last executing test programs: 4.346123866s ago: executing program 2 (id=6206): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) r3 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) listen(r3, 0x401) r4 = socket$inet(0x2, 0x800, 0x80) sendto(r0, &(0x7f0000000100)="bda1178f22deb202790f9f33b2f932c373a7b53d7f550fdc8eb0163eb2ecbf3ebd5a47a43d2a08435fa55d0cbe4acb9ccd8bdfd24efe58e71c8799d60d45cf98cafe9235afecf7653756c3bd2687b851d3a4a30bdd8bbe9c7057c290b50386d1858f805b08bc1426d48305f9ac4f6761a4f07fffbb1bc9fe91dc168e", 0x7c, 0x8004, &(0x7f0000000180)=@l2tp={0x2, 0x0, @empty, 0x2}, 0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000200), &(0x7f0000000240)=0x4) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) read(r5, &(0x7f0000000280)=""/11, 0xb) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'veth1_to_batadv\x00', &(0x7f00000002c0)=@ethtool_coalesce={0xf, 0x800, 0x8, 0x6, 0xe808, 0xbe3, 0x5, 0x0, 0x9, 0xfdf, 0xfffff000, 0x3, 0x7fffffff, 0x9, 0x3d, 0x6, 0x8, 0xd, 0x6, 0x8000, 0x9, 0xb, 0x3}}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000380), 0x4) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000480)={&(0x7f00000003c0)=""/147, 0x93}) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000540)=0x1) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@private2, @in=@multicast1}}, {{@in6=@private0}, 0x0, @in=@remote}}, &(0x7f0000000680)=0xe8) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x1c0, r7, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x14c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000980)=0x480, 0x4) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f00000009c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x2, 0x1, 0x1, 0x2}}, 0x26) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000a00)={0x8, [0x9, 0x6, 0x1, 0x3, 0x7ff, 0x2, 0x1, 0x0]}, &(0x7f0000000a40)=0x14) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000a80)={@multicast1, @broadcast, 0x1, "94b0ad6b6cb20642717bee7427768c628086fae8e3c867facc090db722cfb07d", 0x4, 0xf, 0x3, 0x5}, 0x3c) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_READY(r9, 0x9360, 0x4) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b40), r2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000d40)={&(0x7f0000000b80)="b96c92986604934814cdae8b575181ccc1335473175f658b41aee365e1af2bd18655466d79e71f94a6eea5fc13b9c3c10ad8e4f1fd1a34d1fc18374b0f6d8801ee2566033e7d497fce147869682f4f567e568197", &(0x7f0000000c00)=""/20, &(0x7f0000000c40)="47803b4147b273bc5c14eb50a77de24d29785ce4bf3b5b3cbf533cbdf95d371de51cd4d73d7df5c011de1ef9654f3df2d09f", &(0x7f0000000c80)="8ed779b5ca90070418ea2b82b12f965555fd1af993e0708e3f097b9159ff0c01ab4f7dde7491808243e9de553423c7668c24f9cafb6631b0ddc0fd77e3c0747e3f7a608b7654e232f6ff40a8b537d539295ac72712b07f65109e12b5cf2cb85f5b07d85b144f4aac23868828d6ded9e5eebcfda1480814d4a5b13e233faf3acd1e9f28893f5d10aa97317f8cce60eb", 0xffffffc0, r6, 0x4}, 0x38) socket(0xf, 0x6, 0x8) 3.478237157s ago: executing program 2 (id=6214): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x80}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x2, 0x4, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xd94ac76b42879f9f}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000000), 0x4) (async) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000000), 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000140)=0xc) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000140)=0xc) 3.1354467s ago: executing program 2 (id=6218): r0 = socket(0x5, 0x4, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000002000000000000070000000000000000000000020100000000002e"], 0x0, 0x34, 0x0, 0x0, 0xfffffffe}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x1d, 0x1, 0x0, 0x0, {0xe}}, 0x14}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000feffffff8500000050000000b7080000000000001c52000000000000b5080000000000007b8af043cd868aefa6a19738c07c16e26ececd4fd380e0b3389986f1ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a70000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003700000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) 2.663099497s ago: executing program 2 (id=6223): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x9, 0xa, 0xb42000001, 0xdd43, 0xf, 0x3c, 0x24, 0x2}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff0200"/53], 0xfdef) 1.982670346s ago: executing program 0 (id=6231): socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffea) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20040084) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf255d0000000c00990002000000360000002800a6800a0406b7aa39f5cdb8de43302a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000000000800a500"], 0x58}, 0x1, 0x0, 0x0, 0x15162ae90c507481}, 0x80) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xd, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x4, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd04, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x6, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x6, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r14, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad56b6aff71b62bbb0fe006eea66c7000000001800000008", 0x18) connect$inet6(r0, 0x0, 0x0) r15 = socket(0x2a, 0x2, 0x0) getsockname$packet(r15, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) 1.738575337s ago: executing program 0 (id=6233): r0 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r0, &(0x7f0000000180)=[{{0xfffffffffffffffe, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/143, 0x8f}, {&(0x7f0000001980)=""/234, 0xea}, {&(0x7f0000000280)=""/154, 0x9a}, {&(0x7f0000000340)=""/248, 0xf8}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/155, 0x9b}], 0x8, &(0x7f0000001800)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}], 0x1, 0x2022, &(0x7f0000002b80)={0x77359400}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x2}, 0x10) write(r0, &(0x7f0000000240)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001740)={@fallback=r2, 0x1, 0x1, 0x2, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000001680)=[0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001700)=[0x0], 0x0}, 0x40) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000017c0)={0x0, @multicast2, @initdev}, &(0x7f0000001940)=0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001780)={@ifindex=r5, 0xffffffffffffffff, 0x32, 0x0, 0x0, @void, @value=r3, @void, @void, r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000006d2000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 1.734483099s ago: executing program 4 (id=6235): connect$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000640000006910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) 1.690908944s ago: executing program 4 (id=6236): r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev, @remote, 0x0, [@netrom, @null, @rose, @remote, @default, @default]}, &(0x7f0000000040)=0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001840)=[{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000000c0)="415e7f0bb281b064505a7274181b18d9e1", 0x11}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="142fa1760d5887e13574ed60dd8f40e05aa26a5b9a9b1526a56ff3f4eb10c5ce5dc21d251878b4368d012f25d6681f49aa77e27386347c78be2f6153c6bb5241a683493709d0cf7353b9157a15b5bebd071fb2f6d2c97cee04c1c532e81b5bd3c6f4324d3527212232e3", 0x6a}, {&(0x7f0000001180)="b883bd424211bb3eb1b9d170e37f52c520ee62998fc06aef771ab348b002fb5dd2a6c694001e40f010da834cbc6aa4ee88c8c84e4b17680a7314796d4bcb4c99de9c76882ac1f5efe1994a6994fdeeb89cdfd76157be6ffde68730c832bcfa7ebceccfec8fd8c1cdd04918dfa8abe06cfefb06e00f9ae0586886e3f09eb1caf0b65dcd86bc1fa08f61b94ea10fcf2954973c77858dc1623fa76de370659c945a8feb84ac56", 0xa5}], 0x4, 0x0, 0x0, 0x4000051}, {0x0, 0x0, &(0x7f0000001380)=[{0xfffffffffffffffc}, {&(0x7f0000001280)="4c8262aadc6c666c6bb54b76ef1a0dac4a86e240f0bf5749993c531ffa03430246c674b9ca1f324c0fa4358c4676f985820d84de5356933d8b1c90d4487d5f7eee1e1b21603b3be85fc1e82d15c7d0b51023349d6279a1c065285862fb95be31bdd8c99d2d75a8bb58bca8250011fef247aaa037cfb2961c7f3523933358a2d353a79728071b778012f3aa43ac538602ff10183b5f2694a0bde2cd52ce388426e28d297186d351bec83a7883d4bef831ad87a1faca312a90a6acc25ffe1c7f22209caf6754", 0xc5}], 0x2, &(0x7f00000013c0)=[@assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x20, 0x117, 0x2, 0x6, "fd9640228205"}, @iv={0xc8, 0x117, 0x2, 0xb2, "c946b69ba212578bb4fe588a40797e44e9796f5ae0081ab1b4a86ff6d1023e43934afe185f5ae726c1903bd35c7d3b98575e69c35c503b6b8841fef72ce709a428bf6c61cef87d1c3e7f1b69ae296c783bb3607782e57977342752480b008cef79ffcf275b9d9ff576016fee1925f0ffa941a84dfcb4ed7f1e44f1897f84e66041346e61923f8ee57276fb58b4ba4743af606233cb0911ebd352de52eb33b0da0ab27aef7c0003b30cdc88532a855c10b283"}], 0x100, 0x20004001}, {0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)="f46524f7e67e63dd5b4e892e307d4dbdc9e8eccdd6e58886432d99e5bfe67b6893af4145ed182b8f8393f978dcbd15cdd31395ed6eebe84846f178c2c9fa0500a7fc91029bfa85f9bf62dc65957038439c22d2db8947af7c15770f660e1cab473fa4f8e8c25c95146df1d8e24ede73a3669f434b85d78b80f1302903f8b7f8eecb7caaf24b3ab1969634a36d97658aff13ceb169e2b8d2daaa5533d6c25fc672c3494881412ce64b92a649bd98aa0c2535b3fb09b26a7015f0b437d82820f12829b9c2006fe1c8205df0ebf09babb823886f3e8a14c8b266bab0fd548496cf5a6677cd4fd7608c1d", 0xe8}, {&(0x7f00000015c0)="42540f96f8f1e902831038eb30dfe6671079a186cbd61ad269f3d2368e781c74387baa50c3b0c41b351a1b1bc557fd0eef5788e049528719", 0x38}, {&(0x7f0000001600)="82b5fcece9f2a1670c7b7a92a188ef8e50fb4219b079adff51482575e7e9950513f064bd718ab6733db1532eff9013b335e4205402994863c3067c2149b568b3b936506635d8a186a07f0538d5a6706457604697827e8e113d72bfe6c163e7353fe0822bce6113087d5b356482a8888c5d349b99725637de1c25a126253c1ee1115d1a24d377c03bce2052cc63fa36ea9bdc1c95e58d50e3a82584909a21ca42", 0xa0}], 0x3, &(0x7f0000001700)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x4bf1}, @iv={0x60, 0x117, 0x2, 0x45, "fa90185b1819f181ed5ac993e31c15e41c768f37f746dc4bf04483ffb2d528ff1028bb54dfbe548e88f7f912a7da4905d767b9ba4ad4c88b08528737c4c00efd02d479af19"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0x18, 0x117, 0x2, 0x4, "7cf87fd4"}, @op={0x18}], 0x108, 0x40}], 0x3, 0x40000) recvmmsg(r2, &(0x7f0000003d80)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001900)}, {&(0x7f0000001940)=""/61, 0x3d}, {&(0x7f0000001980)=""/174, 0xae}], 0x3, &(0x7f0000001a80)=""/23, 0x17}, 0x4}, {{&(0x7f0000001ac0)=@nl=@proc, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001b40)=""/149, 0x95}, {&(0x7f0000001c00)=""/238, 0xee}, {&(0x7f0000001d00)=""/31, 0x1f}, {&(0x7f0000001d40)=""/58, 0x3a}, {&(0x7f0000001d80)=""/234, 0xea}, {&(0x7f0000001e80)=""/191, 0xbf}], 0x6, &(0x7f0000001fc0)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000002fc0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003040)=""/163, 0xa3}, {&(0x7f0000003100)=""/133, 0x85}, {&(0x7f00000031c0)=""/47, 0x2f}, {&(0x7f0000003200)=""/125, 0x7d}, {&(0x7f0000003280)=""/250, 0xfa}, {&(0x7f0000003380)=""/91, 0x5b}], 0x6}, 0x5}, {{&(0x7f0000003480)=@isdn, 0x80, &(0x7f0000003880)=[{&(0x7f0000003500)=""/120, 0x78}, {&(0x7f0000003580)=""/199, 0xc7}, {&(0x7f0000003680)=""/184, 0xb8}, {&(0x7f0000003740)=""/1, 0x1}, {&(0x7f0000003780)=""/205, 0xcd}], 0x5}, 0xb2}, {{&(0x7f0000003900)=@generic, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003980)=""/9, 0x9}, {&(0x7f00000039c0)=""/119, 0x77}, {&(0x7f0000003a40)=""/195, 0xc3}, {&(0x7f0000003b40)=""/196, 0xc4}], 0x4, &(0x7f0000003c80)=""/249, 0xf9}}], 0x5, 0x40000000, &(0x7f0000003ec0)) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000003f00)=@assoc_value, &(0x7f0000003f40)=0x8) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003f80), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000004000)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f00000041c0)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004180)={&(0x7f0000004040)={0x13c, r4, 0x600, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x120, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x8c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8b6c}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x7ffd}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4008024}, 0x10040) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000004240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000004300)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000042c0)={&(0x7f0000004280)={0x30, r7, 0x202, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40050) (async) r8 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000004340)={0x1f, 0x0, @fixed}, &(0x7f0000004380)=0xe, 0x800) connect$bt_l2cap(r8, &(0x7f00000043c0)={0x1f, 0x1, @none, 0x6, 0x2}, 0xe) socket$inet6(0xa, 0x1, 0x6) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004440), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000004580)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004540)={&(0x7f0000004480)={0xac, r9, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dpkg_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000004800)={0x16, 0x13, &(0x7f00000045c0)=@raw=[@map_fd, @ldst={0x0, 0x1, 0x1, 0x0, 0x0, 0x30, 0x10}, @jmp={0x5, 0x0, 0xd, 0x1, 0x1, 0x0, 0x4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x8}, @alu={0x4, 0x1, 0x4, 0x3, 0x1, 0x10, 0x1}, @call={0x85, 0x0, 0x0, 0xb8}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80bc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000004680)='GPL\x00', 0x200, 0x33, &(0x7f00000046c0)=""/51, 0x41100, 0x4, '\x00', r1, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000004700)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004740)={0x3, 0x10, 0x4508, 0x5e57750}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000004780)=[0xffffffffffffffff, 0x1, 0x1, r0, 0x1], &(0x7f00000047c0)=[{0x3, 0x3, 0x0, 0x6}, {0x1, 0x3, 0xb, 0x1}, {0x5, 0x2, 0xa, 0x8}], 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000048c0)=r10, 0x4) (async) ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f0000004900)={'veth1_to_batadv\x00', 0x2}) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004980), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000049c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000004ac0)={&(0x7f0000004940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004a80)={&(0x7f0000004a00)={0x4c, r11, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xb}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x6}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) (async) syz_genetlink_get_family_id$team(&(0x7f0000004b00), r6) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000004c00)={&(0x7f0000004b40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x1c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048800}, 0x4800) (async) r13 = socket$kcm(0x29, 0xf, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r13, 0x89e0, &(0x7f0000004c40)={r6, r10}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000004d40)={&(0x7f0000004c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004d00)={&(0x7f0000004cc0)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x1, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4044040) (async) socket$inet6_sctp(0xa, 0x5, 0x84) 1.645777793s ago: executing program 0 (id=6237): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe880000000000000000000000000001ff01000000000000000000000000000100000000000000820000000033000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000001e308bba0100000000019f2b"], 0xf8}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@delchain={0x98, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x68, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x64, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfffe}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0xf, 0x2, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xc0}]}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x29, 0x5, 0x0) 1.615513302s ago: executing program 2 (id=6238): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a006da800000000000000001c14000000000018"], 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r4, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20048841) (async) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) r7 = accept4(r5, 0x0, 0x0, 0x0) sendto(r7, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x0, 0x0, 0x0) recvfrom(r6, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x1c, r4, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x200440c4) 1.46345858s ago: executing program 4 (id=6239): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x1, 0x3}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0xd1, 0x8, 0xb0, 0x24, @dev={0xfe, 0x80, '\x00', 0x2e}, @ipv4={'\x00', '\xff\xff', @empty}, 0x11, 0x80, 0x5, 0xfa65}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', r3, 0x4, 0x7, 0x6, 0xcc, 0x68, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x8, 0x1, 0x95c}}) 1.418472282s ago: executing program 3 (id=6240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.365482642s ago: executing program 2 (id=6241): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x40, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast2, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x33, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x29}], "fb36eeca6fad50b3"}}}}}}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000340)=0xfff) connect$unix(r2, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) connect$unix(r2, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) socket$tipc(0x1e, 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x1, 0x5) r7 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f00000000c0)=0x1, 0x12) 1.293820118s ago: executing program 1 (id=6242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006000000000000000000000d0300000000000000000000030000000002000000031fc8e358000000040000000000000802000000000000005f00"], 0x0, 0x4e, 0x0, 0x4}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x2000007, 0x40010, r4, 0x0) (async) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) mmap(&(0x7f0000d98000/0x4000)=nil, 0x4000, 0x0, 0x2000000000032, r5, 0xdb247000) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) unshare(0x22020600) r6 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0x8004b709, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) (async) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x18, 0x52, 0x1, 0x70bd05, 0x4, {0x1c}, [@typed={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x890}, 0x800) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00c5002000"], 0x10}}, 0x0) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02e5faf7218f30496c570689792013000e0200000000000000f8dbdf25"], 0x10}}, 0x4000050) r9 = socket$kcm(0x2, 0xa, 0x2) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f0000000280), &(0x7f0000000340)=0x4) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES8], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.227387135s ago: executing program 3 (id=6243): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/97, 0x38}, {0x0}], 0x2}, 0x32}], 0x4000000000000be, 0x122, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x4044080}, 0x20008800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000900)={{0x14, 0x10, 0x30, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_NEWOBJ={0x68, 0x12, 0xa, 0x801, 0x0, 0x0, {0x3}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0x54, 0x4, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}, @NFT_MSG_DELFLOWTABLE={0x114, 0x18, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x94a3692625c5ea9e}]}, @NFT_MSG_NEWOBJ={0x30, 0x12, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x2e8}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x6, 0xff, 0x0, 0xfffffeff}}) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 1.226571043s ago: executing program 4 (id=6244): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000021801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000009e8685000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000cbd520850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="8500000008000000d4000000200000009500000000000000dbe7387448ea8ab3340dd40c6f9a6215d00008de3f6f4d231afdc1a443cddb2f439e582f21d373deeeb3347378271a33755910c9e8c0cc86108357fdf75af09034de47786ddf59f2d125c8a724fd"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f0000000600)=""/211, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xfffffffffffffdc0}, 0x94) pipe(&(0x7f0000000a40)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000b00)={0x0, 0x7}, &(0x7f0000000b40)=0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r8, @ANYRES32=r6, @ANYBLOB='&'], 0x10) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20) write$cgroup_int(r5, &(0x7f0000000ac0)=0x10, 0x12) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r7, 0x80189439, &(0x7f0000000a80)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0x12a, 0xfffffffffffffffe}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000a00)={'xfrm0\x00', 0x0}) r12 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_inet_tcp_SIOCINQ(r12, 0x541b, &(0x7f0000000100)) sendmsg$nl_route(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r0, @ANYRES16, @ANYRES8=r11, @ANYRES8=r9, @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x448d4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000c00)=ANY=[@ANYBLOB="9feb01001800000000000000d8000000d8000000030000000c0000000000000e05000000020000000a00000006000084ffff00000d00000004000000c200000000000000000000004b2f00000e00000000000000f2ffffff05000000010000800200000003000000030000000900000005000000050000005d0e0000060000000000000204000000020000000000000e04000000020000001000000000000012010000000700000000000007000000000300000003000084060000000e000000010000000d0000001000000000000000050000000700000005000000070000000d0000000000000e0100000002000000002e00"], &(0x7f0000000b80)=""/38, 0xf3, 0x26, 0x1}, 0x28) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1.217883355s ago: executing program 0 (id=6245): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000003c0)={0x1f, 0xffff, 0x1}, 0x6) write(r5, &(0x7f0000000140)="05000000010000", 0x7) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=@newtaction={0x200, 0x30, 0xffff, 0x1, 0xfffff000, {}, [{0x1ec, 0x1, [@m_nat={0x1e8, 0x13, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x9, 0x20000000, 0x7}, @rand_addr=0x64010100, @remote, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x7, 0x8}, @local, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x400004, 0x80000001, 0x2, 0x0, 0xe}, @multicast2, @multicast1, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x36e9c95f, 0x1ef, 0x1, 0x6, 0x4}, @dev={0xac, 0x14, 0x14, 0x27}, @loopback, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x80000001, 0x0, 0x8, 0x8001}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x8, 0xec58c895a93184de, 0x871b658, 0xf04}, @loopback, @broadcast, 0xffffff00, 0x1}}]}, {0xcd, 0x6, "db403b3abd9b8616d24b277a1cf4eaad9d41402edf2d1ef1fde766ed317660df3637f9a1d140ecc6a348a331641a4d6ca7311e7037c7817b56150277430514abf5f91903188598823fd2fd626130e3cd8b37e2c6dd750f53eb5614c6994d33dbdbd80387393c093eff6779e7a5f6b388ceb263a9506fa08c5a94e0eca721024dae1ec853e9908cff99ed27f0c5322a88ffa0807999678681bbb5f1553a4f6839b65c8a6840dfa6f3e9322407a87e4d5790d1a9d98abcac8b1c324959b01a7e78df6250da04fb445d08"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x200}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r6, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r6, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) close(r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f088a847eed603f62144dce47f472a126b", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010100"], 0x14}}, 0x800) unshare(0x400) 1.168620993s ago: executing program 1 (id=6246): connect$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000640000006910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) 1.026382239s ago: executing program 1 (id=6247): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x1, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4080) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=@newtfilter={0x38, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3, 0x9}, {0x0, 0x9}, {0xffff, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x40408c4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000b00)="63eced8e46dc3f0adf33c9f7b987", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) 1.015714983s ago: executing program 4 (id=6248): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x9, 0xa, 0xb42000001, 0xdd43, 0xf, 0x3c, 0x24, 0x2}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 997.584775ms ago: executing program 3 (id=6249): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r2, r1, 0x26}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newsa={0x160, 0x10, 0x100, 0x70bd28, 0x0, {{@in=@local, @in=@loopback, 0x0, 0x7, 0x0, 0x0, 0xa}, {@in=@rand_addr=0x1, 0x0, 0x33}, @in6=@remote, {0x0, 0x9, 0x2, 0x0, 0xfffffffffffffffc, 0x2}, {0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x1}, 0x70bd29, 0x0, 0x2, 0x0, 0x0, 0x20}, [@algo_auth_trunc={0x6d, 0x14, {{'cmac(aes)\x00'}, 0x108, 0x0, "b2be4bc53e13496458a584878298a2d3700dcd538a87e8351c1a6bd53d255bd04d"}}]}, 0x160}}, 0x0) 927.844007ms ago: executing program 0 (id=6250): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x40, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r3 = socket$igmp6(0xa, 0x3, 0x2) (async) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x10000, @private2}, {0xa, 0x0, 0x0, @dev, 0x20000}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) openat$cgroup_ro(r4, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) (async) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r4, &(0x7f0000000200)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x4800) (async) socket$netlink(0x10, 0x3, 0x2) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4b8, 0x0, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'vlan1\x00', {}, {}, 0x0, 0x1}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x1, 0x6, 0x5c, 0x5, {0x9}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x60, 0x0, 0x5, 0x0, 0x0, 0x207, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x518) 862.309742ms ago: executing program 3 (id=6251): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25040117800c0003"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) readv(r3, &(0x7f0000001440)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid\x00') r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r6, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) listen(r5, 0x8) r7 = accept4(r5, 0x0, 0x0, 0x0) write(r7, &(0x7f0000000000)="ea", 0x1) sendmmsg$alg(r7, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r7, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(r7) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x1402, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080c}, 0x804) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}}]}, 0x8c}}, 0x0) 843.016808ms ago: executing program 0 (id=6252): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cmac-aes-neon\x00'}, 0x58) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f0000001100)=@delchain={0x3184, 0x65, 0x800, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff1, 0x2}, {0x3, 0xffe0}, {0xfff3, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x81}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @filter_kind_options=@f_matchall={{0xd}, {0x3120, 0x2, [@TCA_MATCHALL_ACT={0x15f4, 0x2, [@m_police={0x15f0, 0xf, 0x0, 0x0, {{0xb}, {0x1588, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x4, 0x3b, 0x4, 0x6, {0xb4, 0x0, 0x3, 0x5c2, 0x3ff, 0xc00000}, {0xa, 0x2, 0x1, 0x10, 0x6, 0x8}, 0xb2, 0x5, 0x80000001}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x1, 0x4, 0x5, {0xc0, 0x1, 0x15f, 0x98, 0x88, 0x2}, {0x10, 0x1, 0xc98, 0x800, 0x81, 0xfffffff8}, 0x1, 0x400, 0x100}}, @TCA_POLICE_RATE={0x404, 0x2, [0xc, 0x9, 0xb0, 0x8, 0xcb, 0x804, 0x4, 0x992, 0x572, 0x4, 0x101, 0x7, 0x5, 0x14000, 0xd52, 0x9, 0x10000, 0x8, 0x3ff, 0x0, 0x5bc, 0x800, 0x9, 0x5, 0x1ff, 0x7, 0x5, 0x8, 0x1, 0x7, 0x3ff, 0x6, 0x4, 0x3, 0xef, 0x9, 0x3, 0x80, 0x6b8, 0x5, 0x7, 0xf, 0x7ff, 0x10001, 0xe2, 0x1, 0x4, 0x229, 0xf2, 0x0, 0x3, 0xc2, 0x4, 0x3, 0x101, 0x7, 0x8, 0x9, 0x3, 0xfcea, 0x3ff, 0x7fffffff, 0x6, 0x5, 0x3, 0xa99a, 0x6, 0x4e, 0x0, 0x17, 0x7, 0x4, 0x0, 0x9, 0x3, 0x1, 0x0, 0xf4a3, 0x5, 0x5, 0x6, 0x2, 0x54, 0x6, 0x6, 0x6, 0x2dca, 0x9, 0xfffffff4, 0xaf, 0x6, 0x100, 0x0, 0x26, 0xffffffff, 0x8, 0xc, 0x7, 0x0, 0x4f, 0x2, 0x9, 0x2887, 0x7fff, 0x7, 0x3, 0x80, 0xb80, 0x0, 0x9, 0x7e, 0x1, 0x2, 0xb3, 0x7, 0x6, 0xfffff801, 0x6, 0xa773, 0x6, 0x6, 0xfffffff9, 0x6, 0x5a9d, 0x4, 0xf, 0x3, 0x3dd6, 0x28b9, 0x7, 0x3ff, 0xd2d3, 0x5, 0x4, 0x1000, 0x6, 0x6fb, 0x9, 0x7, 0x2, 0x4, 0x9, 0x2, 0x8, 0x7, 0x1, 0x7, 0x9, 0x6d7, 0xff, 0x1, 0x3, 0x0, 0xc, 0xfffffff8, 0x1, 0x6, 0x400, 0x4b0f, 0x4, 0x4, 0x8, 0x2, 0x100, 0x2, 0x2, 0x6, 0x1000, 0xa1a, 0x4, 0x4, 0x8, 0x51, 0x6, 0x7, 0x7, 0x8, 0x7, 0x8, 0x7fffffff, 0x1, 0x6, 0x8, 0x1000, 0x1, 0x400, 0xfffffff7, 0x81, 0x19c, 0x75, 0x0, 0xff, 0x6, 0x8, 0xfffffff9, 0x5, 0x8, 0xfffffffd, 0x5, 0x4, 0x27e0a932, 0x6, 0x2, 0x40, 0x8, 0x4, 0x987, 0x1, 0xfffffffc, 0x6ab, 0x1, 0xffff, 0x9, 0x8000, 0x81, 0x6, 0x8, 0x41, 0x81, 0x1, 0x9, 0x3a, 0x10, 0xfff, 0x56, 0xc4a, 0x9, 0x5, 0x2, 0x2, 0x80000001, 0x9, 0x1, 0x1, 0x6, 0xf1ce, 0x0, 0x1, 0x4, 0x2, 0xa85, 0xffffd4c0, 0x7, 0xaad, 0x8, 0x1, 0xdf, 0x6, 0x2, 0xfd97, 0xa, 0x5c47, 0xfffffffa, 0x2, 0x10001, 0xc]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x34}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400, 0x1, 0x1, 0xd42c, 0x6, 0x9, 0x1, 0x1130, 0x100, 0x3, 0x6, 0x73, 0x5, 0x7, 0x8, 0xffffffff, 0x72b, 0x5, 0x0, 0x9, 0x6, 0x1, 0x400, 0x9d17, 0xf731, 0x28, 0x3, 0x0, 0x100, 0x7, 0x7, 0x8, 0x0, 0xfff, 0x5, 0x1, 0x0, 0x5, 0xe2, 0x7c55, 0x3, 0x1, 0x9, 0x7, 0x3, 0x6, 0xfffffffb, 0x4, 0xa, 0x763, 0x6, 0x6, 0x9, 0x5, 0xffffff44, 0x0, 0x7c5c, 0x4, 0x94, 0x9, 0x3, 0x73e, 0x80000001, 0x5, 0x3, 0x6, 0x9000, 0x5, 0x40, 0xffff, 0x3, 0x5, 0x1, 0x7, 0x3, 0x3, 0x2988, 0x5, 0x2, 0x4, 0xfffffb89, 0x0, 0x37ff, 0xff, 0x6, 0x2, 0x3, 0xf, 0x3cdf, 0xfffff0e3, 0x7, 0x8, 0x1, 0x80000001, 0xfe, 0xfffffff3, 0x0, 0x699, 0x0, 0x7fff, 0x9, 0x6, 0x8, 0x3, 0x5, 0x3, 0x7, 0x3, 0x7e, 0x8, 0xb, 0x3, 0x7, 0xfffff4c5, 0x7fff, 0x7, 0x483, 0x6, 0x5, 0x401, 0xff, 0x4, 0xc, 0x5, 0x8, 0x3, 0xa, 0x6, 0x8008, 0x6, 0x1, 0xb6, 0x5, 0x17e, 0x60, 0x0, 0x3, 0x4, 0x3, 0x8, 0x8000, 0x2, 0x3, 0x7, 0x7f, 0x5, 0x3, 0x10001, 0x6, 0x3, 0xffffffff, 0x7, 0x6, 0xb2, 0xc6, 0xfff, 0x1, 0x7, 0x1, 0x7ff, 0x0, 0x9, 0x7, 0x6, 0x0, 0x9, 0x5000000, 0x100, 0xe24, 0x7, 0x7, 0x80000000, 0x205, 0xa5, 0x7f, 0x0, 0x9, 0x5, 0x5, 0x1ff, 0xffffff2b, 0x3, 0x9, 0x1, 0x2, 0x6, 0x0, 0xc, 0xba, 0xfffffffa, 0x8, 0x10001, 0x3, 0xa, 0x93b, 0xe, 0xb, 0x2, 0x7, 0x101, 0x7, 0xa97f, 0x1, 0x8, 0x2c, 0x9, 0x1, 0x3ff, 0x3, 0xf8000000, 0x8, 0x9, 0x4, 0x10000, 0x7, 0x5, 0x3, 0x0, 0x401, 0xfffffffa, 0x8001, 0x2, 0x3, 0x1, 0x10001, 0xa, 0x4, 0x83c000, 0xffff13a6, 0x6, 0x838c, 0x2, 0x1, 0x2, 0x8001, 0x8001, 0xc, 0x5, 0x8001, 0x33c, 0x0, 0xb89, 0x7, 0x8, 0xf6, 0x37, 0x7, 0x400, 0xa24a, 0x2, 0x400, 0x200, 0xca, 0x4, 0xe4dc, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x2, 0x8, 0x9, {0xa, 0x1, 0x8, 0x51, 0x0, 0xa}, {0x8, 0x1, 0x2, 0x401, 0x3, 0x6}, 0xdf, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0xc, 0x1, 0xfffffffb, 0x4526, 0x10001, 0x1, 0x3, 0x1ff, 0x10001, 0xffff8000, 0x6, 0x3, 0x1, 0x46aad58c, 0xa53, 0x81, 0x7, 0x0, 0x7f3, 0x10001, 0x80000001, 0xb04, 0xcd0, 0x60ac0144, 0x8, 0x1, 0x9, 0x2046, 0x9, 0x7, 0x7, 0x2fb, 0x401, 0x401, 0x8, 0x8, 0x0, 0x7, 0x7, 0x5, 0xe, 0x6, 0xfffffff9, 0x9, 0xf, 0x2d8, 0xf384, 0xfffffff5, 0xfffffeff, 0x2257b0ac, 0x8, 0x1, 0x1, 0x4, 0x6, 0x2, 0xc, 0xc2e, 0x9, 0xfffff1e3, 0x1000, 0x7, 0x3, 0x4, 0x3, 0x1, 0x0, 0xff4f, 0x0, 0xaef, 0x3, 0xfffffff8, 0x0, 0x9, 0x10001, 0x6ece, 0x6, 0xb, 0x7, 0x200, 0x7, 0x3, 0x1, 0xd64, 0x3f16ea0a, 0xfffffff7, 0x8, 0x5, 0x0, 0xd31, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x4, 0xa, 0xdc, 0x9, 0x98b, 0x2, 0x7fff, 0x6b, 0xffff, 0x3, 0x4, 0x5, 0xca1a, 0x81, 0x6000, 0x1, 0x8, 0x0, 0x6, 0x3, 0xffffff74, 0x4, 0x65e1524a, 0xfffff801, 0x7fffffff, 0x19, 0x7, 0xb, 0x99, 0x3ff, 0x200, 0x9, 0x44a, 0x4f0, 0x7, 0x3, 0x4, 0x1, 0x1a800000, 0xf, 0x7fffffff, 0x101, 0xfb, 0x9, 0x6, 0x93fa, 0x100, 0x7f, 0x6, 0xffff, 0x2d2d, 0x1, 0x5, 0x6, 0x3, 0x21, 0x7, 0x9, 0x1, 0x8, 0x0, 0x9, 0xfffffff8, 0x7, 0xa3c, 0x400, 0x401, 0x367, 0x10001, 0x5, 0x87a0, 0x3, 0x4a84, 0x8001, 0x4, 0x0, 0x9, 0x0, 0x2, 0x8, 0x9, 0x7fffffff, 0x800, 0xffffffff, 0xfffffffe, 0x8000, 0xf, 0x8, 0x8001, 0x81, 0x0, 0x3, 0xa9c, 0x8c15, 0x1, 0x0, 0xffffffff, 0xbc4, 0x8, 0x0, 0x81, 0x100, 0xc412, 0x7fffffff, 0x67, 0x10000, 0xfffffffc, 0x1, 0x80, 0x200, 0x6, 0x6, 0x3, 0x6, 0x3, 0xe87, 0x1, 0x8, 0x2, 0x75, 0x0, 0xa6, 0x0, 0xffffffff, 0x1000, 0x52, 0x3d, 0x8, 0x9, 0x0, 0x4, 0x0, 0x5, 0xfffffff6, 0xb, 0x5, 0x400, 0x1, 0xff, 0x401, 0x3, 0x9, 0x6, 0x6, 0x4, 0x216329a5, 0x7, 0x4, 0x800, 0x1000, 0x5, 0x3, 0x7fff, 0xfffffff9, 0x0, 0x0, 0xea0, 0x6, 0xe9, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0xb, 0x0, 0x419, 0x80000000, {0x5, 0x0, 0xe5b5, 0x7, 0x4, 0x80000000}, {0x7, 0x2, 0xff, 0x1000, 0x8, 0x52}, 0x9, 0xe}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xefe, 0x5, 0x5, 0xfffffffa, 0x8, 0x5, 0x9, 0x77d, 0x81, 0x5, 0x9, 0x1, 0x9, 0x3ff, 0x7, 0x40, 0xfffffff9, 0x8, 0x5, 0x2, 0x3, 0x5e, 0xb, 0x1ff, 0x4, 0x1, 0x8a, 0x1, 0x1, 0x3, 0x40, 0x10000, 0x800, 0x56b, 0x9, 0x1c71f4c0, 0x3, 0x3, 0xf8, 0xfffffff4, 0xffffab32, 0x7ff, 0x94, 0x8, 0x7, 0xde6a, 0x0, 0x7fffffff, 0x8, 0x4000000, 0x8, 0x0, 0x5, 0x9, 0xff5c, 0x5, 0x8, 0x7fffffff, 0xa6b, 0x2, 0x8, 0xffffffcf, 0xa, 0x2, 0x1c, 0x0, 0x6a8, 0x400, 0x6, 0x6, 0x7ff, 0x2, 0x2, 0x12, 0x9, 0x80000000, 0x8000, 0xb50, 0x0, 0x154, 0x0, 0x5, 0x9, 0x7, 0x1, 0xfbfffeff, 0x5, 0x71a5, 0xfffffffb, 0x0, 0x4, 0x1, 0x0, 0x2, 0x0, 0x10000, 0x40, 0xa, 0x8, 0x10, 0xcf8800, 0xb, 0x7, 0x2, 0x1000, 0x9, 0x9, 0x7, 0xfffffffc, 0x0, 0x1, 0x5, 0x6, 0xffffffff, 0x1, 0xe3, 0x2, 0x8, 0x100, 0x1a8a, 0x7, 0x4, 0x8, 0xbd97635, 0x9, 0x7fffffff, 0x2, 0x7, 0x7, 0x15d, 0x7fffffff, 0x80000000, 0x3, 0x401, 0x9, 0x10000, 0x6, 0x2, 0x7fffffff, 0x0, 0x1ff, 0x1, 0xf, 0xc0, 0x3ff, 0x1000005, 0x3, 0x71, 0xd, 0x80000001, 0x929, 0x8, 0x3, 0x80, 0x401, 0x3, 0x6, 0x7, 0x6, 0x4, 0x8, 0x3, 0x73, 0x8, 0x0, 0x2, 0x6, 0x5, 0xd8a8, 0xfffff000, 0xd41, 0x5, 0x3, 0x0, 0x5, 0x960, 0x8, 0x83, 0xc5, 0x4b800000, 0x4, 0x1000, 0x5, 0x4, 0x1, 0xffffffff, 0xd, 0xc4, 0x1000, 0x2, 0x2, 0x6, 0x8000, 0x32, 0x10001, 0x5c0, 0x8f80, 0x2, 0x7, 0x400, 0x8, 0x1, 0xe, 0x8, 0x590, 0x5, 0x100, 0x7, 0x7, 0x6, 0x101, 0x6, 0x6, 0x10001, 0x4, 0x0, 0x101, 0xf67f, 0x2, 0x0, 0xfffffff8, 0x6, 0x2, 0xe8, 0x2, 0x8000, 0x2, 0x5, 0x2, 0x0, 0x7, 0x2, 0x6ad2, 0x4, 0x136, 0xe, 0x9, 0x3, 0x3, 0xfffffffc, 0xe, 0x6, 0x1, 0x4, 0xfffffffe, 0x6, 0x9, 0x1, 0x2, 0x1000, 0x5aa6, 0x8, 0x100, 0x4, 0x0, 0x6]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x81, 0x4, 0x8, 0x9, 0xb61, 0xf, 0x9, 0x9665, 0x6ba, 0x3, 0x5c09bc17, 0x3, 0xfffffff8, 0x4, 0x3, 0x7, 0xc, 0x6, 0xa, 0x7, 0xa, 0x9c22, 0xb, 0x7, 0x0, 0x1, 0x0, 0x89d, 0x6, 0x1, 0x8, 0x8, 0xf, 0xf, 0x4, 0x5, 0x6, 0x3, 0x9, 0x8000, 0x9, 0x7, 0xbe, 0x0, 0x16, 0x0, 0x400, 0x2, 0x2, 0x7, 0x8, 0x7, 0x4753, 0xbb5d, 0x3, 0xfffffffa, 0x3, 0xfffff62a, 0x9, 0x0, 0x81, 0x200, 0x3, 0x5, 0x4, 0x6, 0x3, 0x6, 0x2, 0x5, 0x3, 0xe7f1, 0x3, 0x9, 0xf8, 0x2, 0x8, 0x3, 0x101, 0x8, 0x2, 0xad6, 0x4, 0xc595, 0xfffffffc, 0xcac4, 0x7, 0x7fff, 0x101, 0xff9, 0xa933, 0x6, 0x8, 0x9, 0x8, 0x7, 0xc71d, 0x1, 0x9fc, 0x10b74ac7, 0x5, 0xa, 0x101, 0xfffffffa, 0xe1, 0xc8f, 0xdc4, 0x4, 0x7, 0xbb1, 0xe, 0xc, 0x10001, 0xffffffff, 0x1, 0x70000, 0x9, 0x6, 0x8, 0x8, 0xffff, 0x9, 0x7, 0x3, 0x1, 0x3, 0xe, 0x0, 0x200, 0x400, 0x10000, 0x0, 0x8, 0xc6c, 0xd0c6, 0x4, 0x3ff, 0x6, 0x7, 0xe2, 0x0, 0x7e, 0x3, 0x6, 0x1, 0x6, 0x43f2, 0x81, 0x10000, 0x2, 0x7, 0x8, 0x9, 0x69, 0x5, 0x3, 0x5, 0x4, 0x4, 0xffff, 0x4, 0x1ff, 0xc, 0x2, 0x1, 0xffffffff, 0x101, 0x10001, 0x7ff, 0x1, 0xc, 0x3, 0x4, 0x7, 0x8, 0x1, 0x1, 0x9, 0x1000, 0x5, 0x7, 0x0, 0x7a, 0x189, 0x6, 0x8, 0x6, 0xf8, 0x8, 0x7fffffff, 0x3, 0x3, 0x200, 0x97bd, 0x3, 0x9, 0x7, 0x8, 0x1ff, 0x4, 0x0, 0x5, 0x8, 0x4, 0x2cb9, 0xb, 0xc7ef, 0x101, 0xdf0e, 0x6, 0x76e3, 0x8, 0x7, 0x1, 0x1000, 0x0, 0x9, 0x3ff, 0x385, 0x3, 0x4, 0x7, 0x7, 0x200, 0xdb, 0x7, 0x0, 0x9, 0xa, 0xb86, 0x7fffffff, 0x0, 0x4, 0x1, 0x101, 0x9, 0x8, 0x1, 0x3, 0x5, 0x98b, 0x8001, 0x8, 0x9, 0x4, 0xe24, 0x8, 0x8, 0x0, 0xd70, 0x9, 0x2, 0x7, 0x9, 0x630, 0x80000001]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x1, 0x9, 0x7, 0x2, {0x81, 0x2, 0x8001, 0x3, 0x9, 0x8000}, {0x1, 0x0, 0xb55, 0x1, 0x1, 0x9}, 0x3f, 0x1ff, 0x7f}}]]}, {0x3f, 0x6, "45276254d0bcd898a3044d638070709cfa4aa4daaa62439d4e53db4478debb7c285fae88cfba928fffe9d153926bb3d3a011026ec7f96b9e72c28b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_MATCHALL_ACT={0x1844, 0x2, [@m_skbmod={0xbc, 0x9, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x3, 0x10000000, 0x4}, 0x4}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x37, 0x6, "01c3754a674e810dff350b8ac810d1f01276716a461c13766e90b398e3bfa8a5c68658285b4cf8043f97ebcb5b235ce0525f3b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0xf0, 0x16, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0xbd, 0x6, "b2137dffdcc89aa4dda6dfa3680fc0cc361f76299dea74936abad013ff16295e8fc115fbc71a029e637efceee9bad1edb102f360faec7f8c5358352eb9e56073e4e9c52bcfc436537685def331debbf8312ee963207a66b66a7ca1419c12d5a3e8f51bb4f482095c9e62a369358571e14600431b4e5ac6087efeebd86edc26302aa083a0509b6dd0c5fadaa89cfa20b9a7d78c75ba94ecd41a6ed8b3acfdad578683dceeb61b6f373c07b39b0cba3392368cb02ac58ee126b0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x78, 0x18, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}]}, {0x43, 0x6, "1869ac5cc74f2f0d05574696f68a2142289315a19d089cb4ce39582a97c4fb7441c92dcf5c6109ee3de38ae150bea5926a91b55057e06b5d1c879efc0fd91c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_nat={0x111c, 0x17, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x4, 0x0, 0x2}, @local, @loopback, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x0, 0xffffffffffffffff, 0x1, 0x9}, @loopback, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x5, 0x1, 0x3, 0x8}, @private=0xa010100, @remote, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x7, 0x4, 0x400, 0x2}, @remote, @multicast2, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xb, 0x6, 0x20000000, 0xee61, 0x400}, @loopback, @rand_addr=0x64010101, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x7, 0xd, 0x800}, @rand_addr=0x64010102, @multicast2, 0xff000000, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x9c, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x6b, 0x6, "346851640b82af5d7e14dfecbb5b30c04ecb99ea219543602cdf470034acfead29cfcc4977209bd0a88c3d33ff1e22e9cfc5f0fb2c7dd27c4234cdf2b3e20832e50eaf15ae1242c3a4bafa42f9184dc4064a4d82c3ed0628d14443670986a23acaadca2cc886cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0xe0, 0xc, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0x1f}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}]}, {0x99, 0x6, "e788791033e834ab192bc991ca721f15bdb0498222c8b5c542c5008b473c34700de5978c80443ca85a7fbb1a6ad30e1aced988693541f668bd4f8daec4c104bfc13201c6bef8c32a692fee080282732f0e22294b02787d039aa6a3b53b6ec59a1dd4b1319b13888f3c638a97dc5cdb2f7de7a890e760c0b0753ac229506d9ee20f1d7e39a06c49099ea77fc6bd429a5c50c9c3444e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x2, 0x0, 0x0, {{0xf}, {0x70, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x29}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, {0x50, 0x6, "9ef802876762cf591ac44064646b9c137ef60eeac70d15cc0f72281c609e5ac4e8a991512ee85553d84f1f1e495bba3f5ae0b9c8a6ceb3965d51ae1113689b6d4fc601de12083c254516c767"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x168, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x80}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0xf7, 0x6, "881cbcd139dd9d2efd8ddbd76a4ccc12ba41eb9d33c2f1a32b0b5f4479d98711edebbef4cd4b41c738a9f46e16a5bab5346203d3bdaa36b20f17ae74cd351ff600ac0d1b3f088933df14c2b8924d4e249249654982d9b06414a695834a6d6e400fc9c93637b6a00c8ba010680858e406a6c26bed288f8bd3f36f5f7e097c676cc25cebbd35048c44a4129384617986d44d0ab24aa1543699c50da34ced6b183948f6e05d45d601437ca55867d5921bb0814155f056ea8630aab8f5759a240ee600e7c8ac83c2864d3b001ce851dad9c302cae42c267a7d879ef1730ef2cdbb869bfe69a64b4e2be9d9ce0c2d8e7bca627abef9"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x130, 0x19, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0xfa, 0x6, "ad87934fd6f43879766f13f6fccda61e60a40f315955159eed21cec3ca8298d9baa5be08ce91e669551bf0e176cf4eaf1f9738e42b0d3ec7263b2c2ca4650574765ce651ab99699f13c5a889b6388cf3a7736cae48a2deeb40e91e3040af3efda6dbd9b3bf158878d8a3bac907d627302cd2f930b6f4b0650b3b81afd00fb22dfe5d4f52c64936224f9b54177285a19956782662ff19424ce9cd28fcba65c1cf0f810bd00b5e3d2afdc3014a3fd17b43937ce29a897dca0af0ac1b1f6ff3f437e149e7a68c342e1ee9561388e40101743627b56bad7069cda68971ce99488dc287cd3876c86d007a3b5dc1692ea367a7d24ebeb080d6"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0xfff3}}, @TCA_MATCHALL_ACT={0x2c4, 0x2, [@m_ife={0xb4, 0x1f, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_IFE_TYPE={0x6, 0x5, 0x101}]}, {0x6d, 0x6, "2cfefb97c77134a533a10af11352a33c5e23212d569742a2daf17fa8e3b3d03c3a02899bfb57277629a93e5ce3a59c5edb58cf2eb6f87e3a598a1bfec946abeafc88dc85ee8f579b17ca50f0fe86dcb3cdf93c23978620de2146204115f8e9ece4b82ca52e4c4c469c"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x110, 0x6, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x90a, 0x3ff, 0x1, 0x5, 0x4}, @broadcast, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xcb, 0x10, 0x4, 0x3ff, 0xe9a}, @remote, @loopback, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xffffffff, 0x4, 0x709, 0x6}, @broadcast, @remote, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2aea, 0x1b, 0xffffffffffffffff, 0x6, 0x5}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5e4, 0x51ea, 0x8, 0x4, 0x1}, @private=0xa010100, @remote, 0xffffff00}}]}, {0x20, 0x6, "ec04a5b59ab60f2188d31d39c08670fd0ae6deadc0cce88880aef15f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xfc, 0x7, 0x0, 0x0, {{0xf}, {0x40, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x7, 0xffffffffffffffff, 0x61, 0x5}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x90, 0x6, "911aabbbe0168d5305efb94967b0e7e19a268359dcecc0c3f0b0085956b1174f59aa4cd33b8d4ba13f7aa827585c7fd337375281a31bea9e10564e2e12fadae61694dcf22ca5d3ac17d6498de291e0c0d987bb665cde1204cd26d100fb427d05e4a636a93432b0b17734c96561c082d898f9b482f93ba423e4e374e632b08fb12292950f182ab9518ad760fc"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0x14}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xfff2}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xf}}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x9}}]}, 0x3184}, 0x1, 0x0, 0x0, 0x8000}, 0x20080055) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x20008050) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="7c010000190001000000f8b55f23f9c2910e000003000000e0000002000000000000000000000000e780000000000000000000aa0000000006000000d7bcaf99c69297d0a00ab2e7194b9b6f4c91006dd8f0340b57806d93698471", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000c4000500e0000001000000000000000000000000000004d53c00000002000000e00000010000000000000000000000000735000004030700080000000400000002000000fe80000000000000000000000000000c000004d36c00000002000000fe8800000000000000000000000001010135000002007300008000000400000007000000e0000002000000000000000000000000800000013c0000000a000000ac1414bb000000000000000000000000000000000101090008000000e700000007000000"], 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000003c0)=r7, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100), 0xa, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000003a00010325bd70ff00ffffff06000000d366ca365573bf81d49e075cd621e3727770796cb603afa290162685293412ad2c6383e1c543bc8e4b71e86b3ed2d301465de84c0001000000000000271667c6cd27aed1f73d377a6a"], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000100)={0x20000014}) r10 = socket$netlink(0x10, 0x3, 0x6) writev(r10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000010c0)={r7, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000940)=[0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000a00), 0x0, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000100000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="000000000000000008001a8004000a801400350077673100"/36], 0x3c}}, 0x0) 792.269032ms ago: executing program 1 (id=6253): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@deltclass={0x474, 0x29, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xf}, {0x4, 0x9}, {0xb, 0xc}}, [@c_atm={{0x8}, {0x38, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0x3}}, @TCA_ATM_HDR={0x29, 0x3, "b27ce56d7bd66b577e2a00fa2a6f8cad70c37fd0b6897c949b3eae33effdff0994e913a6b5"}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x1, 0x3, 0x0, 0x7, 0x0, 0x10001, 0x1, 0x0, 0x87e0, 0x44, 0x1c, 0xebe, 0x8, 0x2, 0x8001, 0x10000, 0x6, 0x6, 0x5, 0x4, 0x8, 0xc, 0x6, 0xfff, 0x0, 0x9, 0xffffff43, 0x9a, 0x7, 0xa, 0x8529, 0x0, 0x1bc2, 0x2, 0x7, 0x5690bb00, 0x0, 0x1, 0x4ac9, 0x6, 0x7fff, 0xa3, 0x7, 0x2, 0x81, 0x1, 0x4, 0xffff710f, 0x10000, 0x2, 0x1, 0xe541380, 0x40, 0x0, 0x100, 0x6, 0x40, 0x5, 0x6, 0x8, 0x1, 0x4, 0x2, 0x9, 0x4, 0x3, 0xfd, 0x440f, 0x6, 0x3b, 0x7, 0x1, 0x5, 0x1, 0x38000000, 0x1, 0x4, 0x3ff, 0x8, 0x2, 0x9, 0x800000, 0x8, 0x1, 0xd6, 0x2, 0x4, 0x0, 0x30, 0x5, 0x7fa7, 0xffff, 0x878a, 0x1, 0xfffffff8, 0x4, 0x2, 0x6, 0x7, 0x9, 0x1, 0x50000000, 0x8, 0x7fffffff, 0xffff, 0x2, 0x6, 0x4, 0x2, 0xd13, 0x3, 0x9, 0x2, 0xfff, 0x6, 0xfffffffd, 0x24f0, 0x0, 0x6, 0x8, 0x80000000, 0xff, 0x6, 0xfffffffb, 0xffff7fff, 0xb02, 0x2, 0x9, 0x200, 0x80000001, 0x0, 0xa6, 0x2, 0x80000000, 0x5, 0xfffffff9, 0x2, 0x0, 0x4, 0x7, 0x47, 0xc0, 0xd1b7, 0x2, 0x8, 0xddf3, 0x8, 0x4, 0x80000000, 0x9, 0x6, 0x9, 0x100, 0x6, 0x1, 0x6, 0xe, 0xfffffff8, 0x2, 0x5, 0x7, 0x611, 0x0, 0x8, 0x0, 0x8, 0x2, 0x3, 0x3, 0x6, 0x4, 0x7, 0x9, 0x94, 0xe74, 0x80000000, 0x63, 0x8, 0x3, 0x0, 0x7, 0x6, 0x155a, 0x2, 0x401, 0x5, 0x7ff, 0x8, 0x4, 0x2, 0xbf4b, 0x2, 0x1, 0x401, 0x7, 0x0, 0x6, 0x800, 0x2, 0x0, 0x9, 0x9, 0x4, 0x4, 0x29, 0x800, 0x4, 0x45df, 0x9, 0x7fff, 0x2, 0x7f, 0x8, 0x0, 0x5, 0x2, 0x0, 0x6, 0x90, 0xfffffff7, 0x3, 0x8, 0x81, 0xff, 0x5, 0x9, 0x6, 0x8, 0x6, 0x403, 0x9d, 0x7fffffff, 0x80, 0xb, 0xffff, 0x6, 0x2, 0xa, 0x12a1, 0x5, 0x8, 0x0, 0x3, 0x7, 0xe755, 0x3, 0xa65f, 0x3, 0x6dbc, 0x7, 0x2, 0x1, 0x81, 0x100, 0x401, 0xc6]}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x8000}, 0x200048c5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1900000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, 0x0, 0x0}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018060000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff000000000000000000000007000100000000000000000009000000000000000000000009040000000000000000000009060000000000"], 0x0, 0x96}, 0x28) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000011c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xfc}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010100"], 0x14}}, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000cc0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000d00)=[0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f0000000d80)=[{}], 0x8, 0x10, &(0x7f0000000e00), &(0x7f0000000e40), 0x8, 0xd4, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001080)={'syztnl2\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x7, 0xf45, 0x0, @loopback, @remote, 0x10, 0x80, 0x9, 0x400}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000001180)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYRESOCT, @ANYRES16=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="080006000c0000000600010008000000080006001100000008000700", @ANYRES32=r8, @ANYBLOB="060001000200000005000200040000000800030008000000"], 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$key(r4, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021831020b00000000000000fddbdf25030005000000000002000300e00000010000000000000000030012003c80000002004e20ac1414bb000000000000000003000600000000000200"], 0x58}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0xf4e54000) r11 = socket$igmp(0x2, 0x3, 0x2) r12 = socket$inet6(0x2d, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r12, 0x11d, 0x76, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r11, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r13 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r13, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x0, 0x2}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000000)="3260cad1dc", 0x5}], 0x1}, 0x880) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001580)=@bpf_ext={0x1c, 0x8, &(0x7f0000000080)=@raw=[@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], &(0x7f0000000a80)='GPL\x00', 0x8, 0x76, &(0x7f00000010c0)=""/118, 0x40f00, 0x2e, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001340)={0x0, 0x2, 0x6, 0x6}, 0x10, 0x3505, r10, 0x6, &(0x7f00000014c0)=[0xffffffffffffffff, r0, r10, r10, 0xffffffffffffffff, r10], &(0x7f0000001500)=[{0x1, 0x5, 0xe, 0xa}, {0x1, 0x3, 0xa, 0xc}, {0x5, 0x2, 0x1, 0x1}, {0x3, 0x2, 0xf, 0x9}, {0x1, 0x1, 0xf, 0x1}, {0x0, 0x4, 0xe, 0x4}], 0x10, 0x10}, 0x94) 698.550082ms ago: executing program 3 (id=6254): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)="1a38f0fc4b"}, {&(0x7f00000000c0)="d792defd94714a55437906300156a665d83f4b222791cde486c9c111614194b80c26301326300ef3bc102752a8ff3770edfc933d6c360c126f42246cdd6cf4b89f80431c125289577b7c29012f610e808c41621e9154f4af5dc6353cf6a3"}, {&(0x7f0000000140)="86504a9752b01c6ca2fa726b26639e6ea80471c16ad92200b1925f62da41d2e254b76cc7ca9e87f1de3181855aaac78f7d40775b8355ae349a0170ee1c852b9290b4002f66974dcf9db60362abeba534f0f693e5a4e68f782992a17f903e0deab97de6c378906103da0dc176b180f5f378de681ccdf080d201bfcc5bb69db6"}, {&(0x7f00000001c0)="6ffec1242bee8af73262861d9e4aac33a61b5e2e7de3fedae9da4759c23381405bc8fd7cf914e2decfa9e9eed9ebec1181cfc3080f2a9f07bf890db2f971e85ea00d00e71bef"}, {&(0x7f0000000240)="dab7ea4b734172466ff76ccd7efd7d9d1ecb33e428c5e3b127d8f60c1c66083e5d43b114aadffba5a7f9ef04c53e0f737a6b20d4fe9fb6b846cd7501bda36aec00bcb35c72e78e3829d13924e20bcc04e3e6ba41d519fe3cc968"}, {&(0x7f00000002c0)="ec70a900f58a1f393ba8750058126101a88196bcf0e776e57230870ba8c0de7fa1efbbf757353d98460230d046dd7703e8f0c9ab52a66fef90dfdb03ad98eeaaaed5fdb2727b76bdb0ca178cbb041260b817c36a466bd0c6b97b69d4c287d7b05776a7e76a27e4c24ed7e35ba3c55f114ae084cd15bf315efa56dcba7d0bd9992cd65a01b5dd984be5d43323bc29004a06f0815c0a41df482a91fbf40ef9b223eee35f663e11c208dc5961a0a3da1d132956bd347924ae9233855694e18146c43e02be896c5d38fe60b5e0fcd4cc"}], 