last executing test programs: 3.77297918s ago: executing program 3 (id=7715): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4) 2.77823238s ago: executing program 3 (id=7726): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000140)=0x60, 0x800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) bind$nfc_llcp(r2, &(0x7f0000000400)={0x27, r3, 0x0, 0x4, 0x0, 0x1, "592e1d98f4f896d48d3e238a8c16a87000d8a48e472b02686e0f76e1df4a47881fc726ef4473680a398aa0d4777929b781c1dcaf3f11aae10786fd5a4f7b91", 0x22}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) getsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, &(0x7f0000000600), &(0x7f0000000640)=0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a090400000000000000000200000038000480340001800900010068617368000000002400028008000640000000000800074000230001080002400000000008000440000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x8c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6}}]}, 0x30}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x9c, 0x4, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x66d}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xae25}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xa5}, 0x24000004) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="10b30ab46cf00e071b62cd6d61982553bde77534f58a301953df68873e45c513f14b839d1248f6f65e93f453bcfeb29fbab5ea8258b7290f51ebaa4d743b09b8b1c486519397634086884d75f79b9ddb851d0f0d3775be7d7236d3022ed7dd810eea800f6b771ffa5cd559ca11829725417734b4d20ba51ac0dbf97c442dff2d0bb29eefb2adbbb78635ed122d54acc71833a597ae6aa13e3018955c2692c0d2079d1061"], 0x20}}, 0x0) 2.59114537s ago: executing program 4 (id=7730): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff07, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc}}}, @IFLA_BROADCAST={0x0, 0x2, @local}, @IFLA_PROMISCUITY={0x0, 0x1e, 0x3}, @IFLA_PORT_SELF={0x0, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "44008b04c8dae9228bea7c067e9f880c"}, @IFLA_PORT_PROFILE={0x0, 0x2, 'ip6tnl\x00'}, @IFLA_PORT_HOST_UUID={0x0, 0x5, "54f67e7dc86ff19a767a7a7318006a84"}, @IFLA_PORT_REQUEST={0x0, 0x6, 0x3}, @IFLA_PORT_HOST_UUID={0x0, 0x5, "98cdd4b9510adaa516715e7b59a2327a"}]}, @IFLA_VFINFO_LIST={0x0, 0x16, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x0, 0xa, {0xf, 0x8}}, @IFLA_VF_TX_RATE={0x0, 0x3, {0x7ff, 0x3d}}, @IFLA_VF_RSS_QUERY_EN={0x0, 0x7, {0xdd, 0x101}}, @IFLA_VF_MAC={0x0, 0x1, {0x3, @broadcast}}, @IFLA_VF_TRUST={0x0, 0x9, {0x4, 0x4}}, @IFLA_VF_RATE={0x0, 0x6, {0x3, 0x8, 0x8}}]}]}]}, 0x3c}}, 0x20004090) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@local, @local, 0xffffffffffffffff, "92bfe85d79bc5f5d8950b64d752ba3f6eaf4e037a4818af3e65036333bd14906", 0x1, 0x6, 0x10001, 0x4}, 0x3c) 2.421499101s ago: executing program 4 (id=7732): r0 = socket(0x10, 0x3, 0x0) accept$nfc_llcp(r0, 0x0, &(0x7f00000000c0)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, @empty, @empty, 0x700, 0x20}}) 2.417315412s ago: executing program 3 (id=7733): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r5, 0x0) recvmsg(r5, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001580)=""/3, 0x3}], 0x1}, 0x10000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8], 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) 1.93399863s ago: executing program 4 (id=7736): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4) 1.798759879s ago: executing program 1 (id=7738): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x23}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) 1.581892626s ago: executing program 3 (id=7739): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x1}, @TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.541659507s ago: executing program 1 (id=7740): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x9e00000000000000) 1.402075112s ago: executing program 2 (id=7742): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000880)={{{@in=@broadcast, @in6=@private2, 0x4e23, 0x4000, 0x0, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x1bd}, {0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x4}, 0xfffbffff, 0x0, 0x1, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x6c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x1, 0x2, 0x0, 0x0, 0x9, 0x100000}}, 0xe8) sendmmsg$inet6(r0, &(0x7f00000090c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0xf7ffff7f00000000) (fail_nth: 1) 1.336652825s ago: executing program 1 (id=7743): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000080)={'wlan1\x00', @random="02001c00004a"}) r2 = socket$netlink(0x10, 0x3, 0x7) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES8, @ANYRES64=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f00000000c0)={r6, 0x6e4, 0x10, 0x6, 0xb1aa}, &(0x7f0000000040)=0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r8, 0x29, 0xd3, 0x0, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="3c000000100009062abd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b5ffa88800000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r10], 0x3c}}, 0x0) r11 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r13, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000000180)=0x8) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500003800000800000190780a010101ac1414aa0305907803000600450000000000000000890000ffffffffe00000021a3f02eb38ad1bf6"], 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000003c0)={r14, 0x58, "22a91843e38076480ea19961bfbad4725aa91a30a532c8367a86bd0a8d5804e2b1def2a577c1ac993ac39a56541bac91bd92a9fa8a683d1ffc8dbc5b952e9b745d128ab3b28c20ec731c6c0db858dc857e510044885428b7"}, &(0x7f00000001c0)=0x60) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r15], 0x5c}}, 0x40) 1.313826736s ago: executing program 3 (id=7744): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @none}, 0xe) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @rand_addr=0x64010100}}, 0x0, 0x0, 0x0, 0x0, 0xce03d4}, 0x9c) listen(r1, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x7b, 0x0, 0x0) sendmsg(r1, &(0x7f0000000240)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x8, @loopback, 0x59f, 0x3}, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)="9443c41badd1fa30936644ab63f9c02480f1b79507e63fa14fc5912c08a0873d291d756a5878f3b692989151358364791a0049af92103771dd7712fff07fbe2f62b3a8690dcb53d358a320e0c648cc25f7d39fdb1492a2f6ff530b83ed5ded98beae7d0aee8f62d7c95e73aed86646bfc12843271a220b9b8fed5518019ceefdee95a0f2d733552808b126e23d6a72010279", 0x92}, {&(0x7f0000000380)="81e7926248bf7fdcc90a70081c35717866ad001662c4a53c2418c7ad879281b1b55caea2fd7d3a36fc9b6700f8836f6e0564e113ef7abe76eb92bd73ee6f9bc882315f1651c61f7ce99b57dfbb876380a23dc8ce3e4c195eff1913be96e8abe65c9fb094618e5883716b89adfbcdb012e3a292f38d54948b72fdc900450cd41593c78c1e90cd77670c045a67fc623ef0bbd13e9199da03e03cfea6d26b5c5142b7282dd15784935e9b6499cbf992eb184747d7f688a385120584a3e581c980896971b8", 0xc3}, {&(0x7f0000000540)="ab9575637f457d8860efcc791bfc1b19a415afd7a4b451e097233aeb88842e7e209f3e19b343eb3d78aa295f7326745fe915bdc5ec9f8536264788cdb88b381f12c0dc9889e81cda2c648be0a4ef32437b663fa2673541771ee20c00c31768734a8d4e9f2e0c93abf7392497d194882ba4d740492644d31df89f4e6daa3672a6857bb3bfd1b7a95492f63d041ef0482a75ddc31a373c5c464feecea06fb6fcd037bce6b0", 0xa4}, {&(0x7f0000000600)="6b400c768b0a41d7fab161c6e336ee20c8ce71df72531fecfa04567aacfa45f33ab4e74d8849e21e72f5c414778b188098e1062817b970740fc893a404a257dae9e3609949956234af306c98104ef57941ac77dc6f2408f3cd1d2a249718e7a99c7651839a051e3a8907a55599e370fc138f462f6dc8e18d4722459dec", 0x7d}, {&(0x7f0000000000)="bc391017f17e20167fb4a404b834b48d9acf88e29a3ceb39735068d3ed289f47ef43f19b5b255cac18", 0x29}], 0x5}, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x54}}, 0x0) 946.691151ms ago: executing program 2 (id=7746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x60800) r1 = socket$netlink(0x10, 0x3, 0x1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) unshare(0x20000400) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x2, &(0x7f0000000040), 0x4) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040100}, 0x20000000) 926.491937ms ago: executing program 0 (id=7747): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xffffffffffffff1b, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 833.491094ms ago: executing program 4 (id=7748): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 762.168209ms ago: executing program 0 (id=7749): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x14, 0xffffffffffffffff, 0x1f00}, 0x48) 735.418881ms ago: executing program 0 (id=7750): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)=@rc, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)="b15c40a02e2374ee28dd4194b2f0a9f295c02faf15cb4e7b166835ce23148bc57a14f547c35e4ba48dd025d03c748175d578b413910e4a7021e35b68a2fed5407966b9726aff0b6512d2e9d991e8ca67aca4ea976d06453ccb918b76f94e254f3a59daa90c060d29ab8d923631af2fb4f63fdfa133d07c4c3663d7ab7d0d02f921692229e5ec1de698ee53d590b03e007132ce3ff42a352cbee8fc7915b47afcd63c6d1f4427e53fbd5f056d58a52bcee8e6c13383dd65e3cbe5c12f9ed890337d1f6ea95e855d17c97c25d79e3e3514a2b9b16165f0979f366df0b9f4d1bbb3e371b8bcdbf17cfd30370d", 0xeb}, {&(0x7f0000000280)="963f761b2cbe9b5df6898709708691304f5b400cd6c696969f95", 0x1a}], 0x2, &(0x7f0000000300)=[{0xe8, 0x102, 0x5, "1f56094098651c211747edd93a66642fc1dc8ae7a2ec27fe3ce3ed3dc29248b6d5b0295a5aa5dc03dec05b7c76da8543118b798247404382e525600812889f1d032aad4f77634877240e9b1111b8297d8106721a092a0ee7ba537041c784255a063441f254fbac2394605bde17f253ff3502b8f25e70c4722035d3455ccadc8620716825845f426ad2be5fbb16e7996d73924205fabecf6dbfaa47fd06b8ea839d21ddc8d7bff6c44cb36cc53aa316dfabb7821e284ea48096c2c2fd2761d9f52534ae76033facc021c4f4d436a0c21f1e67"}], 0xe8}, 0x800) 719.973725ms ago: executing program 1 (id=7751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x5}}}]}, 0x3c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 586.428756ms ago: executing program 2 (id=7752): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x32, 0x10, &(0x7f0000000000)={0x0, 0xf, 0x0, 0x2}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010001b1d00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0400000000000000180012800b000100697036746e6c000008000280040013000800040003000000"], 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0xa, 0x2400000001, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) getsockopt$inet6_buf(r6, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r9, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r9, 0x1) ioctl$SIOCGSTAMPNS(r9, 0x8907, 0x0) recvmmsg(r9, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@empty, 0x4e22, 0x0, 0x4e21, 0x0, 0xa, 0x80, 0xa0, 0x3c, r5, r10}, {0x5, 0x6, 0x7, 0x9, 0x3, 0x5a, 0x8ef8, 0x1}, {0xb, 0x9, 0xd3b, 0x3}, 0x10000, 0x6e6bb4, 0x1, 0x1, 0x1, 0x1}, {{@in=@loopback, 0x4d2, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x36}, 0x3501, 0x3, 0x3, 0x1, 0xde, 0x5, 0x1}}, 0xe8) 451.69277ms ago: executing program 0 (id=7753): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x0, 0xff, 0x0, 0xffc0, 0x3}, 0x0) 353.143508ms ago: executing program 2 (id=7754): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x1}, @TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 257.506901ms ago: executing program 2 (id=7755): socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 245.265326ms ago: executing program 4 (id=7756): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8935, &(0x7f0000000600)={'veth1_to_bridge\x00'}) 186.190177ms ago: executing program 0 (id=7757): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffdb6, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket(0x848000000015, 0x805, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="641912a661000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000370000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000"], 0x64}}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 184.864485ms ago: executing program 1 (id=7758): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x4}]}, @CTA_MARK={0x8}]}, 0xb8}, 0x1, 0xfffff000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@gettaction={0x24, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000054}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 106.307037ms ago: executing program 3 (id=7759): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10002}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) 105.744676ms ago: executing program 4 (id=7760): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 76.66164ms ago: executing program 0 (id=7761): r0 = socket(0x10, 0x3, 0x0) accept$nfc_llcp(r0, 0x0, &(0x7f00000000c0)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @empty, @empty, 0x700, 0x20}}) 53.916831ms ago: executing program 2 (id=7762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)={0x20, r4, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x11d4, r2, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x15}}}}, [@NL80211_ATTR_TID_CONFIG={0x38c, 0x11d, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x7, 0x3}, {0x2, 0xa}, {}, {0x5, 0x8}, {0x3, 0x9}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0x3}, {0x5, 0x3}, {0x7, 0x3}, {0x4, 0x6}, {0x4, 0x6}, {0x4, 0x5}, {0x6, 0xa}, {0x4, 0xa}, {}, {0x1, 0x4}, {0x3}, {0x4, 0x9}, {0x0, 0x7}, {0x2, 0x8}, {0x3, 0x1}, {0x7, 0x4}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xb, 0x5, 0xc, 0x2]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x5, 0x1b, 0x9, 0x2, 0x6, 0xb, 0x0, 0x1, 0x2, 0x9, 0x5, 0x12, 0x4, 0x1, 0x9, 0x5, 0x21, 0x6c, 0x30, 0x4, 0xb, 0x34, 0x36, 0x48, 0x18, 0x60, 0x60, 0x1, 0xb, 0x30]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x60, 0x2, 0xb, 0x48, 0xb, 0x3]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x6, 0x2}, {0x7, 0x3}, {0x2, 0x1}, {0x1, 0x2}, {0x5, 0x7}, {0x7, 0x8}, {0x0, 0x2}, {0x3, 0x4}, {0x4, 0x9}, {0x4, 0x9}, {0x2, 0x3}, {0x3, 0x9}, {0x5, 0x3}, {0x5, 0x4}, {0x3}, {0x1, 0x2}, {0x3, 0x1}, {0x4, 0x9}, {0x1, 0x6}, {0x0, 0x4}, {0x5, 0x1}, {0x5, 0x6}, {0x1, 0x2}, {0x2, 0x4}, {0x7, 0xa}, {0x6}, {0x5}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0xa}, {0x2, 0x5}, {0x7, 0x5}, {0x6, 0x1}, {}, {0x5, 0x2}, {0x0, 0x3}, {0x3, 0x1}, {0x1, 0x9}, {0x2, 0x9}, {0x2, 0x1}, {0x2, 0x8}, {0x1, 0x6}, {0x4, 0x3}, {0x1, 0x1a}, {0x7, 0x5}, {0x5, 0x6}, {0x2, 0x9}, {0x7, 0xa}, {0x6}, {0x0, 0x1}, {0x5, 0x3}, {0x3, 0x8}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1b, 0x46, 0xb, 0x24, 0x36, 0xb, 0x3, 0x18, 0x3, 0xc, 0x6, 0x12, 0xc, 0x36, 0xb, 0x6, 0x12, 0x2, 0x48, 0x12, 0x18, 0x18, 0x2, 0x9, 0x18, 0x24, 0x12, 0x6, 0x0, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa00, 0x5, 0x4, 0x0, 0x7, 0x4, 0xe, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2d}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x78}]}, {0x208, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7b}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x81}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7f, 0x1, 0x85, 0xbcb0, 0x3, 0xb, 0x1]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x0, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x144, 0xb852, 0xfffe, 0x6, 0x0, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x29c1, 0x7, 0x8, 0x4, 0x8, 0x40, 0x2, 0xffff]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x2, 0x8}, {0x7, 0x7}, {0x0, 0x6}, {0x3, 0x5}, {0x7, 0x7}, {0x5, 0x1}, {0x0, 0x1}, {0x6, 0x6}, {0x6, 0x8}, {0x0, 0x4}, {0x4, 0x6}, {0x4, 0x8}, {0x4, 0x6}, {0x5, 0x5}, {0x3}, {0x3, 0x1}, {0x6, 0x2}, {0x1, 0x1}, {0x0, 0x2}, {0x3, 0x6}, {0x7, 0x6}, {0x7, 0x2}, {0x5, 0x7}, {0x5, 0x3}, {0x5, 0x5}, {0x3, 0x3}, {0x4, 0x9}, {0x0, 0x9}, {0x1, 0x7}, {0x1, 0x9}, {0x3, 0x4}, {0x6}, {0x2, 0x8}, {0x1, 0x8}, {0x2, 0x6}, {0x7, 0xa}, {0x5, 0x4}, {0x7, 0x4}, {0x6, 0x5}, {0x1}, {0x2, 0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x3}, {0x0, 0x2}, {0x4, 0x5}, {}, {0x7}, {0x4, 0xa}, {0x3, 0x7}, {0x1, 0xa}, {0x1, 0x3}, {0x5, 0x3}, {0x2, 0x9}, {0x4, 0x7}, {0x2, 0x4}, {0x1, 0x2}, {0x1}, {0x0, 0x1}, {0x7, 0x9}, {0x7}, {0x7, 0x7}, {0x5, 0x7}]}]}, @NL80211_BAND_6GHZ={0xe8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0xa}, {0x2, 0x6}, {0x1, 0x1}, {0x3, 0x6}, {0x2, 0x2}, {0x0, 0x5}, {0x6, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x0, 0x3}, {0x1}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0x4}, {0x1, 0x1}, {0x3, 0x4}, {0x2, 0x4}, {0x2, 0x7}, {0x0, 0x4}, {0x3, 0x9}, {0x4, 0x9}, {0x5, 0x7}, {0x3, 0x7}, {0x0, 0x6}, {0x0, 0x8}, {0x1}, {0x0, 0x2}, {0x4}, {0x0, 0x1}, {0x0, 0x3}, {0x0, 0xa}, {0x4, 0x3}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x6}, {0x3, 0x9}, {0x6, 0x2}, {0x5, 0x9}, {0x2, 0xa}, {0x0, 0x8}, {0x5, 0x2}, {0x5, 0x9}, {0x1, 0x7}, {0x2, 0x4}, {0x5, 0x9}, {0x6}, {0x4, 0x2}, {0x3, 0x7}, {0x3, 0x5}, {0x3}, {0x5, 0x8}, {0x6, 0xa}, {0x5}, {0x7, 0x6}, {0x4, 0x2}, {0x1, 0x7}, {0x2, 0x2}, {0x6, 0xa}, {0x1, 0x4}, {0x1}, {0x6, 0x3}, {0x6, 0xa}, {0x1, 0x6}, {0x5, 0x4}, {0x1, 0x3}, {0x4, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3bc8, 0x9, 0x81, 0x8, 0x1, 0x3ff, 0x1, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0xf9d, 0x6, 0x4, 0x401, 0xffff, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x1e18, 0xa7, 0x9, 0x1ff, 0x800, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1c0, 0x2, 0xffff, 0x5, 0x7, 0x1, 0x3, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x2, 0xc, 0x6, 0x1, 0x2, 0x2, 0x4, 0x36, 0x4, 0x24, 0xb, 0x1, 0x15, 0x1, 0x5]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x5, 0x2}, {0x7, 0x6}, {0x6, 0x4}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x5}, {0x2}, {0x1, 0x1}, {0x0, 0x6}, {0x0, 0x4}, {0x7, 0x5}, {0x5, 0x7}, {0x1, 0x8}, {0x2, 0x7}, {0x1, 0x7}, {0x2}, {0x1, 0xa}, {0x1, 0x4}, {0x2, 0x9}, {0x5, 0x6}, {0x3, 0x6}, {0x4, 0x7}, {0x3, 0x2}, {0x0, 0xa}, {0x3, 0x8}, {0x1, 0x6}, {0x4, 0x9}, {0x0, 0x8}, {0x3, 0x5}, {0x1, 0x9}, {0x5}, {0x3, 0x8}, {0x5, 0x2}, {0x7, 0x6}, {0x4, 0x4}, {0x0, 0x9}]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x1b, 0x16, 0x3, 0x5, 0x1b, 0x16, 0x2, 0x30, 0x30, 0xb, 0x5, 0x30, 0x24, 0xc, 0xc, 0x5, 0x0]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x988, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xad}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xdd}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xdb7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x468, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x27c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x233, 0x2, 0x1, 0x9, 0x8, 0xfcdd, 0x411e, 0x2]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x18e4, 0x3, 0x6, 0x8, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6, 0x48, 0xc, 0x72b8edeb9f88f1d8, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x8000, 0x400, 0x7, 0x0, 0x0, 0x800]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x8, 0x200, 0x6, 0xa35, 0x7, 0x5]}}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x4, 0xa}, {0x6, 0x3}, {0x4, 0x8}, {0x5, 0x4}, {0x7, 0x3}, {0x4, 0x6}, {0x3, 0x8}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x3}, {0x5, 0x1}, {0x1, 0xa}, {0x0, 0x9}, {0x6, 0x8}, {0x7, 0x6}, {0x0, 0x1}, {0x5, 0x9}, {0x1}, {0x3, 0x9}, {0x1, 0x5}, {0x3, 0x5}, {0x0, 0x8}, {0x1, 0x7}, {0x5, 0x4}, {0x0, 0x2}, {0x6, 0x7}, {0x0, 0x7}, {0x4, 0x1}, {0x3, 0x3}, {0x4}, {0x1, 0x5}, {0x6, 0x7}, {0x5, 0x4}, {0x3, 0x3}]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x6, 0x1}, {0x0, 0x6}, {0x3, 0x9}, {0x3, 0x4}, {0x1, 0x6}, {0x5, 0x8}, {0x1, 0x1}, {}, {0x0, 0x3}, {0x7}, {0x6, 0x9}, {0x5, 0x1}, {0x7}, {0x6}, {0x2, 0x4}, {0x5, 0x5}, {0x0, 0xa}, {0x6, 0x6}, {0x4, 0x5}, {0x0, 0x7}, {0x7, 0x6}, {0x4, 0x7}, {0x1, 0x4}, {0x0, 0x3}, {0x0, 0x5}, {0x1, 0x8}, {0x5, 0x6}, {0x2, 0x3}, {0x7, 0x6}, {0x4, 0x6}, {0x5, 0x5}, {0x5, 0x3}, {0x5, 0xa}, {0x6, 0x9}, {0x7, 0x2}, {0x1, 0x1}, {0x4, 0x4}, {0x4, 0x6}, {0x0, 0x6}, {0x0, 0x8}, {0x2, 0x1}, {0x7}, {0x0, 0x8}, {0x1, 0x1}, {0x6, 0x3}, {0x3, 0xa}, {0x1, 0x5}, {0x6, 0x6}, {0x4, 0x2}, {0x0, 0x6}, {0x1, 0x5}, {0x4, 0x4}, {0x6, 0x9}, {0x6, 0x9}, {0x0, 0xa}, {0x0, 0x2}, {0x4, 0x9}, {0x2, 0x8}, {0x0, 0x7}, {0x0, 0x3}, {0x6, 0xa}, {0x7, 0x9}, {0x4, 0x4}, {0x3, 0x1}, {0x3}, {0x7, 0x7}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6c, 0x36, 0x3, 0x12, 0x65, 0x6c, 0xc, 0x36, 0x36, 0x3, 0x36, 0x3c, 0x36, 0xc, 0x60, 0xe0, 0x2, 0xc, 0xb, 0x1, 0x48, 0xb, 0x30, 0x6, 0x6c, 0x48, 0x4, 0x1b, 0xb, 0x3]}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x5, 0x5, 0x5, 0x0, 0xf, 0xf000, 0x7a]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x7, 0xa}, {0x1, 0x9}, {0x2, 0x9}, {0x1, 0xa}, {0x7, 0x2}, {0x3, 0x6}, {0x1, 0x2}, {0x5, 0x6}, {0x6, 0x6}, {0x3, 0x9}, {0x4, 0x9}, {0x1, 0x4}, {0x0, 0x1}, {0x5, 0xa}, {0x2, 0x5}, {0x0, 0x2}, {0x3, 0x3}, {0x7, 0x2}, {0x4, 0xa}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x0, 0xa}, {0x4, 0x7}, {0x7, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x6, 0x7}, {0x6, 0x2}, {0x1, 0x9}, {0x7, 0x3}, {0x5, 0x4}, {0x0, 0x7}, {0x6, 0x9}, {0x0, 0xa}, {0x7, 0x2}, {0x0, 0x3}, {0x2, 0x4}, {0x5, 0x1}, {0x0, 0xa}, {0x0, 0x7}, {0x5, 0x3}, {0x1}, {0x5, 0x5}, {0x4, 