last executing test programs: 10m4.486616427s ago: executing program 3 (id=5620): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010500c3f0541f"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) 10m4.01435499s ago: executing program 3 (id=5629): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000002000e400000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2f, 0x2000, 0x0, &(0x7f0000000140)="e0b9547ed387dbe9abc89b6f5b2e", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) 10m3.908834674s ago: executing program 3 (id=5632): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="2fae1baf930b4569b9ddef9797a6d935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b", 0x15}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x4000804) 9m54.811307163s ago: executing program 3 (id=5634): r0 = socket$inet(0x2, 0xa, 0x8) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x2799, @broadcast}, {0x2, 0x4e20, @loopback}, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x300000fdff, 0x5}) 9m54.676557487s ago: executing program 3 (id=5715): r0 = socket(0x1e, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r4, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x4c, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000000}, 0x40044) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000141}, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r6) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000480)={0x0, 'veth0_to_hsr\x00', {0x2}, 0x51}) write$tun(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000e88a800008100007eab91b32dd80cffd20adf8cf828782802010045fc006953d778f6c9a77f00"], 0x32) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r11, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x20, 0x0, 0x0, 0x2}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 9m53.474900407s ago: executing program 3 (id=5719): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket(0x10, 0x803, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="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", 0x6fa}], 0x1}, 0x40004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31}, &(0x7f0000000780)=0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100037040400"/20, @ANYRES32=r2, @ANYBLOB="830405000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x1d}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x5, 0x5, 0x40, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x40, 0xf376, 0x1c}}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000840)="27a21dd7d06459815a0d702b2a0a21288fab8a7c0770631577c7b9f39a927bc37564eb2508416fc7ec287a634725d8444f09e509000000000001007a5a8b6f27421785f6aa818dac49f641a87af75de09dc7eb96fc628b39dfa3050262d72fd1bf92fae5f66ce6787a70d5900455de59a71564ac4f67001818b5318a9a4bee1786acd6bca0ef7166e2", &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9m38.423500608s ago: executing program 32 (id=5719): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket(0x10, 0x803, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="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", 0x6fa}], 0x1}, 0x40004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31}, &(0x7f0000000780)=0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100037040400"/20, @ANYRES32=r2, @ANYBLOB="830405000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x1d}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x5, 0x5, 0x40, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x40, 0xf376, 0x1c}}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000840)="27a21dd7d06459815a0d702b2a0a21288fab8a7c0770631577c7b9f39a927bc37564eb2508416fc7ec287a634725d8444f09e509000000000001007a5a8b6f27421785f6aa818dac49f641a87af75de09dc7eb96fc628b39dfa3050262d72fd1bf92fae5f66ce6787a70d5900455de59a71564ac4f67001818b5318a9a4bee1786acd6bca0ef7166e2", &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.576113016s ago: executing program 4 (id=10126): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000240)=ANY=[], 0x12f4}}, 0x4000004) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f00000001c0)=""/254, 0xfe}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x100000f2}, 0x40002162) 9.456060572s ago: executing program 4 (id=10128): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={r3, 0x4}, 0x8) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000100)="93d904000003", 0x6}, {&(0x7f0000000240)='\x00\x00\x00\x00\x00\x00\x00', 0x7}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000002000010000008000fcdbdf250a808004000000030600000014000200fc02df000000000000000000000000011400010020010000000000b12e00000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c020280140003002001000000000000000000000000200114000200fc020000007478604f509c2d4cf181fa"], 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nfc_raw(0x27, 0xa9572e2bd7978dc7, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r6, 0x40406f06, &(0x7f0000000280)={0xffffffff00000001, 0x1, 0xfffffffffffffffc, 0x2, 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x5, 0x0) unshare(0x24020400) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00', 0x4}, {0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xe}, 0xffffffffffffffff, {[0x1, 0x8, 0x2, 0x9, 0x7, 0x9, 0x6, 0x7fffffff]}}, 0x5c) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) r10 = socket(0x1, 0x2, 0xc9a5) setsockopt$bt_BT_POWER(r10, 0x11b, 0x9, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000500)=0xffff0080) ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000000)=0x8) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r5], 0x38}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000670000000600000069a0fcff0000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x0, 0xc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000300)={'tunl0\x00', r11, 0x10, 0x1, 0x2, 0x9, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x66, 0x0, 0xea, 0x2d, 0x0, @broadcast, @multicast2}}}}) socket$packet(0x11, 0x2, 0x300) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 9.031846961s ago: executing program 0 (id=10135): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffe, 0x0, 0x8, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0xd, 0x2, 0x75, 0x1}}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/123, 0x7b}], 0x1}, 0xd2c9}], 0x1, 0x40000122, 0x0) close(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x3c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="00000000c5c91c8f9b36e5ca7995a1e96f41ca77d7ada19952ca324655f9681fa534b68bb672916531ba2373626780823034371fcd181b45e9af40f8513549a70f03094cd416dbdf765d1dd60898414c32865dd13a3db3bc9be2cd42686fd426d81144508a7821fb3547b05eb88726f80cad029210da8069657ab6883901942db4ca471e89189601d977afab2e43edc39ea8471f966739fbcbaedea3ee189aed9b97dbd4057dc4a96edecc520adb9a1bb851ce838ee7874a86266b184c5c7fa7923fddf0376e6d7e1f46b252c473df16874d88854af09514281c3c407b062f4e40dcad82df4e75bfd9214a5863de26", @ANYRES16=r4, @ANYBLOB="00022bbd7000fddbdf2505000000080034000800000008000600", @ANYRES32=r6, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) 8.824476794s ago: executing program 0 (id=10138): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x54, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ip6erspan0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x7}}, @TCA_FW_MASK={0x8, 0x5, 0x4}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x90) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4) (async) sendmsg$unix(r10, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) (async) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0xc4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x7, 0x0, 0x7, 0x4, 0xffffffffffffd019}}]}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x2, 0x7, 0x4, 0x0, 0x7, 0x49b8}}, {0x4}}]}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map, 0xe, 0x0, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r6, r8, 0x25, 0x10, @val=@netkit={@void, @value=r5, @void, @void, r14}}, 0x1c) (async) r15 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='notify_on_release\x00', 0x2, 0x0) (async) r16 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x11, 0x27, &(0x7f00000012c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf17d}}, @ldst={0x1, 0x3, 0x6, 0x9, 0x1, 0x2, 0xfffffffffffffffc}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xd0}, @jmp={0x5, 0x0, 0xb, 0x0, 0x4, 0xffffffffffffffc0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001400)='GPL\x00', 0xfe, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001480)={0x5, 0xb, 0xfffffffc}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000014c0)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000001500)=[{0x5, 0x2, 0x9, 0xe}, {0x2, 0x2, 0x0, 0xc}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@fallback=r15, r0, 0x6, 0x10, 0x0, @void, @value=r16, @void, @void, r14}, 0x20) (async) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r17, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x68, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0x9}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002e40)={'erspan0\x00', &(0x7f0000002d80)={'syztnl0\x00', 0x0, 0x8000, 0x7829, 0x8, 0x5, {{0x24, 0x4, 0x1, 0x3b, 0x90, 0x65, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @remote, {[@timestamp_prespec={0x44, 0x3c, 0xcd, 0x3, 0x6, [{@multicast2, 0xed31}, {@empty, 0x7876}, {@loopback, 0x9}, {@private=0xa010101, 0x5}, {@local, 0xfffffffa}, {@remote, 0xcfd}, {@local, 0x4}]}, @cipso={0x86, 0x40, 0xffffffffffffffff, [{0x0, 0x10, "2cff61d906b8b695783c3876e3e8"}, {0x0, 0x7, "03562d0773"}, {0x1, 0xd, "328d64057cbe2f211eb626"}, {0x0, 0xe, "a0b3030fd1d417c9c805ac1a"}, {0x6, 0x8, "619b9bd73d20"}]}]}}}}}) 8.587725001s ago: executing program 0 (id=10140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x3f, r2, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5}]}}]}, 0x44}, 0x1, 0xc00e0ff00000000}, 0x0) 8.456008505s ago: executing program 4 (id=10142): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="1000000000000000100100000e0000001000000000000000100100c848e84506"], 0x20}, 0xfc40) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x9, 0x3, 0x2d0, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000200), {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @empty, [0x0, 0x0, 0x0, 0xff000000], [0x9a81deada1fd0089, 0xffffffff], 'macvlan1\x00', 'erspan0\x00', {0xff}, {}, 0x47, 0x8, 0x1, 0x8}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"88e6"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x9, 0x101, 0x1000000, '\x00', 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) pwritev(r5, &(0x7f0000000740)=[{&(0x7f0000000440)="db163b3e32c2778bc3605f8a4169ac4fb4f1b431a0e6406a48d1b617ef900865be352dea000000000000d5941d720a2ff3f653acaff3cf4b62b39940c8945fe565930f32027df0987f791c35648dff904078e85f7cc1f472cc05d2be7ee43514da8f649effe8ca2475f7a6154af2ac8666f1d064335db4ef0698f3d9e4a053f3c122cc1101c678666116d5d901d8483fdb35a98d62f8d6fe55c778a5e2f7ef0ffad4c7e432ef51358070311c1b8a8ac67c05d55249f1d126393d2f20aea945ec986640d9", 0xc4}], 0x1, 0x8001, 0x80) (async) sendfile(r5, r4, 0x0, 0x1) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000080)) (async) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000000c0), 0x12) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x1, 0x0) (async) syz_emit_ethernet(0x52, &(0x7f0000000580)=ANY=[@ANYRESHEX=r4, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800fe9337f160855b4828329f1d69db46c6350f10ec4eeeae5820f8468e5fe1442ac79d220f8a104eb6fb51e8cc2b71f6459700c16c1e92df6a9ebc0240ba936e2ec350a0b1c895a8b61539c3c371"], 0x0) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@allocspi={0xf8, 0x16, 0x800, 0x0, 0x0, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x42}, @in=@dev={0xac, 0x14, 0x14, 0xf}, 