0x28b) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) unshare(0x6a040000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) listen(r2, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002d40)=@ipv4_getnexthop={0x20, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000010) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000580)=@sack_info={0x0, 0x91b5, 0x6}, 0xc) (async) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000580)=@sack_info={0x0, 0x91b5, 0x6}, 0xc) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000080)=0x2) (async) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000080)=0x2) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000002540)=0x1) (async) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000002540)=0x1) r6 = socket(0x8, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x61d9, &(0x7f00000000c0)={'wlan0\x00'}) 662.645288ms ago: executing program 1 (id=6255): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff00000100037c000004"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3, 0x0, 0xff, 0x6, 0xe, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xa, 0x5a, 0x0, 0x0, @str='%+\'\')\x00'}]}, @typed={0x8, 0x88, 0x0, 0x0, @pid}]}, 0x30}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 610.173155ms ago: executing program 3 (id=6256): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x3) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9fff548600d698ceb5819570163", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000440)={0x0, 0x8, 0xc7, "bd4c6b552af324a57a119171d7431b22336794cd2f71352b495f8d035bbb1ddfd139cc0197c33353feeb6ad9362bde64482bc58847b45108464825903677c8d630d0ed2f756060ee2f7d0f796591382f6d718ced19239c00ce007f76b43fa76ad4ab4415e3e3a962bccfd79bee14de93beba40e276145fa696b27fee69425242751541b6e5f8b815f584403a17ece858f89b9217aae2f0997a9a9cbbaf789fa7701dd19b4888a8518f6a05d1a6996ef1fa422a8f4a7c64c8a26cec109ffcf6f90d2bf66dfb4686"}, 0xcf) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="120000000f0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r7, &(0x7f0000000500), 0x0}, 0x20) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0c000000020000000000000000000005000000000000000000"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r10, 0x20, &(0x7f0000000400)={0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000000780)=""/164, 0xa4}}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573164d39ad8e0267632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r8, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x8}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x8400}, 0x2000c080) 118.513617ms ago: executing program 1 (id=6257): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x3}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) epoll_wait(r3, 0x0, 0x0, 0xfdcd) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000000)=0x2040a3, 0x4) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000200)="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") 0s ago: executing program 4 (id=6258): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000021801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000009e8685000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000cbd520850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c00108008000140"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x190, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x81, 0x600, 0x9}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x29, 0x1ff, 0x6, 0xb0e6, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x800, 0x93, 0x6, 'netbios-ns\x00', 'syz0\x00', {0x6}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x10, 0x1, 'syz0\x00', 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r1) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x38, r8, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x28}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x24000085) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r9, 0x1, 0x0, 0x0, {0x4f}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000200)="14fbb18cf42b1fe6aba84e1d546135527584625bbb00eacf5bb957679a2bf07f36630442cffba22d00d544549ec351460110dd42fece4d0f69b68b2a024fc8f09dd3064e6925d22ef32432411ba3eba760e12006940c225dc9d2bbaf172ada6de9912fdd943cd0624a3e4badc061c9a8f06c9074993f3a2bc3a00939930f25926a17f15dffb8d9fb43fb7227ce0816b6ed258c76a7a8ced63fdec648124e", 0x9e}, {&(0x7f0000000380)="5d3d5f4f07d658f6420997dde39555af4f9ecc35f7779665ff2a611b52b54189be8226692185d55feb047414cdfe6e9dd88a2d25c828627eda9b614d6528f748b62b928ec34081354ee706729efc9ed24b9a798dbc44e6da6c3c0b5fbb9261f31800d6d1c182d732828c0ff2c5acb95325c65bdf07ba701e17936ab19da3e9", 0x7f}], 0x2}}], 0x1, 0x20000800) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "9f76f4661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000300)=0x8001, 0x4) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010002080000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="08009f000a0000000800a100000000000800a000f9ffffff08002600b409"], 0x3c}}, 0x4000084) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0xbe8, r5, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x51}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4e}]}]}, @NL80211_ATTR_TID_CONFIG={0x57c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000000000000001}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x68}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x15}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x140, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9e}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x124, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x4, 0xa}, {0x3, 0x2}, {0x5, 0x3}, {0x6, 0xa}, {0x7, 0x3}, {0x2, 0x2}, {0x3, 0x9}, {0x0, 0xa}, {0x4, 0x3}, {0x5, 0x2}, {0x5, 0x7}, {0x0, 0x2}, {0x2, 0x5}, {0x7, 0x1}, {0x0, 0x4}, {0x1}, {0x5, 0x4}, {0x2, 0x4}, {0x0, 0x2}, {0x6}, {0x1, 0x9}, {0x6, 0x7}, {0x5, 0x1}, {0x2}, {0x6, 0x1}, {0x2, 0x9}, {0x5, 0x7}, {0x4, 0x8}, {0x3, 0x3}, {0x6, 0x6}, {0x2, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5df, 0x7, 0x9, 0x2f, 0x2, 0x400, 0x8]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x4, 0x8}, {0x1}, {0x3, 0x8}, {0x2, 0xa}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x6}, {0x7, 0x7}, {0x2, 0x2}, {0x4, 0x3}, {0x1, 0x4}, {0x2, 0x5}, {0x1, 0x4}, {0x5, 0x8}, {0x3, 0x1}, {0x5, 0x2}, {0x0, 0x7}, {0x4, 0x5}, {0x4, 0x9}, {0x3, 0x8}, {0x4, 0x4}, {0x3, 0x5}, {}, {0x6, 0x5}, {0x3, 0x5}, {0x5, 0x2}, {0x0, 0x8}, {0x0, 0x8}, {0x4, 0x3}, {0x3, 0x3}, {0x2, 0x5}, {0x6, 0x3}, {0x7, 0x4}, {0x1, 0x4}, {0x7, 0xa}, {0x7, 0x1}, {0x2}, {0x3, 0x4}, {0x4}, {0x3}, {0x0, 0x4}, {0x7, 0xa}, {0x2, 0x1}, {0x3, 0x2}, {0x3, 0x6}, {0x5, 0x6}, {0x7, 0x6}, {0x5, 0x8}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1b, 0x16, 0x16, 0x1, 0x5, 0x18, 0x665f67e6a44279a8, 0x12, 0x6c, 0x4, 0x5, 0x1, 0x6, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x2, 0x9, 0x3, 0x6, 0xf, 0x403]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x7, 0x2}, {0x6, 0x8}, {0x2, 0xa}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x7}, {0x0, 0x8}, {0x4, 0x9}, {0x0, 0x9}, {}, {0x6, 0x5}, {0x7, 0x1}, {0x5, 0xa}, {0x7, 0x8}, {0x4, 0x9}, {0x2, 0x4}, {0x4, 0x4}, {}, {0x0, 0x1}, {0x7, 0x3}, {0x4, 0x2}, {0x4, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x7, 0x8}, {0x2, 0x2}, {0x0, 0x6}, {0x0, 0x2}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0xa}, {0x1}, {0x2, 0xa}, {0x6, 0xa}, {0x2, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x4, 0x9, 0xb, 0x6, 0x6b, 0x6, 0x36, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe501, 0x1, 0x50, 0x1, 0xae6, 0x6, 0x1, 0x800]}}]}]}]}, {0x80, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x54, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x2, 0xc, 0x1b, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x7}, {0x4, 0x7}, {0x1, 0x5}, {0x5, 0x6}, {0x4, 0x2}, {0x7}, {0x0, 0x3}, {0x1, 0x4}, {0x3, 0x8}, {0x7}, {0x0, 0x3}, {0x2, 0x7}, {0x1, 0x1}, {0x1, 0x9}, {0x6, 0xa}, {0x4, 0x5}, {0x0, 0x8}, {0x2, 0x7}, {0x4, 0x8}, {0x7, 0x9}, {0x0, 0x2}, {0x5}, {0x7}, {0x3, 0x4}, {0x0, 0x3}, {0x1, 0x9}, {0x1, 0x6}, {0x2, 0x8}, {0x1, 0xa}, {0x3, 0x4}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x5}, {0x0, 0x6}, {0x2, 0x2}, {0x4, 0x2}, {0x0, 0xa}, {0x2, 0xa}, {0x0, 0x9}, {0x1, 0x3}, {0x7, 0x7}, {0x7, 0x5}, {0x4, 0x5}, {0x4, 0x2}, {0x1, 0x6}, {0x3, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x99}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x19}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfa}]}, {0x320, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2d4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0x6}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x2}, {0x5, 0xa}, {0x2, 0x2}, {0x2, 0xa}, {0x5, 0x1}, {0x1}, {0x3, 0x4}, {0x6, 0x6}, {0x0, 0x5}, {0x0, 0x2}, {0x2, 0xa}, {0x1, 0x6}, {0x5, 0xa}, {0x1, 0x5}, {0x3}, {0x1, 0x4}, {0x1, 0x4}, {0x0, 0x2}, {0x6, 0x7}, {0x0, 0x5}, {0x5, 0x6}, {0x0, 0x6}, {0x1, 0x9}, {0x5, 0x7}, {0x2, 0x4}, {0x1, 0xa}, {0x7}, {0x4, 0x1}, {0x3, 0x7}, {0x0, 0x7}, {0x0, 0x4}, {0x5, 0xa}, {0x6, 0x2}, {0x1, 0x7}, {0x2, 0x1}, {0x5, 0xa}, {0x3, 0x5}, {0x7, 0x9}, {0x7, 0x8}, {0x4, 0x3}, {0x4, 0x4}, {0x0, 0x2}, {0x3, 0x8}, {0x2, 0x4}, {0x1, 0xa}, {0x0, 0x3}]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x5, 0x5, 0xfffd, 0x9, 0x3, 0x1]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x7, 0x2, 0x1, 0xe55, 0x7fff, 0xd43]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0x30, 0x30, 0x6c, 0x48, 0x18, 0x12, 0x3, 0x36, 0x12, 0x2, 0x30]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x20, 0x7f, 0x4, 0x5, 0x7f, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0xe, 0x6, 0x3, 0x2, 0x84, 0x5, 0xb]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x5}, {0x6, 0x6}, {0x0, 0x5}, {0x0, 0x5}, {0x4}, {0x1, 0x5}, {0x3, 0x9}, {0x5, 0x5}, {0x4, 0x7}, {0x1, 0x7}, {0x6, 0x6}, {0x7, 0x5}, {0x2, 0x2}, {0x3}, {0x7, 0x7}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x9}, {0x0, 0x7}, {0x2, 0x6}, {0x1, 0x6}, {0x7, 0x2}, {0x1, 0x4}, {0x1, 0x7}, {0x0, 0x6}, {0x4, 0x4}, {0x6}, {0x6, 0xa}, {0x3, 0xa}, {0x0, 0x6}, {0x3, 0x9}, {}, {0x4, 0x9}, {0x7, 0x1}, {0x7, 0xa}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x4}, {0x4, 0x3}, {0x0, 0x1}, {0x3, 0x3}, {0x1, 0x8}, {0x2, 0x5}, {0x3, 0x5}, {0x4, 0x9}, {0x3}, {0x2, 0x8}, {0x6, 0x6}, {0x0, 0x3}, {0x2, 0x8}, {0x4, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x400, 0x8, 0x1, 0xffa8, 0x7, 0xfffa, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x9, 0x1b, 0x6c, 0x48, 0x10, 0x30, 0x3a203f09d48fd421, 0x12, 0xb, 0x2, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x8, 0x1, 0x7ff, 0x0, 0xf67d, 0xd]}}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x12, 0xb, 0xf, 0x2, 0x5, 0x3ff, 0xc5]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x9}, {0x5, 0x2}, {0x1, 0x3}, {0x0, 0x5}, {0x3, 0x2}, {0x5, 0x9}, {0x3, 0x3}, {0x6, 0x8}, {0x0, 0x2}, {0x3, 0x2}, {0x3, 0x3}, {0x1, 0x4}, {0x5, 0x4}, {0x5, 0x7}, {0x3, 0xa}, {0x0, 0x7}, {0x2, 0x3}, {0x4}, {0x7, 0x6}, {0x7, 0x6}, {0x3, 0x1}, {0x3, 0x4}, {0x6}, {0x7, 0xa}, {0x1, 0x9}, {0x5}, {0x2, 0xa}, {0x7, 0x3}, {0x1}, {0x6}, {0x6, 0x4}, {0x4, 0xa}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x7}, {0x6, 0x8}, {0x3, 0x6}, {0x3, 0x4}, {0x1, 0x9}, {0x7, 0xa}, {0x5, 0x6}, {0x0, 0x5}, {0x7, 0x3}, {0x5, 0x5}, {0x6, 0x9}, {0x1, 0xa}, {0x3, 0x4}, {0x7}, {0x7, 0x1}, {0x0, 0x6}, {0x0, 0x1}, {0x0, 0x5}, {0x1, 0x4}, {0x1, 0x4}, {0x1, 0x5}, {0x0, 0x5}, {0x0, 0x2}, {0x7, 0x7}, {0x0, 0x9}, {0x4}, {0x2, 0x8}, {0x3, 0x9}, {0x6, 0x2}, {0x1, 0x4}, {0x5, 0x6}, {0x3, 0x7}, {0x1, 0xa}, {0x2, 0x1}, {0x5, 0xa}, {0x7}, {0x4, 0x4}, {0x7, 0x1}, {0x5, 0x7}, {0x3, 0x5}, {0x0, 0xa}, {0x1, 0x9}, {0x5, 0x6}]}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x7, 0x3}, {0x4, 0x9}, {0x6}, {0x4, 0x4}, {0x6, 0x1}, {0x0, 0x2}, {0x1, 0x7}, {0x7}, {0x6, 0x4}, {0x4, 0x2}, {0x2, 0x7}, {0x7, 0x8}, {0x0, 0x4}, {0x6, 0x9}, {0x0, 0x3}, {0x6, 0x4}, {0x6, 0x6}, {0x5, 0x7}, {0x5, 0x7}, {0x7, 0x2}, {0x1, 0x6}, {0x2, 0x1}, {0x2, 0x8}, {0x0, 0x9}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0xa}, {0x1, 0x2}, {0x3, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x4, 0x6}, {0x3, 0x1}, {0x3, 0x3}, {0x0, 0x9}, {0x6, 0x6}, {0x1, 0x8}, {0x1}, {0x3, 0x8}, {0x7, 0x7}, {0x0, 0x9}, {0x7, 0x8}, {0x5, 0x4}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x7}, {0x5, 0x1}, {0x4, 0x4}, {0x4, 0x8}, {0x5, 0x4}, {0x3, 0x7}, {0x3, 0x6}, {0x3, 0x6}, {0x6, 0x7}, {0x6, 0x9}, {0x4, 0x5}, {0x3, 0x8}, {0x7, 0x8}, {0x6, 0xa}, {0x3, 0x5}, {0x7, 0x5}, {0x1, 0x7}, {0x1, 0x9}, {0x4, 0x7}, {0x4, 0x6}, {0x2}, {0x1, 0x4}, {0x6, 0x8}, {0x6, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x51, 0x2, [{0x4, 0xa}, {0x1, 0x7}, {0x0, 0x6}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x5, 0x9}, {0x3, 0x7}, {0x1, 0x3}, {0x6, 0x2}, {0x6, 0xa}, {0x5, 0x3}, {0x3, 0x3}, {0x5, 0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x4}, {0x3, 0x8}, {0x2, 0x1}, {0x4, 0x4}, {0x4, 0x4}, {0x1, 0x5}, {0x4, 0x7}, {0x0, 0x7}, {0x3, 0x7}, {0x7, 0xa}, {0x2, 0x9}, {0x2, 0x5}, {0x6, 0x7}, {0x0, 0x5}, {0x7, 0x3}, {0x4, 0x3}, {0x2, 0xa}, {0x0, 0x8}, {0x1, 0x5}, {0x0, 0x7}, {0x1, 0x5}, {0x1, 0x3}, {0x1}, {0x1, 0x9}, {0x2, 0x1}, {0x5, 0x7}, {0x4, 0x1}, {0x4}, {0x6, 0x8}, {0x7, 0x8}, {0x0, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x0, 0x5}, {0x5, 0x8}, {0x7, 0x7}, {0x7, 0x5}, {0x3, 0x1b}, {0x0, 0x7}, {0x5, 0x3}, {0x3, 0x9}, {0x5, 0x3}, {0x3, 0x9}, {0x4, 0xa}, {0x7}, {0x2, 0xa}, {0x1}, {0x7, 0x2}, {0x6, 0x7}, {0x4, 0x6}, {0x0, 0x2}, {0x7, 0x5}, {0x3, 0x8}, {0x7, 0x3}, {0x1, 0x5}, {0x3, 0x3}, {0x2, 0xa}, {0x3, 0x9}, {0x3, 0x3}, {0x1, 0x2}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4bc, 0x8, 0x2, 0x4, 0x4, 0x8ec]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcdf}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x270, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd6}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x30}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffff80}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fff}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa00000000000}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0xcf}]}, {0x16c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x154, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x6}, {0x6, 0x5}, {0x7, 0x4}, {0x4, 0xa}, {0x2, 0x6}, {0x2, 0x9}, {0x1, 0x4}, {0x0, 0x6}, {0x3, 0x7}, {0x7, 0x1}, {0x2, 0x1}, {0x6, 0xa}, {0x1, 0x1}, {0x0, 0x7}, {0x2, 0x8}, {0x6, 0x7}, {0x0, 0x1}, {0x1, 0x7}, {0x5, 0x4}, {0x3, 0x8}, {0x0, 0x1}, {0x0, 0x4}, {0x5, 0x2}, {0x6, 0x8}, {0x3, 0x5}, {0x4, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x6, 0x0, 0x3d18, 0x3, 0x6, 0x40]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x5, 0x1}, {0x6, 0xa}, {0x5, 0x9}, {0x5, 0x7}, {0x6, 0xa}, {0x3}, {0x5}, {0x7, 0x4}, {0x2, 0x9}, {0x6, 0x1}, {0x6}, {0x2, 0x4}, {0x1}, {0x5, 0x9}, {0x7}, {0x7, 0x4}, {0x4, 0x5}, {0x3, 0xa}, {0x1, 0x3}, {0x7, 0x2}, {0x5, 0x7}, {0x5, 0x3}, {0x2, 0x2}, {0x4, 0x3}, {0x4, 0x5}, {0x7, 0x1}, {0x0, 0xa}, {0x6, 0x1}, {0x5, 0x3}, {0x1, 0x1}, {0x3}, {0x0, 0x2}, {0x0, 0x3}, {0x6, 0x2}, {0x3, 0x6}, {0x0, 0x1}, {0x4}, {0x1, 0xa}, {0x2, 0x3}, {0x0, 0xa}, {0x7, 0x19}, {0x4, 0x5}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0xa}, {0x7, 0x8}, {0x0, 0x5}, {0x0, 0x6}, {0x3, 0x4}, {0x5, 0x6}, {0x0, 0x1}, {0x2, 0x2}, {0x2}, {0x0, 0x8}, {0x3, 0x3}, {0x0, 0x1}, {0x0, 0x1c}, {0x2, 0x6}, {0x7, 0x9}, {0x2, 0x9}, {0x0, 0x9}, {0x0, 0x5}, {0x4, 0x3}, {0x5, 0x8}, {0x4, 0x7}]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x6}, {0x3, 0x9}, {0x1, 0x7}, {0x5, 0xa}, {0x1, 0x1}, {0x1, 0x8}, {0x4, 0x2}, {0x7, 0xa}, {0x5, 0x7}, {0x2, 0x1}, {0x1, 0x5}, {0x1, 0x8}, {0x2, 0x4}, {0x6, 0x7}, {0x7, 0x6}, {0x5, 0xa}, {0x3, 0x5}, {0x0, 0x9}, {0x4}, {}, {0x0, 0x3}, {0x2, 0x2}, {0x1}, {0x5, 0x6}, {0x7, 0x7}, {0x5, 0x7}, {0x1, 0x1}, {0x1, 0x3}, {0x7, 0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x6}, {0x0, 0x6}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x4}, {0x0, 0xa}, {0x1, 0x4}, {0x3, 0x8}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x4}, {0x7, 0x2}, {0x3, 0x9}, {0x4, 0xa}, {0x7, 0x8}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x8}, {0x3, 0x5}, {0x2, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x0, 0x9}, {0x4, 0x7}, {0x3, 0x9}, {0x3, 0x6}, {0x7, 0x9}, {0x2, 0x5}, {0x2, 0x4}, {0x0, 0x2}, {0x3, 0x6}, {0x6, 0x3}, {0x2, 0x6}, {}, {0x5, 0x7}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x6}, {0x0, 0x4}, {0x7}, {0x5, 0x2}, {0x2, 0x7}]}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x0, 0x1}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0x2}, {0x3, 0x6}, {0x6, 0x4}, {0x1, 0x8}, {0x0, 0x3}, {0x1, 0x1}, {0x2, 0x5}, {0x3, 0x2}, {0x4, 0xa}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x4}, {0x5, 0x3}, {0x3, 0x4}, {0x5, 0x5}, {0x4, 0x3}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x1}, {0x5, 0x8}, {0x4, 0x2}, {0x2, 0x9}, {0x7, 0x6}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0xa}, {0x1, 0x5}, {0x3, 0x3}, {0x3, 0x8}, {0x4, 0xa}, {0x2, 0x4}, {0x4, 0x1}, {0x4, 0x9}, {0x1, 0x6}, {0x3, 0x8}, {0x1}, {0x1, 0x9}, {0x1, 0x6}, {0x5, 0x2}, {0x5, 0x2}, {0x4, 0x2}, {0x6, 0x7}, {0x2}, {0x5, 0x9}, {0x7, 0x8}, {0x7, 0x5}, {0x7, 0x2}, {0x2, 0x4}, {0x5, 0x7}, {0x5, 0x8}, {0x5, 0xa}, {0x1, 0xa}, {0x5, 0x2}, {0x2, 0xa}, {0x4, 0x8}, {0x1, 0x7}, {0x5}, {0x0, 0x8}, {0x5, 0x5}, {0x6, 0x2}, {0x7, 0x9}, {0x4, 0xa}, {0x3, 0x5}, {0x7, 0x7}, {0x3, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x64}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000000}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa6}]}]}, @NL80211_ATTR_TID_CONFIG={0x35c, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0xffffffffffffff0a, 0x5, 0x10}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffb1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x44}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xac}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x27c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xbc, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0x5, 0x3, 0x4, 0x101, 0xd, 0xdfcd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x764, 0x1, 0x9, 0x4, 0x8, 0xeb1, 0x7, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x0, 0x2, 0x9, 0x4, 0x1, 0x66af]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x16, 0x5, 0x2, 0x16, 0x5, 0x30, 0x4, 0x16, 0x0, 0x16, 0x1b, 0x6, 0x1b, 0xb, 0x6, 0x3, 0x6, 0x48, 0x2, 0x2, 0x6c, 0x1, 0x6c, 0x76, 0x16, 0x6c]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0x4, 0xc, 0x4, 0x12, 0x0, 0x0, 0x3, 0x1, 0x60, 0x2, 0xc, 0x3, 0x3, 0x36, 0xb, 0x30, 0x5, 0x5, 0x48, 0x6, 0x3, 0x18, 0x4, 0x5, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0xb3f, 0x5, 0x1, 0x7fff, 0x0, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x9, 0x2, 0x5, 0xa, 0xf, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xca}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaa}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x18c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x2, 0x48, 0x30, 0x9, 0xc, 0x48, 0x2, 0x9b, 0x24, 0x6c, 0x3, 0xb, 0xb, 0x4, 0x60, 0x1b, 0x9, 0x16, 0xc, 0x1, 0x5e]}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x6669, 0x7, 0x7, 0x9, 0xd5, 0x3fd, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x2400, 0x8000, 0x100, 0x4, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x5, 0x6, 0x4, 0x800, 0x7ff, 0x41e, 0x6e1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9f7e, 0x8, 0xa5e, 0x7, 0x80, 0x4d, 0xb856]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1b, 0x5, 0xb, 0xb, 0x36, 0x36, 0x5, 0x41, 0x12, 0x4, 0x1, 0x6c, 0x18, 0x3, 0x3, 0x18, 0x18, 0x48, 0x5, 0x5, 0x2, 0x30, 0x2, 0x9, 0x8, 0x9, 0x18, 0x36]}]}, @NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x100, 0x88, 0x9, 0x3, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x2, 0x1}, {0x0, 0x7}, {0x7, 0x4}, {0x0, 0x8}, {0x4, 0x6}, {0x4, 0x2}, {0x6, 0x7}, {0x6, 0x4}, {0x7, 0x5}, {0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x4}, {0x5, 0x9}, {0x0, 0x1}, {0x3}, {0x0, 0x7}, {0x0, 0x2}, {0x6}, {0x6, 0x4}, {0x5, 0x5}, {0x1, 0x4}, {0x1, 0x4}, {0x4, 0x9}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x18, 0x9, 0x12, 0x0, 0x48, 0x2, 0xc, 0x9, 0x6c, 0x36, 0x4, 0x9, 0x6, 0x12, 0x9, 0x29, 0x6]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x3, 0x1, 0x5, 0x36, 0x9, 0x3, 0x0, 0x3, 0x6c, 0xb, 0x1, 0x0, 0x24, 0x7e, 0x18, 0x36, 0x1a, 0x48, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x3, 0x10, 0x6, 0x9, 0x1, 0x9, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x24, 0x5, 0xb, 0x30, 0x1, 0x1, 0x48, 0x16, 0x2, 0xb, 0x36, 0x2, 0x6c, 0x18, 0x3, 0x2c, 0x11, 0x12, 0x5, 0xc, 0xb, 0x16, 0x3, 0x30, 0x12, 0xb, 0x2, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x3, 0x2, 0x5, 0x6, 0x1, 0x6]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1, 0x18]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x3}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x48, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10001}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x25}]}]}]}, 0xbe8}, 0x1, 0x0, 0x0, 0x4000050}, 0x1) socket$inet(0x2, 0x80000, 0x0) kernel console output (not intermixed with test programs): read for wq "bond5": -EINTR [ 509.635890][T24831] wg1 speed is unknown, defaulting to 1000 [ 509.641804][T24831] wg1 speed is unknown, defaulting to 1000 [ 509.676175][T24815] veth0: left promiscuous mode [ 509.681314][T24824] netlink: 'syz.1.5094': attribute type 23 has an invalid length. [ 509.689895][T24831] wg1 speed is unknown, defaulting to 1000 [ 509.761011][T24831] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 509.833839][T24831] wg1 speed is unknown, defaulting to 1000 [ 509.859964][T24831] wg1 speed is unknown, defaulting to 1000 [ 509.860076][T24847] Cannot find add_set index 3 as target [ 509.867822][T24831] wg1 speed is unknown, defaulting to 1000 [ 509.879874][T24831] wg1 speed is unknown, defaulting to 1000 [ 509.888506][T24831] wg1 speed is unknown, defaulting to 1000 [ 509.897056][T24831] wg1 speed is unknown, defaulting to 1000 [ 510.040802][T24854] __nla_validate_parse: 3 callbacks suppressed [ 510.040819][T24854] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5101'. [ 510.074487][T24854] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5101'. [ 510.134368][T24861] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5102'. [ 510.178620][T24861] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5102'. [ 510.279706][T24870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5108'. [ 510.342977][T24873] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5110'. [ 510.396440][T24876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5108'. [ 510.488813][T24879] gre1: entered allmulticast mode [ 510.533178][T24858] wg1 speed is unknown, defaulting to 1000 [ 510.695016][T24891] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5114'. [ 510.779700][T24897] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5115'. [ 510.824107][T24903] netlink: 'syz.0.5119': attribute type 1 has an invalid length. [ 510.852064][T24903] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5119'. [ 511.151666][T24921] netlink: 'syz.1.5124': attribute type 10 has an invalid length. [ 511.345211][T24902] wg1 speed is unknown, defaulting to 1000 [ 511.405069][T24927] netlink: 'syz.2.5127': attribute type 1 has an invalid length. [ 511.454555][T24888] Bluetooth: hci5: Opcode 0x080f failed: -4 [ 511.590857][T24927] 8021q: adding VLAN 0 to HW filter on device bond5 [ 511.620087][T24930] bond5: (slave gretap2): making interface the new active one [ 511.647350][T24930] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 511.777126][T24937] geneve2: entered promiscuous mode [ 511.782699][T24937] geneve2: entered allmulticast mode [ 511.795899][T17656] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.804480][T24937] mac80211_hwsim hwsim44 syzkaller0: left promiscuous mode [ 511.813047][T24937] mac80211_hwsim hwsim44 syzkaller0: left allmulticast mode [ 511.822533][T17656] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.831763][T17656] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.840821][T17656] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.286364][T24945] xt_TCPMSS: Only works on TCP SYN packets [ 512.313672][T24946] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 512.715720][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 513.062525][T24975] mac80211_hwsim hwsim44 syzkaller0: entered promiscuous mode [ 513.090633][T24975] mac80211_hwsim hwsim44 syzkaller0: entered allmulticast mode [ 515.697441][T25017] __nla_validate_parse: 9 callbacks suppressed [ 515.697460][T25017] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5148'. [ 516.184448][T17652] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 516.194034][T17652] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 516.205778][ T5909] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 516.336779][ T5909] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 516.392815][T25035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5151'. [ 516.505402][T25037] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 516.523607][T25026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5152'. [ 516.558839][T25037] netlink: 348 bytes leftover after parsing attributes in process `syz.1.5153'. [ 516.720581][T25047] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5157'. [ 516.755820][ T5930] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 516.828295][T25022] wg1 speed is unknown, defaulting to 1000 [ 516.949876][T25063] netlink: 