0x5}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x1}, {0x7, 0xa}, {0x0, 0x1}, {}, {0x1, 0x9}, {0x2, 0x7}, {0x0, 0x1}, {0x6, 0x2}, {0x0, 0x5}, {0x1, 0x8}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x2}, {0x3}, {0x5, 0x9}, {0x5, 0x4}, {0x1, 0x8}]}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff7f, 0x401, 0x4, 0x3, 0xff01, 0xd9a, 0x3, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7ff, 0xc, 0x2, 0x7, 0xb87, 0x2, 0x800]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x2, 0x5, 0x0, 0x16, 0xc, 0x16, 0x60, 0x5, 0x24, 0x1, 0x18, 0x6, 0x30, 0x36, 0x48, 0x36, 0x1, 0xc, 0x30, 0x1b, 0x3a, 0x30, 0x1b, 0x60, 0x2, 0x24, 0x1b, 0x48, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x31, 0x1, 0xb25, 0x2, 0x3, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6a6, 0x6, 0x27e, 0x4, 0x7f0, 0x10, 0x1]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x2}, {0x0, 0xa}, {0x7, 0x6}, {0x2}, {0x7}, {0x5, 0x5}, {0x1, 0x5}, {0x2, 0x8}, {0x7, 0x2}, {0x7, 0x1}, {0x6, 0x2}, {0x2, 0x8}, {0x0, 0x4}, {0x6, 0xa}, {0x5, 0x1}, {0x7, 0x7}, {0x5, 0x9}, {0x4}, {0x1, 0x7}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x5}, {0x4, 0x6}, {0x0, 0x2}, {0x7, 0x9}, {0x4, 0x2}, {0x1, 0x6}, {0x6, 0x4}, {0x0, 0x3}, {0x5, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x3, 0x4}, {0x3, 0x6}, {0x4, 0x6}, {0x7, 0x2}, {0x1, 0x3}, {0x0, 0x3}]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x7f, 0x7, 0x1, 0x81, 0x7fff, 0x2, 0x6]}}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfd00, 0xa, 0xcacd, 0xfffc, 0x4, 0x8001, 0xdc5f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0xb, 0x12, 0x18, 0x6, 0xb, 0x30, 0x24, 0x9, 0x3, 0xc, 0x16, 0x16, 0x9, 0xb, 0x24]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x2, 0x6}, {0x1, 0xa}, {0x5, 0x4}, {0x2, 0x2}, {0x1, 0x4}, {0x7, 0x6}, {0x5, 0x3}, {0x0, 0x9}, {0x7, 0xa}, {0x1, 0x2}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x0, 0x5}, {0x2, 0x7}, {0x7}, {0x4, 0x5}, {0x5, 0x4}, {0x4, 0x4}, {0x6, 0x5}, {0x1, 0x5}, {0x1, 0x5}, {0x0, 0x5}, {0x6, 0x8}, {0x4, 0x6}, {0x4, 0x8}, {0x1, 0x8}, {0x2, 0x8}, {0x3, 0x8}, {0x4, 0x8}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x24, 0x2b085993ccfc23c6, 0x1, 0x6, 0x4, 0x1b, 0x24, 0x30, 0x6c, 0x36, 0xc, 0x5, 0x5, 0x2, 0x1b, 0xb, 0x5, 0x9, 0x6, 0x9, 0x5, 0x4, 0x0]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x1, 0x4, 0x0, 0x1, 0x800, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x8, 0xfd5, 0x4, 0x8, 0x7, 0xc66a]}}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x80, 0x6, 0x5, 0x2, 0xfc3d, 0x7, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xffff, 0x80, 0x8, 0x7f, 0x3ff, 0x8, 0x2]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x4, 0x12, 0xb, 0x1b, 0x12, 0x6c, 0x9, 0x1, 0x48, 0x30, 0x4, 0x6, 0x1b, 0x16, 0x24, 0x2, 0x48, 0x2, 0x1, 0x15, 0xc, 0x48, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x60, 0x36]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8, 0x8000, 0xd6, 0xdc, 0x6, 0x52]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x200, 0x6, 0x2, 0x1, 0x9, 0x4, 0xb77]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x44, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xfff, 0xfff, 0x9, 0x3, 0x8, 0x34d, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x50, 0x36, 0x3, 0x18, 0x6, 0x16, 0x48, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x69}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbe}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x9fa, 0xaa53, 0xd, 0x5, 0x9, 0x4, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0xfff, 0x1b1, 0x0, 0x0, 0x90, 0x5e4b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x4, 0x4, 0xe1, 0x53e, 0x1, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6da, 0x7, 0x0, 0x8, 0x200, 0x71, 0x1, 0x8]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x36, 0x30, 0xc, 0x6c, 0x16, 0x6, 0x5, 0x5, 0x9, 0x4, 0x24, 0x9, 0xc, 0x16, 0xc, 0x18, 0x60, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x5, 0x30, 0x36, 0x30, 0xc3f3e1dd6cbed15e, 0x9, 0x1, 0x1b, 0xb, 0x2, 0x60, 0x2, 0xb, 0x48, 0x48, 0x18, 0xc, 0x5]}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x288, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1, 0x48, 0xb427fa6780ac7128, 0x1, 0x6c, 0x4, 0x16, 0x60, 0x36, 0xc, 0x12, 0x1b, 0x36, 0x3, 0x0, 0x18, 0x1, 0x36, 0x4, 0x6c, 0x6, 0x12, 0x6, 0x30, 0x4, 0x16, 0x1, 0x18]}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x0, 0x5, 0x0, 0x9e1, 0x3, 0x2, 0x80]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x36, 0x3, 0x1, 0x48, 0x5, 0x16, 0x9, 0x6, 0x32, 0x36, 0x9, 0xc, 0x1, 0x4f, 0x6c, 0x3, 0x2, 0x1, 0x18, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x4, 0x12, 0x6, 0x4, 0x32, 0xc, 0x24, 0x5, 0x9, 0x4, 0x60, 0x5, 0x59, 0x9, 0x16, 0x2, 0xc, 0x16, 0x2, 0x18, 0x18, 0x18, 0x18, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x5, 0x4, 0x29d8, 0x7, 0x4, 0x4]}}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x4, 0x12, 0x48, 0x5, 0x6, 0x1, 0x24, 0x9, 0x36, 0x6c, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x4}, {0x3, 0x7}, {0x3, 0x3}, {0x4, 0x8}, {0x1}, {0x5}, {0x0, 0x5}, {0x7, 0x5}, {0x1, 0x7}, {0x7, 0x3}, {0x0, 0x5}, {0x0, 0x8}, {0x2, 0x6}, {0x1, 0x1}, {0x4, 0x3}, {0x2, 0x5}, {0x3, 0x7}, {0x0, 0x3}, {0x6, 0x8}, {0x6, 0x9}, {0x5, 0x9}, {0x0, 0x4}, {0x6, 0x1}, {0x0, 0x5}, {0x1, 0xa}, {0x3, 0x9}, {0x5}, {0x7, 0x9}, {0x7, 0x6}, {0x0, 0x5}, {0x0, 0x2}, {0x7, 0x3}, {0x5, 0x7}, {0x4, 0x6}, {0x1, 0x8}, {0x1, 0xa}, {0x2, 0x5}, {0x0, 0x6}, {0x2, 0x4}, {0x5, 0x2}, {0x7, 0xa}, {0x3, 0x7}, {0x5, 0x7}, {0x3, 0x2}, {}, {0x5, 0x1}, {0x2, 0x7}, {0x7, 0x5}, {0x5, 0x3}, {0x6, 0x4}, {0x3}, {0x2, 0x9}, {0x3, 0x3}, {0x6, 0x9}, {0x3, 0x2}, {0x0, 0x4}, {0x7, 0x6}, {0x7, 0x8}, {0x3, 0x6}, {0x1, 0x3}, {0x6, 0x5}, {0x3, 0x6}, {0x7, 0x2}, {0x5, 0x2}, {0x4, 0xa}, {0x6, 0x7}, {0x6, 0x2}, {0x3, 0xa}, {0x2, 0x3}, {0x6, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x6, 0x586, 0x3e17, 0x6, 0x3ff, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x3ff, 0x4, 0x7, 0x2, 0x1000, 0xe6]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x6}, {0x6, 0x3}, {0x6, 0x8}, {0x1, 0x6}, {0x4, 0x5}, {0x3, 0x4}, {0x5, 0x2}, {0x5, 0x6}, {0x4}, {0x7, 0x9}, {0x4, 0x8}, {0x6, 0x5}, {0x1, 0x7}, {0x7, 0x7}, {0x6, 0x5}, {0x1, 0x6}, {0x1, 0x4}, {0x7, 0x1}, {0x6, 0x2}, {0x6, 0x5}, {0x6, 0x4}, {0x7, 0x5}, {0x7, 0xa}, {0x0, 0xa}, {0x3}, {0x1, 0xa}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x5}, {0x5, 0x9}, {0x6, 0x1}, {0x1, 0xa}, {0x5, 0x8}, {0x0, 0x9}, {0x6, 0x3}, {0x2, 0x2}, {0x7, 0x3}, {0x5, 0xa}, {0x6, 0x4}, {0x6, 0x4}, {0x3, 0x9}, {0x2, 0x2}, {0x5, 0x8}, {0x1}, {0x2, 0x1}, {0x4, 0x5}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x7, 0xa}, {0x5, 0x9}, {0x6, 0x4}, {0x1, 0x7}, {0x2, 0x9}, {0x4, 0x5}, {0x7, 0xa}, {0x5, 0x2}, {0x2, 0x7}, {0x4, 0xa}, {0x0, 0x9}, {0x1, 0x4}, {0x2, 0x3}, {0x1, 0x2}, {0x3, 0x2}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x6}, {0x4}, {0x6, 0x7}, {0x1, 0x9}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0x6}, {0x5, 0x6}, {0x0, 0x4}, {0x6, 0x2}, {0x7, 0x9}, {0x2, 0x2}, {0x1, 0x8}]}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x48, 0x18, 0x0, 0x0, 0x24, 0x48, 0x36, 0x2, 0x60, 0x3, 0x4, 0xb, 0x4, 0x30, 0x36, 0x1, 0x48, 0x18, 0x48, 0x12, 0x18, 0x1, 0x4c, 0x30, 0x30, 0x16, 0x30, 0x3, 0x2, 0x48, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xffff, 0x7000, 0xc2bb, 0x2, 0x5, 0x3, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6, 0xb2d25db810602473, 0x6, 0x1b, 0x6, 0x12, 0x3, 0xc, 0x82d8274ac5ced5aa, 0x16, 0x18, 0x24, 0x4, 0xb, 0x16, 0x6c, 0x4, 0x69, 0x60, 0x30, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x72}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x61}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}]}, {0xf0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x7, 0x1ff, 0xd, 0x9, 0x8, 0x8, 0x400]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x31, 0x65, 0x10fa, 0x2, 0xb, 0x469, 0x5, 0xfffd]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x30, 0x30, 0x36, 0x36, 0x6c, 0x30, 0xb, 0x1b, 0x4, 0x3, 0x36, 0x18, 0x48, 0x5, 0x24, 0x60, 0x60, 0x1, 0x36, 0x6c, 0x79]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x6, 0x2}, {0x0, 0x8}, {0x5, 0x8}, {0x5, 0x1}, {0x1, 0x2}, {0x0, 0x1}, {0x2, 0x8}, {0x7, 0xa}, {0x3, 0x3}, {0x0, 0x8}, {0x1, 0xa}, {0x0, 0x7}, {0x5, 0x6}, {0x0, 0xa}, {0x2, 0x4}, {0x4, 0x2}, {0x2, 0xa}, {}, {0x0, 0x3}, {0x0, 0x3}, {0x1, 0xa}, {0x0, 0x9}, {0x4, 0x3}, {0x7, 0xa}, {0x4, 0x4}, {0x4, 0x6}, {0x1, 0x9}, {0x6, 0x3}]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0x5}, {0x0, 0xa}, {0x1, 0x4}, {0x1, 0x5}, {0x0, 0x9}, {0x5, 0xa}, {0x0, 0x2}, {0x7, 0x2}, {0x3, 0x3}, {0x2, 0x6}, {0x5, 0x5}, {0x3, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x5, 0x5}, {0x4, 0x7}, {0x5, 0xa}, {0x4, 0x7}, {0x0, 0x9}, {0x6, 0x7}, {0x6, 0x7}, {0x1, 0x9}, {0x3, 0x1}, {0x2, 0x3}, {0x0, 0x4}, {0x0, 0x8}, {0x6, 0xa}, {0x2}, {0x1, 0x1}, {0x7, 0x4}, {0x0, 0x3}, {0x7, 0x3}, {0x5, 0x3}, {0x0, 0x2}, {0x0, 0x9}, {0x4}, {0x2, 0x1}, {}, {0x7, 0x3}, {0x1, 0x2}, {0x1, 0x2}, {0x3, 0x1}, {0x4}, {0x7, 0x8}, {0x2, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0xff29, 0xd, 0x2bf8, 0x8, 0x9f92]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff9}]}]}, @NL80211_ATTR_TID_CONFIG={0x498, 0x11d, 0x0, 0x1, [{0x1ac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x93}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x160, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6c, 0x5, 0x24, 0x19, 0x18, 0x3, 0x1b, 0xc, 0x5, 0x60, 0x60, 0x5f, 0x48, 0x1b, 0x6, 0x2, 0x3, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x33, 0x60, 0x3a, 0x0, 0x16, 0x4, 0x10, 0x18, 0x6c, 0x3, 0xc, 0xb, 0x4, 0x0, 0x6c, 0x4, 0xc, 0x5, 0x6c, 0x24, 0x3, 0x1, 0x3, 0x9, 0xe]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xc, 0x18, 0x36, 0x0, 0x48, 0x2b, 0x30, 0x60, 0x6, 0x4, 0xc, 0x3, 0x4, 0x6c]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x4, 0x9, 0x2, 0x2]}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x3, 0x4}, {0x2, 0x9}, {0x4, 0xa}, {0x7, 0x1}, {0x6, 0x2}, {0x6, 0x9}, {0x6, 0x6}, {0x4, 0xa}, {0x7, 0x6}, {0x3, 0xa}, {0x6, 0x7}, {0x2, 0x4}, {0x7, 0x7}, {0x0, 0x6}, {0x4, 0x5}, {0x1, 0x7}, {0x1, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x4}, {0x1, 0x4}, {0x3, 0x9}, {0x5, 0x8}, {0x7}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1, 0x18, 0x6, 0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x4, 0x9}, {0x0, 0x9}, {0x0, 0xa}, {0x4, 0x9}, {0x3, 0x4}, {0x3, 0x8}, {0x0, 0x1}, {0x1, 0x4}, {0x1, 0x4}, {0x6, 0x8}, {0x3, 0x5}, {0x1, 0x7}, {0x4}, {0x2, 0x1}, {0x2, 0x8}, {0x5, 0x8}, {0x5, 0x1}, {0x4}, {0x4, 0x5}, {0x4, 0x2}, {0x3, 0x6}, {0x2, 0xa}, {0x6}, {0x0, 0x2}, {0x4, 0x7}, {0x7, 0x8}, {0x5, 0x2}, {0x5, 0x9}, {0x2, 0x6}, {}, {0x2, 0x3}, {0x5, 0x1}, {0x6, 0x9}, {0x0, 0x6}, {0x0, 0x6}, {0x0, 0x3}, {0x7, 0x6}, {0x5, 0x6}, {0x6, 0x9}, {0x2, 0x5}, {0x7, 0x5}, {0x7, 0x8}, {0x0, 0x3}, {0x5, 0x7}, {0x1, 0x2}, {0x2, 0x4}, {0x7, 0x9}, {0x6, 0x5}, {0x0, 0x5}, {0x7, 0xa}, {0x4, 0x9}, {0x5, 0xa}, {0x3}, {0x1, 0xa}, {0x2, 0x6}, {0x5, 0x1}, {0x1, 0x3}, {0x1, 0xa}, {0x5, 0x4}, {0x6, 0x8}, {0x6, 0x5}, {0x3, 0x6}, {0x3, 0x8}, {0x2, 0xa}, {0x5, 0x7}, {0x2, 0x6}, {0x6, 0x1}, {0x2, 0x5}, {0x1}, {0x5}, {0x7, 0xa}, {0x1, 0x2}, {0x2, 0x5}, {0x5}, {0x2, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc3, 0x8, 0x47d, 0xb, 0x1, 0x7, 0x6, 0x9]}}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xa3, 0x6be, 0x7, 0xc, 0x0, 0x7f, 0x4]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xc, 0x1, 0x30, 0x18, 0x2, 0x24, 0x30, 0x7b, 0x24, 0x5, 0xc, 0x1, 0x1, 0x2, 0x16, 0xc, 0x60, 0x30, 0x60, 0xc, 0xc, 0x3, 0x5, 0x4, 0x60, 0x36, 0x30, 0x5, 0x36, 0x30, 0x0, 0x0]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x1d4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2e, 0x800, 0xa, 0xfffa, 0x0, 0x9, 0x9, 0xfff]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x124, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x5}, {0x3, 0x8}, {0x3, 0x4}, {0x2, 0xa}, {0x5, 0x2}, {0x4, 0x4}, {0x3, 0x4}, {0x7, 0x3}, {0x7, 0x7}, {0x1, 0x9}, {0x7, 0x7}, {0x0, 0x2}, {0x3}, {0x4, 0x1}, {0x3, 0x8}, {0x0, 0xa}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x7}, {0x7, 0xa}, {0x0, 0x7}, {0x2, 0x3}, {}, {0x2, 0x3}, {0x0, 0x2}, {0x7, 0x1}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x7}, {0x7, 0x9}, {0x6, 0x8}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x9}, {0x5, 0x7}, {0x4, 0x4}, {0x5, 0x7}, {0x0, 0x9}, {0x5, 0x1}, {0x2, 0x5}, {0x1, 0x8}, {0x6, 0x6}, {0x4, 0x1}, {0x5, 0xa}, {0x3}, {0x3, 0x1}, {0x1, 0x8}, {0x6, 0x2}, {0x0, 0x4}, {}, {0x6, 0x7}, {0x2, 0x6}, {0x1}, {0x1, 0x1}, {0x2, 0x4}, {0x4, 0x6}, {0x7, 0x6}, {0x7, 0x4}, {0x3, 0x4}, {0x7, 0x3}, {0x1, 0x2}, {0x1, 0x1}, {0x5, 0x9}, {0x1, 0x8}, {0x6, 0x8}, {0x6, 0x6}, {0x5, 0x6}, {0x3, 0xa}, {0x2, 0x6}, {0x5, 0x1}, {0x1}, {0x1, 0x9}, {0x7, 0x4}, {0x2, 0x8}, {0x7}, {0x6, 0x1}, {0x1, 0x8}, {0x1, 0xa}, {0x4, 0x1}, {0x3, 0x8}, {0x6, 0x3}, {0x2, 0x4}, {0x7, 0x2}, {0x4, 0xa}, {0x3, 0x2}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x3, 0x6}, {0x5, 0x9}, {0x1, 0x5}, {0x4, 0x3}, {0x3, 0x7}, {0x1, 0x8}, {0x0, 0x1}, {0x2, 0x5}, {0x0, 0x7}, {0x6, 0x1}, {0x7}, {0x3, 0x8}, {0x6, 0x3}, {0x3, 0xa}, {0x4}, {0x1, 0x1}, {0x0, 0x7}, {0x7, 0x7}, {0x2, 0xa}, {0x5, 0x6}, {0x0, 0xa}, {}, {0x0, 0x6}, {0x7, 0x1}, {0x2, 0x3}, {0x0, 0x6}, {0x3, 0x9}, {0x5, 0x7}, {0x2, 0xa}, {0x2, 0x9}, {0x7, 0x1}, {0x6, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x6}, {0x7, 0x8}, {0x0, 0x2}, {0x4, 0x8}, {0x6, 0x2}, {0x2, 0xa}, {0x1, 0x2}, {0x3, 0x4}, {0x0, 0x6}, {0x5, 0x8}, {0x1, 0x1}, {0x2, 0x5}, {0x1, 0x6}, {0x3, 0x2}, {0x2, 0xa}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x6, 0x1}, {0x0, 0x3}, {0x0, 0x7}, {0x6, 0x4}, {0x7, 0x5}, {0x0, 0x1}, {0x0, 0x9}, {0x6, 0x4}, {0x6, 0x2}, {0x5, 0x4}, {0x6, 0x2}, {0x4, 0xa}, {0x6, 0x1}, {0x3, 0x9}, {0x5, 0x9}, {0x5, 0x2}, {0x6, 0x2}, {0x3, 0x5}, {0x1, 0xa}, {}, {0x0, 0x3}, {0x6, 0x8}, {0x1}, {0x3, 0x4}, {0x7, 0x1}, {0x1, 0x6}, {0x4, 0x7}, {0x3, 0x5}, {0x6, 0x7}, {0x2, 0x9}, {0x7, 0x4}, {0x7, 0x3}, {0x2}, {0x6, 0x7}, {0x1, 0x1}, {}, {0x0, 0x8}, {0x6, 0x3}, {0x0, 0x2}, {0x2, 0x8}, {0x7, 0x7}, {0x7, 0x2}, {0x0, 0x1}, {0x1, 0x4}, {0x7, 0x8}, {0x0, 0x9}, {0x1, 0x9}, {0x3, 0x8}, {0x7, 0x8}, {0x7}, {0x6, 0x9}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x10, 0xbfd, 0x7, 0x20, 0x2, 0xe5e0]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x1, 0x1a}, {0x0, 0x9}, {0x7}, {0x4, 0x2}, {0x1, 0x5}, {0x7}, {0x7}, {0x2, 0x4}, {0x0, 0xa}, {0x3}, {0x6, 0x2}, {0x5, 0x3}, {0x7, 0x6}, {0x7, 0x6}, {0x1, 0x1}, {0x1, 0x7}, {0x7, 0x9}, {0x5}, {0x6, 0x3}, {0x0, 0x5}, {0x3}, {0x6}, {0x0, 0x7}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x5}, {0x0, 0x4}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x3, 0x5}, {0x2, 0x1}, {0x7, 0x8}, {0x7, 0x2}, {0x2, 0x4}, {0x0, 0x4}, {0x1}, {0x2, 0x3}, {}, {0x6}, {0x4, 0x8}, {0x0, 0x9}, {0x2, 0x9}, {0x0, 0x2}, {0x6, 0x1}, {0x4, 0x4}, {0x6, 0x2}, {0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x6, 0x7}, {0x2, 0x9}, {0x3, 0x6}, {0x2, 0x3}, {0x2, 0x6}, {0x6, 0x6}, {0x4, 0x1}, {0x5, 0x2}, {0x0, 0x3}, {0x0, 0x8}, {0x1, 0x7}, {}, {0x2, 0x2}, {0x5, 0x5}, {0x1, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x6f, 0x7d1, 0xff92, 0x807, 0x2, 0x5]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xc, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x400, 0x7fff, 0xfffb, 0xf, 0xff81, 0x0, 0x7e]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1c}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x400}]}, {0xd4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80000001}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x60}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x9c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xa, 0xfb75, 0x10, 0x8, 0x5, 0x9, 0x6]}}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x97, 0x5, 0xa0, 0x8001, 0xa, 0x8527, 0x1, 0x2]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x2, 0x24, 0x4, 0x6, 0x2, 0x5, 0x5, 0x3, 0x9, 0x4, 0x5, 0x74, 0x6, 0x30, 0x3, 0x24, 0x74, 0x36, 0x16, 0x60, 0x36, 0x6, 0xb, 0x1b, 0x18, 0x6c, 0xb, 0xb]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x7}, {0x6}, {0x4, 0x4}, {0x2, 0x3}, {0x4, 0x7}, {0x6, 0x9}, {0x5, 0x3}, {0x4, 0x9}, {0x6, 0x2}, {0x6, 0x5}, {0x0, 0x7}, {0x3, 0x6}, {0x6, 0x3}, {0x1, 0x9}, {0x2, 0x2}, {0x0, 0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x6}, {0x7, 0xa}, {0x0, 0xa}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x11d4}, 0x1, 0x0, 0x0, 0xa0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250a0000000000000800000000080018004e214e24"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)={0x30, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x55, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 0s ago: executing program 1 (id=7763): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00"], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) kernel console output (not intermixed with test programs): .166235][T20811] tipc: Disabling bearer [ 460.202652][T20821] veth17: entered promiscuous mode [ 460.216261][T20821] bond6: (slave veth17): Enslaving as an active interface with a down link [ 460.229609][T20825] tipc: Enabling of bearer rejected, already enabled [ 460.285976][T20826] vlan0: entered allmulticast mode [ 460.299348][T20826] bond6: entered allmulticast mode [ 460.658504][T20841] __nla_validate_parse: 5 callbacks suppressed [ 460.658528][T20841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6141'. [ 460.706294][T20841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6141'. [ 460.711648][T20847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6143'. [ 460.859602][T20849] lo speed is unknown, defaulting to 1000 [ 461.121686][T20861] tipc: Enabling of bearer rejected, already enabled [ 461.158625][T20865] tipc: Enabling of bearer rejected, failed to enable media [ 461.791345][T20888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6156'. [ 462.240245][T20908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6160'. [ 462.321670][T20911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6160'. [ 462.606142][T20916] tipc: Enabled bearer , priority 0 [ 462.629980][T20916] syzkaller0: entered promiscuous mode [ 462.647261][T20916] syzkaller0: entered allmulticast mode [ 462.674669][T20916] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 462.761309][T20916] tipc: Resetting bearer [ 462.812784][T20915] tipc: Resetting bearer [ 462.882894][T20930] netlink: 'syz.2.6169': attribute type 1 has an invalid length. [ 462.887778][T20932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6170'. [ 462.903323][T20915] tipc: Disabling bearer [ 462.969870][T20930] 8021q: adding VLAN 0 to HW filter on device bond9 [ 463.016454][T20936] macvtap1: entered promiscuous mode [ 463.022274][T20936] bond9: entered promiscuous mode [ 463.029029][T20936] macvtap1: entered allmulticast mode [ 463.034919][T20936] bond9: entered allmulticast mode [ 463.041927][T20936] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 463.070319][T20932] vlan0: entered allmulticast mode [ 463.079400][T20932] veth1: entered allmulticast mode [ 463.325011][T20955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6175'. [ 463.356106][T20954] tipc: Resetting bearer [ 463.458036][T20957] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6179'. [ 463.483929][T20957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6179'. [ 463.864732][T20978] tipc: Enabled bearer , priority 0 [ 463.899700][T20978] syzkaller0: entered promiscuous mode [ 463.936041][T20978] syzkaller0: entered allmulticast mode [ 463.983116][T20978] tipc: Resetting bearer [ 463.995977][ C1] syzkaller0: tun_net_xmit 134 [ 464.023314][T20978] syzkaller0: tun_net_xmit 134 [ 464.051116][T20977] tipc: Resetting bearer [ 464.111977][T20977] tipc: Disabling bearer [ 464.429735][T21002] openvswitch: netlink: Flow actions attr not present in new flow. [ 464.449202][T21000] tipc: Enabled bearer , priority 0 [ 464.473697][T21000] syzkaller0: entered promiscuous mode [ 464.506127][T21000] syzkaller0: entered allmulticast mode [ 464.517818][T21006] tipc: Enabled bearer , priority 0 [ 464.578905][T21006] syzkaller0: entered promiscuous mode [ 464.584513][T21006] syzkaller0: entered allmulticast mode [ 464.608247][T21000] tipc: Resetting bearer [ 464.633040][T20999] tipc: Resetting bearer [ 464.663960][T20999] tipc: Disabling bearer [ 464.675018][T21011] tipc: Enabling of bearer rejected, already enabled [ 464.700613][T21013] tipc: Enabling of bearer rejected, already enabled [ 464.719330][T21011] tipc: Resetting bearer [ 464.728116][T21014] tipc: Resetting bearer [ 464.776431][T21004] tipc: Resetting bearer [ 464.839562][T21004] tipc: Disabling bearer [ 465.137310][T21034] bond0: (slave bridge0): Releasing backup interface [ 465.159972][T21034] bridge0: left promiscuous mode [ 465.185082][T21034] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.211711][T21034] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 465.927340][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 