0x4e20, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@broadcast, {0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe}, {0x0, 0x4, 0x3}, {0x0, 0x1, 0x80ec}, 0x0, 0x0, 0x2}, 0x5, 0x5}}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0815000000051104060000000000000001000005540201"], 0x1508}}, 0x24000880) (async) r11 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendto$packet(r11, &(0x7f00000001c0)="a3c59b04cbe9b05f4d625f1872ad43aa7439996219", 0x15, 0x20000018, &(0x7f0000000280)={0x11, 0x8, 0x0, 0x1, 0x9, 0x6, @multicast}, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r9, &(0x7f0000000040), 0x2) (async) read(r3, &(0x7f0000000640)=""/199, 0xc7) 8.25102375s ago: executing program 0 (id=10144): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000005c0)=[{&(0x7f00000000c0)="052f", 0x2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x39b3) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x8) recvmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x23, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRESOCT, @ANYBLOB='_'], 0x48) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) sendmsg$NL80211_CMD_VENDOR(r6, 0x0, 0x40) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000001840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001800)={&(0x7f0000000b40)={0xbec, r7, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TX_RATES={0x184, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6, 0x48, 0x48, 0xc, 0x58, 0x30, 0xb, 0x36, 0x6c, 0xf, 0x1, 0x4, 0x60, 0x60, 0x0, 0x60, 0xc, 0x2, 0x6c, 0x2, 0xb, 0x12, 0xb, 0x36, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x800, 0x5, 0x8, 0x3, 0x4, 0x3, 0x92]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x2, 0x0, 0xe, 0x3, 0x6, 0xfff9, 0xe]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x60, 0x1b, 0x5, 0x1b, 0x8, 0x12, 0x12, 0x0, 0x1, 0x48, 0x6, 0x6c, 0x18, 0x16, 0x24, 0x30, 0x6, 0x18, 0xb, 0x4, 0x1b]}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x9, 0x36, 0x6, 0x30, 0x6, 0x30, 0x4, 0x36, 0x18, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x9, 0x5, 0x48, 0x30, 0x0, 0x1b, 0x16, 0x0, 0xb, 0x1, 0x1, 0xc, 0x1b, 0x36, 0x0, 0x6, 0x6c, 0x36, 0x1, 0x60, 0x3, 0x5, 0x18, 0x60, 0x12, 0x24, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x3, 0x6, 0x5, 0x5, 0x1000, 0xf2d1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x90, 0x2, 0x0, 0x3, 0x3, 0x10, 0x6, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8, 0xd, 0xb, 0x6, 0xd, 0x93, 0x1ff]}}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x6, 0x3}, {0x7, 0x3}, {0x0, 0x8}, {0x0, 0x8}, {0x2, 0x8}, {0x1, 0x5}, {0x7, 0xa}, {0x7, 0x6}, {0x2, 0x7}, {0x0, 0x2}, {0x2, 0x7}, {0x3, 0x7}, {0x2, 0x2}, {0x4, 0xa}, {0x1, 0x5}, {0x0, 0x8}, {0x3, 0x8}, {0x6}, {0x6, 0x4}, {0x4, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x2}, {0x7, 0x2}, {0x2, 0x7}, {0x4, 0x3}, {0x0, 0x7}, {0x6, 0x7}, {0x5, 0x6}, {0x1, 0xa}, {0x3, 0x9}, {0x7, 0x4}, {0x4, 0x3}, {0x0, 0x7}, {0x4, 0x9}, {0x6, 0x6}, {0x4, 0x8}, {0x0, 0x5}, {0x3, 0x9}, {0x2}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x2, 0x1}, {0x6, 0xa}, {0x3, 0x5}, {0x6, 0x6}, {0x1, 0x9}, {0x3, 0x7}, {0x1, 0x8}, {0x4, 0x7}, {0x7, 0x5}, {0x4, 0x3}, {0x3, 0x9}, {0x1, 0x5}, {0x2, 0x8}, {0x1, 0x7}, {0x2, 0x2}, {0x0, 0x1}, {0x4, 0x8}, {0x2, 0x2}, {0x3, 0x2}, {0x3, 0x1}, {0x6, 0x8}, {0x2, 0x7}, {0x2, 0x2}, {0x1, 0x4}, {0x6, 0x9}, {0x2, 0xa}, {0x4, 0x5}, {0x4, 0x2}, {0x0, 0x9}, {0x7, 0x6}, {0x7, 0xa}, {0x5, 0x3}, {0x6, 0x1}, {0x0, 0x7}, {0x6}, {0x0, 0x1}, {0x2, 0x9}, {0x3, 0x4}, {0x0, 0x6}, {0x7, 0xa}, {0x1, 0x5}, {0x0, 0x6}, {0x3}, {0x5, 0x2}, {0x2, 0x3}, {0x5}, {0x3, 0x3}, {0x3, 0x3}, {0x3, 0x4}, {0x6}, {0x4}, {0x1, 0x5}, {0x1, 0x3}, {0x6, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x7}, {0x1, 0x9}, {0x7, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x4, 0x2}, {0x1, 0x2}]}]}]}, @NL80211_ATTR_TX_RATES={0x58, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x3}, {0x4, 0x5}, {0x5, 0x8}, {0x2, 0x7}, {0x5, 0x1}, {0x7, 0x5}, {0x2, 0x7}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x3}, {0x2, 0x6}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x5, 0x6c, 0x60, 0x30, 0xc, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x1e4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x2, 0x2, 0x200, 0x1, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x2, 0x1000, 0x9, 0x6, 0x8, 0xffeb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xff, 0x2, 0x98, 0x5, 0x3, 0x1, 0x6]}}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x6, 0x8000, 0x0, 0xa4b, 0x7, 0x4, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x48, 0xb, 0x1, 0x2, 0x9, 0xc, 0x60, 0x5, 0x6, 0x70, 0x5, 0x48, 0x9, 0x18, 0x7a, 0x36, 0x60, 0x67, 0x4, 0x6, 0x30, 0xb, 0x48, 0x4, 0xc, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x10, 0x100, 0x6, 0x3, 0xdb, 0xfffb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x650, 0x100, 0x9, 0x271d, 0x100, 0x4, 0xfffd]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x2, 0x6, 0x5, 0xfff6, 0x1, 0xbf]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x9, 0x12, 0x48, 0x1]}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x60, 0x48, 0xb, 0x18, 0x6, 0x18, 0x2, 0x6c, 0x18, 0x60, 0xb, 0x48, 0x6, 0x18, 0x30, 0xb, 0xc, 0x18, 0x48, 0x60, 0x1, 0x36, 0x9, 0x60, 0x1b, 0x2, 0x18, 0x16, 0xc, 0x5, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x1, 0x2, 0xfff9, 0x3, 0x5, 0xfffa, 0x1]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x0, 0x9}, {0x6, 0x5}, {0x5}, {0x3, 0x2}, {0x2, 0x8}, {0x3, 0x2}, {0x4, 0x8}, {0x6}, {0x0, 0x8}, {0x4, 0x8}, {0x3, 0x6}, {0x6, 0x9}, {0x0, 0xa}, {0x2, 0x9}, {0x2, 0x3}, {0x6, 0x8}, {0x2}, {0x0, 0x8}, {0x7, 0x9}, {0x5, 0x9}, {0x0, 0x1}, {0x1, 0x9}, {0x5, 0x9}, {0x4, 0x2}, {0x4, 0x3}, {0x3, 0x1}, {0x0, 0xa}, {0x7, 0x6}, {0x5, 0x4}, {0x4, 0x7}, {0x7, 0x9}, {0x7, 0x8}, {0x5, 0x5}, {0x6, 0x6}, {0x3, 0x8}, {0x4, 0x9}, {0x1, 0x8}, {0x3, 0xa}, {0x5, 0x6}, {0x0, 0x1}, {0x2, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x3, 0x6, 0x16, 0x36, 0x36, 0x1b, 0x16, 0x18, 0x4, 0x36, 0x1a, 0x3, 0x24, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8001, 0x2, 0x7, 0x9, 0x3ff, 0xc, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x1, 0x0, 0x7, 0x7, 0xc57f, 0x7, 0x4]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x2a4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x400, 0x2, 0x4, 0x1, 0x9, 0x9]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x1, 0x81, 0x9, 0x1000, 0x3, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf03, 0x6ad, 0x0, 0xc00, 0xfe36, 0xa]}}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x7fff, 0x9, 0x5, 0x7b, 0x2, 0x7f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x13f, 0x98, 0x800, 0xffff, 0xa, 0x5, 0x6, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x60, 0x16, 0x5, 0x18, 0x12, 0x1b, 0x48, 0x7410a774d52cab7c, 0x3, 0x2, 0x3, 0x30, 0x1, 0x0, 0xc, 0x2a, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x101, 0xde, 0x5, 0x1, 0x0, 0x5]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x5, 0x6}, {0x3, 0x9}, {0x0, 0x3}, {0x1, 0x6}, {0x7, 0x7}, {0x5, 0x4}, {0x4, 0x3}, {0x3, 0xa}, {0x4, 0x9}, {0x0, 0x5}, {0x0, 0x3}, {0x2, 0x1}, {0x0, 0x8}, {0x4, 0x5}, {0x5, 0x8}, {0x7, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x1, 0x5}, {0x5, 0x3}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x8}, {0x3, 0x3}, {0x4, 0x2}, {0x5, 0x3}, {0x7, 0x7}, {0x2, 0x9}, {0x3, 0x5}, {0x5, 0x9}, {0x4, 0x4}, {0x3, 0x5}, {0x6, 0x4}, {0x4, 0x4}, {0x6, 0x1}, {0x0, 0x6}, {0x1, 0x2}, {0x2, 0x9}, {0x6, 0x5}, {0x0, 0x9}, {0x2, 0x6}, {0x0, 0x9}, {0x2, 0x9}, {0x1, 0x3}, {0x2, 0x6}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x4}, {0x6}, {0x6, 0x9}, {0x6, 0xa}, {0x0, 0x4}, {0x5, 0xa}, {0x2, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0xe5, 0x3, 0x8, 0x200, 0x9]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x6, 0x5, 0x1, 0x8000, 0x1, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x1, 0x80c1, 0x7fff, 0xa949, 0x3, 0xeb17]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x3, 0x9}, {0x7, 0x8}, {0x3, 0x9}, {0x0, 0x7}, {0x2, 0xa}, {0x0, 0x8}, {0x1, 0x9}, {0x3, 0x8}, {0x1, 0x5}, {0x7, 0x8}, {0x5, 0x9}, {0x4, 0x9}, {0x2, 0x9}, {0x0, 0x2}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x6}, {0x4, 0x8}, {}, {0x1, 0x4}, {0x2, 0x9}, {0x3, 0x6}, {0x0, 0x4}, {0x0, 0x1}]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x2, 0x2}, {0x0, 0x3}, {0x1, 0x8}, {0x6, 0x8}, {0x7, 0xa}, {0x7, 0x9}, {0x0, 0x8}, {0x7}, {0x3, 0x7}, {0x2, 0x6}, {0x6, 0x4}, {0x7, 0x5}, {0x0, 0x4}, {0x2, 0xa}, {0x5}, {0x5, 0x1}, {0x7, 0x6}, {0x6, 0xa}, {0x1, 0xa}, {0x4, 0x5}, {0x3, 0x9}, {0x1, 0x6}, {0x6, 0x2}, {0x5}, {0x7}, {0x5, 0x7}, {0x0, 0x8}, {0x4, 0x3}, {0x0, 0x5}, {0x4, 0x1}, {0x4, 0x6}, {0x0, 0xa}, {0x2, 0x3}, {0x1, 0x8}, {0x6, 0x3}, {0x3, 0xa}, {0x0, 0x9}, {0x1, 0xa}, {0x2, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x7}, {0x2, 0x2}, {0x3, 0x2}, {0x4, 0x8}, {0x6, 0x1}, {0x4}, {0x6, 0x2}, {0x3, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x1, 0x9}, {0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x3, 0x5d, 0x88ee, 0x4, 0x6, 0x89e, 0x7]}}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x0, 0x3, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x7, 0x0, 0xe801, 0x0, 0x4, 0x51d, 0x8]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x9, 0x16, 0x6c, 0x18, 0x4, 0x12, 0x4, 0x24, 0x1b, 0x12, 0x5, 0x2, 0x3, 0x2, 0x24, 0x4, 0x3, 0xb, 0x18, 0x60]}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x2}, {0x1, 0xa}, {0x4, 0x9}, {0x7, 0x6}, {0x5, 0x8}, {0x5}, {0x4, 0xa}, {0x0, 0x6}, {0x0, 0x4}, {0x5}, {0x6, 0x6}, {0x7, 0x5}, {0x3, 0x1}, {0x1, 0xa}, {0x3, 0x4}, {0x1}, {0x7, 0x2}, {0x1}, {0x1, 0x9}, {0x5, 0x7}, {0x3, 0x7}, {0x5, 0x2}, {0x2, 0x5}, {0x6, 0x2}, {0x2, 0x5}, {0x4, 0x1}, {0x7, 0x3}, {0x0, 0x6}, {0x1}, {0x4, 0x6}, {0x7, 0x8}, {0x6, 0x2}, {0x0, 0x2}, {0x6, 0x1}, {0x1, 0x2}, {0x2, 0x8}, {0x7, 0x7}, {}, {0x1, 0x5}, {0x6, 0x4}, {0x7, 0x3}, {0x0, 0x4}, {0x7, 0x4}, {0x6, 0x7}, {0x1, 0x9}, {0x0, 0x5}, {0x7}, {0x5, 0x6}, {0x7, 0x1}, {0x6, 0x2}, {0x7, 0x2}, {0x5, 0x8}, {0x1, 0x5}, {0x2, 0x3}, {0x2, 0x2}, {0x5, 0x8}, {0x6, 0x1}, {0x2, 0x9}, {0x1, 0x1}, {0x2, 0x9}, {0x4, 0x1}, {0x1, 0x4}, {0x2, 0x2}, {0x0, 0x6}, {0x1, 0x3}, {0x7, 0x6}, {0x4, 0x5}, {0x3, 0x1}, {0x6, 0x9}, {0x4}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x36, 0x6c, 0x7, 0xf, 0xb, 0x30, 0x16, 0x2a, 0x6c, 0x16, 0x30, 0x6, 0x3, 0x13, 0x9, 0x2, 0x4, 0x1b, 0x3, 0x30, 0x36, 0x18, 0x4, 0x9, 0x1, 0xc, 0x60, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x4, 0x1b, 0xc, 0x60, 0x4, 0x6c, 0x0]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x18, 0x12, 0xf, 0x9, 0x16, 0x6c, 0x3, 0x12, 0x64, 0x1b, 0x1, 0xc, 0x12, 0xd, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x74, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x4, 0xb, 0x12, 0x30, 0xb, 0x48, 0x16, 0x18, 0xb, 0x24, 0x9, 0x32, 0x9, 0x1b, 0x30, 0xbff8f818793269, 0x16, 0x30, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x7f, 0x8, 0x2, 0x7, 0x7, 0x5c, 0xfff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x60, 0x1c, 0x6, 0x16, 0x6, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0xff, 0xffff, 0x6, 0x2, 0xfffc]}}]}]}, @NL80211_ATTR_TX_RATES={0x274, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x8, 0x9, 0x20, 0x200, 0x6, 0x1]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x4, 0x4}, {0x2, 0xa}, {0x2, 0x7}, {0x4, 0x5}, {0x6, 0x5}, {0x5, 0x4}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0x3}, {0x2, 0x2}, {0x0, 0x6}, {0x2, 0x2}, {}, {0x1, 0x2}, {0x1, 0xa}, {0x0, 0x4}, {0x1, 0x9}, {0x3, 0x3}, {0x1, 0x9}, {0x5}, {0x3, 0x2}, {0x5, 0x1}, {0x4, 0x5}, {0x0, 0x3}, {0x6}, {0x4, 0x9}, {0x2, 0x1}, {}, {0x7, 0x8}, {0x0, 0x8}, {0x0, 0x1}, {0x0, 0x5}, {}, {0x1, 0x8}, {0x7, 0x9}, {0x0, 0x4}, {0x1, 0x9}, {0x4, 0xa}, {0x4, 0x9}, {0x1, 0x2}, {0x1, 0x5}, {0x2, 0x9}, {0x1, 0x9}, {0x4, 0x9}, {0x4, 