236 bytes leftover after parsing attributes in process `syz.3.5161'. [ 517.128508][T25070] tipc: Enabling of bearer rejected, already enabled [ 517.163971][T25070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5163'. [ 517.320273][T25083] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5167'. [ 517.419997][T25089] openvswitch: netlink: IPv4 tun info is not correct [ 517.444958][T25090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5168'. [ 517.455807][T25089] netlink: 'syz.1.5169': attribute type 298 has an invalid length. [ 517.466708][T25084] tipc: Resetting bearer [ 517.543108][T25090] bond4: entered promiscuous mode [ 517.581128][T25090] 8021q: adding VLAN 0 to HW filter on device bond4 [ 517.777220][T25090] bond4 (unregistering): Released all slaves [ 517.939616][T25108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5173'. [ 518.146793][T25117] vlan3: entered promiscuous mode [ 518.405800][T25140] netlink: 'syz.1.5183': attribute type 6 has an invalid length. [ 518.423141][T25140] netlink: 'syz.1.5183': attribute type 7 has an invalid length. [ 518.441219][T25140] netlink: 'syz.1.5183': attribute type 8 has an invalid length. [ 518.780658][T25167] netlink: 'syz.4.5188': attribute type 1 has an invalid length. [ 518.917436][T25170] netlink: 'syz.1.5189': attribute type 3 has an invalid length. [ 518.966162][T25170] bridge8: port 1(ip6gretap4) entered blocking state [ 518.972989][T25170] bridge8: port 1(ip6gretap4) entered disabled state [ 518.987381][T25170] ip6gretap4: entered allmulticast mode [ 519.008202][T25170] ip6gretap4: entered promiscuous mode [ 519.032143][T25127] wg1 speed is unknown, defaulting to 1000 [ 519.178231][T25186] netlink: 'syz.1.5195': attribute type 15 has an invalid length. [ 519.218908][T25186] netlink: 'syz.1.5195': attribute type 15 has an invalid length. [ 519.253078][T17675] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 519.276015][T17675] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 519.300185][T17675] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 519.319662][T17675] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 519.588089][T25207] netlink: 'syz.1.5200': attribute type 12 has an invalid length. [ 519.596860][T25214] netlink: 'syz.1.5200': attribute type 12 has an invalid length. [ 519.687838][T25178] wg1 speed is unknown, defaulting to 1000 [ 519.746728][T25219] openvswitch: netlink: IP tunnel dst address not specified [ 520.245766][T25250] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 520.534117][T25259] vlan0: entered promiscuous mode [ 520.548805][T25259] bond0: entered promiscuous mode [ 520.625871][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 520.727179][T25276] syzkaller0: entered promiscuous mode [ 520.750004][T25276] syzkaller0: entered allmulticast mode [ 520.867283][T25285] x_tables: duplicate underflow at hook 3 [ 520.914343][T25287] __nla_validate_parse: 15 callbacks suppressed [ 520.914366][T25287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5229'. [ 520.998902][T25292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5230'. [ 521.009057][T25292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5230'. [ 521.163084][T25299] bridge_slave_0: left promiscuous mode [ 521.172740][T25299] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.239652][T25299] bridge_slave_1: left allmulticast mode [ 521.245343][T25299] bridge_slave_1: left promiscuous mode [ 521.258384][T25299] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.275314][T25316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5238'. [ 521.284366][T25316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5238'. [ 521.285019][T25299] bond0: (slave bond_slave_0): Releasing backup interface [ 521.304544][T25300] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5233'. [ 521.309560][T25318] netlink: zone id is out of range [ 521.319650][T25318] netlink: zone id is out of range [ 521.327248][T25318] netlink: zone id is out of range [ 521.333044][T25299] bond0: (slave bond_slave_1): Releasing backup interface [ 521.340951][T25318] netlink: zone id is out of range [ 521.346806][T25318] netlink: zone id is out of range [ 521.354838][T25299] `: Port device team_slave_0 removed [ 521.363389][T25318] netlink: zone id is out of range [ 521.369534][T25318] netlink: zone id is out of range [ 521.374665][T25318] netlink: zone id is out of range [ 521.383544][T25299] `: Port device 76žÿ removed [ 521.389221][T25299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.397689][T25299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.459428][T25300] IPVS: Error connecting to the multicast addr [ 521.683886][T25340] tipc: Enabling of bearer rejected, already enabled [ 521.728700][T25343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5245'. [ 521.774814][T25343] 8021q: adding VLAN 0 to HW filter on device bond9 [ 521.834031][T25346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5246'. [ 521.912632][T25356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5249'. [ 521.930542][T25356] erspan0: entered promiscuous mode [ 521.950020][T25356] tipc: Enabling of bearer rejected, failed to enable media [ 521.981516][T25352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5248'. [ 522.193420][T25371] bridge_slave_1: left allmulticast mode [ 522.197743][T25372] syz.1.5252 uses old SIOCAX25GETINFO [ 522.209412][T25371] bridge_slave_1: left promiscuous mode [ 522.215217][T25371] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.779066][T25402] net_ratelimit: 41 callbacks suppressed [ 522.779088][T25402] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 523.256515][T25421] tipc: Enabling of bearer rejected, failed to enable media [ 523.431343][T25407] wg1 speed is unknown, defaulting to 1000 [ 523.863227][T25440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.956002][T25440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.075457][T25440] xt_CT: No such helper "pptp" [ 524.085809][T25439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.199174][T25446] Bluetooth: MGMT ver 1.23 [ 524.383616][T25416] wg1 speed is unknown, defaulting to 1000 [ 524.444490][T25417] wg1 speed is unknown, defaulting to 1000 [ 524.653389][T25453] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 524.685114][T25453] bond6: (slave lo): Enslaving as a backup interface with an up link [ 524.722317][T25453] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 524.990951][T25459] syzkaller0: entered promiscuous mode [ 525.003868][T25459] syzkaller0: entered allmulticast mode [ 525.537483][T25459] wg1 speed is unknown, defaulting to 1000 [ 525.764075][T25488] x_tables: duplicate underflow at hook 1 [ 525.927567][T25496] __nla_validate_parse: 11 callbacks suppressed [ 525.927585][T25496] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5290'. [ 525.993976][T25496] validate_nla: 4 callbacks suppressed [ 525.993995][T25496] netlink: 'syz.0.5290': attribute type 13 has an invalid length. [ 526.225720][ T5841] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 526.232208][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 526.318963][T25502] netlink: 'syz.3.5291': attribute type 3 has an invalid length. [ 526.329822][T25502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5291'. [ 526.340118][T25496] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.419027][T25496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.431949][T25496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.525016][T25496] batman_adv: batadv0: Interface deactivated: macsec1 [ 526.610236][T12791] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 526.618798][ T937] wg1 speed is unknown, defaulting to 1000 [ 526.624616][ T937] syz: Port: 1 Link DOWN [ 526.630793][ T6955] syz0: Port: 1 Link DOWN [ 526.647660][T12791] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 526.704986][T12791] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 526.746625][T12791] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 526.781978][T12791] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 526.805978][T12791] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 526.824789][T12791] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 526.849533][ T30] audit: type=1800 audit(1769143431.537:10): pid=25524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5298" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2014 res=0 errno=0 [ 526.857782][T12791] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 526.945972][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.955278][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.390248][T25524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5298'. [ 527.406109][ T30] audit: type=1800 audit(1769143432.097:11): pid=25524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5298" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2014 res=0 errno=0 [ 527.427685][T25512] wg1 speed is unknown, defaulting to 1000 [ 527.642057][T25555] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5305'. [ 527.652221][T25555] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5305'. [ 528.391279][T25600] netlink: zone id is out of range [ 528.399083][T25600] netlink: zone id is out of range [ 528.404285][T25600] netlink: zone id is out of range [ 528.411299][T25600] netlink: zone id is out of range [ 528.430204][T25600] netlink: zone id is out of range [ 528.441498][T25600] netlink: zone id is out of range [ 528.460575][T25600] netlink: zone id is out of range [ 528.484129][T25600] netlink: zone id is out of range [ 528.511253][T25600] netlink: zone id is out of range [ 528.516515][T25600] netlink: zone id is out of range [ 528.713106][T25604] bond6: (slave bond_slave_1): Device is not bonding slave [ 528.745776][T25604] bond6: option active_slave: invalid value (bond_slave_1) [ 528.756799][T25604] bond6 (unregistering): Released all slaves [ 528.797961][T25615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5316'. [ 528.821111][T25608] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5318'. [ 528.856516][T25609] veth0: entered promiscuous mode [ 528.927519][T25603] veth0: left promiscuous mode [ 529.205987][T25627] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5322'. [ 529.257705][T25627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5322'. [ 529.352285][T25592] lec:lec_atm_close: lec0: Shut down! [ 529.486073][T25644] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5325'. [ 529.580266][T25650] bond0: entered promiscuous mode [ 529.585345][T25650] bond_slave_0: entered promiscuous mode [ 529.624167][T25650] @0Ù: entered promiscuous mode [ 529.640237][T25650] mac80211_hwsim hwsim49 wlan1: entered promiscuous mode [ 529.680968][T25650] dummy0: entered promiscuous mode [ 529.711973][T25650] bond0: left promiscuous mode [ 529.726486][T25650] bond_slave_0: left promiscuous mode [ 529.748831][T25650] @0Ù: left promiscuous mode [ 529.753769][T25650] mac80211_hwsim hwsim49 wlan1: left promiscuous mode [ 529.795866][T25650] dummy0: left promiscuous mode [ 530.145711][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 530.426282][ T5952] lec:lec_start_xmit: lec0:No lecd attached [ 530.459803][T25668] wg1 speed is unknown, defaulting to 1000 [ 530.576548][T25690] netlink: 'syz.1.5336': attribute type 1 has an invalid length. [ 530.985386][T25703] netlink: 'syz.3.5339': attribute type 1 has an invalid length. [ 531.114300][T25703] 8021q: adding VLAN 0 to HW filter on device bond8 [ 531.210434][T25706] netlink: 'syz.1.5338': attribute type 9 has an invalid length. [ 531.255180][T25707] bond8: (slave geneve3): making interface the new active one [ 531.292303][T25707] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 531.423251][T25713] pim6reg: entered allmulticast mode [ 531.445241][T25676] wg1 speed is unknown, defaulting to 1000 [ 531.445257][T17662] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 531.471886][T17662] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 531.586834][T17662] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 531.599230][T17662] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 531.609852][T25711] pim6reg: left allmulticast mode [ 531.712244][T25730] bridge11: entered promiscuous mode [ 531.725724][T25730] bridge11: entered allmulticast mode [ 532.036569][T25751] FAULT_INJECTION: forcing a failure. [ 532.036569][T25751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.050521][T25751] CPU: 1 UID: 0 PID: 25751 Comm: syz.2.5348 Not tainted syzkaller #0 PREEMPT(full) [ 532.050547][T25751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 532.050562][T25751] Call Trace: [ 532.050569][T25751] [ 532.050577][T25751] dump_stack_lvl+0xe8/0x150 [ 532.050604][T25751] should_fail_ex+0x412/0x560 [ 532.050632][T25751] _copy_from_iter+0x1d3/0x1670 [ 532.050664][T25751] ? rcu_is_watching+0x15/0xb0 [ 532.050686][T25751] ? __pfx__copy_from_iter+0x10/0x10 [ 532.050708][T25751] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 532.050741][T25751] ? netlink_sendmsg+0x650/0xb40 [ 532.050759][T25751] ? skb_put+0x11b/0x210 [ 532.050787][T25751] netlink_sendmsg+0x6c0/0xb40 [ 532.050815][T25751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.050836][T25751] ? aa_file_perm+0x12d/0x1630 [ 532.050857][T25751] ? aa_sock_msg_perm+0xf1/0x1b0 [ 532.050880][T25751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 532.050896][T25751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.050916][T25751] __sock_sendmsg+0x21c/0x270 [ 532.050940][T25751] ____sys_sendmsg+0x4d7/0x810 [ 532.050957][T25751] ? __might_fault+0xaf/0x130 [ 532.050986][T25751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.051012][T25751] ? import_iovec+0x73/0xa0 [ 532.051033][T25751] ___sys_sendmsg+0x2a5/0x360 [ 532.051049][T25751] ? __lock_acquire+0x6b5/0x2cf0 [ 532.051071][T25751] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.051121][T25751] ? __fget_files+0x2a/0x420 [ 532.051141][T25751] ? __fget_files+0x3a0/0x420 [ 532.051169][T25751] __x64_sys_sendmsg+0x1bd/0x2a0 [ 532.051190][T25751] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 532.051216][T25751] ? __pfx_ksys_write+0x10/0x10 [ 532.051244][T25751] do_syscall_64+0xe2/0xf80 [ 532.051267][T25751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.051284][T25751] ? trace_irq_disable+0x37/0x100 [ 532.051304][T25751] ? clear_bhb_loop+0x60/0xb0 [ 532.051325][T25751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.051345][T25751] RIP: 0033:0x7ff157f9acb9 [ 532.051361][T25751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.051376][T25751] RSP: 002b:00007ff158de6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.051395][T25751] RAX: ffffffffffffffda RBX: 00007ff158216090 RCX: 00007ff157f9acb9 [ 532.051408][T25751] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000007 [ 532.051424][T25751] RBP: 00007ff158de6090 R08: 0000000000000000 R09: 0000000000000000 [ 532.051435][T25751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.051445][T25751] R13: 00007ff158216128 R14: 00007ff158216090 R15: 00007ffdd1f30d98 [ 532.051475][T25751] [ 532.386914][T25759] netlink: 'syz.1.5350': attribute type 3 has an invalid length. [ 532.396096][T25759] __nla_validate_parse: 2 callbacks suppressed [ 532.396113][T25759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5350'. [ 532.681079][T25772] veth9: entered promiscuous mode [ 532.689652][T25772] veth9: entered allmulticast mode [ 532.701684][T25772] bridge0: port 1(veth9) entered blocking state [ 532.724777][T25772] bridge0: port 1(veth9) entered disabled state [ 532.752043][T25772] bridge0: port 1(veth9) entered blocking state [ 532.758745][T25772] bridge0: port 1(veth9) entered forwarding state [ 532.778833][ T12] bridge0: port 1(veth9) entered disabled state [ 532.888143][T25750] wg1 speed is unknown, defaulting to 1000 [ 533.147570][T25793] netlink: 'syz.2.5359': attribute type 5 has an invalid length. [ 533.153296][T25779] wg1 speed is unknown, defaulting to 1000 [ 533.180995][T25793] ip6erspan0: entered promiscuous mode [ 533.249970][T25798] netlink: 'syz.0.5361': attribute type 10 has an invalid length. [ 533.507665][T25805] bond6: (slave lo): Releasing backup interface [ 533.531486][T25805] bond6: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 533.562661][T25805] bond0: (slave dummy0): Releasing backup interface [ 533.574541][T25805] bridge_slave_0: left allmulticast mode [ 533.581046][T25805] bridge_slave_0: left promiscuous mode [ 533.589183][T25805] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.603650][T25805] bond0: (slave bond_slave_0): Releasing backup interface [ 533.620524][T25805] bond0: (slave c@0Ù): Releasing backup interface [ 533.629014][T25805] `: Port device team_slave_0 removed [ 533.635891][T25805] `: Port device team_slave_1 removed [ 533.641798][T25805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.650290][T25805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.659033][T25805] net_ratelimit: 17 callbacks suppressed [ 533.659048][T25805] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 533.709258][T25809] 8021q: VLANs not supported on caif0 [ 533.742806][T25820] tc_dump_action: action bad kind [ 533.972103][T25822] batman_adv: batadv0: Adding interface: ip6gretap2 [ 534.005848][T25822] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.040745][T25822] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active [ 534.091211][T25838] netlink: 'syz.2.5368': attribute type 3 has an invalid length. [ 534.105146][T25838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5368'. [ 534.300674][T25856] netlink: 'syz.1.5373': attribute type 10 has an invalid length. [ 534.308969][T25856] FAULT_INJECTION: forcing a failure. [ 534.308969][T25856] name failslab, interval 1, probability 0, space 0, times 0 [ 534.324162][T25856] CPU: 1 UID: 0 PID: 25856 Comm: syz.1.5373 Not tainted syzkaller #0 PREEMPT(full) [ 534.324186][T25856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 534.324198][T25856] Call Trace: [ 534.324205][T25856] [ 534.324213][T25856] dump_stack_lvl+0xe8/0x150 [ 534.324241][T25856] should_fail_ex+0x412/0x560 [ 534.324269][T25856] should_failslab+0xa8/0x100 [ 534.324293][T25856] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 534.324319][T25856] ? __alloc_skb+0x1d0/0x7d0 [ 534.324346][T25856] ? __local_bh_enable_ip+0xd0/0x130 [ 534.324371][T25856] __alloc_skb+0x1d0/0x7d0 [ 534.324400][T25856] rtmsg_ifinfo_build_skb+0x84/0x260 [ 534.324432][T25856] rtnetlink_event+0x1b7/0x270 [ 534.324461][T25856] notifier_call_chain+0x19d/0x3a0 [ 534.324492][T25856] call_netdevice_notifiers+0x90/0xd0 [ 534.324516][T25856] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 534.324539][T25856] ? dev_addr_mod+0x354/0x520 [ 534.324566][T25856] bond_set_dev_addr+0xd6/0x1b0 [ 534.324593][T25856] bond_enslave+0x8d0/0x3a90 [ 534.324634][T25856] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 534.324665][T25856] ? __pfx_bond_enslave+0x10/0x10 [ 534.324704][T25856] ? __pfx___dev_change_flags+0x10/0x10 [ 534.324720][T25856] ? __irq_work_queue_local+0x1f2/0x540 [ 534.324747][T25856] ? mutex_is_locked+0x17/0x50 [ 534.324772][T25856] do_set_master+0x533/0x6d0 [ 534.324799][T25856] do_setlink+0x1018/0x4590 [ 534.324815][T25856] ? __wake_up_klogd+0xe6/0x120 [ 534.324845][T25856] ? __pfx_vprintk_emit+0x10/0x10 [ 534.324874][T25856] ? __pfx_do_setlink+0x10/0x10 [ 534.324906][T25856] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 534.324930][T25856] ? ___ratelimit+0x58c/0x8d0 [ 534.324960][T25856] ? __mutex_trylock_common+0x158/0x260 [ 534.324986][T25856] ? __pfx___mutex_trylock_common+0x10/0x10 [ 534.325013][T25856] ? rcu_is_watching+0x15/0xb0 [ 534.325035][T25856] ? trace_contention_end+0x39/0x100 [ 534.325057][T25856] ? __mutex_lock+0x319/0x1300 [ 534.325080][T25856] ? __pfx___nla_validate_parse+0x10/0x10 [ 534.325108][T25856] ? rtnl_newlink+0x8a1/0x1be0 [ 534.325137][T25856] ? __pfx___mutex_lock+0x10/0x10 [ 534.325165][T25856] ? ns_capable+0x89/0xe0 [ 534.325191][T25856] rtnl_newlink+0x15a9/0x1be0 [ 534.325229][T25856] ? __pfx_rtnl_newlink+0x10/0x10 [ 534.325255][T25856] ? unwind_next_frame+0xa5/0x23c0 [ 534.325282][T25856] ? __lock_acquire+0x6b5/0x2cf0 [ 534.325308][T25856] ? __lock_acquire+0x6b5/0x2cf0 [ 534.325329][T25856] ? __lock_acquire+0x6b5/0x2cf0 [ 534.325358][T25856] ? unwind_next_frame+0xa5/0x23c0 [ 534.325386][T25856] ? unwind_next_frame+0xa5/0x23c0 [ 534.325411][T25856] ? is_bpf_text_address+0x26/0x2b0 [ 534.325443][T25856] ? __lock_acquire+0x6b5/0x2cf0 [ 534.325471][T25856] ? is_bpf_text_address+0x292/0x2b0 [ 534.325494][T25856] ? is_bpf_text_address+0x26/0x2b0 [ 534.325527][T25856] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 534.325564][T25856] ? __pfx_rtnl_newlink+0x10/0x10 [ 534.325586][T25856] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 534.325613][T25856] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 534.325635][T25856] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 534.325659][T25856] ? __lock_acquire+0x6b5/0x2cf0 [ 534.325693][T25856] netlink_rcv_skb+0x232/0x4b0 [ 534.325714][T25856] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 534.325741][T25856] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 534.325773][T25856] ? netlink_deliver_tap+0x2e/0x1b0 [ 534.325802][T25856] netlink_unicast+0x80f/0x9b0 [ 534.325829][T25856] ? __pfx_netlink_unicast+0x10/0x10 [ 534.325850][T25856] ? netlink_sendmsg+0x650/0xb40 [ 534.325868][T25856] ? skb_put+0x11b/0x210 [ 534.325897][T25856] netlink_sendmsg+0x813/0xb40 [ 534.325927][T25856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.325950][T25856] ? aa_file_perm+0x12d/0x1630 [ 534.325973][T25856] ? aa_sock_msg_perm+0xf1/0x1b0 [ 534.325997][T25856] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 534.326014][T25856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.326036][T25856] __sock_sendmsg+0x21c/0x270 [ 534.326062][T25856] ____sys_sendmsg+0x4d7/0x810 [ 534.326087][T25856] ? __might_fault+0xaf/0x130 [ 534.326119][T25856] ? __pfx_____sys_sendmsg+0x10/0x10 [ 534.326147][T25856] ? import_iovec+0x73/0xa0 [ 534.326170][T25856] ___sys_sendmsg+0x2a5/0x360 [ 534.326188][T25856] ? __lock_acquire+0x6b5/0x2cf0 [ 534.326211][T25856] ? __pfx____sys_sendmsg+0x10/0x10 [ 534.326266][T25856] ? __fget_files+0x2a/0x420 [ 534.326286][T25856] ? __fget_files+0x3a0/0x420 [ 534.326317][T25856] __x64_sys_sendmsg+0x1bd/0x2a0 [ 534.326339][T25856] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 534.326367][T25856] ? __pfx_ksys_write+0x10/0x10 [ 534.326397][T25856] do_syscall_64+0xe2/0xf80 [ 534.326421][T25856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.326438][T25856] ? trace_irq_disable+0x37/0x100 [ 534.326459][T25856] ? clear_bhb_loop+0x60/0xb0 [ 534.326482][T25856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.326499][T25856] RIP: 0033:0x7f5fa199acb9 [ 534.326517][T25856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.326533][T25856] RSP: 002b:00007f5fa27a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.326553][T25856] RAX: ffffffffffffffda RBX: 00007f5fa1c16180 RCX: 00007f5fa199acb9 [ 534.326567][T25856] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000009 [ 534.326578][T25856] RBP: 00007f5fa27a9090 R08: 0000000000000000 R09: 0000000000000000 [ 534.326590][T25856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.326602][T25856] R13: 00007f5fa1c16218 R14: 00007f5fa1c16180 R15: 00007ffc4c124258 [ 534.326635][T25856] [ 534.870726][T25856] bond0: (slave wlan1): Opening slave failed [ 534.872447][T25861] netlink: 'syz.3.5374': attribute type 10 has an invalid length. [ 534.894280][T25860] sctp: [Deprecated]: syz.0.5376 (pid 25860) Use of int in max_burst socket option. [ 534.894280][T25860] Use struct sctp_assoc_value instead [ 535.007591][T25865] netlink: 'syz.1.5378': attribute type 4 has an invalid length. [ 535.044007][T25865] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5378'. [ 535.057073][T25865] nbd: couldn't find a device at index 0 [ 535.218576][T25879] tipc: Enabled bearer , priority 0 [ 535.230428][T25877] tipc: Disabling bearer [ 535.276818][T25880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5381'. [ 535.315333][T25880] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5381'. [ 535.361783][T25887] syz.1.5386: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 535.376027][T25880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5381'. [ 535.394393][T25880] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5381'. [ 535.397546][T25887] CPU: 1 UID: 0 PID: 25887 Comm: syz.1.5386 Not tainted syzkaller #0 PREEMPT(full) [ 535.397572][T25887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 535.397582][T25887] Call Trace: [ 535.397589][T25887] [ 535.397598][T25887] dump_stack_lvl+0xe8/0x150 [ 535.397627][T25887] warn_alloc+0x249/0x340 [ 535.397648][T25887] ? stack_trace_save+0xa9/0x100 [ 535.397678][T25887] ? __pfx_warn_alloc+0x10/0x10 [ 535.397704][T25887] ? kasan_save_track+0x4f/0x80 [ 535.397721][T25887] ? kasan_save_track+0x3e/0x80 [ 535.397737][T25887] ? __kasan_kmalloc+0x93/0xb0 [ 535.397755][T25887] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 535.397771][T25887] ? xskq_create+0x56/0x170 [ 535.397793][T25887] ? xsk_setsockopt+0x54c/0x990 [ 535.397812][T25887] ? do_sock_setsockopt+0x17c/0x1b0 [ 535.397837][T25887] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 535.397861][T25887] ? do_syscall_64+0xe2/0xf80 [ 