last executing test programs: 15.087312281s ago: executing program 3 (id=4579): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, 0x0) (async) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x353c7a510d3d58d2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) (async) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r5, 0x2) socket$netlink(0x10, 0x3, 0x8000000004) (async) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) sendfile(r0, r8, 0x0, 0x9cba) (async) sendfile(r0, r8, 0x0, 0x9cba) 14.714182615s ago: executing program 3 (id=4582): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="2ebabe61effc8fb79f456708b4edbfb6479009e115c00c3bb118d9a18530573dba16d1adad86c2855c7e699f08af0308e3201665218420fc9196", 0x3a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91100a000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91100a000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x50, r4, 0x5eae78d9c54e9d3f, 0x0, 0x27dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x34, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xc}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "099315b877d776266a45b4e0e0990c76"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x752}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x200440c4) socket$inet_icmp(0x2, 0x2, 0x1) (async) r5 = socket$inet_icmp(0x2, 0x2, 0x1) close(r5) 14.25043631s ago: executing program 3 (id=4583): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x3c}}, 0x20) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x2}, &(0x7f0000000140)=0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x38}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001"], 0x5c}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x1c, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7) unshare(0x62040200) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r7, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYRES16, @ANYRESOCT=r8, @ANYRES32, @ANYBLOB="0a00340002020202020200000800"], 0x38}, 0x1, 0x0, 0x0, 0x2000c174}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000001000323d00000000414401020000000000"], 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x1e) 12.675834395s ago: executing program 1 (id=4600): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r2 = socket$l2tp6(0xa, 0x2, 0x73) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="f8dbbbff66472f348fa67911187f1068d15aaff9202b32c9b5a1c4dbe932b9c2cec9fee18525bb9e7eea6f8a3faaf0e0fc93d700"/66, @ANYRES32=r1, @ANYRESDEC=r2], &(0x7f0000000200)='GPL\x00', 0x6, 0x1006, &(0x7f0000001b00)=""/4102, 0x40f00, 0x9, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 12.540019357s ago: executing program 1 (id=4602): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f00000000c0)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) (async, rerun: 64) syz_init_net_socket$llc(0x1a, 0x3, 0x0) (rerun: 64) 12.11170484s ago: executing program 1 (id=4608): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x556b6b249579e913, &(0x7f0000000180)={0x0, {{0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, {{0xa, 0x4e21, 0xed, @loopback, 0x200}}}, 0x108) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x1ff, 0x0}, 0x8) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x11, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x788d, 0x0, 0x0, 0x0, 0x4363}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x80000000, 0x32, &(0x7f00000003c0)=""/50, 0x41000, 0x1, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000400)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x2, 0x7, 0x3}, 0x10, r2, 0x0, 0x0, &(0x7f00000004c0)=[r0, r0], 0x0, 0x10, 0x4}, 0x94) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r4, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x21}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1d}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000040) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'erspan0\x00', 0x1000}) ioctl$XFS_IOC_SCRUBV_METADATA(r3, 0xc0285840, &(0x7f00000007c0)={0x4, 0x0, 0x3, 0x0, 0x1, 0x6, 0x0, &(0x7f0000000740)=[{0x1b, 0x101, 0x8}, {0x9, 0x1ff, 0x965e}, {0x21, 0x101, 0xb37}, {0x10, 0x1ff, 0x8001}, {0x1c, 0xfe, 0x6}, {0x16, 0xfe, 0x5}]}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r5, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x63}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa60}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x899}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x759}]}, 0x58}}, 0x2400c004) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000009c0)={r3, r6, 0xc, 0x0, @void}, 0x10) ioctl$F2FS_IOC_FLUSH_DEVICE(r6, 0x4008f50a, &(0x7f0000000a00)={0x0, 0x8001}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x188, r9, 0x100, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x800}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7fff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xf84b}, {0x6, 0x11, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0xf}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xffff}}]}, 0x188}}, 0xf3967e7719eaf21e) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000d80)={0x0}, &(0x7f0000000dc0)=0xc) r11 = getpid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000003000)=0x0) r13 = getuid() r14 = getgid() getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000003040)={0x0}, &(0x7f0000003080)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000030c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@loopback}}, &(0x7f00000031c0)=0xe8) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000003200)={0x0, 0x0, 0x0}, &(0x7f0000003240)=0xc) sendmsg$netlink(r0, &(0x7f00000032c0)={&(0x7f0000000d40)=@kern={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002f40)=[{&(0x7f0000000e00)={0x18, 0x28, 0x300, 0x70bd29, 0x25dfdbfb, "", [@typed={0x8, 0x35, 0x0, 0x0, @pid=r10}]}, 0x18}, {&(0x7f0000000e40)={0x10, 0x32, 0xe04, 0x70bd29, 0x25dfdbfc}, 0x10}, {&(0x7f0000000e80)={0xc8, 0x16, 0x8, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x8, 0x156, 0x0, 0x0, @u32=0xffffffff}, @generic="358e9ec18f35feb12496e9b2e3a621e2744bb21bbae38d26c1fa88087889fb0605e7fb43bbe04d13170f9a5782779ac47fb8bbc7e602d5565effc0c2967d06fc59b6fc4d8b922252ea4086732a8e74d066eca4dd34d60a2768a40fdc697b0df51fd08d5837d32b63f5ffaf90f178755a8ee7e56be07e923544f0728c8afc8fdfd61b3990201a8763a6602b8ff52166208c32460864351bd9afecf660773090dac2a974f7983085eeff92fcd28c5a34c2"]}, 0xc8}, {&(0x7f0000000f80)={0xf4, 0x28, 0x1, 0x70bd26, 0x3, "", [@nested={0x4, 0x15c}, @nested={0x56, 0xb7, 0x0, 0x1, [@generic="8301b8af346b7b7ee266bd1b7883fd986e9d867150846a6dd93a327ae114717a91f8f5066a1f0f3be962ad32ba3a4ded9f609072eb47821bc03183de68d7a71ce94240fd3587c0e0fedf44ac5a8f3cc10938"]}, @typed={0x8, 0x6, 0x0, 0x0, @str='GPL\x00'}, @nested={0x8, 0x60, 0x0, 0x1, [@nested={0x4, 0x14f}]}, @typed={0x8, 0xae, 0x0, 0x0, @fd=r0}, @generic="cb9c994a5a4c6f1f08c5add87cdad35d47527ec255c5338254cbab160e99c009954e1ebf4b49ac6473976add007177490050d5c6ae2e8baa7d1977ba5ebe01151b638de039", @typed={0x26, 0xf, 0x0, 0x0, @binary="9d73032ac960d35399968d7ebb8c4977dc557ae1c91335b9fa6be111b36d90442301"}]}, 0xf4}, {&(0x7f0000001080)={0x112c, 0x24, 0x608, 0x70bd29, 0x25dfdbfd, "", [@generic="3f69a5a7c29ba57883a4ccf89c3ea6106f9d8f31b9340f1e8769a93fa6eb1b82cb49d3990e7778801473dccb5bf9a41a342ea2efd54a62a3bd284731e972efcdf47593f6a74c6d20", @generic="b04c388cd28b9a288173bc5ff8412ac6993796280169c9624d555a5ddb36f0ccd1e7339ec18175bf7eaf2abc46134159d2cb2fdc0ac7f9a2a1bb12f4d5d592e9dabd7dca5f3c4811d67c9fb2a460b1302a3b81c94ea6d0f231e9650b1b121ed2b14a9186f52cbdbc7ed357e16376b7535d63336fb2c60fdba6d0da83b6a670be349cda869d271a17a3ac1dd2ed173173db8902395f8fa6043f48bb37cf7070c9ac9601cdfe6757fad01fa4d07ee6ba4c473d4dd52d327ce36f7a748a331c8d729b14783c8b4d8eb9def77e02b57c87a8eb20", @generic="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"]}, 0x112c}, {&(0x7f00000021c0)={0x10c, 0x31, 0x800, 0x70bd28, 0x25dfdbfd, "", [@generic="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"]}, 0x10c}, {&(0x7f0000002300)={0x1e0, 0x16, 0x1, 0x70bd2a, 0x25dfdbff, "", [@generic="c958a683b82fd1b067df565a2bb326ba029a452979e8da28810266675d4295b6beac004dfd08a9c273ee975752657882cd6c9f571daac75ecac4acad881244b2fef1405217d4d33c57d073c909541ec54385bfad05b3a5c6be92a003df4092d9efff5043c40ee050334756441cf30fe6f87d742d6a8ceb93a9a6c958df1abc39b1a271bf1b5f688451689835e9564531efbf792644695ff55fc36e4effe357deb4f56b5c5cc94f070d7568cc41ffdc8368b0421f3768807b727c1121b2389e0bda380bbce290ff4f24cf259868ced55d3cadc6dbec84d296d9e463031fc997c8fa2eacc85bb68ff3f2d98985c9f571ac1a816b28adc79fa4b2", @generic="aed8db9ba3f0a1c5cb68ae055c566181e84a1572cd097974c43e51eef286a0088785f545406a1f3b84692846aac5d478b6889e6c64ec70b470d8bf83c48df9ad516cc5736b502b22c76b8bc9f10e516e2b3f7e76540fbddfc12da01017a6061284314273cec6ec076aebfe1ce2727f0bf99c3ec254780be80d83d0546c7d3bf6b77df346a97e521e152fff07f738149f8856680fe24fdd7a4ef0466a7d80307092e10171b5bf4eabcb3ac1bf63d11801008aa8647a767ea69b93563132f2e7ae3ec6affa30beb969ea66c1d66b4f4c24e9f222", @typed={0x4, 0x5}]}, 0x1e0}, {&(0x7f0000002500)={0x47c, 0x1a, 0x8, 0x70bd28, 0x25dfdbfc, "", [@generic="12c0985a0c7d4da806b75ca39266db5001b9705d5ffd9ead69116178940e39f540ba8ac7b3f668fa824b858b2d1659e50c4067fadd2449f2d01856aa1f5d2294c0a28a20ea5f04923e5757283f51e783d73e6ddb202a00", @generic="7bc4416b5c3848cefa92760f92de07f06e0031c5abeb440d13ef65f044147f1f48dadc4e8e52fd6f54c508f1b646434204d48d5c2f00c0b249d56fc8dd8ec9cba4e69db1cd09660023a2f54f212d9e3af14939c4b1a644f6746d545e7101805104d5f74292639864cbb943b47be38979893604a24dada777a5eb24f5d5fa6a7c35a72b3fa52bd373bc8c622931ff01f0b4994e9b791531fc", @nested={0xc4, 0x4, 0x0, 0x1, [@typed={0xbe, 0xa5, 0x0, 0x0, @binary="e46760c2346c753abfc203b79175fdc91a82c87d56cb04e62b3ac52c3ff0fcedd23937f9e162e49731ed8166b438c9ffd466af88aaf7ae21df3bec305693b33ce4a9a2dc7315cfceaf410eb2ceb2fea844444c2ad6172d8226c7df33a688d9064163fafcac8b80cf0551486e57b46081d08d907687b6bbf02cae2c4f74ce198bbe44f4c19064ecfab7eadf0935e1b1390ad13cb225f921a26c11dd6b9cda54a680d81d1312dc2f445d76be036323ef3244444003ce6a0724750a"}]}, @typed={0x14, 0x82, 0x0, 0x0, @binary="6fb3c7c685d05006b47fee8295935725"}, @generic="f2a391d43082a7b50e235037db526f9b7d8120242c2f9cebcaf04b3f1c70a41fb5bf1d960089181ed7b0141eee4f63e4ecd74f0f00fa1b706b7e7b6ca2f837d43569ceed6748edd531f8818ff4bba08409379e7c2dc4a421b25cdff96610c70b2585663beb297c4f2ed69a3093096aa534d99c0f752b6ce18f479c1b301b5a0460a1e8de91b2682e3c96243f3044364318a2dc8e0be681c1898f19fc65c0aee3cd5618be8ce09cc83094a90a73bdc1e9a314ef131eb3f9ac9d410aca693973f09061f97c030d7df8e1d9ecfe969dbf613ffc9c5e7e6e14771358093412", @generic="23b34472c979564b3188f9496c1c54dcad2bccad5e5de67ec40cd578a57d0cc81355da42db1d825646a0fb388cdee3bea896892e85fe8c0eb532c54686fd7f0dd56ecb5ae9ddd6e0e13f5da09d8e712471ba9515d992ecb182a26a57d36a32ec5e750e53b14ea8c3e7106aa06278f3a2506a11fa2c0d74c148ee85e3b926baa174bdd1ec18a6d9d51e46ae15dbc561b510ba8666aba486b5e5a52a553d47c34f0d959cd07beb652ca392fe2e902ee57487281f3ea99599936801c2642f2d32097c4f9bbdf1f07eb3ae0bf6cd342fbf83497cdfc3b53b027b031dc5ff9e26f9a59346f06328ee81a8eeacf4d87c67e2b835dc8cd09330", @typed={0x8, 0x156, 0x0, 0x0, @u32=0x100}, @typed={0x9, 0x72, 0x0, 0x0, @str='++&\'\x00'}, @nested={0xbc, 0xe3, 0x0, 0x1, [@typed={0x14, 0xfd, 0x0, 0x0, @ipv6=@local}, @typed={0x9f, 0x6f, 0x0, 0x0, @binary="0ab542e98573362969752fc452167199c4f0014bebc5bb35e0fa1c541642ca63a95ae8a4c1f156311e583b83f313f4fcd547e2ffe9b1d46bf45755e545e13f417dd4c283e49925613528c1372395e1fd1bb591a4c66a85ca8580e517752d5186efc4c25e65f9c419a4a12caf275ca49dcb975bd0aa1ffea027c7021ade56168787976acb8ce991b71fcfb13c401bccc882951130108e045cddfc3a"}, @nested={0x4, 0x62}]}]}, 0x47c}, {&(0x7f0000002980)={0x4a4, 0x34, 0x10, 0x70bd2c, 0x25dfdbfd, "", [@generic="a1c8042f6cc0c8a9e2572c21985645299d72b7adc44d9a17a2694a2ad96f4b2710b50b110cf7f6df736d7f45cd48477893cb0a0eb9f5a1c85423a236d242c45f3324280a1e2d56418ea849206b6c537797883a131b3b33d4e40e285134d6ca80e3f029c18fd9acb19769fcae2a214ed8ce55cf19579d289fe4e9614ad716fd7ccf10c53f09e378b6aae0ab5eb53696a6eeefcadbf29673e3230a2358f7a456d10a42", @generic="754401cf519783d78e8a2535af56eb735a42e115bf61191a695385ef514394fc58b3b912cd4addda7126f91107e46f5b6b3076bea3e0223fb14aa08f16636f73e76fd67cf38ba0cc58d9c31bffd151f3c173a3efb95753d94bf36b7a5c65b21c8fc7cdfc482f6a0ac7300c3e5fb9f4ad1f6fd3a0b08c5ce11ba0c1086028f2af4050b7dca20771247e03911873defa93b4e6a2d44ceae628867d2405645f3a9d5cb562d5e7ab11dbd207fe587c0f274839f7b108ef91bc983ef007a163b1bf7d9e3592ab5226aef947f76c6d4103741a2d4250c7a2c3546541bb9ee0", @typed={0x8, 0xec, 0x0, 0x0, @fd=r7}, @nested={0x4d, 0xa9, 0x0, 0x1, [@generic="8e7989ad1788b3bbdc3e81389e59ea1d754cbb999c6eec840181363658016ff0be", @typed={0x4, 0xf1}, @nested={0x4, 0x159}, @typed={0x5, 0x28, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x131, 0x0, 0x0, @str='pci\x00'}, @nested={0x4, 0x13b}, @nested={0x4, 0x112}, @typed={0x8, 0x126, 0x0, 0x0, @u32=0x401}]}, @generic="07e24f06de30fdd7fc8d8896c6245079d34c5a7ce092ee0535ab103e52fc32e77e0173caa4a57169f940c1526be09be022e75c996996996212be69c59875a9c75cac7be710e3da0935112913de678d795811760c17b6d8fbf67cff1e446f072179530f6c100db5bd46e7919cadba4e6aeadd4bc27b0e59714db3cf84959ae0e84f7539a8d834f69436f3b68ee1f12035519bcff610126546c7aa1ff33fcc9e89c52f7c5dae32cea054af9a110d334ff3ea4bdb3bf61228dd17cb8bd06c7d7f458a71d8fbd036e72d8ad1b7aa35b882aaa6ea152f74e354a5", @nested={0x1c4, 0xb8, 0x0, 0x1, [@nested={0x4, 0xa4}, @generic="c3eea6825303a9fb88a879199cc596e055d1a12e7ea9924170423f1a52bd763eba3654eea0b81fcd39e167b367dd42bf41ecb70ee291d6776817161732b8", @nested={0x4, 0xdd}, @generic="5bf845d504eb603693e2927dc831f5a5b3098051599b57e3838a9591f245b49f70eea24bc0b65dcf937a0267a17d21d5887b0073e6c452b2e201a82d101719d2bfb3c9257aa878dee3401c5f8ea28c93f25df776be729f8a3de626f38cf47ee89284e610196d2ca2beb86c75a366ebab3ae08c3a49aaa0fef97063a815dcccab131f85b725224044bda6da5a9bc67d2fa4ea5f05f4cc63bc24bb77ac603034e2cf0a5e61c754b1ac82ae8f3c576cbff8c49fa7a03163d4ac2a1e2a23d8ca3cf4bce6695c70b007e25d0207bd17fc38de3e4b6bdded61", @generic="a1801d315304fe1a297557773eebd15078c9192724605958c96d0574918e5552a47abea2f3e84d7fcffd217cbaa2d1e9240ce0a20d3791595cdc42f3ec081295474991990e3a407ebaebd05737cb54bb80181d28b8690519433afcc7a1494bd4c92612a6f37954bd067c733d8a69c41bdc4269807bf8b5b2e29a26bee43e1240", @typed={0x8, 0x66, 0x0, 0x0, @fd}, @typed={0x8, 0x136, 0x0, 0x0, @pid=r11}, @nested={0x4, 0x31}, @typed={0xc, 0x5b, 0x0, 0x0, @str='nl80211\x00'}, @nested={0x4, 0x96}]}, @generic="a62d57d76616f34959ae3096395e818acf23fedf96a24c7fcec534e5fe8ce7a631"]}, 0x4a4}, {&(0x7f0000002e40)={0xf8, 0x3b, 0x2, 0x70bd28, 0x25dfdbfd, "", [@nested={0xe7, 0x12c, 0x0, 0x1, [@generic="a3ea64ab1184bde979f9959d333e733be56a612424edcd08684b86512d1ef3bd98c58e36903fd98b01dc4e54923b31298a8e8cbaf5749fe557091f1c6cf786fa3db358582e659f9e7bbd0a918776d6", @generic="d2fdefdc285c76c75153adf8b89f121f1ad1f4d273c7b719ccca3fdba1630eb5b2d8042804e995bb0accfa043656137a00b77fa01cd6e9b6bd5e6ecd271a60f90c9a57646e680b5e9556cedf237778f17f14dad16ae84c6bc453bb0e691e0b4e573e3f784d3b22b92ab4d9ff31bf9b837a24cf60bffc151b42743f", @generic="cd9edd9013b028e3a1019112ab6c5d5667d8ab80d69ace6959"]}]}, 0xf8}], 0xa, &(0x7f0000003280)=[@cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}], 0x40, 0x40004}, 0x41) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000003380)=@assoc_value={0x0, 0x4}, 0x8) 11.990040959s ago: executing program 1 (id=4612): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}], 0x1, 0xf00) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)={0x8e4, r0, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8c8, 0x142, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x294, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x73}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x284, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0xd, 0x7ff, 0x5, 0x0, 0x0, 0xffff]}}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x2, 0x8}, {0x1, 0x6}, {0x1, 0x3}, {0x2, 0x7}, {0x2, 0x5}, {0x7, 0x6}, {0x6, 0x9}, {0x0, 0x4}, {}, {0x7, 0x2}, {0x3, 0x7}, {0x0, 0x5}, {0x4, 0x8}, {0x5, 0x7}, {0x1, 0x8}, {0x2, 0xa}, {0x6, 0x4}, {0x7}, {0x5, 0xa}, {0x0, 0xa}, {0x3, 0x6}, {0x5, 0x8}, {0x4, 0x9}, {0x5, 0x8}, {0x6, 0x7}, {0x1, 0x8}, {0x7, 0x7}, {0x7, 0x6}, {0x5, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xd, 0x7f, 0x3, 0x8, 0x5, 0xcc, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x24, 0xc, 0x4, 0x60, 0x30, 0xb, 0x1, 0x12, 0x60, 0x1, 0x60, 0xb, 0x2, 0x12, 0x18, 0x60, 0x1b, 0x30, 0x6c, 0x9, 0x6c, 0x4, 0x30, 0x4, 0xb, 0x5, 0x60, 0xb, 0x24, 0x1b, 0x12, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x5, 0x3}, {0x0, 0x6}, {0x2, 0x5}, {0x4, 0x5}, {0x7, 0x1}, {0x0, 0x6}, {0x0, 0x4}, {0x7, 0x8}, {0x3, 0x8}, {0x7, 0x7}, {0x5}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x3, 0x2}, {0x4, 0x5}, {0x5, 0x5}, {0x5}, {0x6, 0x8}, {0x2, 0x8}, {0x2, 0x5}, {0x3, 0x6}, {0x1, 0x9}, {0x0, 0x7}, {0x3, 0x4}, {0x1, 0x7}, {0x2, 0xa}, {0x3, 0x1}, {0x7, 0xa}, {0x6, 0x8}, {0x6, 0xa}, {0x6, 0x3}, {0x3, 0xa}, {0x2, 0x4}, {0x5, 0x4}, {0x6}, {0x4, 0x9}, {0x4}, {0x1, 0x5}, {0x5, 0x3}, {0x5, 0x6}, {0x1, 0x5}, {0x1, 0x2}, {0x1, 0x4}, {0x1, 0x4}, {0x0, 0x5}, {0x3, 0x9}, {0x5, 0x1}, {0x5}, {0x0, 0xa}, {0x5, 0x1}, {0x5, 0x4}, {0x5, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x1b, 0x5, 0x12, 0x63, 0x60, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x60, 0x48, 0x3, 0x4, 0x0, 0x4, 0x35, 0xc, 0x1b, 0x1, 0x1b, 0x2, 0x4, 0x1b]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x6}, {0x0, 0x5}, {0x6}, {0x7, 0x9}, {0x3, 0x2}, {0x0, 0x8}, {0x1, 0x6}, {0x7, 0x8}, {0x4, 0x9}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x20, 0x24, 0x1, 0x18, 0x1, 0x18, 0x1b, 0x5, 0x30, 0x1, 0x1b, 0x5, 0xc, 0x48, 0x30, 0x12, 0x2]}]}, @NL80211_BAND_2GHZ={0xec, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x7}, {0x1, 0x1}, {0x4, 0x2}, {0x4, 0xa}, {0x1, 0x4}, {0x1, 0x5}, {0x5, 0x8}, {0x7, 0x9}, {0x1, 0x5}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x5, 0x3}, {0x4, 0x2}, {0x0, 0x6}, {0x2, 0x3}, {0x1, 0x4}, {0x1, 0x2}, {0x4, 0x5}, {0x4, 0x3}, {0x2, 0x8}, {0x7, 0x9}, {0x1, 0x2}, {0x3, 0xa}, {0x0, 0x4}, {0x1, 0x1}, {0x1, 0x6}, {0x0, 0x1}, {0x0, 0x3}, {0x1, 0x1}, {0x6}, {0x0, 0x3}, {0x4, 0x6}, {0x6, 0x9}, {0x2, 0x1}, {0x3, 0x8}, {0x0, 0x4}, {0x6, 0x2}, {0x1, 0x9}, {0x6, 0x5}, {0x5, 0x7}, {0x5, 0x5}, {0x1, 0xa}, {0x1, 0x5}, {0x1, 0x6}, {0x7, 0x9}, {0x0, 0x7}, {0x7, 0xa}, {0x2, 0x8}, {0x5, 0x6}, {0x3, 0x9}, {0x1, 0x1}, {0x5, 0x9}, {0x5, 0x9}, {0x2, 0x6}, {0x5}, {0x5, 0x8}, {0x4}, {0x4, 0x7}, {0x3, 0x7}, {0x4, 0x1}, {0x1, 0x8}, {0x6, 0x1}, {0x7, 0x3}, {0x6, 0x2}, {0x0, 0xa}, {0x3, 0x4}, {0x2, 0x3}, {0x4, 0x8}, {0x2, 0x4}, {0x0, 0x6}, {0x4, 0x8}, {0x3}, {0x0, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x8}, {0x6, 0x7}, {0x2}, {0x0, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x2, 0x2}, {0x1, 0x5}, {0x2, 0x4}, {0x4, 0xa}, {0x0, 0x8}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1b, 0x2, 0x439f6c74e97c64ee, 0x6c, 0xc]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x24, 0x6c, 0x48, 0x16, 0x30, 0x48, 0x48, 0x4, 0x3, 0x1, 0xc1a9d8145e2dff4e, 0x3, 0x0, 0x0, 0x1b, 0x30, 0x2, 0x60, 0x36, 0x12, 0xc]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x4, 0x4}, {0x3, 0x7}, {0x0, 0x9}, {0x7, 0x2}, {0x6, 0x8}, {0x4, 0x4}, {0x4, 0x3}, {0x3, 0x2}, {0x3, 0xa}, {0x0, 0xa}, {0x3, 0x6}, {0x1, 0x3}, {0x2, 0x6}, {0x3, 0x6}, {0x3, 0x9}, {0x5}, {0x3, 0x3}, {0x0, 0xa}, {0x5, 0x7}, {0x7, 0x6}, {0x7, 0x7}, {0x1, 0x9}, {0x3, 0x1}, {0x5, 0x9}, {0x6, 0xa}, {0x0, 0x3}, {0x0, 0x1}, {0x1, 0x5}, {0x3, 0x1}, {0x2, 0x2}, {0x6, 0x6}, {0x5, 0x4}, {0x5, 0xa}, {0x6, 0x7}, {0x7, 0x8}, {0x4, 0x7}, {0x1, 0x5}, {0x1, 0x5}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x8}, {0x3, 0x3}, {0x5, 0x6}, {0x3, 0x9}, {0x4, 0x2}, {0x2, 0x8}, {0x3, 0xa}, {0x6, 0x5}, {0x4, 0x8}, {0x3, 0xa}, {0x5, 0x2}, {0x5, 0x5}, {0x5, 0x6}, {0x7, 0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x6}, {0x1, 0xa}, {0x6, 0x5}, {0x4, 0x7}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x2, 0x4, 0x4, 0x4, 0x49d0, 0x35, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x5, 0x18, 0xc, 0xb, 0x18, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff3, 0x7, 0x0, 0x5, 0xbf06, 0x4, 0x5, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0x1, 0x3, 0x60, 0x9, 0x40, 0x6c, 0x3, 0x6c, 0x3, 0x12, 0x2, 0x1, 0x5, 0x48, 0x2, 0x5, 0x1, 0x2, 0xb, 0x30, 0x12, 0x4, 0x36, 0x9, 0x36, 0x9, 0x1a, 0x6, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xee}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x398, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x354, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x4}, {0x2, 0x5}, {0x6, 0x7}, {0x0, 0x4}, {0x5, 0xa}, {0x4, 0x5}, {0x2, 0x3}, {0x4, 0x5}, {}, {0x4, 0x2}, {0x0, 0x2}, {0x5, 0x9}, {0x0, 0x5}, {0x3, 0x9}, {0x3, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x5, 0x4}, {0x2, 0x8}, {0x0, 0xa}, {0x0, 0x4}, {0x1, 0x6}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x4}, {0x3, 0x9}, {0x4}, {0x4, 0x6}, {0x2, 0x7}, {0x3, 0x1}, {0x6, 0x9}, {0x2, 0x3}, {0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x4}, {}, {0x0, 0x4}, {0x0, 0x7}, {0x5, 0x8}, {0x1}, {0x0, 0x4}, {0x1, 0x7}, {0x3, 0x1}, {0x4}, {0x3, 0x8}, {0x4, 0x7}, {0x2, 0x2}, {0x1, 0x2}, {0x0, 0x1}, {}, {0x0, 0x5}, {0x4, 0xa}, {0x2, 0x6}, {0x5}, {0x0, 0x2}, {0x1, 0x3}, {0x1, 0xa}, {0x2, 0x1}, {0x1, 0x5}, {0x4}, {0x0, 0x3}, {0x7, 0x4}, {}, {0x6, 0x9}, {0x0, 0xa}, {0x4, 0x9}, {0x3, 0x5}, {0x3, 0x7}, {0x3, 0x1}, {0x0, 0x19}]}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x1, 0x3}, {0x1, 0x2}, {0x5, 0x7}, {0x2, 0x8}, {0x5, 0x6}, {0x1, 0x8}, {0x5, 0x2}, {0x0, 0x1}, {0x4, 0x8}, {0x4, 0x7}, {0x1}, {0x1, 0x6}, {0x6, 0x3}, {0x3, 0x6}, {0x6, 0x6}, {0x7, 0x8}, {0x1, 0x3}, {0x7, 0x6}, {0x7, 0x3}, {0x7, 0x8}, {0x1, 0x5}, {0x3, 0x6}, {0x7, 0x4}, {0x4, 0xa}, {0x6, 0x1}, {0x5, 0x4}, {0x6, 0x4}, {}, {0x3, 0x4}, {0x7, 0x2}, {0x6, 0x1}, {0x2, 0x8}, {0x4, 0x9}, {0x3}, {0x0, 0x1}, {0x4, 0x5}, {0x7, 0x1}, {0x7}, {0x2, 0x5}, {0x6, 0x6}, {0x1, 0x6}, {0x4, 0x7}, {0x0, 0xa}, {0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xc, 0x9, 0x36, 0x3, 0x6c, 0xb, 0x6, 0xa, 0x4, 0x6c, 0x9418fcf48ddb10ab, 0x18, 0x166f350aacd8acaf, 0x16, 0x3, 0x1, 0x48, 0x1b, 0x16, 0x18, 0x3, 0x36, 0x1, 0x60, 0x36, 0x1b, 0x6c, 0x36, 0x60, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xff, 0x8, 0x8, 0xddf1, 0xa58, 0xc, 0x100]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x1, 0x3a, 0xe, 0x0, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x61, 0x18, 0x16, 0xc, 0xc, 0x6c, 0x1b, 0x3, 0x30, 0x60, 0x16, 0x16, 0xb, 0x30, 0x9, 0x12, 0x1b, 0x12, 0x24, 0x12, 0x18, 0x48, 0x48, 0xc, 0x2, 0x30]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x3, 0x5, 0x8000, 0x7, 0x5, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x7e9, 0x3, 0x1, 0x5, 0x8, 0x5, 0xc]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xff, 0xfff, 0x9, 0xfffd, 0x4, 0x9, 0x5d]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x401, 0x6, 0x7fff, 0x400, 0x1, 0xf, 0x5df8]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7b2, 0x7fff, 0x7, 0xe, 0x4, 0x8000, 0x7ff, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x12, 0x6, 0x36, 0x36, 0x2, 0x5, 0x60]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x0, 0x7}, {0x2, 0x8}, {0x0, 0x5}, {0x4, 0x7}, {0x6, 0xa}, {0x0, 0x8}, {0x1, 0x8}, {0x0, 0x8}, {0x1, 0x5}, {0x6, 0xa}, {0x5, 0x1}, {0x5, 0x9}, {0x5, 0x9}, {0x6, 0xa}, {0x2, 0x8}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x0, 0x8}, {0x3}, {0x7, 0x1}, {0x7, 0x7}, {0x2, 0x8}, {0x5, 0x3}, {0x7, 0x3}, {0x3, 0x9}, {0x1, 0x4}, {0x0, 0x9}, {0x4, 0x7}, {0x1, 0xa}, {0x0, 0xa}, {0x2, 0x9}, {0x6, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4a8c, 0xb8c7, 0x913c, 0x7, 0xd763, 0x1, 0x24, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9a4, 0xfff8, 0x200, 0xc, 0xe67, 0x0, 0x0, 0x81]}}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x6b88, 0xfffc, 0x5ac, 0xc9, 0x1, 0x100]}}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x7, 0xa}, {0x0, 0x6}, {0x3, 0x7}, {0x0, 0x3}, {0x1, 0x7}, {0x4, 0x3}, {0x3, 0x7}, {0x5, 0x9}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0x1}, {0x0, 0x4}, {0x5, 0x7}, {0x3}, {0x1, 0x8}, {0x3, 0x8}, {0x7, 0x3}, {0x5, 0x2}, {0x2, 0x5}, {}, {0x2, 0x2}, {0x4, 0x4}, {0x1, 0x4}, {0x5, 0x2}, {0x1, 0x4}, {0x7, 0x4}, {0x6, 0x3}, {0x4, 0x3}, {0x1, 0x7}, {0x2, 0x6}, {0x1, 0x1}, {0x6, 0x8}, {0x2, 0x8}, {0x1, 0x5}, {0x4, 0x6}, {0x6, 0x2}, {0x5, 0x2}, {0x2, 0x4}, {0x6, 0x5}, {0x4, 0x6}, {0x4, 0x6}, {0x4, 0x9}, {0x1, 0x8}, {0x0, 0x9}, {0x1, 0x2}, {0x4, 0x5}, {0x2, 0x3}, {0x0, 0x2}, {0x1, 0xa}, {0x5, 0x3}, {0x4, 0x2}, {}, {0x6, 0x7}, {0x0, 0x5}, {0x4}, {0x2, 0x8}, {0x7}, {0x5, 0x3}, {0x6, 0x5}, {0x5, 0xa}, {0x0, 0x1}, {0x3, 0x8}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1b, 0x60, 0x30, 0x16, 0x24, 0x60, 0x16, 0x5, 0x2, 0x36, 0x9, 0x12, 0xb, 0x1b, 0x1b, 0x5, 0x0, 0x60, 0x1b, 0x60, 0x24, 0x16, 0x1, 0x6c, 0x74, 0x6, 0x6c, 0x3, 0x1b, 0xc]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x6, 0x1b, 0xc, 0x5, 0x9, 0xc, 0x3, 0x0, 0x1b, 0x4, 0x12, 0x30, 0x6c, 0x1, 0x12, 0x3, 0x24, 0x6]}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x1c, 0xef5d, 0x0, 0x100, 0x4, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x3, 0x24, 0x60, 0x2, 0xc, 0x56, 0x60, 0x24, 0xc, 0x36, 0xb, 0x5, 0x36, 0x2, 0x30, 0x12, 0x60, 0x5, 0x30, 0x1b, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa328, 0x7, 0x8, 0x3, 0x8, 0x3ff, 0x8, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x16, 0x3, 0x4, 0x48, 0x30, 0x6, 0xb, 0x6, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x1, 0x4ade, 0x0, 0x2, 0x5, 0x7]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x2d, 0x48, 0xb, 0x2, 0x60, 0x3, 0x9, 0x4, 0xc, 0x53, 0x4e, 0x6c, 0x4, 0x30, 0x6c, 0x36, 0x2, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x278, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x244, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x16, 