465.994529][T21083] __nla_validate_parse: 3 callbacks suppressed [ 465.994559][T21083] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6227'. [ 466.650900][T21123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6243'. [ 467.356104][T21161] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6259'. [ 467.400098][T21161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6259'. [ 468.274850][T21210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.381534][T21220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.482138][T21200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.532453][T21200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.069151][T21249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6285'. [ 469.651684][T21279] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6293'. [ 472.612990][T21446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6355'. [ 473.044487][T21473] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6365'. [ 473.060807][T21473] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6365'. [ 473.234333][T21481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6367'. [ 473.952603][T21511] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6377'. [ 473.981150][T21511] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6377'. [ 474.028062][T21511] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 474.050671][T21511] gretap2: entered promiscuous mode [ 474.060271][T21511] gretap2: entered allmulticast mode [ 474.070997][T21519] syzkaller1: entered promiscuous mode [ 474.097838][T21519] syzkaller1: entered allmulticast mode [ 474.300065][T21532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6381'. [ 474.570834][T21548] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 474.872765][T21563] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6391'. [ 474.914993][T21565] netlink: 'syz.0.6392': attribute type 11 has an invalid length. [ 474.930582][T21565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6392'. [ 474.948949][T21561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6391'. [ 474.961588][T21565] netlink: 'syz.0.6392': attribute type 11 has an invalid length. [ 475.218905][T21584] netlink: 'syz.3.6399': attribute type 11 has an invalid length. [ 475.293854][T21583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.617431][T21601] lo speed is unknown, defaulting to 1000 [ 476.013746][T21619] tipc: Enabled bearer , priority 0 [ 476.042399][T21619] syzkaller0: entered promiscuous mode [ 476.062239][T21619] syzkaller0: entered allmulticast mode [ 476.082607][T21619] tipc: Resetting bearer [ 476.103531][T21618] tipc: Resetting bearer [ 476.140246][T21618] tipc: Disabling bearer [ 476.493339][T21627] tipc: Enabled bearer , priority 0 [ 476.502213][T21627] syzkaller0: entered promiscuous mode [ 476.510676][T21627] syzkaller0: entered allmulticast mode [ 476.545240][T21627] tipc: Resetting bearer [ 476.577722][T21626] tipc: Resetting bearer [ 476.631241][T21626] tipc: Disabling bearer [ 477.041653][T21645] tipc: Enabling of bearer rejected, already enabled [ 477.361548][T21665] tipc: Enabling of bearer rejected, already enabled [ 477.472867][T21669] syzkaller0: entered promiscuous mode [ 477.480411][T21669] syzkaller0: entered allmulticast mode [ 477.689409][T21678] tipc: Enabling of bearer rejected, already enabled [ 478.682353][T21706] tipc: Enabling of bearer rejected, already enabled [ 479.320386][T21739] lo speed is unknown, defaulting to 1000 [ 479.934866][T21751] __nla_validate_parse: 3 callbacks suppressed [ 479.934885][T21751] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6464'. [ 480.202840][T21758] only policy match revision 0 supported [ 480.202866][T21758] unable to load match [ 480.230675][T21762] netlink: 'syz.1.6469': attribute type 1 has an invalid length. [ 480.336495][T21762] 8021q: adding VLAN 0 to HW filter on device bond8 [ 480.440763][T21771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6470'. [ 480.452468][T21765] vlan2: entered allmulticast mode [ 480.480388][T21765] bond8: (slave vlan2): making interface the new active one [ 480.548747][T21765] bond8: (slave vlan2): Enslaving as an active interface with an up link [ 481.232016][ T1329] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 481.404741][T21813] lo: left allmulticast mode [ 481.829538][T21823] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6490'. [ 481.841580][T21823] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6490'. [ 481.859559][T21823] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 481.872658][T21823] gretap3: entered promiscuous mode [ 481.878845][T21823] gretap3: entered allmulticast mode [ 482.044666][T21829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6492'. [ 483.402747][T21874] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6505'. [ 484.092226][T21904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6518'. [ 484.113534][T21907] tipc: Enabling of bearer rejected, already enabled [ 484.219641][T21913] Set syz1 is full, maxelem 65536 reached [ 484.568977][T21928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6525'. [ 484.676682][T21928] hsr_slave_1 (unregistering): left promiscuous mode [ 485.183845][T21956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6532'. [ 485.542114][T21968] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6541'. [ 485.639541][T21978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6541'. [ 485.932663][T21991] syzkaller0: entered promiscuous mode [ 485.956960][T21991] syzkaller0: entered allmulticast mode [ 486.513731][T22023] tipc: Enabled bearer , priority 0 [ 486.530495][T22023] syzkaller0: entered promiscuous mode [ 486.537912][T22023] syzkaller0: entered allmulticast mode [ 486.574852][T22023] tipc: Resetting bearer [ 486.594837][T22022] tipc: Resetting bearer [ 486.634422][T22022] tipc: Disabling bearer [ 486.713819][T22033] syzkaller0: entered promiscuous mode [ 486.744495][T22033] syzkaller0: entered allmulticast mode [ 487.354705][T22063] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 2, id = 0 [ 487.470476][T22068] tipc: Enabled bearer , priority 0 [ 487.480246][T22068] syzkaller0: entered promiscuous mode [ 487.507698][T22068] syzkaller0: entered allmulticast mode [ 487.533423][T22068] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 487.734716][T22082] tipc: Resetting bearer [ 487.785333][T22066] tipc: Resetting bearer [ 487.886668][T22066] tipc: Disabling bearer [ 488.341188][T22113] syzkaller0: entered promiscuous mode [ 488.356924][T22113] syzkaller0: entered allmulticast mode [ 488.406221][T17709] page_pool_release_retry() stalled pool shutdown: id 87, 1 inflight 60 sec [ 489.162268][T22158] syzkaller0: entered promiscuous mode [ 489.198777][T22158] syzkaller0: entered allmulticast mode [ 490.836823][T22247] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6648'. [ 491.148403][T22264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6655'. [ 491.202100][T22264] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6655'. [ 491.234808][T22267] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6656'. [ 491.450124][T22277] syzkaller0: entered promiscuous mode [ 491.468833][T22277] syzkaller0: entered allmulticast mode [ 491.879159][T22300] tipc: Enabled bearer , priority 0 [ 491.897713][T22300] syzkaller0: entered promiscuous mode [ 491.903392][T22300] syzkaller0: entered allmulticast mode [ 492.003932][T22299] tipc: Resetting bearer [ 492.097398][T22299] tipc: Disabling bearer [ 492.129963][T22308] tipc: Enabling of bearer rejected, failed to enable media [ 492.560265][T22331] rdma_rxe: rxe_newlink: failed to add lo [ 492.768912][T22344] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6683'. [ 492.944433][T22351] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6685'. [ 493.107825][T22360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6689'. [ 493.454399][T22383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6697'. [ 493.967697][T22407] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6709'. [ 494.338931][T22429] batadv_slave_0: entered allmulticast mode [ 494.349685][T22427] batadv_slave_0: left allmulticast mode [ 494.887235][T22457] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 495.490148][T22477] lo speed is unknown, defaulting to 1000 [ 495.536496][T22483] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 496.922333][T22528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6757'. [ 497.250541][T22535] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 497.278826][T22535] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 497.291302][T22535] tipc: Resetting bearer [ 497.377387][T22542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6763'. [ 497.761520][T22560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6772'. [ 498.358463][T22595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6783'. [ 498.651225][T22603] gtp0: entered promiscuous mode [ 498.669302][T22603] gtp0: entered allmulticast mode [ 498.738082][T22610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6787'. [ 498.983910][T22619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6792'. [ 499.223816][T22632] tipc: Enabling of bearer rejected, already enabled [ 499.269587][T22632] syzkaller0: mtu less than device minimum [ 499.683747][T22654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6806'. [ 500.485387][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 502.341301][T22685] netlink: 'syz.4.6817': attribute type 1 has an invalid length. [ 502.427812][T22692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6818'. [ 502.471488][T22685] 8021q: adding VLAN 0 to HW filter on device bond6 [ 502.621655][T22699] tipc: Enabled bearer , priority 0 [ 502.648477][T22689] syzkaller0: entered promiscuous mode [ 502.669885][T22689] syzkaller0: entered allmulticast mode [ 502.810623][T22693] tipc: Resetting bearer [ 502.826832][T22688] tipc: Resetting bearer [ 502.877722][T22688] tipc: Disabling bearer [ 502.897728][T22705] batman_adv: batadv0: Removing interface: dummy0 [ 502.906542][T22710] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6824'. [ 502.908433][T22705] bridge_slave_0: left promiscuous mode [ 502.928094][T22705] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.942126][T22705] bridge_slave_1: left promiscuous mode [ 502.950359][T22705] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.967300][T22705] bond0: (slave bond_slave_0): Releasing backup interface [ 502.981156][T22705] bond0: (slave bond_slave_1): Releasing backup interface [ 503.022490][T22705] team0: Port device team_slave_0 removed [ 503.043928][T22705] team0: Port device team_slave_1 removed [ 503.060460][T22705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.072332][T22705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.086601][T22705] bond1: (slave ip6erspan0): Releasing active interface [ 503.110943][T22705] bond2: (slave wireguard0): Releasing backup interface [ 503.129539][T22705] bond4: (slave bridge1): Releasing active interface [ 503.160971][T22705] vlan0: left promiscuous mode [ 503.178594][T22705] veth1: left promiscuous mode [ 503.192939][T22705] bridge6: port 2(vlan0) entered disabled state [ 503.244771][T22708] team0: Mode changed to "loadbalance" [ 503.361682][T22721] netlink: 'syz.1.6827': attribute type 10 has an invalid length. [ 503.380354][T22721] veth0_vlan: entered allmulticast mode [ 503.408494][T22721] veth0_vlan: left promiscuous mode [ 503.423700][T22721] veth0_vlan: entered promiscuous mode [ 503.472121][T22730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6831'. [ 503.472759][T22721] team0: Device veth0_vlan failed to register rx_handler [ 503.729215][T22739] rdma_rxe: rxe_newlink: failed to add lo [ 503.802092][T22741] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6836'. [ 503.879865][T22747] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6839'. [ 504.133205][T22755] FAULT_INJECTION: forcing a failure. [ 504.133205][T22755] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 504.163189][T22755] CPU: 0 UID: 0 PID: 22755 Comm: syz.1.6843 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 504.163227][T22755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 504.163244][T22755] Call Trace: [ 504.163254][T22755] [ 504.163266][T22755] dump_stack_lvl+0x189/0x250 [ 504.163315][T22755] ? __pfx____ratelimit+0x10/0x10 [ 504.163352][T22755] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.163377][T22755] ? __pfx__printk+0x10/0x10 [ 504.163409][T22755] ? __might_fault+0xb0/0x130 [ 504.163462][T22755] should_fail_ex+0x414/0x560 [ 504.163521][T22755] _copy_from_user+0x2d/0xb0 [ 504.163558][T22755] do_sock_getsockopt+0x17d/0x450 [ 504.163589][T22755] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 504.163614][T22755] ? do_syscall_64+0x20/0x3b0 [ 504.163650][T22755] ? __fget_files+0x3a0/0x420 [ 504.163674][T22755] ? __fget_files+0x2a/0x420 [ 504.163708][T22755] __x64_sys_getsockopt+0x1a5/0x250 [ 504.163733][T22755] ? do_syscall_64+0x20/0x3b0 [ 504.163772][T22755] ? do_syscall_64+0x20/0x3b0 [ 504.163814][T22755] do_syscall_64+0xfa/0x3b0 [ 504.163849][T22755] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.163884][T22755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.163909][T22755] ? clear_bhb_loop+0x60/0xb0 [ 504.163940][T22755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.163964][T22755] RIP: 0033:0x7f442378e9a9 [ 504.163986][T22755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.164009][T22755] RSP: 002b:00007f442454c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 504.164038][T22755] RAX: ffffffffffffffda RBX: 00007f44239b5fa0 RCX: 00007f442378e9a9 [ 504.164057][T22755] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 504.164071][T22755] RBP: 00007f442454c090 R08: 0000200000000540 R09: 0000000000000000 [ 504.164088][T22755] R10: 0000200000001580 R11: 0000000000000246 R12: 0000000000000001 [ 504.164103][T22755] R13: 0000000000000000 R14: 00007f44239b5fa0 R15: 00007ffc81de74e8 [ 504.164143][T22755] [ 504.520167][T22763] FAULT_INJECTION: forcing a failure. [ 504.520167][T22763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.539612][T22763] CPU: 0 UID: 0 PID: 22763 Comm: syz.3.6840 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 504.539662][T22763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 504.539675][T22763] Call Trace: [ 504.539684][T22763] [ 504.539694][T22763] dump_stack_lvl+0x189/0x250 [ 504.539722][T22763] ? __pfx____ratelimit+0x10/0x10 [ 504.539753][T22763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.539776][T22763] ? __pfx__printk+0x10/0x10 [ 504.539804][T22763] ? __might_fault+0xb0/0x130 [ 504.539849][T22763] should_fail_ex+0x414/0x560 [ 504.539890][T22763] _copy_from_user+0x2d/0xb0 [ 504.539921][T22763] do_sock_getsockopt+0x17d/0x450 [ 504.539948][T22763] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 504.539969][T22763] ? do_syscall_64+0x20/0x3b0 [ 504.540000][T22763] ? __fget_files+0x3a0/0x420 [ 504.540021][T22763] ? __fget_files+0x2a/0x420 [ 504.540051][T22763] __x64_sys_getsockopt+0x1a5/0x250 [ 504.540072][T22763] ? do_syscall_64+0x20/0x3b0 [ 504.540106][T22763] ? do_syscall_64+0x20/0x3b0 [ 504.540143][T22763] do_syscall_64+0xfa/0x3b0 [ 504.540173][T22763] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.540203][T22763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.540225][T22763] ? clear_bhb_loop+0x60/0xb0 [ 504.540252][T22763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.540273][T22763] RIP: 0033:0x7f03aab8e9a9 [ 504.540293][T22763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.540313][T22763] RSP: 002b:00007f03abac2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 504.540337][T22763] RAX: ffffffffffffffda RBX: 00007f03aadb6080 RCX: 00007f03aab8e9a9 [ 504.540353][T22763] RDX: 0000000000000008 RSI: 0000000000000065 RDI: 0000000000000003 [ 504.540367][T22763] RBP: 00007f03abac2090 R08: 0000200000006680 R09: 0000000000000000 [ 504.540381][T22763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.540394][T22763] R13: 0000000000000001 R14: 00007f03aadb6080 R15: 00007fff3e684968 [ 504.540429][T22763] [ 504.949014][T22771] rdma_rxe: rxe_newlink: failed to add lo [ 505.031350][T22774] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6849'. [ 505.109227][T22778] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6852'. [ 505.337660][T22788] FAULT_INJECTION: forcing a failure. [ 505.337660][T22788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.373234][T22789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6853'. [ 505.406191][T22788] CPU: 0 UID: 0 PID: 22788 Comm: syz.1.6856 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 505.406242][T22788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 505.406258][T22788] Call Trace: [ 505.406267][T22788] [ 505.406278][T22788] dump_stack_lvl+0x189/0x250 [ 505.406311][T22788] ? __pfx____ratelimit+0x10/0x10 [ 505.406346][T22788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.406373][T22788] ? __pfx__printk+0x10/0x10 [ 505.406404][T22788] ? __might_fault+0xb0/0x130 [ 505.406463][T22788] should_fail_ex+0x414/0x560 [ 505.406509][T22788] _copy_from_user+0x2d/0xb0 [ 505.406545][T22788] __sys_bind+0x199/0x3e0 [ 505.406585][T22788] ? __pfx___sys_bind+0x10/0x10 [ 505.406636][T22788] ? __pfx_ksys_write+0x10/0x10 [ 505.406669][T22788] ? rcu_is_watching+0x15/0xb0 [ 505.406718][T22788] __x64_sys_bind+0x7a/0x90 [ 505.406754][T22788] do_syscall_64+0xfa/0x3b0 [ 505.406789][T22788] ? lockdep_hardirqs_on+0x9c/0x150 [ 505.406823][T22788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.406847][T22788] ? clear_bhb_loop+0x60/0xb0 [ 505.406878][T22788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.406914][T22788] RIP: 0033:0x7f442378e9a9 [ 505.406937][T22788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.406959][T22788] RSP: 002b:00007f442454c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 505.406988][T22788] RAX: ffffffffffffffda RBX: 00007f44239b5fa0 RCX: 00007f442378e9a9 [ 505.407006][T22788] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 505.407022][T22788] RBP: 00007f442454c090 R08: 0000000000000000 R09: 0000000000000000 [ 505.407037][T22788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.407064][T22788] R13: 0000000000000000 R14: 00007f44239b5fa0 R15: 00007ffc81de74e8 [ 505.407114][T22788] [ 506.269122][T22818] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6868'. [ 506.307866][T22822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6865'. [ 506.556881][T22837] FAULT_INJECTION: forcing a failure. [ 506.556881][T22837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.572331][T22837] CPU: 0 UID: 0 PID: 22837 Comm: syz.4.6874 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 506.572366][T22837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 506.572380][T22837] Call Trace: [ 506.572389][T22837] [ 506.572398][T22837] dump_stack_lvl+0x189/0x250 [ 506.572427][T22837] ? __pfx____ratelimit+0x10/0x10 [ 506.572460][T22837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.572477][T22837] ? __pfx__printk+0x10/0x10 [ 506.572497][T22837] ? __might_fault+0xb0/0x130 [ 506.572529][T22837] should_fail_ex+0x414/0x560 [ 506.572558][T22837] _copy_from_user+0x2d/0xb0 [ 506.572581][T22837] do_ipv6_getsockopt+0x2b0/0x2300 [ 506.572613][T22837] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 506.572639][T22837] ? aa_label_sk_perm+0x413/0x560 [ 506.572663][T22837] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 506.572720][T22837] ? __lock_acquire+0xab9/0xd20 [ 506.572771][T22837] ipv6_getsockopt+0xbd/0x290 [ 506.572811][T22837] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 506.572838][T22837] ? sock_common_getsockopt+0x2d/0xb0 [ 506.572859][T22837] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 506.572882][T22837] do_sock_getsockopt+0x36f/0x450 [ 506.572900][T22837] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 506.572916][T22837] ? __fget_files+0x3a0/0x420 [ 506.572931][T22837] ? __fget_files+0x2a/0x420 [ 506.572951][T22837] __x64_sys_getsockopt+0x1a5/0x250 [ 506.572975][T22837] do_syscall_64+0xfa/0x3b0 [ 506.572997][T22837] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.573018][T22837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.573033][T22837] ? clear_bhb_loop+0x60/0xb0 [ 506.573052][T22837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.573067][T22837] RIP: 0033:0x7facfd38e9a9 [ 506.573081][T22837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.573095][T22837] RSP: 002b:00007facfb1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 506.573114][T22837] RAX: ffffffffffffffda RBX: 00007facfd5b5fa0 RCX: 00007facfd38e9a9 [ 506.573125][T22837] RDX: 0010000000000030 RSI: 0000000000000029 RDI: 0000000000000003 [ 506.573135][T22837] RBP: 00007facfb1f6090 R08: 0000200000e5f000 R09: 0000000000000000 [ 506.573154][T22837] R10: 0000200000034000 