535.397889][T25887] __vmalloc_node_range_noprof+0x132/0x1730 [ 535.397939][T25887] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 535.397964][T25887] ? __kasan_kmalloc+0x93/0xb0 [ 535.397988][T25887] vmalloc_user_noprof+0xad/0xe0 [ 535.398006][T25887] ? xskq_create+0xbf/0x170 [ 535.398029][T25887] xskq_create+0xbf/0x170 [ 535.398054][T25887] xsk_init_queue+0xad/0x110 [ 535.398079][T25887] xsk_setsockopt+0x54c/0x990 [ 535.398103][T25887] ? __pfx_xsk_setsockopt+0x10/0x10 [ 535.398125][T25887] ? __pfx_aa_sk_perm+0x10/0x10 [ 535.398151][T25887] ? aa_sock_opt_perm+0xff/0x1a0 [ 535.398178][T25887] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 535.398201][T25887] ? __pfx_xsk_setsockopt+0x10/0x10 [ 535.398225][T25887] do_sock_setsockopt+0x17c/0x1b0 [ 535.398256][T25887] __x64_sys_setsockopt+0x13d/0x1b0 [ 535.398288][T25887] do_syscall_64+0xe2/0xf80 [ 535.398313][T25887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.398331][T25887] ? trace_irq_disable+0x37/0x100 [ 535.398353][T25887] ? clear_bhb_loop+0x60/0xb0 [ 535.398375][T25887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.398393][T25887] RIP: 0033:0x7f5fa199acb9 [ 535.398409][T25887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.398425][T25887] RSP: 002b:00007f5fa27eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 535.398445][T25887] RAX: ffffffffffffffda RBX: 00007f5fa1c15fa0 RCX: 00007f5fa199acb9 [ 535.398459][T25887] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 535.398470][T25887] RBP: 00007f5fa1a08bf7 R08: 0000000000000004 R09: 0000000000000000 [ 535.398482][T25887] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.398493][T25887] R13: 00007f5fa1c16038 R14: 00007f5fa1c15fa0 R15: 00007ffc4c124258 [ 535.398524][T25887] [ 535.398547][T25887] Mem-Info: [ 535.510270][T25891] netlink: 'syz.0.5387': attribute type 10 has an invalid length. [ 535.514651][T25887] active_anon:6063 inactive_anon:7 isolated_anon:0 [ 535.514651][T25887] active_file:3343 inactive_file:40308 isolated_file:0 [ 535.514651][T25887] unevictable:768 dirty:222 writeback:0 [ 535.514651][T25887] slab_reclaimable:13332 slab_unreclaimable:156151 [ 535.514651][T25887] mapped:30401 shmem:1367 pagetables:1315 [ 535.514651][T25887] sec_pagetables:0 bounce:0 [ 535.514651][T25887] kernel_misc_reclaimable:0 [ 535.514651][T25887] free:1249957 free_pcp:19508 free_cma:0 [ 535.539683][T25891] FAULT_INJECTION: forcing a failure. [ 535.539683][T25891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.544475][T25887] Node 0 active_anon:24252kB inactive_anon:28kB active_file:13372kB inactive_file:161028kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122404kB dirty:888kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14752kB pagetables:5144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 535.561070][T25891] CPU: 0 UID: 0 PID: 25891 Comm: syz.0.5387 Not tainted syzkaller #0 PREEMPT(full) [ 535.561095][T25891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 535.561106][T25891] Call Trace: [ 535.561114][T25891] [ 535.561121][T25891] dump_stack_lvl+0xe8/0x150 [ 535.561149][T25891] should_fail_ex+0x412/0x560 [ 535.561177][T25891] _copy_from_user+0x2d/0xb0 [ 535.561197][T25891] kstrtouint_from_user+0xd6/0x180 [ 535.561230][T25891] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 535.561271][T25891] proc_fail_nth_write+0x8e/0x210 [ 535.561291][T25891] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 535.561319][T25891] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 535.561340][T25891] vfs_write+0x29a/0xb90 [ 535.561366][T25891] ? __pfx_vfs_write+0x10/0x10 [ 535.561385][T25891] ? __fget_files+0x2a/0x420 [ 535.561410][T25891] ? __fget_files+0x3a0/0x420 [ 535.561429][T25891] ? __fget_files+0x2a/0x420 [ 535.561459][T25891] ksys_write+0x150/0x270 [ 535.561479][T25891] ? __pfx_ksys_write+0x10/0x10 [ 535.561508][T25891] do_syscall_64+0xe2/0xf80 [ 535.561532][T25891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.561548][T25891] ? trace_irq_disable+0x37/0x100 [ 535.561569][T25891] ? clear_bhb_loop+0x60/0xb0 [ 535.561590][T25891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.561608][T25891] RIP: 0033:0x7f88c315b58e [ 535.561624][T25891] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 535.561638][T25891] RSP: 002b:00007f88c3f9afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 535.561657][T25891] RAX: ffffffffffffffda RBX: 00007f88c3f9b6c0 RCX: 00007f88c315b58e [ 535.561671][T25891] RDX: 0000000000000001 RSI: 00007f88c3f9b0a0 RDI: 0000000000000008 [ 535.561682][T25891] RBP: 00007f88c3f9b090 R08: 0000000000000000 R09: 0000000000000000 [ 535.561693][T25891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.561703][T25891] R13: 00007f88c3416038 R14: 00007f88c3415fa0 R15: 00007ffc26e060c8 [ 535.561733][T25891] [ 535.915540][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5480 ms [ 535.933897][T25887] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 535.942682][ C0] lec:lec_tx_timeout: lec0 [ 535.950721][T25887] Node 0 [ 535.959578][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 535.966738][T25887] DMA free:15344kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 536.067049][T25887] lowmem_reserve[]: 0 2495 2497 2497 2497 [ 536.072955][T25887] Node 0 DMA32 free:1104084kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24312kB inactive_anon:28kB active_file:13372kB inactive_file:161028kB unevictable:1536kB writepending:968kB zspages:0kB present:3129332kB managed:2555772kB mlocked:0kB bounce:0kB free_pcp:38976kB local_pcp:21112kB free_cma:0kB [ 536.106647][T25887] lowmem_reserve[]: 0 0 1 1 1 [ 536.111510][T25887] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 536.111541][T25895] syzkaller1: entered promiscuous mode [ 536.164608][T25895] syzkaller1: entered allmulticast mode [ 536.165634][T25887] lowmem_reserve[]: 0 0 0 0 0 [ 536.186084][T25887] Node 1 Normal free:3880264kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:39240kB local_pcp:11672kB free_cma:0kB [ 536.228021][T25887] lowmem_reserve[]: 0 0 0 0 0 [ 536.237740][T25887] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15344kB [ 536.272530][T25907] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5392'. [ 536.273472][T25887] Node 0 [ 536.284019][T25907] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 536.298700][T25887] DMA32: 4889*4kB (UM) 5972*8kB (UME) 3139*16kB (UME) 979*32kB (UM) 866*64kB (UME) 210*128kB (UME) 485*256kB (UM) 366*512kB (UME) 262*1024kB (UM) 115*2048kB (UME) 17*4096kB (UM) = 1116180kB [ 536.317958][T25907] openvswitch: netlink: Message has 75 unknown bytes. [ 536.326833][T25907] netlink: 'syz.3.5392': attribute type 10 has an invalid length. [ 536.335035][T25887] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 536.363268][T25887] Node 1 Normal: 202*4kB (UE) 56*8kB (UME) 56*16kB (UME) 115*32kB (UME) 30*64kB (UME) 8*128kB (UME) 3*256kB (ME) 4*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 943*4096kB (UM) = 3880264kB [ 536.407852][T25887] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 536.457622][T25887] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 536.477270][T25887] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 536.535373][T25887] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 536.565601][T25887] 45014 total pagecache pages [ 536.570419][T25887] 0 pages in swap cache [ 536.574578][T25887] Free swap = 124996kB [ 536.591819][T25887] Total swap = 124996kB [ 536.607546][T25887] 2097051 pages RAM [ 536.631676][T25887] 0 pages HighMem/MovableOnly [ 536.645572][T25887] 426146 pages reserved [ 536.649763][T25887] 0 pages cma reserved [ 536.738578][T25937] netlink: 'syz.3.5400': attribute type 2 has an invalid length. [ 536.762719][T25937] netlink: 'syz.3.5400': attribute type 1 has an invalid length. [ 536.787262][T25937] netlink: 'syz.3.5400': attribute type 1 has an invalid length. [ 536.827993][T25949] digital: digital_start_poll: Unknown protocol [ 536.859631][T25951] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5402'. [ 536.924496][T25959] lo speed is unknown, defaulting to 1000 [ 536.931978][T25959] lo speed is unknown, defaulting to 1000 [ 536.949940][T25959] lo speed is unknown, defaulting to 1000 [ 536.998587][T25959] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 537.026765][T25970] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5407'. [ 537.042177][T25969] netlink: 'syz.4.5408': attribute type 21 has an invalid length. [ 537.078954][T25969] sit0: entered promiscuous mode [ 537.109554][T25959] lo speed is unknown, defaulting to 1000 [ 537.162408][T25959] lo speed is unknown, defaulting to 1000 [ 537.178913][T25959] lo speed is unknown, defaulting to 1000 [ 537.214495][T25959] lo speed is unknown, defaulting to 1000 [ 537.246818][T25959] lo speed is unknown, defaulting to 1000 [ 537.258783][T25959] lo speed is unknown, defaulting to 1000 [ 537.828485][T26018] __nla_validate_parse: 4 callbacks suppressed [ 537.828504][T26018] netlink: 332 bytes leftover after parsing attributes in process `syz.0.5423'. [ 537.844821][T26018] netlink: 'syz.0.5423': attribute type 9 has an invalid length. [ 537.853197][T26018] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5423'. [ 537.882676][T26018] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5423'. [ 537.895231][T25999] wg1 speed is unknown, defaulting to 1000 [ 537.904284][T25999] lo speed is unknown, defaulting to 1000 [ 538.016127][T26024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.104920][T26029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5427'. [ 538.171186][T26016] wg1 speed is unknown, defaulting to 1000 [ 538.178911][T26016] lo speed is unknown, defaulting to 1000 [ 538.963179][T26048] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5433'. [ 538.991571][T26053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 539.656226][T26057] wg1 speed is unknown, defaulting to 1000 [ 539.689933][T26100] netlink: 'syz.0.5444': attribute type 2 has an invalid length. [ 539.699168][T26100] netlink: 'syz.0.5444': attribute type 1 has an invalid length. [ 539.709551][T26100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5444'. [ 539.716413][T26057] lo speed is unknown, defaulting to 1000 [ 540.570801][T26128] netlink: 'syz.3.5451': attribute type 10 has an invalid length. [ 540.576701][T26105] wg1 speed is unknown, defaulting to 1000 [ 540.588670][T26105] lo speed is unknown, defaulting to 1000 [ 540.660321][T26132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5453'. [ 540.676050][T26095] wg1 speed is unknown, defaulting to 1000 [ 540.722760][T26132] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 540.759488][T26132] bond9 (unregistering): Released all slaves [ 540.828554][T26095] lo speed is unknown, defaulting to 1000 [ 540.872564][T26136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5454'. [ 541.058582][T26141] tipc: Enabled bearer , priority 0 [ 541.071632][T26140] syzkaller0: entered promiscuous mode [ 541.082817][T26140] syzkaller0: entered allmulticast mode [ 541.152988][T26140] tipc: Resetting bearer [ 541.176051][T26139] tipc: Resetting bearer [ 541.206580][T26139] tipc: Disabling bearer [ 541.667479][T26165] netlink: 'syz.0.5464': attribute type 1 has an invalid length. [ 541.755534][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 541.763632][ C0] lec:lec_tx_timeout: lec0 [ 541.769198][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 541.952213][T26179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 541.971747][T26187] syzkaller1: left promiscuous mode [ 541.978141][T26187] syzkaller1: left allmulticast mode [ 542.130809][T26194] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ï€ã,ÄûÔxµ…üb©)%ë ]ô‚3DûLÌ¥ [ 542.195906][T26198] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5473'. [ 542.205774][T26201] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5475'. [ 542.774221][T26248] netlink: 'syz.1.5484': attribute type 3 has an invalid length. [ 543.715391][T26300] syzkaller0: entered promiscuous mode [ 543.721178][T26300] syzkaller0: entered allmulticast mode [ 543.758413][T26298] __nla_validate_parse: 5 callbacks suppressed [ 543.758430][T26298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5493'. [ 543.969590][T26308] bond7: option lacp_active: invalid value (8) [ 543.993322][T26308] bond7 (unregistering): Released all slaves [ 544.216445][T26332] netlink: 'syz.3.5499': attribute type 12 has an invalid length. [ 544.225274][T26332] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5499'. [ 544.266323][T26332] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5499'. [ 544.316512][T26340] netlink: 'syz.2.5500': attribute type 3 has an invalid length. [ 544.345764][T26340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5500'. [ 544.529192][T26332] wg1 speed is unknown, defaulting to 1000 [ 544.537269][T26332] lo speed is unknown, defaulting to 1000 [ 545.168160][T26362] wg1 speed is unknown, defaulting to 1000 [ 545.174954][T26362] lo speed is unknown, defaulting to 1000 [ 545.604379][T26382] netlink: 'syz.4.5512': attribute type 10 has an invalid length. [ 545.621377][T26393] veth0: entered promiscuous mode [ 545.629552][T26393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5516'. [ 545.706916][T26393] veth0: left promiscuous mode [ 545.729109][T26396] netlink: 'syz.4.5517': attribute type 1 has an invalid length. [ 545.796873][T26396] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 545.812184][T26400] can: request_module (can-proto-5) failed. [ 545.945198][T26416] netlink: 'syz.1.5520': attribute type 3 has an invalid length. [ 545.964906][T26416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5520'. [ 546.309510][T26427] .70·: left allmulticast mode [ 546.314389][T26427] hsr_slave_0: left allmulticast mode [ 546.324474][T26427] hsr_slave_1: left allmulticast mode [ 546.347212][T26427] mac80211_hwsim hwsim44 syzkaller0: left promiscuous mode [ 546.361963][T26427] mac80211_hwsim hwsim44 syzkaller0: left allmulticast mode [ 546.371779][T26427] nr0: left promiscuous mode [ 546.386062][T26427] bond1: left promiscuous mode [ 546.395775][T26427] wireguard0: left promiscuous mode [ 546.407784][T26427] vlan2: left promiscuous mode [ 546.416976][T26427] bond0: left promiscuous mode [ 546.451277][T26427] bond_slave_0: left promiscuous mode [ 546.457146][T26427] bond_slave_1: left promiscuous mode [ 546.462741][T26427] mac80211_hwsim hwsim45 wlan1: left promiscuous mode [ 546.492565][T26427] bond5: left promiscuous mode [ 546.503571][T26427] ip6gre2: left promiscuous mode [ 546.513244][T26427] xfrm1: left allmulticast mode [ 546.533945][T26427] bridge6: left allmulticast mode [ 546.539654][T26427] veth9: left allmulticast mode [ 546.614984][T26427] geneve2: left promiscuous mode [ 546.622823][T26427] geneve2: left allmulticast mode [ 546.722590][T26427] bridge11: left promiscuous mode [ 546.733423][T26427] bridge11: left allmulticast mode [ 546.753808][T17660] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.780609][T17660] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 546.795760][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 546.803817][ C0] lec:lec_tx_timeout: lec0 [ 546.809095][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 546.815392][T17662] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.845820][T17662] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 546.873137][T17662] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.905960][T17662] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 546.914473][T17662] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.955845][T17662] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 547.010510][T26450] mac80211_hwsim hwsim44 syzkaller0: entered promiscuous mode [ 547.065638][T26450] mac80211_hwsim hwsim44 syzkaller0: entered allmulticast mode [ 547.084499][T26449] tipc: Enabling of bearer rejected, already enabled [ 547.123020][T26448] wg1: entered promiscuous mode [ 547.128140][T26448] wg1: entered allmulticast mode [ 547.182939][T26454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5532'. [ 547.208061][T26454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5532'. [ 547.239836][T26454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5532'. [ 547.262341][T26454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5532'. [ 547.900217][T26477] wg1 speed is unknown, defaulting to 1000 [ 547.914243][T26477] lo speed is unknown, defaulting to 1000 [ 548.101843][T26498] netlink: 'syz.1.5544': attribute type 10 has an invalid length. [ 548.118748][T26498] bond0: (slave wlan1): Opening slave failed [ 548.272489][T26492] wg1 speed is unknown, defaulting to 1000 [ 548.292712][T26509] netlink: 'syz.1.5548': attribute type 1 has an invalid length. [ 548.316636][T26492] lo speed is unknown, defaulting to 1000 [ 548.700978][T26521] netlink: 'syz.2.5552': attribute type 4 has an invalid length. [ 548.727078][T26521] netlink: 'syz.2.5552': attribute type 1 has an invalid length. [ 549.019606][T26537] netlink: 'syz.2.5554': attribute type 3 has an invalid length. [ 549.055915][T26537] __nla_validate_parse: 2 callbacks suppressed [ 549.055934][T26537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5554'. [ 549.250576][T26549] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5559'. [ 549.263265][T26550] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 549.271719][T26550] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 549.298928][T26524] netlink: 'syz.4.5553': attribute type 2 has an invalid length. [ 549.313298][T26524] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5553'. [ 549.315283][T26523] wg1 speed is unknown, defaulting to 1000 [ 549.340880][T26523] lo speed is unknown, defaulting to 1000 [ 549.366748][T26524] netlink: 'syz.4.5553': attribute type 2 has an invalid length. [ 549.374504][T26524] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5553'. [ 549.594868][T26540] wg1 speed is unknown, defaulting to 1000 [ 549.603081][T26540] lo speed is unknown, defaulting to 1000 [ 549.610987][T26549] siw: device registration error -23 [ 550.278820][ T30] audit: type=1800 audit(1769143454.957:12): pid=26583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5569" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=2493 res=0 errno=0 [ 550.449037][T26598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.502796][T26611] netlink: 'syz.3.5572': attribute type 3 has an invalid length. [ 550.510956][T26611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5572'. [ 550.713617][T26619] netlink: 'syz.1.5577': attribute type 11 has an invalid length. [ 550.713648][ T5909] IPVS: starting estimator thread 0... [ 550.769052][T26624] netlink: 'syz.2.5580': attribute type 1 has an invalid length. [ 550.786589][T26624] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5580'. [ 550.848077][T26620] IPVS: using max 30 ests per chain, 72000 per kthread [ 551.155547][T26655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5586'. [ 551.196518][T26650] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5586'. [ 551.242609][T26654] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5587'. [ 551.815857][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 551.823946][ C0] lec:lec_tx_timeout: lec0 [ 551.828827][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 552.086825][T26686] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5595'. [ 552.485170][T24646] udevd[24646]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 553.718825][T26714] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 553.725011][T26714] syzkaller1: linktype set to 825 [ 553.736652][T26714] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 553.745878][T26717] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 553.762124][T26717] syzkaller1: linktype set to 825 [ 553.766145][T26718] validate_nla: 2 callbacks suppressed [ 553.766162][T26718] netlink: 'syz.1.5602': attribute type 10 has an invalid length. [ 553.778923][T26684] wg1 speed is unknown, defaulting to 1000 [ 553.799082][T26684] lo speed is unknown, defaulting to 1000 [ 554.072414][T26707] wg1 speed is unknown, defaulting to 1000 [ 554.093666][T26707] lo speed is unknown, defaulting to 1000 [ 554.689741][T26743] __nla_validate_parse: 2 callbacks suppressed [ 554.689758][T26743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5609'. [ 554.781510][T26745] netlink: 'syz.0.5608': attribute type 1 has an invalid length. [ 554.799231][T26745] netlink: 'syz.0.5608': attribute type 2 has an invalid length. [ 554.870964][T26760] xt_hashlimit: size too large, truncated to 1048576 [ 554.943881][T26763] ªªªªªª: renamed from bridge_slave_0 (while UP) [ 555.064660][T26770] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5615'. [ 555.264579][T26782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5619'. [ 555.287982][T26782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5619'. [ 555.682481][T26813] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5627'. [ 555.759541][T26815] syzkaller1: entered promiscuous mode [ 555.771172][T26815] syzkaller1: entered allmulticast mode [ 555.829271][T26822] xt_CT: You must specify a L4 protocol and not use inversions on it [ 556.015434][T26844] syzkaller0: entered promiscuous mode [ 556.031373][T26844] syzkaller0: entered allmulticast mode [ 556.236409][T26856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5638'. [ 556.245724][T26856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5638'. [ 556.533120][T26864] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5643'. [ 556.567329][T26864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5643'. [ 556.651511][T26870] veth7: entered promiscuous mode [ 556.845805][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 556.853918][ C0] lec:lec_tx_timeout: lec0 [ 556.859224][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 556.972857][T26886] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5651'. [ 557.673542][T26913] netlink: 'syz.2.5659': attribute type 27 has an invalid length. [ 558.372595][T26920] infiniband syz1: set down [ 558.387144][T26920] infiniband syz1: added bond0 [ 558.491625][T26920] RDS/IB: syz1: added [ 558.515040][T26920] smc: adding ib device syz1 with port count 1 [ 558.545009][T26920] smc: ib device syz1 port 1 has no pnetid [ 558.973771][T26971] bond6 (unregistering): Released all slaves [ 559.326525][T26990] netlink: 'syz.0.5684': attribute type 21 has an invalid length. [ 559.360970][T26994] netlink: 'syz.0.5684': attribute type 21 has an invalid length. [ 559.394917][T26990] netlink: 'syz.0.5684': attribute type 21 has an invalid length. [ 559.591123][T26997] tipc: Enabling of bearer rejected, failed to enable media [ 559.799138][T27016] tipc: Enabled bearer , priority 0 [ 559.930605][T27009] tipc: Disabling bearer [ 560.098355][T27022] bridge0: port 1(gretap0) entered blocking state [ 560.121580][T27022] bridge0: port 1(gretap0) entered disabled state [ 560.142102][T27022] gretap0: entered allmulticast mode [ 560.149758][T27022] gretap0: entered promiscuous mode [ 560.209807][T27031] __nla_validate_parse: 9 callbacks suppressed [ 560.209828][T27031] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5697'. [ 560.642746][T27040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5700'. [ 560.684528][T27040] tipc: New replicast peer: 255.255.255.255 [ 560.697544][T27040] tipc: Enabled bearer , priority 26 [ 560.711621][T27042] netlink: 'syz.4.5701': attribute type 10 has an invalid length. [ 560.755397][T27040] netlink: 'syz.0.5700': attribute type 4 has an invalid length. [ 560.952629][T27051] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 561.062559][T27058] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5706'. [ 561.075376][T27058] netlink: 'syz.4.5706': attribute type 10 has an invalid length. [ 561.103077][T27058] bridge0: port 1(macsec0) entered blocking state [ 561.117632][T27058] bridge0: port 1(macsec0) entered disabled state [ 561.124709][T27058] macsec0: entered allmulticast mode [ 561.137356][T27058] veth1_macvtap: entered allmulticast mode [ 561.145310][T27058] macsec0: entered promiscuous mode [ 561.418200][T27086] netlink: 'syz.4.5713': attribute type 3 has an invalid length. [ 561.434034][T27086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5713'. [ 561.637289][T27095] netlink: 'syz.1.5716': attribute type 2 has an invalid length. [ 561.810198][T27090] wg1 speed is unknown, defaulting to 1000 [ 561.818156][T27090] lo speed is unknown, defaulting to 1000 [ 561.865643][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 561.873744][ C0] lec:lec_tx_timeout: lec0 [ 561.878683][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 562.315203][T27123] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.5725'. [ 562.333953][T27123] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 562.343771][T27123] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5725'. [ 562.365296][T27124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5725'. [ 562.405711][T27123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5725'. [ 562.431353][T27117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5724'. [ 562.451560][T27127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5725'. [ 562.493126][T27123] ip6gre1: entered promiscuous mode [ 562.526546][T27123] ip6gre1: entered allmulticast mode [ 562.540374][T27131] tipc: Enabled bearer , priority 10 [ 562.580514][T27130] netlink: 'syz.3.5726': attribute type 10 has an