0x0, 0x1b, 0x6c, 0x48]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x30, 0x2, 0xb, 0x3, 0x2, 0x0, 0x747816d5c6a0e51b, 0xc, 0x48, 0x3, 0x48, 0x5, 0x19, 0xc, 0x5, 0x18, 0x18, 0x24]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x5, 0x8}, {0x0, 0x1}, {0x1, 0x6}, {0x2, 0x1}, {0x1, 0x7}, {0x1, 0x2}, {0x3, 0x1}, {0x7, 0x4}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x9}, {0x1, 0x6}, {0x0, 0x4}, {0x2, 0x7}, {0x7, 0x9}, {0x2, 0x2}, {0x7, 0x1}, {0x0, 0x3}, {0x1, 0x1}, {0x7, 0x4}, {0x5, 0x9}, {0x6, 0x9}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x1, 0x7}, {0x4, 0xa}, {0x0, 0x3}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x4}, {0x2, 0xa}, {0x1, 0x3}, {0x4, 0xa}, {0x1, 0x1}, {0x7, 0x3}, {0x3, 0x9}, {0x6, 0x4}, {0x4}, {0x4, 0x2}, {0x1}, {0x3, 0x1}, {0x5, 0xa}, {0x4, 0x7}, {0x3, 0xa}, {0x5}, {0x0, 0x9}, {0x5, 0x9}, {0x1, 0x2}, {0x1, 0x9}, {0x6, 0x2}, {0x6, 0x8}, {0x1, 0x9}, {0x6, 0x5}, {0x0, 0x3}, {0x5, 0x3}, {0x3, 0xa}, {0x2, 0x4}, {0x4, 0x3}, {0x4, 0x2}, {0x3, 0x9}, {0x6}, {0x0, 0x4}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0x5}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xc99, 0x1, 0x5, 0x2, 0x10, 0x4, 0xb0, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x401, 0x8, 0x2, 0x1ff, 0x401, 0x5, 0x4]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x24, 0x9, 0x60, 0x4, 0xb, 0x24, 0x16, 0x3, 0x18, 0x24, 0x2, 0x18, 0x4b, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x0, 0x6, 0x6, 0x4, 0x80, 0x400]}}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8b, 0x27, 0x6, 0x8, 0x6, 0x6f84, 0x1, 0x7]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x2}, {0x4, 0x6}, {0x7, 0x3}, {0x7, 0xa}, {0x3, 0xa}, {0x4, 0x5}, {0x1, 0x4}, {0x1}, {0x2, 0xa}, {0x7, 0x3}, {0x6, 0x2}, {0x2, 0x8}, {}, {0x7, 0x7}, {0x4, 0x2}, {0x0, 0x6}, {0x5, 0xa}, {0x6, 0x3}, {0x0, 0x6}, {0x5, 0x8}, {0x5, 0x5}, {0x1, 0x2}, {0x0, 0x2}, {0x0, 0x5}, {0x7, 0x2}, {0x2, 0x3}, {0x0, 0x4}, {0x4, 0x8}, {0x1, 0x5}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x3}, {0x7, 0x1}, {0x2, 0x8}, {0x2, 0x9}, {0x1, 0x4}, {0x4, 0x6}, {0x0, 0x9}, {0x5, 0x8}, {0x0, 0x3}, {0x1, 0x8}, {0x4, 0x7}, {0x4, 0xa}, {0x1, 0xa}, {}, {0x2, 0x9}, {0x4, 0x7}, {0x2}, {0x2, 0x7}, {0x1, 0xa}, {0x5, 0xa}, {0x2, 0x5}, {0x5, 0x2}, {0x2, 0x2}, {0x1, 0x2}, {0x1, 0x7}, {0x4, 0x6}, {0x6, 0x7}, {0x0, 0x1}, {0x5, 0x6}, {0x1, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0xa}, {0x6, 0x5}, {0x2, 0x6}, {0x3, 0x4}, {0x0, 0x7}, {0x7, 0x6}, {0x4, 0x7}, {0x0, 0x4}, {0x6, 0x3}, {0x1, 0xa}, {0x1, 0x7}, {0x1, 0x7}, {0x0, 0x7}, {0x5, 0x4}, {0x4, 0xa}, {0x0, 0xa}, {0x0, 0xa}, {0x2, 0x6}, {0x0, 0x7}, {0x5, 0x5}, {0x0, 0x7}, {0x5, 0x11}, {0x2, 0x5}, {0x5, 0xa}, {0x7, 0x5}, {0x4}, {0x0, 0x1}, {0x7, 0x5}, {0x1, 0x6}, {0x2, 0x9}, {0x5, 0x9}, {0x4, 0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x1, 0x2}, {0x4, 0x7}, {0x0, 0x6}, {0x7, 0x9}, {0x4, 0x1}, {0x4, 0x8}, {}, {0x0, 0x4}, {0x2, 0x9}, {0x3, 0x1}, {0x2, 0x8}, {0x7, 0x3}, {0x0, 0x8}, {0x6, 0x8}, {0x6, 0x7}, {0x1, 0x2}, {0x5}, {0x1, 0x8}, {0x5, 0xa}, {0x5}, {0x4, 0x7}, {0x1, 0x8}, {0x5}, {0x7, 0x7}, {0x3, 0x2}, {0x2, 0x1}, {0x4, 0x5}, {}, {0x1, 0x7}, {0x7, 0x1}, {0x0, 0x4}, {0x1, 0xa}, {0x0, 0x4}, {0x3, 0x9}, {0x4, 0x2}]}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0xc, 0x30, 0xc, 0x6c, 0x60, 0x6, 0x2, 0x36, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x7, 0x6f0, 0x2, 0x200, 0x348, 0xb]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xd600, 0x7fe, 0x7, 0xd67, 0xfff9, 0xc, 0x3]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0x5}, {0x7, 0x5}, {}, {0x5, 0x7}, {0x0, 0x3}, {0x6, 0x7}, {0x3, 0x1}, {0x0, 0xa}, {0x1, 0x4}, {0x2, 0x8}, {0x0, 0x4}, {0x2, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x5, 0x5}, {0x0, 0x2}, {0x6, 0x2}, {0x1, 0x6}, {0x1, 0x7}, {0x0, 0x9}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x5, 0x7}, {0x4, 0x9}, {0x0, 0x5}, {0x3, 0x4}, {0x6, 0x2}, {0x1}, {0x1, 0x7}, {0x6, 0x1}, {0x6, 0x8}, {0x3, 0x3}, {0x0, 0x8}, {0x5, 0x9}, {0x3, 0x9}, {0x0, 0x4}, {0x0, 0x9}, {0x7, 0x3}, {0x4, 0x7}, {0x6, 0x3}, {0x0, 0x4}, {0x7, 0xa}, {0x2, 0x8}, {0x4}, {0x1, 0x4}, {0x3, 0x9}, {0x4, 0x5}, {0x4, 0x9}, {0x2, 0x8}, {0x4, 0x7}, {0x5, 0x3}, {0x5, 0x4}, {0x7, 0x2}, {0x6, 0x1}, {0x7, 0x1}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0x9}, {0x4, 0xa}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x24, 0x0, 0x48, 0x2, 0xc, 0x60, 0x30, 0x36, 0x6c, 0x16, 0x60, 0x16, 0x1, 0x6c, 0x48, 0x5, 0x1, 0x36, 0x6, 0x16, 0xc, 0xb, 0x1]}]}]}]}]}]}, 0x8e4}}, 0x0) 11.694978611s ago: executing program 1 (id=4615): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffe0) (async) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) (async) r2 = socket$netlink(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), 0x0) unshare(0x6a040000) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a0b02050000002581000000d9df2503001700"], 0x28}}, 0x20008004) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) (async) close(r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001800dd8d00000000fedbdf2502201000fd043609e08a041709001e"], 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 9.807720229s ago: executing program 3 (id=4631): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FITHAW(r1, 0xc0045878) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@broadcast, 0x0, 0x20, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x20005, 0x8, 0x5, 0x4, 0x0, 0x100000000000005}, {0x2, 0xfffffffffffffffc, 0xffffffffffffffff, 0x100000000}, 0xc23, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0xff}, 0x2, @in6=@mcast1, 0x4000100, 0x4, 0x1, 0x0, 0x1, 0x1000101, 0xdffe}}, 0xe8) mmap(&(0x7f0000292000/0x3000)=nil, 0x3000, 0x3000000, 0x3032, 0xffffffffffffffff, 0xb7779000) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x35c, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b2", 0x5d}], 0x1}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000510000000400000002"], 0x50) socket$nl_audit(0x10, 0x3, 0x9) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r7], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000004980)=[{{&(0x7f0000000800)=@xdp={0x2c, 0x9, 0x0, 0x1c}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000880)="83c93a6bcbc82a218121ebbca072793f06c3f52ac93ba02ec8cbeeac4db0116e27d89974d8369be7298ac9ae2b17878eb84b25a96b865e3852657064e52473be6dff4a192122a5774ae9dd347b5406", 0x4f}, {&(0x7f0000000a40)="c170b7b46a5cf30478aec512e650eab6ad6db550d4b3bf4d4f6f606dda29416643387828c7cb0c6c0b50092b249350aafb3e047db51d7743bd5c4b2db95a075ef63e19122cf9b0e3c4c60ba19ee7a0f66865d3774f641d4a4404b39e310bcaf63543fc8104a2f31cc32fc9f4e6032c0012ee930a6fc826987e9b785ed80cf1f76a1c737b5b2b842b66151758d1120048ac4ed0896916ddae22f0e0d4ba1ee124a52fb881e557bebf712c693b709e257a2cf1", 0xb2}, {&(0x7f0000000280)="a1adda74396d53ad0e5f0c39b317a0a8050018ba36da940efc2b0621c47c7ff7d0759c400810ce99affab1fc60707d10ba", 0x31}, {&(0x7f0000000b00)="a871802eda085ccc27a834bb4070eee2d8261c7e68b857aa5b25e552ca2c65ab2f3f97a02345116433a1c3315ba2b193f91cccedf90825cea3a00c608b85f0dc5db59b8e3a9b7660800ec58e124fdf3c99ea564fbaf87d557aa36286fb38b2c05054b6d8a43dd0da0a21bf11b8961d191fb73eb18da48cdcf7a394edaacdf4bf7dc4fa560a2610ca6572d80a5b42e9d472a81f3177f1a707fe6983f5a6c8d7f8949c7ad325", 0xa5}, {&(0x7f0000000900)="d842d1998c9f94a398bb4a75c4766a73c15bc37db0099468a2d073c96c1ebfa7acc7d3250fcca698e0c45476aa6470fccd60b8a1567b5c330dd867ec5afada7f097a48e1f635978276ebc0ec48660abffc5c9f062954fe940dc17e68be67ce6273b42c01887c587e7ae617ecbf61b69762ee81c4536dbad046", 0x79}], 0x5, &(0x7f00000034c0)=[{0x1010, 0x109, 0x8, "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"}, {0x100, 0x10f, 0x8, "32b97fb76daaf108316e51a93d8e523e74e20379a6ae2a2d31106bae29e53b6976810a9a176adf38de2fb9a09833f574c2cd66ba89be2f00fbfec8c44f1efceaf245b62fc3e22edca8ba2de17eeab0c42ee755fb3b33dcfbbc971bdebc7f0b88a4c7e71defe2c46465d1f96ca0460719bb20430caa4bdb40feaf798913714d0958595a4cbaca5dfd6cddf28f23b5e0d769259f636032941367a0e7b8af51fb6c256840232636fb12f55463ab0271e84f752c71e523d87d1ead788d31afe0d7e7116a2ba38404a977af9920c33d84b5d9f07a42782203ce4b0b7d0b814691f9ae2a1882b703af4a39d45e6b7fb0"}, {0x60, 0x119, 0x2, "ed058e1d65fa25eb9ba3d06bc2b95eda4edbe21a53e8d92164650d54ffbdb3429eff743a1103f22ad612abd193db2337874a86f5c7f7a818f564f14aba9978c2e7b08bc44e5458d969"}, {0xf8, 0x88, 0xa, "c6dd9d351acf29ce7b96765c66fb71e86b7be041efd89d5eec49c01ef83843fea02cf58979121673d428a4b2d615a789359d22d798c58d20f64588335971aed523f697be6597f6c69bd232889c9ba9f6c3d750d2efd04ec4d1c262e25958bc61f75a37ef9957460cef9d6d4f2618fa06cbd976a84482451f856469d8a5a51b169f02ab4bd8dd25b845d17fd45e7f45a62713c49d0651907795cc1a94a23d177562ed0ee3c44eae75e741a864cae55d7f208b9fa025e20b37fa96d4910b47b79d0f35b072116a213d669247069682dbf4c0e96246638b791d54ab0fdeacdffe19175a783e35"}, {0xb0, 0x10f, 0x7, "55da8e1a51c5e3005c838a6666f87c174b1404e835d1ca53cad581822bda22449d9657cbd0ee998797796d9fa7cab7a4af76bdb95524f252430c1777f12f63e66de4db966b0b83ad2dddb46083e18fb540bd2a12e5a5fe8017df264583322236fef41fe08a031bc6b9a9c9aeda43ca7d28e0739c7eba44cc89f8aebe1f79743678e002e3dcb6807536efb402d3211f849a4cd2f331c8888ef06b"}, {0x20, 0x1, 0x9, "04a4332ae082a3cfecb2510e"}], 0x1338}}, {{&(0x7f0000000c40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000cc0)="81099878667ee71dc2dd3d0ea5420f0af7a0b645197876c252c0a6049c2023f71a5bb76145aa1109a257b7396fc7bbed5e672f1f4a2889c9f841ef140daecc786bf416e21170ffa08b053d8c0d28b0cf5e0df4762c76b7bc31dd4399454abb0b9f1c05c9a7a1a194cb00f5852e66439ec278242ade15fdd0fb5d553d46a6a09b110ea5dd0a98969333e8ae0f7db4a1de5c5b2f08fddb9154fb5a2dea42501f2514d6b5b3e8a3c1b58b5757a3b9d3b8ccb758bd73", 0xb4}, {&(0x7f0000000d80)="8c5cefccf44a5e9367d8e9c8a9b9386eaa8bf756a88535f393ffd837f3522520ab729b9bf9c5b2b42c6c885c48d240acdadafe116a86b30c0c39daf1ebec22ff4df38b921162721a327ab6b3335c3967b1209713b64d93794f5a2625af18692932f59f02f55477c2e46876e55d6d2c3c13c9a4501d99693bb79a58732dc333b9f5cdf1062d20b16f1fb744c5ae3fd6c729efda4c270ea3825e83b3abb3f2472172b2f6277bf39f70b765e0e9e93716d9fd1fbc5760eef05a9ab77e1b1ee10219e0ca4d6c0df6e2f04c6362127a046c304e96df5eb1c1", 0xd6}, {&(0x7f0000000e80)="948e25f1f10f", 0x6}], 0x3, &(0x7f0000000f00)=[{0xb0, 0x0, 0x100, "55a7614395e1c563b0f0c7f0cc7a642aa65d16d97da99aafd04ba9fb1a3f2b58b23c4297e09cfad1febf1748679f0966e44b53508a776e87ac7b76c6210f35e77106aaaf8e6255a28e618f6f3606842945dc2a951fcb9b6334722c86ad116accef05db037300c8001675ee539a3a4d802f2c997aa8250321ad39e0d87855543706762dd728c9e278f746ae97ba854eb875176ad6705841c7c449bdec244e"}, {0x18, 0x29, 0x1, "0dd8e4d426"}, {0x18, 0x103, 0xffff, "681c2c12"}, {0x20, 0xb3, 0xe0e0, "bc388187dbd4b2cf4fb492"}, {0xa0, 0x10c, 0x5, "4978fbaa713761f1af0cd1a28a49a195cd95daaef5cc435512d83f862e26101fbc8fe3f5962205cb3b2916ce03d701f36f0e2120451d415583379fed1de3a0729ad025ee45a9a2fc787e3cfe9af422298bd7d2f6290c1179c60105dd79a5a5c2b4756625eaee28eafa6781ecc2846e1b0129844421e80fa27b61cbd0674a26947d4dd71c43f486eed9b890d151ab"}, {0x68, 0x119, 0x8, "b1e9c972228f952d23b236f302578e6450f269e7dbdef5d4d18298dd103a5cf46e8078d2e4c54ef5357fc38b18316006f9d2740a3df00fb1d5b22a8dcc457c5b0c5a8352e559447fe712de3d79942f9ec1a3d00ee35b5d"}, {0x50, 0x104, 0xfffffc00, "afa78c44d286947a41c1336bb72503ddac020fe3eccd2ca65e647e83646103f81d7de8124c3376c3972ce21c53329596e71c176ab9740efe1477241fac05"}], 0x258}}, {{&(0x7f0000001180)=@in={0x2, 0x4e21, @multicast1}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001200)="1916fe9fdfb5ad782e5f4bdf37b823c8dd7c78777ff25af6445672c3c862b8db0a96e7a2dc559689a542e08914958601d4e52b877155bac5fc43c46f799b4be4134168ca3949e5acc6b57625a9d9d1422a43083fd958b48c085ac9445319800261772bc8c41df6bc93e93c782b9d6a8fe51135833e1367005730aa47dc2a61d072f4789ae5dcc3e38819fed998608c9f737b9a0d5f9e4891ae2a80e2044bf288e4824d35", 0xa4}, {&(0x7f00000012c0)="2e7ecd648b320a470998132850aa1fa67ab5a61ba392c5206f28ac111989ab9251aa6a69a0e109e548aeaca658e48867e754ea59b9903ee366b45108c5db80927aa4509dc6f8dabb4811f8568a682effdfafe3ee5fdd6a30dbe486fd5eb0ad8942f465f3913fd8c09a349e0a69ff6dff2573d9d08341296830998006c21915c0f0d0f24b3e061d74901a", 0x8a}, {&(0x7f0000001380)="b2fc12266c9ad8038fe0d0af18a2", 0xe}], 0x3, &(0x7f0000004800)=[{0x30, 0x113, 0x5, "8384005f4b6babe3b6d2b4fb20c7a5514f7f28ddfd6202e38b5efe84d655"}, {0x38, 0xff, 0x7f, "b8d32ba11597d211d2d4b9f15a1490859b5293577fa5c29b425bc3c17a5a10bba55cf2"}, {0x88, 0x11, 0x1, "df804bbd96285c5cfddb5257a4dcca8a753c6572cfbb19975a397280ee07457ef0291293b656ff8734a1e7fb91d7677ee0111536839a00e703b8bcb8ea9767955e1a12e2b79e35eb4b3dea063662095b67a559e1ca32f6969b5e181fdbb1e725f782ad188192f36051098a2235a5ebf57f0fd66fa7"}, {0x90, 0x115, 0x2, "e35acc521a383402c48dca33929e84aa2c61f466948977212270a626b178e1251db686346bae5028ae8cd5259b7ee3bd7ba598391ab9d46c2173389a829f3e00182412161d9332d9ea6e2eccf8a05cf0bcf827e2d1c14c380ea8ea17efe0cd26040f77af0442e7c127176bb73c5a460fac1f11d44a0bcb2ea3"}], 0x180}}], 0x3, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x7fffffffffffffff}, {0x0, 0x4, 0x0, 0x800a78a}, 0xfffffffe, 0x6e6bc0, 0x2}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0xb}}, 0xe8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r6, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r6, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r8}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r10, &(0x7f0000000140)="05000000010000", 0x7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x7}, 0x48) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x2, 0x5) 9.768590185s ago: executing program 3 (id=4632): r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@gettaction={0xa8, 0x32, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd6}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc0}, 0x871) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) 8.793567463s ago: executing program 3 (id=4639): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x9, 0x0, 0xf, 0xc}, &(0x7f00000001c0)=0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$netlink(0x10, 0x3, 0x8) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x1c}}, 0x880) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x20602, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008000c11ff200100000000000000000000005afed63c55897c29000001ff1c00000000000000000000000000014f194e20"], 0x46) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x11, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x39, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000080) pselect6(0x40, &(0x7f0000000140)={0x1000, 0xd2, 0x0, 0xba, 0xfffffffffffffff9, 0x7}, &(0x7f0000000300)={0x7, 0xf, 0x1ff, 0x71a, 0x0, 0x7, 0x7, 0x8001}, &(0x7f0000000340)={0x0, 0xfffffffffffffff8, 0x1, 0xfffffffffffeffff, 0xfffffffffffffffe, 0x5, 0x8000, 0xa08}, &(0x7f0000000380)={0x0, 0x3938700}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x2]}, 0x8}) socket$nl_netfilter(0x10, 0x3, 0xc) 7.151895985s ago: executing program 0 (id=4650): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000004}) unshare(0x22020600) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x0) 6.186431898s ago: executing program 1 (id=4652): listen(0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd, 0x80000}]}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x194, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1bc}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004280)=@newtfilter={0x1f60, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x1f30, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xe, 0x6}}, @TCA_ROUTE4_ACT={0x1f1c, 0x6, [@m_police={0x1d9c, 0x1, 0x0, 0x0, {{0xb}, {0x1cb8, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x8001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x8000, 0x1, 0x5, 0x8, 0x1, 0x8001, 0xfff, 0x7, 0x100, 0x5, 0x8, 0x7cf09bdc, 0x13ad, 0xf, 0x4, 0x6, 0x0, 0x7, 0x0, 0x4, 0x1, 0x6, 0x5, 0x0, 0x4, 0x800, 0x5, 0x12, 0xa, 0x3, 0x9, 0x7, 0xff3, 0x6, 0x8001, 0xc, 0x4, 0x1, 0x5, 0x909, 0x9, 0x8, 0x3, 0x40, 0xc6, 0x3, 0x4, 0x27, 0x3, 0x66, 0x9, 0x7, 0x2, 0x1, 0xd2, 0x0, 0x3, 0x5, 0x4, 0x2, 0xf9, 0xffffff4e, 0x9, 0x89, 0x3, 0x51, 0x81, 0x6, 0xfffffff5, 0x40, 0xfffffffd, 0x9, 0x80000000, 0xfffffffb, 0x4, 0x7, 0x25, 0x7, 0x8001, 0x4, 0x4, 0xfff, 0x0, 0x2, 0x5f, 0x10000, 0x2, 0x4f6, 0x7e, 0x7ff, 0x7, 0x4, 0x7, 0xb533, 0x9, 0x3, 0x9, 0x1, 0x1, 0x7, 0x4, 0x4, 0x55d77217, 0xfffffffc, 0x1, 0x8, 0x0, 0x0, 0x4, 0x2, 0x5, 0xcf, 0x7, 0x6, 0x2, 0x5, 0x8000, 0xfff, 0x9, 0x3749d9d3, 0x3, 0x8, 0xd0, 0x2, 0x3, 0x4, 0xfff, 0xca0, 0x2, 0x4, 0xfffffff7, 0xc, 0x0, 0x4, 0x4, 0x8, 0x2, 0x1, 0x5, 0x2, 0x7, 0x9, 0x1, 0xfff, 0xfffffff1, 0x7, 0x9, 0x5, 0x7, 0x0, 0x7, 0x8, 0x0, 0x3, 0x10, 0x1, 0x200, 0x9, 0x8, 0x5, 0x3, 0x101, 0x70, 0x8, 0x1, 0x1000, 0x2, 0x1000, 0x9e, 0x7, 0x0, 0x5, 0x65, 0x4, 0x7, 0x4, 0x1, 0x9, 0x9, 0x4, 0x4, 0x5, 0x6, 0x4, 0xfffffffc, 0xd, 0xfffffffb, 0x8, 0xbb, 0x94, 0xa, 0x7, 0x800, 0x4, 0xc9, 0xf, 0x7, 0xeaff, 0x3, 0x0, 0x2, 0x800, 0x0, 0x2, 0xfffffc00, 0x1, 0x9, 0x7f, 0x0, 0x2e, 0x7f, 0x7, 0x20, 0xffffffff, 0x8, 0x3, 0x4, 0x3a, 0x9, 0x1, 0x41, 0x7ff, 0x2, 0x1, 0x0, 0x8, 0x8, 0xffffa047, 0x8, 0xfff, 0x400, 0x3, 0x5, 0x8, 0x0, 0x7, 0xa8, 0x0, 0x1, 0x6b, 0x4, 0xff, 0x1bcdde41, 0x1, 0xffff, 0x8, 0x100, 0x3, 0x5, 0x3, 0x4, 0xa0, 0x8, 0x7dc, 0xfffffff9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x6, 0x2, 0xdf4, 0x5, 0x3, 0x4, 0x1, 0x2, 0x9, 0x7, 0xfff, 0x3, 0x1ff, 0x219, 0x7, 0x7fff, 0xe, 0x7, 0x3, 0xc23, 0x6, 0x55, 0x6, 0x6, 0x80000001, 0x7, 0x8, 0x1b, 0x0, 0x401, 0x1, 0x3, 0x4, 0xffffffff, 0x4, 0x0, 0x6, 0x1, 0x4f, 0x200, 0x6, 0x6, 0x8, 0x35, 0x6, 0x0, 0x4, 0x4, 0x1, 0x0, 0x2, 0x40, 0x4, 0xe46a, 0x3, 0xffffffff, 0x8, 0x1000, 0xf9, 0x7fffffff, 0x10001, 0x401, 0xe, 0xef, 0x5, 0x1, 0x401, 0x5262, 0x6, 0x5, 0x3, 0x1, 0x1, 0x6, 0x7, 0x3, 0xfb, 0x3, 0x2, 0x8, 0x2, 0x8, 0x8, 0xd814, 0x8, 0x9, 0x4, 0xfffffff5, 0xd, 0x8, 0x120, 0x2, 0x8, 0x1, 0x3, 0x7ff, 0x1, 0x4, 0x1000, 0x8, 0x7, 0x0, 0x5, 0x4, 0x5, 0x1, 0x4, 0x8, 0xffffffd6, 0x8af, 0xf98, 0x31fd, 0x2, 0x9, 0x8, 0x2, 0x0, 0x7, 0x5, 0x1, 0x6, 0xd30, 0xf, 0x8, 0x1, 0x0, 0x7, 0xe, 0x6ff, 0x6, 0x1440275b, 0xff, 0xf8f, 0x1ff, 0x2, 0x0, 0xfffffffa, 0x0, 0x5, 0x81, 0x4, 0x10000, 0x3, 0x2, 0x3, 0x9, 0x2, 0x80, 0x1, 0x6, 0xfffffffb, 0x5d4, 0x723c, 0x5, 0x10001, 0x4ae, 0x5d4000, 0x40, 0x54, 0x2a88, 0xc7, 0x2, 0x5, 0x4, 0x8001, 0x5, 0x8000, 0x7fffffff, 0x6988, 0x4, 0x7, 0x2a72938e, 0x7fffffff, 0x4, 0x4, 0x627, 0x5, 0x4, 0x2, 0x100, 0x94, 0x6cf, 0x10, 0x6, 0x1cf, 0x8, 0x0, 0x401, 0x3, 0x40, 0x3, 0x80000001, 0x1, 0xa, 0x10, 0x0, 0x4, 0x1, 0x4, 0xdc6, 0x7, 0x3, 0x1, 0x0, 0x7, 0xffff40d9, 0xa1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x7, 0xe, 0xa0, 0x93, 0x9, 0x8001, 0x7, 0xa, 0x800, 0x9, 0x2, 0x1, 0x3, 0x7, 0x8, 0x3, 0xce1, 0x4, 0x10001, 0x5, 0xf, 0x1, 0xc, 0x7, 0x8, 0x6, 0x8001, 0x7fff, 0x7, 0x200, 0x9, 0x9, 0x9458, 0xffffff42, 0x1ff, 0x9, 0x3, 0x1000, 0x40, 0xffffff0f, 0x4d, 0x4, 0x5]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x4, 0xb, 0x3, 0x6, {0x0, 0x0, 0x100, 0xd, 0x4, 0x7}, {0x1e, 0x1, 0x8, 0x0, 0xb0, 0x5c}, 0xffff45b9, 0xffff, 0x2}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc, 0x4, 0x7fff, 0x0, 0x10cc042d, 0x10001, 0xc, 0x81, 0x3, 0x3, 0x9, 0xe5, 0x0, 0x8000, 0x6, 0xffffff27, 0x401, 0x0, 0xe, 0xf, 0x2, 0xda44, 0xfffffffb, 0x6, 0xff, 0x7, 0x401, 0x7, 0x1, 0x8, 0xa, 0xaec9, 0x109, 0x3, 0x1167, 0xb87c, 0x315, 0xfffffff8, 0x6, 0x6, 0x1, 0xd, 0x180000, 0x3, 0xffffb3e1, 0x0, 0x7fff, 0xd40, 0x7e1, 0x1, 0x9, 0x2, 0x7807, 0x0, 0x200, 0x6, 0xffffffd7, 0x5, 0x0, 0x5, 0x4, 0x4, 0x2, 0x0, 0x1, 0x10000, 0x17, 0x3, 0x8, 0xfffffffc, 0x0, 0x4, 0x4, 0x1, 0x2, 0x9, 0xfffffd60, 0x2, 0x403, 0xffffffc4, 0xa, 0x0, 0x3, 0xdfb5, 0x0, 0x5, 0x6, 0x5, 0x101, 0x8, 0x2, 0x6, 0x4, 0x18, 0x9, 0x0, 0xd, 0x401, 0x6, 0x3, 0xa000, 0x5, 0x7fff, 0x5, 0x0, 0xb64a, 0x81, 0xffff, 0x20f, 0xfff, 0x4, 0x14a, 0x2, 0x9, 0x6, 0x86db, 0x3, 0x52dd, 0x4, 0x2, 0x8, 0x5, 0x10001, 0x6, 0xd, 0xc, 0x5, 0x9, 0xb24b615a, 0xb, 0x0, 0xb3, 0xfffffff3, 0x2, 0x5, 0x2, 0x1, 0x7, 0x8, 0x6, 0xc00000, 0xfffff801, 0x5, 0xadd4, 0x7636, 0x625, 0xfffffbff, 0x7, 0x0, 0x0, 0xe0d41d44, 0xa3c7, 0x80000001, 0xfff, 0x3, 0x6, 0x21, 0x6, 0x9, 0x6, 0x7, 0x4, 0x1, 0x3, 0xd6, 0xe7, 0x7, 0x8, 0x1, 0x8, 0x80, 0x15fa, 0x7, 0x5, 0x10001, 0x40, 0x4, 0x9, 0xd52ab1d, 0x3, 0x9f8, 0xed6, 0x1, 0x7, 0x10000, 0x4, 0xf9b, 0x6, 0xffffffff, 0x3, 0xab3c, 0x7, 0xffff, 0x0, 0xfff, 0x4, 0x0, 0x200, 0x10001, 0x7, 0x5, 0xfffffffa, 0x7, 0x5, 0x8001, 0x8, 0x0, 0x0, 0x1, 0x7, 0x6, 0x7, 0xfffffbff, 0x40, 0x9, 0x3, 0x9df4, 0xf4, 0x6, 0xfad, 0x626, 0x4, 0x7, 0x7, 0x0, 0x7fffffff, 0xffff57b1, 0x1, 0xfff, 0x0, 0x1, 0x6, 0x6, 0x6, 0x2, 0x4, 0x1, 0x966e, 0x10001, 0x7, 0x2, 0xe774, 0x0, 0x7, 0x400, 0x800, 0x8, 0x5, 0xd, 0x5, 0xfffffffb, 0x39, 0xe, 0x5, 0x6, 0xc]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x9, 0x4, 0x3, 0x9, 0x14, 0x10001, 0x10000, 0x9, 0xb, 0x0, 0xfffffffe, 0x1, 0x5, 0x2, 0x7fff, 0xfffff10c, 0x0, 0xffff98b8, 0xffff, 0x4, 0xea0, 0x0, 0x4, 0x5c98e470, 0x6, 0x10000, 0xf, 0x8, 0x340000, 0x1000, 0x2, 0x4, 0x7, 0x9, 0x3, 0x5, 0x81, 0x100, 0x8000, 0x40, 0x6, 0x5, 0x6, 0x3, 0x1, 0x6, 0x9, 0xfffffff7, 0x7, 0x4, 0x9, 0x1000, 0x0, 0x5, 0x4, 0x4, 0x9, 0xd8, 0x5, 0x25f, 0x2, 0x60, 0x3, 0xa61a, 0x81, 0x1, 0x1, 0x589fd2d4, 0xe, 0x86f, 0x8001, 0x0, 0xdb6, 0xff, 0xe, 0xe7, 0x7, 0x6, 0x100, 0xffffffff, 0x81, 0x5, 0x3ff, 0xfffffffb, 0xfffffff3, 0x9, 0x6, 0x9, 0xc3d, 0x401, 0x4, 0x81, 0x1, 0x7f, 0xfffffffc, 0x4, 0xf, 0x89, 0x7, 0x0, 0x9, 0x3, 0xfffffffa, 0x8, 0x18000000, 0xfff, 0x2, 0x1, 0x3, 0xfffffffa, 0xfff, 0x7, 0x0, 0x1ff, 0x1af, 0x4, 0x7, 0x6, 0xffffff89, 0x0, 0x1, 0x4, 0x9, 0x7fff, 0x0, 0x1, 0xe, 0x3a13, 0x4, 0x3, 0x9, 0xc9, 0xc, 0x4, 0x9, 0x4, 0xffffffff, 0x400, 0x7, 0x14b, 0x1, 0x80000000, 0x9, 0x0, 0x2, 0x3, 0x40, 0x0, 0xc, 0xffffffff, 0x8, 0xfffffffc, 0x101, 0x4, 0x7, 0xfff, 0x0, 0x4, 0x7, 0xaebb, 0x9, 0x64b, 0x8, 0x2, 0x3, 0x9, 0x6, 0x6, 0xfffffffb, 0x8, 0x1, 0x100, 0x2, 0x7344, 0x63f, 0x1, 0x8, 0x100, 0x6, 0xffff, 0x6f, 0x7fffffff, 0x7, 0x9, 0x3, 0x0, 0x8, 0xffff8001, 0x4, 0x723a67bc, 0x20, 0x5, 0x1, 0x79a, 0x39f4, 0x6, 0xfff, 0x45ad, 0x9, 0x8, 0x3, 0x80, 0x1, 0x400, 0x5, 0x7fff, 0xd3, 0x1, 0xff, 0x4, 0x9ff, 0xc, 0x5, 0x4, 0x2, 0x3, 0x5, 0xbd, 0x8, 0xffff, 0x3, 0x800, 0x7, 0x0, 0x6f, 0xab5, 0x80000001, 0x9, 0x6, 0x7, 0x9, 0x7, 0x4, 0x0, 0x0, 0x3, 0xd5, 0xae3, 0x4, 0x7, 0x0, 0x6, 0xc, 0x3, 0x48, 0x0, 0x1, 0x88, 0x7, 0xf7, 0x8, 0x9, 0x7, 0xff, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x80000001, 0x3, 0x7ff, 0x8001, 0xd, 0x9, 0x9, 0x4, 0x6, 0x7fff, 0x3835, 0x383b, 0x7fff, 0x4, 0x1, 0x4, 0x8, 0xb787, 0x3, 0x22cf, 0xffff, 0xfffffffb, 0x94d0, 0x81, 0x7, 0x101, 0x81, 0xa3f3, 0x20, 0x7ff, 0x3, 0xf, 0x2, 0x8000, 0x2, 0x9, 0xffffffff, 0x200, 0x800, 0x7fff, 0x8, 0xff, 0x5, 0x1, 0x4, 0x1, 0x9, 0x1, 0x3, 0xa, 0x5, 0xffffffff, 0xff, 0x4, 0x100, 0xb, 0x180000, 0x8000, 0x7, 0x75, 0x20, 0x200, 0x7fffffff, 0x1075, 0x4, 0x40, 0x8, 0x4, 0x3, 0x5, 0xfff, 0xfffffffb, 0xf, 0x5, 0x7fff, 0xa, 0x1, 0x4, 0x6, 0x4, 0x4, 0x6d1a, 0x4, 0x4, 0x4, 0x0, 0x9, 0x1ff, 0x2, 0x0, 0x2, 0x40, 0x5, 0x8000, 0x3, 0x8, 0x9, 0x5, 0x6, 0x6, 0x2, 0x5, 0x1, 0x1, 0xf1e3, 0x3cba, 0x7, 0x100, 0xce, 0x0, 0xd8c, 0x2, 0xfffffffe, 0x4a, 0x0, 0x4, 0x1, 0x1, 0x9, 0x3, 0x8001, 0x5, 0x4, 0x2, 0x17e0, 0x7, 0x10000, 0x80, 0xe6, 0x91d6, 0x0, 0x80000000, 0xf, 0x7, 0x7, 0xfff, 0x4, 0x5, 0x5, 0x5, 0x7, 0x9, 0x9, 0x3, 0xf, 0x2, 0x6, 0x80000001, 0xfffffffd, 0xfffffffa, 0x80000000, 0x6, 0xec01, 0x6d21fc79, 0x7, 0xfffffff7, 0x1, 0x1, 0xe0f, 0x7ff, 0x51, 0x2, 0x6, 0x3, 0xfae, 0xffff, 0xc, 0x800, 0x5, 0x33, 0x7fffffff, 0x5db5, 0x7fff, 0xff, 0x0, 0x3, 0x85d, 0x400, 0x5, 0x5, 0x5, 0x8, 0x6, 0x6f7, 0x2, 0xc, 0xf2, 0x8, 0x8, 0x5, 0x101, 0x3, 0xcfe, 0xb83, 0x3, 0x101, 0x7, 0x6, 0x7fff, 0x2, 0x6, 0x2, 0xe, 0x10001, 0x45, 0x4, 0x8, 0x800, 0xb, 0x3, 0x1e2, 0x8000, 0x6, 0x2, 0xa03, 0x8001, 0x0, 0x4, 0x6, 0x0, 0x2, 0x2609, 0x6, 0x6, 0x4, 0x6, 0x3, 0x6325bef3, 0x5, 0x4665, 0x5b, 0xc0, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x1, 0x4, 0x5, 0xfd, 0x6, 0x0, 0x9, 0xd78, 0xfffffffa, 0x714841b5, 0x5, 0x6, 0x1, 0x8, 0x7, 0x60]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x2, 0x9, 0xd27, 0x4, 0x215b, 0x5, 0xa1, 0x6, 0xd, 0x9, 0x10, 0x9, 0x6, 0xc00000, 0x7ff, 0x10001, 0x2, 0xfffffff8, 0x7, 0x8, 0x0, 0x0, 0xe, 0x5, 0x9, 0x2, 0x7, 0x6, 0x3, 0x2, 0x51, 0x40, 0x2, 0xfffffff7, 0x6, 0x1, 0x4, 0xb98a68f, 0x1, 0x6, 0xe, 0x400, 0xffff, 0x5, 0x0, 0x7, 0x2, 0x1, 0x1, 0xedd, 0x0, 0x0, 0x9, 0x31d, 0x0, 0x3, 0x4, 0xac, 0xb67, 0x9, 0xf351, 0x0, 0xa042, 0xe1, 0x8, 0x8, 0x6b, 0xe, 0xffff7fff, 0xfffffffb, 0x8, 0xb2, 0x5, 0x1, 0x7, 0x5, 0x7, 0x7, 0x9, 0x8, 0x0, 0x8, 0x1, 0xfffffd2b, 0x1, 0x80000000, 0x800, 0x100, 0xf6, 0x5, 0xd6f6, 0x0, 0x9, 0x0, 0x7d, 0x1, 0x1, 0x5, 0x9, 0x1, 0x3, 0x4, 0x4, 0x2, 0x7f, 0x3, 0xffff6b7b, 0x1, 0x8, 0x2, 0x8, 0x8, 0x8, 0x2, 0x2, 0x4, 0x3, 0x7, 0x4, 0x96e, 0x676a, 0x7, 0x2, 0x4, 0x3, 0x6, 0x7a8c, 0xa90, 0x1000, 0x200, 0x9, 0x80000000, 0x3, 0x86, 0xfff, 0x3, 0x745a, 0x81, 0x4, 0xf400000, 0x800, 0xfffffeff, 0x8, 0x1, 0x7, 0x9, 0x7, 0x3, 0xfffffffc, 0xd, 0xcb3, 0x8, 0xfffffffb, 0x40, 0x1, 0x8, 0x6, 0x35a3, 0x6, 0x9e60, 0x10000, 0x10, 0xac, 0x4, 0x5, 0x80000000, 0x4, 0x1, 0x3, 0x3ff, 0x5fa3, 0x7, 0x3, 0x3, 0xbb5, 0x9baa, 0x5, 0x1, 0x6, 0x4, 0x2, 0x9, 0x4, 0x1, 0x393, 0x10, 0x10000, 0x0, 0x96, 0x36, 0x2, 0x80, 0x10, 0x8, 0x101, 0x120, 0x0, 0x8001000, 0xd, 0x2e1, 0x1, 0x4, 0x80, 0x0, 0x7ff, 0xfaaadd64, 0xfffff31f, 0x7, 0x618, 0x9, 0x7, 0xfffffffb, 0x7, 0x6, 0x9, 0x400, 0x7, 0x1, 0x8, 0x9, 0x5, 0x1, 0x9, 0x9, 0x0, 0x4, 0x80000001, 0x1, 0x3, 0x10000000, 0x4, 0x4000000, 0x0, 0x1, 0x7, 0x7, 0x5, 0x1, 0x10001, 0x2, 0x80000000, 0x10000, 0xf, 0x3fc000, 0x1, 0x7, 0x1, 0xffffffff, 0x800, 0xc, 0x7, 0x800, 0x8000, 0x4, 0x6]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x0, 0x9, 0xb, 0x6, 0x5, 0x6, 0xffffffa6, 0x6, 0x80, 0x1, 0x4, 0xffffffff, 0x1, 0x5, 0x2, 0x6, 0x9, 0x3773, 0x6, 0xffffff05, 0x8, 0x9, 0xe, 0x8, 0x6, 0x7f, 0x6b2e798, 0xfffffffc, 0x3, 0x2, 0xd, 0xfff, 0x4, 0x9, 0x2, 0x40, 0x1, 0x5, 0x4, 0xe1aa, 0xdb, 0x1, 0x1, 0xffffffff, 0xfffffffe, 0x3, 0x1, 0x400, 0x8, 0x1, 0x5, 0x13, 0x0, 