R11: 0000000000000246 R12: 0000000000000001 [ 506.573163][T22837] R13: 0000000000000000 R14: 00007facfd5b5fa0 R15: 00007fff26a3f6b8 [ 506.573188][T22837] [ 506.914533][T22841] rdma_rxe: rxe_newlink: failed to add lo [ 506.954847][T22843] FAULT_INJECTION: forcing a failure. [ 506.954847][T22843] name failslab, interval 1, probability 0, space 0, times 1 [ 506.971870][T22843] CPU: 0 UID: 0 PID: 22843 Comm: syz.2.6877 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 506.971905][T22843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 506.971919][T22843] Call Trace: [ 506.971927][T22843] [ 506.971937][T22843] dump_stack_lvl+0x189/0x250 [ 506.971966][T22843] ? __pfx____ratelimit+0x10/0x10 [ 506.971997][T22843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.972020][T22843] ? __pfx__printk+0x10/0x10 [ 506.972057][T22843] ? __pfx___might_resched+0x10/0x10 [ 506.972090][T22843] ? fs_reclaim_acquire+0x7d/0x100 [ 506.972119][T22843] should_fail_ex+0x414/0x560 [ 506.972160][T22843] should_failslab+0xa8/0x100 [ 506.972183][T22843] __kmalloc_noprof+0xcb/0x4f0 [ 506.972214][T22843] ? bpf_map_meta_alloc+0x176/0x780 [ 506.972251][T22843] bpf_map_meta_alloc+0x176/0x780 [ 506.972288][T22843] htab_of_map_alloc+0x38/0xc0 [ 506.972323][T22843] map_create+0xaa3/0x1310 [ 506.972360][T22843] ? security_bpf+0x7e/0x300 [ 506.972390][T22843] __sys_bpf+0x60f/0x870 [ 506.972423][T22843] ? __pfx___sys_bpf+0x10/0x10 [ 506.972470][T22843] ? ksys_write+0x1e1/0x250 [ 506.972504][T22843] ? __pfx_ksys_write+0x10/0x10 [ 506.972532][T22843] ? rcu_is_watching+0x15/0xb0 [ 506.972575][T22843] __x64_sys_bpf+0x7c/0x90 [ 506.972603][T22843] do_syscall_64+0xfa/0x3b0 [ 506.972635][T22843] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.972665][T22843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.972687][T22843] ? clear_bhb_loop+0x60/0xb0 [ 506.972714][T22843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.972735][T22843] RIP: 0033:0x7f103118e9a9 [ 506.972755][T22843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.972774][T22843] RSP: 002b:00007f1031f82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 506.972800][T22843] RAX: ffffffffffffffda RBX: 00007f10313b5fa0 RCX: 00007f103118e9a9 [ 506.972816][T22843] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 0000000000000000 [ 506.972830][T22843] RBP: 00007f1031f82090 R08: 0000000000000000 R09: 0000000000000000 [ 506.972843][T22843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.972857][T22843] R13: 0000000000000000 R14: 00007f10313b5fa0 R15: 00007fff468e2e28 [ 506.972892][T22843] [ 507.578050][T22859] __nla_validate_parse: 1 callbacks suppressed [ 507.578081][T22859] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6883'. [ 507.599230][T22859] openvswitch: netlink: Flow key attr not present in new flow. [ 507.619627][T22859] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 507.634513][T22859] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 507.652955][T22863] syzkaller0: entered promiscuous mode [ 507.659011][T22863] syzkaller0: entered allmulticast mode [ 507.869144][T22870] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6885'. [ 508.574210][T22881] syz0: rxe_newlink: already configured on lo [ 508.884703][T22896] sch_fq: defrate 0 ignored. [ 508.936869][T22900] sch_fq: defrate 0 ignored. [ 508.975029][T22896] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6892'. [ 508.991084][T22900] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6892'. [ 509.002657][T22896] 8021q: VLANs not supported on sit0 [ 509.033172][T22900] 8021q: VLANs not supported on sit0 [ 509.080809][T22916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6896'. [ 509.305080][T22924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6898'. [ 509.322579][T22924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6898'. [ 509.632636][T22937] rdma_rxe: rxe_newlink: failed to add lo [ 509.775479][T22946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6908'. [ 509.954042][T22949] FAULT_INJECTION: forcing a failure. [ 509.954042][T22949] name failslab, interval 1, probability 0, space 0, times 0 [ 509.977872][T22949] CPU: 0 UID: 0 PID: 22949 Comm: syz.3.6909 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 509.977905][T22949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 509.977919][T22949] Call Trace: [ 509.977927][T22949] [ 509.977937][T22949] dump_stack_lvl+0x189/0x250 [ 509.977965][T22949] ? __pfx____ratelimit+0x10/0x10 [ 509.977996][T22949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 509.978019][T22949] ? __pfx__printk+0x10/0x10 [ 509.978050][T22949] ? __pfx___might_resched+0x10/0x10 [ 509.978083][T22949] ? fs_reclaim_acquire+0x7d/0x100 [ 509.978121][T22949] should_fail_ex+0x414/0x560 [ 509.978163][T22949] should_failslab+0xa8/0x100 [ 509.978186][T22949] __kmalloc_noprof+0xcb/0x4f0 [ 509.978217][T22949] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 509.978248][T22949] ? sock_kmalloc+0xd6/0x160 [ 509.978278][T22949] sock_kmalloc+0xd6/0x160 [ 509.978307][T22949] af_alg_sendmsg+0x109c/0x22e0 [ 509.978339][T22949] ? __pfx___might_resched+0x10/0x10 [ 509.978402][T22949] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 509.978433][T22949] ? __pfx_aa_sk_perm+0x10/0x10 [ 509.978458][T22949] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 509.978499][T22949] ? aa_sock_msg_perm+0x94/0x160 [ 509.978531][T22949] ? skcipher_sendmsg+0x26/0xf0 [ 509.978550][T22949] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 509.978573][T22949] __sock_sendmsg+0x21c/0x270 [ 509.978606][T22949] __sys_sendto+0x3bd/0x520 [ 509.978643][T22949] ? __pfx___sys_sendto+0x10/0x10 [ 509.978691][T22949] ? count_memcg_event_mm+0x21/0x260 [ 509.978736][T22949] ? exc_page_fault+0x76/0xf0 [ 509.978771][T22949] ? do_user_addr_fault+0xc8a/0x1390 [ 509.978807][T22949] __x64_sys_sendto+0xde/0x100 [ 509.978845][T22949] do_syscall_64+0xfa/0x3b0 [ 509.978876][T22949] ? lockdep_hardirqs_on+0x9c/0x150 [ 509.978905][T22949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.978927][T22949] ? clear_bhb_loop+0x60/0xb0 [ 509.978953][T22949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.978974][T22949] RIP: 0033:0x7f03aab9083c [ 509.978994][T22949] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 509.979013][T22949] RSP: 002b:00007f03abae1ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 509.979037][T22949] RAX: ffffffffffffffda RBX: 00007f03abae1fc0 RCX: 00007f03aab9083c [ 509.979053][T22949] RDX: 0000000000000020 RSI: 00007f03abae2010 RDI: 0000000000000004 [ 509.979067][T22949] RBP: 0000000000000000 R08: 00007f03abae1f14 R09: 000000000000000c [ 509.979080][T22949] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 509.979099][T22949] R13: 00007f03abae1f68 R14: 00007f03abae2010 R15: 0000000000000000 [ 509.979134][T22949] [ 510.287541][T22950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6910'. [ 510.376088][T22961] syz0: rxe_newlink: already configured on lo [ 510.509922][T22971] FAULT_INJECTION: forcing a failure. [ 510.509922][T22971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.552196][T22971] CPU: 0 UID: 0 PID: 22971 Comm: syz.2.6917 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 510.552230][T22971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 510.552244][T22971] Call Trace: [ 510.552252][T22971] [ 510.552262][T22971] dump_stack_lvl+0x189/0x250 [ 510.552292][T22971] ? __pfx____ratelimit+0x10/0x10 [ 510.552325][T22971] ? __pfx_dump_stack_lvl+0x10/0x10 [ 510.552349][T22971] ? __pfx__printk+0x10/0x10 [ 510.552376][T22971] ? __might_fault+0xb0/0x130 [ 510.552423][T22971] should_fail_ex+0x414/0x560 [ 510.552465][T22971] _copy_from_iter+0x1db/0x16f0 [ 510.552497][T22971] ? rcu_is_watching+0x15/0xb0 [ 510.552533][T22971] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 510.552569][T22971] ? __pfx__copy_from_iter+0x10/0x10 [ 510.552599][T22971] ? __build_skb_around+0x257/0x3e0 [ 510.552638][T22971] ? netlink_sendmsg+0x642/0xb30 [ 510.552669][T22971] ? skb_put+0x11b/0x210 [ 510.552694][T22971] netlink_sendmsg+0x6b2/0xb30 [ 510.552739][T22971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.552776][T22971] ? aa_sock_msg_perm+0x94/0x160 [ 510.552807][T22971] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 510.552832][T22971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.552866][T22971] __sock_sendmsg+0x21c/0x270 [ 510.552899][T22971] ____sys_sendmsg+0x505/0x830 [ 510.552929][T22971] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.552962][T22971] ? import_iovec+0x74/0xa0 [ 510.552996][T22971] ___sys_sendmsg+0x21f/0x2a0 [ 510.553022][T22971] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.553111][T22971] ? __fget_files+0x2a/0x420 [ 510.553131][T22971] ? __fget_files+0x3a0/0x420 [ 510.553166][T22971] __x64_sys_sendmsg+0x19b/0x260 [ 510.553193][T22971] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.553228][T22971] ? __pfx_ksys_write+0x10/0x10 [ 510.553264][T22971] ? rcu_is_watching+0x15/0xb0 [ 510.553304][T22971] ? do_syscall_64+0xbe/0x3b0 [ 510.553342][T22971] do_syscall_64+0xfa/0x3b0 [ 510.553373][T22971] ? lockdep_hardirqs_on+0x9c/0x150 [ 510.553424][T22971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.553445][T22971] ? clear_bhb_loop+0x60/0xb0 [ 510.553472][T22971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.553494][T22971] RIP: 0033:0x7f103118e9a9 [ 510.553513][T22971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.553532][T22971] RSP: 002b:00007f1031f82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.553558][T22971] RAX: ffffffffffffffda RBX: 00007f10313b5fa0 RCX: 00007f103118e9a9 [ 510.553574][T22971] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 510.553588][T22971] RBP: 00007f1031f82090 R08: 0000000000000000 R09: 0000000000000000 [ 510.553601][T22971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.553614][T22971] R13: 0000000000000000 R14: 00007f10313b5fa0 R15: 00007fff468e2e28 [ 510.553649][T22971] [ 510.934122][T22982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6921'. [ 511.258253][T22990] syzkaller0: entered promiscuous mode [ 511.273742][T22990] syzkaller0: entered allmulticast mode [ 511.277979][T23000] rdma_rxe: rxe_newlink: failed to add lo [ 511.319817][T22998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.359756][T22998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.895101][T23021] FAULT_INJECTION: forcing a failure. [ 511.895101][T23021] name failslab, interval 1, probability 0, space 0, times 0 [ 511.914470][T23021] CPU: 1 UID: 0 PID: 23021 Comm: syz.1.6932 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 511.914501][T23021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 511.914514][T23021] Call Trace: [ 511.914523][T23021] [ 511.914532][T23021] dump_stack_lvl+0x189/0x250 [ 511.914558][T23021] ? __pfx____ratelimit+0x10/0x10 [ 511.914589][T23021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.914612][T23021] ? __pfx__printk+0x10/0x10 [ 511.914643][T23021] ? __pfx___might_resched+0x10/0x10 [ 511.914675][T23021] should_fail_ex+0x414/0x560 [ 511.914715][T23021] should_failslab+0xa8/0x100 [ 511.914735][T23021] kmem_cache_alloc_noprof+0x73/0x3c0 [ 511.914761][T23021] ? ptlock_alloc+0x20/0x70 [ 511.914795][T23021] ptlock_alloc+0x20/0x70 [ 511.914824][T23021] pte_alloc_one+0x7d/0x170 [ 511.914848][T23021] __pte_alloc+0x25/0x1a0 [ 511.914875][T23021] __handle_mm_fault+0x4b8a/0x5620 [ 511.914931][T23021] ? __pfx___handle_mm_fault+0x10/0x10 [ 511.914998][T23021] ? find_vma+0xe7/0x160 [ 511.915028][T23021] ? __pfx_find_vma+0x10/0x10 [ 511.915062][T23021] handle_mm_fault+0x40a/0x8e0 [ 511.915105][T23021] do_user_addr_fault+0x764/0x1390 [ 511.915157][T23021] exc_page_fault+0x76/0xf0 [ 511.915192][T23021] asm_exc_page_fault+0x26/0x30 [ 511.915211][T23021] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 511.915236][T23021] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 511.915255][T23021] RSP: 0018:ffffc9000dec7798 EFLAGS: 00050206 [ 511.915277][T23021] RAX: 00007ffffffff001 RBX: 0000000000000090 RCX: 0000000000000090 [ 511.915291][T23021] RDX: 0000000000000001 RSI: 0000200000034000 RDI: ffffc9000dec7810 [ 511.915306][T23021] RBP: ffffc9000dec79b0 R08: ffffc9000dec789f R09: 1ffff92001bd8f13 [ 511.915322][T23021] R10: dffffc0000000000 R11: fffff52001bd8f14 R12: 1ffff92001bd8efc [ 511.915337][T23021] R13: dffffc0000000000 R14: ffffc9000dec7810 R15: 0000200000034000 [ 511.915369][T23021] _copy_from_user+0x7a/0xb0 [ 511.915396][T23021] ipv6_get_msfilter+0x105/0x2d0 [ 511.915427][T23021] ? __pfx_ipv6_get_msfilter+0x10/0x10 [ 511.915497][T23021] do_ipv6_getsockopt+0xd67/0x2300 [ 511.915532][T23021] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 511.915563][T23021] ? aa_label_sk_perm+0x413/0x560 [ 511.915591][T23021] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 511.915643][T23021] ? __lock_acquire+0xab9/0xd20 [ 511.915684][T23021] ipv6_getsockopt+0xbd/0x290 [ 511.915717][T23021] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 511.915748][T23021] ? sock_common_getsockopt+0x2d/0xb0 [ 511.915773][T23021] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 511.915800][T23021] do_sock_getsockopt+0x36f/0x450 [ 511.915822][T23021] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 511.915839][T23021] ? do_syscall_64+0x20/0x3b0 [ 511.915866][T23021] ? __fget_files+0x3a0/0x420 [ 511.915883][T23021] ? __fget_files+0x2a/0x420 [ 511.915908][T23021] __x64_sys_getsockopt+0x1a5/0x250 [ 511.915925][T23021] ? do_syscall_64+0x20/0x3b0 [ 511.915960][T23021] ? do_syscall_64+0x20/0x3b0 [ 511.915991][T23021] do_syscall_64+0xfa/0x3b0 [ 511.916016][T23021] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.916041][T23021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.916059][T23021] ? clear_bhb_loop+0x60/0xb0 [ 511.916081][T23021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.916098][T23021] RIP: 0033:0x7f442378e9a9 [ 511.916116][T23021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.916131][T23021] RSP: 002b:00007f442454c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 511.916151][T23021] RAX: ffffffffffffffda RBX: 00007f44239b5fa0 RCX: 00007f442378e9a9 [ 511.916164][T23021] RDX: 0010000000000030 RSI: 0000000000000029 RDI: 0000000000000003 [ 511.916175][T23021] RBP: 00007f442454c090 R08: 0000200000e5f000 R09: 0000000000000000 [ 511.916187][T23021] R10: 0000200000034000 R11: 0000000000000246 R12: 0000000000000001 [ 511.916198][T23021] R13: 0000000000000000 R14: 00007f44239b5fa0 R15: 00007ffc81de74e8 [ 511.916228][T23021] [ 514.360012][T23028] sit0: entered promiscuous mode [ 514.369753][T23028] netlink: 'syz.3.6934': attribute type 1 has an invalid length. [ 514.392888][T23028] __nla_validate_parse: 2 callbacks suppressed [ 514.392911][T23028] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6934'. [ 514.415109][T23043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6935'. [ 514.428059][T23030] syzkaller0: entered promiscuous mode [ 514.448851][T23030] syzkaller0: entered allmulticast mode [ 514.622163][T23052] syzkaller0: entered promiscuous mode [ 514.650536][T23052] syzkaller0: entered allmulticast mode [ 514.689182][T23056] rdma_rxe: rxe_newlink: failed to add lo [ 514.719470][T23059] netlink: 'syz.4.6940': attribute type 10 has an invalid length. [ 514.739255][T23059] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6940'. [ 514.830702][T23059] batadv0: entered promiscuous mode [ 514.868375][T23059] bridge0: port 1(batadv0) entered blocking state [ 514.910186][T23059] bridge0: port 1(batadv0) entered disabled state [ 514.948276][T23059] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 515.215055][T23088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6945'. [ 515.409754][T23096] !: renamed from dummy0 [ 515.440542][T23098] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6949'. [ 515.602155][T23104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6950'. [ 515.662578][T23107] syz0: rxe_newlink: already configured on lo [ 516.670243][T23152] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6958'. [ 516.902445][T23155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6960'. [ 516.924802][T23158] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6961'. [ 517.031647][T23155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6960'. [ 517.049580][T23163] rdma_rxe: rxe_newlink: failed to add lo [ 517.296552][T23179] FAULT_INJECTION: forcing a failure. [ 517.296552][T23179] name failslab, interval 1, probability 0, space 0, times 0 [ 517.307461][T23178] netlink: 'syz.4.6966': attribute type 4 has an invalid length. [ 517.310012][T23179] CPU: 0 UID: 0 PID: 23179 Comm: syz.0.6967 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 517.310045][T23179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 517.310061][T23179] Call Trace: [ 517.310073][T23179] [ 517.310083][T23179] dump_stack_lvl+0x189/0x250 [ 517.310118][T23179] ? __pfx____ratelimit+0x10/0x10 [ 517.310155][T23179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 517.310180][T23179] ? __pfx__printk+0x10/0x10 [ 517.310236][T23179] should_fail_ex+0x414/0x560 [ 517.310283][T23179] should_failslab+0xa8/0x100 [ 517.310309][T23179] kmem_cache_alloc_noprof+0x73/0x3c0 [ 517.310345][T23179] ? radix_tree_node_alloc+0x7e/0x3a0 [ 517.310386][T23179] radix_tree_node_alloc+0x7e/0x3a0 [ 517.310430][T23179] idr_get_free+0x2b3/0xa70 [ 517.310479][T23179] idr_alloc_u32+0x159/0x2d0 [ 517.310522][T23179] ? __pfx_idr_alloc_u32+0x10/0x10 [ 517.310560][T23179] ? do_raw_spin_lock+0x121/0x290 [ 517.310601][T23179] idr_alloc_cyclic+0x9b/0x1b0 [ 517.310644][T23179] bpf_map_alloc_id+0x40/0xe0 [ 517.310668][T23179] map_create+0xf11/0x1310 [ 517.310708][T23179] ? security_bpf+0x7e/0x300 [ 517.310742][T23179] __sys_bpf+0x60f/0x870 [ 517.310779][T23179] ? __pfx___sys_bpf+0x10/0x10 [ 517.310831][T23179] ? ksys_write+0x22a/0x250 [ 517.310874][T23179] ? __pfx_ksys_write+0x10/0x10 [ 517.310907][T23179] ? rcu_is_watching+0x15/0xb0 [ 517.310956][T23179] __x64_sys_bpf+0x7c/0x90 [ 517.310988][T23179] do_syscall_64+0xfa/0x3b0 [ 517.311023][T23179] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.311058][T23179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.311083][T23179] ? clear_bhb_loop+0x60/0xb0 [ 517.311113][T23179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.311138][T23179] RIP: 0033:0x7f75d7d8e9a9 [ 517.311162][T23179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.311191][T23179] RSP: 002b:00007f75d8b66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 517.311219][T23179] RAX: ffffffffffffffda RBX: 00007f75d7fb5fa0 RCX: 00007f75d7d8e9a9 [ 517.311238][T23179] RDX: 0000000000000048 RSI: 00002000000005c0 RDI: 0000000000000000 [ 517.311254][T23179] RBP: 00007f75d8b66090 R08: 0000000000000000 R09: 0000000000000000 [ 517.311269][T23179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.311284][T23179] R13: 0000000000000001 R14: 00007f75d7fb5fa0 R15: 00007ffff96c66c8 [ 517.311323][T23179] [ 518.092608][T23211] netlink: 'syz.1.6977': attribute type 4 has an invalid length. [ 518.131325][T23212] syz0: rxe_newlink: already configured on lo [ 518.275026][T23221] FAULT_INJECTION: forcing a failure. [ 518.275026][T23221] name failslab, interval 1, probability 0, space 0, times 0 [ 518.291491][T23221] CPU: 0 UID: 0 PID: 23221 Comm: syz.1.6980 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 518.291524][T23221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.291537][T23221] Call Trace: [ 518.291546][T23221] [ 518.291556][T23221] dump_stack_lvl+0x189/0x250 [ 518.291584][T23221] ? __pfx____ratelimit+0x10/0x10 [ 518.291616][T23221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 518.291640][T23221] ? __pfx__printk+0x10/0x10 [ 518.291674][T23221] ? __pfx___might_resched+0x10/0x10 [ 518.291706][T23221] ? fs_reclaim_acquire+0x7d/0x100 [ 518.291736][T23221] should_fail_ex+0x414/0x560 [ 518.291778][T23221] should_failslab+0xa8/0x100 [ 518.291802][T23221] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 518.291834][T23221] ? __d_alloc+0x36/0x7a0 [ 518.291865][T23221] __d_alloc+0x36/0x7a0 [ 518.291896][T23221] d_alloc_pseudo+0x21/0xc0 [ 518.291924][T23221] alloc_file_pseudo+0xcc/0x210 [ 518.291953][T23221] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 518.292001][T23221] anon_inode_getfd+0xca/0x1b0 [ 518.292031][T23221] map_create+0xf5d/0x1310 [ 518.292068][T23221] ? security_bpf+0x7e/0x300 [ 518.292099][T23221] __sys_bpf+0x60f/0x870 [ 518.292132][T23221] ? __pfx___sys_bpf+0x10/0x10 [ 518.292178][T23221] ? ksys_write+0x22a/0x250 [ 518.292213][T23221] ? __pfx_ksys_write+0x10/0x10 [ 518.292254][T23221] __x64_sys_bpf+0x7c/0x90 [ 518.292283][T23221] do_syscall_64+0xfa/0x3b0 [ 518.292315][T23221] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.292345][T23221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.292367][T23221] ? clear_bhb_loop+0x60/0xb0 [ 518.292401][T23221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.292422][T23221] RIP: 