0xa}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x7}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfd, 0x7e16, 0x1, 0x187, 0x1, 0x80, 0x5, 0xfff]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x3, 0x7}, {0x4, 0x4}, {0x4, 0x4}, {0x0, 0x5}, {0x1, 0x1}, {0x2}, {0x1, 0x8}, {0x0, 0x4}, {0x3}, {0x3, 0x3}, {0x7, 0x5}, {0x5, 0x4}, {0x7, 0x5}, {0x3, 0x7}, {0x7, 0x2}, {0x7}, {0x7, 0x8}, {0x0, 0x8}, {0x7}, {0x3}, {0x7, 0x1}, {0x1, 0xa}, {0x7, 0x9}, {0x5}, {0x6, 0x9}, {0x0, 0xa}, {0x1, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x8, 0x9, 0x9, 0x9, 0x100, 0x5, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x9, 0x8, 0x7, 0x1, 0x9, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfa63, 0xff72, 0x4, 0xb, 0x1, 0x6, 0xfff8]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3cc9, 0xd55, 0xfffb, 0x8840, 0x9, 0xe59d, 0x81, 0x40]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x8}, {0x2, 0x4}, {0x3}, {0x0, 0x9}, {0x3, 0x5}, {0x0, 0x1}, {0x1, 0x3}, {0x3}, {0x7, 0xa}, {0x0, 0x6}]}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x5db5, 0x3, 0x9, 0x2, 0x4, 0x8, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x4, 0xa}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x18, 0xc, 0x12, 0x3, 0x18, 0x0, 0x9, 0x30, 0x6c, 0x6c, 0x12]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x2, 0x2}, {0x5, 0xa}, {0x7, 0x9}, {0x6, 0x6}, {0x5, 0x6}, {0x1, 0xa}, {0x5, 0x4}, {0x4, 0x2}, {0x0, 0x7}, {0x1, 0x7}, {0x2, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x0, 0x8}, {0x6, 0x1}, {0x2, 0xa}, {0x7, 0x2}, {0x4, 0x5}, {0x5, 0x6}, {0x2, 0x5}, {0x2, 0xa}, {0x1, 0x6}, {0x2, 0x4}, {0x1, 0x1}, {0x2, 0x7}, {0x0, 0x8}, {0x3, 0x2}, {0x5, 0x5}, {0x2, 0x4}, {0x6, 0x5}, {0x5, 0x2}, {0x1, 0x1}, {0x6, 0x9}, {0x2, 0x4}, {0x2, 0x4}, {}, {0x5, 0x9}, {0x7}, {0x4, 0x3}, {0x0, 0x9}, {0x4}, {0x6, 0xa}, {0x4, 0x1}, {0x6, 0x8}, {0x1, 0x6}, {0x4, 0x7}, {0x5, 0x5}, {0x4}, {0x3, 0x7}, {0x1, 0x4}, {0x6, 0x6}, {0x1, 0x2}, {0x4}, {0x0, 0xa}, {0x4, 0x8}]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb6, 0x8, 0x5, 0x9, 0x1, 0x9, 0x3, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x3ff, 0xa, 0xd7f8, 0x1, 0xd7f1, 0x800]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xb, 0xc, 0x18, 0x18, 0x6c, 0x48, 0x1b, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x200, 0x6, 0x4, 0xfffb, 0xe, 0xc, 0xbb09]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0x10, 0xe68, 0xf, 0x2, 0x10, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8, 0xfffc, 0x31b, 0x1, 0xfff8, 0x7, 0x4]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x9, 0x6, 0x4, 0x12, 0x36, 0x5, 0xc, 0x6c, 0x3, 0x18, 0x3d, 0x5, 0x4, 0x4, 0x50c9a4f111964670, 0xc, 0x18, 0x12, 0xc, 0x60, 0x1, 0x12, 0x1e, 0x16, 0x4, 0xb, 0x18, 0x9, 0x48]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x16, 0x9, 0x3, 0x3, 0xb, 0x72, 0x24, 0x5]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x158, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0x6, 0x2, 0x0, 0x2, 0xd, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x4, 0x8}, {0x1, 0x3}, {}, {0x7, 0x6}, {0x0, 0x8}, {0x2, 0x5}, {0x4, 0x1}, {0x0, 0x9}, {0x1, 0x9}, {0x1, 0x1}, {0x6, 0x4}, {0x6, 0x8}, {}, {0x5, 0x4}, {0x2, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x6, 0x3}, {0x2, 0x7}, {0x3, 0x5}, {0x0, 0x5}, {0x1, 0x5}, {0x0, 0xa}, {0x3, 0x4}, {0x7, 0x7}, {0x0, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x6, 0x8}, {0x0, 0x1}, {0x7, 0x4}, {0x0, 0x6}, {0x6}, {0x0, 0x5}, {0x6, 0x8}, {0x0, 0xa}, {0x1, 0x8}, {0x4, 0x2}, {0x6, 0x9}, {0x2, 0x1}, {0x1, 0x4}, {}, {0x1}, {0x6}, {0x7, 0x8}, {0x2, 0x7}, {0x4, 0x2}, {0x2, 0xa}, {0x5, 0x1}, {0x1, 0x9}, {0x1}, {0x0, 0x3}, {0x3, 0x6}, {0x1}, {0x2, 0x1}, {0x6, 0x9}, {0x2, 0x5}, {0x5, 0x6}, {0x1, 0x3}, {0x0, 0x8}, {0x7, 0x7}, {0x2, 0x2}, {0x1, 0x7}, {0x1, 0x1}, {0x6, 0x7}, {0x4}, {0x4, 0x7}, {0x3, 0x1}, {0x5, 0x4}, {0x0, 0x7}, {0x3, 0x1}, {0x3, 0x7}, {0x0, 0x3}, {0x5, 0x2}, {0x4, 0x3}, {0x4, 0x5}, {0x6, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0x60, 0x5, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x5, 0xb, 0x2, 0x2c, 0xb, 0xb, 0x60, 0x0, 0x4, 0xb, 0x16, 0x6, 0x24, 0xc, 0x4, 0x24, 0x4, 0xb, 0xb, 0x48, 0x1, 0x6, 0xb, 0x36, 0x60, 0x16, 0x1b, 0x2, 0x16, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x80, 0x5, 0x0, 0x9, 0x4, 0x976]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1, 0x2, 0x3, 0x5, 0x24, 0x1b, 0xc, 0x3, 0x4, 0x0, 0x18, 0x36, 0x0, 0x6, 0x6c, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3ff, 0x7, 0x6, 0x1, 0x2, 0x2, 0x7]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_ATTR_TX_RATES={0xd0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc614, 0x8, 0xcd, 0x7, 0xff, 0x0, 0x8b, 0x3]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x18, 0x9, 0x12, 0x16, 0x12, 0x24, 0x6c, 0x36, 0x24, 0x26, 0x9, 0x10]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x4, 0x5}, {0x5, 0x3}, {0x4, 0x5}, {0x4, 0x5}, {0x0, 0xa}, {0x4, 0xa}, {0x1, 0x7}, {0x6}, {0x6, 0x4}, {0x1}, {0x2, 0x2}, {0x3, 0x4}, {0x2}, {0x0, 0x4}, {0x2, 0x2}, {0x0, 0x1e}, {0x0, 0x2}, {0x7, 0x1}, {0x1, 0x6}, {0x6, 0x9}, {0x0, 0x1}, {0x4, 0x9}, {0x3, 0x4}, {0x5, 0x5}, {0x5, 0x7}, {0x0, 0x4}, {0x0, 0x9}, {0x0, 0x2}, {0x1, 0x3}, {0x1, 0x2}, {0x1, 0x5}, {0x3, 0xa}, {0x5, 0xa}, {0x4, 0x8}, {0x4, 0x2}, {0x5, 0xa}, {0x5, 0x6}, {0x2, 0xa}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0x1}, {0x4, 0x6}, {}, {0x4}, {0x4}, {0x6, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x0, 0xa}, {0x0, 0x6}, {0x6}, {0x4, 0x7}, {0x2, 0x4}]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xfffa, 0x2, 0x4, 0x0, 0x4ed9, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0xe}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1, 0xb, 0x8, 0x7, 0x905, 0xb3, 0xf869]}}]}]}, @NL80211_ATTR_TX_RATES={0x58, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x2e3d, 0x3, 0x2, 0x5, 0x7, 0xa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x4c8c, 0x6, 0x360f, 0x9, 0x5, 0x7fff, 0x200]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x8, 0x2, 0x1000, 0xa, 0x0, 0x1, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0xbec}, 0x1, 0x0, 0x0, 0x4000}, 0x8014) 8.245898756s ago: executing program 4 (id=10145): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x25, &(0x7f0000000000)={0x200, 0x0, 0x4bb8, 0x965f, 0x8}, 0x14) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.238822628s ago: executing program 1 (id=10146): r0 = socket(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x9}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4090}, 0x20000040) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000040)=0x4a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000640)={0x64, r5, 0x1, 0x21, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x77}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x44, 0xe, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @prep={0x83, 0x1f, {{}, 0x7, 0x4, @device_a, 0x4, @void, 0x8, 0x72000, @device_a, 0x9}}, @ht={0x2d, 0x1a, {0x80, 0x2, 0x2, 0x0, {0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x8, 0x0, 0x9}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x4014080) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 8.087644985s ago: executing program 4 (id=10148): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200004) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e00000004000000ffffffff0400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f11b01c212f0b3e57e65f223d6f87f0b00009300"/42], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) socket$vsock_stream(0x28, 0x1, 0x0) 7.80011659s ago: executing program 1 (id=10150): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000000000500000000", @ANYRES32=r2, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 7.793106492s ago: executing program 0 (id=10151): write$tun(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x895ea99b3adb260d, r2, 0x1, 0x7, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x882100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000040420f00b7030000162e9e798500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000400}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8880) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe, 0x0, &(0x7f0000001780)="000000000000000002b2138373ef", 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x80) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r12, 0x0, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="021d00000000000002004e1fe000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000800000000002300000000000000000000000000000000000000000000000001000000010000"], 0x110) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newqdisc={0x180, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0xe, 0x9}, {0xfffd, 0x2}, {0xffff, 0xa}}, [@TCA_STAB={0x15c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x6, 0x3, 0x6, 0x1, 0x1, 0x81, 0x1}}, {0x6, 0x2, [0x4d0]}}, {{0x1c, 0x1, {0x8, 0xc5, 0xba, 0x4, 0x1, 0x2, 0x5, 0x3}}, {0xa, 0x2, [0x9580, 0x200, 0x6]}}, {{0x1c, 0x1, {0x3, 0x3, 0xaaf, 0x1, 0x0, 0x7, 0xffff, 0xa}}, {0x18, 0x2, [0x0, 0x8, 0x6, 0xd, 0x60, 0x400, 0x8, 0x81, 0x401, 0xb]}}, {{0x1c, 0x1, {0x7, 0xe, 0x7, 0x2, 0x2, 0x40, 0x6, 0x6}}, {0x10, 0x2, [0x3, 0xfffc, 0x4, 0xc5, 0x10, 0x6]}}, {{0x1c, 0x1, {0x7, 0x3, 0x3, 0x69, 0x1, 0x6, 0x4, 0x6}}, {0x10, 0x2, [0x78c, 0x3, 0x8, 0xc00, 0x5, 0x1]}}, {{0x1c, 0x1, {0xb, 0x6, 0x4, 0x8000, 0x1, 0x2c, 0x8, 0x3}}, {0xa, 0x2, [0x7f, 0x3, 0xf616]}}, {{0x1c, 0x1, {0x66, 0xff, 0x5, 0x5, 0x1, 0x7, 0x8, 0x5}}, {0xe, 0x2, [0x3, 0x3, 0x0, 0xfff, 0x5]}}, {{0x1c, 0x1, {0xcb, 0x32, 0x3, 0x7, 0x0, 0x22, 0x4, 0x6}}, {0x10, 0x2, [0x1, 0x401, 0xbb9, 0x0, 0x8001, 0x9]}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x240040e0}, 0xc040) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd84, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001050000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.590823972s ago: executing program 2 (id=10152): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x88f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x520, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) 7.440197724s ago: executing program 2 (id=10153): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x24, 0x26, 0x29, 0x70bd2d, 0xfffffff9, {0x11}, [@typed={0xe, 0x15e, 0x0, 0x0, @binary="8b178a8707971bf8b3c6"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c811}, 0x48054) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000001580)=ANY=[@ANYBLOB="1800000000100000000000000000000062012c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x5800, 0x0, 0x0, 0x3}, 0x22) 7.183492467s ago: executing program 2 (id=10154): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='^}]{\xea-\x00', 0x600000, &(0x7f0000000040)={@align, {0x0, 0x2, 0x5, 0x3}}, 0x6dc4530c, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x525b}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="fff828bd7000ffdbdf250f00000086634b72554ce11429607afaeda8db8c7e385b4e2e391c322c1d"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x2020) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x7, 0x7800, 0xfff, 0x9, {{0xb, 0x4, 0x1, 0x30, 0x2c, 0x67, 0x0, 0x9, 0x4, 0x0, @broadcast, @private=0xa010101, {[@noop, @generic={0x86, 0x8, "e70911c44334"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x4, 0x21, 0x3, 0x5}, @generic={0x25e32d0156a3854e, 0x5, "0fbd35"}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan0\x00'}) socket$inet(0x10, 0x3, 0x0) (async) socket$inet(0x10, 0x3, 0x0) 4.905065351s ago: executing program 5 (id=10155): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000002800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000004680)=ANY=[@ANYBLOB="0c0f0000", @ANYRES16=r2, @ANYRESDEC=r0, @ANYRES32=r3, @ANYBLOB="0c00990000000000610000001c011d800c00008005000c00000000003000008005000c000100000006000500850000000c000300080000000000000005000800120000000600050002000000dc00008005000600000000008c000d803c000380050007000200000005000700010000000500070002000000140003000e0003000300b57b09000100070005000b000100050916540b0c53004c0003800e000100366c0b0343241630300300000500060002000000140005006a31cc18810000020100010001001e041a0001000609ad60161f360316486005240102013204246c0b01000005000a000000000005000b000100000005000c00020000000c0003000900000000000000050006000100000005000c00020000000500060001000000050007007000000004001d8004001d8030001d8020000080060005001400000005000900010000000c000300ddfa0000000000000c00008005000b0000000000a0041d80280000800c000300090000000000000005000b000000000005000700fa00000005000a000000000004000080240000800500060000000000050007008f00000005000700c600000005000b00010000003c00008005000a000000000005000b00010000000c0003000900000000000000060005008f00000005000a00010000000c000300020000000000000028000080050006000000000005000a000000000005000900000000000c000200fbffffffffffffff0c00008005000700220000006c00008005000a000100000005000b000000000005000800d90000fb040007004100000005000a000000000028000d802400028005000600010000000500040000000000060002003c540000050004000000000005000b0001000000060005006800000005000700fb0000002c00008005000c0000000000060005008600000005000800a000000005000a000000000006000500c40000000c0300800400040018020d801400018005000400000000000500070001000000b000018005000600010000003d000200513b4824490b0f484b3110333a144e57300714461c0102080f22022133093215370f1a1b0c0557013d572b1e391e36192d31323b522e2b273e0000001400030000000004db01030000000e001c020100050006000200000014000100481605606c24601b0192183030126c6c240001000b0002090230020c0601480930161b0336360348360b48090148050b121b054805000600020000000500070001000000800001800d00020044281a51392023191200000005000700000000000b00010005301218001b01000f0002002748180f1f2f2e05424147002c000200261d15002d032e0f192e27343a15184801493543134e4007402402432a0e19114657173052093b2e1900010006480c056c0605241b161206050b091b6c04160b090000001c0002801600010060180c48030c0402030b300b186c3724180900001c0002800500040002000000050007000000000005000400000000003000008005000700020000000500040001000000140005007e000000da00a307f4ffd5c60000050006000200391a0000680002803000020054044b053c271015460816220638141d4147115434392d35464e2430203a2a0f4d092006290c460f1532435705000400020000002c0002000910284b01210401513117463726483e362c0e3c0b094e512e45013a364501214336354323264920d0000d800c00028005000700020000001c000180050007000000000005000600010000000500040002000000a400038014000300d200c3cd0100080000001300000000004500020052441743385240323c4d46472b38451110003229310e310700514a4f101d21244849303e4b2b29514b53404b4f410a311a1e11014d4e2e543321272a0a320c4e240000001400050007000200e088b8008100f7ff0600000014000500f9ff0300e17a0100030003000100090014000300ff0f090000000200f80b0700f6ff0700050004000000000005000700bf00000005000c00020000000c00020000000100000000003800008005000c00010000000500090001000000050008002100000005000b000000000005000b00010000000c000200040000000000000044021d800c00008005000b00000000003800008005000800a0000000050009000000000005000c00020000000c000300080000000000000005000a000100000005000600010000001400008006000500d100000005000c00030000000d80800002800c0002003246304c20404152140005000500ff0f0600a60078060b0002000f0223000200083c2a171c2e3a471d0c53442b520a4729444c19303907223f292d321b52310014000300ffff810003000700ffff010100000800230001001b0109600530121102066001244818066c24010460055c026609240a06121b004800008005000700000000001400050006000000018003000d002cee253aff030a00010000090603036c0000050007000200000014000500020005000500050000010700ff000020780003804d0002001e4825184f364f553d083846091045514b2726543f19110a163a404f042114574852064f481946283a003310392f45310611300b25033e11283801282b4e4f3a9c1646142a140b2a0a000000140005000000400000004000c7090900640003000f000100360c0216031b3004121c09007c00018005000400020000000500040002000000050004000000000005000700020000000500060000000000140005001000c20c010407007fff0400ea000300140003000900050008000800090080000300186c14000300ff7f0000030000000600ff0007000900140005000200150e900a0100050007002129000205000b00000000000400008018000080050009000000000005000700bc0000000400040088041d80600000800c0002009a3a00000000000005000700d60000000c000200ff7f0000000000000500090001000000060005003200000005000800c900000005000c00010000000000050007001000000005000700d1000000180000800c000200080000000000000005000900010000001400008005000b000100000005000b00000000004400008005000c000200000005000600090000000c000300050000000000000005000c00000000000c00020075f96197ab45ea9ff9fe0c00000000000500090001000000000100800c00030007000000000000000500090001000000d8000d8088000280410002005110340d2a391538521f3900092853562f391d492a4c560e4c1f320c571b390341380b0b161804113031003bbf4d573e082924303126003d0c3f2c20200000001400050004000800010103000800f7ff0600a40105000620020000002200020028213f4c3346201f1e05301f1240470a482208361f2e47144a09352f0c4d00004c0000800b00010024040c0c304301001400050004008100080001000200020004008400140005000500783e0700040004000300010005001400030002000800010404000800faff0800040005000900000000000500090000000000b4020080a8020d80040001808c0000801c0001001601021204603660093005056c0b0005120c660305010c04110001000b090209481830180116040c0b000000140005007f00040005000700f7ffb70cfaff04004400020052353048132549471e05152e11282f542f271f511d5021264a203b3a5135261e180841451555280543235637514423022f2d321f2e0515284023010211054c3d78000080050007000200000005000600010000001e0001000c300924300024013630006703040c0404160316360018164805000005000600010000000500070001000000170001000305010309000b24041602030930481602001600140003000900080004004545ffff09000800fb110500070000000000a8000280050007000200000005000400020000000500010012000000140005000300fcff0700090000040700040001012d0002000d53452c17494712290e51082e53372725272850400e141407043d185522120e3a27231b143b102f0e0000000500060000000000140003002f040400080003000008000009007f000500040002000000140005000800030000100600f9ffff7ffe55ff01100001007a300c020c3609010b0560041800008014000300ff03800005003d010200dc00cdc8080020000380060002001a4400001400030005000100030000020800000007000400840003801b00010024050c24166c0301180204020148300530090409061848002000010005306c6c01026c361b0236042403047f6024360506060604180c0c09150001003616041b030401021b12603018000c603f0000000500060002000000050004000000000005000600010000001400050003000500d2000000070001000600380038000280050006000000000009000100051b2401050000001400030004000c0006007fff7f00100009000008040001000500060000000000050008006e00000024021d80200200800c0003007f0000000000000054000d8050000180410002000b372e040118231c33304f30414415011e1941124e44350726530a483721502723100101302d3c94229920c5982ae5070d1151464748265254421240140000000500070002000000040004000500090001000000050006000100000094010d80080001800400010048000080050006000200000005000700020000003300020014244a113c072c410e1a243c331b3754000c42502b4412253d12443506380d53014a35474c46201c273f2146292d1f0044000280140005000a004b050100a000020000000080030022000100000912050b0930091204000b4806361b3e05040c090218366b18164848040000050006000200000050000280140005000d000600fdff80000200fe6a040002000d000100023605000204603630000000140005005dc605003e980100ff07ffff0800050014000500b6680000000008000010fbff09000700600002803100020039491532120c5428043944330b2e530312362f21480f0f1b1a23473b473e0f3e191c2618091a31134f4212205200000005000600020000001f000100306005262424020202051803120960240c0109090c18301b306016004c00038005000400000000003d00020013322c1e4d484d4616184a5050124e29502e541a431d2916071d501d082c4849122118290840522a2929253c540750303d2e264e0b271c39390f000004000400050008003500000005000b0001000000000000000000000000000000000000007ab5c1d463e7d76518a963931bbd1b2ed4a58a50ae84623824d7eecc1f6fdfae735152d462fa8a2fe52c17d963d37b36795356ae9edf"], 0xf0c}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0)=r4, 0x4) listen(r5, 0x0) close(r5) sendmmsg$alg(r1, &(0x7f00000036c0)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)="16a0469ad090b59068bd2a0ecae601d07e854a1670f53a2400f4ec84d17d59bcbf5591a9c0e043f60c7855dc4785da61", 0x30}], 0x1, 0x0, 0x0, 0x20000}], 0x1, 0x8881) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'bond_slave_1\x00', {0x2, 0x4e23, @multicast1}}) sendmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 4.772257987s ago: executing program 5 (id=10156): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x260, 0xffffff7a, 0xffffffff, 0x260, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x190, 0x0, {0x4800}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a54f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000300000000a1602a6800", 0x80, 0x3, {0x4}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x1, 0x3, 0x1, 0x2, 0x4], 0x6}, {0x4, [0x6, 0x4, 0x3, 0x3, 0x1], 0x4, 0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="50c338e088a8", 0x6, 0x8, [0x31, 0xc, 0x2a, 0x39, 0xa, 0x24, 0x6, 0x4, 0x18, 0x2f, 0x2c, 0x2e, 0x2, 0x3a, 0x2a, 0xd], 0x2, 0x80000000, 0x40}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) 4.713440085s ago: executing program 5 (id=10157): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x6720f15ce8555866) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) accept4(r3, 0x0, 0x0, 0x80000) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000000201010200000000000000000a0000073c0002800c00028005000100210000002c00018014620300fc01000000000000000000000000000114000400fe8000000000000000000000000000aa"], 0x50}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) (async) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="96c0", @ANYRES16=r7, @ANYBLOB="010029bd7000fcdbdf250300000008000100000000000c0008000010000000000000"], 0x28}}, 0x40000) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000840)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000800000000fedbdf251700000008000300", @ANYRES32=r9, @ANYBLOB="3000308014000400403a050c5baee2004ef2b6d713459a7a100001800800090000000000040003800500020000000000c24e85e04cf859be801287ccb31c6b75208f0b2764f9003105fa78dbe34e8644a20b7210dce304278e9f8f6424bf26ba9887734dddba41982a7df4ba654d6eff8cecc0394f0b309a28251e4930e15f414b92b19db9040d61ed7f5eb1682470436fed294e821e44f2fd865938b06985732074218be3b1a4197d1ef732"], 0x4c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r5, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000980)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100af460000fcdbdf25160000000c00060002000000020000000c000600020000000000000008000300", @ANYRES32=r9, @ANYBLOB="7d11642dc8f2c301c7c41e", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c0006000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40011}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000018b3bfba5373f1dcdaff00000a800000ff0300060000000014000100200100000000000000000000000000005320d752c67de4dd42ad5942a0dd993bb82199addc41b9b064921bcc70979458d8447f31b9d70cf085850f65dedcefe9d8491a724c35ef0ae9354f53dbbd808da3bc14ee868b36de22553593e58e4834a362bdbf26f31976634d7c69553f1787a9b3aefafbff02b9d7c95cf538da92ccdeacc0fa"], 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x125) 3.510701733s ago: executing program 1 (id=10158): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x25, &(0x7f0000000000)={0x200, 0x0, 0x4bb8, 0x965f, 0x8}, 0x14) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.380228259s ago: executing program 2 (id=10159): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x38) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$unix(r1, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0xf0) 3.379588007s ago: executing program 1 (id=10160): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="021d00000000000002004e1fe000000200000000000000110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000800000000002300000000000000000000000000000000000000000000000001000000010000"], 0x110) 3.314243887s ago: executing program 5 (id=10161): unshare(0x20000400) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0xc, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'sit0\x00', @random="3f00230c1100"}) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(0xffffffffffffffff, &(0x7f0000006f00)=[{{&(0x7f0000000040)=@caif=@dgm={0x25, 0x0, 0xf2}, 0x80, 0x0}}], 0x1, 0x4000000) r1 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000500)="d753f56517a0d10b901dd1ffcbf46cb16bfcbb82fec8ba61bfe6dd9c56baf9adb7ffff8f94f8e56a8018e6ff489c688e5dd500f7da89480cef400e3f827a0be5340f0c04f639bd10d7a0d527c187caa2aa83bb9ec076083cdab36cab914255d42d6d36e9c75416be146793dafd0ca1dff98a5aab24f2", 0x76}, {&(0x7f0000000580)="81be17d914cdbfce0a694240eb16", 0xe}, {&(0x7f0000000640)="475213826c92040849c172b48dfa450f0df0173054c89288d6795680fab1a6ad191c3c4ac4908cadc34fb8a1700e6a3f4cc5cfb45ce63fc923c8d4262cd6ed13e7bee89ef8183a411cae4bcee4e1a7a2026b04abb898f90d3675087454dca2614064bd0a1e38e7e674c93942d69ce370ec6305df3454765e", 0x78}, {&(0x7f0000000640)}, {&(0x7f0000000940)="fa820a5783867e0c056778b937ee44c50c29bf1ef44964762f20fb8ea638ce2d3917469b4885cabdb6443e95e46001ede1a7bbc970e9ecf2283ae0fe1ba15f80a9fed5d45c6ae495ff0ac494caf929f227172a44bccb5d4ff97385ae70a492129bad7ab703a90fb97479d15e226bd12f684afa6d101e0878a7dbac88b9d155164b656161def360cfe1566f29263d02045158a7", 0x93}, {&(0x7f0000000a00)="f8dbb7be00923bc3334cfe6c951de6bd8b50d6eb8158663d3dd9ed3f057d5bc7e22c9102fe2c7d94145fdf265e1663a6721caa12ce1beac18c07d988802a4624c8a6131772bd06367f5d5083620d56092df9a2b427334e07808d2f5639df6367cabbae49642304378193301d076b01f88b9c3b0d6e9e5d2fa0c8fe1ea9374f1fff0bd5f7b2f6f9fef68f3e691c1b72ec9053e22446516ec026cfc592be54861f0a", 0xa1}, {&(0x7f0000000ac0)="eaf2e6082fbce88f5b13dc289e845c4ec1e4041daf43165d16664b62e0bce8f46fdc349c05b90ff817f538297dc94bb5f683762b0551f87849d172fd57c7b87409655708d651484e49430a79ad654da8d3871201dd445659a5e4dcead895deed5b6562e44ddaa426806944c043a35e735cc00843ff0d006a1827603b91b8bd0dd448ac7cfb5141811a038afca6dbb6ebae231e531922e19d3e372b3165412713550f0701c5157f21da93adb2b7ccaf5dd9e5729331c56c", 0xb7}, {&(0x7f0000000b80)="3eabd1c081782d7db348b8263b4872762a28f7576971981dc57546ebd27ce3d71f5edfca655fd643c58a068ddbe5dd91d64738394cf1a6fec4dee09e3140d520c72b84896118994ec6c39cc93105f77c5ea557f23db5812434bda5122cd4f260f2117c14e22f8aaa69d5b0a9c520b499edca6fe52461ada6cb", 0x79}, {&(0x7f0000000c00)="e2cf160b3e9da0acea47449dbc45583f69", 0x11}, {&(0x7f0000000c40)="563cba0e0bf709edc558f5b8f90418b92cf66bd69f2da6ee28718187432c2e024ec07fd79fa381265f8bd674f2ce6b3d34a20f3d17e321cd649a559bbb7b221bd070f406328f6cf7b47eac649c3cee2a2293744eb7637467f47369648843ff1c2b8c004697963c7c4c0905176e27ddd134a58d6f8aafef14a8a5e02f32017b5a37c9fba8ab03d193bbf122a66640c6ce3e0c", 0x92}], 0xa}, 0x40091) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10101) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048850) r4 = socket$inet6(0xa, 0x3, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@newqdisc={0x70, 0x24, 0xe0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xc, 0x6, 0xe6}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r5, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x8100, r8, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x6, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85ed65da029b6c4387000000d1000000"], &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f00000002c0)) 3.254405948s ago: executing program 4 (id=10162): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1508a1a9b469814b}, 0x8094) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001e008d2a"], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) listen(r1, 0x2) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4400c06d, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000000000000100000d030000000000000003000000000000000000000604000000040000000000001202000000000000005f"], 0x0, 0x4a}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socket$unix(0x1, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newqdisc={0x60, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x2}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x0, 0x5, 0x0, 0xdab, 0x6}, {0x6, 0x0, 0x2924, 0x79a, 0x10}, 0x8, 0x6, 0xb3f}}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x400c840) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 3.124241816s ago: executing program 1 (id=10163): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000, 0xd}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) 3.02637358s ago: executing program 1 (id=10164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[], 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118aa000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x8000000000000006) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x54) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000006c0)={r1, &(0x7f00000001c0)='GPL\x00', 0x13b182, &(0x7f0000000600)={@align=0x8, {0x2, 0x5, 0x120000, 0xd8}}, 0x0, &(0x7f0000000640)={@_ha_fsid}, &(0x7f0000000680)}) write$tcp_congestion(r5, &(0x7f0000000700)='lp\x00', 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r9, 0x701, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$kcm(0x10, 0x2, 0x0) r11 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010000000000fc000000001e0001000000000000000000000000000000000000000000ef"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) write$tun(r10, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000940)={0x14, r7, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40d1}, 0x4000) 2.916310563s ago: executing program 2 (id=10165): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="5c00000013006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000100", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) 160.234707ms ago: executing program 5 (id=10166): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) 141.214119ms ago: executing program 2 (id=10167): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x1000}, 0x800) socket$kcm(0x29, 0x2, 0x0) unshare(0x24020400) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800b406d3495bade010235231b3000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000819601000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0xffffffffffffffcf, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$unix(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1000000}}], 0x14, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000040)="480000001400195a8563e43c12f461560a8447600000000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed5e0000000000000059", 0x49}], 0x1) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x18, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8001}]}], @echo_reply}}}}}, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close(r4) 100.223039ms ago: executing program 0 (id=10168): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) accept4(r3, 0x0, 0x0, 0x80000) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000000201010200000000000000000a0000073c0002800c00028005000100210000002c00018014620300fc01000000000000000000000000000114000400fe8000000000000000000000000000aa"], 0x50}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)}, &(0x7f00000006c0)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="d00dc66bd210deb18e33000008000100008e71e13b00080000100000000000009e102ed3e442ade4fbb0a4ac3c7ca2780a77b68b7e1124d2ceb912b979309bd71436cd978a68c60392c78167b7db24f4f7a09626ce40a794405815a03e9aad30f576fdcec377d311902f104d8d37e16441d4179b613ab1342a7adf6527936e41ee274ecfba7d44b6a283a05ae2568073e4e837cd6772e5d5623c338f644aacea2b48745d93ff200dfe"], 0x28}}, 0x40000) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000840)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000800000000fedbdf251700000008000300", @ANYRES32=r8, @ANYBLOB="3000308014000400403a050c5baee2004ef2b6d713459a7a100001800800090000000000040003800500020000000000c24e85e04cf859be801287ccb31c6b75208f0b2764f9003105fa78dbe34e8644a20b7210dce304278e9f8f6424bf26ba9887734dddba41982a7df4ba654d6eff8cecc0394f0b309a28251e4930e15f414b92b19db9040d61ed7f5eb1682470436fed294e821e44f2fd865938b06985732074218be3b1a4197d1ef732"], 0x4c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x1, 0x46af, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40011}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000018b3bfba5373f1dcdaff00000a800000ff0300060000000014000100200100000000000000000000000000005320d752c67de4dd42ad5942a0dd993bb82199addc41b9b064921bcc70979458d8447f31b9d70cf085850f65dedcefe9d8491a724c35ef0ae9354f53dbbd808da3bc14ee868b36de22553593e58e4834a362bdbf26f31976634d7c69553f1787a9b3aefafbff02b9d7c95cf538da92ccdeacc0fa"], 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x125) 0s ago: executing program 5 (id=10169): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000d00)={0x0, @dev, @local}, &(0x7f0000000d40)=0xc) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000d80)={@dev, 0x0}, &(0x7f0000000dc0)=0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001500)={&(0x7f0000000e00)={0x6dc, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa8500000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffe660}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfab8}}}]}}]}, 0x6dc}, 0x1, 0x0, 0x0, 0x40000c0}, 0x8004) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x10, 0x700, 0x9, 0x4, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x64, 0x0, 0x1, 0x4, 0x0, @multicast2, @private=0xa010102, {[@cipso={0x86, 0xf, 0xffffffffffffffff, [{0x0, 0x9, "a3c3c505155b34"}]}, @generic={0x7, 0x6, "eb56dfbc"}, @rr={0x7, 0x7, 0xc6, [@loopback]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0x71, 0x0, 0x5, [0xccc, 0x0, 0x101, 0x2, 0xffff8385]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200040028bd7000fddbdf2500000000", @ANYRES32=r6, @ANYBLOB="1300000000ba0440"], 0x20}}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c8f022482395afa4d23edfcbea645b57ca15e63c15c46395916e2b388abc3d6ce2316334e8278ad0b0001006e666163637400000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000000c0), 0x12) unshare(0x22020400) pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) unshare(0x30030000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$kcm(0x21, 0x2, 0x2) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r13, 0x84, 0x6e, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}], 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x10b8}, 0xff4c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_generic(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) kernel console output (not intermixed with test programs): ][ T4821] ? __pfx_ref_tracker_free+0x10/0x10 [ 1269.748231][ T4821] netlink_rcv_skb+0x226/0x4a0 [ 1269.748256][ T4821] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1269.748289][ T4821] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1269.748326][ T4821] ? netlink_deliver_tap+0x2e/0x1b0 [ 1269.748348][ T4821] ? netlink_deliver_tap+0x2e/0x1b0 [ 1269.748377][ T4821] netlink_unicast+0x7bb/0x940 [ 1269.748409][ T4821] netlink_sendmsg+0x813/0xb40 [ 1269.748442][ T4821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1269.748470][ T4821] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1269.748501][ T4821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1269.748530][ T4821] sock_sendmsg_nosec+0x13a/0x180 [ 1269.748561][ T4821] ____sys_sendmsg+0x54e/0x850 [ 1269.748589][ T4821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1269.748621][ T4821] ? import_iovec+0x73/0xa0 [ 1269.748646][ T4821] ___sys_sendmsg+0x2a5/0x360 [ 1269.748667][ T4821] ? __lock_acquire+0x683/0x2cf0 [ 1269.748692][ T4821] ? __pfx____sys_sendmsg+0x10/0x10 [ 1269.748749][ T4821] ? __fget_files+0x2a/0x420 [ 1269.748768][ T4821] ? __fget_files+0x3a2/0x420 [ 1269.748798][ T4821] __x64_sys_sendmsg+0x1b1/0x290 [ 1269.748824][ T4821] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1269.748865][ T4821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.748888][ T4821] do_syscall_64+0x174/0x580 [ 1269.748906][ T4821] ? trace_irq_disable+0x3b/0x140 [ 1269.748925][ T4821] ? clear_bhb_loop+0x40/0x90 [ 1269.748950][ T4821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.748971][ T4821] RIP: 0033:0x7f065919de59 [ 1269.748990][ T4821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.749007][ T4821] RSP: 002b:00007f065a0cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1269.749029][ T4821] RAX: ffffffffffffffda RBX: 00007f0659425fa0 RCX: 00007f065919de59 [ 1269.749044][ T4821] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1269.749058][ T4821] RBP: 00007f065a0cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1269.749071][ T4821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1269.749084][ T4821] R13: 00007f0659426038 R14: 00007f0659425fa0 R15: 00007ffc3a69d2d8 [ 1269.749117][ T4821] [ 1270.377437][ T4825] FAULT_INJECTION: forcing a failure. [ 1270.377437][ T4825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1270.390546][ T4825] CPU: 1 UID: 0 PID: 4825 Comm: syz.2.9490 Not tainted syzkaller #0 PREEMPT(full) [ 1270.390570][ T4825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1270.390582][ T4825] Call Trace: [ 1270.390590][ T4825] [ 1270.390599][ T4825] dump_stack_lvl+0xe8/0x150 [ 1270.390627][ T4825] should_fail_ex+0x40c/0x560 [ 1270.390658][ T4825] _copy_from_user+0x2d/0xb0 [ 1270.390680][ T4825] bpf_prog_test_run_skb+0x17c2/0x2230 [ 1270.390731][ T4825] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1270.390753][ T4825] bpf_prog_test_run+0x2c5/0x340 [ 1270.390778][ T4825] __sys_bpf+0xa22/0xd90 [ 1270.390805][ T4825] ? __pfx___sys_bpf+0x10/0x10 [ 1270.390835][ T4825] ? __fget_files+0x2a/0x420 [ 1270.390871][ T4825] ? ksys_write+0x242/0x270 [ 1270.390897][ T4825] ? __pfx_ksys_write+0x10/0x10 [ 1270.390925][ T4825] __x64_sys_bpf+0xba/0xd0 [ 1270.390953][ T4825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.390979][ T4825] do_syscall_64+0x174/0x580 [ 1270.390997][ T4825] ? trace_irq_disable+0x3b/0x140 [ 1270.391015][ T4825] ? clear_bhb_loop+0x40/0x90 [ 1270.391038][ T4825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.391057][ T4825] RIP: 0033:0x7fa363f9de59 [ 1270.391075][ T4825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1270.391092][ T4825] RSP: 002b:00007fa3621f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1270.391113][ T4825] RAX: ffffffffffffffda RBX: 00007fa364225fa0 RCX: 00007fa363f9de59 [ 1270.391127][ T4825] RDX: 0000000000000050 RSI: 0000200000000580 RDI: 000000000000000a [ 1270.391139][ T4825] RBP: 00007fa3621f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1270.391152][ T4825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1270.391163][ T4825] R13: 00007fa364226038 R14: 00007fa364225fa0 R15: 00007fff69fa9058 [ 1270.391194][ T4825] [ 1270.858068][ T4839] vlan2: entered allmulticast mode [ 1271.048910][ T4851] bond0: option updelay: invalid value (18446744073709518847) [ 1271.056467][ T4851] bond0: option updelay: allowed values 0 - 2147483647 [ 1271.084789][ T4851] bond0 (unregistering): Released all slaves [ 1271.291474][ T4864] tipc: Started in network mode [ 1271.296678][ T4864] tipc: Node identity fe7d93639e2, cluster identity 4711 [ 1271.306195][ T4864] tipc: Enabled bearer , priority 0 [ 1271.519865][ T4864] syzkaller0: entered promiscuous mode [ 1271.531984][ T4864] syzkaller0: entered allmulticast mode [ 1271.570302][ T4864] tipc: Resetting bearer [ 1271.609490][T23567] net_ratelimit: 22 callbacks suppressed [ 1271.609509][T23567] bond9: (slave erspan0): failed to get link speed/duplex [ 1271.689703][ T4868] bond1: option ad_user_port_key: invalid value (65535) [ 1271.696807][ T4868] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 1271.730801][ T4868] bond1 (unregistering): Released all slaves [ 1271.860338][T23566] bond9: (slave erspan0): failed to get link speed/duplex [ 1272.065053][ T5857] tipc: Resetting bearer [ 1272.083095][ T984] bond9: (slave erspan0): failed to get link speed/duplex [ 1272.191940][ T4886] netlink: 'syz.4.9507': attribute type 1 has an invalid length. [ 1272.200805][ T4863] tipc: Resetting bearer [ 1272.549378][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1273.478783][ T4909] netlink: 'syz.0.9518': attribute type 1 has an invalid length. [ 1273.486562][ T4909] __nla_validate_parse: 4 callbacks suppressed [ 1273.486576][ T4909] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9518'. [ 1273.679561][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1273.696285][ T4912] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9518'. [ 1274.516098][ T4920] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9520'. [ 1274.604574][ T4922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9521'. [ 1274.696412][ T4923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9521'. [ 1274.785692][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1275.909074][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1276.786411][ T4863] tipc: Disabling bearer [ 1276.796284][ T5768] tipc: Node number set to 1616745315 [ 1276.847621][ T4927] netlink: 'syz.1.9521': attribute type 5 has an invalid length. [ 1276.856284][ T4927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9521'. [ 1276.948916][ T5857] bond9: (slave erspan0): failed to get link speed/duplex [ 1277.032080][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1277.060494][T23566] bond9: (slave erspan0): failed to get link speed/duplex [ 1277.188981][T23570] bond9: (slave erspan0): failed to get link speed/duplex [ 1277.397375][T23567] bond9: (slave erspan0): failed to get link speed/duplex [ 1277.529215][ T35] bond9: (slave erspan0): failed to get link speed/duplex [ 1277.679533][T23567] bond9: (slave erspan0): failed to get link speed/duplex [ 1277.812074][ T5857] bond9: (slave erspan0): failed to get link speed/duplex [ 1277.965423][T23568] bond9: (slave erspan0): failed to get link speed/duplex [ 1278.138986][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1278.294073][ T4999] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9533'. [ 1278.453954][ T5013] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9537'. [ 1278.477979][ T5009] netlink: 'syz.0.9536': attribute type 3 has an invalid length. [ 1278.524198][ T5013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9537'. [ 1278.533270][ T5013] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9537'. [ 1278.558781][ T5013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9537'. [ 1278.568239][ T5013] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9537'. [ 1278.632911][ T5014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1278.710825][ T5017] bond1: entered promiscuous mode [ 1278.717051][ T5017] bond1: entered allmulticast mode [ 1278.723146][ T5017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1278.741835][ T5024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9541'. [ 1278.997189][ T5034] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9545'. [ 1279.067574][ T5036] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9547'. [ 1279.373062][ T5052] vlan2: entered allmulticast mode [ 1279.483064][ T5054] bond2: option updelay: invalid value (18446744073709518847) [ 1279.490937][ T5054] bond2: option updelay: allowed values 0 - 2147483647 [ 1279.499418][ T5054] bond2 (unregistering): Released all slaves [ 1279.733867][ T5060] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9553'. [ 1279.780995][ T5065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9554'. [ 1279.842274][ T5062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1279.955793][ T5070] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9557'. [ 1280.626778][ T5090] tipc: Invalid UDP bearer configuration [ 1280.626831][ T5090] tipc: Enabling of bearer rejected, failed to enable media [ 1281.676298][ T5114] vlan2: entered allmulticast mode [ 1281.681538][ T5114] veth0_to_bond: entered allmulticast mode [ 1281.950712][ T5118] bond1: option updelay: invalid value (18446744073709518847) [ 1281.959365][ T5118] bond1: option updelay: allowed values 0 - 2147483647 [ 1282.044238][ T5118] bond1 (unregistering): Released all slaves [ 1282.089241][ T5123] netlink: 'syz.1.9571': attribute type 1 has an invalid length. [ 1282.117620][T23570] net_ratelimit: 26 callbacks suppressed [ 1282.117644][T23570] bond9: (slave erspan0): failed to get link speed/duplex [ 1282.261886][T23566] bond9: (slave erspan0): failed to get link speed/duplex [ 1282.393182][ T5857] bond9: (slave erspan0): failed to get link speed/duplex [ 1282.550607][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1282.785256][T23566] bond9: (slave erspan0): failed to get link speed/duplex [ 1283.030284][T23566] bond9: (slave erspan0): failed to get link speed/duplex [ 1283.104329][ T5139] netlink: 'syz.0.9573': attribute type 1 has an invalid length. [ 1283.159369][ T5858] bond9: (slave erspan0): failed to get link speed/duplex [ 1283.296021][ T5169] team0: Device ipvlan2 is already an upper device of the team interface [ 1283.397401][ T5171] vlan3: entered allmulticast mode [ 1283.535707][ T5177] FAULT_INJECTION: forcing a failure. [ 1283.535707][ T5177] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1283.593289][ T5172] bond0: option updelay: invalid value (18446744073709518847) [ 1283.600822][ T5172] bond0: option updelay: allowed values 0 - 2147483647 [ 1283.608674][ T5177] CPU: 1 UID: 0 PID: 5177 Comm: syz.5.9587 Not tainted syzkaller #0 PREEMPT(full) [ 1283.608699][ T5177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1283.608710][ T5177] Call Trace: [ 1283.608718][ T5177] [ 1283.608727][ T5177] dump_stack_lvl+0xe8/0x150 [ 1283.608755][ T5177] should_fail_ex+0x40c/0x560 [ 1283.608786][ T5177] prepare_alloc_pages+0x230/0x650 [ 1283.608815][ T5177] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1283.608840][ T5177] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1283.608865][ T5177] ? __pfx_policy_nodemask+0x10/0x10 [ 1283.608897][ T5177] alloc_pages_mpol+0x212/0x380 [ 1283.608924][ T5177] folio_alloc_mpol_noprof+0x39/0x160 [ 1283.608948][ T5177] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1283.608973][ T5177] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1283.609005][ T5177] do_wp_page+0x1163/0x4c70 [ 1283.609049][ T5177] ? __pfx_do_wp_page+0x10/0x10 [ 1283.609071][ T5177] ? do_raw_spin_lock+0x12b/0x2f0 [ 1283.609101][ T5177] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1283.609137][ T5177] handle_mm_fault+0x1490/0x3080 [ 1283.609175][ T5177] ? handle_mm_fault+0xec/0x3080 [ 1283.609209][ T5177] ? __pfx_handle_mm_fault+0x10/0x10 [ 1283.609235][ T5177] ? follow_page_pte+0xbd0/0xe70 [ 1283.609269][ T5177] ? __pfx_follow_page_pte+0x10/0x10 [ 1283.609306][ T5177] __get_user_pages+0x1678/0x2720 [ 1283.609363][ T5177] __gup_longterm_locked+0xd52/0x15c0 [ 1283.609397][ T5177] ? lock_acquire+0x106/0x350 [ 1283.609423][ T5177] ? sanity_check_pinned_pages+0x810/0x8d0 [ 1283.609453][ T5177] gup_fast_fallback+0x1d8c/0x20e0 [ 1283.609510][ T5177] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1283.609533][ T5177] ? __kmalloc_noprof+0x1ad/0x720 [ 1283.609563][ T5177] ? kasan_save_track+0x4f/0x80 [ 1283.609584][ T5177] ? pin_user_pages_fast+0x4d/0xb0 [ 1283.609611][ T5177] iov_iter_extract_pages+0x369/0x5f0 [ 1283.609659][ T5177] extract_iter_to_sg+0xee0/0x25f0 [ 1283.609705][ T5177] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 1283.609741][ T5177] ? rcu_is_watching+0x15/0xb0 [ 1283.609766][ T5177] ? trace_kmalloc+0x2a/0xf0 [ 1283.609799][ T5177] ? __asan_memset+0x22/0x50 [ 1283.609830][ T5177] af_alg_get_rsgl+0x493/0x8d0 [ 1283.609871][ T5177] ? af_alg_alloc_areq+0xac/0x200 [ 1283.609902][ T5177] skcipher_recvmsg+0x39d/0xe10 [ 1283.609952][ T5177] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1283.609980][ T5177] ? __lock_acquire+0x683/0x2cf0 [ 1283.609999][ T5177] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1283.610026][ T5177] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1283.610051][ T5177] ? security_socket_recvmsg+0x7e/0x2c0 [ 1283.610079][ T5177] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1283.610109][ T5177] sock_recvmsg+0x196/0x1e0 [ 1283.610141][ T5177] ____sys_recvmsg+0x1e6/0x4a0 [ 1283.610184][ T5177] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1283.610221][ T5177] ? import_iovec+0x73/0xa0 [ 1283.610244][ T5177] ___sys_recvmsg+0x213/0x5a0 [ 1283.610272][ T5177] ? __pfx____sys_recvmsg+0x10/0x10 [ 1283.610298][ T5177] ? __fget_files+0x2a/0x420 [ 1283.610335][ T5177] ? __fget_files+0x3a2/0x420 [ 1283.610364][ T5177] __x64_sys_recvmsg+0x1ae/0x290 [ 1283.610411][ T5177] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1283.610454][ T5177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.610476][ T5177] do_syscall_64+0x174/0x580 [ 1283.610495][ T5177] ? trace_irq_disable+0x3b/0x140 [ 1283.610515][ T5177] ? clear_bhb_loop+0x40/0x90 [ 1283.610540][ T5177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.610560][ T5177] RIP: 0033:0x7fe8ab19de59 [ 1283.610579][ T5177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1283.610597][ T5177] RSP: 002b:00007fe8a93f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1283.610619][ T5177] RAX: ffffffffffffffda RBX: 00007fe8ab425fa0 RCX: 00007fe8ab19de59 [ 1283.610635][ T5177] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1283.610648][ T5177] RBP: 00007fe8a93f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1283.610661][ T5177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1283.610673][ T5177] R13: 00007fe8ab426038 R14: 00007fe8ab425fa0 R15: 00007ffe7bcba568 [ 1283.610706][ T5177] [ 1283.640514][ T5172] bond0 (unregistering): Released all slaves [ 1283.674132][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1283.857591][ T5178] netlink: 'syz.4.9585': attribute type 83 has an invalid length. [ 1284.043351][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1284.225687][ T5175] __nla_validate_parse: 15 callbacks suppressed [ 1284.225708][ T5175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9585'. [ 1284.264614][T23568] bond9: (slave erspan0): failed to get link speed/duplex [ 1284.278578][T23566] tipc: Subscription rejected, illegal request [ 1284.291868][ T5858] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1284.320072][T23568] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1284.346977][T23568] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1284.384596][T23568] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1284.403482][ T5188] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.9590'. [ 1284.444512][ T5185] netlink: 'syz.0.9589': attribute type 5 has an invalid length. [ 1284.454358][ T5185] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9589'. [ 1284.464060][ T5185] netlink: 'syz.0.9589': attribute type 2 has an invalid length. [ 1284.472919][ T5185] netlink: 'syz.0.9589': attribute type 1 has an invalid length. [ 1284.490964][ T5185] netlink: 'syz.0.9589': attribute type 1 has an invalid length. [ 1284.502060][T23568] bond9: (slave erspan0): failed to get link speed/duplex [ 1284.694815][ T5200] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9593'. [ 1284.970043][ T5216] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9600'. [ 1285.066826][ T5218] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9602'. [ 1285.240068][ T5228] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.9604'. [ 1285.465254][ T5245] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9609'. [ 1285.665587][ T5254] netlink: 'syz.1.9612': attribute type 11 has an invalid length. [ 1285.887769][ T5261] No such timeout policy "syz0" [ 1285.961992][ T5255] netlink: 'syz.2.9607': attribute type 1 has an invalid length. [ 1286.204795][ T5267] FAULT_INJECTION: forcing a failure. [ 1286.204795][ T5267] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.218882][ T5267] CPU: 0 UID: 0 PID: 5267 Comm: syz.0.9615 Not tainted syzkaller #0 PREEMPT(full) [ 1286.218900][ T5267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1286.218909][ T5267] Call Trace: [ 1286.218914][ T5267] [ 1286.218920][ T5267] dump_stack_lvl+0xe8/0x150 [ 1286.218942][ T5267] should_fail_ex+0x40c/0x560 [ 1286.218964][ T5267] should_failslab+0xa8/0x100 [ 1286.218981][ T5267] __kmalloc_cache_noprof+0xa8/0x660 [ 1286.219002][ T5267] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1286.219022][ T5267] ? __kmalloc_cache_noprof+0x150/0x660 [ 1286.219043][ T5267] ? sctp_add_bind_addr+0x8c/0x370 [ 1286.219061][ T5267] ? sctp_add_bind_addr+0x8c/0x370 [ 1286.219083][ T5267] sctp_add_bind_addr+0x8c/0x370 [ 1286.219105][ T5267] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1286.219125][ T5267] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1286.219145][ T5267] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1286.219165][ T5267] ? sctp_v6_is_any+0x64/0x80 [ 1286.219187][ T5267] ? sctp_copy_one_addr+0x93/0x360 [ 1286.219208][ T5267] sctp_bind_addr_copy+0xb3/0x3c0 [ 1286.219227][ T5267] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1286.219246][ T5267] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1286.219263][ T5267] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1286.219282][ T5267] ? __local_bh_enable_ip+0xd0/0x130 [ 1286.219301][ T5267] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1286.219320][ T5267] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1286.219335][ T5267] sctp_sendmsg+0x159b/0x2d00 [ 1286.219359][ T5267] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1286.219377][ T5267] ? aa_sk_perm+0x6d5/0x900 [ 1286.219400][ T5267] ? sock_rps_record_flow+0x19/0x350 [ 1286.219424][ T5267] ? inet_sendmsg+0x298/0x320 [ 1286.219446][ T5267] ? __pfx_inet_sendmsg+0x10/0x10 [ 1286.219465][ T5267] sock_sendmsg_nosec+0x10e/0x180 [ 1286.219486][ T5267] ____sys_sendmsg+0x54e/0x850 [ 1286.219504][ T5267] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1286.219525][ T5267] ? import_iovec+0x73/0xa0 [ 1286.219541][ T5267] ___sys_sendmsg+0x2a5/0x360 [ 1286.219555][ T5267] ? __lock_acquire+0x683/0x2cf0 [ 1286.219572][ T5267] ? __pfx____sys_sendmsg+0x10/0x10 [ 1286.219590][ T5267] ? kstrtouint+0x6e/0xe0 [ 1286.219625][ T5267] ? __fget_files+0x2a/0x420 [ 1286.219638][ T5267] ? __fget_files+0x3a2/0x420 [ 1286.219662][ T5267] __sys_sendmmsg+0x273/0x4d0 [ 1286.219681][ T5267] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1286.219703][ T5267] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1286.219739][ T5267] ? ksys_write+0x242/0x270 [ 1286.219757][ T5267] ? __pfx_ksys_write+0x10/0x10 [ 1286.219778][ T5267] __x64_sys_sendmmsg+0xa0/0xc0 [ 1286.219793][ T5267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.219807][ T5267] do_syscall_64+0x174/0x580 [ 1286.219819][ T5267] ? trace_irq_disable+0x3b/0x140 [ 1286.219832][ T5267] ? clear_bhb_loop+0x40/0x90 [ 1286.219849][ T5267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.219862][ T5267] RIP: 0033:0x7f065919de59 [ 1286.219875][ T5267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1286.219887][ T5267] RSP: 002b:00007f065a0cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1286.219901][ T5267] RAX: ffffffffffffffda RBX: 00007f0659425fa0 RCX: 00007f065919de59 [ 1286.219911][ T5267] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000008 [ 1286.219920][ T5267] RBP: 00007f065a0cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1286.219929][ T5267] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000002 [ 1286.219937][ T5267] R13: 00007f0659426038 R14: 00007f0659425fa0 R15: 00007ffc3a69d2d8 [ 1286.219959][ T5267] [ 1286.698419][T23568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1286.710353][T23568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1286.740810][ T3291] Bluetooth: hci4: command 0x0406 tx timeout [ 1286.886122][ T5283] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9620'. [ 1286.939557][ T5280] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9616'. [ 1286.965081][ T5296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1287.097814][ T5293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1287.166095][T23565] net_ratelimit: 19 callbacks suppressed [ 1287.167317][T23565] bond9: (slave erspan0): failed to get link speed/duplex [ 1287.253423][ T5302] FAULT_INJECTION: forcing a failure. [ 1287.253423][ T5302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1287.267451][ T5302] CPU: 0 UID: 0 PID: 5302 Comm: syz.2.9624 Not tainted syzkaller #0 PREEMPT(full) [ 1287.267477][ T5302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1287.267489][ T5302] Call Trace: [ 1287.267498][ T5302] [ 1287.267507][ T5302] dump_stack_lvl+0xe8/0x150 [ 1287.267536][ T5302] should_fail_ex+0x40c/0x560 [ 1287.267568][ T5302] _copy_from_iter+0x1d3/0x1660 [ 1287.267596][ T5302] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 1287.267654][ T5302] ? rcu_is_watching+0x15/0xb0 [ 1287.267680][ T5302] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1287.267713][ T5302] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1287.267743][ T5302] ? __pfx__copy_from_iter+0x10/0x10 [ 1287.267773][ T5302] ? __alloc_skb+0x276/0x7a0 [ 1287.267791][ T5302] ? __alloc_skb+0x276/0x7a0 [ 1287.267816][ T5302] ? netlink_sendmsg+0x650/0xb40 [ 1287.267840][ T5302] ? skb_put+0x112/0x210 [ 1287.267863][ T5302] netlink_sendmsg+0x6c0/0xb40 [ 1287.267897][ T5302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1287.267926][ T5302] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1287.267957][ T5302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1287.267980][ T5302] sock_sendmsg_nosec+0x13a/0x180 [ 1287.268011][ T5302] ____sys_sendmsg+0x54e/0x850 [ 1287.268040][ T5302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1287.268073][ T5302] ? import_iovec+0x73/0xa0 [ 1287.268098][ T5302] ___sys_sendmsg+0x2a5/0x360 [ 1287.268120][ T5302] ? __lock_acquire+0x683/0x2cf0 [ 1287.268145][ T5302] ? __pfx____sys_sendmsg+0x10/0x10 [ 1287.268207][ T5302] ? __fget_files+0x2a/0x420 [ 1287.268227][ T5302] ? __fget_files+0x3a2/0x420 [ 1287.268257][ T5302] __x64_sys_sendmsg+0x1b1/0x290 [ 1287.268283][ T5302] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1287.268318][ T5302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.268337][ T5302] do_syscall_64+0x174/0x580 [ 1287.268354][ T5302] ? trace_irq_disable+0x3b/0x140 [ 1287.268371][ T5302] ? clear_bhb_loop+0x40/0x90 [ 1287.268392][ T5302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.268410][ T5302] RIP: 0033:0x7fa363f9de59 [ 1287.268427][ T5302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1287.268444][ T5302] RSP: 002b:00007fa3621f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1287.268465][ T5302] RAX: ffffffffffffffda RBX: 00007fa364225fa0 RCX: 00007fa363f9de59 [ 1287.268479][ T5302] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1287.268490][ T5302] RBP: 00007fa3621f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1287.268502][ T5302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1287.268513][ T5302] R13: 00007fa364226038 R14: 00007fa364225fa0 R15: 00007fff69fa9058 [ 1287.268541][ T5302] [ 1287.567050][T23566] bond9: (slave erspan0): failed to get link speed/duplex [ 1287.679682][T23565] bond9: (slave erspan0): failed to get link speed/duplex [ 1287.739736][ T5307] syzkaller0: entered promiscuous mode [ 1287.745464][ T5307] syzkaller0: entered allmulticast mode [ 1287.773517][ T5307] tipc: Enabled bearer , priority 0 [ 1287.782004][ T5306] tipc: Resetting bearer [ 1287.839235][ T5306] tipc: Disabling