0x80000000, 0x6, 0x4, 0x3, 0x5, 0x6, 0x7fffffff, 0x8, 0x0, 0x200, 0x9, 0x1, 0x5, 0x3, 0x80000000, 0xaf4, 0x6, 0x5, 0x4, 0x3, 0x6, 0x9, 0xfffffff9, 0x6, 0x618, 0xd9, 0x80000001, 0xdd4, 0x8, 0x7, 0x9, 0x1, 0xfffffffc, 0x6, 0x9, 0x1, 0x6, 0xf665, 0x9, 0x4, 0x3, 0xffffff80, 0xea75, 0xa, 0x8000, 0x5, 0x9813, 0x9, 0xfffff800, 0x401, 0x9, 0x4, 0x8, 0x8, 0x3, 0x5e04, 0x40, 0x9, 0xffffff00, 0x8, 0x4, 0x4, 0x6, 0x9, 0x3, 0x3, 0x40000000, 0x200, 0x7fffffff, 0x3, 0x7, 0x4, 0xfffffffd, 0x1, 0x3, 0x10001, 0xa3e, 0x9, 0x8, 0x5, 0x2, 0x5, 0x9, 0x6, 0x4, 0x101, 0x1, 0x6, 0x9, 0x4, 0x77, 0x6, 0x6, 0x0, 0xfffffffe, 0x5cf, 0x1, 0x7e, 0x2, 0x1, 0x1, 0x9, 0x7, 0x8000, 0x7, 0x7fff, 0x0, 0x7, 0x4, 0x0, 0x9, 0xfff, 0x8, 0x9b, 0x1, 0x242, 0x5, 0x5, 0x7, 0x10001, 0x56, 0x200, 0xfffffffc, 0x3, 0x2, 0x7, 0x7, 0x200, 0x3, 0x3, 0x7, 0x9, 0x2761, 0x88000000, 0x3, 0x7f, 0x3, 0x800, 0x4, 0xf07, 0x4, 0x9, 0x4, 0x800, 0x8, 0x9, 0x4, 0xffff, 0xfffffff9, 0x293d, 0x8d, 0x1, 0x6, 0x401, 0x4, 0x4abd, 0xfffffc00, 0x3, 0x2, 0x3, 0x5, 0x0, 0x1, 0x4, 0x5, 0x6, 0x3, 0x8, 0x1, 0x5, 0xfffffffd, 0x2, 0x8, 0xfffffff7, 0x4, 0xfffffffb, 0x40, 0x8, 0x4c6, 0x6, 0x5, 0x0, 0x4, 0x9d3b, 0x9, 0x1, 0xe9, 0x82, 0x10000, 0x0, 0xbd4, 0xfffffffd, 0x9, 0x1, 0x7fff, 0x1, 0x10001, 0x7, 0xd, 0x81, 0x5, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]]}, {0xbc, 0x6, "4bce033721132da75a633cdf7c843e8067d47c6d08c399de72a79b4571e15c9a85c1de04ae9fc59a91c25183c907a5dbcf3a878a410239925453ed6ae844563c441536302fca4eb21915228493a4f3de0f6100b0e44f9b2dd616da34c7d666a31d0a11f91d397913f723362a9cdf7bb07163a9429d5da2000d1c9ef33711b724a758f66f2df0ebec1d06846b9598f00ad1a70086940bd20a7a445ba519ec58bdd7dc1f4921cc54de37d02db75325d986b9775df5e2bbe7aa"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x17c, 0x11, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="de5e7bfd162c"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x3, 0xffffffffffffffff, 0xf, 0x8}, 0x3}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x89, 0x5, 0x7, 0x80}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd5, 0x1, 0x0, 0x4, 0x100}, 0x3}}]}, {0xaf, 0x6, "af315a43d64bfad85434df8cbaf5d7f95593ba14abe60374d5a6a5e21eb1589b1883ba0a62d57d9cd5a466da8602fae089f2d23cb4d79f88aacbc4c3e12b184887a5ec0f7fb0a7fe3d40ca089c397c87ac66c3022e44d59b41c9c3fdedcbb2ccd5b19d2a902ca96e67188854a4b36079fcba2ba262846b3b5637fc105c2f9702e9e16544e1e5ec0bf091fd3df9e16e13f03e631331a2998e9166dc4219981c89863b4fa3ccd7f1da250d7f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x67}]}}]}, 0x1f60}}, 0x2) 6.182451251s ago: executing program 4 (id=4654): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES64=r0, @ANYBLOB="35c60100ef000000500012800e0001006970366772657461700000003c00028014000600fe88000000000000000000010114000700ff8000000000000020000000000000bb060002000700000008000100000000", @ANYRES64=r0], 0x70}, 0x1, 0x0, 0x0, 0x240488c0}, 0x0) 5.903723462s ago: executing program 4 (id=4656): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x5, &(0x7f0000000040)=0x24, 0x5) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 5.544727425s ago: executing program 0 (id=4658): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) splice(r0, &(0x7f0000000040)=0xfffffffffffff2fb, r0, &(0x7f0000000080)=0xffffffffffffff98, 0x93e5, 0x4) (async) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'vlan1\x00', 0x1}) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000100)=0xffff, 0x4) 5.423963196s ago: executing program 2 (id=4659): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x14, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x0, 0x4, 0x400, 0x0, 0x32, 0x800, 0x6f}, 0x9c) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x4ea4, 0x0, @mcast1, 0x3}, 0x49) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x59a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x48065}, 0x8000) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x7}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010400000d00000000000100000000000000001c0017000034fa28ab00006574683a73797a6b616c6c657230", @ANYRES16=r6, @ANYRESHEX=r6, @ANYRES64=r6, @ANYRES64=r5], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1) 5.417394977s ago: executing program 4 (id=4660): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000080)="9f28be174f709941", 0x8}, {0x0}], 0x2, 0x0, 0x0, 0x60000000}, 0x2400c894) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000001c40)=ANY=[@ANYRESOCT=r5], 0xfdef) recvmmsg(r2, &(0x7f0000001b00)=[{{&(0x7f0000000040)=@pppol2tp, 0x80, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/138, 0x8a}, {&(0x7f0000000280)=""/119, 0x77}, {&(0x7f00000000c0)=""/40, 0x28}, {&(0x7f0000000300)=""/207, 0xcf}], 0x4, &(0x7f0000000400)=""/110, 0x6e}}, {{&(0x7f0000000480)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/70, 0x46}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/20, 0x14}], 0x3, &(0x7f0000000600)=""/142, 0x8e}, 0xfdc}, {{&(0x7f00000006c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000740)=""/85, 0x55}], 0x1, &(0x7f0000000800)=""/103, 0x67}, 0x6}, {{&(0x7f0000000880)=@xdp, 0x80, &(0x7f0000000940)=[{&(0x7f0000000900)=""/44, 0x2c}, {&(0x7f00000019c0)=""/181, 0xb5}], 0x2, &(0x7f0000001a80)=""/118, 0x76}, 0x5}], 0x4, 0x40000000, &(0x7f0000001c00)={0x77359400}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) unshare(0x22020600) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x0) 5.342061212s ago: executing program 0 (id=4661): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x98, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1300}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x10001}}]}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x401}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x5}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000003c0)={0x0, 0x168, 0x100000001}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000007c0)={r2, 0x3059, 0x1, [0xe96, 0x8, 0x8, 0x5, 0x100], [0x5, 0x1000, 0xdc6c, 0x98, 0x52d2, 0x902, 0x3, 0x8ae, 0x2, 0xfffffffffffffffc, 0x2c1, 0x7, 0xfffffffffffffd76, 0x2, 0xac, 0xfffffffffffffffd, 0x9, 0x3, 0x4, 0x6, 0xeb4, 0x9, 0x4, 0xa5, 0x3, 0x3, 0xffffffffffffff80, 0x0, 0x4, 0x0, 0x9ca, 0x3, 0x6, 0xf2b, 0x3, 0x6, 0xdb1, 0x1c3, 0x7fff, 0x8, 0xffff, 0x8, 0x3, 0x2, 0x80, 0x9, 0x2, 0x6, 0x6, 0xe, 0x10000, 0x5, 0x6, 0x1, 0x1000, 0x9ab, 0x1, 0x80000001, 0x8, 0x4, 0x4, 0x4, 0x400, 0x6, 0x10001, 0x1, 0x1b1c, 0x2, 0x1, 0x8, 0x2, 0x9, 0x1, 0x100000000, 0xc, 0x6, 0x200, 0x20b, 0x9, 0x1, 0x7fffffff, 0x8, 0x5, 0x2, 0x7, 0x4, 0xc8, 0x8, 0x8000, 0x7fffffff, 0x8, 0x9, 0x2, 0x80000001, 0x7fffffffffffffff, 0x1c65d9b3, 0x5, 0x5, 0x40, 0x8000000000000001, 0x6, 0x7fffffff, 0x3e82, 0x9, 0x2, 0x6, 0x3, 0xfffffffffffffff5, 0xb, 0x4000, 0x7, 0x7f, 0xfffffffffffffff5, 0x8, 0x7, 0x1, 0x3, 0x3, 0x80000001, 0x5b1, 0x10]}) 4.819486278s ago: executing program 0 (id=4662): r0 = socket(0x10, 0x3, 0x0) unshare(0xc020680) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) listen(r1, 0x6) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080), &(0x7f0000000100)=0x4) close(0x4) 4.257370929s ago: executing program 0 (id=4663): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0006"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r2, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x28, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x4, 0x800}, @nested={0xf, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @generic="a1fcd7"]}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, 0x0, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000000)='GPL\x00', 0x4, 0x11, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23, 0x0, 0x0, 0xff87}, 0x23) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6(0xa, 0x80000, 0x8) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f00000004c0)=0xa, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x38, r9, 0x1, 0x72bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8, 0x1, 0x6, 0x9, 0x0, 0x4, 0x200]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r6, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x69ff, 0x13}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x11c7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001000ffff25bd7000f7d9df2500000000", @ANYRES32=r1, @ANYBLOB="1328000000000000050021005700000008000a00", @ANYRES32=r1, @ANYBLOB="b132b5477910dc309490578bc13485ae8a5d1eeb4d08e37dbbba1a89e408efa7235d6d14051c7a5f97a632c1"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 3.706814102s ago: executing program 4 (id=4664): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x5237, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x2c80, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40001) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r4, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1a}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x15}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000480)={0x3c, 0x8, 0x2, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback]}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x39c, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000800)={&(0x7f0000000500)="ff2c5f03a89bb3275b60e342e6bc4503ad16eb255173ca289b38000b48bbcbb4db7d2858ed8c3235f5965a9e452ac342ff58aa8e39d6e635e39573a6727e8bb5f7ee8ae5c6898131e44553550bb31b51be36fa903cdd4ce9741fd5d42e42a887db72d0385aac6dced08729b143e891504f5447b21c736d4f213754f11a1cbc5b0b223c3fcee52a51e2cfcc11fb53280798e40bcef74a96779d704bfef8d2330ef17ba59377029e0e39e6cb9bbafd28dbe0b0fb0788b1f74a", &(0x7f00000005c0)=""/192, &(0x7f0000000680)="c50d3ce9011a4c313a5a76ab806d3c8c9d0fa5059a7db15a70", &(0x7f00000006c0)="42449af233fafa8403ae9030fe2a2a973a759a3267e6713f4a882b1ac383a347f66b26405447af6cf68220aea8213cf972f3d77e07c6c1ef67342dd6f1bae91f01b62834a180f19cfd4d3b664d76441bd277e163682864f996fd9b1d7f6984b0803bacc1565a0fa17e9db6e55e48970217261b120a7c4050bb5d2c049c5ede600b337dce381811c79788fa902557e10d00431268", 0xffffffc0, r8}, 0x38) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r2) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000001640)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001600)={&(0x7f00000008c0)={0xcfc, r9, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0xa8, 0x7f, [@prep={0x83, 0x1f, {{}, 0x1, 0x9, @device_b, 0xb9, @void, 0x5, 0x3, @device_b, 0x4}}, @ssid={0x0, 0x6, @default_ap_ssid}, @preq={0x82, 0x67, {{0x1, 0x1}, 0x2, 0xe, 0x77, @device_b, 0x31, @void, 0x7, 0xb, 0x7, [{{0x1, 0x0, 0x1}, @device_a, 0x4a78195e}, {{}, @device_a, 0x9}, {{0x1, 0x0, 0x1}, @device_a, 0x7bbd2d3b}, {{0x0, 0x0, 0x1}, @device_a, 0x4}, {{}, @device_b, 0x3b}, {{0x1}, @device_a, 0xffff7fff}, {{0x1}}]}}, @mic={0x8c, 0x10, {0x944, "a61f3f1cad84", @short="1a9dfbde5aeea2a4"}}]}, @NL80211_ATTR_BEACON_HEAD={0x73a, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6}, @device_a, @device_a, @random="c53aefe45c70", {0x6, 0xf}, @value=@ver_80211n={0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x8001, @default, 0x400, @void, @void, @void, @void, @void, @val={0x5, 0xed, {0x3, 0x64, 0x4, "1517c079cb259143c3822b4a284f4a3bfddc6259faac670681264a3f31719ebc0fee446dc93e71d0f82d8474c7a66510ee35da3a30da087a87a8ee4483516a5c2b63869d757dc12ab153bce2985264f05e7aec06c69c7eb12b5841a699e0165bae6613b274766fefa796bb357933ad119dfc64e702d1c78138e34ecff95f48b192f92a2e1781408d3ed07114b03b180c0a8c89172d865a82e03b0d7bafabba81b7e31522e67958db668d058acdc8da7c849b428f68bc9c0da17327a42d3b85e17fcfb96b947443c1808c71d26ee0fef83dce00c92890f7ee0c22fab8d058398f6ff0857e4dda21938504"}}, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x4, 0x34, 0x2}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x81, 0x3d, 0x31, 0xfffa}}, [{0xdd, 0xc4, "4eb42b2d812fd3a5122426fc513d647d621bee05788d384fa759ae40a5de5d0b258040933505a4b8ab656dee95c5ec6b551fdf838fccea5ffbf57ea87c3d408ae1d4b2112be500181fb41e3a9b9ef8ac4a2cfcf2d9b62922ccb3986e335349b885f8cc41bd45a899765df4b49849dd81a15d79a4e50629f36c106b2416e6b1c5688bed2b82f8a5990ed42bf06bcea8b7dc68d9f0ecde335305ac32ef17f2adfcab7c692afbe3432df2cc66109d5cfd760d189626d5134784c9a3265aca1e1e9382d76af6"}, {0xdd, 0xfe, "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"}, {0xdd, 0xee, "eb57a8b02892f89b181d1afa5ef0aef25ce5290d8a4f62c8e96c4f755153fecaf2faed9a079e92246d3651247d10a04b8cdda7266ade74b393c2194fcc3405ef58a911590915a41d1b37e020d072c678d988857fd146d85948e2726eab931ee6070590d94351837cd8a5f89739fa91fbd26b661f317a70cb810c516cc182d1b15dffc9d79b7003042ef72daaed771981819c16e3fc0879f006a544301c15ab019ec7c4f4a0226a6b70c6b42b26a0a620ad826015596592debb58931ad9ac126fbf32bd34603ae4b4580f8a00f903bb710f18ab48deded4759716761bba2e6cdfdbf02bbf9ae277618646c86cbe30"}, {0xdd, 0x98, "2a44529ae90b90b2d379c4c6001cb32302e3722b9dcab8dca79613bf3641d732567bbe96d958602705499cf2048abcc688d595db33073f31c35c3b5384a7047724ea058cb49b3ea1d7604d07c03e9217f3ee4582675481cc2ae9ee6214b8cf927e04dc7827a926f5862d1432b42d387a42e5995cb8b075ef519e5129b4058d63cf9f4f6e6f82ebcd33f97840967a4ca84005eb5a559f435f"}, {0xdd, 0x1c, "511d557714058fbcf5ff652ded724c38331549210434afe4de4293bd"}, {0xdd, 0xee, "3fd74951dd0ed3c24280c921fde54c2f85ca451cb94a327bca0a82fe9be09ef221fc45574d4270dedc3bc5e25ff8bc5cd7ce37bf1399890c1b6a802f4d8c4602b922a8a90ca77d53e9aca3384f0f39e030c23784640be4a54bd85224229098a6801e8b5ae182c19d31ea8bd7f9bf4cd3af6f3550dcdafff719092b9dbcc517da77efb22a5caeea84c060f18d5116c4ca64aa724539da956b8a58976ea276a759b9cf44874cc1f1d5ae8e99e68272fae3f63cce37a4263a2e2d6f70c3c1440f808c04e1a78a1da44f70e8bf819ae23ec6efa4277ef788516aa6ed0093f0221f587789e0e10729506670cace093305"}, {0xdd, 0xac, "e0570cae21255f98d2991d8164ce931dabf98d23a989b4802ab69bdc9f9340add3f62f59e39fac05940445faa2dde3687f5b41ef25b152ac447b4d80a7320bb3a4cdf7b44c0b477a4d3ec9115626664a4ee7b941afaf6c0823e47136f2d0771fcecda947d36b72f40b170ea816c36506d1685732e66cfafeb06b30e07b24b37f2c31fb1a1440f5fd6bce4030094a4dccb32aa75ff58647d5f8dda034d23c3294a55c92064dd9a91ea2d75213"}, {0xdd, 0xf8, "89953a5eba641fe7067364282075f06c20b9ebf8aa4fa463014b5851c229080da32c7ea66afaa2f9c506c8d1eac68eab72908f9e6d13f3392ba3efffb25d3f7a1a744c2bf51c7256f75a893f35c7836c5f37c872f8fb1796e9d81f4fd55def67046c99269e2c2602d7c07bc0120792e2c6d2d83108658f231039da2c8b2d3ee56961d983932882ee1b7416f0132d9c5623fefaa7ea302b9dac02e4beadd233de5cd1f9450bbadbc83c7ab36bb784a35e9a5f9808bd755f934b4ab7a19208f4104e6820abb71b95aef3bd2d14f3f54548304ced22a26461360580af06117f6d46afc5847e3d8af31d31c34e2d39ec65221b04723d40e801a1"}]}}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9a, 0x7f, [@tim={0x5, 0x62, {0x1, 0xcf, 0x0, "ab14cd7a6cecd54e8d2352110ffdb87dd97c5b8069f2bc02f0a3859701a0069b25bbec4c5897b3991c3141167728a3248db985058b88fcaf8ec92bb5dc213c3ba3be1433ead1c52482bea1c2cf41e5a4d2a33d4dd95b537148833c0521871f"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x2, 0x9, @broadcast, 0x3ff, @value=@broadcast, 0x20580, 0x100000, @broadcast}}, @chsw_timing={0x68, 0x4, {0x9, 0x6c9}}, @channel_switch={0x25, 0x3, {0x0, 0x7c, 0x7}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x7a, 0x80, [@measure_req={0x26, 0x56, {0x1, 0x33, 0x2, "b60e7b80ce2fae438a21ea7dbd38ca48d16e6a6f8d5f845f53b07102bdb3edef5509c496c85e1efdf2f5c422e6963ca5f695cf6dd0833c25b27fe15c174c85d698081b2c897802dd6c9c9dbca62ee1ba62ea41"}}, @mic={0x8c, 0x18, {0xc78, "dc5006b0c7b4", @long="d43435acf7b7c1392601b656706f44d9"}}, @supported_rates={0x1, 0x2, [{0x1b}, {0x2, 0x1}]}]}, @NL80211_ATTR_FTM_RESPONDER={0x3e0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xe1, 0x2, "e41223780e38f0d22159391a6d0393cdfab07746e77743e5e0a3fbcf6ed34d440fa2d6bcd5ed7e3a8984655b3dce969fe54ba776d8fde8d1807386cae175b38e78f858da7cd48c33f1341696aa3c6368dd92e3c5f620426a3a1a982e71c17f0bb203bdc92ba31245e31058e816555427fdacc233770d73f063105f3f7c02e121e7f2e4c2c9f3a5110ee81edb44e327beed0f090b7b294d83a0547c385a66120e415de5ce9eb1d253e953fc82c479816de2cbcf7fbab0e70c9d89cb329af86f231c62223ae3b8d4d793ad8f4b0740c17d77cedee5c1c452a8621edc0bbe"}, @NL80211_FTM_RESP_ATTR_LCI={0xff, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xea, 0x2, "3a29bc46228eac58919c963c70b9c548b5d4f644d1e7f78a9f832cabfbab5f71829d4e0f5bb4909238d5d1373befba2e882c41ed91ef023e6bcf0027f260b4a3d61685a3d9455fd72d9cb841c54df06c1917db8dae29c888cf46e7d304ecfed03733b76330c8032473208211a1c073d7b4f2588e9bab57c3aacf18285039de5425572f99be32c7cbf3bd5888b6e572d943e18a80c5506c00b97b544abfbf875a562d91e9c0b3af7764c2ee832582dea8fdecb832ef6639764c60b52eff4ec27c2b8e0f32d87bab46f3e5ff2d8d47dad1acd1f98c61b9b05022026f3a5c7deec96c798ebd4fdb"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x102, 0x3, "ca06e85ed4fdc2ff6a84f25ce94eab3d982b60de7fd3f7258081f88406bb1f34bbb0e93141a03cca8880747af6436fe926c3b5480c2e5664279cb77644506a39488576920c7a0d722bbdd7cb76f0aaa9cae87f0536c8edbf645fcde7ff3021a88a113cc0612b444f2c4b41bfc97377a2993d7e873eaa69e129207cc6dee2397706ecf69941daf1ce381dd2f73b497130ae01f543bd45b9dce9593bd5bc21fac4fd63379d0595fbc901de9e2a5e32cc4f07b3bab0be28dd7be962acc8c319f1d035d80d196b701c63c549be6c2227909d7928b50535aea251663a02d09ea28f94d439061618f75291835e87f25b96bb42a4981ce80ee887a722a59d3e2532"}]}]}, 0xcfc}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r10 = socket(0x9, 0x800, 0xa0000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000001780)={'erspan0\x00', &(0x7f0000001680)={'syztnl2\x00', 0x0, 0x8, 0x7800, 0x1, 0xb, {{0x32, 0x4, 0x1, 0x7, 0xc8, 0x64, 0x0, 0xc4, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x20, 0x8a, 0x0, 0x2, [0x9, 0xf6c, 0x6, 0xb, 0x8, 0x9, 0x4]}, @noop, @cipso={0x86, 0x27, 0x0, [{0x6, 0x4, "ba79"}, {0x1, 0xb, "56a016aa74c8cc7f96"}, {0x6, 0x5, "1aaa63"}, {0x7, 0x2}, {0x0, 0xb, "7ca65b994773a342f7"}]}, @cipso={0x86, 0x24, 0x2, [{0x2, 0x12, "d747251a5a6dd18654115fd0619338c6"}, {0x6, 0xc, "b26e36ea68227322c780"}]}, @generic={0xe, 0x2}, @timestamp={0x44, 0x18, 0xb0, 0x0, 0xe, [0x0, 0x44, 0x4, 0x4, 0x5]}, @ssrr={0x89, 0xf, 0x44, [@private=0xa010100, @local, @private=0xa010101]}, @rr={0x7, 0x1b, 0x28, [@multicast1, @private=0xa010102, @multicast1, @multicast1, @broadcast, @loopback]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000001840)={'syztnl0\x00', &(0x7f00000017c0)={'ip6tnl0\x00', r11, 0x0, 0x5, 0x4, 0x3, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x80, 0x71}}) connect$l2tp6(r10, &(0x7f0000001880)={0xa, 0x0, 0xfffffc00, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000001a80)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a40)={&(0x7f0000001940)={0xd4, r9, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, 'mkD\x00W'}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0x4}]}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xc, 0x4, "9a2065145ca207e7"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "ee4a305c3c"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "02d6e99f44"}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x90}, 0x800) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000001ac0)) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r13, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x50, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000014}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001c40)={'wlan0\x00'}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001c80), 0x4) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000001cc0)=0x10) 583.206035ms ago: executing program 0 (id=4665): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800), 0x50) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) close(0x3) r1 = accept$inet(r0, &(0x7f00000010c0)={0x2, 0x0, @local}, &(0x7f0000001100)=0x10) ioctl(r1, 0x4, &(0x7f0000001140)) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x9, @remote, 0xf}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r6}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r8, &(0x7f0000000980), 0x0}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r10, 0x84, 0x77, &(0x7f00000001c0)={r9, 0x21b7}, 0x8) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0xe0ff, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 580.602036ms ago: executing program 4 (id=4666): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x4}, 0x6) r1 = socket(0x10, 0x2, 0x0) close(0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) recvmmsg(r3, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x300080c0}, 0x4050) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000ac0)={0x2c, r4, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x45000}, 0x4040004) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x7fffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x29201962041909f2}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000010) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f0000000000)={0x0, 0x9, "be5f21", 0x8, 0x80}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0x8001) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={@private1, 0x41}) 545.741762ms ago: executing program 2 (id=4667): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d270015000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a0000ad1818853422e45d000800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000e00)={0x434, 0x3f4, 0x100, 0x70bd29, 0x25dfdbff, {0x6, 0xb652b83a6b33eea, 0x5, [0x3, 0x69, 0x82cd, 0x1, 0x9, 0x1, 0x200, 0x2, 0x2, 0x8, 0x2, 0x0, 0x8001, 0x10, 0x8, 0x4, 0x7, 0x2, 0x7, 0x7, 0x5, 0x5, 0xaa, 0x8, 0x80, 0x5, 0x8, 0x1, 0x68, 0xf391, 0x3, 0x5, 0x9, 0xf, 0x6, 0x7, 0x2, 0x4, 0x2, 0x5, 0x5c5, 0x7fffffff, 0x8, 0x3, 0xaba, 0xb96, 0x5, 0xaedc, 0x1b6, 0x7fffffff, 0x0, 0x37, 0xbc8e, 0x0, 0xfa2, 0x1, 0x800, 0xffffff81, 0x8000, 0x5, 0x5, 0x6, 0xb, 0x3], [0x0, 0x1d2c, 0x3, 0x0, 0x179, 0x5, 0x9, 0x4, 0x3, 0x2a9, 0xf, 0x0, 0x7, 0x0, 0x5, 0xf4c, 0x3e15, 0x190, 0x0, 0x4, 0xfffffffc, 0x10000, 0x4, 0x5, 0x5, 0x4, 0x1, 0x319, 0xefe, 0x7f, 0x7fffffff, 0x80000001, 0x0, 0x1, 0x10000, 0x7, 0x7f, 0x4, 0x5, 0x3, 0xfffff668, 0x5ab9, 0x800, 0x4, 0xf1, 0xfffff322, 0x1, 0x3, 0x5, 0x6, 0xc18b, 0x1, 0x1, 0x5, 0x81, 0x3, 0x2, 0x9, 0x5, 0x2, 0x4, 0x1, 0x3, 0x46da], [0x1, 0x5, 0x8001, 0x3, 0x0, 0x9000000, 0x800, 0x9, 0x8, 0xd, 0x0, 0x401, 0x5, 0x6, 0x60, 0x0, 0x101, 0x6, 0x4, 0x8, 0x1, 0xabfb, 0x401, 0x0, 0xf46, 0x6cf, 0x49, 0x17, 0x7fffffff, 0x8000, 0xffffffff, 0x1, 0x6, 0xfffffff8, 0x5700, 0x400, 0x4, 0xd, 0xd3d, 0x3, 0x318, 0x3ff, 0xa7, 0xf, 0x6, 0x4, 0xb, 0xfffffffb, 0x0, 0x400, 0x0, 0x2, 0x80, 0x9, 0x3, 0x6, 0x0, 0x9, 0x5, 0xb4, 0x80000001, 0x0, 0x2, 0x80000000], [0x19, 0xf14, 0xe, 0xae14, 0xdcd8, 0x6d, 0x9, 0x4, 0x8, 0x636, 0x9, 0x3, 0x10000, 0x5, 0xfff, 0x3, 0x33a, 0x8, 0x200, 0x6, 0x1, 0x3, 0x2, 0x3, 0x1, 0x0, 0x81, 0x40, 0xf1a, 0x9, 0x0, 0x2, 0x2, 0x6, 0x3, 0x2, 0x6, 0x3, 0x1, 0x1, 0xf7, 0xe5a0, 0x3, 0x5, 0x9, 0x4, 0x177b, 0x9, 0x5, 0x9, 0x1, 0xe, 0x7f, 0x9, 0xd, 0x7ff, 0x0, 0x10000, 0x4, 0x10, 0x0, 0x0, 0xffffffff, 0x4], 0x14, ['\v,\x00', '[\'\x00', '\x00', '&}$\x95!!