0033:0x7f442378e9a9 [ 518.292442][T23221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.292462][T23221] RSP: 002b:00007f442454c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 518.292487][T23221] RAX: ffffffffffffffda RBX: 00007f44239b5fa0 RCX: 00007f442378e9a9 [ 518.292502][T23221] RDX: 0000000000000048 RSI: 00002000000005c0 RDI: 0000000000000000 [ 518.292517][T23221] RBP: 00007f442454c090 R08: 0000000000000000 R09: 0000000000000000 [ 518.292530][T23221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.292543][T23221] R13: 0000000000000001 R14: 00007f44239b5fa0 R15: 00007ffc81de74e8 [ 518.292578][T23221] [ 519.066275][T23254] netlink: 'syz.3.6990': attribute type 25 has an invalid length. [ 519.196605][T23265] FAULT_INJECTION: forcing a failure. [ 519.196605][T23265] name failslab, interval 1, probability 0, space 0, times 0 [ 519.232469][T23265] CPU: 1 UID: 0 PID: 23265 Comm: syz.4.6993 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 519.232503][T23265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 519.232516][T23265] Call Trace: [ 519.232525][T23265] [ 519.232534][T23265] dump_stack_lvl+0x189/0x250 [ 519.232562][T23265] ? __pfx____ratelimit+0x10/0x10 [ 519.232594][T23265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.232618][T23265] ? __pfx__printk+0x10/0x10 [ 519.232652][T23265] ? __pfx___might_resched+0x10/0x10 [ 519.232689][T23265] ? fs_reclaim_acquire+0x7d/0x100 [ 519.232719][T23265] should_fail_ex+0x414/0x560 [ 519.232759][T23265] should_failslab+0xa8/0x100 [ 519.232782][T23265] __kmalloc_noprof+0xcb/0x4f0 [ 519.232812][T23265] ? __list_lru_init+0xba/0x5c0 [ 519.232841][T23265] __list_lru_init+0xba/0x5c0 [ 519.232875][T23265] alloc_super+0x819/0x970 [ 519.232911][T23265] sget_fc+0x329/0xa40 [ 519.232941][T23265] ? __pfx_set_anon_super_fc+0x10/0x10 [ 519.232969][T23265] ? __pfx_mqueue_fill_super+0x10/0x10 [ 519.232996][T23265] get_tree_nodev+0x2a/0x150 [ 519.233030][T23265] vfs_get_tree+0x8f/0x2b0 [ 519.233066][T23265] fc_mount_longterm+0x1c/0x100 [ 519.233097][T23265] mq_init_ns+0x3a1/0x510 [ 519.233126][T23265] copy_ipcs+0x2f6/0x4f0 [ 519.233163][T23265] create_new_namespaces+0x218/0x720 [ 519.233200][T23265] ? security_capable+0x7e/0x2e0 [ 519.233238][T23265] unshare_nsproxy_namespaces+0x11c/0x170 [ 519.233366][T23265] ksys_unshare+0x4c8/0x8c0 [ 519.233401][T23265] ? __pfx_ksys_unshare+0x10/0x10 [ 519.233427][T23265] ? __pfx_ksys_write+0x10/0x10 [ 519.233472][T23265] __x64_sys_unshare+0x38/0x50 [ 519.233495][T23265] do_syscall_64+0xfa/0x3b0 [ 519.233527][T23265] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.233558][T23265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.233580][T23265] ? clear_bhb_loop+0x60/0xb0 [ 519.233608][T23265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.233627][T23265] RIP: 0033:0x7facfd38e9a9 [ 519.233647][T23265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.233666][T23265] RSP: 002b:00007facfb1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 519.233691][T23265] RAX: ffffffffffffffda RBX: 00007facfd5b5fa0 RCX: 00007facfd38e9a9 [ 519.233707][T23265] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 519.233720][T23265] RBP: 00007facfb1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 519.233733][T23265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 519.233746][T23265] R13: 0000000000000001 R14: 00007facfd5b5fa0 R15: 00007fff26a3f6b8 [ 519.233782][T23265] [ 519.928069][T23292] __nla_validate_parse: 7 callbacks suppressed [ 519.928091][T23292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6998'. [ 519.990382][T23294] tipc: Enabling of bearer rejected, already enabled [ 520.278442][T23305] netlink: 'syz.2.7004': attribute type 25 has an invalid length. [ 520.437776][T23313] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7007'. [ 520.469662][T23312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7008'. [ 520.552360][T23315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7006'. [ 520.776708][T23336] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7013'. [ 520.819925][T23335] tipc: Enabling of bearer rejected, already enabled [ 520.955059][T23346] delete_channel: no stack [ 521.036977][T23350] netlink: 'syz.4.7019': attribute type 25 has an invalid length. [ 521.066317][T23352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7020'. [ 521.142283][T23357] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7022'. [ 521.586608][T23376] syzkaller0: entered promiscuous mode [ 521.597406][T23376] syzkaller0: entered allmulticast mode [ 521.606282][T23382] tipc: Enabling of bearer rejected, already enabled [ 521.699382][T23388] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7028'. [ 521.958710][T23399] netlink: 'syz.0.7033': attribute type 25 has an invalid length. [ 522.044685][T23403] netlink: 'syz.2.7035': attribute type 4 has an invalid length. [ 522.064500][T23403] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7035'. [ 522.117299][T23406] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7037'. [ 522.447983][T23419] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 522.724959][T23426] tipc: Enabled bearer , priority 0 [ 522.763339][T23426] syzkaller0: entered promiscuous mode [ 522.798444][T23426] syzkaller0: entered allmulticast mode [ 522.879508][T23426] tipc: Resetting bearer [ 522.937545][T23430] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 522.946581][T23430] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 522.954654][T23430] tipc: Resetting bearer [ 523.037468][T23425] tipc: Resetting bearer [ 523.122829][T23425] tipc: Disabling bearer [ 523.341054][T23450] tipc: Enabling of bearer rejected, already enabled [ 523.368283][T23452] netlink: 'syz.0.7048': attribute type 25 has an invalid length. [ 523.466518][T23454] netlink: 'syz.4.7049': attribute type 1 has an invalid length. [ 523.661006][T23468] FAULT_INJECTION: forcing a failure. [ 523.661006][T23468] name failslab, interval 1, probability 0, space 0, times 0 [ 523.704683][T23468] CPU: 0 UID: 0 PID: 23468 Comm: syz.4.7054 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 523.704717][T23468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 523.704730][T23468] Call Trace: [ 523.704738][T23468] [ 523.704748][T23468] dump_stack_lvl+0x189/0x250 [ 523.704777][T23468] ? __pfx____ratelimit+0x10/0x10 [ 523.704809][T23468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 523.704832][T23468] ? __pfx__printk+0x10/0x10 [ 523.704862][T23468] ? __pfx___might_resched+0x10/0x10 [ 523.704896][T23468] ? fs_reclaim_acquire+0x7d/0x100 [ 523.704927][T23468] should_fail_ex+0x414/0x560 [ 523.704969][T23468] should_failslab+0xa8/0x100 [ 523.704993][T23468] kmem_cache_alloc_noprof+0x73/0x3c0 [ 523.705025][T23468] ? security_inode_alloc+0x39/0x330 [ 523.705070][T23468] security_inode_alloc+0x39/0x330 [ 523.705104][T23468] inode_init_always_gfp+0x9ed/0xdc0 [ 523.705150][T23468] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 523.705175][T23468] alloc_inode+0x82/0x1b0 [ 523.705206][T23468] ? __pfx_mqueue_fill_super+0x10/0x10 [ 523.705232][T23468] new_inode+0x22/0x170 [ 523.705253][T23468] ? sget_fc+0x962/0xa40 [ 523.705278][T23468] ? __pfx_mqueue_fill_super+0x10/0x10 [ 523.705306][T23468] mqueue_fill_super+0xdc/0x380 [ 523.705333][T23468] ? __pfx_mqueue_fill_super+0x10/0x10 [ 523.705361][T23468] get_tree_nodev+0xb8/0x150 [ 523.705395][T23468] vfs_get_tree+0x8f/0x2b0 [ 523.705432][T23468] fc_mount_longterm+0x1c/0x100 [ 523.705472][T23468] mq_init_ns+0x3a1/0x510 [ 523.705503][T23468] copy_ipcs+0x2f6/0x4f0 [ 523.705535][T23468] create_new_namespaces+0x218/0x720 [ 523.705575][T23468] ? security_capable+0x7e/0x2e0 [ 523.705612][T23468] unshare_nsproxy_namespaces+0x11c/0x170 [ 523.705650][T23468] ksys_unshare+0x4c8/0x8c0 [ 523.705691][T23468] ? __pfx_ksys_unshare+0x10/0x10 [ 523.705716][T23468] ? __pfx_ksys_write+0x10/0x10 [ 523.705744][T23468] ? rcu_is_watching+0x15/0xb0 [ 523.705792][T23468] __x64_sys_unshare+0x38/0x50 [ 523.705815][T23468] do_syscall_64+0xfa/0x3b0 [ 523.705846][T23468] ? lockdep_hardirqs_on+0x9c/0x150 [ 523.705876][T23468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.705898][T23468] ? clear_bhb_loop+0x60/0xb0 [ 523.705926][T23468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.705947][T23468] RIP: 0033:0x7facfd38e9a9 [ 523.705968][T23468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.705987][T23468] RSP: 002b:00007facfb1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 523.706012][T23468] RAX: ffffffffffffffda RBX: 00007facfd5b5fa0 RCX: 00007facfd38e9a9 [ 523.706029][T23468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 523.706042][T23468] RBP: 00007facfb1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 523.706055][T23468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 523.706068][T23468] R13: 0000000000000001 R14: 00007facfd5b5fa0 R15: 00007fff26a3f6b8 [ 523.706104][T23468] [ 524.205053][T23478] syzkaller0: entered promiscuous mode [ 524.227190][T23478] syzkaller0: entered allmulticast mode [ 524.413229][T23491] tipc: Enabling of bearer rejected, already enabled [ 524.613956][T23504] FAULT_INJECTION: forcing a failure. [ 524.613956][T23504] name failslab, interval 1, probability 0, space 0, times 0 [ 524.630953][T23504] CPU: 1 UID: 0 PID: 23504 Comm: syz.4.7067 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 524.630987][T23504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 524.631001][T23504] Call Trace: [ 524.631009][T23504] [ 524.631019][T23504] dump_stack_lvl+0x189/0x250 [ 524.631048][T23504] ? __pfx____ratelimit+0x10/0x10 [ 524.631081][T23504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 524.631103][T23504] ? __pfx__printk+0x10/0x10 [ 524.631139][T23504] ? __pfx___might_resched+0x10/0x10 [ 524.631179][T23504] should_fail_ex+0x414/0x560 [ 524.631221][T23504] should_failslab+0xa8/0x100 [ 524.631258][T23504] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 524.631291][T23504] ? __d_alloc+0x36/0x7a0 [ 524.631322][T23504] __d_alloc+0x36/0x7a0 [ 524.631354][T23504] d_make_root+0x4a/0xe0 [ 524.631381][T23504] mqueue_fill_super+0x26e/0x380 [ 524.631409][T23504] ? __pfx_mqueue_fill_super+0x10/0x10 [ 524.631437][T23504] get_tree_nodev+0xb8/0x150 [ 524.631473][T23504] vfs_get_tree+0x8f/0x2b0 [ 524.631509][T23504] fc_mount_longterm+0x1c/0x100 [ 524.631542][T23504] mq_init_ns+0x3a1/0x510 [ 524.631572][T23504] copy_ipcs+0x2f6/0x4f0 [ 524.631605][T23504] create_new_namespaces+0x218/0x720 [ 524.631645][T23504] ? security_capable+0x7e/0x2e0 [ 524.631684][T23504] unshare_nsproxy_namespaces+0x11c/0x170 [ 524.631722][T23504] ksys_unshare+0x4c8/0x8c0 [ 524.631755][T23504] ? __pfx_ksys_unshare+0x10/0x10 [ 524.631780][T23504] ? __pfx_ksys_write+0x10/0x10 [ 524.631825][T23504] __x64_sys_unshare+0x38/0x50 [ 524.631849][T23504] do_syscall_64+0xfa/0x3b0 [ 524.631888][T23504] ? lockdep_hardirqs_on+0x9c/0x150 [ 524.631919][T23504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.631941][T23504] ? clear_bhb_loop+0x60/0xb0 [ 524.631968][T23504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.631989][T23504] RIP: 0033:0x7facfd38e9a9 [ 524.632008][T23504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.632027][T23504] RSP: 002b:00007facfb1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 524.632053][T23504] RAX: ffffffffffffffda RBX: 00007facfd5b5fa0 RCX: 00007facfd38e9a9 [ 524.632069][T23504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 524.632082][T23504] RBP: 00007facfb1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 524.632094][T23504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 524.632107][T23504] R13: 0000000000000001 R14: 00007facfd5b5fa0 R15: 00007fff26a3f6b8 [ 524.632143][T23504] [ 525.102574][T23499] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.0.7063:23499 [ 525.230485][T23516] __nla_validate_parse: 6 callbacks suppressed [ 525.230507][T23516] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7070'. [ 525.477837][T23530] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.7074'. [ 525.573234][T23538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7075'. [ 525.909584][T23553] veth19: entered allmulticast mode [ 526.081788][T23565] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7083'. [ 526.103806][T23563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7086'. [ 526.561734][T23592] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7095'. [ 526.741448][T23600] IPVS: Unknown mcast interface: vcan0 [ 526.847130][T23600] vlan4: entered allmulticast mode [ 526.852411][T23600] bond0: entered allmulticast mode [ 526.912627][T23612] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7102'. [ 527.714138][T23658] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7116'. [ 529.447293][T23670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7118'. [ 529.520719][T23672] delete_channel: no stack [ 529.535021][T23634] vlan3: entered allmulticast mode [ 529.543620][T23634] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 529.556818][T23640] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7113'. [ 530.332052][T23702] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7129'. [ 530.534957][T23710] tunl0: left allmulticast mode [ 530.560627][T23710] gre0: left allmulticast mode [ 530.572773][T23710] gretap0: left allmulticast mode [ 530.599278][T23710] erspan0: left allmulticast mode [ 530.614085][T23715] netlink: 'syz.0.7134': attribute type 1 has an invalid length. [ 530.630457][T23710] ip_vti0: left allmulticast mode [ 530.646004][T23715] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7134'. [ 530.649603][T23710] ip6_vti0: left allmulticast mode [ 530.681897][T23710] sit0: left allmulticast mode [ 530.691835][T23720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7133'. [ 530.713512][T23710] ip6tnl0: left allmulticast mode [ 530.728804][T23710] ip6gre0: left allmulticast mode [ 530.742780][T23710] syz_tun: left allmulticast mode [ 530.753919][T23710] ip6gretap0: left allmulticast mode [ 530.768598][T23710] bridge0: left allmulticast mode [ 530.787207][T23710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.800559][T23710] team0: left allmulticast mode [ 530.808647][T23710] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.821706][T23710] !: left allmulticast mode [ 530.838713][T23710] nlmon0: left allmulticast mode [ 530.882899][T23710] caif0: left allmulticast mode [ 530.890307][T23710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 531.087324][T23726] sctp: [Deprecated]: syz.1.7136 (pid 23726) Use of int in max_burst socket option. [ 531.087324][T23726] Use struct sctp_assoc_value instead [ 531.097791][T23730] netlink: 'syz.4.7140': attribute type 10 has an invalid length. [ 531.123607][T23730] bridge_slave_1: left allmulticast mode [ 531.140773][T23730] bridge_slave_1: entered allmulticast mode [ 531.153080][T23730] bond0: (slave bridge_slave_1): Enslaving as an active interface with a down link [ 531.212251][T23734] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7137'. [ 531.320920][T23739] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7142'. [ 531.440304][T23744] pimreg: entered allmulticast mode [ 531.628150][T23748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7144'. [ 532.003259][T23732] warn_alloc: 1 callbacks suppressed [ 532.003281][T23732] syz.0.7138: vmalloc error: size 8654848, failed to allocated page array size 16904, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 532.048580][T23732] CPU: 0 UID: 0 PID: 23732 Comm: syz.0.7138 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 532.048615][T23732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.048630][T23732] Call Trace: [ 532.048638][T23732] [ 532.048649][T23732] dump_stack_lvl+0x189/0x250 [ 532.048686][T23732] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 532.048718][T23732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.048742][T23732] ? __pfx__printk+0x10/0x10 [ 532.048771][T23732] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 532.048797][T23732] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 532.048832][T23732] warn_alloc+0x214/0x310 [ 532.048863][T23732] ? __pfx_warn_alloc+0x10/0x10 [ 532.048899][T23732] ? __get_vm_area_node+0x28f/0x300 [ 532.048935][T23732] ? bpf_check+0xf20/0x1d2d0 [ 532.048965][T23732] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 532.049023][T23732] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 532.049052][T23732] ? rcu_is_watching+0x15/0xb0 [ 532.049089][T23732] ? bpf_check+0xf20/0x1d2d0 [ 532.049113][T23732] ? bpf_check+0xf20/0x1d2d0 [ 532.049136][T23732] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 532.049187][T23732] ? bpf_check+0xf20/0x1d2d0 [ 532.049213][T23732] ? ns_capable+0x8a/0xf0 [ 532.049253][T23732] bpf_check+0xf20/0x1d2d0 [ 532.049279][T23732] ? page_table_check_set+0x18d/0x730 [ 532.049314][T23732] ? __handle_mm_fault+0x3cd2/0x5620 [ 532.049353][T23732] ? __handle_mm_fault+0x3ce3/0x5620 [ 532.049399][T23732] ? css_rstat_updated+0x1a5/0xca0 [ 532.049458][T23732] ? count_memcg_event_mm+0x21/0x260 [ 532.049498][T23732] ? __up_read+0x280/0x680 [ 532.049533][T23732] ? __lock_acquire+0xab9/0xd20 [ 532.049573][T23732] ? __pfx_bpf_check+0x10/0x10 [ 532.049599][T23732] ? ktime_get_with_offset+0x8c/0x2a0 [ 532.049635][T23732] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 532.049660][T23732] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.049693][T23732] ? ktime_get_with_offset+0x8c/0x2a0 [ 532.049716][T23732] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 532.049742][T23732] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 532.049781][T23732] ? __asan_memset+0x22/0x50 [ 532.049810][T23732] ? bpf_obj_name_cpy+0x194/0x1e0 [ 532.049831][T23732] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 532.049862][T23732] ? security_bpf_prog_load+0x7f/0x310 [ 532.049908][T23732] bpf_prog_load+0x1318/0x1930 [ 532.049958][T23732] ? __pfx_bpf_prog_load+0x10/0x10 [ 532.050018][T23732] ? bpf_lsm_bpf+0x9/0x20 [ 532.050046][T23732] ? security_bpf+0x7e/0x300 [ 532.050076][T23732] __sys_bpf+0x528/0x870 [ 532.050112][T23732] ? __pfx___sys_bpf+0x10/0x10 [ 532.050155][T23732] ? exc_page_fault+0x76/0xf0 [ 532.050210][T23732] __x64_sys_bpf+0x7c/0x90 [ 532.050240][T23732] do_syscall_64+0xfa/0x3b0 [ 532.050272][T23732] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.050304][T23732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.050327][T23732] ? clear_bhb_loop+0x60/0xb0 [ 532.050353][T23732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.050374][T23732] RIP: 0033:0x7f75d7d8e9a9 [ 532.050394][T23732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.050414][T23732] RSP: 002b:00007f75d8b66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 532.050438][T23732] RAX: ffffffffffffffda RBX: 00007f75d7fb5fa0 RCX: 00007f75d7d8e9a9 [ 532.050454][T23732] RDX: 0000000000000090 RSI: 0000200000000300 RDI: 0000000000000005 [ 532.050469][T23732] RBP: 00007f75d7e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 532.050482][T23732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.050495][T23732] R13: 0000000000000001 R14: 00007f75d7fb5fa0 R15: 00007ffff96c66c8 [ 532.050530][T23732] [ 532.050540][T23732] Mem-Info: [ 532.463327][T23732] active_anon:9569 inactive_anon:0 isolated_anon:0 [ 532.463327][T23732] active_file:1609 inactive_file:40003 isolated_file:0 [ 532.463327][T23732] unevictable:768 dirty:332 writeback:0 [ 532.463327][T23732] slab_reclaimable:11747 slab_unreclaimable:120722 [ 532.463327][T23732] mapped:29363 shmem:1362 pagetables:1305 [ 532.463327][T23732] sec_pagetables:0 bounce:0 [ 532.463327][T23732] kernel_misc_reclaimable:0 [ 532.463327][T23732] free:1275305 free_pcp:21091 free_cma:0 [ 532.517486][T23732] Node 0 active_anon:38268kB inactive_anon:0kB active_file:6436kB inactive_file:159812kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117404kB dirty:1328kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13116kB pagetables:5048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 532.563821][T23732] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 532.595909][T23764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7149'. [ 532.596169][T23764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7149'. [ 532.619563][T23732] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 532.654219][T23732] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 532.683175][T23732] Node 0 DMA32 free:1185468kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38016kB inactive_anon:0kB active_file:6436kB inactive_file:157988kB unevictable:1536kB writepending:1328kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:70824kB local_pcp:55716kB free_cma:0kB [ 532.719131][T23732] lowmem_reserve[]: 0 0 1 1 1 [ 532.725039][T23732] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 532.789101][T23771] netlink: 348 bytes leftover after parsing attributes in process `syz.4.7152'. [ 