xb70 [ 331.061353][ C1] ? exit_mmap+0x2c2/0x9e0 [ 331.065816][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 331.070986][ C1] ? __pfx_down_write+0x10/0x10 [ 331.075885][ C1] exit_mmap+0x490/0x9e0 [ 331.080167][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 331.084983][ C1] ? uprobe_clear_state+0x53/0x3f0 [ 331.090145][ C1] ? __pfx_exit_aio+0x10/0x10 [ 331.094876][ C1] ? uprobe_clear_state+0x2bc/0x3f0 [ 331.100125][ C1] __mmput+0x118/0x430 [ 331.104228][ C1] exit_mm+0x1f6/0x2d0 [ 331.108339][ C1] do_exit+0x6a2/0x22c0 [ 331.112539][ C1] ? __pfx_do_exit+0x10/0x10 [ 331.117161][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 331.122234][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.127477][ C1] do_group_exit+0x21b/0x2d0 [ 331.132108][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.138207][ C1] __x64_sys_exit_group+0x3f/0x40 [ 331.143270][ C1] x64_sys_call+0x221a/0x2240 [ 331.147981][ C1] do_syscall_64+0x174/0x580 [ 331.152610][ C1] ? trace_irq_disable+0x3b/0x140 [ 331.157679][ C1] ? clear_bhb_loop+0x40/0x90 [ 331.162388][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.168308][ C1] RIP: 0033:0x7fe1c1a316c5 [ 331.172809][ C1] RSP: 002b:00007ffeed7299c8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 331.181256][ C1] RAX: ffffffffffffffda RBX: 00007fe1c1b32fe8 RCX: 00007fe1c1a316c5 [ 331.189263][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 331.197273][ C1] RBP: 0000000000000001 R08: 00007ffeed729958 R09: 0000000000000000 [ 331.205274][ C1] R10: 00007ffeed7297f0 R11: 0000000000000202 R12: 0000000000000000 [ 331.213290][ C1] R13: 0000000000000001 R14: 00007fe1c1b31680 R15: 00007fe1c1b33000 [ 331.221315][ C1] [ 331.224380][ C1] task:syz.2.978 state:R running task stack:26656 pid:9678 tgid:9675 ppid:5630 task_flags:0x40044c flags:0x00080001 [ 331.237940][ C1] Call Trace: [ 331.241245][ C1] [ 331.244211][ C1] __schedule+0x1821/0x5740 [ 331.248753][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 331.254080][ C1] ? __kernel_text_address+0xd/0x30 [ 331.259319][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 331.265526][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 331.270523][ C1] ? __pfx___schedule+0x10/0x10 [ 331.275425][ C1] preempt_schedule_irq+0x4d/0xa0 [ 331.280486][ C1] irqentry_exit+0x14f/0x8b0 [ 331.285113][ C1] ? trace_irq_disable+0x3b/0x140 [ 331.290185][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 331.296205][ C1] RIP: 0010:__reset_page_owner+0x5f/0x1f0 [ 331.301966][ C1] Code: 47 71 0c 48 8d 1c 08 48 83 c3 08 48 89 d9 48 c1 e9 03 48 ba 00 00 00 00 00 fc ff df 0f b6 0c 11 84 c9 0f 85 49 01 00 00 8b 1b <48> 89 c7 e8 f9 ba 01 00 bf 00 20 00 00 e8 8f 01 00 00 44 0f b7 e5 [ 331.321606][ C1] RSP: 0018:ffffc90005d37890 EFLAGS: 00000246 [ 331.327717][ C1] RAX: ffff88801dc58a70 RBX: 00000000026c01eb RCX: 0000000000000000 [ 331.335720][ C1] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 331.343723][ C1] RBP: 0000000000000000 R08: ffffffff823c85e2 R09: ffffffff8e95cd20 [ 331.351729][ C1] R10: dffffc0000000000 R11: fffff94000308ddf R12: ffffea0001846ec0 [ 331.359743][ C1] R13: 1ffffd4000308dd9 R14: ffffea0001846ec0 R15: 00000032f758ba67 [ 331.367758][ C1] ? page_ext_get+0x22/0x2e0 [ 331.372411][ C1] __free_frozen_pages+0xc1c/0xd30 [ 331.377576][ C1] ? ___free_pages+0x9a/0x1b0 [ 331.382296][ C1] vfree+0x1d1/0x2f0 [ 331.386238][ C1] ? __pfx_kcov_close+0x10/0x10 [ 331.391132][ C1] kcov_close+0x28/0x50 [ 331.395341][ C1] __fput+0x44f/0xa60 [ 331.399365][ C1] task_work_run+0x1d9/0x270 [ 331.404012][ C1] ? __pfx_task_work_run+0x10/0x10 [ 331.409162][ C1] ? do_exit+0x70a/0x22c0 [ 331.413529][ C1] ? kmem_cache_free+0x182/0x650 [ 331.418513][ C1] ? put_net+0x191/0x260 [ 331.422796][ C1] do_exit+0x70f/0x22c0 [ 331.426988][ C1] ? netlink_unicast+0x7c0/0x8e0 [ 331.431983][ C1] ? __pfx_do_exit+0x10/0x10 [ 331.436621][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 331.441694][ C1] do_group_exit+0x21b/0x2d0 [ 331.446325][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.451579][ C1] get_signal+0x1284/0x1330 [ 331.456141][ C1] arch_do_signal_or_restart+0xbc/0x840 [ 331.461734][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 331.467945][ C1] ? exc_page_fault+0x6a/0xc0 [ 331.472702][ C1] exit_to_user_mode_loop+0xa9/0x680 [ 331.478019][ C1] ? rcu_is_watching+0x15/0xb0 [ 331.482819][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.488915][ C1] do_syscall_64+0x353/0x580 [ 331.493552][ C1] ? trace_irq_disable+0x3b/0x140 [ 331.498625][ C1] ? clear_bhb_loop+0x40/0x90 [ 331.503333][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.509258][ C1] RIP: 0033:0x7f461f15d68e [ 331.513700][ C1] RSP: 002b:00007f461d3d3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 331.522151][ C1] RAX: 0000000000000020 RBX: 00007f461d3d56c0 RCX: 00007f461f15d68e [ 331.530177][ C1] RDX: 0000000000000020 RSI: 00007f461d3d4000 RDI: 0000000000000010 [ 331.538178][ C1] RBP: 0000000000000000 R08: 00007f461d3d3f04 R09: 000000000000000c [ 331.546176][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 331.554177][ C1] R13: 00007f461d3d3f58 R14: 00007f461d3d4000 R15: 0000000000000000 [ 331.562210][ C1] [ 331.565260][ C1] task:syz.0.971 state:R running task stack:23832 pid:9643 tgid:9642 ppid:5637 task_flags:0x40054c flags:0x00080001 [ 331.578795][ C1] Call Trace: [ 331.582108][ C1] [ 331.585076][ C1] __schedule+0x1821/0x5740 [ 331.589619][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 331.594950][ C1] ? __kernel_text_address+0xd/0x30 [ 331.600209][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 331.606429][ C1] ? __pfx___schedule+0x10/0x10 [ 331.611324][ C1] ? irqentry_exit+0x218/0x8b0 [ 331.616122][ C1] ? irqentry_exit+0x218/0x8b0 [ 331.620920][ C1] ? trace_irq_disable+0x3b/0x140 [ 331.626005][ C1] preempt_schedule_notrace+0x57/0x90 [ 331.631412][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 331.637343][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 331.643540][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 331.649825][ C1] rcu_is_watching+0x7f/0xb0 [ 331.654455][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 331.660731][ C1] __update_page_owner_free_handle+0x68/0x470 [ 331.666840][ C1] ? page_ext_put+0x97/0xc0 [ 331.671392][ C1] __reset_page_owner+0x85/0x1f0 [ 331.676370][ C1] __free_frozen_pages+0xc1c/0xd30 [ 331.681522][ C1] ? ___free_pages+0x9a/0x1b0 [ 331.686234][ C1] vfree+0x1d1/0x2f0 [ 331.690181][ C1] ? __pfx_kcov_close+0x10/0x10 [ 331.695078][ C1] kcov_close+0x28/0x50 [ 331.699269][ C1] __fput+0x44f/0xa60 [ 331.703294][ C1] task_work_run+0x1d9/0x270 [ 331.707941][ C1] ? __pfx_task_work_run+0x10/0x10 [ 331.713099][ C1] ? do_exit+0x70a/0x22c0 [ 331.717463][ C1] ? kmem_cache_free+0x182/0x650 [ 331.722441][ C1] ? put_net+0x191/0x260 [ 331.726734][ C1] do_exit+0x70f/0x22c0 [ 331.730937][ C1] ? __pfx_do_exit+0x10/0x10 [ 331.735582][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 331.740671][ C1] do_group_exit+0x21b/0x2d0 [ 331.745294][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.750539][ C1] get_signal+0x1284/0x1330 [ 331.755103][ C1] arch_do_signal_or_restart+0xbc/0x840 [ 331.760692][ C1] ? __x64_sys_sendmsg+0x26f/0x2a0 [ 331.765834][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 331.772067][ C1] exit_to_user_mode_loop+0xa9/0x680 [ 331.777398][ C1] ? rcu_is_watching+0x15/0xb0 [ 331.782197][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.788288][ C1] do_syscall_64+0x353/0x580 [ 331.792924][ C1] ? trace_irq_disable+0x3b/0x140 [ 331.797988][ C1] ? clear_bhb_loop+0x40/0x90 [ 331.802701][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.808629][ C1] RIP: 0033:0x7fa215b9ce59 [ 331.813074][ C1] RSP: 002b:00007fa216ad0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.821532][ C1] RAX: 000000000000008c RBX: 00007fa215e15fa0 RCX: 00007fa215b9ce59 [ 331.829541][ C1] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 331.837539][ C1] RBP: 00007fa215c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 331.845550][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.853549][ C1] R13: 00007fa215e16038 R14: 00007fa215e15fa0 R15: 00007ffdc39b4a68 [ 331.861578][ C1] [ 331.864629][ C1] task:kworker/u8:4 state:R running task stack:23768 pid:57 tgid:57 ppid:2 task_flags:0x24248060 flags:0x00080000 [ 331.878331][ C1] Workqueue: writeback wb_workfn (flush-8:0) [ 331.884377][ C1] Call Trace: [ 331.887689][ C1] [ 331.890655][ C1] __schedule+0x1821/0x5740 [ 331.895207][ C1] ? wb_workfn+0xb12/0xf10 [ 331.899684][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 331.904677][ C1] ? __pfx___schedule+0x10/0x10 [ 331.909589][ C1] preempt_schedule_irq+0x4d/0xa0 [ 331.914656][ C1] irqentry_exit+0x14f/0x8b0 [ 331.919282][ C1] ? trace_irq_disable+0x3b/0x140 [ 331.924352][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 331.930369][ C1] RIP: 0010:deref_stack_reg+0x194/0x230 [ 331.935959][ C1] Code: 39 c3 0f 96 c1 4d 39 c6 0f 97 c2 20 c2 20 ca 80 fa 01 75 46 49 8d 40 08 48 39 d8 0f 97 c1 4c 39 f0 0f 96 c0 20 c8 3c 01 75 30 <4c> 89 c7 49 89 f7 e8 11 08 00 00 49 89 c6 48 8b 5c 24 18 48 89 d8 [ 331.955595][ C1] RSP: 0018:ffffc900015e6660 EFLAGS: 00000202 [ 331.961695][ C1] RAX: ffffc900015e6c01 RBX: ffffc900015e0000 RCX: 0000000000000001 [ 331.969689][ C1] RDX: ffffc900015e67c8 RSI: dffffc0000000000 RDI: ffffc900015e6788 [ 331.977692][ C1] RBP: 1ffff920002bccf1 R08: ffffc900015e6c48 R09: 0000000000000000 [ 331.985685][ C1] R10: ffffc900015e67d8 R11: fffff520002bccfd R12: 1ffff920002bccf2 [ 331.993690][ C1] R13: 1ffff920002bccf3 R14: ffffc900015e8000 R15: ffffc900015e6788 [ 332.001720][ C1] unwind_next_frame+0x19d5/0x2550 [ 332.006877][ C1] ? unwind_next_frame+0xa6/0x2550 [ 332.012023][ C1] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 332.017695][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 332.023890][ C1] arch_stack_walk+0x11b/0x150 [ 332.028687][ C1] ? ext4_init_io_end+0x29/0x130 [ 332.033660][ C1] stack_trace_save+0xa9/0x100 [ 332.038479][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 332.043914][ C1] save_stack+0x122/0x230 [ 332.048301][ C1] ? __pfx_save_stack+0x10/0x10 [ 332.053228][ C1] ? __free_frozen_pages+0xc1c/0xd30 [ 332.058536][ C1] ? __slab_free+0x274/0x2c0 [ 332.063132][ C1] ? qlist_free_all+0x99/0x100 [ 332.067901][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 332.073547][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 332.078612][ C1] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 332.084265][ C1] ? page_ext_put+0x97/0xc0 [ 332.088770][ C1] __reset_page_owner+0x71/0x1f0 [ 332.093708][ C1] __free_frozen_pages+0xc1c/0xd30 [ 332.098825][ C1] __slab_free+0x274/0x2c0 [ 332.103246][ C1] qlist_free_all+0x99/0x100 [ 332.107838][ C1] ? ext4_init_io_end+0x29/0x130 [ 332.112771][ C1] kasan_quarantine_reduce+0x148/0x160 [ 332.118226][ C1] __kasan_slab_alloc+0x22/0x80 [ 332.123076][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 332.128536][ C1] ? ext4_init_io_end+0x29/0x130 [ 332.133468][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 332.139100][ C1] ext4_init_io_end+0x29/0x130 [ 332.143855][ C1] ext4_do_writepages+0xb7c/0x4670 [ 332.148981][ C1] ? unwind_next_frame+0xa6/0x2550 [ 332.154092][ C1] ? unwind_next_frame+0xa6/0x2550 [ 332.159209][ C1] ? unwind_next_frame+0xa6/0x2550 [ 332.164313][ C1] ? lock_acquire+0x106/0x350 [ 332.168985][ C1] ? unwind_next_frame+0xa6/0x2550 [ 332.174096][ C1] ? unwind_next_frame+0xa6/0x2550 [ 332.179202][ C1] ? unwind_next_frame+0x1bbf/0x2550 [ 332.184487][ C1] ? __pfx_ext4_do_writepages+0x10/0x10 [ 332.190036][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 332.194973][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 332.199909][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 332.204844][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 332.211002][ C1] ? arch_stack_walk+0x11b/0x150 [ 332.215948][ C1] ? ext4_writepages+0x205/0x3b0 [ 332.220887][ C1] ? ext4_writepages+0x205/0x3b0 [ 332.225838][ C1] ext4_writepages+0x241/0x3b0 [ 332.230609][ C1] ? ip6_output+0x340/0x550 [ 332.235116][ C1] ? __pfx_ext4_writepages+0x10/0x10 [ 332.240410][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 332.245548][ C1] ? __pfx_ext4_writepages+0x10/0x10 [ 332.250836][ C1] do_writepages+0x32e/0x550 [ 332.255427][ C1] ? reacquire_held_locks+0x104/0x190 [ 332.260798][ C1] ? writeback_sb_inodes+0x463/0x19d0 [ 332.266172][ C1] __writeback_single_inode+0x133/0x10e0 [ 332.271803][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 332.276918][ C1] writeback_sb_inodes+0x979/0x19d0 [ 332.282116][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 332.287411][ C1] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 332.293071][ C1] ? __pfx_down_read_trylock+0x10/0x10 [ 332.298532][ C1] ? __pfx_move_expired_inodes+0x10/0x10 [ 332.304167][ C1] __writeback_inodes_wb+0x111/0x240 [ 332.309462][ C1] wb_writeback+0x459/0xb00 [ 332.313986][ C1] ? queue_io+0x271/0x470 [ 332.318340][ C1] ? __pfx_wb_writeback+0x10/0x10 [ 332.323362][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 332.328393][ C1] wb_workfn+0xb12/0xf10 [ 332.332634][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 332.337564][ C1] ? look_up_lock_class+0x57/0x110 [ 332.342693][ C1] ? __pfx_wb_workfn+0x10/0x10 [ 332.347463][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 332.352584][ C1] ? process_scheduled_works+0xa70/0x1860 [ 332.358294][ C1] ? process_scheduled_works+0xa70/0x1860 [ 332.364007][ C1] ? process_scheduled_works+0xa70/0x1860 [ 332.369716][ C1] ? process_scheduled_works+0xa70/0x1860 [ 332.375433][ C1] process_scheduled_works+0xb5d/0x1860 [ 332.380997][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 