\x00', './)\\-\x00']}, ["", "", "", "", "", "", "", ""]}, 0x434}}, 0x4000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) 417.975147ms ago: executing program 2 (id=4668): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket(0x26, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) unshare(0x20000400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x2, 0x6, 0x0, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pread64(r1, 0x0, 0x0, 0x9) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, 0x1403, 0x800, 0x70bd29, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040046}, 0x800) 230.515836ms ago: executing program 2 (id=4669): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) r3 = socket(0x1d, 0x2, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0xa002a014}) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000540)={0x4, 0x4, {0x0, @struct={0x8001, 0x200}, 0x0, 0x9, 0xff35, 0x3, 0x1, 0x8000000000000001, 0x9, @usage, 0x7, 0x800, [0x2, 0x9, 0x7, 0x10, 0x215e, 0x1000]}, {0xd, @usage=0x70, 0x0, 0x87, 0x2c9c, 0x9, 0x5, 0x1, 0x10, @usage=0x8001, 0x7, 0x80000001, [0x0, 0x7, 0x10000000, 0x5, 0x3, 0x7]}, {0x1, @struct={0xaa2d, 0xffff}, 0x0, 0x9, 0x5, 0xff, 0x7, 0xa, 0x3, @struct={0xff, 0xffffff00}, 0x9, 0x9, [0x0, 0x8, 0x3, 0x3, 0x9, 0x3]}, {0x2, 0x81, 0x4}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000cc0)={r5, 0x5, 0x1, [0x3, 0xe, 0xa11, 0xfffffffffffff000, 0x2], [0x5, 0xd27, 0xffffffffffffffff, 0xffffffffffffff0b, 0x8, 0x3, 0xfffffffffffffffa, 0x0, 0xffff, 0xf, 0x7fff, 0x7, 0x5, 0x9, 0x8, 0x5ca, 0xc, 0x8, 0x7, 0x5, 0x10271bcb, 0x100000001, 0x9, 0x5, 0x556, 0x4874, 0x7, 0x8, 0x23dd, 0xfffffffffffffffd, 0x8, 0x28d8, 0x5, 0x100000001, 0xed17, 0x3, 0x3, 0x8, 0x7, 0x4, 0x3, 0x6, 0xc74, 0x8, 0x3, 0x0, 0x400, 0x3, 0x7ff, 0x8, 0x5, 0x2f4d, 0x7, 0x8000000000000000, 0x40d1, 0x7, 0xa, 0x9, 0x80000001, 0x5, 0x1f14, 0x6, 0xf98, 0x24, 0xc253, 0x100, 0x6, 0x81, 0x4, 0x0, 0x7ff, 0x8000000000000000, 0x3, 0x9, 0x8000, 0x6, 0xfffffffffffffff9, 0x6d, 0xffff, 0x4, 0x9, 0x3ff, 0x8, 0x6, 0xc, 0x2, 0x2f7, 0x94d, 0x3, 0xb0, 0xfffffffffffffff7, 0x1000, 0x3, 0xfffffffffffffffe, 0x1ff, 0x7, 0x5, 0xe283, 0x8000, 0x8, 0xb, 0x6, 0x4, 0x401, 0x1000, 0x8, 0x5, 0x9, 0x89, 0x2, 0x81, 0x1, 0x10, 0x7ff, 0x7, 0x6, 0x7, 0xe6, 0x8, 0x9, 0x3]}) sendto$inet6(r3, &(0x7f0000000100)="064d770da3a503820d1203227585dec50c601735844e170b64bfe0522fdb160926f33fc716178069f7bea1e384fbe4fdc4def600d813fb78ffa31b8021ee8e58985a9db36e4d44843a821d2680895712582887c607c475a33a833cb62bf19052837ce61e68d32c", 0x67, 0x8000, &(0x7f0000000180)={0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) 135.95253ms ago: executing program 2 (id=4670): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x7fff}, 0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5b, 0x5b, 0xa, [@ptr={0x8, 0x0, 0x0, 0x2, 0x4}, @type_tag={0x8}, @datasec={0x7, 0x3, 0x0, 0xf, 0x3, [{0x3, 0x609, 0x9}, {0x2, 0x2, 0x10}, {0x5, 0x0, 0x7}], "8a16bf"}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x5, 0xa}]}, {0x0, [0x30, 0x5f, 0x0, 0x5f, 0x2e, 0x61, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/208, 0x7e, 0xd0, 0x0, 0x4}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x8, 0x0}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1, 0xffffffffffffffff}, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000700)={r0, &(0x7f0000000600)='\x00', 0x10000, &(0x7f0000000640)={@align=0x9, {0x8001, 0x5, 0x9, 0xffffffffffffffff}}, 0xd, &(0x7f0000000680)={@_ha_fsid}, &(0x7f00000006c0)=0x1}) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x14, 0x3, 0xbb1, 0x7, 0xc0, 0xffffffffffffffff, 0x37e6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x10, 0x7, &(0x7f00000000c0)=@raw=[@exit, @alu={0x7, 0x1, 0x9, 0x7, 0x6, 0xffffffffffffffe0, 0x1}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xbd}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, @func], &(0x7f0000000100)='syzkaller\x00', 0xfffff88f, 0x5c, &(0x7f0000000140)=""/92, 0x40f00, 0xe, '\x00', r2, @sk_msg, r3, 0x8, &(0x7f0000000400)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x3, 0x101, 0x6}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, r5, r6, r7, r8, 0x1, r9]}, 0x94) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001940)={r8, 0x20, &(0x7f0000001900)={&(0x7f00000008c0)=""/4096, 0x1000, 0x0, &(0x7f00000018c0)=""/30, 0x1e}}, 0x10) r10 = socket$xdp(0x2c, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001a40)={'syztnl1\x00', &(0x7f0000001980)={'gre0\x00', r2, 0x1, 0x20, 0x6, 0x1ff, {{0x22, 0x4, 0x2, 0x8, 0x88, 0x64, 0x0, 0xd, 0x4, 0x0, @loopback, @remote, {[@end, @timestamp_prespec={0x44, 0x44, 0xcc, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x37}, 0x7f}, {@local, 0x6}, {@loopback, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xcf6d}, {@local}, {@remote}, {@private=0xa010101, 0x1}]}, @end, @ra={0x94, 0x4}, @rr={0x7, 0x27, 0x2c, [@dev={0xac, 0x14, 0x14, 0x2f}, @remote, @remote, @remote, @empty, @remote, @rand_addr=0x64010101, @multicast1, @empty]}]}}}}}) bind$xdp(r10, &(0x7f0000001a80)={0x2c, 0xa, r11, 0x26}, 0x10) (async) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001b00)=@o_path={&(0x7f0000001ac0)='./file0\x00', 0x0, 0x2010}, 0x18) ioctl$BTRFS_IOC_START_SYNC(r12, 0x80089418, &(0x7f0000001b40)) (async) pipe(&(0x7f0000001b80)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$XFS_IOC_FSGROWFSRT(r8, 0x40105870, &(0x7f0000001bc0)={0x1, 0x780}) bind$xdp(r10, &(0x7f0000001c00)={0x2c, 0x1, r11, 0xd, r10}, 0x10) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r8, 0x84, 0x65, &(0x7f0000001c40)=[@in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e22, @local}], 0x50) (async) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001d00), r13) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x24, r14, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x401}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xf4f}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x20000000) (async) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(r8, 0x0, 0x16, &(0x7f0000001e00)=0x7fff, 0x4) (async) r15 = epoll_create(0x1) ioctl$BTRFS_IOC_INO_PATHS(r15, 0xc0389423, &(0x7f0000001e80)={0x61, 0x18, [0x7, 0x1, 0x0, 0x9], &(0x7f0000001e40)=[0x0, 0x0, 0x0]}) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001ec0)={{{@in6=@private0, @in6=@remote}}, {{@in=@initdev}, 0x0, @in6=@ipv4}}, &(0x7f0000001fc0)=0xe8) 29.362619ms ago: executing program 2 (id=4671): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000380)={0x0, 0x2, 0x1, [0x400, 0x0, 0x7ff, 0x100000000], [0x80000000, 0x2, 0x8, 0x1, 0x8, 0x4, 0x0, 0x8, 0x73, 0x3, 0x9, 0x6, 0xc, 0x10000, 0x1, 0x29, 0xffffffffffffffff, 0x0, 0xc3, 0x80000001, 0x2, 0xb, 0x401, 0x73, 0xfff, 0x6b, 0x1, 0xfffffffffffffffb, 0x44de, 0x80000000, 0xe000000000000, 0x8000000000000000, 0x5, 0x8, 0x401, 0x0, 0x6, 0x7ff, 0x0, 0x7, 0x696, 0x8, 0x99b7, 0x2c45, 0xfffffffffffeffff, 0x7, 0x80000001, 0x81, 0x1ff, 0x1a, 0x1600000000, 0xae, 0x8, 0x5, 0x60, 0x9, 0x3ff, 0xb1, 0x2, 0xd, 0x5, 0x3, 0x3, 0x3ff, 0xdef, 0x8, 0x9e, 0x5, 0xe9, 0x9, 0x3, 0xc, 0x401, 0x6, 0x9, 0x8, 0xfffffffffffffffb, 0x3, 0xc, 0xf3, 0x9, 0x4, 0x72, 0x1, 0x2249, 0x3, 0x6, 0x4800000000000000, 0x6, 0xff, 0x9, 0x9, 0xff, 0x72, 0x6, 0xd, 0x7f, 0x3, 0x2, 0x0, 0x180, 0x80000001, 0x4d0, 0x80, 0xf641, 0x7, 0x8000000000000000, 0x4, 0x4f9, 0x5317, 0x4, 0x80, 0x3, 0x0, 0x100, 0x3, 0x4, 0x4, 0x2, 0x4, 0x5f5]}) (async) socket$netlink(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000040603000000000000000000010000080500010007000001"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000814) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f00000007c0)={r3, 0x7, 0x7a, 0x1}) (async) socket$alg(0x26, 0x5, 0x0) (async) sendmsg$nl_route(r2, 0x0, 0x4000800) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x110, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0x110, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 0s ago: executing program 4 (id=4672): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0x44}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x4) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008000000", @ANYBLOB="ffff"], 0x40}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r9, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$inet6(0xa, 0x80000, 0x4) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r10) kernel console output (not intermixed with test programs): 026 [ 781.803971][T19450] Call Trace: [ 781.803980][T19450] [ 781.803988][T19450] dump_stack_lvl+0xe8/0x150 [ 781.804024][T19450] should_fail_ex+0x412/0x560 [ 781.804054][T19450] should_failslab+0xa8/0x100 [ 781.804088][T19450] ? skb_clone+0x212/0x3a0 [ 781.804118][T19450] kmem_cache_alloc_noprof+0x87/0x650 [ 781.804160][T19450] skb_clone+0x212/0x3a0 [ 781.804196][T19450] __netlink_deliver_tap+0x404/0x850 [ 781.804235][T19450] ? netlink_deliver_tap+0x2e/0x1b0 [ 781.804262][T19450] netlink_deliver_tap+0x19c/0x1b0 [ 781.804289][T19450] __netlink_sendskb+0x47/0x90 [ 781.804312][T19450] netlink_dump+0xa6f/0xe80 [ 781.804349][T19450] ? __pfx_netlink_dump+0x10/0x10 [ 781.804373][T19450] ? ctnetlink_alloc_filter+0x50f/0xb50 [ 781.804419][T19450] ? netlink_lookup+0x30/0x200 [ 781.804446][T19450] ? ctnetlink_start+0x152/0x1b0 [ 781.804479][T19450] __netlink_dump_start+0x5cb/0x7e0 [ 781.804512][T19450] ctnetlink_get_conntrack+0x212/0x7b0 [ 781.804551][T19450] ? __pfx_ctnetlink_get_conntrack+0x10/0x10 [ 781.804586][T19450] ? __pfx___mutex_lock+0x10/0x10 [ 781.804621][T19450] ? __pfx_ctnetlink_start+0x10/0x10 [ 781.804649][T19450] ? __pfx_ctnetlink_dump_table+0x10/0x10 [ 781.804679][T19450] ? __pfx_ctnetlink_done+0x10/0x10 [ 781.804725][T19450] nfnetlink_rcv_msg+0xc00/0x12c0 [ 781.804746][T19450] ? unwind_get_return_address+0x4d/0x90 [ 781.804778][T19450] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 781.804821][T19450] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 781.804898][T19450] netlink_rcv_skb+0x232/0x4b0 [ 781.804925][T19450] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 781.804953][T19450] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 781.804990][T19450] ? bpf_lsm_capable+0x9/0x20 [ 781.805018][T19450] ? security_capable+0x7e/0x2c0 [ 781.805050][T19450] nfnetlink_rcv+0x2c0/0x27b0 [ 781.805089][T19450] ? __local_bh_enable_ip+0xd0/0x130 [ 781.805116][T19450] ? lockdep_hardirqs_on+0x7a/0x110 [ 781.805146][T19450] ? __dev_queue_xmit+0x274/0x38a0 [ 781.805176][T19450] ? __local_bh_enable_ip+0xd0/0x130 [ 781.805200][T19450] ? __dev_queue_xmit+0x274/0x38a0 [ 781.805231][T19450] ? __dev_queue_xmit+0x1e6c/0x38a0 [ 781.805260][T19450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.805295][T19450] ? __dev_queue_xmit+0x274/0x38a0 [ 781.805329][T19450] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 781.805354][T19450] ? __lock_acquire+0x6b5/0x2cf0 [ 781.805393][T19450] ? ref_tracker_free+0x693/0x840 [ 781.805417][T19450] ? __copy_skb_header+0xa3/0x4a0 [ 781.805450][T19450] ? __pfx_ref_tracker_free+0x10/0x10 [ 781.805493][T19450] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 781.805523][T19450] ? lockdep_hardirqs_on+0x7a/0x110 [ 781.805553][T19450] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 781.805582][T19450] ? rcu_preempt_deferred_qs_irqrestore+0x7b9/0xbc0 [ 781.805629][T19450] netlink_unicast+0x80f/0x9b0 [ 781.805661][T19450] ? __pfx_netlink_unicast+0x10/0x10 [ 781.805685][T19450] ? netlink_sendmsg+0x650/0xb40 [ 781.805708][T19450] ? skb_put+0x11b/0x210 [ 781.805739][T19450] netlink_sendmsg+0x813/0xb40 [ 781.805775][T19450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 781.805804][T19450] ? aa_sock_msg_perm+0xf1/0x1b0 [ 781.805831][T19450] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 781.805855][T19450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 781.805879][T19450] ____sys_sendmsg+0xa68/0xad0 [ 781.805918][T19450] ? __pfx_____sys_sendmsg+0x10/0x10 [ 781.805959][T19450] ? import_iovec+0x73/0xa0 [ 781.805992][T19450] ___sys_sendmsg+0x2a5/0x360 [ 781.806037][T19450] ? __pfx____sys_sendmsg+0x10/0x10 [ 781.806116][T19450] ? __fget_files+0x2a/0x420 [ 781.806145][T19450] ? __fget_files+0x3a0/0x420 [ 781.806186][T19450] __x64_sys_sendmsg+0x1bd/0x2a0 [ 781.806220][T19450] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 781.806261][T19450] ? __pfx_ksys_write+0x10/0x10 [ 781.806296][T19450] do_syscall_64+0x14d/0xf80 [ 781.806325][T19450] ? trace_irq_disable+0x3b/0x150 [ 781.806360][T19450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.806382][T19450] ? clear_bhb_loop+0x40/0x90 [ 781.806408][T19450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.806430][T19450] RIP: 0033:0x7f8242b9c629 [ 781.806450][T19450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.806467][T19450] RSP: 002b:00007f8243b11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 781.806489][T19450] RAX: ffffffffffffffda RBX: 00007f8242e15fa0 RCX: 00007f8242b9c629 [ 781.806504][T19450] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 781.806516][T19450] RBP: 00007f8243b11090 R08: 0000000000000000 R09: 0000000000000000 [ 781.806529][T19450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.806540][T19450] R13: 00007f8242e16038 R14: 00007f8242e15fa0 R15: 00007fffceb521a8 [ 781.806574][T19450] [ 782.594057][T19464] syzkaller0: entered promiscuous mode [ 782.614015][T19467] FAULT_INJECTION: forcing a failure. [ 782.614015][T19467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.626584][T19464] syzkaller0: entered allmulticast mode [ 782.645274][T19467] CPU: 0 UID: 0 PID: 19467 Comm: syz.2.3358 Not tainted syzkaller #0 PREEMPT(full) [ 782.645305][T19467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 782.645318][T19467] Call Trace: [ 782.645326][T19467] [ 782.645335][T19467] dump_stack_lvl+0xe8/0x150 [ 782.645372][T19467] should_fail_ex+0x412/0x560 [ 782.645402][T19467] _copy_from_user+0x2d/0xb0 [ 782.645434][T19467] bpf_test_init+0xd8/0x150 [ 782.645461][T19467] bpf_prog_test_run_skb+0x36f/0x1c90 [ 782.645499][T19467] ? __fget_files+0x2a/0x420 [ 782.645527][T19467] ? __fget_files+0x3a0/0x420 [ 782.645554][T19467] ? __fget_files+0x2a/0x420 [ 782.645587][T19467] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 782.645612][T19467] bpf_prog_test_run+0x2c7/0x340 [ 782.645637][T19467] __sys_bpf+0x643/0x950 [ 782.645671][T19467] ? __pfx___sys_bpf+0x10/0x10 [ 782.645716][T19467] ? ksys_write+0x242/0x270 [ 782.645739][T19467] ? __pfx_ksys_write+0x10/0x10 [ 782.645768][T19467] __x64_sys_bpf+0x7c/0x90 [ 782.645797][T19467] do_syscall_64+0x14d/0xf80 [ 782.645827][T19467] ? trace_irq_disable+0x3b/0x150 [ 782.645857][T19467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.645878][T19467] ? clear_bhb_loop+0x40/0x90 [ 782.645904][T19467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.645925][T19467] RIP: 0033:0x7f386dd9c629 [ 782.645945][T19467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.645963][T19467] RSP: 002b:00007f386ed1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 782.645985][T19467] RAX: ffffffffffffffda RBX: 00007f386e015fa0 RCX: 00007f386dd9c629 [ 782.646010][T19467] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 782.646023][T19467] RBP: 00007f386ed1b090 R08: 0000000000000000 R09: 0000000000000000 [ 782.646036][T19467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.646049][T19467] R13: 00007f386e016038 R14: 00007f386e015fa0 R15: 00007ffc3a41eb48 [ 782.646082][T19467] [ 782.883526][T19465] ªªªªª9 speed is unknown, defaulting to 1000 [ 782.929829][T19461] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 783.100759][T19476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3361'. [ 783.114258][T19477] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 783.115645][T19471] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3356'. [ 783.534393][T19465] lo speed is unknown, defaulting to 1000 [ 783.702215][T19501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3367'. [ 783.835686][T19505] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3369'. [ 783.914735][T19507] FAULT_INJECTION: forcing a failure. [ 783.914735][T19507] name failslab, interval 1, probability 0, space 0, times 0 [ 783.932121][T19507] CPU: 1 UID: 0 PID: 19507 Comm: syz.1.3370 Not tainted syzkaller #0 PREEMPT(full) [ 783.932150][T19507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 783.932164][T19507] Call Trace: [ 783.932173][T19507] [ 783.932182][T19507] dump_stack_lvl+0xe8/0x150 [ 783.932218][T19507] should_fail_ex+0x412/0x560 [ 783.932247][T19507] should_failslab+0xa8/0x100 [ 783.932274][T19507] __kmalloc_noprof+0xe8/0x760 [ 783.932294][T19507] ? sk_prot_alloc+0xe7/0x210 [ 783.932328][T19507] sk_prot_alloc+0xe7/0x210 [ 783.932353][T19507] ? sk_alloc+0x27/0x390 [ 783.932381][T19507] sk_alloc+0x3a/0x390 [ 783.932412][T19507] bpf_prog_test_run_skb+0x3ed/0x1c90 [ 783.932449][T19507] ? __fget_files+0x2a/0x420 [ 783.932477][T19507] ? __fget_files+0x3a0/0x420 [ 783.932504][T19507] ? __fget_files+0x2a/0x420 [ 783.932537][T19507] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 783.932569][T19507] bpf_prog_test_run+0x2c7/0x340 [ 783.932594][T19507] __sys_bpf+0x643/0x950 [ 783.932626][T19507] ? __pfx___sys_bpf+0x10/0x10 [ 783.932672][T19507] ? ksys_write+0x242/0x270 [ 783.932695][T19507] ? __pfx_ksys_write+0x10/0x10 [ 783.932723][T19507] __x64_sys_bpf+0x7c/0x90 [ 783.932757][T19507] do_syscall_64+0x14d/0xf80 [ 783.932786][T19507] ? trace_irq_disable+0x3b/0x150 [ 783.932815][T19507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.932836][T19507] ? clear_bhb_loop+0x40/0x90 [ 783.932861][T19507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.932881][T19507] RIP: 0033:0x7ff3b8d9c629 [ 783.932900][T19507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.932918][T19507] RSP: 002b:00007ff3b6fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 783.932941][T19507] RAX: ffffffffffffffda RBX: 00007ff3b9015fa0 RCX: 00007ff3b8d9c629 [ 783.932955][T19507] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 783.932968][T19507] RBP: 00007ff3b6fee090 R08: 0000000000000000 R09: 0000000000000000 [ 783.932980][T19507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.932992][T19507] R13: 00007ff3b9016038 R14: 00007ff3b9015fa0 R15: 00007ffc14e18e08 [ 783.933025][T19507] [ 784.432066][T19521] netlink: 'syz.1.3375': attribute type 10 has an invalid length. [ 784.442507][T19521] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 784.873986][T19544] FAULT_INJECTION: forcing a failure. [ 784.873986][T19544] name failslab, interval 1, probability 0, space 0, times 0 [ 784.923008][T19544] CPU: 1 UID: 0 PID: 19544 Comm: syz.2.3383 Not tainted syzkaller #0 PREEMPT(full) [ 784.923039][T19544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 784.923052][T19544] Call Trace: [ 784.923061][T19544] [ 784.923069][T19544] dump_stack_lvl+0xe8/0x150 [ 784.923105][T19544] should_fail_ex+0x412/0x560 [ 784.923134][T19544] should_failslab+0xa8/0x100 [ 784.923161][T19544] __kmalloc_noprof+0xe8/0x760 [ 784.923183][T19544] ? security_sk_alloc+0x52/0x360 [ 784.923219][T19544] security_sk_alloc+0x52/0x360 [ 784.923251][T19544] sk_prot_alloc+0x101/0x210 [ 784.923279][T19544] ? sk_alloc+0x27/0x390 [ 784.923307][T19544] sk_alloc+0x3a/0x390 [ 784.923339][T19544] bpf_prog_test_run_skb+0x3ed/0x1c90 [ 784.923377][T19544] ? __fget_files+0x2a/0x420 [ 784.923406][T19544] ? __fget_files+0x3a0/0x420 [ 784.923433][T19544] ? __fget_files+0x2a/0x420 [ 784.923466][T19544] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 784.923490][T19544] bpf_prog_test_run+0x2c7/0x340 [ 784.923513][T19544] __sys_bpf+0x643/0x950 [ 784.923544][T19544] ? __pfx___sys_bpf+0x10/0x10 [ 784.923599][T19544] ? ksys_write+0x242/0x270 [ 784.923621][T19544] ? __pfx_ksys_write+0x10/0x10 [ 784.923650][T19544] __x64_sys_bpf+0x7c/0x90 [ 784.923679][T19544] do_syscall_64+0x14d/0xf80 [ 784.923708][T19544] ? trace_irq_disable+0x3b/0x150 [ 784.923736][T19544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.923756][T19544] ? clear_bhb_loop+0x40/0x90 [ 784.923779][T19544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.923799][T19544] RIP: 0033:0x7f386dd9c629 [ 784.923819][T19544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.923837][T19544] RSP: 002b:00007f386ed1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 784.923857][T19544] RAX: ffffffffffffffda RBX: 00007f386e015fa0 RCX: 00007f386dd9c629 [ 784.923872][T19544] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 784.923885][T19544] RBP: 00007f386ed1b090 R08: 0000000000000000 R09: 0000000000000000 [ 784.923898][T19544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.923909][T19544] R13: 00007f386e016038 R14: 00007f386e015fa0 R15: 00007ffc3a41eb48 [ 784.923943][T19544] [ 786.318251][T19565] Cannot find del_set index 0 as target [ 786.348100][T19565] openvswitch: netlink: Missing valid actions attribute. [ 786.355232][T19565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 786.430129][T19567] netlink: 'syz.4.3389': attribute type 1 has an invalid length. [ 786.750832][T19579] __nla_validate_parse: 3 callbacks suppressed [ 786.750854][T19579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3392'. [ 786.828545][T19581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3393'. [ 786.849559][ T1312] bond0: (slave syz_tun): link status definitely down, disabling slave [ 786.923813][T19583] syzkaller0: entered promiscuous mode [ 786.966279][T19583] syzkaller0: entered allmulticast mode [ 787.196965][T19592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3399'. [ 787.516964][T19603] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3399'. [ 787.674449][T19606] rdma_op ffff888051e1e1f0 conn xmit_rdma 0000000000000000 [ 787.840953][T19606] block nbd6: server does not support multiple connections per device. [ 787.859962][T19606] block nbd6: shutting down sockets [ 788.200103][T19624] block nbd6: Unsupported socket: should be TCP or UNIX. [ 788.601229][T19642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3412'. [ 788.714143][T19642] bridge1: port 1(ip6gretap1) entered blocking state [ 788.741793][T19642] bridge1: port 1(ip6gretap1) entered disabled state [ 788.778434][T19642] ip6gretap1: entered allmulticast mode [ 788.800473][T19642] ip6gretap1: entered promiscuous mode [ 789.037656][T19616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3406'. [ 789.143293][T19653] netlink: 'syz.3.3416': attribute type 10 has an invalid length. [ 789.244662][T19655] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3417'. [ 789.261240][T19653] veth0_vlan: left promiscuous mode [ 789.288689][T19653] veth0_vlan: entered promiscuous mode [ 789.300505][T19653] team0: Device veth0_vlan failed to register rx_handler [ 789.428670][T19658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3417'. [ 789.440559][T19658] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3417'. [ 790.569179][T19671] netlink: 'syz.3.3421': attribute type 10 has an invalid length. [ 790.814656][T19673] netlink: 'syz.3.3422': attribute type 3 has an invalid length. [ 791.428305][T19689] ªªªªª9 speed is unknown, defaulting to 1000 [ 791.448172][T19695] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 791.579088][T19695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3429'. [ 791.803411][T19701] netlink: 'syz.2.3430': attribute type 6 has an invalid length. [ 791.952764][T19703] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3431'. [ 791.991664][T19703] vlan2: entered allmulticast mode [ 791.999466][T19689] lo speed is unknown, defaulting to 1000 [ 792.287051][T19705] netlink: 'syz.2.3432': attribute type 10 has an invalid length. [ 792.640865][T19711] pim6reg: entered allmulticast mode [ 792.721915][T19711] netlink: 'syz.4.3435': attribute type 4 has an invalid length. [ 792.730855][T19711] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3435'. [ 792.875727][T19711] pim6reg: left allmulticast mode [ 793.043763][T19717] netlink: 'syz.4.3438': attribute type 2 has an invalid length. [ 793.120622][T19719] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3439'. [ 793.460805][T19729] syzkaller0: entered promiscuous mode [ 793.475936][T19729] syzkaller0: entered allmulticast mode [ 793.734853][T19732] ip6_vti0 speed is unknown, defaulting to 1000 [ 793.789591][T19732] ip6_vti0 speed is unknown, defaulting to 1000 [ 793.859547][T19732] ip6_vti0 speed is unknown, defaulting to 1000 [ 793.879182][T19736] tipc: Started in network mode [ 793.890099][T19736] tipc: Node identity dec9abdf1fa2, cluster identity 4711 [ 793.907847][T19736] tipc: Enabled bearer , priority 0 [ 793.934299][T19737] syzkaller0: entered promiscuous mode [ 793.962780][T19737] syzkaller0: entered allmulticast mode [ 794.081189][T19741] netlink: 'syz.0.3444': attribute type 10 has an invalid length. [ 794.186911][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.235248][T19735] tipc: Resetting bearer [ 794.291246][T19735] tipc: Disabling bearer [ 794.317459][T19732] infiniband syz2: set down [ 794.331508][T19732] infiniband syz2: added ip6_vti0 [ 794.383871][T10520] ip6_vti0 speed is unknown, defaulting to 1000 [ 794.428560][T19732] RDS/IB: syz2: added [ 794.432984][T19732] smc: adding ib device syz2 with port count 1 [ 794.441428][T19732] smc: ib device syz2 port 1 has no pnetid [ 794.483172][T19743] syzkaller0: entered promiscuous mode [ 794.515217][T19743] syzkaller0: entered allmulticast mode [ 794.531385][ T5901] ip6_vti0 speed is unknown, defaulting to 1000 [ 794.540386][T19732] ip6_vti0 speed is unknown, defaulting to 1000 [ 794.777298][T19765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3452'. [ 794.789780][T19767] netlink: 'syz.3.3453': attribute type 8 has an invalid length. [ 794.829979][T19768] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 794.865025][T19768] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 794.883967][T19768] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 794.953318][T19774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3452'. [ 795.009794][T19774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3452'. [ 795.267773][T19783] IPVS: set_ctl: invalid protocol: 44 172.30.0.1:20004 [ 795.317476][T19732] ip6_vti0 speed is unknown, defaulting to 1000 [ 795.972972][T19732] ip6_vti0 speed is unknown, defaulting to 1000 [ 796.063665][T19803] ªªªªª9 speed is unknown, defaulting to 1000 [ 796.097746][ T5901] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 796.109499][T19800] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 796.138203][T19805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3462'. [ 796.305983][T19810] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3463'. [ 796.397068][ T5901] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 796.527883][T19816] bond_slave_0: entered promiscuous mode [ 796.533986][T19816] bond_slave_1: entered promiscuous mode [ 796.577943][T19816] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 796.658985][ T9224] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 796.904665][T19732] ip6_vti0 speed is unknown, defaulting to 1000 [ 796.967898][T19803] lo speed is unknown, defaulting to 1000 [ 797.095438][T19829] bond3: Removing last arp target with arp_interval on [ 797.144750][T19833] tipc: Started in network mode [ 797.150863][T19833] tipc: Node identity 72425f208fce, cluster identity 4711 [ 797.182134][T19833] tipc: Enabled bearer , priority 0 [ 797.191023][T19835] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 797.201932][T19836] syzkaller0: entered promiscuous mode [ 797.220973][T19836] syzkaller0: entered allmulticast mode [ 797.412337][T19832] tipc: Resetting bearer [ 797.447963][T19832] tipc: Disabling bearer [ 797.588163][T19732] ip6_vti0 speed is unknown, defaulting to 1000 [ 797.708505][ T1312] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 797.720942][ T1312] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 797.733382][T19847] syzkaller0: entered promiscuous mode [ 797.747032][T19847] syzkaller0: entered allmulticast mode [ 797.767017][T19847] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3472'. [ 797.857404][T19847] tipc: Started in network mode [ 797.862348][T19847] tipc: Node identity 266b2f3c054a, cluster identity 4711 [ 797.874750][T19847] tipc: Enabled bearer , priority 0 [ 798.097198][ T5901] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 798.115638][T19846] tipc: Resetting bearer [ 798.141848][T19846] tipc: Disabling bearer [ 798.185192][T19732] ip6_vti0 speed is unknown, defaulting to 1000 [ 798.189024][T19865] ªªªªª9 speed is unknown, defaulting to 1000 [ 798.486040][T19873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3480'. [ 798.504026][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 798.560333][T19873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3480'. [ 798.637563][T19875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3480'. [ 798.821115][T19803] ip6_vti0 speed is unknown, defaulting to 1000 [ 798.855964][T19865] lo speed is unknown, defaulting to 1000 [ 799.168902][T19883] xt_hashlimit: max too large, truncated to 1048576 [ 799.490084][T19732] ip6_vti0 speed is