invalid length. [ 562.794444][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 562.872768][T27144] netlink: 'syz.0.5733': attribute type 9 has an invalid length. [ 562.890998][T27135] syzkaller0: entered promiscuous mode [ 562.897306][T27135] syzkaller0: entered allmulticast mode [ 565.023944][T27183] validate_nla: 1 callbacks suppressed [ 565.023962][T27183] netlink: 'syz.0.5740': attribute type 1 has an invalid length. [ 565.062752][T27179] nbd: couldn't find a device at index 0 [ 565.133802][T27185] tipc: Enabling of bearer rejected, already enabled [ 565.350667][T27194] syzkaller1: left promiscuous mode [ 565.367415][T27194] syzkaller1: left allmulticast mode [ 565.396773][T27179] wg1 speed is unknown, defaulting to 1000 [ 565.404314][T27179] lo speed is unknown, defaulting to 1000 [ 565.521158][T27206] netlink: 'syz.0.5747': attribute type 8 has an invalid length. [ 565.529927][T27206] netlink: 'syz.0.5747': attribute type 1 has an invalid length. [ 565.538014][T27206] __nla_validate_parse: 12 callbacks suppressed [ 565.538030][T27206] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5747'. [ 565.583108][T27212] netlink: 'syz.2.5748': attribute type 3 has an invalid length. [ 565.603965][T27212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5748'. [ 565.876744][T27222] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 566.024757][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 566.034830][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 566.043926][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 566.052117][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 566.060085][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 566.203584][T27238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.391563][T27247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 566.398885][T27247] IPv6: NLM_F_CREATE should be set when creating new route [ 566.530550][T27242] tipc: Resetting bearer [ 566.885868][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 566.893966][ C0] lec:lec_tx_timeout: lec0 [ 566.898683][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 567.338889][T27258] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5764'. [ 567.643630][T17647] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 567.660735][T27232] wg1 speed is unknown, defaulting to 1000 [ 567.664881][T27262] syzkaller0: entered promiscuous mode [ 567.674756][T27262] syzkaller0: entered allmulticast mode [ 567.714814][T17647] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 567.744038][T27232] lo speed is unknown, defaulting to 1000 [ 567.758852][T17647] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 567.774914][T17647] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 567.858440][T12791] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 567.888244][T12791] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 568.031349][T27278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.052312][T12791] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 568.079640][T12791] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 568.146354][ T5832] Bluetooth: hci0: command tx timeout [ 568.242858][T27282] tipc: Enabling of bearer rejected, already enabled [ 568.282299][T27283] tipc: New replicast peer: 172.30.1.1 [ 568.480205][T12791] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 568.490649][T12791] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 568.541230][T12791] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 568.552963][T12791] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 568.720759][T27232] chnl_net:caif_netlink_parms(): no params data found [ 568.874406][T27232] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.882069][T27232] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.889487][T27232] bridge_slave_0: entered allmulticast mode [ 568.897434][T27232] bridge_slave_0: entered promiscuous mode [ 568.906259][T27232] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.913485][T27232] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.931258][T27232] bridge_slave_1: entered allmulticast mode [ 568.942918][T27232] bridge_slave_1: entered promiscuous mode [ 568.968821][T12791] bridge0: port 1(veth9) entered disabled state [ 569.365283][T27319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5772'. [ 569.623635][T27325] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5773'. [ 569.704783][T12791] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 569.911543][T12791] bond5 (unregistering): (slave gretap2): Releasing active interface [ 569.960866][T12791] bond4 (unregistering): (slave geneve2): Releasing active interface [ 570.225704][ T5832] Bluetooth: hci0: command tx timeout [ 570.427975][T12791] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 570.437239][T12791] mac80211_hwsim hwsim33 wlan1: left promiscuous mode [ 570.444569][T12791] bond0 (unregistering): Released all slaves [ 570.457779][T12791] bond1 (unregistering): Released all slaves [ 570.567077][T12791] bond2 (unregistering): (slave wireguard0): Releasing backup interface [ 570.575453][T12791] wireguard0: left promiscuous mode [ 570.582505][T12791] bond2 (unregistering): Released all slaves [ 570.595183][T12791] bond3 (unregistering): (slave veth7): Releasing active interface [ 570.604891][T12791] bond3 (unregistering): Released all slaves [ 570.617524][T12791] bond4 (unregistering): Released all slaves [ 570.731612][T12791] bond5 (unregistering): Released all slaves [ 570.876262][T27319] 8021q: adding VLAN 0 to HW filter on device bond1 [ 570.917126][T27306] 8021q: adding VLAN 0 to HW filter on device bond1 [ 570.924195][T27306] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 570.936563][T27306] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 570.998337][T12791] hmac(sha224): left promiscuous mode [ 571.019602][T27232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.052393][T27232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.076978][T12791] : left promiscuous mode [ 571.214629][T12791] tipc: Left network mode [ 571.239120][T27232] team0: Port device team_slave_0 added [ 571.248781][T27232] team0: Port device team_slave_1 added [ 571.283941][T27350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5777'. [ 571.308002][T27347] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5778'. [ 571.357359][T27232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.364343][T27232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.422847][T27353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5778'. [ 571.439953][T27232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.511631][T27359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 571.610771][T27362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 571.705826][T27232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.743485][T27232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.845979][T27232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.905848][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 571.913911][ C0] lec:lec_tx_timeout: lec0 [ 571.918647][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 572.306179][ T5832] Bluetooth: hci0: command tx timeout [ 572.316726][T27380] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5781'. [ 572.346422][T27384] syzkaller0: entered promiscuous mode [ 572.351940][T27384] syzkaller0: entered allmulticast mode [ 572.517594][T27401] æÿîÿ: entered promiscuous mode [ 572.673026][T27410] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5789'. [ 572.740065][T27411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5790'. [ 574.238878][T27232] hsr_slave_0: entered promiscuous mode [ 574.245277][T27232] hsr_slave_1: entered promiscuous mode [ 574.251599][T27232] debugfs: 'hsr0' already exists in 'hsr' [ 574.257604][T27232] Cannot create hsr debugfs directory [ 574.268108][T27406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5789'. [ 574.387497][ T5832] Bluetooth: hci0: command tx timeout [ 574.406546][T27422] netlink: 'syz.3.5793': attribute type 10 has an invalid length. [ 574.425423][T27425] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 574.461330][T27422] bridge0: port 3(macsec0) entered blocking state [ 574.472460][T27422] bridge0: port 3(macsec0) entered disabled state [ 574.479449][T27422] macsec0: entered allmulticast mode [ 574.485892][T27422] veth1_macvtap: entered allmulticast mode [ 574.493649][T27422] macsec0: entered promiscuous mode [ 574.502601][T27422] veth1_macvtap: entered promiscuous mode [ 574.807682][T27427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5792'. [ 575.050173][T27410] wg1 speed is unknown, defaulting to 1000 [ 575.057682][T27448] Bluetooth: MGMT ver 1.23 [ 575.064837][T27410] lo speed is unknown, defaulting to 1000 [ 575.333095][T27453] bond9 (unregistering): Released all slaves [ 575.599553][T27461] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5799'. [ 575.921483][T27425] wg1 speed is unknown, defaulting to 1000 [ 575.969208][T27425] lo speed is unknown, defaulting to 1000 [ 576.935907][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 576.943921][ C0] lec:lec_tx_timeout: lec0 [ 576.948510][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 577.685748][ T5493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 577.697660][T12791] hsr_slave_0: left promiscuous mode [ 577.713461][T12791] veth1_macvtap: left promiscuous mode [ 577.720802][T12791] veth0_macvtap: left promiscuous mode [ 578.564322][T27232] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 578.583905][ T6955] lo speed is unknown, defaulting to 1000 [ 578.590286][ T6955] infiniband syz2: ib_query_port failed (-19) [ 578.590429][T27232] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 578.634587][T27232] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 578.646628][T27232] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 579.120061][T27232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.195934][T27232] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.241803][T17647] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.248995][T17647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.311623][T17647] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.311772][T12791] IPVS: stop unused estimator thread 0... [ 579.318785][T17647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.477389][T27232] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 579.537166][T27232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 579.634492][T27523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5810'. [ 579.723116][T27523] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5810'. [ 580.141947][T27546] netlink: 'syz.1.5813': attribute type 1 has an invalid length. [ 580.181800][T27546] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.5813'. [ 580.353615][T27232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.645365][T27232] veth0_vlan: entered promiscuous mode [ 580.703528][T27232] veth1_vlan: entered promiscuous mode [ 580.838654][T27573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5820'. [ 580.861553][T27232] veth0_macvtap: entered promiscuous mode [ 580.893261][T27579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5820'. [ 580.894592][T27232] veth1_macvtap: entered promiscuous mode [ 581.003087][T27232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.049748][T27232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.092561][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.133205][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.166345][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.206686][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.405463][T27603] netlink: 212 bytes leftover after parsing attributes in process `syz.4.5826'. [ 581.470434][T27603] nbd: must specify at least one socket [ 581.502357][ T3425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.544435][ T3425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.623971][T17662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.644380][T17662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.955553][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 581.963714][ C0] lec:lec_tx_timeout: lec0 [ 581.968885][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 582.030190][T27621] bond5: entered promiscuous mode [ 582.263829][T27589] wg1 speed is unknown, defaulting to 1000 [ 582.279962][T27643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5833'. [ 582.327788][T27643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5833'. [ 582.649508][T27632] wg1 speed is unknown, defaulting to 1000 [ 583.200858][T27668] bond10: option arp_interval: invalid value (18446744073709551615) [ 583.212506][T27668] bond10: option arp_interval: allowed values 0 - 2147483647 [ 583.234591][T27668] bond10 (unregistering): Released all slaves [ 583.283372][T27673] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5836'. [ 583.729546][T27337] udevd[27337]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 583.792758][T27335] udevd[27335]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 584.125785][T27703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5843'. [ 584.570206][T27724] netlink: 'syz.1.5843': attribute type 3 has an invalid length. [ 584.588927][T27724] netlink: 'syz.1.5843': attribute type 3 has an invalid length. [ 585.958696][T27783] __nla_validate_parse: 2 callbacks suppressed [ 585.958714][T27783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5856'. [ 585.971220][T27767] wg1 speed is unknown, defaulting to 1000 [ 586.057747][T27789] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5856'. [ 586.279772][T27798] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 586.387566][T27798] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9 [ 586.757440][T27795] siw: device registration error -23 [ 587.329617][T27798] wg1 speed is unknown, defaulting to 1000 [ 587.459833][T27843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5869'. [ 587.506527][T27843] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5869'. [ 587.554413][T27850] netlink: 'syz.1.5871': attribute type 16 has an invalid length. [ 587.615223][T27850] netlink: 'syz.1.5871': attribute type 3 has an invalid length. [ 587.671970][T27850] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.5871'. [ 587.725626][ T30] audit: type=1800 audit(1769143492.407:13): pid=27857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5872" name="memory.events" dev="tmpfs" ino=2594 res=0 errno=0 [ 587.755766][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 587.763845][ C0] lec:lec_tx_timeout: lec0 [ 587.768609][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 588.171280][T27872] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5876'. [ 588.280642][T27879] macsec1: entered promiscuous mode [ 588.311354][T27879] macsec1: entered allmulticast mode [ 588.332816][T27876] geneve2: left promiscuous mode [ 588.340025][T27876] sit1: left promiscuous mode [ 588.345178][T27876] macsec2: left promiscuous mode [ 588.351309][T27876] geneve3: left promiscuous mode [ 588.388321][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 588.405336][T27876] geneve3: left allmulticast mode [ 588.435032][T27876] veth3: left promiscuous mode [ 588.469806][T27876] bond3: left promiscuous mode [ 588.493443][T27876] wireguard1: left promiscuous mode [ 588.506832][T27876] bond3: left allmulticast mode [ 588.520233][T27876] wireguard1: left allmulticast mode [ 588.544052][T27876] bond5: left promiscuous mode [ 588.688905][T27898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5881'. [ 589.131247][T27918] tipc: Enabling of bearer rejected, failed to enable media [ 589.348706][T27926] sctp: [Deprecated]: syz.4.5887 (pid 27926) Use of struct sctp_assoc_value in delayed_ack socket option. [ 589.348706][T27926] Use struct sctp_sack_info instead [ 589.758538][T27947] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.5895'. [ 589.989521][T27947] block nbd3: server does not support multiple connections per device. [ 590.053799][T27951] netlink: 'syz.2.5895': attribute type 10 has an invalid length. [ 590.083255][T27951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5895'. [ 590.125684][T27947] block nbd3: shutting down sockets [ 590.242039][T27955] sysfs: cannot create duplicate filename '/class/ieee80211/Ï€ã,ÄûÔxµ…üb©)%ë ]ô‚3DûLÌ¥”!!bíÓÙ.˜>„nS‡#^‘§' [ 590.287177][T27955] CPU: 0 UID: 0 PID: 27955 Comm: syz.0.5897 Not tainted syzkaller #0 PREEMPT(full) [ 590.287208][T27955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 590.287221][T27955] Call Trace: [ 590.287229][T27955] [ 590.287240][T27955] dump_stack_lvl+0xe8/0x150 [ 590.287274][T27955] sysfs_warn_dup+0x8e/0xa0 [ 590.287298][T27955] sysfs_do_create_link_sd+0xc0/0x110 [ 590.287323][T27955] device_add_class_symlinks+0x1cf/0x240 [ 590.287358][T27955] device_add+0x475/0xb70 [ 590.287392][T27955] wiphy_register+0x1d6c/0x2d50 [ 590.287437][T27955] ? __pfx_wiphy_register+0x10/0x10 [ 590.287463][T27955] ? __pfx_netdev_run_todo+0x10/0x10 [ 590.287486][T27955] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 590.287516][T27955] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 590.287551][T27955] ieee80211_register_hw+0x34d2/0x4150 [ 590.287590][T27955] ? ieee80211_register_hw+0x13c1/0x4150 [ 590.287624][T27955] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 590.287664][T27955] ? __hrtimer_setup+0x181/0x200 [ 590.287688][T27955] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 590.287714][T27955] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 590.287780][T27955] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 590.287808][T27955] ? kstrndup+0xbf/0x160 [ 590.287843][T27955] hwsim_new_radio_nl+0xf85/0x1c30 [ 590.287871][T27955] ? __pfx___nla_validate_parse+0x10/0x10 [ 590.287908][T27955] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 590.287942][T27955] ? rcu_is_watching+0x15/0xb0 [ 590.287971][T27955] ? __nla_parse+0x40/0x60 [ 590.287995][T27955] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 590.288033][T27955] genl_family_rcv_msg_doit+0x22a/0x330 [ 590.288069][T27955] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 590.288110][T27955] ? bpf_lsm_capable+0x9/0x20 [ 590.288136][T27955] ? security_capable+0x7e/0x2c0 [ 590.288168][T27955] genl_rcv_msg+0x61c/0x7a0 [ 590.288204][T27955] ? __pfx_genl_rcv_msg+0x10/0x10 [ 590.288230][T27955] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 590.288268][T27955] netlink_rcv_skb+0x232/0x4b0 [ 590.288293][T27955] ? __pfx_genl_rcv_msg+0x10/0x10 [ 590.288322][T27955] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 590.288342][T27955] ? genl_rcv+0x19/0x40 [ 590.288389][T27955] ? down_read+0x272/0x2e0 [ 590.288408][T27955] ? genl_rcv+0xd/0x40 [ 590.288435][T27955] genl_rcv+0x28/0x40 [ 590.288459][T27955] netlink_unicast+0x80f/0x9b0 [ 590.288491][T27955] ? __pfx_netlink_unicast+0x10/0x10 [ 590.288515][T27955] ? netlink_sendmsg+0x650/0xb40 [ 590.288535][T27955] ? skb_put+0x11b/0x210 [ 590.288568][T27955] netlink_sendmsg+0x813/0xb40 [ 590.288600][T27955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.288628][T27955] ? aa_sock_msg_perm+0xf1/0x1b0 [ 590.288655][T27955] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 590.288674][T27955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.288699][T27955] __sock_sendmsg+0x21c/0x270 [ 590.288728][T27955] ____sys_sendmsg+0x4d7/0x810 [ 590.288747][T27955] ? __might_fault+0xaf/0x130 [ 590.288780][T27955] ? __pfx_____sys_sendmsg+0x10/0x10 [ 590.288811][T27955] ? import_iovec+0x73/0xa0 [ 590.288839][T27955] ___sys_sendmsg+0x2a5/0x360 [ 590.288858][T27955] ? __lock_acquire+0x6b5/0x2cf0 [ 590.288885][T27955] ? __pfx____sys_sendmsg+0x10/0x10 [ 590.288914][T27955] ? futex_wait+0x29a/0x380 [ 590.288978][T27955] ? __fget_files+0x2a/0x420 [ 590.289001][T27955] ? __fget_files+0x3a0/0x420 [ 590.289038][T27955] __x64_sys_sendmsg+0x1bd/0x2a0 [ 590.289063][T27955] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 590.289095][T27955] ? rcu_is_watching+0x15/0xb0 [ 590.289133][T27955] do_syscall_64+0xe2/0xf80 [ 590.289160][T27955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.289180][T27955] ? trace_irq_disable+0x37/0x100 [ 590.289204][T27955] ? clear_bhb_loop+0x60/0xb0 [ 590.289228][T27955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.289249][T27955] RIP: 0033:0x7f88c319acb9 [ 590.289267][T27955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.289285][T27955] RSP: 002b:00007f88c3f9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 590.289309][T27955] RAX: ffffffffffffffda RBX: 00007f88c3415fa0 RCX: 00007f88c319acb9 [ 590.289326][T27955] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 590.289341][T27955] RBP: 00007f88c3208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 590.289355][T27955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.289369][T27955] R13: 00007f88c3416038 R14: 00007f88c3415fa0 R15: 00007ffc26e060c8 [ 590.289406][T27955] [ 591.060591][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 591.072020][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 591.080282][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 591.088326][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 591.096100][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 591.547471][T27982] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5900'. [ 591.585178][T27985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5901'. [ 591.923561][T27966] wg1 speed is unknown, defaulting to 1000 [ 592.411436][T28018] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5908'. [ 592.441597][T28018] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5908'. [ 592.492496][T27970] wg1 speed is unknown, defaulting to 1000 [ 592.785790][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 592.793842][ C0] lec:lec_tx_timeout: lec0 [ 592.799311][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 593.186892][ T5841] Bluetooth: hci5: command tx timeout [ 593.725470][T28059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5914'. [ 593.782778][T28057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5914'. [ 593.842527][T27970] chnl_net:caif_netlink_parms(): no params data found [ 594.108349][T28076] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5919'. [ 594.108851][T28077] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5918'. [ 594.128040][T27970] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.161841][T27970] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.167858][T28078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5919'. [ 594.176241][T27970] bridge_slave_0: entered allmulticast mode [ 594.203535][T27970] bridge_slave_0: entered promiscuous mode [ 594.250163][T27970] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.268402][T27970] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.290510][T27970] bridge_slave_1: entered allmulticast mode [ 594.308228][T27970] bridge_slave_1: entered promiscuous mode [ 594.336549][T28086] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5922'. [ 594.438328][T27970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.475906][T27970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.557754][T27970] team0: Port device team_slave_0 added [ 594.582781][T27970] team0: Port device team_slave_1 added [ 594.721598][T27970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.735549][T27970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.795556][T27970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.817647][T27970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.824678][T27970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.878000][T27970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.004223][T27970] hsr_slave_0: entered promiscuous mode [ 595.038699][T27970] hsr_slave_1: entered promiscuous mode [ 595.061730][T27970] debugfs: 'hsr0' already exists in 'hsr' [ 595.072404][T27970] Cannot create hsr debugfs directory [ 595.266238][ T5841] Bluetooth: hci5: command tx timeout [ 595.634329][T28138] netlink: 'syz.0.5939': attribute type 9 has an invalid length. [ 595.643865][T28138] netlink: 'syz.0.5939': attribute type 5 has an invalid length. [ 596.084180][T27970] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 596.109907][T27970] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 596.128778][T28137] wg1 speed is unknown, defaulting to 1000 [ 596.136121][T27970] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 596.146219][T27970] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 596.228949][T28160] netlink: 'syz.2.5943': attribute type 3 has an invalid length. [ 596.879203][T28180] syzkaller1: entered promiscuous mode [ 596.885544][T28180] syzkaller1: entered allmulticast mode [ 597.267875][T28204] __nla_validate_parse: 7 callbacks suppressed [ 597.267892][T28204] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5952'. [ 597.317868][T28204] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5952'. [ 597.343376][T27970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.355965][ T5841] Bluetooth: hci5: command tx timeout [ 597.402601][T27970] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.460419][T17652] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.467657][T17652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.524369][T17652] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.531612][T17652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.580993][T28176] wg1 