532.829883][T23732] lowmem_reserve[]: 0 0 0 0 0 [ 532.847532][T23732] Node 1 Normal free:3900372kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:14660kB local_pcp:6336kB free_cma:0kB [ 532.922900][T23732] lowmem_reserve[]: 0 0 0 0 0 [ 532.934811][T23732] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 532.978380][T23732] Node 0 DMA32: 312*4kB (UME) 386*8kB (UME) 302*16kB (ME) 145*32kB (ME) 39*64kB (ME) 42*128kB (UME) 12*256kB (UME) 7*512kB (UME) 4*1024kB (UM) 3*2048kB (UM) 280*4096kB (M) = 1185456kB [ 533.029878][T23732] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 533.067353][T23732] Node 1 Normal: 199*4kB (UM) 39*8kB (UME) 42*16kB (UME) 211*32kB (UME) 62*64kB (UME) 12*128kB (UME) 5*256kB (UME) 6*512kB (UME) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3900372kB [ 533.102540][T23732] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 533.123398][T23732] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 533.142848][T23791] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 533.160299][T23732] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 533.228792][T23732] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 533.269340][T23732] 42970 total pagecache pages [ 533.281275][T23732] 0 pages in swap cache [ 533.309946][T23732] Free swap = 124996kB [ 533.319554][T23732] Total swap = 124996kB [ 533.330885][T23732] 2097051 pages RAM [ 533.344437][T23732] 0 pages HighMem/MovableOnly [ 533.381067][T23732] 424872 pages reserved [ 533.415231][T23732] 0 pages cma reserved [ 534.007120][T23826] netlink: 'syz.2.7171': attribute type 1 has an invalid length. [ 534.033412][T23826] Bluetooth: MGMT ver 1.23 [ 534.112985][T23829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7172'. [ 534.180567][T23832] openvswitch: netlink: Key type 85 is out of range max 32 [ 534.222847][T23834] tipc: Enabled bearer , priority 0 [ 534.280704][T23834] tipc: Resetting bearer [ 534.303215][T23833] tipc: Disabling bearer [ 534.683351][T23858] tunl0: left allmulticast mode [ 534.707618][T23858] gre0: left allmulticast mode [ 534.740740][T23858] gretap0: left allmulticast mode [ 534.772154][T23858] erspan0: left allmulticast mode [ 534.828801][T23858] ip_vti0: left allmulticast mode [ 534.841003][T23858] ip6_vti0: left allmulticast mode [ 534.849142][T23858] sit0: left allmulticast mode [ 534.867847][T23858] ip6tnl0: left allmulticast mode [ 534.881419][T23858] ip6gre0: left allmulticast mode [ 534.891568][T23858] ip6gretap0: left allmulticast mode [ 534.903229][T23858] team0: left allmulticast mode [ 534.916984][T23858] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.927731][T23858] tipc: Resetting bearer [ 534.934252][T23858] tipc: Resetting bearer [ 534.943585][T23858] nlmon0: left allmulticast mode [ 534.952346][T23858] caif0: left allmulticast mode [ 534.959314][T23858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 535.131653][T23881] tipc: Enabling of bearer rejected, already enabled [ 535.142230][T23882] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 535.150044][T23882] IPv6: NLM_F_CREATE should be set when creating new route [ 535.569017][T23901] bridge12: entered promiscuous mode [ 535.584034][T23901] bridge12: entered allmulticast mode [ 535.768837][T23911] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 536.052934][T23929] __nla_validate_parse: 5 callbacks suppressed [ 536.052955][T23929] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7212'. [ 536.074409][T23929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7212'. [ 536.384657][T23946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7220'. [ 536.830401][T23965] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7226'. [ 536.850525][T23965] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7226'. [ 537.203194][T23982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7233'. [ 537.283580][T23984] openvswitch: netlink: IP tunnel TTL not specified. [ 537.303633][T23986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.429762][T23990] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 537.614460][T23999] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 538.080526][T24027] FAULT_INJECTION: forcing a failure. [ 538.080526][T24027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.119249][T24028] 8021q: VLANs not supported on xfrm0 [ 538.127132][T24027] CPU: 1 UID: 0 PID: 24027 Comm: syz.2.7252 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 538.127166][T24027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 538.127181][T24027] Call Trace: [ 538.127189][T24027] [ 538.127199][T24027] dump_stack_lvl+0x189/0x250 [ 538.127228][T24027] ? __pfx____ratelimit+0x10/0x10 [ 538.127260][T24027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.127283][T24027] ? __pfx__printk+0x10/0x10 [ 538.127326][T24027] should_fail_ex+0x414/0x560 [ 538.127367][T24027] _copy_from_user+0x2d/0xb0 [ 538.127400][T24027] get_user_ifreq+0x6c/0x180 [ 538.127429][T24027] sock_ioctl+0x6dd/0x790 [ 538.127460][T24027] ? __pfx_sock_ioctl+0x10/0x10 [ 538.127498][T24027] ? __fget_files+0x3a0/0x420 [ 538.127519][T24027] ? __fget_files+0x2a/0x420 [ 538.127545][T24027] ? bpf_lsm_file_ioctl+0x9/0x20 [ 538.127574][T24027] ? __pfx_sock_ioctl+0x10/0x10 [ 538.127601][T24027] __se_sys_ioctl+0xf9/0x170 [ 538.127633][T24027] do_syscall_64+0xfa/0x3b0 [ 538.127665][T24027] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.127696][T24027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.127717][T24027] ? clear_bhb_loop+0x60/0xb0 [ 538.127745][T24027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.127766][T24027] RIP: 0033:0x7f103118e9a9 [ 538.127787][T24027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.127806][T24027] RSP: 002b:00007f1031f82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 538.127830][T24027] RAX: ffffffffffffffda RBX: 00007f10313b5fa0 RCX: 00007f103118e9a9 [ 538.127846][T24027] RDX: 0000200000000480 RSI: 00000000000089f2 RDI: 0000000000000003 [ 538.127860][T24027] RBP: 00007f1031f82090 R08: 0000000000000000 R09: 0000000000000000 [ 538.127873][T24027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.127885][T24027] R13: 0000000000000000 R14: 00007f10313b5fa0 R15: 00007fff468e2e28 [ 538.127919][T24027] [ 538.595460][T24041] IPVS: Unknown mcast interface: vcan0 [ 538.781089][T24056] netlink: 'syz.1.7261': attribute type 29 has an invalid length. [ 538.819237][T24056] netlink: 'syz.1.7261': attribute type 29 has an invalid length. [ 539.093937][T24073] FAULT_INJECTION: forcing a failure. [ 539.093937][T24073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.122264][T24073] CPU: 1 UID: 0 PID: 24073 Comm: syz.1.7268 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 539.122297][T24073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 539.122311][T24073] Call Trace: [ 539.122319][T24073] [ 539.122329][T24073] dump_stack_lvl+0x189/0x250 [ 539.122357][T24073] ? __pfx____ratelimit+0x10/0x10 [ 539.122390][T24073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.122423][T24073] ? __pfx__printk+0x10/0x10 [ 539.122451][T24073] ? __might_fault+0xb0/0x130 [ 539.122497][T24073] should_fail_ex+0x414/0x560 [ 539.122539][T24073] _copy_from_user+0x2d/0xb0 [ 539.122571][T24073] ___sys_sendmsg+0x158/0x2a0 [ 539.122598][T24073] ? __pfx____sys_sendmsg+0x10/0x10 [ 539.122668][T24073] ? __fget_files+0x2a/0x420 [ 539.122693][T24073] ? __fget_files+0x3a0/0x420 [ 539.122728][T24073] __sys_sendmmsg+0x227/0x430 [ 539.122758][T24073] ? __pfx___sys_sendmmsg+0x10/0x10 [ 539.122779][T24073] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 539.122841][T24073] ? ksys_write+0x22a/0x250 [ 539.122875][T24073] ? __pfx_ksys_write+0x10/0x10 [ 539.122914][T24073] __x64_sys_sendmmsg+0xa0/0xc0 [ 539.122939][T24073] do_syscall_64+0xfa/0x3b0 [ 539.122970][T24073] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.123000][T24073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.123022][T24073] ? clear_bhb_loop+0x60/0xb0 [ 539.123048][T24073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.123068][T24073] RIP: 0033:0x7f442378e9a9 [ 539.123088][T24073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.123108][T24073] RSP: 002b:00007f442454c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 539.123133][T24073] RAX: ffffffffffffffda RBX: 00007f44239b5fa0 RCX: 00007f442378e9a9 [ 539.123148][T24073] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 539.123161][T24073] RBP: 00007f442454c090 R08: 0000000000000000 R09: 0000000000000000 [ 539.123174][T24073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.123208][T24073] R13: 0000000000000000 R14: 00007f44239b5fa0 R15: 00007ffc81de74e8 [ 539.123242][T24073] [ 539.426932][T24081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7270'. [ 539.579180][T24090] netlink: 'syz.0.7274': attribute type 1 has an invalid length. [ 539.594521][T24081] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 539.628405][T24090] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒž”Œ [ 539.689059][T24091] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7273'. [ 539.776508][T24097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7276'. [ 540.501574][T24138] netlink: 'syz.2.7289': attribute type 7 has an invalid length. [ 540.521137][T24140] tipc: Enabled bearer , priority 10 [ 540.859450][T24153] syzkaller0: entered promiscuous mode [ 540.890578][T24153] syzkaller0: entered allmulticast mode [ 540.977609][T24159] veth0: entered promiscuous mode [ 541.027637][T24169] netlink: 'syz.1.7298': attribute type 1 has an invalid length. [ 541.051849][T24171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7294'. [ 541.060446][T24169] netlink: 'syz.1.7298': attribute type 2 has an invalid length. [ 541.078689][T24158] veth0: left promiscuous mode [ 541.096374][T24175] netlink: 'syz.1.7298': attribute type 27 has an invalid length. [ 541.129239][T24169] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7298'. [ 541.368705][T24191] bond0: option mode: unable to set because the bond device has slaves [ 541.539657][T24201] netlink: 'syz.3.7306': attribute type 11 has an invalid length. [ 541.581633][T24201] netlink: 'syz.3.7306': attribute type 11 has an invalid length. [ 541.593370][T24201] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7306'. [ 541.678933][T17716] hid-generic 0005:10CF:0009.0006: unknown main item tag 0x0 [ 541.701923][T17716] hid-generic 0005:10CF:0009.0006: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 541.747354][T24207] 8021q: VLANs not supported on ip_vti0 [ 541.804723][T24207] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 541.822723][T24207] team0: Device macvtap1 is already an upper device of the team interface [ 542.262886][T24239] tipc: Enabled bearer , priority 0 [ 542.310173][T24239] tipc: Resetting bearer [ 542.459926][T24244] netlink: 'syz.0.7318': attribute type 10 has an invalid length. [ 542.980224][T24237] tipc: Disabling bearer [ 543.248770][T24259] netlink: 'syz.4.7324': attribute type 1 has an invalid length. [ 543.344671][T24262] syzkaller0: entered promiscuous mode [ 543.352095][T24262] syzkaller0: entered allmulticast mode [ 543.399406][T24267] bond0: entered promiscuous mode [ 543.426815][T24267] batadv0: entered promiscuous mode [ 543.448853][T24267] batadv0: left promiscuous mode [ 543.470585][T24267] bond0: left promiscuous mode [ 543.910846][T24303] tipc: Enabling of bearer rejected, already enabled [ 543.922804][T24307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7336'. [ 543.950805][T24307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7336'. [ 544.141899][T24318] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 544.167772][T24320] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7339'. [ 544.233563][T24324] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7342'. [ 544.361248][T24337] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7345'. [ 544.376991][T24337] netlink: 21 bytes leftover after parsing attributes in process `syz.4.7345'. [ 544.397925][T24337] netlink: 21 bytes leftover after parsing attributes in process `syz.4.7345'. [ 544.618503][T24346] syzkaller0: entered promiscuous mode [ 544.640893][T24346] syzkaller0: entered allmulticast mode [ 544.802871][T24355] veth1_macvtap: left promiscuous mode [ 544.818963][T24355] macsec0: entered promiscuous mode [ 544.825099][T24355] macsec0: entered allmulticast mode [ 544.843124][T24355] veth1_macvtap: entered promiscuous mode [ 544.856644][T24355] veth1_macvtap: entered allmulticast mode [ 544.862977][T24355] macsec0: left promiscuous mode [ 544.886902][T24355] macsec0: left allmulticast mode [ 544.892594][T24355] veth1_macvtap: left allmulticast mode [ 544.967202][T24363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7355'. [ 545.313041][T24372] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 545.504820][T24384] IPVS: ip_vs_edit_dest(): server weight less than zero [ 545.939749][T24408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.194006][T24421] __nla_validate_parse: 5 callbacks suppressed [ 546.194026][T24421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7374'. [ 546.300662][T24429] netlink: 'syz.2.7375': attribute type 1 has an invalid length. [ 546.468559][T24436] syzkaller0: entered promiscuous mode [ 546.474273][T24436] syzkaller0: entered allmulticast mode [ 546.707889][T24451] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.7384'. [ 546.776484][T24451] netlink: zone id is out of range [ 546.809677][T24451] netlink: get zone limit has 8 unknown bytes [ 546.820632][T24463] FAULT_INJECTION: forcing a failure. [ 546.820632][T24463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.910035][T24463] CPU: 0 UID: 0 PID: 24463 Comm: syz.2.7387 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 546.910068][T24463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 546.910083][T24463] Call Trace: [ 546.910092][T24463] [ 546.910102][T24463] dump_stack_lvl+0x189/0x250 [ 546.910131][T24463] ? __pfx____ratelimit+0x10/0x10 [ 546.910164][T24463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 546.910187][T24463] ? __pfx__printk+0x10/0x10 [ 546.910230][T24463] should_fail_ex+0x414/0x560 [ 546.910272][T24463] _copy_to_user+0x31/0xb0 [ 546.910305][T24463] simple_read_from_buffer+0xe1/0x170 [ 546.910345][T24463] proc_fail_nth_read+0x1b3/0x220 [ 546.910376][T24463] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 546.910407][T24463] ? rw_verify_area+0x258/0x650 [ 546.910437][T24463] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 546.910465][T24463] vfs_read+0x1fd/0x980 [ 546.910495][T24463] ? fdget_pos+0x247/0x320 [ 546.910521][T24463] ? __pfx___mutex_lock+0x10/0x10 [ 546.910555][T24463] ? __pfx_vfs_read+0x10/0x10 [ 546.910587][T24463] ? __fget_files+0x2a/0x420 [ 546.910614][T24463] ? __fget_files+0x3a0/0x420 [ 546.910634][T24463] ? __fget_files+0x2a/0x420 [ 546.910675][T24463] ksys_read+0x145/0x250 [ 546.910710][T24463] ? __pfx_ksys_read+0x10/0x10 [ 546.910738][T24463] ? rcu_is_watching+0x15/0xb0 [ 546.910778][T24463] ? do_syscall_64+0xbe/0x3b0 [ 546.910816][T24463] do_syscall_64+0xfa/0x3b0 [ 546.910847][T24463] ? lockdep_hardirqs_on+0x9c/0x150 [ 546.910878][T24463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.910900][T24463] ? clear_bhb_loop+0x60/0xb0 [ 546.910928][T24463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.910949][T24463] RIP: 0033:0x7f103118d3bc [ 546.910968][T24463] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 546.910987][T24463] RSP: 002b:00007f1031f82030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 546.911012][T24463] RAX: ffffffffffffffda RBX: 00007f10313b5fa0 RCX: 00007f103118d3bc [ 546.911028][T24463] RDX: 000000000000000f RSI: 00007f1031f820a0 RDI: 0000000000000004 [ 546.911041][T24463] RBP: 00007f1031f82090 R08: 0000000000000000 R09: 0000000000000000 [ 546.911055][T24463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.911068][T24463] R13: 0000000000000000 R14: 00007f10313b5fa0 R15: 00007fff468e2e28 [ 546.911104][T24463] [ 546.940278][T24462] syzkaller0: entered promiscuous mode [ 547.213673][T24462] syzkaller0: entered allmulticast mode [ 547.387181][T24483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.426499][T24483] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7392'. [ 549.133327][T17709] page_pool_release_retry() stalled pool shutdown: id 87, 1 inflight 121 sec [ 549.720454][T24493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7395'. [ 550.045669][T24514] netlink: 'syz.2.7402': attribute type 25 has an invalid length. [ 550.313889][T24532] sctp: [Deprecated]: syz.1.7407 (pid 24532) Use of int in max_burst socket option deprecated. [ 550.313889][T24532] Use struct sctp_assoc_value instead [ 550.433927][T24540] openvswitch: netlink: Flow actions attr not present in new flow. [ 550.880959][T24562] netlink: 'syz.0.7415': attribute type 10 has an invalid length. [ 551.123611][T24572] openvswitch: netlink: Flow actions attr not present in new flow. [ 551.214348][T24578] netlink: 'syz.4.7423': attribute type 1 has an invalid length. [ 551.232993][T24578] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7423'. [ 551.250247][T24578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7423'. [ 551.569597][T24609] tipc: Enabled bearer , priority 0 [ 551.602315][T24609] tipc: Disabling bearer [ 551.730502][T24616] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7433'. [ 551.779069][T24618] C: renamed from team_slave_0 [ 551.791771][T24618] netlink: 'syz.3.7432': attribute type 1 has an invalid length. [ 551.812060][T24618] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 552.058283][T24634] netlink: 'syz.0.7439': attribute type 7 has an invalid length. [ 552.088051][T24634] netlink: 140 bytes leftover after parsing attributes in process `syz.0.7439'. [ 552.200988][T24639] sit0: left promiscuous mode [ 552.329012][T24639] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.336419][T24639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.381812][T24639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 552.511948][T24651] syzkaller0: entered promiscuous mode [ 552.527485][T24651] syzkaller0: entered allmulticast mode [ 552.605868][T24656] tipc: Enabled bearer , priority 0 [ 552.659447][T24656] tipc: Resetting bearer [ 552.682701][T24655] tipc: Disabling bearer [ 552.943928][T24672] netlink: 'syz.2.7455': attribute type 25 has an invalid length. [ 553.219441][T24688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7459'. [ 553.404826][T24698] tipc: Enabling of bearer rejected, already enabled [ 553.435002][T24697] syzkaller0: entered promiscuous mode [ 553.441767][T24697] syzkaller0: entered allmulticast mode [ 553.468179][T24700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7464'. [ 553.490898][T24700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7464'. [ 553.581478][T24700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7464'. [ 553.606510][T24700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7464'. [ 553.652058][T24707] netlink: 'syz.4.7467': attribute type 25 has an invalid length. [ 553.778745][T24712] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 554.094199][T24739] tipc: Enabling of bearer rejected, already enabled [ 554.420987][T24755] netlink: 'syz.2.7482': attribute type 25 has an invalid length. [ 554.794852][T24774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.810890][T24774] netlink: 'syz.0.7488': attribute type 29 has an invalid length. [ 554.883889][T24778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7490'. [ 554.950219][T24782] syzkaller0: entered promiscuous mode [ 554.963284][T24782] syzkaller0: entered allmulticast mode [ 555.104914][T24790] sit0: entered promiscuous mode [ 555.137655][T24790] netlink: 'syz.2.7495': attribute type 1 has an invalid length. [ 555.482987][T24810] xfrm1: entered promiscuous mode [ 555.536979][T24810] xfrm1: entered allmulticast mode [ 555.591420][T24820] netlink: 'syz.3.7503': attribute type 10 has an invalid length. [ 555.600055][T24818] netlink: 'syz.1.7502': attribute type 30 has an invalid length. [ 555.600510][T24818] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 555.600534][T24818] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 555.661847][T24820] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 555.719184][T24823] FAULT_INJECTION: forcing a failure. [ 555.719184][T24823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.741014][T24823] CPU: 0 UID: 0 PID: 24823 Comm: syz.2.7504 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 555.741047][T24823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 555.741061][T24823] Call Trace: [ 555.741070][T24823] [ 555.741079][T24823] dump_stack_lvl+0x189/0x250 [ 555.741108][T24823] ? __pfx____ratelimit+0x10/0x10 [ 555.741139][T24823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 555.741162][T24823] ? __pfx__printk+0x10/0x10 [ 555.741189][T24823] ? __might_fault+0xb0/0x130 [ 