unknown, defaulting to 1000 [ 799.611837][T19889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3484'. [ 799.831800][T19894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3485'. [ 800.048083][T19732] ip6_vti0 speed is unknown, defaulting to 1000 [ 800.212250][T19908] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3490'. [ 800.237194][T19908] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3490'. [ 800.365182][T19865] ip6_vti0 speed is unknown, defaulting to 1000 [ 800.377445][T19908] nbd3: detected capacity change from 0 to 63 [ 800.394443][T19910] block nbd3: NBD_DISCONNECT [ 800.402036][T19910] block nbd3: Disconnected due to user request. [ 800.409274][T19910] block nbd3: shutting down sockets [ 800.449336][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 800.459141][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 800.467793][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 800.477427][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 800.485254][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 800.494844][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 800.502724][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 800.512270][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 800.523501][T19556] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 800.536613][T19556] Buffer I/O error on dev nbd3, logical block 0, async page read [ 800.544687][T19556] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 800.562306][T19556] Buffer I/O error on dev nbd3, logical block 1, async page read [ 800.571589][T19556] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 800.588458][T19556] Buffer I/O error on dev nbd3, logical block 2, async page read [ 800.597187][T19556] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 800.607598][T19556] Buffer I/O error on dev nbd3, logical block 3, async page read [ 800.615519][T19556] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 800.627772][T19556] Buffer I/O error on dev nbd3, logical block 0, async page read [ 800.635694][T19556] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 800.662545][T19556] Buffer I/O error on dev nbd3, logical block 1, async page read [ 800.672243][T19556] ldm_validate_partition_table(): Disk read failed. [ 800.680558][T19556] Dev nbd3: unable to read RDB block 0 [ 800.688928][T19556] nbd3: unable to read partition table [ 800.714904][T19556] ldm_validate_partition_table(): Disk read failed. [ 800.722797][T19556] Dev nbd3: unable to read RDB block 0 [ 800.730247][T19556] nbd3: unable to read partition table [ 800.935299][T19915] syzkaller0: entered promiscuous mode [ 800.962868][T19915] syzkaller0: entered allmulticast mode [ 801.745399][T19942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3500'. [ 801.937164][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 802.153525][T19959] block nbd0: NBD_DISCONNECT [ 802.177305][T19959] block nbd0: Send disconnect failed -32 [ 802.183198][T19959] block nbd0: shutting down sockets [ 802.444653][T19962] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3505'. [ 802.898962][T19982] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3506'. [ 802.927429][T19982] openvswitch: netlink: Flow key attr not present in new flow. [ 803.027667][T14190] dummy0: left promiscuous mode [ 803.253685][T14190] ip6gretap0 (unregistering): left promiscuous mode [ 803.591030][T14190] bond8 (unregistering): (slave vti0): Releasing backup interface [ 803.599211][T14190] vti0 (unregistering): left promiscuous mode [ 804.008279][T14190] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 804.028047][T14190] bond0 (unregistering): Released all slaves [ 804.041658][T14190] bond1 (unregistering): (slave lo): Releasing backup interface [ 804.050209][T14190] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 804.063082][T14190] bond1 (unregistering): Released all slaves [ 804.078581][T14190] bond2 (unregistering): Released all slaves [ 804.094136][T14190] bond3 (unregistering): (slave veth5): Releasing active interface [ 804.105355][T14190] bond3 (unregistering): Released all slaves [ 804.125113][T14190] bond4 (unregistering): Released all slaves [ 804.143090][T14190] bond5 (unregistering): Released all slaves [ 804.166674][T14190] bond6 (unregistering): (slave veth7): Releasing active interface [ 804.176877][T14190] bond6 (unregistering): Released all slaves [ 804.194986][T14190] bond7 (unregistering): Released all slaves [ 804.213114][T14190] bond8 (unregistering): Released all slaves [ 804.234786][T14190] bond9 (unregistering): Released all slaves [ 804.251445][T14190] bond10 (unregistering): Released all slaves [ 804.270045][T14190] bond11 (unregistering): (slave veth11): Releasing active interface [ 804.284553][T14190] bond11 (unregistering): (slave veth13): Releasing active interface [ 804.294672][T14190] bond11 (unregistering): Released all slaves [ 804.311971][T14190] bond12 (unregistering): Released all slaves [ 804.329635][T19970] tipc: Started in network mode [ 804.334561][T19970] tipc: Node identity 4e71bbf1d3e7, cluster identity 4711 [ 804.344310][T19970] tipc: Enabled bearer , priority 0 [ 804.352674][T19972] syzkaller0: entered promiscuous mode [ 804.367589][T19972] syzkaller0: entered allmulticast mode [ 804.442557][T19978] tipc: Resetting bearer [ 804.466427][T19994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3508'. [ 804.487346][T19965] tipc: Resetting bearer [ 804.515785][T19965] tipc: Disabling bearer [ 804.549424][T14190] tipc: Disabling bearer [ 804.568004][T14190] tipc: Disabling bearer [ 804.574922][T19994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3508'. [ 804.591393][T14190] tipc: Left network mode [ 804.645481][T19994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 804.699845][T19994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.870486][T20000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3511'. [ 804.979778][T20007] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3509'. [ 805.014821][T20007] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3509'. [ 805.286136][T20023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 805.337421][T20012] syzkaller0: entered promiscuous mode [ 805.346726][T20012] syzkaller0: entered allmulticast mode [ 805.406054][T20018] team_slave_0: entered promiscuous mode [ 805.412224][T20018] team_slave_1: entered promiscuous mode [ 805.420506][T20018] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 805.501987][T20031] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3515'. [ 806.340146][T20046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3521'. [ 807.436103][T20013] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 807.802574][T20063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3524'. [ 807.853957][T20063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3524'. [ 808.407455][T20089] openvswitch: netlink: IPv6 tunnel dst address is zero [ 808.437319][T20092] syzkaller1: entered promiscuous mode [ 808.442854][T20092] syzkaller1: entered allmulticast mode [ 808.452479][T20089] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3533'. [ 808.741936][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.765398][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 809.073433][T20104] FAULT_INJECTION: forcing a failure. [ 809.073433][T20104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.111727][T20121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.167262][T20104] CPU: 0 UID: 0 PID: 20104 Comm: syz.4.3538 Not tainted syzkaller #0 PREEMPT(full) [ 809.167292][T20104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 809.167305][T20104] Call Trace: [ 809.167313][T20104] [ 809.167323][T20104] dump_stack_lvl+0xe8/0x150 [ 809.167357][T20104] should_fail_ex+0x412/0x560 [ 809.167387][T20104] _copy_from_iter+0x1d3/0x1670 [ 809.167419][T20104] ? rcu_is_watching+0x15/0xb0 [ 809.167455][T20104] ? __pfx__copy_from_iter+0x10/0x10 [ 809.167489][T20104] ? netlink_sendmsg+0x650/0xb40 [ 809.167512][T20104] ? skb_put+0x11b/0x210 [ 809.167544][T20104] netlink_sendmsg+0x6c0/0xb40 [ 809.167578][T20104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 809.167607][T20104] ? aa_sock_msg_perm+0xf1/0x1b0 [ 809.167633][T20104] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 809.167664][T20104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 809.167688][T20104] ____sys_sendmsg+0xa68/0xad0 [ 809.167727][T20104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 809.167767][T20104] ? import_iovec+0x73/0xa0 [ 809.167798][T20104] ___sys_sendmsg+0x2a5/0x360 [ 809.167834][T20104] ? __pfx____sys_sendmsg+0x10/0x10 [ 809.167900][T20104] ? __fget_files+0x2a/0x420 [ 809.167927][T20104] ? __fget_files+0x3a0/0x420 [ 809.167966][T20104] __x64_sys_sendmsg+0x1bd/0x2a0 [ 809.167999][T20104] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 809.168039][T20104] ? __pfx_ksys_write+0x10/0x10 [ 809.168072][T20104] do_syscall_64+0x14d/0xf80 [ 809.168101][T20104] ? trace_irq_disable+0x3b/0x150 [ 809.168130][T20104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.168151][T20104] ? clear_bhb_loop+0x40/0x90 [ 809.168177][T20104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.168197][T20104] RIP: 0033:0x7f9bda19c629 [ 809.168217][T20104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.168235][T20104] RSP: 002b:00007f9bdaf86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 809.168256][T20104] RAX: ffffffffffffffda RBX: 00007f9bda415fa0 RCX: 00007f9bda19c629 [ 809.168270][T20104] RDX: 0000000020000814 RSI: 0000200000000100 RDI: 0000000000000008 [ 809.168283][T20104] RBP: 00007f9bdaf86090 R08: 0000000000000000 R09: 0000000000000000 [ 809.168295][T20104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.168307][T20104] R13: 00007f9bda416038 R14: 00007f9bda415fa0 R15: 00007fff9038adb8 [ 809.168339][T20104] [ 809.169313][T20104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3538'. [ 809.533195][T20104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3538'. [ 809.596113][T20126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3541'. [ 809.597378][ T30] audit: type=1800 audit(1771615967.076:19): pid=20101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3536" name="memory.events" dev="tmpfs" ino=575 res=0 errno=0 [ 809.835600][T20126] 8021q: adding VLAN 0 to HW filter on device bond1 [ 809.862732][T20135] macvlan3: entered promiscuous mode [ 809.868268][T20135] macvlan3: entered allmulticast mode [ 809.874207][T20135] bond1: entered allmulticast mode [ 809.880854][T20135] bond1: entered promiscuous mode [ 809.887439][T20135] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 809.897693][T20135] team0: Port device macvlan3 added [ 809.967549][T20143] netlink: 'syz.4.3545': attribute type 1 has an invalid length. [ 810.124442][T20146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3545'. [ 810.134371][T20146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3545'. [ 810.244324][T20145] bond2: entered promiscuous mode [ 810.277001][T20145] bond2: entered allmulticast mode [ 810.292987][T20145] 8021q: adding VLAN 0 to HW filter on device bond2 [ 810.360288][T20154] tipc: Enabled bearer , priority 0 [ 810.437561][T20148] syzkaller0: entered promiscuous mode [ 810.454678][T20148] syzkaller0: entered allmulticast mode [ 810.533784][T20152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3546'. [ 810.583796][T20152] openvswitch: netlink: Flow actions attr not present in new flow. [ 810.649179][T20148] bond_slave_1: mtu greater than device maximum [ 810.656433][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 810.670493][T20147] tipc: Resetting bearer [ 810.708828][T20147] tipc: Disabling bearer [ 810.890855][ T5899] IPVS: starting estimator thread 0... [ 810.973931][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3555'. [ 810.999497][T20178] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3556'. [ 811.016412][T20171] IPVS: using max 26 ests per chain, 62400 per kthread [ 811.090218][T20180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3557'. [ 811.093937][T14190] hsr_slave_0: left promiscuous mode [ 811.113119][T14190] veth0_macvtap: left promiscuous mode [ 811.652710][T20194] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 811.663212][T20194] tipc: Enabled bearer , priority 0 [ 811.672426][T20194] syzkaller0: entered promiscuous mode [ 811.686337][T20194] syzkaller0: entered allmulticast mode [ 811.747483][T20194] tipc: Resetting bearer [ 811.769485][T20192] tipc: Resetting bearer [ 811.937787][T20192] tipc: Disabling bearer [ 812.072796][T20220] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 812.171775][T14190] IPVS: stop unused estimator thread 0... [ 812.257840][T20230] nbd: illegal input index -1113835520 [ 812.435930][T20243] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 812.700469][T20250] tipc: Enabling of bearer rejected, failed to enable media [ 812.729151][T20246] syzkaller0: entered promiscuous mode [ 812.734707][T20246] syzkaller0: entered allmulticast mode [ 813.392466][T20277] bridge_slave_0: left allmulticast mode [ 813.405896][T20277] bridge_slave_0: left promiscuous mode [ 813.424730][T20277] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.446022][T20277] bridge_slave_1: left allmulticast mode [ 813.455512][T20277] bridge_slave_1: left promiscuous mode [ 813.461989][T20277] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.477523][T20286] __nla_validate_parse: 13 callbacks suppressed [ 813.477542][T20286] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3584'. [ 813.494569][T20277] bond0: (slave bond_slave_0): Releasing backup interface [ 813.535131][T20277] bond0: (slave bond_slave_1): Releasing backup interface [ 813.551047][T20288] xt_TCPMSS: Only works on TCP SYN packets [ 813.583960][T20277] team_slave_0: left promiscuous mode [ 813.593557][T20277] team0: Port device team_slave_0 removed [ 813.604173][T20277] team_slave_1: left promiscuous mode [ 813.613602][T20277] team0: Port device team_slave_1 removed [ 813.623913][T20277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 813.631863][T20277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.648086][T20277] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 813.828615][T20296] netlink: 'syz.1.3588': attribute type 4 has an invalid length. [ 813.867155][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 813.936299][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5170 ms [ 813.944411][ C0] lec:lec_tx_timeout: lec0 [ 814.013084][T20298] vlan5: entered allmulticast mode [ 814.027852][T20298] team0: entered allmulticast mode [ 814.040079][T20298] team_slave_0: entered allmulticast mode [ 814.056774][T20298] team_slave_1: entered allmulticast mode [ 814.161210][T20303] syzkaller1: entered promiscuous mode [ 814.177557][T20303] syzkaller1: entered allmulticast mode [ 814.873251][T20326] netlink: 'syz.2.3596': attribute type 1 has an invalid length. [ 814.882839][T20326] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3596'. [ 814.930646][T20329] veth0: entered promiscuous mode [ 814.937127][T20329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3597'. [ 815.203268][T20336] syzkaller0: entered promiscuous mode [ 815.221076][T20336] syzkaller0: entered allmulticast mode [ 815.503300][T20350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3601'. [ 815.526929][T20350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3601'. [ 815.599918][T20352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3604'. [ 815.609287][T20352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3604'. [ 815.633685][T20352] geneve2: entered promiscuous mode [ 815.657933][T20352] geneve2: entered allmulticast mode [ 815.674016][T20354] netlink: 269 bytes leftover after parsing attributes in process `syz.2.3605'. [ 815.762347][ T30] audit: type=1107 audit(1771615973.236:20): pid=20356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 815.954505][T20364] geneve3: entered promiscuous mode [ 816.568986][T20388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3615'. [ 816.593766][T20388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3615'. [ 816.889721][T20396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 817.307940][T20424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 817.338568][T20425] ªªªªª9 speed is unknown, defaulting to 1000 [ 818.275966][T20425] lo speed is unknown, defaulting to 1000 [ 818.444079][T20460] bond3 (unregistering): Released all slaves [ 818.543432][T20463] __nla_validate_parse: 12 callbacks suppressed [ 818.543453][T20463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3636'. [ 818.564345][T20465] netlink: 320 bytes leftover after parsing attributes in process `syz.1.3637'. [ 818.573822][T20465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3637'. [ 818.585087][T20465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3637'. [ 818.596025][T20465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3637'. [ 818.731039][T20469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3639'. [ 818.780730][T20469] ip6gretap1: entered promiscuous mode [ 818.808423][T20469] ip6gretap1: entered allmulticast mode [ 818.909594][T20425] ip6_vti0 speed is unknown, defaulting to 1000 [ 819.428566][T20484] geneve2: entered promiscuous mode [ 819.443599][T20463] siw: device registration error -23 [ 819.460387][T20484] geneve2: entered allmulticast mode [ 820.640743][T20527] syzkaller0: entered promiscuous mode [ 820.675217][T20527] syzkaller0: entered allmulticast mode [ 823.023919][T20543] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 823.035236][T20543] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 823.045871][T20543] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 823.093221][T20552] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3657'. [ 823.212407][T20559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3661'. [ 823.297554][T20561] xt_bpf: check failed: parse error [ 823.497179][T20569] netlink: 'syz.0.3662': attribute type 1 has an invalid length. [ 823.692691][T20571] syzkaller0: entered promiscuous mode [ 823.808402][T20571] syzkaller0: entered allmulticast mode [ 823.900182][T20588] ªªªªª9 speed is unknown, defaulting to 1000 [ 823.982462][T20585] geneve2: entered promiscuous mode [ 824.417656][ T1312] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 824.436919][ T1312] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 824.774786][T20602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3667'. [ 824.794367][T20602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3667'. [ 824.828007][T20604] syz.0.3669: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 824.844001][T20604] CPU: 1 UID: 0 PID: 20604 Comm: syz.0.3669 Not tainted syzkaller #0 PREEMPT(full) [ 824.844029][T20604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 824.844043][T20604] Call Trace: [ 824.844051][T20604] [ 824.844060][T20604] dump_stack_lvl+0xe8/0x150 [ 824.844126][T20604] warn_alloc+0x249/0x340 [ 824.844149][T20604] ? stack_trace_save+0xa9/0x100 [ 824.844175][T20604] ? __pfx_warn_alloc+0x10/0x10 [ 824.844205][T20604] ? kasan_save_track+0x4f/0x80 [ 824.844224][T20604] ? kasan_save_track+0x3e/0x80 [ 824.844243][T20604] ? __kasan_kmalloc+0x93/0xb0 [ 824.844262][T20604] ? __kmalloc_cache_noprof+0x31c/0x660 [ 824.844282][T20604] ? xskq_create+0x56/0x170 [ 824.844308][T20604] ? xsk_setsockopt+0x54c/0x990 [ 824.844332][T20604] ? do_sock_setsockopt+0x17c/0x1b0 [ 824.844357][T20604] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 824.844379][T20604] ? do_syscall_64+0x14d/0xf80 [ 824.844408][T20604] __vmalloc_node_range_noprof+0x132/0x1730 [ 824.844459][T20604] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 824.844485][T20604] ? __kasan_kmalloc+0x93/0xb0 [ 824.844511][T20604] vmalloc_user_noprof+0xad/0xe0 [ 824.844530][T20604] ? xskq_create+0xbf/0x170 [ 824.844555][T20604] xskq_create+0xbf/0x170 [ 824.844583][T20604] xsk_init_queue+0x8a/0xe0 [ 824.844610][T20604] xsk_setsockopt+0x54c/0x990 [ 824.844636][T20604] ? __pfx_xsk_setsockopt+0x10/0x10 [ 824.844660][T20604] ? __pfx_aa_sk_perm+0x10/0x10 [ 824.844685][T20604] ? aa_sock_opt_perm+0xff/0x1a0 [ 824.844712][T20604] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 824.844732][T20604] ? __pfx_xsk_setsockopt+0x10/0x10 [ 824.844757][T20604] do_sock_setsockopt+0x17c/0x1b0 [ 824.844788][T20604] __x64_sys_setsockopt+0x13d/0x1b0 [ 824.844820][T20604] do_syscall_64+0x14d/0xf80 [ 824.844847][T20604] ? trace_irq_disable+0x3b/0x150 [ 824.844873][T20604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.844893][T20604] ? clear_bhb_loop+0x40/0x90 [ 824.844916][T20604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.844944][T20604] RIP: 0033:0x7f8242b9c629 [ 824.844963][T20604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.845001][T20604] RSP: 002b:00007f8243b11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 824.845023][T20604] RAX: ffffffffffffffda RBX: 00007f8242e15fa0 RCX: 00007f8242b9c629 [ 824.845037][T20604] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 824.845049][T20604] RBP: 00007f8242c32b39 R08: 0000000000000004 R09: 0000000000000000 [ 824.845062][T20604] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.845081][T20604] R13: 00007f8242e16038 R14: 00007f8242e15fa0 R15: 00007fffceb521a8 [ 824.845115][T20604] [ 824.845204][T20604] Mem-Info: [ 825.148810][T20607] xt_TCPMSS: Only works on TCP SYN packets [ 825.155462][T20607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3669'. [ 825.170759][T20604] active_anon:9363 inactive_anon:0 isolated_anon:0 [ 825.170759][T20604] active_file:3849 inactive_file:40211 isolated_file:0 [ 825.170759][T20604] unevictable:768 dirty:293 writeback:0 [ 825.170759][T20604] slab_reclaimable:12750 slab_unreclaimable:145072 [ 825.170759][T20604] mapped:35998 shmem:1361 pagetables:1223 [ 825.170759][T20604] sec_pagetables:0 bounce:0 [ 825.170759][T20604] kernel_misc_reclaimable:0 [ 825.170759][T20604] free:1266609 free_pcp:17963 free_cma:0 [ 825.220070][T20604] Node 0 active_anon:37452kB inactive_anon:0kB active_file:15396kB inactive_file:160644kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143992kB dirty:1172kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13984kB pagetables:4756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 825.254763][T20604] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 825.299973][T20604] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 825.332691][T20604] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 825.349290][T20604] Node 0 DMA32 free:1110852kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37452kB inactive_anon:0kB active_file:15396kB inactive_file:160644kB unevictable:1536kB writepending:1172kB zspages:0kB present:3129332kB managed:2552852kB mlocked:0kB bounce:0kB free_pcp:72136kB local_pcp:44060kB free_cma:0kB [ 825.402564][T20604] lowmem_reserve[]: 0 0 0 0 0 [ 825.408073][T20604] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 825.440777][T20604] lowmem_reserve[]: 0 0 0 0 0 [ 825.445857][T20604] Node 1 Normal free:3940216kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 825.480522][T20604] lowmem_reserve[]: 0 0 0 0 0 [ 825.485718][T20604] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 825.500789][T20604] Node 0 DMA32: 5441*4kB (UME) 5282*8kB (UME) 2014*16kB (UME) 627*32kB (UME) 253*64kB (UME) 244*128kB (UME) 216*256kB (UME) 308*512kB (UME) 203*1024kB (UM) 103*2048kB (UME) 77*4096kB (UM) = 1110932kB [ 825.527640][T20604] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 825.542398][T20604] Node 1 Normal: 0*4kB 3*8kB (UM) 16*16kB (UME) 7*32kB (UME) 8*64kB (UME) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 960*4096kB (UM) = 3940216kB [ 825.571163][T20604] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 825.581400][T20604] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 825.597654][T20604] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 825.609728][T20604] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 825.619974][T20604] 45417 total pagecache pages [ 825.627647][T20604] 0 pages in swap cache [ 825.632359][T20604] Free swap = 124996kB [ 825.637196][T20604] Total swap = 124996kB [ 825.641448][T20604] 2097051 pages RAM [ 825.645558][T20604] 0 pages HighMem/MovableOnly [ 825.650950][T20604] 427002 pages reserved [ 825.655157][T20604] 0 pages cma reserved [ 826.148497][T20624] netlink: 'syz.3.3672': attribute type 1 has an invalid length. [ 826.158031][T20624] netlink: 'syz.3.3672': attribute type 3 has an invalid length. [ 826.166086][T20624] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3672'. [ 826.176566][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 827.182485][T20588] lo speed is unknown, defaulting to 1000 [ 827.182508][ T1312] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 827.197863][ T1312] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 827.256623][T20608] xfrm1: entered allmulticast mode [ 827.398538][T20630] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3674'. [ 827.590539][T20588] ip6_vti0 speed is unknown, defaulting to 1000 [ 827.663246][T20640] bridge0: port 3(veth0_to_bridge) entered blocking state [ 827.690139][T20640] bridge0: port 3(veth0_to_bridge) entered disabled state [ 827.713456][T20640] veth0_to_bridge: entered allmulticast mode [ 827.757124][T20640] veth0_to_bridge: entered promiscuous mode [ 827.781148][T20640] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 827.804904][T20640] bridge0: port 3(veth0_to_bridge) entered blocking state [ 827.812500][T20640] bridge0: port 3(veth0_to_bridge) entered listening state [ 827.934144][T20652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3678'. [ 827.937192][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 828.185157][T20668] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3682'. [ 