332.386976][ C1] ? assign_work+0x3d5/0x5e0 [ 332.391629][ C1] worker_thread+0xa53/0xfc0 [ 332.396258][ C1] kthread+0x389/0x470 [ 332.400337][ C1] ? __pfx_worker_thread+0x10/0x10 [ 332.405454][ C1] ? __pfx_kthread+0x10/0x10 [ 332.410070][ C1] ret_from_fork+0x514/0xb70 [ 332.414666][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 332.419772][ C1] ? __switch_to+0xc79/0x1410 [ 332.424456][ C1] ? __pfx_kthread+0x10/0x10 [ 332.429044][ C1] ret_from_fork_asm+0x1a/0x30 [ 332.433822][ C1] [ 332.436844][ C1] task:modprobe state:R running task stack:24312 pid:9728 tgid:9728 ppid:6404 task_flags:0x400000 flags:0x00080000 [ 332.450319][ C1] Call Trace: [ 332.453595][ C1] [ 332.456521][ C1] __schedule+0x1821/0x5740 [ 332.461039][ C1] ? arch_stack_walk+0xfb/0x150 [ 332.465898][ C1] ? stack_trace_save+0xa9/0x100 [ 332.470837][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 332.476218][ C1] ? __pfx___schedule+0x10/0x10 [ 332.481066][ C1] preempt_schedule_irq+0x4d/0xa0 [ 332.486100][ C1] irqentry_exit+0x14f/0x8b0 [ 332.490687][ C1] ? trace_irq_disable+0x3b/0x140 [ 332.495719][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 332.501692][ C1] RIP: 0010:lock_release+0x44/0x3c0 [ 332.506882][ C1] Code: 8b 05 f0 39 96 11 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 f3 39 96 11 83 f8 08 0f 83 56 02 00 00 89 c0 48 0f a3 05 9c 61 8e 0e <73> 0d e8 c5 f7 08 00 84 c0 0f 84 94 02 00 00 83 3d 76 94 8e 0e 00 [ 332.526482][ C1] RSP: 0018:ffffc90005e6f6d0 EFLAGS: 00000293 [ 332.532546][ C1] RAX: 0000000000000000 RBX: ffffffff90d3e201 RCX: 0000000080000001 [ 332.540512][ C1] RDX: ffffc90005e6f801 RSI: ffffffff8176e256 RDI: ffffffff8e95cd20 [ 332.548487][ C1] RBP: dffffc0000000000 R08: ffffc90005e6fd30 R09: 0000000000000000 [ 332.556456][ C1] R10: ffffc90005e6f858 R11: fffff52000bcdf0d R12: ffffc90005e6fd40 [ 332.564428][ C1] R13: ffffffff8176e256 R14: ffffffff8e95cd20 R15: ffffffff8176e256 [ 332.572396][ C1] ? unwind_next_frame+0xa6/0x2550 [ 332.577515][ C1] ? unwind_next_frame+0xa6/0x2550 [ 332.582629][ C1] ? unwind_next_frame+0xa6/0x2550 [ 332.587752][ C1] ? deref_stack_reg+0x19f/0x230 [ 332.592706][ C1] ? unwind_next_frame+0xa6/0x2550 [ 332.597821][ C1] unwind_next_frame+0x1bba/0x2550 [ 332.602944][ C1] ? unwind_next_frame+0xa6/0x2550 [ 332.608076][ C1] ? vfs_fstatat+0x45/0x170 [ 332.612580][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 332.618731][ C1] arch_stack_walk+0x11b/0x150 [ 332.623500][ C1] ? __x64_sys_newfstatat+0x151/0x200 [ 332.628876][ C1] stack_trace_save+0xa9/0x100 [ 332.633657][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 332.639051][ C1] save_stack+0x122/0x230 [ 332.643389][ C1] ? __pfx_save_stack+0x10/0x10 [ 332.648240][ C1] ? __free_frozen_pages+0xc1c/0xd30 [ 332.653546][ C1] ? __slab_free+0x274/0x2c0 [ 332.658140][ C1] ? qlist_free_all+0x99/0x100 [ 332.662910][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 332.668538][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 332.673575][ C1] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 332.679203][ C1] ? do_getname+0x2e/0x250 [ 332.683609][ C1] ? vfs_fstatat+0x45/0x170 [ 332.688130][ C1] __reset_page_owner+0x71/0x1f0 [ 332.693065][ C1] __free_frozen_pages+0xc1c/0xd30 [ 332.698182][ C1] __slab_free+0x274/0x2c0 [ 332.702620][ C1] qlist_free_all+0x99/0x100 [ 332.707211][ C1] ? do_getname+0x2e/0x250 [ 332.711634][ C1] kasan_quarantine_reduce+0x148/0x160 [ 332.717095][ C1] __kasan_slab_alloc+0x22/0x80 [ 332.721959][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 332.727434][ C1] ? do_getname+0x2e/0x250 [ 332.731847][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 332.737486][ C1] do_getname+0x2e/0x250 [ 332.741720][ C1] ? getname_flags+0x11/0x20 [ 332.746322][ C1] vfs_fstatat+0x45/0x170 [ 332.750653][ C1] __x64_sys_newfstatat+0x151/0x200 [ 332.755856][ C1] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 332.761588][ C1] ? rcu_is_watching+0x15/0xb0 [ 332.766356][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.772436][ C1] do_syscall_64+0x174/0x580 [ 332.777023][ C1] ? trace_irq_disable+0x3b/0x140 [ 332.782066][ C1] ? clear_bhb_loop+0x40/0x90 [ 332.786755][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.792643][ C1] RIP: 0033:0x7f08a2ad7eaa [ 332.797055][ C1] RSP: 002b:00007ffdcd3f43d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 332.805487][ C1] RAX: ffffffffffffffda RBX: 00007ffdcd3f43eb RCX: 00007f08a2ad7eaa [ 332.813476][ C1] RDX: 00007ffdcd3f4490 RSI: 00007ffdcd3f43e0 RDI: 00000000ffffff9c [ 332.821444][ C1] RBP: 00007ffdcd3f4550 R08: 00007ffdcd3f45d7 R09: 0000000000000000 [ 332.829426][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000022 [ 332.837397][ C1] R13: 00007f08a2aac050 R14: 0000000000000000 R15: 0000000000000000 [ 332.845372][ C1] [ 332.848432][ C1] rcu: rcu_preempt kthread starved for 8331 jiffies! g36449 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 332.859570][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 332.869568][ C1] rcu: RCU grace-period kthread stack dump: [ 332.875481][ C1] task:rcu_preempt state:R running task stack:27544 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 332.889017][ C1] Call Trace: [ 332.892328][ C1] [ 332.895293][ C1] __schedule+0x1821/0x5740 [ 332.899829][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 332.904827][ C1] ? __pfx___schedule+0x10/0x10 [ 332.909734][ C1] ? schedule+0x90/0x360 [ 332.914013][ C1] schedule+0x164/0x360 [ 332.918200][ C1] schedule_timeout+0x158/0x2c0 [ 332.923093][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 332.928517][ C1] ? __pfx_process_timeout+0x10/0x10 [ 332.933855][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 332.939704][ C1] ? prepare_to_swait_event+0x340/0x370 [ 332.945296][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 332.950183][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 332.955414][ C1] ? rcu_gp_init+0x1315/0x15b0 [ 332.960208][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 332.966406][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 332.971721][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 332.976967][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 332.982812][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 332.987430][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 332.992653][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 332.998485][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 333.003456][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 333.008523][ C1] kthread+0x389/0x470 [ 333.012629][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 333.017855][ C1] ? __pfx_kthread+0x10/0x10 [ 333.022500][ C1] ret_from_fork+0x514/0xb70 [ 333.027114][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 333.032249][ C1] ? __switch_to+0xc79/0x1410 [ 