555.741235][T24823] should_fail_ex+0x414/0x560 [ 555.741276][T24823] _copy_from_user+0x2d/0xb0 [ 555.741308][T24823] ___sys_sendmsg+0x158/0x2a0 [ 555.741335][T24823] ? __pfx____sys_sendmsg+0x10/0x10 [ 555.741402][T24823] ? __fget_files+0x2a/0x420 [ 555.741423][T24823] ? __fget_files+0x3a0/0x420 [ 555.741457][T24823] __x64_sys_sendmsg+0x19b/0x260 [ 555.741483][T24823] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 555.741518][T24823] ? __pfx_ksys_write+0x10/0x10 [ 555.741548][T24823] ? rcu_is_watching+0x15/0xb0 [ 555.741588][T24823] ? do_syscall_64+0xbe/0x3b0 [ 555.741626][T24823] do_syscall_64+0xfa/0x3b0 [ 555.741657][T24823] ? lockdep_hardirqs_on+0x9c/0x150 [ 555.741687][T24823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.741709][T24823] ? clear_bhb_loop+0x60/0xb0 [ 555.741736][T24823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.741757][T24823] RIP: 0033:0x7f103118e9a9 [ 555.741794][T24823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.741813][T24823] RSP: 002b:00007f1031f82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 555.741838][T24823] RAX: ffffffffffffffda RBX: 00007f10313b5fa0 RCX: 00007f103118e9a9 [ 555.741854][T24823] RDX: 0000000000048880 RSI: 00002000000002c0 RDI: 0000000000000003 [ 555.741868][T24823] RBP: 00007f1031f82090 R08: 0000000000000000 R09: 0000000000000000 [ 555.741881][T24823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.741893][T24823] R13: 0000000000000000 R14: 00007f10313b5fa0 R15: 00007fff468e2e28 [ 555.741927][T24823] [ 555.932093][T24828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.962571][T24834] tipc: Enabled bearer , priority 0 [ 555.980068][T24834] syzkaller0: entered promiscuous mode [ 555.985701][T24834] syzkaller0: entered allmulticast mode [ 555.997186][T24834] tipc: Resetting bearer [ 556.012173][T24827] tipc: Resetting bearer [ 556.049745][T24827] tipc: Disabling bearer [ 556.149811][T24838] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 556.401366][T24853] __nla_validate_parse: 4 callbacks suppressed [ 556.401390][T24853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7512'. [ 557.051186][T24882] FAULT_INJECTION: forcing a failure. [ 557.051186][T24882] name failslab, interval 1, probability 0, space 0, times 0 [ 557.111991][T24882] CPU: 1 UID: 0 PID: 24882 Comm: syz.2.7517 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 557.112024][T24882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 557.112038][T24882] Call Trace: [ 557.112047][T24882] [ 557.112057][T24882] dump_stack_lvl+0x189/0x250 [ 557.112093][T24882] ? __pfx____ratelimit+0x10/0x10 [ 557.112124][T24882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 557.112147][T24882] ? __pfx__printk+0x10/0x10 [ 557.112181][T24882] ? __pfx___might_resched+0x10/0x10 [ 557.112220][T24882] should_fail_ex+0x414/0x560 [ 557.112260][T24882] should_failslab+0xa8/0x100 [ 557.112283][T24882] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 557.112317][T24882] ? __alloc_skb+0x112/0x2d0 [ 557.112357][T24882] __alloc_skb+0x112/0x2d0 [ 557.112396][T24882] netlink_sendmsg+0x5c6/0xb30 [ 557.112442][T24882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.112480][T24882] ? aa_sock_msg_perm+0x94/0x160 [ 557.112512][T24882] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 557.112536][T24882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.112570][T24882] __sock_sendmsg+0x21c/0x270 [ 557.112603][T24882] ____sys_sendmsg+0x505/0x830 [ 557.112633][T24882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.112669][T24882] ? import_iovec+0x74/0xa0 [ 557.112705][T24882] ___sys_sendmsg+0x21f/0x2a0 [ 557.112732][T24882] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.112799][T24882] ? __fget_files+0x2a/0x420 [ 557.112819][T24882] ? __fget_files+0x3a0/0x420 [ 557.112853][T24882] __x64_sys_sendmsg+0x19b/0x260 [ 557.112880][T24882] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 557.112915][T24882] ? __pfx_ksys_write+0x10/0x10 [ 557.112953][T24882] ? rcu_is_watching+0x15/0xb0 [ 557.112993][T24882] ? do_syscall_64+0xbe/0x3b0 [ 557.113034][T24882] do_syscall_64+0xfa/0x3b0 [ 557.113072][T24882] ? lockdep_hardirqs_on+0x9c/0x150 [ 557.113102][T24882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.113124][T24882] ? clear_bhb_loop+0x60/0xb0 [ 557.113151][T24882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.113172][T24882] RIP: 0033:0x7f103118e9a9 [ 557.113192][T24882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.113211][T24882] RSP: 002b:00007f1031f82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.113237][T24882] RAX: ffffffffffffffda RBX: 00007f10313b5fa0 RCX: 00007f103118e9a9 [ 557.113253][T24882] RDX: 0000000000048880 RSI: 00002000000002c0 RDI: 0000000000000003 [ 557.113267][T24882] RBP: 00007f1031f82090 R08: 0000000000000000 R09: 0000000000000000 [ 557.113281][T24882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.113293][T24882] R13: 0000000000000000 R14: 00007f10313b5fa0 R15: 00007fff468e2e28 [ 557.113328][T24882] [ 557.655069][T24898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7524'. [ 557.911056][T24920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7530'. [ 557.999592][T24923] sit0: left promiscuous mode [ 558.098032][T24923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.098487][T24932] netlink: 'syz.2.7533': attribute type 11 has an invalid length. [ 558.119681][T24932] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7533'. [ 558.130772][T24923] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 558.868263][T24976] FAULT_INJECTION: forcing a failure. [ 558.868263][T24976] name failslab, interval 1, probability 0, space 0, times 0 [ 558.902262][T24976] CPU: 1 UID: 0 PID: 24976 Comm: syz.4.7546 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 558.902298][T24976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 558.902312][T24976] Call Trace: [ 558.902321][T24976] [ 558.902331][T24976] dump_stack_lvl+0x189/0x250 [ 558.902359][T24976] ? __pfx____ratelimit+0x10/0x10 [ 558.902400][T24976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.902424][T24976] ? __pfx__printk+0x10/0x10 [ 558.902454][T24976] ? __lock_acquire+0xab9/0xd20 [ 558.902497][T24976] should_fail_ex+0x414/0x560 [ 558.902543][T24976] should_failslab+0xa8/0x100 [ 558.902568][T24976] kmem_cache_alloc_noprof+0x73/0x3c0 [ 558.902600][T24976] ? skb_clone+0x212/0x3a0 [ 558.902631][T24976] skb_clone+0x212/0x3a0 [ 558.902660][T24976] __netlink_deliver_tap+0x404/0x850 [ 558.902709][T24976] ? netlink_deliver_tap+0x2e/0x1b0 [ 558.902751][T24976] netlink_deliver_tap+0x19c/0x1b0 [ 558.902785][T24976] netlink_unicast+0x7fa/0x9e0 [ 558.902826][T24976] ? __pfx_netlink_unicast+0x10/0x10 [ 558.902858][T24976] ? netlink_sendmsg+0x642/0xb30 [ 558.902888][T24976] ? skb_put+0x11b/0x210 [ 558.902914][T24976] netlink_sendmsg+0x805/0xb30 [ 558.902959][T24976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.903003][T24976] ? aa_sock_msg_perm+0x94/0x160 [ 558.903036][T24976] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 558.903061][T24976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.903095][T24976] __sock_sendmsg+0x21c/0x270 [ 558.903129][T24976] sock_write_iter+0x258/0x330 [ 558.903161][T24976] ? __pfx_sock_write_iter+0x10/0x10 [ 558.903204][T24976] ? __pfx_aa_file_perm+0x10/0x10 [ 558.903244][T24976] do_iter_readv_writev+0x56e/0x7f0 [ 558.903281][T24976] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 558.903319][T24976] ? bpf_lsm_file_permission+0x9/0x20 [ 558.903347][T24976] ? security_file_permission+0x75/0x290 [ 558.903373][T24976] ? rw_verify_area+0x258/0x650 [ 558.903410][T24976] vfs_writev+0x31a/0x960 [ 558.903439][T24976] ? __lock_acquire+0xab9/0xd20 [ 558.903473][T24976] ? __pfx_vfs_writev+0x10/0x10 [ 558.903516][T24976] ? __fget_files+0x2a/0x420 [ 558.903542][T24976] ? __fget_files+0x3a0/0x420 [ 558.903560][T24976] ? __fget_files+0x2a/0x420 [ 558.903592][T24976] do_writev+0x14d/0x2d0 [ 558.903619][T24976] ? __pfx_do_writev+0x10/0x10 [ 558.903639][T24976] ? rcu_is_watching+0x15/0xb0 [ 558.903680][T24976] ? do_syscall_64+0xbe/0x3b0 [ 558.903718][T24976] do_syscall_64+0xfa/0x3b0 [ 558.903757][T24976] ? lockdep_hardirqs_on+0x9c/0x150 [ 558.903787][T24976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.903807][T24976] ? clear_bhb_loop+0x60/0xb0 [ 558.903835][T24976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.903855][T24976] RIP: 0033:0x7facfd38e9a9 [ 558.903875][T24976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.903894][T24976] RSP: 002b:00007facfb1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 558.903920][T24976] RAX: ffffffffffffffda RBX: 00007facfd5b5fa0 RCX: 00007facfd38e9a9 [ 558.903936][T24976] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 558.903949][T24976] RBP: 00007facfb1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 558.903962][T24976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.903975][T24976] R13: 0000000000000000 R14: 00007facfd5b5fa0 R15: 00007fff26a3f6b8 [ 558.904010][T24976] [ 559.247794][T24976] netlink: 'syz.4.7546': attribute type 4 has an invalid length. [ 559.456536][T24988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7549'. [ 559.509688][T24990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7550'. [ 559.850534][T25010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7543'. [ 560.241208][T25028] FAULT_INJECTION: forcing a failure. [ 560.241208][T25028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.277972][T25028] CPU: 1 UID: 0 PID: 25028 Comm: syz.0.7559 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 560.278005][T25028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 560.278018][T25028] Call Trace: [ 560.278027][T25028] [ 560.278036][T25028] dump_stack_lvl+0x189/0x250 [ 560.278065][T25028] ? __pfx____ratelimit+0x10/0x10 [ 560.278097][T25028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 560.278119][T25028] ? __pfx__printk+0x10/0x10 [ 560.278147][T25028] ? __might_fault+0xb0/0x130 [ 560.278193][T25028] should_fail_ex+0x414/0x560 [ 560.278233][T25028] _copy_from_user+0x2d/0xb0 [ 560.278265][T25028] ___sys_sendmsg+0x158/0x2a0 [ 560.278293][T25028] ? __pfx____sys_sendmsg+0x10/0x10 [ 560.278359][T25028] ? __fget_files+0x2a/0x420 [ 560.278378][T25028] ? __fget_files+0x3a0/0x420 [ 560.278410][T25028] __x64_sys_sendmsg+0x19b/0x260 [ 560.278437][T25028] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 560.278471][T25028] ? __pfx_ksys_write+0x10/0x10 [ 560.278499][T25028] ? rcu_is_watching+0x15/0xb0 [ 560.278534][T25028] ? do_syscall_64+0xbe/0x3b0 [ 560.278564][T25028] do_syscall_64+0xfa/0x3b0 [ 560.278590][T25028] ? lockdep_hardirqs_on+0x9c/0x150 [ 560.278615][T25028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.278632][T25028] ? clear_bhb_loop+0x60/0xb0 [ 560.278655][T25028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.278673][T25028] RIP: 0033:0x7f75d7d8e9a9 [ 560.278689][T25028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.278705][T25028] RSP: 002b:00007f75d8b66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 560.278726][T25028] RAX: ffffffffffffffda RBX: 00007f75d7fb5fa0 RCX: 00007f75d7d8e9a9 [ 560.278739][T25028] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 560.278750][T25028] RBP: 00007f75d8b66090 R08: 0000000000000000 R09: 0000000000000000 [ 560.278761][T25028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.278772][T25028] R13: 0000000000000000 R14: 00007f75d7fb5fa0 R15: 00007ffff96c66c8 [ 560.278808][T25028] [ 560.523542][T25036] netlink: 'syz.4.7561': attribute type 10 has an invalid length. [ 560.532548][T25036] geneve1: left allmulticast mode [ 560.542368][T25036] geneve1: entered allmulticast mode [ 560.889644][T25051] tipc: Enabling of bearer rejected, failed to enable media [ 560.916784][T25048] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7565'. [ 560.928326][T25051] syzkaller0: entered promiscuous mode [ 560.933865][T25051] syzkaller0: entered allmulticast mode [ 561.147071][T25065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7569'. [ 562.209602][T25099] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20003 [ 562.210534][T25098] netlink: 'syz.1.7580': attribute type 1 has an invalid length. [ 562.967932][T25133] netlink: 'syz.1.7591': attribute type 1 has an invalid length. [ 562.992462][T25133] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7591'. [ 563.070549][T25133] netlink: 'syz.1.7591': attribute type 1 has an invalid length. [ 563.326976][T25152] tipc: Enabling of bearer rejected, already enabled [ 563.410221][T25161] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 563.514557][T25163] team0: Device C is loopback device. Loopback devices can't be added as a team port [ 563.557830][T25163] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 563.609595][T25171] netlink: 116 bytes leftover after parsing attributes in process `syz.2.7606'. [ 563.620413][T25171] netlink: 'syz.2.7606': attribute type 39 has an invalid length. [ 563.903387][T25188] tipc: Enabling of bearer rejected, already enabled [ 563.971840][T25192] sctp: [Deprecated]: syz.3.7615 (pid 25192) Use of struct sctp_assoc_value in delayed_ack socket option. [ 563.971840][T25192] Use struct sctp_sack_info instead [ 564.008181][T25192] sctp: [Deprecated]: syz.3.7615 (pid 25192) Use of struct sctp_assoc_value in delayed_ack socket option. [ 564.008181][T25192] Use struct sctp_sack_info instead [ 564.192347][T25205] tipc: Enabling of bearer rejected, failed to enable media [ 564.412465][T25223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7623'. [ 564.782444][T25239] tipc: Resetting bearer [ 564.794049][T25239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 564.838865][T25242] tipc: Enabling of bearer rejected, already enabled [ 565.039922][T25250] netlink: 'syz.1.7630': attribute type 4 has an invalid length. [ 565.158963][T25255] FAULT_INJECTION: forcing a failure. [ 565.158963][T25255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.177169][T25255] CPU: 1 UID: 0 PID: 25255 Comm: syz.0.7633 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 565.177210][T25255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 565.177225][T25255] Call Trace: [ 565.177234][T25255] [ 565.177244][T25255] dump_stack_lvl+0x189/0x250 [ 565.177273][T25255] ? __pfx____ratelimit+0x10/0x10 [ 565.177304][T25255] ? __pfx_dump_stack_lvl+0x10/0x10 [ 565.177328][T25255] ? __pfx__printk+0x10/0x10 [ 565.177355][T25255] ? __might_fault+0xb0/0x130 [ 565.177402][T25255] should_fail_ex+0x414/0x560 [ 565.177443][T25255] _copy_from_user+0x2d/0xb0 [ 565.177476][T25255] ___sys_sendmsg+0x158/0x2a0 [ 565.177503][T25255] ? __pfx____sys_sendmsg+0x10/0x10 [ 565.177571][T25255] ? __fget_files+0x2a/0x420 [ 565.177591][T25255] ? __fget_files+0x3a0/0x420 [ 565.177625][T25255] __x64_sys_sendmsg+0x19b/0x260 [ 565.177652][T25255] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 565.177691][T25255] ? rcu_is_watching+0x15/0xb0 [ 565.177725][T25255] ? trace_sys_enter+0x25/0x100 [ 565.177764][T25255] do_syscall_64+0xfa/0x3b0 [ 565.177796][T25255] ? lockdep_hardirqs_on+0x9c/0x150 [ 565.177827][T25255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.177850][T25255] ? clear_bhb_loop+0x60/0xb0 [ 565.177877][T25255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.177899][T25255] RIP: 0033:0x7f75d7d8e9a9 [ 565.177918][T25255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.177938][T25255] RSP: 002b:00007f75d8b66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 565.177961][T25255] RAX: ffffffffffffffda RBX: 00007f75d7fb5fa0 RCX: 00007f75d7d8e9a9 [ 565.177977][T25255] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000004 [ 565.177991][T25255] RBP: 00007f75d8b66090 R08: 0000000000000000 R09: 0000000000000000 [ 565.178005][T25255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.178018][T25255] R13: 0000000000000000 R14: 00007f75d7fb5fa0 R15: 00007ffff96c66c8 [ 565.178053][T25255] [ 565.255729][T25257] tipc: Enabled bearer , priority 0 [ 565.431914][T25261] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7636'. [ 565.494136][T25262] tipc: Resetting bearer [ 565.518693][T25267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7637'. [ 565.581472][T25256] tipc: Disabling bearer [ 565.601539][T25270] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 565.641144][T25272] tipc: Enabling of bearer rejected, failed to enable media [ 565.814179][T25284] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7643'. [ 565.917931][T25284] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 566.053454][T25296] openvswitch: netlink: Key type 85 is out of range max 32 [ 566.280633][T25304] netlink: 'syz.4.7648': attribute type 13 has an invalid length. [ 566.296582][T25304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7648'. [ 566.340298][T25304] netlink: 'syz.4.7648': attribute type 13 has an invalid length. [ 566.371585][T25312] tipc: Enabled bearer , priority 0 [ 566.373336][T25304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7648'. [ 566.395632][T25312] tipc: Resetting bearer [ 566.416916][T25311] tipc: Disabling bearer [ 566.657019][T25327] tipc: Enabling of bearer rejected, already enabled [ 566.677816][T25328] IPVS: length: 172 != 24 [ 566.863056][T25333] netlink: 'syz.0.7661': attribute type 1 has an invalid length. [ 566.903077][T25333] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7661'. [ 567.096873][T25348] netlink: 'syz.4.7668': attribute type 13 has an invalid length. [ 567.106534][T25348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7668'. [ 567.123393][T25348] netlink: 'syz.4.7668': attribute type 13 has an invalid length. [ 567.178376][T25349] tipc: Enabled bearer , priority 0 [ 567.217478][T25349] tipc: Resetting bearer [ 567.241102][T25346] tipc: Disabling bearer [ 567.254608][T25356] netlink: 'syz.3.7669': attribute type 12 has an invalid length. [ 567.268385][T25355] openvswitch: netlink: Key type 85 is out of range max 32 [ 567.280733][T25356] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 567.307864][T25358] tipc: Enabling of bearer rejected, failed to enable media [ 567.468790][T25368] FAULT_INJECTION: forcing a failure. [ 567.468790][T25368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.537439][T25368] CPU: 1 UID: 0 PID: 25368 Comm: syz.1.7673 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 567.537472][T25368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 567.537485][T25368] Call Trace: [ 567.537494][T25368] [ 567.537503][T25368] dump_stack_lvl+0x189/0x250 [ 567.537531][T25368] ? __pfx____ratelimit+0x10/0x10 [ 567.537562][T25368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 567.537585][T25368] ? __pfx__printk+0x10/0x10 [ 567.537612][T25368] ? __might_fault+0xb0/0x130 [ 567.537658][T25368] should_fail_ex+0x414/0x560 [ 567.537699][T25368] _copy_from_user+0x2d/0xb0 [ 567.537731][T25368] kstrtouint_from_user+0xc4/0x170 [ 567.537758][T25368] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 567.537803][T25368] proc_fail_nth_write+0x88/0x200 [ 567.537828][T25368] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 567.537861][T25368] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 567.537889][T25368] vfs_write+0x27b/0xa90 [ 567.537930][T25368] ? __pfx_vfs_write+0x10/0x10 [ 567.537964][T25368] ? __fget_files+0x2a/0x420 [ 567.537991][T25368] ? __fget_files+0x3a0/0x420 [ 567.538011][T25368] ? __fget_files+0x2a/0x420 [ 567.538053][T25368] ksys_write+0x145/0x250 [ 567.538083][T25368] ? __fget_files+0x3a0/0x420 [ 567.538106][T25368] ? __pfx_ksys_write+0x10/0x10 [ 567.538143][T25368] ? do_syscall_64+0xbe/0x3b0 [ 567.538181][T25368] do_syscall_64+0xfa/0x3b0 [ 567.538212][T25368] ? lockdep_hardirqs_on+0x9c/0x150 [ 567.538242][T25368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.538263][T25368] ? clear_bhb_loop+0x60/0xb0 [ 567.538291][T25368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.538312][T25368] RIP: 0033:0x7f442378d45f [ 567.538333][T25368] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 567.538358][T25368] RSP: 002b:00007f442454c030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 567.538382][T25368] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f442378d45f [ 567.538398][T25368] RDX: 0000000000000001 RSI: 00007f442454c0a0 RDI: 0000000000000004 [ 567.538411][T25368] RBP: 00007f442454c090 R08: 0000000000000000 R09: 0000000000000000 [ 567.538424][T25368] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 567.538436][T25368] R13: 0000000000000000 R14: 00007f44239b5fa0 R15: 00007ffc81de74e8 [ 567.538473][T25368] [ 568.021291][T25387] __nla_validate_parse: 2 callbacks suppressed [ 568.021312][T25387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7681'. [ 568.060009][T25390] netlink: 'syz.1.7682': attribute type 13 has an invalid length. [ 568.069280][T25390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7682'. [ 568.081341][T25390] netlink: 'syz.1.7682': attribute type 13 has an invalid length. [ 