828.771537][T20677] syzkaller0: entered promiscuous mode [ 828.795884][T20677] syzkaller0: entered allmulticast mode [ 828.806874][T20695] IPVS: length: 58 != 8 [ 828.854500][T20701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3691'. [ 828.896549][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 828.910404][ C1] bridge0: port 3(veth0_to_bridge) entered blocking state [ 828.921454][T20703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3691'. [ 828.930814][T20703] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3691'. [ 828.956617][T20698] netlink: 'syz.2.3693': attribute type 13 has an invalid length. [ 829.372993][T20711] netlink: 'syz.0.3695': attribute type 1 has an invalid length. [ 829.510257][T20698] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.518073][T20698] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.539868][T20698] bond_slave_0: left promiscuous mode [ 829.571464][T20698] bond_slave_1: left promiscuous mode [ 829.930998][T20698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 829.947373][T20698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 830.230292][T20726] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3698'. [ 830.273968][T20728] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 830.313557][T20720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3696'. [ 830.325436][T20720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3696'. [ 830.392895][T14189] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.409851][T14189] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.433891][T14189] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.600449][T14189] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.754714][T20757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3705'. [ 830.813373][T20761] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3706'. [ 830.901790][T20765] can: request_module (can-proto-5) failed. [ 830.953820][T20766] can: request_module (can-proto-5) failed. [ 831.004105][T20774] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3709'. [ 831.152243][T20787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3709'. [ 831.168278][T20787] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3709'. [ 831.274529][T20789] netlink: 'syz.3.3714': attribute type 10 has an invalid length. [ 831.364437][T20789] syz_tun: entered promiscuous mode [ 831.418430][T20789] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 831.505625][T20803] netlink: 'syz.0.3717': attribute type 1 has an invalid length. [ 831.558462][T20795] syzkaller0: entered promiscuous mode [ 831.565215][T20795] syzkaller0: entered allmulticast mode [ 831.578773][T20804] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3717'. [ 831.601756][T20809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3718'. [ 831.632805][T20803] 8021q: adding VLAN 0 to HW filter on device bond3 [ 833.634284][T20807] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 834.348622][T20868] netlink: 'syz.4.3730': attribute type 18 has an invalid length. [ 834.633273][T20873] syzkaller0: entered promiscuous mode [ 834.649921][T20873] syzkaller0: entered allmulticast mode [ 834.799679][T20894] netlink: 'syz.4.3740': attribute type 4 has an invalid length. [ 836.421748][T20591] Bluetooth: hci2: command 0x0406 tx timeout [ 836.860907][T20913] netlink: 'syz.4.3746': attribute type 3 has an invalid length. [ 836.869399][T20913] __nla_validate_parse: 13 callbacks suppressed [ 836.869418][T20913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3746'. [ 837.003696][T20917] ªªªªª9 speed is unknown, defaulting to 1000 [ 837.044259][T20914] geneve2: entered promiscuous mode [ 837.099982][T14190] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 837.129303][T14190] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 837.165680][T14190] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 837.175158][T14190] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 837.311739][T20936] netlink: 'syz.1.3750': attribute type 13 has an invalid length. [ 837.329280][T20943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3751'. [ 837.380507][T20947] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3752'. [ 837.469201][T20949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3753'. [ 837.578480][T20917] lo speed is unknown, defaulting to 1000 [ 837.797714][T20960] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3754'. [ 837.806862][T20960] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3754'. [ 837.939375][T20966] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3759'. [ 837.953154][T20972] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3759'. [ 837.969373][T20968] netlink: 'syz.4.3760': attribute type 1 has an invalid length. [ 837.986495][T20962] syzkaller0: entered promiscuous mode [ 838.017098][T20962] syzkaller0: entered allmulticast mode [ 838.031685][T20917] ip6_vti0 speed is unknown, defaulting to 1000 [ 839.053583][T12499] lec:lec_start_xmit: lec0:No lecd attached [ 839.459932][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 840.322209][T20974] vlan3: entered allmulticast mode [ 840.610201][T20999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3767'. [ 840.650650][T20999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3767'. [ 841.343312][T21018] ªªªªª9 speed is unknown, defaulting to 1000 [ 842.894779][T21036] syzkaller0: entered promiscuous mode [ 842.946572][T21036] syzkaller0: entered allmulticast mode [ 843.012707][T21022] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3773'. [ 844.070980][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 844.079266][ C0] lec:lec_tx_timeout: lec0 [ 844.607737][T21018] lo speed is unknown, defaulting to 1000 [ 844.608351][T21045] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 844.637449][T21046] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 844.838517][T21058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3784'. [ 844.859985][T21058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3784'. [ 845.009865][T21070] : entered promiscuous mode [ 845.139908][T21079] ip6tnl0: Caught tx_queue_len zero misconfig [ 845.216148][T21083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3792'. [ 845.232893][T21018] ip6_vti0 speed is unknown, defaulting to 1000 [ 845.379933][T21087] syzkaller0: entered promiscuous mode [ 845.385574][T21087] syzkaller0: entered allmulticast mode [ 845.533688][T21081] siw: device registration error -23 [ 845.666154][T21093] netlink: zone id is out of range [ 845.672295][T21093] netlink: zone id is out of range [ 845.697916][T21093] netlink: zone id is out of range [ 845.712143][T21093] netlink: zone id is out of range [ 845.744475][T21093] netlink: zone id is out of range [ 845.761989][T21093] netlink: zone id is out of range [ 845.777539][T21093] netlink: zone id is out of range [ 845.849905][T21101] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3797'. [ 845.895318][T21104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3797'. [ 848.223368][T21102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3795'. [ 848.673023][T21134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3803'. [ 848.800642][T21134] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3803'. [ 849.037063][T21146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3805'. [ 849.099872][T21146] bridge0: port 4(batadv1) entered blocking state [ 849.153084][T21146] bridge0: port 4(batadv1) entered disabled state [ 849.186615][T21146] batadv1: entered allmulticast mode [ 849.307576][T21146] batadv1: entered promiscuous mode [ 849.606579][ T1312] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 849.616871][ T1312] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 849.736957][T21169] delete_channel: no stack [ 850.948384][T21191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3816'. [ 851.104513][T21199] ªªªªª9 speed is unknown, defaulting to 1000 [ 851.416838][T21217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3822'. [ 851.442849][T21217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3822'. [ 851.510919][T21217] netlink: 'syz.1.3822': attribute type 18 has an invalid length. [ 851.992732][T21199] lo speed is unknown, defaulting to 1000 [ 852.239486][T21249] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3829'. [ 852.267122][T21249] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 852.303398][T21252] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3830'. [ 852.448843][T21255] ªªªªª9 speed is unknown, defaulting to 1000 [ 852.514730][T21265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3830'. [ 852.526556][T21265] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 853.052631][T21199] ip6_vti0 speed is unknown, defaulting to 1000 [ 853.104484][T21255] lo speed is unknown, defaulting to 1000 [ 853.109146][T21266] ªªªªª9 speed is unknown, defaulting to 1000 [ 853.774634][T21266] lo speed is unknown, defaulting to 1000 [ 853.789494][T21255] ip6_vti0 speed is unknown, defaulting to 1000 [ 854.317534][T21266] ip6_vti0 speed is unknown, defaulting to 1000 [ 854.616648][T21282] openvswitch: netlink: Key type 30 is not supported [ 854.657881][T21277] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 854.673787][T21277] bond4 (unregistering): Released all slaves [ 855.271561][T21288] __nla_validate_parse: 1 callbacks suppressed [ 855.271584][T21288] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3840'. [ 856.613885][T21306] 8021q: adding VLAN 0 to HW filter on device bond3 [ 856.896731][T20591] Bluetooth: hci3: command 0x0406 tx timeout [ 857.653091][T21342] ªªªªª9 speed is unknown, defaulting to 1000 [ 857.831633][T21356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3855'. [ 858.664914][T21342] lo speed is unknown, defaulting to 1000 [ 858.848868][T21378] netlink: 'syz.0.3861': attribute type 29 has an invalid length. [ 858.857776][T21378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3861'. [ 858.978310][T21382] netlink: 'syz.0.3864': attribute type 10 has an invalid length. [ 859.002524][T21384] netlink: 'syz.1.3863': attribute type 10 has an invalid length. [ 859.017311][T21382] syz_tun: entered promiscuous mode [ 859.032651][T21382] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 859.083700][T21382] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 859.156702][T21387] netlink: 'syz.4.3865': attribute type 8 has an invalid length. [ 859.182527][T21342] ip6_vti0 speed is unknown, defaulting to 1000 [ 859.328977][T21391] xt_connbytes: Forcing CT accounting to be enabled [ 859.409003][T21397] lo: Caught tx_queue_len zero misconfig [ 859.866651][T21417] xt_CT: You must specify a L4 protocol and not use inversions on it [ 860.327509][T21420] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3874'. [ 860.377897][T21420] IPv6: Can't replace route, no match found [ 860.474070][T21443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3878'. [ 860.703395][T21448] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3879'. [ 861.523823][T21488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3891'. [ 861.776022][T21503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3893'. [ 862.653589][T21528] netlink: 'syz.1.3902': attribute type 1 has an invalid length. [ 862.759023][T21530] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3903'. [ 862.791978][T21530] bond4: entered promiscuous mode [ 862.798767][T21530] 8021q: adding VLAN 0 to HW filter on device bond4 [ 862.871648][T21530] bond4 (unregistering): Released all slaves [ 863.136600][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 863.292014][T21550] hsr0: entered promiscuous mode [ 863.393345][T21560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3909'. [ 863.539496][T21564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3911'. [ 863.578754][T21558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 863.639229][T21558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.705354][T21570] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3913'. [ 863.941161][T21583] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3918'. [ 863.953095][T21582] delete_channel: no stack [ 864.014583][T21587] netlink: 'syz.1.3917': attribute type 1 has an invalid length. [ 864.129094][T21580] macvlan3: left promiscuous mode [ 864.134295][T21580] bond1: left promiscuous mode [ 864.140833][T21580] ip6gretap1: left promiscuous mode [ 864.204340][T21600] "syz.0.3920" (21600) uses obsolete ecb(arc4) skcipher [ 864.289543][T21605] IPVS: set_ctl: invalid protocol: 43 172.30.0.4:20001 [ 864.309602][T21584] ªªªªª9 speed is unknown, defaulting to 1000 [ 864.863078][T21631] netlink: 'syz.0.3930': attribute type 6 has an invalid length. [ 864.968772][T21584] lo speed is unknown, defaulting to 1000 [ 865.372383][T21656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 865.413896][T21656] netlink: 'syz.0.3938': attribute type 10 has an invalid length. [ 865.427546][T21654] ªªªªª9 speed is unknown, defaulting to 1000 [ 865.453399][T21656] dummy0: entered allmulticast mode [ 865.487863][T21662] netlink: 'syz.0.3938': attribute type 10 has an invalid length. [ 865.510237][T21656] team0: Port device dummy0 added [ 865.543020][T21662] dummy0: left allmulticast mode [ 865.565354][T21662] team0: Port device dummy0 removed [ 865.585802][T21662] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 865.673745][T21584] ip6_vti0 speed is unknown, defaulting to 1000 [ 866.203926][T21683] netlink: 'syz.2.3945': attribute type 10 has an invalid length. [ 866.364879][T21654] lo speed is unknown, defaulting to 1000 [ 866.535290][T21696] __nla_validate_parse: 7 callbacks suppressed [ 866.535313][T21696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3950'. [ 866.749892][T21704] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3951'. [ 866.882201][T21654] ip6_vti0 speed is unknown, defaulting to 1000 [ 867.671090][T21721] netlink: 'syz.0.3957': attribute type 62 has an invalid length. [ 867.715085][T21723] netlink: 'syz.0.3957': attribute type 62 has an invalid length. [ 867.937206][T21728] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3960'. [ 867.986796][T21728] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3960'. [ 868.000246][T21732] netlink: 'syz.2.3958': attribute type 10 has an invalid length. [ 868.025762][T21727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3960'. [ 868.191746][T21737] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3961'. [ 868.234625][T21737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3961'. [ 868.400389][T21741] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 868.438878][T21743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3965'. [ 869.004541][T21765] ªªªªª9 speed is unknown, defaulting to 1000 [ 869.093918][T21769] netlink: 'syz.0.3971': attribute type 2 has an invalid length. [ 869.101869][T21769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3971'. [ 869.127047][T21766] syzkaller0: entered promiscuous mode [ 869.136419][T21766] syzkaller0: entered allmulticast mode [ 869.308826][T21777] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3975'. [ 869.835063][T21793] netlink: 'syz.2.3979': attribute type 1 has an invalid length. [ 870.005773][T21793] bond4 (unregistering): Released all slaves [ 870.095596][T21799] ªªªªª9 speed is unknown, defaulting to 1000 [ 870.095596][T21765] lo speed is unknown, defaulting to 1000 [ 870.186850][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.203389][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 870.609556][T21830] FAULT_INJECTION: forcing a failure. [ 870.609556][T21830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 870.636568][T21830] CPU: 1 UID: 0 PID: 21830 Comm: syz.3.3990 Not tainted syzkaller #0 PREEMPT(full) [ 870.636599][T21830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 870.636613][T21830] Call Trace: [ 870.636621][T21830] [ 870.636630][T21830] dump_stack_lvl+0xe8/0x150 [ 870.636664][T21830] should_fail_ex+0x412/0x560 [ 870.636695][T21830] _copy_from_user+0x2d/0xb0 [ 870.636724][T21830] ____sys_sendmsg+0x334/0xad0 [ 870.636766][T21830] ? __pfx_____sys_sendmsg+0x10/0x10 [ 870.636805][T21830] ? import_iovec+0x73/0xa0 [ 870.636838][T21830] ___sys_sendmsg+0x2a5/0x360 [ 870.636874][T21830] ? __pfx____sys_sendmsg+0x10/0x10 [ 870.636910][T21830] ? kstrtouint+0x6e/0xe0 [ 870.636960][T21830] ? __fget_files+0x2a/0x420 [ 870.636989][T21830] ? __fget_files+0x3a0/0x420 [ 870.637028][T21830] __sys_sendmmsg+0x27c/0x4e0 [ 870.637064][T21830] ? __pfx___sys_sendmmsg+0x10/0x10 [ 870.637092][T21830] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 870.637153][T21830] ? ksys_write+0x242/0x270 [ 870.637177][T21830] ? __pfx_ksys_write+0x10/0x10 [ 870.637206][T21830] __x64_sys_sendmmsg+0xa0/0xc0 [ 870.637238][T21830] do_syscall_64+0x14d/0xf80 [ 870.637267][T21830] ? trace_irq_disable+0x3b/0x150 [ 870.637306][T21830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.637328][T21830] ? clear_bhb_loop+0x40/0x90 [ 870.637353][T21830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.637374][T21830] RIP: 0033:0x7f28b199c629 [ 870.637393][T21830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.637411][T21830] RSP: 002b:00007f28b27fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 870.637434][T21830] RAX: ffffffffffffffda RBX: 00007f28b1c15fa0 RCX: 00007f28b199c629 [ 870.637449][T21830] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000004 [ 870.637462][T21830] RBP: 00007f28b27fe090 R08: 0000000000000000 R09: 0000000000000000 [ 870.637475][T21830] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 870.637487][T21830] R13: 00007f28b1c16038 R14: 00007f28b1c15fa0 R15: 00007fff2f14e538 [ 870.637522][T21830] [ 870.928824][T21832] tipc: Enabled bearer , priority 0 [ 870.947563][T21832] syzkaller0: entered promiscuous mode [ 870.953229][T21832] syzkaller0: entered allmulticast mode [ 870.994378][T21799] lo speed is unknown, defaulting to 1000 [ 871.019058][T21765] ip6_vti0 speed is unknown, defaulting to 1000 [ 871.020924][T21832] syz.1.3991 (21832) used obsolete PPPIOCDETACH ioctl [ 871.053740][T21827] ªªªªª9 speed is unknown, defaulting to 1000 [ 871.204120][T21832] tipc: Resetting bearer [ 871.210901][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.239573][T21832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.350359][T21831] tipc: Resetting bearer [ 871.407559][T21831] tipc: Disabling bearer [ 871.606299][T21845] __nla_validate_parse: 10 callbacks suppressed [ 871.606320][T21845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3996'. [ 871.621103][T21846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3995'. [ 871.748332][T21799] ip6_vti0 speed is unknown, defaulting to 1000 [ 871.873470][T21827] lo speed is unknown, defaulting to 1000 [ 871.995345][T21851] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 872.004705][T21852] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 872.258922][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 872.531941][T21827] ip6_vti0 speed is unknown, defaulting to 1000 [ 872.573115][T21878] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4002'. [ 872.583077][T21878] dummy0: Caught tx_queue_len zero misconfig [ 872.598150][T21878] netlink: 13 bytes leftover after parsing attributes in process `syz.1.4002'. [ 872.731692][T21883] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4004'. [ 872.818297][T21885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4005'. [ 873.158774][T21893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4007'. [ 873.312993][T21893] gtp0: entered promiscuous mode [ 873.319560][T21893] gtp0: entered allmulticast mode [ 873.789568][T21907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4010'. [ 874.188697][T21923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4011'. [ 874.350082][T21917] syzkaller0: entered promiscuous mode [ 874.355689][T21917] syzkaller0: entered allmulticast mode [ 874.437788][T21927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4013'. [ 875.940197][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 875.948322][ C0] lec:lec_tx_timeout: lec0 [ 876.587408][T21935] IPVS: sh: FWM 3 0x00000003 - no destination available [ 876.594515][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 876.601988][ T5941] IPVS: starting estimator thread 0... [ 876.609507][T21935] IPVS: sh: FWM 3 0x00000003 - no destination available [ 876.616830][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 876.706882][T21936] IPVS: using max 25 ests per chain, 60000 per kthread [ 876.794697][T21950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 876.807012][T21944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 876.838604][T21951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4019'. [ 876.867039][T21951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4019'. [ 876.887424][T21943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 876.907012][T21951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4019'. [ 877.009295][T21942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 877.154809][T21962] netlink: 'syz.3.4021': attribute type 13 has an invalid length. [ 877.168832][T21962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4021'. [ 877.182344][T21962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4021'. [ 877.200163][T21962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4021'. [ 877.214364][T21962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4021'. [ 877.238439][T21962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4021'. [ 877.243126][T21963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4022'. [ 877.249234][T21962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4021'. [ 877.442319][T21973] bond4: option all_slaves_active: invalid value (13) [ 877.461423][T21973] bond4 (unregistering): Released all slaves [ 877.602835][T21988] netlink: 'syz.2.4030': attribute type 5 has an invalid length. [ 877.815046][T21998] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 877.833801][T21998] bond4: (slave lo): Enslaving as an active interface with an up link [ 877.851177][T21998] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 878.424065][T22019] vlan4: entered promiscuous mode [ 878.449944][T22019] batadv0: entered promiscuous mode [ 880.804083][T22034] netlink: 'syz.4.4044': attribute type 12 has an invalid length. [ 880.887223][T22035] ªªªªª9 speed is unknown, defaulting to 1000 [ 880.963205][T22052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 881.153607][T22070] xt_hashlimit: overflow, try lower: 64/16140901064495857664 [ 881.195575][T22074] mÿ5nè‹Ò: entered promiscuous mode [ 881.489282][T22035] lo speed is unknown, defaulting to 1000 [ 881.815964][T22035] ip6_vti0 speed is unknown, defaulting to 1000 [ 881.888809][T22122] __nla_validate_parse: 17 callbacks suppressed [ 881.888832][T22122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4060'. [ 882.111222][T22127] tunl0: Caught tx_queue_len zero misconfig [ 882.135945][T22129] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4064'. [ 882.286007][T22138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4066'. [ 883.025440][T22164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4070'. [ 883.077896][T22160] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 883.085213][T22160] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 883.092561][T22160] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 883.099864][T22160] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 883.107175][T22160] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 883.114444][T22160] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 883.121772][T22160] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 883.129081][T22160] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 883.136412][T22160] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 883.143679][T22160] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 883.203387][T22163] ªªªªª9 speed is unknown, defaulting to 1000 [ 883.604376][T22182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4077'. [ 884.049468][T22163] lo speed is unknown, defaulting to 1000 [ 884.112976][T22192] bridge_slave_1: left allmulticast mode [ 884.129142][T22192] bridge_slave_1: left promiscuous mode [ 884.141752][T22192] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.172375][T22192] bridge_slave_0: left promiscuous mode [ 884.186189][T22192] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.644803][T22163] ip6_vti0 speed is unknown, defaulting to 1000 [ 884.864126][T22222] netlink: 'syz.2.4087': attribute type 5 has an invalid length. [ 884.900660][T22216] ªªªªª9 speed is unknown, defaulting to 1000 [ 885.494119][T22233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4089'. [ 885.684140][T22237] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4090'. [ 885.769797][T22216] lo speed is unknown, defaulting to 1000 [ 885.808631][T22240] syzkaller0: entered promiscuous mode [ 885.836119][T22240] syzkaller0: entered allmulticast mode [ 885.844885][T22237] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4090'. [ 886.206983][T22252] netlink: 'syz.2.4095': attribute type 1 has an invalid length. [ 886.236289][T22252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4095'. [ 886.245475][T22252] netlink: 'syz.2.4095': attribute type 1 has an invalid length. [ 886.355474][T22216] ip6_vti0 speed is unknown, defaulting to 1000 [ 887.206575][T22273] netlink: 'syz.3.4099': attribute type 2 has an invalid length. [ 887.341624][T22274] netlink: 'syz.3.4099': attribute type 2 has an invalid length. [ 887.395402][T22273] : entered promiscuous mode [ 887.426529][T22274] : left promiscuous mode [ 887.465657][T22276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4100'. [ 