speed is unknown, defaulting to 1000 [ 597.805514][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 597.813549][ C0] lec:lec_tx_timeout: lec0 [ 597.818406][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 598.266682][T27970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.395822][T28241] netlink: 'syz.4.5960': attribute type 3 has an invalid length. [ 598.403755][T28241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5960'. [ 598.493547][T27970] veth0_vlan: entered promiscuous mode [ 598.548466][T27970] veth1_vlan: entered promiscuous mode [ 598.658940][T27970] veth0_macvtap: entered promiscuous mode [ 598.692947][T27970] veth1_macvtap: entered promiscuous mode [ 598.764704][T27970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.807885][T27970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.838258][ T3553] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.853783][ T3553] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.889235][ T3553] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.920738][ T3553] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.293985][T28252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5961'. [ 599.308723][T17677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.335559][T17677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.426275][ T5841] Bluetooth: hci5: command tx timeout [ 599.440268][T28255] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5963'. [ 599.487716][T17652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.515871][T17652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.589468][T28257] FAULT_INJECTION: forcing a failure. [ 599.589468][T28257] name failslab, interval 1, probability 0, space 0, times 0 [ 599.602682][T28257] CPU: 1 UID: 0 PID: 28257 Comm: syz.4.5964 Not tainted syzkaller #0 PREEMPT(full) [ 599.602708][T28257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 599.602720][T28257] Call Trace: [ 599.602728][T28257] [ 599.602737][T28257] dump_stack_lvl+0xe8/0x150 [ 599.602764][T28257] should_fail_ex+0x412/0x560 [ 599.602795][T28257] should_failslab+0xa8/0x100 [ 599.602820][T28257] kmem_cache_alloc_noprof+0x87/0x6e0 [ 599.602845][T28257] ? __netlink_lookup+0xc6/0x8b0 [ 599.602867][T28257] ? skb_clone+0x212/0x3a0 [ 599.602892][T28257] skb_clone+0x212/0x3a0 [ 599.602915][T28257] __netlink_deliver_tap+0x404/0x850 [ 599.602948][T28257] ? netlink_deliver_tap+0x2e/0x1b0 [ 599.602970][T28257] netlink_deliver_tap+0x19c/0x1b0 [ 599.602992][T28257] netlink_unicast+0x7e3/0x9b0 [ 599.603020][T28257] ? __pfx_netlink_unicast+0x10/0x10 [ 599.603041][T28257] ? netlink_sendmsg+0x650/0xb40 [ 599.603060][T28257] ? skb_put+0x11b/0x210 [ 599.603089][T28257] netlink_sendmsg+0x813/0xb40 [ 599.603119][T28257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.603143][T28257] ? aa_file_perm+0x12d/0x1630 [ 599.603165][T28257] ? aa_sock_msg_perm+0xf1/0x1b0 [ 599.603190][T28257] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 599.603208][T28257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.603228][T28257] __sock_sendmsg+0x21c/0x270 [ 599.603254][T28257] ____sys_sendmsg+0x4d7/0x810 [ 599.603273][T28257] ? __might_fault+0xaf/0x130 [ 599.603305][T28257] ? __pfx_____sys_sendmsg+0x10/0x10 [ 599.603333][T28257] ? import_iovec+0x73/0xa0 [ 599.603358][T28257] ___sys_sendmsg+0x2a5/0x360 [ 599.603376][T28257] ? __lock_acquire+0x6b5/0x2cf0 [ 599.603401][T28257] ? __pfx____sys_sendmsg+0x10/0x10 [ 599.603458][T28257] ? __fget_files+0x2a/0x420 [ 599.603479][T28257] ? __fget_files+0x3a0/0x420 [ 599.603512][T28257] __x64_sys_sendmsg+0x1bd/0x2a0 [ 599.603541][T28257] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 599.603571][T28257] ? __pfx_ksys_write+0x10/0x10 [ 599.603602][T28257] do_syscall_64+0xe2/0xf80 [ 599.603627][T28257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.603645][T28257] ? trace_irq_disable+0x37/0x100 [ 599.603668][T28257] ? clear_bhb_loop+0x60/0xb0 [ 599.603690][T28257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.603708][T28257] RIP: 0033:0x7f74d739acb9 [ 599.603726][T28257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.603743][T28257] RSP: 002b:00007f74d81ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.603763][T28257] RAX: ffffffffffffffda RBX: 00007f74d7615fa0 RCX: 00007f74d739acb9 [ 599.603776][T28257] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 599.603788][T28257] RBP: 00007f74d81ae090 R08: 0000000000000000 R09: 0000000000000000 [ 599.603798][T28257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.603809][T28257] R13: 00007f74d7616038 R14: 00007f74d7615fa0 R15: 00007fff41823598 [ 599.603841][T28257] [ 599.992486][T28260] netlink: 'syz.1.5965': attribute type 1 has an invalid length. [ 600.062476][T28260] 8021q: adding VLAN 0 to HW filter on device bond10 [ 600.066069][T28265] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5965'. [ 600.144140][T28265] bond10: entered promiscuous mode [ 600.196438][T28260] bond10: (slave dummy0): making interface the new active one [ 600.228162][T28260] dummy0: entered promiscuous mode [ 600.242008][T28260] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 600.322621][T28275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5969'. [ 600.432974][T28280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5970'. [ 600.575949][T28290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5970'. [ 600.634354][T28260] bond10 (unregistering): (slave dummy0): Releasing active interface [ 600.643011][T28260] dummy0: left promiscuous mode [ 600.657100][T28260] bond10 (unregistering): Released all slaves [ 600.700174][T28293] netlink: 'syz.4.5971': attribute type 3 has an invalid length. [ 600.715684][T28293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5971'. [ 601.167164][T28308] mac80211_hwsim hwsim81 wlan0: entered promiscuous mode [ 601.174492][T28308] mac80211_hwsim hwsim81 wlan0: entered allmulticast mode [ 601.191073][T28308] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 601.629079][T28314] tipc: Enabling of bearer rejected, failed to enable media [ 601.677856][T28314] bridge0: entered promiscuous mode [ 601.686307][T28314] vlan1: entered promiscuous mode [ 601.746415][T28320] can: request_module (can-proto-4) failed. [ 601.890047][T28331] netlink: 'syz.4.5982': attribute type 1 has an invalid length. [ 602.519227][T28356] __nla_validate_parse: 4 callbacks suppressed [ 602.519252][T28356] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5989'. [ 602.609236][T28338] wg1 speed is unknown, defaulting to 1000 [ 602.825802][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 602.833852][ C0] lec:lec_tx_timeout: lec0 [ 602.838459][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 602.903846][T28354] wg1 speed is unknown, defaulting to 1000 [ 603.207896][T28373] FAULT_INJECTION: forcing a failure. [ 603.207896][T28373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.279540][T28373] CPU: 0 UID: 0 PID: 28373 Comm: syz.4.5993 Not tainted syzkaller #0 PREEMPT(full) [ 603.279568][T28373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 603.279580][T28373] Call Trace: [ 603.279588][T28373] [ 603.279597][T28373] dump_stack_lvl+0xe8/0x150 [ 603.279626][T28373] should_fail_ex+0x412/0x560 [ 603.279657][T28373] _copy_to_user+0x31/0xb0 [ 603.279680][T28373] simple_read_from_buffer+0xe1/0x170 [ 603.279708][T28373] proc_fail_nth_read+0x1bb/0x230 [ 603.279732][T28373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 603.279756][T28373] ? rw_verify_area+0x2a6/0x4d0 [ 603.279782][T28373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 603.279804][T28373] vfs_read+0x20c/0xa70 [ 603.279820][T28373] ? fdget_pos+0x246/0x320 [ 603.279847][T28373] ? __pfx___mutex_lock+0x10/0x10 [ 603.279866][T28373] ? __pfx_vfs_read+0x10/0x10 [ 603.279887][T28373] ? __fget_files+0x2a/0x420 [ 603.279913][T28373] ? __fget_files+0x3a0/0x420 [ 603.279934][T28373] ? __fget_files+0x2a/0x420 [ 603.279964][T28373] ksys_read+0x150/0x270 [ 603.279985][T28373] ? __pfx_ksys_read+0x10/0x10 [ 603.280014][T28373] do_syscall_64+0xe2/0xf80 [ 603.280038][T28373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.280056][T28373] ? trace_irq_disable+0x37/0x100 [ 603.280079][T28373] ? clear_bhb_loop+0x60/0xb0 [ 603.280101][T28373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.280120][T28373] RIP: 0033:0x7f74d735b58e [ 603.280137][T28373] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 603.280154][T28373] RSP: 002b:00007f74d818cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 603.280175][T28373] RAX: ffffffffffffffda RBX: 00007f74d818d6c0 RCX: 00007f74d735b58e [ 603.280190][T28373] RDX: 000000000000000f RSI: 00007f74d818d0a0 RDI: 0000000000000003 [ 603.280202][T28373] RBP: 00007f74d818d090 R08: 0000000000000000 R09: 0000000000000000 [ 603.280213][T28373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.280225][T28373] R13: 00007f74d7616128 R14: 00007f74d7616090 R15: 00007fff41823598 [ 603.280257][T28373] [ 604.738111][T28405] netlink: 'syz.3.6000': attribute type 1 has an invalid length. [ 605.254715][ T10] IPVS: starting estimator thread 0... [ 605.358833][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.377754][T28423] IPVS: using max 34 ests per chain, 81600 per kthread [ 605.383640][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.730187][T28444] netlink: 'syz.3.6005': attribute type 3 has an invalid length. [ 605.765278][T28444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6005'. [ 605.780704][T28443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6007'. [ 605.978431][T28459] netlink: 'syz.4.6010': attribute type 5 has an invalid length. [ 606.203728][T28467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6012'. [ 606.837061][T28489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6020'. [ 606.863981][T28489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6020'. [ 607.015432][T28505] xt_hashlimit: size too large, truncated to 1048576 [ 607.071212][T28513] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6021'. [ 607.196541][T28512] syzkaller0: entered promiscuous mode [ 607.219886][T28512] syzkaller0: entered allmulticast mode [ 607.440712][T28540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6033'. [ 607.457990][T28521] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 607.469732][T28540] vlan1: entered promiscuous mode [ 607.474810][T28540] bond0: entered promiscuous mode [ 607.506285][T28540] bond_slave_0: entered promiscuous mode [ 607.512194][T28540] bond_slave_1: entered promiscuous mode [ 607.772199][T28558] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6038'. [ 607.851467][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 607.859542][ C0] lec:lec_tx_timeout: lec0 [ 607.864126][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 607.897390][T28563] netlink: 'syz.1.6038': attribute type 1 has an invalid length. [ 607.917137][T28563] netlink: 'syz.1.6038': attribute type 2 has an invalid length. [ 607.945676][T28563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6038'. [ 609.667806][T28577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6039'. [ 609.948343][T28595] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6046'. [ 609.967022][T28594] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.6045'. [ 610.013872][T28587] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.147425][T28587] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.021342][T28610] vlan4: entered allmulticast mode [ 611.036338][T28610] bridge0: port 2(vlan4) entered blocking state [ 611.042727][T28610] bridge0: port 2(vlan4) entered disabled state [ 611.070234][T28610] vlan4: entered promiscuous mode [ 611.075313][T28610] bridge_slave_0: entered promiscuous mode [ 611.269403][T28587] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.414331][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 611.429096][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 611.438324][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 611.446582][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 611.458445][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 611.524978][T28587] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.731520][ T3553] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.768240][ T3553] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.812051][ T3553] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.851393][ T3553] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.977247][T28632] wg1 speed is unknown, defaulting to 1000 [ 612.317621][T28667] siw: device registration error -23 [ 612.378095][T28632] chnl_net:caif_netlink_parms(): no params data found [ 612.482066][T28673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6067'. [ 612.526273][T28632] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.534271][T28632] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.542466][T28632] bridge_slave_0: entered allmulticast mode [ 612.550662][T28632] bridge_slave_0: entered promiscuous mode [ 612.559854][T28632] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.567327][T28632] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.574896][T28632] bridge_slave_1: entered allmulticast mode [ 612.587584][T28632] bridge_slave_1: entered promiscuous mode [ 612.626824][T28632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.639709][T28632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.679221][T28632] team0: Port device team_slave_0 added [ 612.695140][T28632] team0: Port device team_slave_1 added [ 612.741074][T28632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.748597][T28632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.775082][T28632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.806666][T28632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.814851][T28632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.849615][T28632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.885789][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 612.893954][ C0] lec:lec_tx_timeout: lec0 [ 612.898956][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 612.931949][T28686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6072'. [ 612.956235][T28632] hsr_slave_0: entered promiscuous mode [ 612.963173][T28632] hsr_slave_1: entered promiscuous mode [ 612.970012][T28632] debugfs: 'hsr0' already exists in 'hsr' [ 612.976383][T28632] Cannot create hsr debugfs directory [ 612.981861][T28690] x_tables: duplicate underflow at hook 2 [ 613.377103][T28702] tipc: Enabling of bearer rejected, already enabled [ 613.441805][T28712] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6080'. [ 613.492920][T28712] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6080'. [ 613.521136][ T5841] Bluetooth: hci2: command tx timeout [ 613.529693][T28712] nbd: must specify at least one socket [ 613.884160][T28632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 613.919021][T28632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 613.961518][T28632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 613.987844][T28632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 614.176405][T28762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6090'. [ 614.196562][T28762] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 614.273958][T17647] bond8 (unregistering): (slave ip6gretap1): Releasing active interface [ 614.448378][T17647] batman_adv: batadv0: Removing interface: gretap2 [ 614.588359][T17647] bond9 (unregistering): (slave bridge1): Releasing backup interface [ 614.596822][T17647] bridge1 (unregistering): left allmulticast mode [ 614.693918][T17647] bond0 (unregistering): Released all slaves [ 614.803042][T17647] bond1 (unregistering): Released all slaves [ 614.913526][T17647] bond2 (unregistering): Released all slaves [ 615.026258][T17647] bond3 (unregistering): Released all slaves [ 615.038989][T17647] bond4 (unregistering): Released all slaves [ 615.051309][T17647] bond5 (unregistering): Released all slaves [ 615.165982][T17647] bond6 (unregistering): Released all slaves [ 615.273143][T17647] bond7 (unregistering): Released all slaves [ 615.287379][T17647] bond8 (unregistering): (slave veth5): Releasing active interface [ 615.297586][T17647] bond8 (unregistering): Released all slaves [ 615.418998][T17647] bond9 (unregistering): Released all slaves [ 615.533281][T17647] bond10 (unregistering): Released all slaves [ 615.587249][ T5841] Bluetooth: hci2: command tx timeout [ 615.645757][T17647] bond11 (unregistering): Released all slaves [ 615.756247][T17647] bond12 (unregistering): (slave bond13): Releasing backup interface [ 615.764821][T17647] bond13 (unregistering): left promiscuous mode [ 615.771829][T17647] bond12 (unregistering): Released all slaves [ 615.874234][T17647] bond13 (unregistering): Released all slaves [ 615.886448][T17647] bond14 (unregistering): Released all slaves [ 616.078138][T17647] tipc: Left network mode [ 616.159548][T28632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.220936][T28632] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.261980][T12791] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.269501][T12791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.389835][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.397058][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.981878][T28823] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 617.120385][T28632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.411116][T28632] veth0_vlan: entered promiscuous mode [ 617.441470][T28836] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 617.666112][T28632] veth1_vlan: entered promiscuous mode [ 617.667762][ T5841] Bluetooth: hci2: command tx timeout [ 617.723319][T28632] veth0_macvtap: entered promiscuous mode [ 617.770768][T28632] veth1_macvtap: entered promiscuous mode [ 617.823721][T28632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.846584][T28861] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6118'. [ 617.860731][T28632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.884605][T12791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.905648][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 617.913883][ C0] lec:lec_tx_timeout: lec0 [ 617.918809][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 617.925057][T12791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.967010][T12791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.998542][T12791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.321160][T17647] batman_adv: batadv0: Removing interface: vlan0 [ 619.078483][ T3857] smc: removing ib device !yz! [ 619.581493][T28876] wg1 speed is unknown, defaulting to 1000 [ 619.747489][ T5841] Bluetooth: hci2: command tx timeout [ 619.785417][T28910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6125'. [ 619.861130][ T3425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.881874][ T3425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.047136][T28916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6130'. [ 620.067877][ T3425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.087453][ T3425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.998195][T28908] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 621.008710][T28908] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 621.017500][T28908] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 621.037537][T28908] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 621.048670][T28908] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 621.100985][T28942] netlink: 'syz.2.6137': attribute type 13 has an invalid length. [ 621.109141][T28942] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6137'. [ 621.186272][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 621.668686][T28943] wg1 speed is unknown, defaulting to 1000 [ 621.701183][T28952] wg1 speed is unknown, defaulting to 1000 [ 621.809423][T28974] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6142'. [ 622.101389][T28983] gretap3: entered promiscuous mode [ 622.770652][T17647] IPVS: stop unused estimator thread 0... [ 622.925728][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 622.933790][ C0] lec:lec_tx_timeout: lec0 [ 622.938498][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 623.106153][ T5832] Bluetooth: hci3: command tx timeout [ 623.166082][T28995] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6148'. [ 623.583330][T28952] chnl_net:caif_netlink_parms(): no params data found [ 623.656311][T29011] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 623.697096][T29011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6153'. [ 623.854425][T29027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6158'. [ 623.914061][T29027] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6158'. [ 623.928007][T28952] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.952375][T28952] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.966579][T28952] bridge_slave_0: entered allmulticast mode [ 623.984522][T28952] bridge_slave_0: entered promiscuous mode [ 624.018420][T28952] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.032819][T28952] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.052985][T28952] bridge_slave_1: entered allmulticast mode [ 624.071602][T28952] bridge_slave_1: entered promiscuous mode [ 624.155095][T28952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.204361][T28952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.233787][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 624.254658][T29050] syzkaller1: entered promiscuous mode [ 624.261651][T29050] syzkaller1: entered allmulticast mode [ 624.309776][T28952] team0: Port device team_slave_0 added [ 624.338471][T28952] team0: Port device team_slave_1 added [ 624.419804][T28952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.443292][T28952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.495687][T28952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.560324][T28952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.585950][T28952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.620577][T28952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.781084][T28952] hsr_slave_0: entered promiscuous mode [ 624.790692][T28952] hsr_slave_1: entered promiscuous mode [ 624.797501][T28952] debugfs: 'hsr0' already exists in 'hsr' [ 624.803258][T28952] Cannot create hsr debugfs directory [ 624.989585][T29085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6177'. [ 625.039307][T29080] wg1 speed is unknown, defaulting to 1000 [ 625.185801][ T5832] Bluetooth: hci3: command tx timeout [ 625.194730][T29095] batadv_slave_1: entered promiscuous mode [ 625.220456][T29095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6181'. [ 625.281270][T29095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.394698][T29095] batadv_slave_1 (unregistering): left promiscuous mode [ 625.415720][T29095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.423213][T29099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6183'. [ 625.723230][T29105] netlink: 'syz.3.6185': attribute type 6 has an invalid length. [ 625.798184][T29107] wg1 speed is unknown, defaulting to 1000 [ 626.071003][T28952] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 626.111162][T28952] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 626.135134][T28952] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 626.207907][T28952] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 626.329893][T28952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.368965][T28952] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.380712][T17647] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.387959][T17647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.408275][ T3857] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.415538][ T3857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.436196][T29129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 626.761970][T29142] 8021q: VLANs not supported on gre0 [ 626.989679][T29151] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6194'. [ 627.067965][T29150] sit0: left promiscuous mode [ 627.101948][T29150] tipc: Resetting bearer [ 627.105290][T29158] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6196'. [ 627.149852][T29150] batadv0: left promiscuous mode [ 627.154850][T29150] batadv0: left allmulticast mode [ 627.161346][T29163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6197'. [ 627.171711][T29150] veth1_macvtap: left allmulticast mode [ 627.194733][T29150] geneve2: left promiscuous mode [ 627.215288][T29150] gtp0: left promiscuous mode [ 627.220277][T29150] gtp0: left allmulticast mode [ 627.230303][T29150] bridge2: left promiscuous mode [ 627.242373][T29150] bridge2: left allmulticast mode [ 627.248347][T29150] gre1: left allmulticast mode [ 627.266000][ T5832] Bluetooth: hci3: command tx timeout [ 627.279392][T29167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6197'. [ 627.280624][T29150] veth7: left promiscuous mode [ 627.306044][T29150] bond5: left promiscuous mode [ 627.314119][T29170] netlink: 'syz.2.6198': attribute type 10 has an invalid length. [ 627.344603][T17652] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 34225 - 0 [ 627.418285][T29168] bridge_slave_0: left allmulticast mode [ 627.424661][T29168] bridge_slave_0: left promiscuous mode [ 627.434316][T29168] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.457504][T29168] bridge_slave_1: left allmulticast mode [ 627.463163][T29168] bridge_slave_1: left promiscuous mode [ 627.475903][T29168] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.500101][T29168] bond0: (slave bond_slave_0): Releasing backup interface [ 627.524608][T29168] bond_slave_0: left promiscuous mode [ 627.554597][T29168] bond0: (slave bond_slave_1): Releasing backup interface [ 627.581744][T29168] bond_slave_1: left promiscuous mode [ 627.592768][T29168] team0: Port device team_slave_0 removed [ 627.611553][T29168] team0: Port device team_slave_1 removed [ 627.619162][T29168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.627581][T29168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.637908][T29168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.646658][T29168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.657009][T29168] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 627.674549][T29170] bond0: (slave wlan1): refused to change device type [ 627.684645][T12791] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 34225 - 0 [ 627.705194][T12791] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 34225 - 0 [ 627.785316][T12791] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 34225 - 0 [ 627.901390][T28952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.928218][T29192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6205'. [ 627.945884][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 627.953962][ C0] lec:lec_tx_timeout: lec0 [ 627.958948][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 628.024759][T29197] netlink: 'syz.2.6205': attribute type 1 has an invalid length. [ 628.033592][T29197] netlink: 175 bytes leftover after parsing attributes in process `syz.2.6205'. [ 628.048641][T29197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6205'. [ 628.159993][T28952] veth0_vlan: entered promiscuous mode [ 628.189593][T28952] veth1_vlan: entered promiscuous mode [ 628.269961][T28952] veth0_macvtap: entered promiscuous mode [ 628.298587][T28952] veth1_macvtap: entered promiscuous mode [ 628.350782][T28952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 628.394596][T28952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 628.411667][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.430354][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.440159][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.450381][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.559482][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.583276][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.649195][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.671954][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.897233][T29215] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 628.929182][ C1] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 628.953784][T29225] tipc: Resetting bearer [ 628.990769][T29225] bridge0: port 3(vlan3) entered blocking state [ 628.997232][T29225] bridge0: port 3(vlan3) entered forwarding state [ 629.102363][T29220] wg1 speed is unknown, defaulting to 1000 [ 629.350226][ T5832] Bluetooth: hci3: command tx timeout [ 629.866824][T29262] tipc: Enabling of bearer rejected, failed to enable media [ 630.023455][T29263] netlink: 'syz.1.6217': attribute type 10 has an invalid length. [ 630.041695][T29271] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 630.077284][T29263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.094558][T29271] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 630.123426][T29271] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 630.136302][T29280] netlink: 'syz.0.6227': attribute type 1 has an invalid length. [ 630.139731][T29263] team0: Port device bond0 added [ 630.188200][T29284] __nla_validate_parse: 3 callbacks suppressed [ 630.188217][T29284] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6227'. [ 630.355267][T29280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 630.388912][T29289] netlink: 'syz.4.6228': attribute type 13 has an invalid length. [ 630.442773][T29291] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 630.523645][T29297] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 630.533920][T29297] syzkaller0: entered promiscuous mode [ 630.542154][T29297] syzkaller0: entered allmulticast mode [ 630.591334][T29289] tipc: Enabled bearer , priority 0 [ 630.607447][T29289] : renamed from veth0_to_bond [ 630.624641][T29300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6231'. [ 630.671539][T29289] tipc: Resetting bearer [ 630.694620][T29289] tipc: Disabling bearer [ 630.831585][T29307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6234'. [ 630.888581][T29314] netlink: 'syz.1.6234': attribute type 10 has an invalid length. [ 630.900790][T29314] bridge0: port 3(macsec0) entered blocking state [ 630.908297][T29314] bridge0: port 3(macsec0) entered disabled state [ 630.915152][T29314] macsec0: entered allmulticast mode [ 630.946774][T29314] veth1_macvtap: entered allmulticast mode [ 630.954450][T29314] macsec0: entered promiscuous mode [ 630.976997][T29314] bridge0: port 3(macsec0) entered blocking state [ 630.983586][T29314] bridge0: port 3(macsec0) entered forwarding state [ 631.052744][T29330] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6237'. [ 631.094672][T29329] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6239'. [ 631.125298][T29329] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6239'. [ 631.179049][T29335] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6237'. [ 631.218274][T29323] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6237'. [ 631.318070][T29347] netlink: 'syz.4.6244': attribute type 13 has an invalid length. [ 631.329621][T29347] netlink: 'syz.4.6244': attribute type 17 has an invalid length. [ 631.369915][T29350] IPVS: rr: FWM 3 0x00000003 - no destination available [ 631.377056][ T6950] IPVS: starting estimator thread 0... [ 631.402596][T29347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.413583][T29347] 8021q: adding VLAN 0 to HW filter on device ` [ 631.427738][T29347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 631.475600][T29353] IPVS: using max 33 ests per chain, 79200 per kthread [ 631.630937][T29365] xt_hashlimit: overflow, rate too high: 0 [ 631.666896][T29369] netlink: 'syz.3.6251': attribute type 3 has an invalid length. [ 631.679795][T29369] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6251'. [ 631.794303][T29376] netlink: 'syz.1.6253': attribute type 83 has an invalid length. [ 632.000570][T29389] netlink: zone id is out of range [ 632.286192][T29393] vxlan0: entered promiscuous mode [ 632.298128][T29393] vxlan0: entered allmulticast mode [ 632.310525][T12791] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.340012][T12791] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.361369][T12791] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.382645][T12791] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.597627][T29393] [ 632.600146][T29393] ====================================================== [ 632.607174][T29393] WARNING: possible circular locking dependency detected [ 632.614197][T29393] syzkaller #0 Not tainted [ 632.618647][T29393] ------------------------------------------------------ [ 632.625657][T29393] syz.3.6256/29393 is trying to acquire lock: [ 632.631724][T29393] ffffffff8e456688 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x26e/0x17b0 [ 632.641292][T29393] [ 632.641292][T29393] but task is already holding lock: [ 632.648649][T29393] ffff88802587e938 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 632.659099][T29393] [ 632.659099][T29393] which lock already depends on the new lock. [ 632.659099][T29393] [ 632.669500][T29393] [ 632.669500][T29393] the existing dependency chain (in reverse order) is: [ 632.678511][T29393] [ 632.678511][T29393] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 632.687117][T29393] blk_alloc_queue+0x52f/0x610 [ 632.692402][T29393] __blk_mq_alloc_disk+0x197/0x390 [ 632.698036][T29393] nbd_dev_add+0x499/0xb50 [ 632.702970][T29393] nbd_init+0x168/0x1f0 [ 632.707637][T29393] do_one_initcall+0x250/0x840 [ 632.713001][T29393] do_initcall_level+0x104/0x190 [ 632.718450][T29393] do_initcalls+0x59/0xa0 [ 632.723291][T29393] kernel_init_freeable+0x2a6/0x3d0 [ 632.729001][T29393] kernel_init+0x1d/0x1d0 [ 632.733843][T29393] ret_from_fork+0x51b/0xa40 [ 632.738946][T29393] ret_from_fork_asm+0x1a/0x30 [ 632.744226][T29393] [ 632.744226][T29393] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 632.751428][T29393] fs_reclaim_acquire+0x71/0x100 [ 632.756882][T29393] prepare_alloc_pages+0x152/0x650 [ 632.762518][T29393] __alloc_frozen_pages_noprof+0x12f/0x380 [ 632.768865][T29393] __alloc_pages_noprof+0xa/0x30 [ 632.774331][T29393] pcpu_populate_chunk+0x182/0xb30 [ 632.779964][T29393] pcpu_alloc_noprof+0xcf1/0x17b0 [ 632.785518][T29393] bpf_map_alloc_percpu+0xbb/0x1b0 [ 632.791187][T29393] prealloc_init+0x217/0x640 [ 632.796360][T29393] htab_map_alloc+0x69e/0xc90 [ 632.801574][T29393] map_create+0xafd/0x16a0 [ 632.806521][T29393] __sys_bpf+0x65b/0x920 [ 632.811284][T29393] __x64_sys_bpf+0x7c/0x90 [ 632.816227][T29393] do_syscall_64+0xe2/0xf80 [ 632.821273][T29393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.827708][T29393] [ 632.827708][T29393] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 632.835450][T29393] __lock_acquire+0x15a5/0x2cf0 [ 632.840840][T29393] lock_acquire+0x106/0x330 [ 632.845880][T29393] __mutex_lock+0x19f/0x1300 [ 632.851005][T29393] pcpu_alloc_noprof+0x26e/0x17b0 [ 632.856731][T29393] sbitmap_init_node+0x1e1/0x640 [ 632.862181][T29393] sbitmap_queue_init_node+0x3e/0x4d0 [ 632.868070][T29393] blk_mq_init_tags+0x15c/0x2d0 [ 632.873446][T29393] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 632.879423][T29393] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 632.885755][T29393] nbd_start_device+0x17f/0xb10 [ 632.891141][T29393] nbd_genl_connect+0x149d/0x1a90 [ 632.896680][T29393] genl_family_rcv_msg_doit+0x22a/0x330 [ 632.902756][T29393] genl_rcv_msg+0x61c/0x7a0 [ 632.907795][T29393] netlink_rcv_skb+0x232/0x4b0 [ 632.913171][T29393] genl_rcv+0x28/0x40 [ 632.917678][T29393] netlink_unicast+0x80f/0x9b0 [ 632.922959][T29393] netlink_sendmsg+0x813/0xb40 [ 632.928239][T29393] __sock_sendmsg+0x21c/0x270 [ 632.933429][T29393] ____sys_sendmsg+0x4d7/0x810 [ 632.938711][T29393] ___sys_sendmsg+0x2a5/0x360 [ 632.943899][T29393] __x64_sys_sendmsg+0x1bd/0x2a0 [ 632.949351][T29393] do_syscall_64+0xe2/0xf80 [ 632.954388][T29393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.960809][T29393] [ 632.960809][T29393] other info that might help us debug this: [ 632.960809][T29393] [ 632.971033][T29393] Chain exists of: [ 632.971033][T29393] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#52 [ 632.971033][T29393] [ 632.984687][T29393] Possible unsafe locking scenario: [ 632.984687][T29393] [ 632.992123][T29393] CPU0 CPU1 [ 632.997473][T29393] ---- ---- [ 633.002822][T29393] lock(&q->q_usage_counter(io)#52); [ 633.008193][T29393] lock(fs_reclaim); [ 633.014682][T29393] lock(&q->q_usage_counter(io)#52); [ 633.022566][T29393] lock(pcpu_alloc_mutex); [ 633.027060][T29393] [ 633.027060][T29393] *** DEADLOCK *** [ 633.027060][T29393] [ 633.035185][T29393] 6 locks held by syz.3.6256/29393: [ 633.040362][T29393] #0: ffffffff8f816b30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 633.048591][T29393] #1: ffffffff8f816948 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 633.057559][T29393] #2: ffff8880259b31d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 633.068956][T29393] #3: ffff8880259b30d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 633.079917][T29393] #4: ffff88802587e938 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 633.090627][T29393] #5: ffff88802587e970 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 633.101591][T29393] [ 633.101591][T29393] stack backtrace: [ 633.107471][T29393] CPU: 1 UID: 0 PID: 29393 Comm: syz.3.6256 Not tainted syzkaller #0 PREEMPT(full) [ 633.107490][T29393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 633.107500][T29393] Call Trace: [ 633.107506][T29393] [ 633.107513][T29393] dump_stack_lvl+0xe8/0x150 [ 633.107535][T29393] print_circular_bug+0x2e1/0x300 [ 633.107562][T29393] check_noncircular+0x12e/0x150 [ 633.107584][T29393] __lock_acquire+0x15a5/0x2cf0 [ 633.107609][T29393] ? pcpu_alloc_noprof+0x26e/0x17b0 [ 633.107624][T29393] lock_acquire+0x106/0x330 [ 633.107638][T29393] ? pcpu_alloc_noprof+0x26e/0x17b0 [ 633.107658][T29393] __mutex_lock+0x19f/0x1300 [ 633.107671][T29393] ? pcpu_alloc_noprof+0x26e/0x17b0 [ 633.107685][T29393] ? stack_depot_save_flags+0x3f3/0x810 [ 633.107708][T29393] ? kasan_save_track+0x4f/0x80 [ 633.107723][T29393] ? kasan_save_track+0x3e/0x80 [ 633.107737][T29393] ? __kmalloc_cache_node_noprof+0x455/0x6d0 [ 633.107752][T29393] ? blk_mq_init_tags+0x83/0x2d0 [ 633.107772][T29393] ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 633.107790][T29393] ? pcpu_alloc_noprof+0x26e/0x17b0 [ 633.107803][T29393] ? nbd_start_device+0x17f/0xb10 [ 633.107822][T29393] ? nbd_genl_connect+0x149d/0x1a90 [ 633.107840][T29393] ? genl_family_rcv_msg_doit+0x22a/0x330 [ 633.107861][T29393] ? genl_rcv_msg+0x61c/0x7a0 [ 633.107880][T29393] ? __pfx___mutex_lock+0x10/0x10 [ 633.107893][T29393] ? ____sys_sendmsg+0x4d7/0x810 [ 633.107908][T29393] ? do_syscall_64+0xe2/0xf80 [ 633.107929][T29393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.107951][T29393] pcpu_alloc_noprof+0x26e/0x17b0 [ 633.107971][T29393] sbitmap_init_node+0x1e1/0x640 [ 633.107990][T29393] sbitmap_queue_init_node+0x3e/0x4d0 [ 633.108008][T29393] blk_mq_init_tags+0x15c/0x2d0 [ 633.108030][T29393] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 633.108048][T29393] ? lockdep_hardirqs_on+0x7a/0x110 [ 633.108070][T29393] ? blk_mq_update_nr_hw_queues+0x977/0x1ae0 [ 633.108089][T29393] ? kfree+0x1be/0x650 [ 633.108108][T29393] ? blk_mq_update_nr_hw_queues+0x931/0x1ae0 [ 633.108129][T29393] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 633.108156][T29393] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 633.108179][T29393] ? sysfs_add_file_mode_ns+0x259/0x300 [ 633.108204][T29393] nbd_start_device+0x17f/0xb10 [ 633.108225][T29393] ? device_create_file+0xf4/0x1b0 [ 633.108246][T29393] nbd_genl_connect+0x149d/0x1a90 [ 633.108269][T29393] ? __pfx_nbd_genl_connect+0x10/0x10 [ 633.108290][T29393] ? rcu_is_watching+0x15/0xb0 [ 633.108310][T29393] ? __nla_parse+0x40/0x60 [ 633.108325][T29393] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 633.108350][T29393] genl_family_rcv_msg_doit+0x22a/0x330 [ 633.108373][T29393] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 633.108398][T29393] ? __lock_acquire+0x6b5/0x2cf0 [ 633.108417][T29393] genl_rcv_msg+0x61c/0x7a0 [ 633.108439][T29393] ? __pfx_genl_rcv_msg+0x10/0x10 [ 633.108458][T29393] ? __pfx_nbd_genl_connect+0x10/0x10 [ 633.108483][T29393] netlink_rcv_skb+0x232/0x4b0 [ 633.108500][T29393] ? __pfx_genl_rcv_msg+0x10/0x10 [ 633.108520][T29393] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 633.108535][T29393] ? genl_rcv+0x19/0x40 [ 633.108565][T29393] ? down_read+0x272/0x2e0 [ 633.108579][T29393] ? genl_rcv+0xd/0x40 [ 633.108598][T29393] genl_rcv+0x28/0x40 [ 633.108616][T29393] netlink_unicast+0x80f/0x9b0 [ 633.108634][T29393] ? __pfx_netlink_unicast+0x10/0x10 [ 633.108650][T29393] ? netlink_sendmsg+0x650/0xb40 [ 633.108665][T29393] ? skb_put+0x11b/0x210 [ 633.108688][T29393] netlink_sendmsg+0x813/0xb40 [ 633.108708][T29393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.108726][T29393] ? aa_sock_msg_perm+0xf1/0x1b0 [ 633.108747][T29393] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 633.108761][T29393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.108779][T29393] __sock_sendmsg+0x21c/0x270 [ 633.108798][T29393] ____sys_sendmsg+0x4d7/0x810 [ 633.108813][T29393] ? __might_fault+0xaf/0x130 [ 633.108836][T29393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 633.108853][T29393] ? import_iovec+0x73/0xa0 [ 633.108870][T29393] ___sys_sendmsg+0x2a5/0x360 [ 633.108884][T29393] ? __lock_acquire+0x6b5/0x2cf0 [ 633.108900][T29393] ? __pfx____sys_sendmsg+0x10/0x10 [ 633.108918][T29393] ? futex_wait+0x29a/0x380 [ 633.108950][T29393] ? __fget_files+0x2a/0x420 [ 633.108968][T29393] ? __fget_files+0x3a0/0x420 [ 633.108990][T29393] __x64_sys_sendmsg+0x1bd/0x2a0 [ 633.109006][T29393] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 633.109025][T29393] ? rcu_is_watching+0x15/0xb0 [ 633.109048][T29393] do_syscall_64+0xe2/0xf80 [ 633.109068][T29393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.109082][T29393] ? trace_irq_disable+0x37/0x100 [ 633.109102][T29393] ? clear_bhb_loop+0x60/0xb0 [ 633.109119][T29393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.109133][T29393] RIP: 0033:0x7f23b899acb9 [ 633.109148][T29393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.109162][T29393] RSP: 002b:00007f23b638f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 633.109178][T29393] RAX: ffffffffffffffda RBX: 00007f23b8c16360 RCX: 00007f23b899acb9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 633.109190][T29393] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 633.109201][T29393] RBP: 00007f23b8a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 633.109212][T29393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.109222][T29393] R13: 00007f23b8c163f8 R14: 00007f23b8c16360 R15: 00007ffe4631a908 [ 633.109240][T29393] [ 633.681144][T29399] netlink: 'syz.4.6258': attribute type 13 has an invalid length. [ 633.690266][T29399] netlink: 'syz.4.6258': attribute type 17 has an invalid length. [ 633.703957][T29399] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 633.715359][ T5832] block nbd3: Receive control failed (result -32) [ 633.722050][ T5832] block nbd3: Receive control failed (result -32) [ 633.731427][ T5832] block nbd3: Receive control failed (result -32) [ 633.732758][T29400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6258'. [ 633.738540][T29399] caif:caif_disconnect_client(): nothing to disconnect [ 633.747107][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 633.747135][ C0] lec:lec_tx_timeout: lec0 [ 633.747936][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 633.773208][T29399] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 633.782005][T29399] chnl_net:chnl_net_open(): state disconnected [ 633.788223][T29399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 633.805917][T29393] nbd3: detected capacity change from 0 to 127 [ 633.825195][T27335] block nbd3: Dead connection, failed to find a fallback [ 633.935737][T27335] block nbd3: shutting down sockets [ 633.955625][T27335] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.035953][T27335] Buffer I/O error on dev nbd3, logical block 0, async page read [ 634.043781][T27335] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.053317][T27335] Buffer I/O error on dev nbd3, logical block 1, async page read [ 634.061409][T27335] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.071239][T27335] Buffer I/O error on dev nbd3, logical block 2, async page read [ 634.079263][T27335] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.206985][T27335] Buffer I/O error on dev nbd3, logical block 3, async page read [ 634.214820][T27335] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.295523][T27335] Buffer I/O error on dev nbd3, logical block 0, async page read [ 634.335661][T27335] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.345173][T27335] Buffer I/O error on dev nbd3, logical block 1, async page read [ 634.357083][ T3857] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.366342][T27335] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.406408][T27335] Buffer I/O error on dev nbd3, logical block 2, async page read [ 634.435947][T27335] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.477569][T27335] Buffer I/O error on dev nbd3, logical block 3, async page read [ 634.509924][T27335] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.542898][T27335] Buffer I/O error on dev nbd3, logical block 0, async page read [ 634.558255][T27335] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 634.577101][T27335] Buffer I/O error on dev nbd3, logical block 1, async page read [ 634.599050][T27335] ldm_validate_partition_table(): Disk read failed. [ 634.622164][T27335] Dev nbd3: unable to read RDB block 0 [ 634.635732][T27335] nbd3: unable to read partition table [ 634.661261][T27335] ldm_validate_partition_table(): Disk read failed. [ 634.661628][T29398] bridge0: port 3(vlan3) entered disabled state [ 634.686668][T27335] Dev nbd3: unable to read RDB block 0 [ 634.692560][T27335] nbd3: unable to read partition table [ 634.734610][T29398] vlan3 (unregistering): left allmulticast mode [ 634.741767][T29398] syz_tun (unregistering): left allmulticast mode [ 634.750648][T29398] vlan3 (unregistering): left promiscuous mode [ 634.757012][T29398] syz_tun (unregistering): left promiscuous mode [ 634.763478][T29398] bridge0: port 3(vlan3) entered disabled state [ 634.780916][ T3857] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.849402][ T3857] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.909890][ T3857] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.034875][ T3857] bridge_slave_1: left allmulticast mode [ 635.040640][ T3857] bridge_slave_1: left promiscuous mode [ 635.046760][ T3857] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.054969][ T3857] bridge_slave_0: left allmulticast mode [ 635.060821][ T3857] bridge_slave_0: left promiscuous mode [ 635.066761][ T3857] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.150583][ T3857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.160853][ T3857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.170875][ T3857] bond0 (unregistering): Released all slaves [ 635.266173][ T3857] bond1 (unregistering): Released all slaves [ 635.564111][ T3857] hsr_slave_0: left promiscuous mode [ 635.570274][ T3857] hsr_slave_1: left promiscuous mode [ 635.576466][ T3857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.583850][ T3857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.592066][ T3857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.599890][ T3857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.609778][ T3857] veth1_macvtap: left promiscuous mode [ 635.615252][ T3857] veth0_macvtap: left promiscuous mode [ 635.719445][ T3857] team0 (unregistering): Port device team_slave_1 removed [ 635.749981][ T3857] team0 (unregistering): Port device team_slave_0 removed [ 636.043997][ T3857] IPVS: stop unused estimator thread 0... [ 636.117408][ T3857] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.200658][ T3857] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.233338][ T3857] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.287694][ T3857] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.388994][ T3857] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.441067][ T3857] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.518367][ T3857] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.554600][ T3857] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.650493][ T3857] macsec0: left allmulticast mode [ 636.655984][ T3857] veth1_macvtap: left allmulticast mode [ 636.661905][ T3857] macsec0: left promiscuous mode [ 636.668027][ T3857] bridge0: port 3(macsec0) entered disabled state [ 636.675326][ T3857] bridge_slave_1: left allmulticast mode [ 636.681037][ T3857] bridge_slave_1: left promiscuous mode [ 636.688973][ T3857] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.697201][ T3857] bridge_slave_0: left allmulticast mode [ 636.702827][ T3857] bridge_slave_0: left promiscuous mode [ 636.709049][ T3857] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.877657][ T3857] bond0 (unregistering): Released all slaves [ 636.972428][ T3857] team0: Port device bond0 removed [ 636.978742][ T3857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.988983][ T3857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.999282][ T3857] bond0 (unregistering): Released all slaves [ 637.627818][ T3857] hsr_slave_0: left promiscuous mode [ 637.633748][ T3857] hsr_slave_1: left promiscuous mode [ 637.647953][ T3857] hsr_slave_0: left promiscuous mode [ 637.653645][ T3857] hsr_slave_1: left promiscuous mode [ 637.659400][ T3857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.667349][ T3857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.680292][ T3857] veth1_macvtap: left promiscuous mode [ 637.685846][ T3857] veth0_macvtap: left promiscuous mode [ 637.691352][ T3857] veth1_vlan: left promiscuous mode [ 637.696772][ T3857] veth0_vlan: left promiscuous mode [ 637.702508][ T3857] veth1_macvtap: left promiscuous mode [ 637.708553][ T3857] veth0_macvtap: left promiscuous mode [ 637.714069][ T3857] veth1_vlan: left promiscuous mode [ 637.719438][ T3857] veth0_vlan: left promiscuous mode [ 638.102009][ T3857] team0 (unregistering): Port device team_slave_1 removed [ 638.126201][ T3857] team0 (unregistering): Port device team_slave_0 removed [ 638.785854][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 638.793885][ C0] lec:lec_tx_timeout: lec0 [ 638.798697][ C0] lec:lec_start_xmit: lec0:No lecd attached