568.090445][T25390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7682'. [ 568.180026][T25394] tipc: Enabling of bearer rejected, failed to enable media [ 568.266274][T25400] openvswitch: netlink: Key type 85 is out of range max 32 [ 568.329464][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 568.507009][T25409] syzkaller0: entered promiscuous mode [ 568.523219][T25409] syzkaller0: entered allmulticast mode [ 568.640432][T25417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7688'. [ 568.672799][T25417] netlink: 'syz.1.7688': attribute type 2 has an invalid length. [ 568.689957][T25417] netlink: 188 bytes leftover after parsing attributes in process `syz.1.7688'. [ 568.911728][T25426] tipc: Enabling of bearer rejected, failed to enable media [ 568.943120][T25423] syzkaller0: entered promiscuous mode [ 568.951537][T25423] syzkaller0: entered allmulticast mode [ 569.149736][T25440] openvswitch: netlink: Key type 85 is out of range max 32 [ 569.367651][T25451] tipc: Enabling of bearer rejected, already enabled [ 569.974600][T25479] dvmrp1: entered allmulticast mode [ 570.018292][T25484] team0: Device gtp3 is up. Set it down before adding it as a team port [ 570.352958][T25466] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 570.650102][T25517] validate_nla: 1 callbacks suppressed [ 570.650123][T25517] netlink: 'syz.1.7716': attribute type 13 has an invalid length. [ 570.691834][T25519] lo speed is unknown, defaulting to 1000 [ 570.695290][T25517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7716'. [ 570.729474][T25517] netlink: 'syz.1.7716': attribute type 13 has an invalid length. [ 570.748809][T25517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7716'. [ 571.157663][T25536] syzkaller0: entered promiscuous mode [ 571.170492][T25536] syzkaller0: entered allmulticast mode [ 571.236993][T25536] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 571.407699][T25541] tipc: Enabled bearer , priority 0 [ 571.431798][T25541] tipc: Resetting bearer [ 571.532893][T25540] tipc: Disabling bearer [ 571.687933][T25552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7726'. [ 571.714675][T25553] netlink: 'syz.0.7728': attribute type 25 has an invalid length. [ 571.761065][T25556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7730'. [ 571.812712][T25558] tipc: Enabling of bearer rejected, failed to enable media [ 572.003090][T25568] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.7731'. [ 572.060375][T25560] tipc: Resetting bearer [ 572.088746][T25560] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 572.197654][T25564] tipc: Resetting bearer [ 572.213748][T25564] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 572.501047][T25594] syzkaller0: entered promiscuous mode [ 572.519635][T25594] syzkaller0: entered allmulticast mode [ 572.540488][T25594] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 572.779550][T25600] tipc: Enabling of bearer rejected, already enabled [ 572.857978][T25603] netlink: 'syz.0.7741': attribute type 25 has an invalid length. [ 572.937632][T25606] FAULT_INJECTION: forcing a failure. [ 572.937632][T25606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.968616][T25606] CPU: 1 UID: 0 PID: 25606 Comm: syz.2.7742 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 572.968648][T25606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 572.968662][T25606] Call Trace: [ 572.968670][T25606] [ 572.968680][T25606] dump_stack_lvl+0x189/0x250 [ 572.968709][T25606] ? __pfx____ratelimit+0x10/0x10 [ 572.968741][T25606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 572.968771][T25606] ? __pfx__printk+0x10/0x10 [ 572.968799][T25606] ? __might_fault+0xb0/0x130 [ 572.968851][T25606] should_fail_ex+0x414/0x560 [ 572.968892][T25606] _copy_from_user+0x2d/0xb0 [ 572.968925][T25606] ___sys_sendmsg+0x158/0x2a0 [ 572.968953][T25606] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.969021][T25606] ? __fget_files+0x2a/0x420 [ 572.969041][T25606] ? __fget_files+0x3a0/0x420 [ 572.969076][T25606] __sys_sendmmsg+0x227/0x430 [ 572.969106][T25606] ? __pfx___sys_sendmmsg+0x10/0x10 [ 572.969127][T25606] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 572.969192][T25606] ? ksys_write+0x22a/0x250 [ 572.969227][T25606] ? __pfx_ksys_write+0x10/0x10 [ 572.969255][T25606] ? rcu_is_watching+0x15/0xb0 [ 572.969297][T25606] __x64_sys_sendmmsg+0xa0/0xc0 [ 572.969323][T25606] do_syscall_64+0xfa/0x3b0 [ 572.969352][T25606] ? lockdep_hardirqs_on+0x9c/0x150 [ 572.969381][T25606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.969402][T25606] ? clear_bhb_loop+0x60/0xb0 [ 572.969427][T25606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.969447][T25606] RIP: 0033:0x7f103118e9a9 [ 572.969466][T25606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.969485][T25606] RSP: 002b:00007f1031f82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 572.969510][T25606] RAX: ffffffffffffffda RBX: 00007f10313b5fa0 RCX: 00007f103118e9a9 [ 572.969526][T25606] RDX: 0000000000000001 RSI: 00002000000090c0 RDI: 0000000000000003 [ 572.969539][T25606] RBP: 00007f1031f82090 R08: 0000000000000000 R09: 0000000000000000 [ 572.969551][T25606] R10: f7ffff7f00000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.969564][T25606] R13: 0000000000000000 R14: 00007f10313b5fa0 R15: 00007fff468e2e28 [ 572.969597][T25606] [ 573.575898][T25626] tipc: Enabling of bearer rejected, failed to enable media [ 573.682885][T25632] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 573.787313][T25629] syzkaller0: entered promiscuous mode [ 573.802748][T25629] syzkaller0: entered allmulticast mode [ 573.841741][T25629] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 574.154220][T25654] netlink: 'syz.2.7755': attribute type 25 has an invalid length. [ 574.179136][T25656] netlink: 'syz.1.7758': attribute type 2 has an invalid length. [ 574.303359][T25660] ------------[ cut here ]------------ [ 574.309968][T25660] WARNING: CPU: 1 PID: 25660 at net/ipv6/route.c:4857 rt6_multipath_rebalance+0x455/0x8b0 [ 574.322195][T25660] Modules linked in: [ 574.327255][T25660] CPU: 1 UID: 0 PID: 25660 Comm: syz.4.7760 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 574.339306][T25660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 574.350221][T25660] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 574.351119][T25666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7763'. [ 574.357079][T25660] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 9d c3 fb f7 e9 78 fe ff ff e8 33 a1 98 f7 eb 05 e8 2c a1 98 f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 85 9d 4b 01 [ 574.357202][T25660] RSP: 0018:ffffc900036d6620 EFLAGS: 00010287 [ 574.357231][T25660] RAX: ffffffff8a270f7d RBX: ffff88805b2a8c00 RCX: 0000000000080000 [ 574.357253][T25660] RDX: ffffc9000c6fc000 RSI: 00000000000080c2 RDI: 00000000000080c3 [ 574.357272][T25660] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 574.357291][T25660] R10: dffffc0000000000 R11: fffff520006dacbc R12: ffff88805b2a8cde [ 574.357311][T25660] R13: ffff88805b2a8c90 R14: 0000000000000000 R15: 1ffff1100b655192 [ 574.357331][T25660] FS: 00007facfb1f66c0(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 574.357354][T25660] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 574.357373][T25660] CR2: 000055556ea51588 CR3: 00000000327da000 CR4: 00000000003526f0 [ 574.357396][T25660] Call Trace: [ 574.357407][T25660] [ 574.357437][T25660] fib6_ifup+0x14a/0x180 [ 574.357478][T25660] ? __pfx_fib6_ifup+0x10/0x10 [ 574.357513][T25660] fib6_clean_node+0x24d/0x590 [ 574.357552][T25660] ? __pfx_fib6_clean_node+0x10/0x10 [ 574.357583][T25660] ? __lock_acquire+0xab9/0xd20 [ 574.357636][T25660] ? __local_bh_enable_ip+0x12d/0x1c0 [ 574.357683][T25660] fib6_walk_continue+0x678/0x910 [ 574.357738][T25660] fib6_walk+0x149/0x290 [ 574.357773][T25660] __fib6_clean_all+0x234/0x380 [ 574.357803][T25660] ? __fib6_clean_all+0x9b/0x380 [ 574.357836][T25660] ? __pfx_fib6_ifup+0x10/0x10 [ 574.357871][T25660] ? __pfx___fib6_clean_all+0x10/0x10 [ 574.357909][T25660] ? __pfx_fib6_clean_node+0x10/0x10 [ 574.357942][T25660] ? __pfx_fib6_ifup+0x10/0x10 [ 574.357978][T25660] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 574.358033][T25660] rt6_sync_up+0x128/0x160 [ 574.358067][T25660] ? __pfx_rt6_sync_up+0x10/0x10 [ 574.358107][T25660] ? ipv6_mc_up+0x3da/0x580 [ 574.358146][T25660] addrconf_notify+0xd55/0x1010 [ 574.358189][T25660] notifier_call_chain+0x1b3/0x3e0 [ 574.358227][T25660] netif_state_change+0x284/0x3a0 [ 574.358269][T25660] ? __pfx_netif_state_change+0x10/0x10 [ 574.358311][T25660] ? validate_linkmsg+0x765/0x950 [ 574.358355][T25660] do_setlink+0x35de/0x41c0 [ 574.358394][T25660] ? __kernel_text_address+0xd/0x40 [ 574.358435][T25660] ? arch_stack_walk+0xfc/0x150 [ 574.358469][T25660] ? __pfx_do_setlink+0x10/0x10 [ 574.358512][T25660] ? __lock_acquire+0xab9/0xd20 [ 574.358555][T25660] ? __mutex_trylock_common+0x153/0x260 [ 574.358583][T25660] ? __pfx___mutex_trylock_common+0x10/0x10 [ 574.358613][T25660] ? rcu_is_watching+0x15/0xb0 [ 574.358648][T25660] ? trace_contention_end+0x39/0x120 [ 574.499134][T25667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7762'. [ 574.501436][T25660] ? __mutex_lock+0x335/0x1340 [ 574.501483][T25660] ? __pfx_aa_get_newest_label+0x10/0x10 [ 574.501513][T25660] ? __pfx_aa_get_newest_label+0x10/0x10 [ 574.501548][T25660] ? rtnl_newlink+0x8db/0x1c70 [ 574.501582][T25660] ? rcu_is_watching+0x15/0xb0 [ 574.562551][T25671] openvswitch: netlink: Key type 85 is out of range max 32 [ 574.564583][T25660] ? __pfx___mutex_lock+0x10/0x10 [ 574.564642][T25660] ? ns_capable+0x8a/0xf0 [ 574.706220][T25660] ? rtnl_link_get_net_capable+0x16a/0x350 [ 574.712203][T25660] rtnl_newlink+0x149f/0x1c70 [ 574.717717][T25660] ? netlink_sendmsg+0x805/0xb30 [ 574.722954][T25660] ? __pfx_rtnl_newlink+0x10/0x10 [ 574.729074][T25660] ? kasan_quarantine_put+0xdd/0x220 [ 574.735267][T25660] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.740649][T25660] ? nlmon_xmit+0xb0/0x100 [ 574.745184][T25660] ? kmem_cache_free+0x18f/0x400 [ 574.750377][T25660] ? __local_bh_enable_ip+0x12d/0x1c0 [ 574.756331][T25660] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.761937][T25660] ? __local_bh_enable_ip+0x12d/0x1c0 [ 574.767539][T25660] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 574.773494][T25660] ? __dev_queue_xmit+0x27b/0x3b50 [ 574.778932][T25660] ? __lock_acquire+0xab9/0xd20 [ 574.784154][T25660] ? __pfx_rtnl_newlink+0x10/0x10 [ 574.789454][T25660] rtnetlink_rcv_msg+0x7cf/0xb70 [ 574.794739][T25660] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 574.800392][T25660] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 574.806543][T25660] ? ref_tracker_free+0x63a/0x7d0 [ 574.811804][T25660] ? __asan_memcpy+0x40/0x70 [ 574.816588][T25660] ? __pfx_ref_tracker_free+0x10/0x10 [ 574.822067][T25660] netlink_rcv_skb+0x208/0x470 [ 574.827015][T25660] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 574.832628][T25660] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 574.838229][T25660] ? netlink_deliver_tap+0x2e/0x1b0 [ 574.843694][T25660] netlink_unicast+0x82c/0x9e0 [ 574.848726][T25660] ? __pfx_netlink_unicast+0x10/0x10 [ 574.854258][T25660] ? netlink_sendmsg+0x642/0xb30 [ 574.859296][T25660] ? skb_put+0x11b/0x210 [ 574.863598][T25660] netlink_sendmsg+0x805/0xb30 [ 574.868613][T25660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.874517][T25660] ? aa_sock_msg_perm+0x94/0x160 [ 574.880310][T25660] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 574.886181][T25660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.891890][T25660] __sock_sendmsg+0x21c/0x270 [ 574.896670][T25660] ____sys_sendmsg+0x505/0x830 [ 574.901793][T25660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.907432][T25660] ? import_iovec+0x74/0xa0 [ 574.912091][T25660] ___sys_sendmsg+0x21f/0x2a0 [ 574.916913][T25660] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.922711][T25660] ? __fget_files+0x2a/0x420 [ 574.927877][T25660] ? __fget_files+0x3a0/0x420 [ 574.932882][T25660] __x64_sys_sendmsg+0x19b/0x260 [ 574.938039][T25660] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 574.943795][T25660] ? rcu_is_watching+0x15/0xb0 [ 574.948857][T25660] ? do_syscall_64+0xbe/0x3b0 [ 574.953769][T25660] do_syscall_64+0xfa/0x3b0 [ 574.958417][T25660] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.963948][T25660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.970272][T25660] ? clear_bhb_loop+0x60/0xb0 [ 574.975181][T25660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.981520][T25660] RIP: 0033:0x7facfd38e9a9 [ 574.986139][T25660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.006095][T25660] RSP: 002b:00007facfb1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.014587][T25660] RAX: ffffffffffffffda RBX: 00007facfd5b5fa0 RCX: 00007facfd38e9a9 [ 575.022770][T25660] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 575.031384][T25660] RBP: 00007facfd410d69 R08: 0000000000000000 R09: 0000000000000000 [ 575.040023][T25660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.048672][T25660] R13: 0000000000000000 R14: 00007facfd5b5fa0 R15: 00007fff26a3f6b8 [ 575.057574][T25660] [ 575.060660][T25660] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 575.069024][T25660] CPU: 1 UID: 0 PID: 25660 Comm: syz.4.7760 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 575.081054][T25660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 575.091528][T25660] Call Trace: [ 575.095030][T25660] [ 575.098006][T25660] dump_stack_lvl+0x99/0x250 [ 575.103204][T25660] ? __asan_memcpy+0x40/0x70 [ 575.107955][T25660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.113393][T25660] ? __pfx__printk+0x10/0x10 [ 575.118333][T25660] panic+0x2db/0x790 [ 575.122510][T25660] ? __pfx_panic+0x10/0x10 [ 575.127067][T25660] ? show_trace_log_lvl+0x4fb/0x550 [ 575.132628][T25660] __warn+0x31b/0x4b0 [ 575.136673][T25660] ? rt6_multipath_rebalance+0x455/0x8b0 [ 575.142490][T25660] ? rt6_multipath_rebalance+0x455/0x8b0 [ 575.148547][T25660] report_bug+0x2be/0x4f0 [ 575.152963][T25660] ? rt6_multipath_rebalance+0x455/0x8b0 [ 575.158866][T25660] ? rt6_multipath_rebalance+0x455/0x8b0 [ 575.164771][T25660] ? rt6_multipath_rebalance+0x457/0x8b0 [ 575.170771][T25660] handle_bug+0x84/0x160 [ 575.175344][T25660] exc_invalid_op+0x1a/0x50 [ 575.180424][T25660] asm_exc_invalid_op+0x1a/0x20 [ 575.185390][T25660] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 575.191781][T25660] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 9d c3 fb f7 e9 78 fe ff ff e8 33 a1 98 f7 eb 05 e8 2c a1 98 f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 85 9d 4b 01 [ 575.212038][T25660] RSP: 0018:ffffc900036d6620 EFLAGS: 00010287 [ 575.218941][T25660] RAX: ffffffff8a270f7d RBX: ffff88805b2a8c00 RCX: 0000000000080000 [ 575.227382][T25660] RDX: ffffc9000c6fc000 RSI: 00000000000080c2 RDI: 00000000000080c3 [ 575.236100][T25660] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 575.244702][T25660] R10: dffffc0000000000 R11: fffff520006dacbc R12: ffff88805b2a8cde [ 575.252783][T25660] R13: ffff88805b2a8c90 R14: 0000000000000000 R15: 1ffff1100b655192 [ 575.261145][T25660] ? rt6_multipath_rebalance+0x44d/0x8b0 [ 575.267119][T25660] fib6_ifup+0x14a/0x180 [ 575.271492][T25660] ? __pfx_fib6_ifup+0x10/0x10 [ 575.276280][T25660] fib6_clean_node+0x24d/0x590 [ 575.281616][T25660] ? __pfx_fib6_clean_node+0x10/0x10 [ 575.287010][T25660] ? __lock_acquire+0xab9/0xd20 [ 575.291998][T25660] ? __local_bh_enable_ip+0x12d/0x1c0 [ 575.297586][T25660] fib6_walk_continue+0x678/0x910 [ 575.302841][T25660] fib6_walk+0x149/0x290 [ 575.307298][T25660] __fib6_clean_all+0x234/0x380 [ 575.312193][T25660] ? __fib6_clean_all+0x9b/0x380 [ 575.317335][T25660] ? __pfx_fib6_ifup+0x10/0x10 [ 575.322218][T25660] ? __pfx___fib6_clean_all+0x10/0x10 [ 575.327723][T25660] ? __pfx_fib6_clean_node+0x10/0x10 [ 575.333161][T25660] ? __pfx_fib6_ifup+0x10/0x10 [ 575.338323][T25660] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 575.344204][T25660] rt6_sync_up+0x128/0x160 [ 575.348755][T25660] ? __pfx_rt6_sync_up+0x10/0x10 [ 575.353812][T25660] ? ipv6_mc_up+0x3da/0x580 [ 575.358434][T25660] addrconf_notify+0xd55/0x1010 [ 575.363449][T25660] notifier_call_chain+0x1b3/0x3e0 [ 575.368770][T25660] netif_state_change+0x284/0x3a0 [ 575.374096][T25660] ? __pfx_netif_state_change+0x10/0x10 [ 575.379848][T25660] ? validate_linkmsg+0x765/0x950 [ 575.385286][T25660] do_setlink+0x35de/0x41c0 [ 575.389915][T25660] ? __kernel_text_address+0xd/0x40 [ 575.395281][T25660] ? arch_stack_walk+0xfc/0x150 [ 575.406232][T25660] ? __pfx_do_setlink+0x10/0x10 [ 575.411606][T25660] ? __lock_acquire+0xab9/0xd20 [ 575.416787][T25660] ? __mutex_trylock_common+0x153/0x260 [ 575.422545][T25660] ? __pfx___mutex_trylock_common+0x10/0x10 [ 575.428477][T25660] ? rcu_is_watching+0x15/0xb0 [ 575.433304][T25660] ? trace_contention_end+0x39/0x120 [ 575.438794][T25660] ? __mutex_lock+0x335/0x1340 [ 575.443864][T25660] ? __pfx_aa_get_newest_label+0x10/0x10 [ 575.449569][T25660] ? __pfx_aa_get_newest_label+0x10/0x10 [ 575.455315][T25660] ? rtnl_newlink+0x8db/0x1c70 [ 575.460143][T25660] ? rcu_is_watching+0x15/0xb0 [ 575.465256][T25660] ? __pfx___mutex_lock+0x10/0x10 [ 575.470547][T25660] ? ns_capable+0x8a/0xf0 [ 575.475029][T25660] ? rtnl_link_get_net_capable+0x16a/0x350 [ 575.480911][T25660] rtnl_newlink+0x149f/0x1c70 [ 575.485824][T25660] ? netlink_sendmsg+0x805/0xb30 [ 575.491128][T25660] ? __pfx_rtnl_newlink+0x10/0x10 [ 575.496514][T25660] ? kasan_quarantine_put+0xdd/0x220 [ 575.501847][T25660] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.507087][T25660] ? nlmon_xmit+0xb0/0x100 [ 575.511923][T25660] ? kmem_cache_free+0x18f/0x400 [ 575.517299][T25660] ? __local_bh_enable_ip+0x12d/0x1c0 [ 575.523342][T25660] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.528607][T25660] ? __local_bh_enable_ip+0x12d/0x1c0 [ 575.534213][T25660] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 575.540270][T25660] ? __dev_queue_xmit+0x27b/0x3b50 [ 575.545812][T25660] ? __lock_acquire+0xab9/0xd20 [ 575.550898][T25660] ? __pfx_rtnl_newlink+0x10/0x10 [ 575.555995][T25660] rtnetlink_rcv_msg+0x7cf/0xb70 [ 575.560991][T25660] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 575.566305][T25660] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 575.572183][T25660] ? ref_tracker_free+0x63a/0x7d0 [ 575.577585][T25660] ? __asan_memcpy+0x40/0x70 [ 575.582636][T25660] ? __pfx_ref_tracker_free+0x10/0x10 [ 575.588227][T25660] netlink_rcv_skb+0x208/0x470 [ 575.593042][T25660] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 575.598538][T25660] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 575.604048][T25660] ? netlink_deliver_tap+0x2e/0x1b0 [ 575.609373][T25660] netlink_unicast+0x82c/0x9e0 [ 575.614178][T25660] ? __pfx_netlink_unicast+0x10/0x10 [ 575.619775][T25660] ? netlink_sendmsg+0x642/0xb30 [ 575.624925][T25660] ? skb_put+0x11b/0x210 [ 575.629285][T25660] netlink_sendmsg+0x805/0xb30 [ 575.634181][T25660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.639952][T25660] ? aa_sock_msg_perm+0x94/0x160 [ 575.645211][T25660] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 575.650615][T25660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.656290][T25660] __sock_sendmsg+0x21c/0x270 [ 575.661197][T25660] ____sys_sendmsg+0x505/0x830 [ 575.666078][T25660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 575.671775][T25660] ? import_iovec+0x74/0xa0 [ 575.676610][T25660] ___sys_sendmsg+0x21f/0x2a0 [ 575.681442][T25660] ? __pfx____sys_sendmsg+0x10/0x10 [ 575.686905][T25660] ? __fget_files+0x2a/0x420 [ 575.691548][T25660] ? __fget_files+0x3a0/0x420 [ 575.696351][T25660] __x64_sys_sendmsg+0x19b/0x260 [ 575.701497][T25660] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 575.707421][T25660] ? rcu_is_watching+0x15/0xb0 [ 575.712433][T25660] ? do_syscall_64+0xbe/0x3b0 [ 575.717263][T25660] do_syscall_64+0xfa/0x3b0 [ 575.721897][T25660] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.727519][T25660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.733706][T25660] ? clear_bhb_loop+0x60/0xb0 [ 575.738418][T25660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.744361][T25660] RIP: 0033:0x7facfd38e9a9 [ 575.748830][T25660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.768755][T25660] RSP: 002b:00007facfb1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.777303][T25660] RAX: ffffffffffffffda RBX: 00007facfd5b5fa0 RCX: 00007facfd38e9a9 [ 575.785925][T25660] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 575.794529][T25660] RBP: 00007facfd410d69 R08: 0000000000000000 R09: 0000000000000000 [ 575.802701][T25660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.810979][T25660] R13: 0000000000000000 R14: 00007facfd5b5fa0 R15: 00007fff26a3f6b8 [ 575.819002][T25660] [ 575.822532][T25660] Kernel Offset: disabled [ 575.826962][T25660] Rebooting in 86400 seconds..