888.028707][T22297] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.4106'. [ 888.051942][T22296] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.4106'. [ 888.081602][T22299] xt_socket: unknown flags 0x50 [ 888.233847][T22303] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4108'. [ 888.249632][T22303] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 888.261633][T22303] syzkaller0: entered promiscuous mode [ 888.277015][T22303] syzkaller0: entered allmulticast mode [ 888.567672][T22314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4111'. [ 888.665127][T22316] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4112'. [ 888.850589][T22326] netlink: 'syz.3.4117': attribute type 6 has an invalid length. [ 889.074833][T22332] netlink: 'syz.4.4118': attribute type 26 has an invalid length. [ 889.499429][T22345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4122'. [ 889.523976][T22351] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4124'. [ 889.558679][T22351] ªªªªª9 speed is unknown, defaulting to 1000 [ 889.882062][T22351] lo speed is unknown, defaulting to 1000 [ 889.899778][T22364] ipt_REJECT: ECHOREPLY no longer supported. [ 889.912210][T22364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4128'. [ 890.132566][T22365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4128'. [ 890.161092][T22364] team1: entered promiscuous mode [ 890.168291][T22364] team1: entered allmulticast mode [ 890.173889][T22364] 8021q: adding VLAN 0 to HW filter on device team1 [ 890.211057][T22351] ip6_vti0 speed is unknown, defaulting to 1000 [ 890.401601][T22365] team2: entered promiscuous mode [ 890.415733][T22365] team2: entered allmulticast mode [ 890.430116][T22365] 8021q: adding VLAN 0 to HW filter on device team2 [ 890.630376][T22378] netlink: 'syz.3.4131': attribute type 6 has an invalid length. [ 890.965408][T22389] vxcan2: entered promiscuous mode [ 890.976275][T22389] vxcan2: entered allmulticast mode [ 891.029424][T22392] netlink: 'syz.4.4135': attribute type 11 has an invalid length. [ 891.210067][ T796] IPVS: starting estimator thread 0... [ 891.306269][T22400] IPVS: using max 25 ests per chain, 60000 per kthread [ 891.322948][T22402] netlink: 'syz.3.4137': attribute type 1 has an invalid length. [ 891.336380][T22402] netlink: 'syz.3.4137': attribute type 1 has an invalid length. [ 891.575128][T22418] netlink: 'syz.2.4140': attribute type 83 has an invalid length. [ 891.831536][T22423] netlink: 'syz.0.4141': attribute type 7 has an invalid length. [ 891.840936][T22422] netlink: 'syz.1.4142': attribute type 6 has an invalid length. [ 891.850464][T22423] netlink: 'syz.0.4141': attribute type 5 has an invalid length. [ 891.923595][T22426] netlink: 'syz.4.4143': attribute type 29 has an invalid length. [ 891.972628][T22426] netlink: 'syz.4.4143': attribute type 29 has an invalid length. [ 892.461064][T22445] netlink: 'syz.2.4148': attribute type 1 has an invalid length. [ 892.479409][T22445] __nla_validate_parse: 7 callbacks suppressed [ 892.479428][T22445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4148'. [ 892.517703][T22445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4148'. [ 892.657030][T22454] net_ratelimit: 3257 callbacks suppressed [ 892.657054][T22454] openvswitch: netlink: Flow actions attr not present in new flow. [ 892.714667][T22456] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4152'. [ 892.843034][T22460] team0: Device gtp1 is of different type [ 893.258568][T22476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4158'. [ 893.588388][T22489] Bluetooth: MGMT ver 1.23 [ 893.699010][T22486] udevd[22486]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 893.714012][T22486] udevd[22486]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 893.840948][T22494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.850572][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.893284][T22501] ªªªªª9 speed is unknown, defaulting to 1000 [ 894.009261][T22510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4163'. [ 894.405699][T22527] veth0: entered promiscuous mode [ 894.429448][T22527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4168'. [ 894.528800][T22527] veth0 (unregistering): left promiscuous mode [ 894.551699][T22530] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4168'. [ 894.710215][T22534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4170'. [ 894.912115][T22501] lo speed is unknown, defaulting to 1000 [ 895.276636][T22548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4176'. [ 895.380659][T22501] ip6_vti0 speed is unknown, defaulting to 1000 [ 895.473972][T22550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4176'. [ 895.785151][T22557] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 895.835478][T22559] ipvlan2: entered promiscuous mode [ 895.842412][T22559] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 896.130522][T22564] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 896.263453][T22572] veth0: entered promiscuous mode [ 896.301726][T22572] veth0 (unregistering): left promiscuous mode [ 896.424640][T22579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 896.445508][T22579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.482284][T22579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 896.523910][T22579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.627284][T22590] validate_nla: 2 callbacks suppressed [ 896.627309][T22590] netlink: 'syz.2.4188': attribute type 1 has an invalid length. [ 897.186691][T22595] bond4: (slave bridge4): making interface the new active one [ 897.237570][T22595] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 897.423221][T22594] bond6 (unregistering): Released all slaves [ 897.601461][T22606] netlink: 'syz.1.4191': attribute type 6 has an invalid length. [ 897.698355][ T30] audit: type=1800 audit(1771616055.176:21): pid=22610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4192" name="x000000000000000600000000000000000000006" dev="tmpfs" ino=1163 res=0 errno=0 [ 897.755600][ T30] audit: type=1804 audit(1771616055.176:22): pid=22610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4192" name="x000000000000000600000000000000000000006" dev="tmpfs" ino=1163 res=1 errno=0 [ 897.970673][T22629] ªªªªª9 speed is unknown, defaulting to 1000 [ 898.035403][T22637] veth0: entered promiscuous mode [ 898.042390][T22637] __nla_validate_parse: 7 callbacks suppressed [ 898.042410][T22637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4198'. [ 898.248846][T22629] lo speed is unknown, defaulting to 1000 [ 898.408125][T22629] ip6_vti0 speed is unknown, defaulting to 1000 [ 898.941359][T22646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4199'. [ 898.948894][T22644] ªªªªª9 speed is unknown, defaulting to 1000 [ 899.397138][T22581] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 899.698758][T22658] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 899.752880][T22664] xt_l2tp: v2 doesn't support IP mode [ 899.926592][T22666] netlink: 'syz.0.4204': attribute type 6 has an invalid length. [ 900.094331][T22644] lo speed is unknown, defaulting to 1000 [ 900.162247][T22683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4210'. [ 900.178941][T22683] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4210'. [ 900.261000][T22680] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 900.296992][T22680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.306781][T22680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.315162][T22680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.387649][T22679] ªªªªª9 speed is unknown, defaulting to 1000 [ 900.422189][T22694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.432514][T22694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.460371][T22694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.503685][T22694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.596875][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.605624][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.615436][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.709279][T22644] ip6_vti0 speed is unknown, defaulting to 1000 [ 900.889961][T22702] bond5: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 901.179195][T22688] ªªªªª9 speed is unknown, defaulting to 1000 [ 901.186002][T22679] lo speed is unknown, defaulting to 1000 [ 901.192590][T22709] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4215'. [ 901.374909][T22711] syzkaller0: entered promiscuous mode [ 901.380566][T22711] syzkaller0: entered allmulticast mode [ 901.729385][T22679] ip6_vti0 speed is unknown, defaulting to 1000 [ 901.735841][T22688] lo speed is unknown, defaulting to 1000 [ 901.834039][T22723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4220'. [ 901.857158][T22723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4220'. [ 902.079429][T22727] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4221'. [ 902.393135][T22688] ip6_vti0 speed is unknown, defaulting to 1000 [ 902.607375][T22742] ªªªªª9 speed is unknown, defaulting to 1000 [ 902.635941][T22745] x_tables: duplicate underflow at hook 2 [ 903.232161][T22753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4227'. [ 903.357801][T12499] lec:lec_start_xmit: lec0:No lecd attached [ 903.397885][T22742] lo speed is unknown, defaulting to 1000 [ 903.863875][T22761] ip6gre1: entered promiscuous mode [ 903.869402][T22761] ip6gre1: entered allmulticast mode [ 904.028601][T22742] ip6_vti0 speed is unknown, defaulting to 1000 [ 904.210085][T22095] tipc: Subscription rejected, illegal request [ 904.342878][T22776] batman_adv: batadv0: Adding interface: dummy0 [ 904.350311][T22776] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.377112][T22776] batman_adv: batadv0: Interface activated: dummy0 [ 904.459875][T22779] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4236'. [ 905.213783][T22799] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4242'. [ 905.778506][T22810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 905.828377][T22810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 906.354664][T22829] netlink: 'syz.0.4252': attribute type 1 has an invalid length. [ 906.401058][T20591] Bluetooth: hci4: link tx timeout [ 906.408151][T20591] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 906.458269][T22834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4254'. [ 906.561247][T22829] 8021q: adding VLAN 0 to HW filter on device bond6 [ 906.569598][T22842] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4255'. [ 906.651361][T22844] bond0: (slave dummy0): Releasing backup interface [ 906.677571][T22844] bond6: (slave dummy0): making interface the new active one [ 906.689617][T22844] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 906.699316][T22837] syzkaller1: entered promiscuous mode [ 906.704832][T22837] syzkaller1: entered allmulticast mode [ 906.942527][T22859] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 906.959445][T20591] Bluetooth: hci4: link tx timeout [ 906.964604][T20591] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 907.121575][T22873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4261'. [ 907.131017][T22873] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4261'. [ 907.885807][T22884] netlink: 'syz.4.4265': attribute type 89 has an invalid length. [ 908.007043][T22891] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4266'. [ 908.021317][T22891] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4266'. [ 908.033629][T22891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4266'. [ 908.496805][T20591] Bluetooth: hci4: command 0x0405 tx timeout [ 908.976669][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5620 ms [ 908.984825][ C0] lec:lec_tx_timeout: lec0 [ 910.031469][T22866] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 910.264281][T22900] syzkaller0: entered promiscuous mode [ 910.271096][T22900] syzkaller0: entered allmulticast mode [ 910.336011][T22913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4272'. [ 910.458961][T22912] bond7: (slave vcan1): refused to change device type [ 910.482550][T22921] tipc: Enabled bearer , priority 0 [ 910.490147][T22922] netlink: 'syz.1.4275': attribute type 21 has an invalid length. [ 910.491232][T22918] syzkaller0: entered promiscuous mode [ 910.513799][T22918] syzkaller0: entered allmulticast mode [ 910.522306][T22922] netlink: 'syz.1.4275': attribute type 3 has an invalid length. [ 910.530751][T22922] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4275'. [ 910.546464][T22923] net_ratelimit: 3 callbacks suppressed [ 910.546483][T22923] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 910.720647][T22925] tipc: Resetting bearer [ 910.780675][T22936] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 910.841661][T22925] tipc: Disabling bearer [ 910.918403][T22951] netlink: 'syz.1.4281': attribute type 1 has an invalid length. [ 910.996424][T22952] netlink: 'syz.0.4280': attribute type 2 has an invalid length. [ 911.145105][T22951] 8021q: adding VLAN 0 to HW filter on device bond4 [ 911.179441][T22951] rdma_rxe: rxe_newlink: failed to add lo [ 911.684705][T22984] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4289'. [ 911.739801][T22984] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 911.825423][T22990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4293'. [ 911.863938][T22994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4293'. [ 911.926614][T22995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4295'. [ 911.935893][T22995] netlink: 'syz.4.4295': attribute type 12 has an invalid length. [ 911.945768][T22995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4295'. [ 911.964919][T22989] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4292'. [ 911.974339][T22989] netlink: 'syz.2.4292': attribute type 3 has an invalid length. [ 911.982621][T22995] netlink: 'syz.4.4295': attribute type 12 has an invalid length. [ 911.995482][T22989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4292'. [ 912.031315][T22998] tipc: Enabled bearer , priority 0 [ 912.048143][T22997] tipc: Disabling bearer [ 912.120368][T23002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4297'. [ 912.329993][T23017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 912.430524][T23016] netlink: 'syz.3.4300': attribute type 16 has an invalid length. [ 912.448865][T23021] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode [ 912.459034][T23016] netlink: 'syz.3.4300': attribute type 17 has an invalid length. [ 912.472637][T23021] macsec1: entered promiscuous mode [ 912.498116][T23016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.531946][T23016] eql: remember to turn off Van-Jacobson compression on your slave devices [ 912.575030][T23016] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 912.681803][T23031] bond5: option lacp_active: invalid value (8) [ 912.718208][T23031] bond5 (unregistering): Released all slaves [ 913.028225][T23049] netlink: 'syz.0.4309': attribute type 30 has an invalid length. [ 913.128158][T23049] bond8: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 913.174257][T23049] bond8 (unregistering): Released all slaves [ 913.325883][T23059] tipc: Resetting bearer [ 914.493874][T23130] netlink: 'syz.0.4324': attribute type 6 has an invalid length. [ 914.506534][T23121] openvswitch: netlink: Flow actions attr not present in new flow. [ 915.109009][T23154] netlink: 'syz.2.4329': attribute type 4 has an invalid length. [ 915.150878][T23153] FAULT_INJECTION: forcing a failure. [ 915.150878][T23153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 915.201300][T23153] CPU: 0 UID: 0 PID: 23153 Comm: syz.4.4330 Not tainted syzkaller #0 PREEMPT(full) [ 915.201331][T23153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 915.201345][T23153] Call Trace: [ 915.201354][T23153] [ 915.201363][T23153] dump_stack_lvl+0xe8/0x150 [ 915.201407][T23153] should_fail_ex+0x412/0x560 [ 915.201439][T23153] _copy_from_user+0x2d/0xb0 [ 915.201471][T23153] ___sys_sendmsg+0x1c6/0x360 [ 915.201508][T23153] ? __pfx____sys_sendmsg+0x10/0x10 [ 915.201577][T23153] ? __fget_files+0x2a/0x420 [ 915.201606][T23153] ? __fget_files+0x3a0/0x420 [ 915.201646][T23153] __x64_sys_sendmsg+0x1bd/0x2a0 [ 915.201679][T23153] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 915.201719][T23153] ? __pfx_ksys_write+0x10/0x10 [ 915.201753][T23153] do_syscall_64+0x14d/0xf80 [ 915.201783][T23153] ? trace_irq_disable+0x3b/0x150 [ 915.201812][T23153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.201834][T23153] ? clear_bhb_loop+0x40/0x90 [ 915.201860][T23153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.201881][T23153] RIP: 0033:0x7f9bda19c629 [ 915.201903][T23153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.201921][T23153] RSP: 002b:00007f9bdaf86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 915.201944][T23153] RAX: ffffffffffffffda RBX: 00007f9bda415fa0 RCX: 00007f9bda19c629 [ 915.201960][T23153] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000013 [ 915.201973][T23153] RBP: 00007f9bdaf86090 R08: 0000000000000000 R09: 0000000000000000 [ 915.201986][T23153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.201999][T23153] R13: 00007f9bda416038 R14: 00007f9bda415fa0 R15: 00007fff9038adb8 [ 915.202033][T23153] [ 915.388870][T23150] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 915.821853][T23177] veth0: entered promiscuous mode [ 915.838268][T23172] __nla_validate_parse: 17 callbacks suppressed [ 915.838288][T23172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4332'. [ 915.890796][T23178] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4334'. [ 915.905752][T23178] netlink: 'syz.2.4334': attribute type 1 has an invalid length. [ 915.923773][T23178] syz_tun: left promiscuous mode [ 916.004678][T23165] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4332'. [ 916.058330][T23176] syzkaller1: entered promiscuous mode [ 916.065191][T23176] syzkaller1: entered allmulticast mode [ 916.293408][T23188] netlink: 'syz.3.4336': attribute type 6 has an invalid length. [ 916.530844][T23201] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 916.556589][T23201] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 916.648080][T23201] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 916.799470][T23196] syzkaller0: entered promiscuous mode [ 916.805016][T23196] syzkaller0: entered allmulticast mode [ 916.831130][T23208] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4338'. [ 916.841715][T23208] tipc: Enabling of bearer rejected, failed to enable media [ 918.951607][T23240] validate_nla: 2 callbacks suppressed [ 918.951628][T23240] netlink: 'syz.1.4345': attribute type 10 has an invalid length. [ 919.016500][T23240] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4345'. [ 919.220256][T23246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4346'. [ 919.267944][T23254] tipc: Enabled bearer , priority 0 [ 919.289732][T23259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 919.311913][T23254] syzkaller0: entered promiscuous mode [ 919.315552][T23244] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4346'. [ 919.346261][T23254] syzkaller0: entered allmulticast mode [ 919.438112][T23254] tipc: Resetting bearer [ 919.454285][T23251] tipc: Resetting bearer [ 919.585826][T23251] tipc: Disabling bearer [ 919.891228][T23281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4353'. [ 919.901141][T23281] netlink: 'syz.1.4353': attribute type 7 has an invalid length. [ 919.910073][T23281] netlink: 'syz.1.4353': attribute type 8 has an invalid length. [ 919.927087][T23289] netlink: 'syz.4.4356': attribute type 1 has an invalid length. [ 919.950438][T23281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4353'. [ 919.969474][T23292] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 920.400999][T23312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4360'. [ 920.418390][T23312] bridge0: entered promiscuous mode [ 920.735770][T23336] netlink: 'syz.0.4367': attribute type 5 has an invalid length. [ 920.810659][T23340] bridge3: entered promiscuous mode [ 920.827286][T23341] netlink: 'syz.4.4366': attribute type 1 has an invalid length. [ 920.877096][T23341] __nla_validate_parse: 4 callbacks suppressed [ 920.877116][T23341] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4366'. [ 921.035982][T23352] openvswitch: netlink: IP tunnel dst address not specified [ 921.069056][T23354] FAULT_INJECTION: forcing a failure. [ 921.069056][T23354] name failslab, interval 1, probability 0, space 0, times 0 [ 921.091906][T23354] CPU: 0 UID: 0 PID: 23354 Comm: syz.1.4373 Not tainted syzkaller #0 PREEMPT(full) [ 921.091937][T23354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 921.091952][T23354] Call Trace: [ 921.091961][T23354] [ 921.091970][T23354] dump_stack_lvl+0xe8/0x150 [ 921.092007][T23354] should_fail_ex+0x412/0x560 [ 921.092038][T23354] should_failslab+0xa8/0x100 [ 921.092064][T23354] ? skb_clone+0x212/0x3a0 [ 921.092096][T23354] kmem_cache_alloc_noprof+0x87/0x650 [ 921.092128][T23354] ? __netlink_lookup+0xc6/0x8b0 [ 921.092164][T23354] skb_clone+0x212/0x3a0 [ 921.092199][T23354] __netlink_deliver_tap+0x404/0x850 [ 921.092238][T23354] ? netlink_deliver_tap+0x2e/0x1b0 [ 921.092265][T23354] netlink_deliver_tap+0x19c/0x1b0 [ 921.092292][T23354] netlink_unicast+0x7e3/0x9b0 [ 921.092324][T23354] ? __pfx_netlink_unicast+0x10/0x10 [ 921.092347][T23354] ? netlink_sendmsg+0x650/0xb40 [ 921.092370][T23354] ? skb_put+0x11b/0x210 [ 921.092400][T23354] netlink_sendmsg+0x813/0xb40 [ 921.092434][T23354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 921.092464][T23354] ? aa_sock_msg_perm+0xf1/0x1b0 [ 921.092491][T23354] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 921.092516][T23354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 921.092540][T23354] ____sys_sendmsg+0xa68/0xad0 [ 921.092581][T23354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 921.092621][T23354] ? import_iovec+0x73/0xa0 [ 921.092654][T23354] ___sys_sendmsg+0x2a5/0x360 [ 921.092691][T23354] ? __pfx____sys_sendmsg+0x10/0x10 [ 921.092770][T23354] ? __fget_files+0x2a/0x420 [ 921.092799][T23354] ? __fget_files+0x3a0/0x420 [ 921.092838][T23354] __x64_sys_sendmsg+0x1bd/0x2a0 [ 921.092872][T23354] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 921.092913][T23354] ? __pfx_ksys_write+0x10/0x10 [ 921.092949][T23354] do_syscall_64+0x14d/0xf80 [ 921.092979][T23354] ? trace_irq_disable+0x3b/0x150 [ 921.093009][T23354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.093030][T23354] ? clear_bhb_loop+0x40/0x90 [ 921.093057][T23354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.093078][T23354] RIP: 0033:0x7ff3b8d9c629 [ 921.093099][T23354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.093121][T23354] RSP: 002b:00007ff3b6fee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 921.093145][T23354] RAX: ffffffffffffffda RBX: 00007ff3b9015fa0 RCX: 00007ff3b8d9c629 [ 921.093162][T23354] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000013 [ 921.093175][T23354] RBP: 00007ff3b6fee090 R08: 0000000000000000 R09: 0000000000000000 [ 921.093188][T23354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.093201][T23354] R13: 00007ff3b9016038 R14: 00007ff3b9015fa0 R15: 00007ffc14e18e08 [ 921.093237][T23354] [ 921.691333][T23370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4375'. [ 921.747655][T23372] IPv6: NLM_F_CREATE should be specified when creating new route [ 921.787843][T23372] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4376'. [ 921.858665][T23377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4377'. [ 922.237218][T23404] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4381'. [ 922.430432][T23412] 8021q: VLANs not supported on xfrm0 [ 922.438748][T23412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4385'. [ 922.462416][T23406] ªªªªª9 speed is unknown, defaulting to 1000 [ 922.509995][T23412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4385'. [ 923.027247][ T796] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 923.173476][T23406] lo speed is unknown, defaulting to 1000 [ 923.181050][T23407] ªªªªª9 speed is unknown, defaulting to 1000 [ 923.372345][T23463] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4396'. [ 923.408968][T23463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4396'. [ 923.428086][ T796] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 923.447120][T23463] netlink: 'syz.2.4396': attribute type 1 has an invalid length. [ 923.661018][T23475] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4397'. [ 923.717783][T22097] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 924.174512][T23492] bridge_slave_1: left allmulticast mode [ 924.211444][T23492] bridge_slave_1: left promiscuous mode [ 924.218131][T23492] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.469312][T23516] netlink: 'syz.1.4405': attribute type 4 has an invalid length. [ 924.737389][T23530] x_tables: duplicate underflow at hook 2 [ 924.742787][T22064] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 924.786486][T22064] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 924.809247][T23406] ip6_vti0 speed is unknown, defaulting to 1000 [ 924.825778][T23407] lo speed is unknown, defaulting to 1000 [ 925.492738][T23407] ip6_vti0 speed is unknown, defaulting to 1000 [ 925.777830][ T796] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 928.976394][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 931.618014][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 931.628061][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.637150][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 931.649271][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 936.736744][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 936.976517][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5330 