333.036953][ C1] ? __pfx_kthread+0x10/0x10 [ 333.041573][ C1] ret_from_fork_asm+0x1a/0x30 [ 333.046388][ C1] [ 333.049429][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 333.055797][ C1] Sending NMI from CPU 1 to CPUs 0: [ 333.061046][ C0] NMI backtrace for cpu 0 [ 333.061085][ C0] CPU: 0 UID: 101 PID: 8730 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 333.061114][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 333.061129][ C0] RIP: 0010:rcu_is_watching+0x0/0xb0 [ 333.061159][ C0] Code: c7 c7 20 24 96 8e e8 af 44 44 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 53 65 ff 05 00 42 8d 11 e8 9b d3 fc 09 89 [ 333.061174][ C0] RSP: 0018:ffffc90000007148 EFLAGS: 00000246 [ 333.061190][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff88803270dd00 [ 333.061202][ C0] RDX: ffff88803270dd00 RSI: 0000000000000001 RDI: 0000000000000000 [ 333.061213][ C0] RBP: ffffc900000072b8 R08: ffffc900000073e0 R09: ffffc900000073f0 [ 333.061226][ C0] R10: ffffc90000007240 R11: fffff52000000e4a R12: 1ffff1100b11300c [ 333.061239][ C0] R13: dffffc0000000000 R14: ffff8880588f6000 R15: ffffc900000073b8 [ 333.061253][ C0] FS: 00007f3af8d63780(0000) GS:ffff88812529f000(0000) knlGS:0000000000000000 [ 333.061267][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.061279][ C0] CR2: 00007f2029a79fa0 CR3: 00000000355f8000 CR4: 00000000003526f0 [ 333.061294][ C0] Call Trace: [ 333.061301][ C0] [ 333.061307][ C0] rcu_read_lock_held+0x15/0x50 [ 333.061330][ C0] __find_rr_leaf+0x353/0x760 [ 333.061357][ C0] ? __pfx___find_rr_leaf+0x10/0x10 [ 333.061376][ C0] ? __pfx_fib6_node_lookup+0x10/0x10 [ 333.061405][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 333.061425][ C0] fib6_table_lookup+0x3b4/0xa80 [ 333.061462][ C0] ? __pfx_fib6_table_lookup+0x10/0x10 [ 333.061484][ C0] ? rt6_multipath_hash+0x148b/0x19b0 [ 333.061522][ C0] ip6_pol_route+0x228/0x13d0 [ 333.061544][ C0] ? ip6_pol_route+0x160/0x13d0 [ 333.061568][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 333.061592][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 333.061613][ C0] ? nf_hook_slow+0x176/0x220 [ 333.061635][ C0] fib6_rule_action+0x9d7/0xc00 [ 333.061657][ C0] ? fib_rules_lookup+0x9b/0xea0 [ 333.061673][ C0] ? lock_acquire+0x106/0x350 [ 333.061689][ C0] ? __pfx_fib6_rule_action+0x10/0x10 [ 333.061711][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 333.061730][ C0] ? nf_nat_ipv6_in+0x203/0x2c0 [ 333.061754][ C0] ? fib6_rule_match+0x79a/0xa80 [ 333.061774][ C0] ? __pfx_fib6_rule_action+0x10/0x10 [ 333.061796][ C0] fib_rules_lookup+0x768/0xea0 [ 333.061812][ C0] ? lock_acquire+0x106/0x350 [ 333.061829][ C0] ? fib_rules_lookup+0x9b/0xea0 [ 333.061848][ C0] ? __pfx_fib_rules_lookup+0x10/0x10 [ 333.061864][ C0] ? l3mdev_update_flow+0x29/0x640 [ 333.061883][ C0] ? l3mdev_update_flow+0x4d1/0x640 [ 333.061904][ C0] fib6_rule_lookup+0x1a0/0x730 [ 333.061937][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 333.061964][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 333.061985][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 333.062008][ C0] ? ip6t_do_table+0x1df/0x1560 [ 333.062033][ C0] ip6_route_input+0x730/0xad0 [ 333.062057][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 333.062083][ C0] ? nf_nat_ipv6_in+0x203/0x2c0 [ 333.062108][ C0] ? lock_acquire+0x106/0x350 [ 333.062126][ C0] ? ip6_rcv_finish_core+0x222/0x420 [ 333.062144][ C0] ip6_rcv_finish+0x141/0x280 [ 333.062161][ C0] NF_HOOK+0x336/0x3c0 [ 333.062177][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 333.062193][ C0] ? NF_HOOK+0x9e/0x3c0 [ 333.062207][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 333.062224][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 333.062244][ C0] ? process_backlog+0x3eb/0x1950 [ 333.062265][ C0] process_backlog+0x7dd/0x1950 [ 333.062295][ C0] __napi_poll+0xae/0x340 [ 333.062313][ C0] ? skb_defer_free_flush+0x233/0x260 [ 333.062334][ C0] net_rx_action+0x627/0xf70 [ 333.062361][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 333.062387][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 333.062411][ C0] ? try_to_wake_up+0x7f2/0x1380 [ 333.062437][ C0] handle_softirqs+0x22a/0x840 [ 333.062456][ C0] ? do_softirq+0x76/0xd0 [ 333.062473][ C0] ? packet_poll+0x356/0x5c0 [ 333.062492][ C0] do_softirq+0x76/0xd0 [ 333.062506][ C0] [ 333.062511][ C0] [ 333.062516][ C0] __local_bh_enable_ip+0xf8/0x130 [ 333.062532][ C0] packet_poll+0x356/0x5c0 [ 333.062553][ C0] sock_poll+0x321/0x3e0 [ 333.062572][ C0] ? __pfx_sock_poll+0x10/0x10 [ 333.062589][ C0] do_sys_poll+0x96c/0x10e0 [ 333.062611][ C0] ? do_sys_poll+0x401/0x10e0 [ 333.062630][ C0] ? __pfx_do_sys_poll+0x10/0x10 [ 333.062649][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 333.062671][ C0] ? __pfx___pollwait+0x10/0x10 [ 333.062689][ C0] ? __pfx_pollwake+0x10/0x10 [ 333.062733][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 333.062767][ C0] ? set_user_sigmask+0x160/0x1c0 [ 333.062783][ C0] ? __pfx_set_user_sigmask+0x10/0x10 [ 333.062803][ C0] __se_sys_ppoll+0x209/0x2b0 [ 333.062823][ C0] ? __pfx___se_sys_ppoll+0x10/0x10 [ 333.062844][ C0] ? __secure_computing+0xe1/0x2a0 [ 333.062860][ C0] ? __x64_sys_ppoll+0x20/0xc0 [ 333.062875][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.062892][ C0] do_syscall_64+0x174/0x580 [ 333.062908][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.062924][ C0] ? clear_bhb_loop+0x40/0x90 [ 333.062941][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.062962][ C0] RIP: 0033:0x7f3af8ded407 [ 333.062976][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 333.062989][ C0] RSP: 002b:00007ffefcb44ae0 EFLAGS: 00000202 ORIG_RAX: 000000000000010f [ 333.063004][ C0] RAX: ffffffffffffffda RBX: 00007f3af8d63780 RCX: 00007f3af8ded407 [ 333.063015][ C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000055cc4e8de520 [ 333.063025][ C0] RBP: 00007ffefcb44e20 R08: 0000000000000008 R09: 0000000000000000 [ 333.063035][ C0] R10: 00007ffefcb44e20 R11: 0000000000000202 R12: 000055cc232945e0 [ 333.063046][ C0] R13: 000055cc4e8ccd40 R14: 0000000000000000 R15: 00007ffefcb44bd0 [ 333.063065][ C0] [ 335.499980][ C0] net_ratelimit: 7581 callbacks suppressed [ 335.500015][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.518342][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.530705][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:36:2c:a6:25:7c, vlan:0) [ 335.538064][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.543647][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.559820][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.567671][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.583517][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.591549][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.607785][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)