ms [ 936.984570][ C0] lec:lec_tx_timeout: lec0 [ 938.016429][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 952.099417][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 954.656492][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 966.617599][T12499] lec:lec_start_xmit: lec0:No lecd attached [ 969.562285][T23634] __nla_validate_parse: 4 callbacks suppressed [ 969.562308][T23634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4416'. [ 969.611113][T23642] netlink: 'syz.2.4415': attribute type 2 has an invalid length. [ 969.762759][T23634] bond6: option xmit_hash_policy: invalid value (10) [ 969.842229][T23634] bond6 (unregistering): Released all slaves [ 969.895067][T23648] netlink: 'syz.4.4417': attribute type 30 has an invalid length. [ 970.114180][T23657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4420'. [ 970.201188][T23657] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4420'. [ 970.416298][T23677] bond0: (slave macvlan4): Error -98 calling set_mac_address [ 970.462475][T23681] netlink: 'syz.2.4429': attribute type 10 has an invalid length. [ 970.484945][T23681] syz_tun: entered promiscuous mode [ 970.568963][T23682] syzkaller1: entered promiscuous mode [ 970.574595][T23682] syzkaller1: entered allmulticast mode [ 970.778914][T23696] syzkaller0: entered promiscuous mode [ 970.784489][T23696] syzkaller0: entered allmulticast mode [ 971.375956][T23728] syzkaller1: entered promiscuous mode [ 971.382378][T23728] syzkaller1: entered allmulticast mode [ 971.665286][T23738] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4446'. [ 971.832410][T23745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4448'. [ 971.936914][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5320 ms [ 971.945131][ C0] lec:lec_tx_timeout: lec0 [ 972.014138][T23750] ªªªªª9 speed is unknown, defaulting to 1000 [ 972.423524][T23767] netlink: 'syz.2.4453': attribute type 1 has an invalid length. [ 972.447890][T23767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4453'. [ 972.538636][T23774] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4456'. [ 972.830328][T23750] lo speed is unknown, defaulting to 1000 [ 973.229707][T23798] netlink: 'syz.3.4464': attribute type 10 has an invalid length. [ 973.294434][T23750] ip6_vti0 speed is unknown, defaulting to 1000 [ 973.508529][T23810] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4470'. [ 973.575387][T23809] netlink: set zone limit has 4 unknown bytes [ 973.609313][T23811] bond0: (slave syz_tun): Releasing backup interface [ 973.645415][T23811] batman_adv: batadv0: Interface deactivated: dummy0 [ 973.655427][T23811] batman_adv: batadv0: Removing interface: dummy0 [ 973.670740][T23811] bond0: (slave bond_slave_0): Releasing backup interface [ 973.718906][T23811] bond0: (slave bond_slave_1): Releasing backup interface [ 973.763602][T23811] team0: Port device team_slave_0 removed [ 973.777068][T23811] team0: Port device team_slave_1 removed [ 973.791370][T23811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.825277][T23811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.854435][T23811] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 974.007892][T23829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4471'. [ 974.034457][T23833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4472'. [ 974.570029][T23853] netlink: 'syz.1.4478': attribute type 10 has an invalid length. [ 974.590556][T23853] syz_tun: entered promiscuous mode [ 974.624236][T23855] __nla_validate_parse: 1 callbacks suppressed [ 974.624259][T23855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4477'. [ 974.652166][T23853] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 974.870725][T23864] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4482'. [ 974.932721][T23864] netlink: 'syz.1.4482': attribute type 1 has an invalid length. [ 975.014988][T23868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4483'. [ 975.027174][T23868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4483'. [ 975.081115][T23868] netlink: 'syz.0.4483': attribute type 18 has an invalid length. [ 975.283685][T23872] x_tables: duplicate underflow at hook 3 [ 975.722231][T23890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4491'. [ 975.746060][T23890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4491'. [ 975.792247][T23891] syzkaller1: entered promiscuous mode [ 975.818158][T23891] syzkaller1: entered allmulticast mode [ 975.961791][T23898] pim6reg1: entered promiscuous mode [ 975.976890][T23898] pim6reg1: entered allmulticast mode [ 976.233681][T10520] ip6_vti0 speed is unknown, defaulting to 1000 [ 976.241268][T10520] syz2: Port: 1 Link ACTIVE [ 976.277121][T23911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4493'. [ 976.301632][ T5950] ip6_vti0 speed is unknown, defaulting to 1000 [ 976.355485][T23911] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.399698][T23911] bridge_slave_1 (unregistering): left allmulticast mode [ 976.418117][T23911] bridge_slave_1 (unregistering): left promiscuous mode [ 976.425714][T23911] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.510907][T23917] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 976.838593][T23934] bond6: entered promiscuous mode [ 976.865061][T23941] vcan1: entered promiscuous mode [ 976.871761][T23941] vcan1: entered allmulticast mode [ 976.878559][T23941] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 976.891064][T23941] bond6: (slave vcan1): Error -95 calling set_mac_address [ 976.962173][T23947] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4505'. [ 977.053502][T23953] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4506'. [ 977.318845][T23963] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 977.466889][ T30] audit: type=1800 audit(1771616134.936:23): pid=23973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4514" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1588 res=0 errno=0 [ 977.699519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 977.730970][T23985] ªªªªª9 speed is unknown, defaulting to 1000 [ 977.761298][T23990] xt_cluster: node mask cannot exceed total number of nodes [ 977.936024][T23997] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 978.313251][T23985] lo speed is unknown, defaulting to 1000 [ 978.344030][T24014] tipc: Enabled bearer , priority 0 [ 978.363043][T24014] syzkaller0: entered promiscuous mode [ 978.378016][T24014] syzkaller0: entered allmulticast mode [ 978.469216][T24014] tipc: Resetting bearer [ 978.508051][T24019] netlink: 'syz.1.4529': attribute type 10 has an invalid length. [ 978.523724][T24014] tipc: Resetting bearer [ 978.558773][T24014] tipc: Disabling bearer [ 978.585059][T24019] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 978.623992][T24026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 978.642406][T24019] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 978.661995][T24019] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 978.671392][T24026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4531'. [ 979.196834][T23985] ip6_vti0 speed is unknown, defaulting to 1000 [ 979.558027][T24059] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 979.737327][T24063] __nla_validate_parse: 2 callbacks suppressed [ 979.737348][T24063] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4541'. [ 979.806927][T24063] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4541'. [ 980.052064][T24066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4542'. [ 980.413271][ T5836] block nbd3: Receive control failed (result -32) [ 980.486303][T24081] ip6erspan0: entered promiscuous mode [ 980.964161][T24092] ªªªªª9 speed is unknown, defaulting to 1000 [ 980.990572][T24103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4552'. [ 981.529318][T24124] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4557'. [ 982.702110][T24092] lo speed is unknown, defaulting to 1000 [ 982.755037][T24140] syz_tun: left promiscuous mode [ 982.794991][T24140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.820902][T24140] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.840267][T24140] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 982.858863][T22093] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.898999][T22093] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.908830][T22093] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.918995][T22093] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.953966][T24146] netlink: 'syz.4.4563': attribute type 1 has an invalid length. [ 983.001270][T24146] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4563'. [ 983.015750][T24145] netlink: 'syz.4.4563': attribute type 11 has an invalid length. [ 983.037000][T24146] netlink: 'syz.4.4563': attribute type 1 has an invalid length. [ 983.044791][T24146] netlink: 'syz.4.4563': attribute type 8 has an invalid length. [ 983.073572][T24146] netlink: 582 bytes leftover after parsing attributes in process `syz.4.4563'. [ 983.102595][T24149] xfrm0: entered promiscuous mode [ 983.108702][T24146] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4563'. [ 983.118941][T24149] xfrm0: entered allmulticast mode [ 983.125250][T24147] netlink: 'syz.4.4563': attribute type 1 has an invalid length. [ 983.137926][T24147] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4563'. [ 983.361343][T24161] netlink: 'syz.0.4568': attribute type 1 has an invalid length. [ 983.388478][T24162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4567'. [ 983.472848][T24092] ip6_vti0 speed is unknown, defaulting to 1000 [ 983.763316][T24179] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 984.053304][T22093] tipc: Subscription rejected, illegal request [ 984.155367][T24188] 8021q: adding VLAN 0 to HW filter on device bond5 [ 985.140243][T24223] __nla_validate_parse: 6 callbacks suppressed [ 985.140265][T24223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4583'. [ 985.338485][T24226] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4584'. [ 985.348074][T24223] ªªªªª9 speed is unknown, defaulting to 1000 [ 985.364800][T24226] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4584'. [ 985.553624][T24237] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4587'. [ 985.808118][T24242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4589'. [ 985.970268][T24223] lo speed is unknown, defaulting to 1000 [ 986.348693][T24271] netlink: 'syz.2.4596': attribute type 2 has an invalid length. [ 986.431572][T24223] ip6_vti0 speed is unknown, defaulting to 1000 [ 986.553323][T24279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 986.565649][T24279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 987.213754][T24318] nbd: must specify a size in bytes for the device [ 987.247022][T24323] nbd: must specify a size in bytes for the device [ 987.366447][T24325] netlink: 'syz.1.4612': attribute type 322 has an invalid length. [ 987.938647][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 987.989765][T24342] ªªªªª9 speed is unknown, defaulting to 1000 [ 988.118245][ T30] audit: type=1800 audit(1771616145.586:24): pid=24353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4617" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1732 res=0 errno=0 [ 988.645938][T24365] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4620'. [ 988.685933][T24365] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4620'. [ 989.233632][T24342] lo speed is unknown, defaulting to 1000 [ 989.268021][T24394] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4627'. [ 989.366187][T24398] Cannot find add_set index 2 as target [ 989.459633][T24406] bridge0: port 3(veth0_to_bridge) entered disabled state [ 989.467239][T24406] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.474660][T24406] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.485249][T24406] bridge0: entered allmulticast mode [ 989.872231][T24342] ip6_vti0 speed is unknown, defaulting to 1000 [ 990.013244][T24427] ªªªªª9 speed is unknown, defaulting to 1000 [ 990.299601][T24430] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4638'. [ 990.360064][T24427] lo speed is unknown, defaulting to 1000 [ 990.385831][T24431] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 990.497213][T24433] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 990.707767][T24431] bond8: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 990.759447][T24431] bond8: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 990.831607][T24450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4639'. [ 991.007490][T24427] ip6_vti0 speed is unknown, defaulting to 1000 [ 991.419592][T24439] ªªªªª9 speed is unknown, defaulting to 1000 [ 992.564393][T24439] lo speed is unknown, defaulting to 1000 [ 993.077075][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.085331][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 993.099844][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 993.185721][T24505] ªªªªª9 speed is unknown, defaulting to 1000 [ 993.313720][T24515] netlink: 'syz.4.4656': attribute type 1 has an invalid length. [ 993.411176][T24517] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4656'. [ 993.458220][T24517] 8021q: adding VLAN 0 to HW filter on device bond5 [ 993.465820][T24439] ip6_vti0 speed is unknown, defaulting to 1000 [ 993.518770][T24515] 8021q: adding VLAN 0 to HW filter on device bond5 [ 993.557487][T24515] bond5: (slave geneve3): making interface the new active one [ 993.573621][T24515] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 993.609579][T22093] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 993.638067][T22093] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 993.661356][T22093] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 993.699171][T22093] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 993.749283][T24521] sock: sock_timestamping_bind_phc: sock not bind to device [ 993.852354][T24505] lo speed is unknown, defaulting to 1000 [ 994.066412][T24527] vlan8: entered promiscuous mode [ 994.071520][T24527] geneve1: entered promiscuous mode [ 994.146537][T24527] vlan8: entered allmulticast mode [ 994.176607][T24527] geneve1: entered allmulticast mode [ 994.793285][T24528] syzkaller0: entered promiscuous mode [ 994.838656][T24528] syzkaller0: entered allmulticast mode [ 995.046044][T24544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 995.085969][T24544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4663'. [ 998.116721][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 998.124875][ C0] lec:lec_tx_timeout: lec0 [ 998.450228][T24505] ip6_vti0 speed is unknown, defaulting to 1000 [ 998.685677][T24557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4666'. [ 998.772334][T24564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4666'. [ 998.797688][T24564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4666'. [ 998.828752][T24564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4666'. [ 998.855634][T24564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4666'. [ 998.944491][T24564] netlink: 'syz.4.4666': attribute type 1 has an invalid length. [ 998.977610][T24564] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4666'. [ 999.261048][T24583] ------------[ cut here ]------------ [ 999.266895][T24583] msk->pm.local_addr_used == 0 [ 999.266928][T24583] WARNING: net/mptcp/pm_kernel.c:1070 at mptcp_pm_nl_del_addr_doit+0xfb1/0x1430, CPU#1: syz.4.4672/24583 [ 999.283204][T24583] Modules linked in: [ 999.287670][T24583] CPU: 1 UID: 0 PID: 24583 Comm: syz.4.4672 Not tainted syzkaller #0 PREEMPT(full) [ 999.297135][T24583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 999.307360][T24583] RIP: 0010:mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 999.313970][T24583] Code: 01 00 00 49 89 c6 e8 7e 4d 29 f6 e9 28 fb ff ff e8 74 4d 29 f6 48 89 df be 03 00 00 00 e8 27 d3 11 f9 eb a4 e8 60 4d 29 f6 90 <0f> 0b 90 e9 ad fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 14 fb ff ff 48 [ 999.333870][T24583] RSP: 0018:ffffc90002797160 EFLAGS: 00010287 [ 999.340302][T24583] RAX: ffffffff8b9c3f30 RBX: 0000000000000000 RCX: 0000000000080000 [ 999.348371][T24583] RDX: ffffc900059a1000 RSI: 0000000000004286 RDI: 0000000000004287 [ 999.356442][T24583] RBP: ffffc900027973b0 R08: ffff88806be71787 R09: 1ffff1100d7ce2f0 [ 999.364657][T24583] R10: dffffc0000000000 R11: ffffed100d7ce2f1 R12: 1ffff1100d7ce2ef [ 999.372958][T24583] R13: ffff8880992ed000 R14: ffff88806be70cc0 R15: ffff88806be71778 [ 999.381073][T24583] FS: 00007f9bdaf866c0(0000) GS:ffff888125566000(0000) knlGS:0000000000000000 [ 999.390291][T24583] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 999.396970][T24583] CR2: 000000110c37b166 CR3: 000000007a114000 CR4: 00000000003526f0 [ 999.405021][T24583] Call Trace: [ 999.408530][T24583] [ 999.411528][T24583] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 999.418090][T24583] ? rcu_is_watching+0x15/0xb0 [ 999.422923][T24583] ? trace_kmalloc+0x2a/0x110 [ 999.427811][T24583] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 999.434245][T24583] genl_family_rcv_msg_doit+0x22a/0x330 [ 999.440098][T24583] ? __asan_memcpy+0x40/0x70 [ 999.444766][T24583] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 999.450980][T24583] ? bpf_lsm_capable+0x9/0x20 [ 999.455716][T24583] ? security_capable+0x7e/0x2c0 [ 999.461287][T24583] genl_rcv_msg+0x61c/0x7a0 [ 999.465954][T24583] ? __pfx_genl_rcv_msg+0x10/0x10 [ 999.471367][T24583] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 999.477641][T24583] ? __lock_acquire+0x6b5/0x2cf0 [ 999.482658][T24583] netlink_rcv_skb+0x232/0x4b0 [ 999.487544][T24583] ? __pfx_genl_rcv_msg+0x10/0x10 [ 999.492638][T24583] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 999.498057][T24583] ? down_read+0x272/0x2e0 [ 999.502530][T24583] ? genl_rcv+0xd/0x40 [ 999.506721][T24583] genl_rcv+0x28/0x40 [ 999.510805][T24583] netlink_unicast+0x80f/0x9b0 [ 999.516852][T24583] ? __pfx_netlink_unicast+0x10/0x10 [ 999.522200][T24583] ? netlink_sendmsg+0x650/0xb40 [ 999.527245][T24583] ? skb_put+0x11b/0x210 [ 999.531548][T24583] netlink_sendmsg+0x813/0xb40 [ 999.536425][T24583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 999.541777][T24583] ? trace_sched_set_need_resched_tp+0x3e/0x160 [ 999.548105][T24583] ? aa_sock_msg_perm+0xf1/0x1b0 [ 999.553194][T24583] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 999.558659][T24583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 999.564005][T24583] ____sys_sendmsg+0xa68/0xad0 [ 999.569330][T24583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 999.574801][T24583] ? import_iovec+0x73/0xa0 [ 999.579440][T24583] ___sys_sendmsg+0x2a5/0x360 [ 999.584186][T24583] ? __pfx____sys_sendmsg+0x10/0x10 [ 999.589492][T24583] ? futex_wake+0x4ac/0x580 [ 999.594092][T24583] ? __fget_files+0x2a/0x420 [ 999.598779][T24583] ? __fget_files+0x3a0/0x420 [ 999.603699][T24583] __x64_sys_sendmsg+0x1bd/0x2a0 [ 999.608828][T24583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 999.614361][T24583] ? rcu_is_watching+0x15/0xb0 [ 999.619271][T24583] do_syscall_64+0x14d/0xf80 [ 999.624008][T24583] ? trace_irq_disable+0x3b/0x150 [ 999.629222][T24583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.635484][T24583] ? clear_bhb_loop+0x40/0x90 [ 999.640903][T24583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.646907][T24583] RIP: 0033:0x7f9bda19c629 [ 999.651548][T24583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 999.671252][T24583] RSP: 002b:00007f9bdaf86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 999.679813][T24583] RAX: ffffffffffffffda RBX: 00007f9bda415fa0 RCX: 00007f9bda19c629 [ 999.687891][T24583] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000a [ 999.696318][T24583] RBP: 00007f9bda232b39 R08: 0000000000000000 R09: 0000000000000000 [ 999.704350][T24583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 999.712480][T24583] R13: 00007f9bda416038 R14: 00007f9bda415fa0 R15: 00007fff9038adb8 [ 999.720633][T24583] [ 999.723899][T24583] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 999.731309][T24583] CPU: 1 UID: 0 PID: 24583 Comm: syz.4.4672 Not tainted syzkaller #0 PREEMPT(full) [ 999.740820][T24583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 999.751019][T24583] Call Trace: [ 999.754699][T24583] [ 999.757689][T24583] vpanic+0x56c/0xa60 [ 999.761730][T24583] ? __pfx__printk+0x10/0x10 [ 999.766358][T24583] ? __pfx_vpanic+0x10/0x10 [ 999.771029][T24583] ? is_bpf_text_address+0x292/0x2b0 [ 999.776359][T24583] ? is_bpf_text_address+0x26/0x2b0 [ 999.781614][T24583] panic+0xc5/0xd0 [ 999.785395][T24583] ? __pfx_panic+0x10/0x10 [ 999.789875][T24583] __warn+0x315/0x4f0 [ 999.793890][T24583] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 999.799820][T24583] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 999.805799][T24583] __report_bug+0x29a/0x540 [ 999.810375][T24583] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 999.816390][T24583] ? __pfx___report_bug+0x10/0x10 [ 999.821483][T24583] ? __lock_acquire+0x6b5/0x2cf0 [ 999.826484][T24583] ? __lock_sock_fast+0x45/0xe0 [ 999.831376][T24583] ? preempt_schedule_thunk+0x16/0x30 [ 999.836866][T24583] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 999.842830][T24583] report_bug+0x16a/0x220 [ 999.847224][T24583] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 999.853259][T24583] ? mptcp_pm_nl_del_addr_doit+0xfb3/0x1430 [ 999.859185][T24583] handle_bug+0x98/0x200 [ 999.863466][T24583] exc_invalid_op+0x1a/0x50 [ 999.867991][T24583] asm_exc_invalid_op+0x1a/0x20 [ 999.872958][T24583] RIP: 0010:mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 999.879580][T24583] Code: 01 00 00 49 89 c6 e8 7e 4d 29 f6 e9 28 fb ff ff e8 74 4d 29 f6 48 89 df be 03 00 00 00 e8 27 d3 11 f9 eb a4 e8 60 4d 29 f6 90 <0f> 0b 90 e9 ad fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 14 fb ff ff 48 [ 999.899357][T24583] RSP: 0018:ffffc90002797160 EFLAGS: 00010287 [ 999.905586][T24583] RAX: ffffffff8b9c3f30 RBX: 0000000000000000 RCX: 0000000000080000 [ 999.913583][T24583] RDX: ffffc900059a1000 RSI: 0000000000004286 RDI: 0000000000004287 [ 999.921576][T24583] RBP: ffffc900027973b0 R08: ffff88806be71787 R09: 1ffff1100d7ce2f0 [ 999.929567][T24583] R10: dffffc0000000000 R11: ffffed100d7ce2f1 R12: 1ffff1100d7ce2ef [ 999.937573][T24583] R13: ffff8880992ed000 R14: ffff88806be70cc0 R15: ffff88806be71778 [ 999.945601][T24583] ? mptcp_pm_nl_del_addr_doit+0xfb0/0x1430 [ 999.951563][T24583] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 999.958023][T24583] ? rcu_is_watching+0x15/0xb0 [ 999.962814][T24583] ? trace_kmalloc+0x2a/0x110 [ 999.967653][T24583] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 999.974277][T24583] genl_family_rcv_msg_doit+0x22a/0x330 [ 999.979866][T24583] ? __asan_memcpy+0x40/0x70 [ 999.984582][T24583] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 999.990706][T24583] ? bpf_lsm_capable+0x9/0x20 [ 999.995496][T24583] ? security_capable+0x7e/0x2c0 [ 1000.000467][T24583] genl_rcv_msg+0x61c/0x7a0 [ 1000.005024][T24583] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1000.010250][T24583] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 1000.016430][T24583] ? __lock_acquire+0x6b5/0x2cf0 [ 1000.021405][T24583] netlink_rcv_skb+0x232/0x4b0 [ 1000.026210][T24583] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1000.031382][T24583] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1000.036845][T24583] ? down_read+0x272/0x2e0 [ 1000.041378][T24583] ? genl_rcv+0xd/0x40 [ 1000.045508][T24583] genl_rcv+0x28/0x40 [ 1000.049616][T24583] netlink_unicast+0x80f/0x9b0 [ 1000.054494][T24583] ? __pfx_netlink_unicast+0x10/0x10 [ 1000.059829][T24583] ? netlink_sendmsg+0x650/0xb40 [ 1000.064829][T24583] ? skb_put+0x11b/0x210 [ 1000.069112][T24583] netlink_sendmsg+0x813/0xb40 [ 1000.073919][T24583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1000.079243][T24583] ? trace_sched_set_need_resched_tp+0x3e/0x160 [ 1000.085515][T24583] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1000.090477][T24583] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1000.095799][T24583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1000.101223][T24583] ____sys_sendmsg+0xa68/0xad0 [ 1000.106045][T24583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1000.111384][T24583] ? import_iovec+0x73/0xa0 [ 1000.115926][T24583] ___sys_sendmsg+0x2a5/0x360 [ 1000.120639][T24583] ? __pfx____sys_sendmsg+0x10/0x10 [ 1000.125872][T24583] ? futex_wake+0x4ac/0x580 [ 1000.130433][T24583] ? __fget_files+0x2a/0x420 [ 1000.135082][T24583] ? __fget_files+0x3a0/0x420 [ 1000.139835][T24583] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1000.144833][T24583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1000.150442][T24583] ? rcu_is_watching+0x15/0xb0 [ 1000.155286][T24583] do_syscall_64+0x14d/0xf80 [ 1000.159966][T24583] ? trace_irq_disable+0x3b/0x150 [ 1000.165043][T24583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.171137][T24583] ? clear_bhb_loop+0x40/0x90 [ 1000.175844][T24583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.181761][T24583] RIP: 0033:0x7f9bda19c629 [ 1000.186219][T24583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1000.205869][T24583] RSP: 002b:00007f9bdaf86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1000.214419][T24583] RAX: ffffffffffffffda RBX: 00007f9bda415fa0 RCX: 00007f9bda19c629 [ 1000.222433][T24583] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000a [ 1000.230521][T24583] RBP: 00007f9bda232b39 R08: 0000000000000000 R09: 0000000000000000 [ 1000.238520][T24583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1000.247114][T24583] R13: 00007f9bda416038 R14: 00007f9bda415fa0 R15: 00007fff9038adb8 [ 1000.255423][T24583] [ 1000.259161][T24583] Kernel Offset: disabled [ 1000.263502][T24583] Rebooting in 86400 seconds..