bearer [ 1287.916241][ T5857] bond9: (slave erspan0): failed to get link speed/duplex [ 1288.026129][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1288.069518][ T5857] bond9: (slave erspan0): failed to get link speed/duplex [ 1288.251585][T23570] bond9: (slave erspan0): failed to get link speed/duplex [ 1288.379703][T23566] bond9: (slave erspan0): failed to get link speed/duplex [ 1288.555201][ T5324] bond0: entered allmulticast mode [ 1288.673247][ T5324] macvlan2: entered promiscuous mode [ 1288.695898][ T5324] macvlan2: entered allmulticast mode [ 1288.702604][ T5324] bond0: entered promiscuous mode [ 1288.722421][ T5324] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1288.879826][ T5324] bond0: left promiscuous mode [ 1289.136223][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1289.153259][T23565] bond9: (slave erspan0): failed to get link speed/duplex [ 1289.197349][T23565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.206058][T23565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.275250][ T5360] netlink: 'syz.4.9641': attribute type 4 has an invalid length. [ 1289.286202][ T5360] netlink: 'syz.4.9641': attribute type 4 has an invalid length. [ 1289.389537][ T5356] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9639'. [ 1289.757896][ T5380] ip6gre1: entered promiscuous mode [ 1289.763162][ T5380] ip6gre1: entered allmulticast mode [ 1289.769551][ T5357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1289.783951][ T5388] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9648'. [ 1289.789325][ T5388] FAULT_INJECTION: forcing a failure. [ 1289.789325][ T5388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1289.789354][ T5388] CPU: 1 UID: 0 PID: 5388 Comm: syz.1.9648 Not tainted syzkaller #0 PREEMPT(full) [ 1289.789374][ T5388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1289.789385][ T5388] Call Trace: [ 1289.789403][ T5388] [ 1289.789411][ T5388] dump_stack_lvl+0xe8/0x150 [ 1289.789439][ T5388] should_fail_ex+0x40c/0x560 [ 1289.789470][ T5388] _copy_from_user+0x2d/0xb0 [ 1289.789492][ T5388] ___sys_recvmsg+0x173/0x5a0 [ 1289.789520][ T5388] ? __pfx____sys_recvmsg+0x10/0x10 [ 1289.789546][ T5388] ? __fget_files+0x2a/0x420 [ 1289.789594][ T5388] do_recvmmsg+0x31a/0x7f0 [ 1289.789622][ T5388] ? __pfx_do_recvmmsg+0x10/0x10 [ 1289.789654][ T5388] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1289.789685][ T5388] ? __fget_files+0x3a2/0x420 [ 1289.789712][ T5388] __x64_sys_recvmmsg+0x198/0x250 [ 1289.789736][ T5388] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1289.789782][ T5388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.789859][ T5388] do_syscall_64+0x174/0x580 [ 1289.789897][ T5388] ? trace_irq_disable+0x3b/0x140 [ 1289.789961][ T5388] ? clear_bhb_loop+0x40/0x90 [ 1289.790018][ T5388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.790084][ T5388] RIP: 0033:0x7fc82079de59 [ 1289.790132][ T5388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1289.790190][ T5388] RSP: 002b:00007fc81e9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1289.790254][ T5388] RAX: ffffffffffffffda RBX: 00007fc820a25fa0 RCX: 00007fc82079de59 [ 1289.790289][ T5388] RDX: 03ffffffffffff2e RSI: 0000200000000c00 RDI: 0000000000000005 [ 1289.790319][ T5388] RBP: 00007fc81e9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1289.790353][ T5388] R10: 00001000400000de R11: 0000000000000246 R12: 0000000000000001 [ 1289.790381][ T5388] R13: 00007fc820a26038 R14: 00007fc820a25fa0 R15: 00007ffeebbe60e8 [ 1289.790474][ T5388] [ 1289.822862][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1290.259032][ T5395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9651'. [ 1290.916439][ T5427] lo speed is unknown, defaulting to 1000 [ 1290.924843][ T5432] FAULT_INJECTION: forcing a failure. [ 1290.924843][ T5432] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1290.978153][ T5432] CPU: 1 UID: 0 PID: 5432 Comm: syz.4.9660 Not tainted syzkaller #0 PREEMPT(full) [ 1290.978181][ T5432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1290.978193][ T5432] Call Trace: [ 1290.978202][ T5432] [ 1290.978211][ T5432] dump_stack_lvl+0xe8/0x150 [ 1290.978242][ T5432] should_fail_ex+0x40c/0x560 [ 1290.978276][ T5432] prepare_alloc_pages+0x230/0x650 [ 1290.978306][ T5432] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1290.978333][ T5432] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1290.978360][ T5432] ? __pfx_policy_nodemask+0x10/0x10 [ 1290.978383][ T5432] ? __folio_batch_add_and_move+0x11a/0xc50 [ 1290.978412][ T5432] ? lock_acquire+0x106/0x350 [ 1290.978441][ T5432] alloc_pages_mpol+0x212/0x380 [ 1290.978470][ T5432] folio_alloc_mpol_noprof+0x39/0x160 [ 1290.978497][ T5432] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1290.978524][ T5432] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1290.978559][ T5432] do_wp_page+0x1163/0x4c70 [ 1290.978605][ T5432] ? __pfx_do_wp_page+0x10/0x10 [ 1290.978629][ T5432] ? do_raw_spin_lock+0x12b/0x2f0 [ 1290.978661][ T5432] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1290.978699][ T5432] handle_mm_fault+0x1490/0x3080 [ 1290.978739][ T5432] ? handle_mm_fault+0xec/0x3080 [ 1290.978774][ T5432] ? __pfx_handle_mm_fault+0x10/0x10 [ 1290.978830][ T5432] ? lock_mm_and_find_vma+0xa7/0x340 [ 1290.978863][ T5432] do_user_addr_fault+0x744/0x1340 [ 1290.978903][ T5432] exc_page_fault+0x6a/0xc0 [ 1290.978935][ T5432] asm_exc_page_fault+0x26/0x30 [ 1290.978954][ T5432] RIP: 0010:__put_user_nocheck_4+0x3/0x20 [ 1290.978984][ T5432] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 57 91 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1290.979001][ T5432] RSP: 0018:ffffc90005bdf8d8 EFLAGS: 00050206 [ 1290.979019][ T5432] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000006030 [ 1290.979033][ T5432] RDX: ffff8880344d5d00 RSI: 0000000000000300 RDI: 00000000ffffffff [ 1290.979046][ T5432] RBP: ffffc90005bdfa50 R08: ffffffff9032d3f7 R09: 1ffffffff2065a7e [ 1290.979061][ T5432] R10: dffffc0000000000 R11: fffffbfff2065a7f R12: 1ffff92000b7bf28 [ 1290.979076][ T5432] R13: 0000000000000300 R14: 0000200000006000 R15: dffffc0000000000 [ 1290.979109][ T5432] ____sys_recvmsg+0x2be/0x4a0 [ 1290.979143][ T5432] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1290.979181][ T5432] ? import_iovec+0x73/0xa0 [ 1290.979206][ T5432] ___sys_recvmsg+0x213/0x5a0 [ 1290.979235][ T5432] ? __pfx____sys_recvmsg+0x10/0x10 [ 1290.979262][ T5432] ? __fget_files+0x2a/0x420 [ 1290.979314][ T5432] do_recvmmsg+0x31a/0x7f0 [ 1290.979346][ T5432] ? __pfx_do_recvmmsg+0x10/0x10 [ 1290.979382][ T5432] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1290.979414][ T5432] ? __fget_files+0x3a2/0x420 [ 1290.979444][ T5432] __x64_sys_recvmmsg+0x198/0x250 [ 1290.979471][ T5432] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1290.979504][ T5432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1290.979526][ T5432] do_syscall_64+0x174/0x580 [ 1290.979543][ T5432] ? trace_irq_disable+0x3b/0x140 [ 1290.979562][ T5432] ? clear_bhb_loop+0x40/0x90 [ 1290.979588][ T5432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1290.979607][ T5432] RIP: 0033:0x7f429639de59 [ 1290.979626][ T5432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1290.979642][ T5432] RSP: 002b:00007f4297284028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1290.979663][ T5432] RAX: ffffffffffffffda RBX: 00007f4296625fa0 RCX: 00007f429639de59 [ 1290.979678][ T5432] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 1290.979691][ T5432] RBP: 00007f4297284090 R08: 0000000000000000 R09: 0000000000000000 [ 1290.979704][ T5432] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 1290.979717][ T5432] R13: 00007f4296626038 R14: 00007f4296625fa0 R15: 00007ffc434d8208 [ 1290.979749][ T5432] [ 1291.983339][ T5452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9666'. [ 1292.047620][ T5452] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9666'. [ 1292.063861][ T5452] geneve2: entered promiscuous mode [ 1292.069113][ T5452] geneve2: entered allmulticast mode [ 1292.191955][ T5459] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9668'. [ 1292.577414][ C1] net_ratelimit: 19 callbacks suppressed [ 1292.577436][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1292.623416][ T5473] netlink: 'syz.2.9664': attribute type 1 has an invalid length. [ 1292.694303][ T5858] bond9: (slave erspan0): failed to get link speed/duplex [ 1292.808791][ T5477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9674'. [ 1292.840248][ T5477] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9674'. [ 1292.945758][ T5481] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9675'. [ 1293.040230][ T5482] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9672'. [ 1293.060367][ T5481] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.067826][ T5481] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.132031][ T35] bond9: (slave erspan0): failed to get link speed/duplex [ 1293.210223][ T5490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1293.352106][T23565] bond9: (slave erspan0): failed to get link speed/duplex [ 1293.681226][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1293.758104][ T5858] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1293.785371][ T5858] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1293.819678][ T5858] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1293.863680][ T5858] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1293.907257][ T5858] bond9: (slave erspan0): failed to get link speed/duplex [ 1294.038837][T23568] bond9: (slave erspan0): failed to get link speed/duplex [ 1294.237175][ T5858] bond9: (slave erspan0): failed to get link speed/duplex [ 1294.361022][T23566] bond9: (slave erspan0): failed to get link speed/duplex [ 1294.376003][ T5520] FAULT_INJECTION: forcing a failure. [ 1294.376003][ T5520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1294.389090][ T5520] CPU: 1 UID: 0 PID: 5520 Comm: syz.0.9689 Not tainted syzkaller #0 PREEMPT(full) [ 1294.389117][ T5520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1294.389130][ T5520] Call Trace: [ 1294.389139][ T5520] [ 1294.389149][ T5520] dump_stack_lvl+0xe8/0x150 [ 1294.389182][ T5520] should_fail_ex+0x40c/0x560 [ 1294.389217][ T5520] _copy_from_user+0x2d/0xb0 [ 1294.389242][ T5520] generic_map_update_batch+0x6a3/0x9a0 [ 1294.389283][ T5520] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1294.389312][ T5520] ? __fget_files+0x2a/0x420 [ 1294.389342][ T5520] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1294.389370][ T5520] bpf_map_do_batch+0x391/0x630 [ 1294.389400][ T5520] __sys_bpf+0xbe5/0xd90 [ 1294.389429][ T5520] ? __pfx___sys_bpf+0x10/0x10 [ 1294.389463][ T5520] ? __fget_files+0x2a/0x420 [ 1294.389502][ T5520] ? ksys_write+0x242/0x270 [ 1294.389531][ T5520] ? __pfx_ksys_write+0x10/0x10 [ 1294.389569][ T5520] __x64_sys_bpf+0xba/0xd0 [ 1294.389600][ T5520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.389624][ T5520] do_syscall_64+0x174/0x580 [ 1294.389644][ T5520] ? trace_irq_disable+0x3b/0x140 [ 1294.389664][ T5520] ? clear_bhb_loop+0x40/0x90 [ 1294.389691][ T5520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.389713][ T5520] RIP: 0033:0x7f065919de59 [ 1294.389734][ T5520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1294.389754][ T5520] RSP: 002b:00007f065a0cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1294.389777][ T5520] RAX: ffffffffffffffda RBX: 00007f0659425fa0 RCX: 00007f065919de59 [ 1294.389793][ T5520] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 1294.389808][ T5520] RBP: 00007f065a0cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1294.389822][ T5520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1294.389835][ T5520] R13: 00007f0659426038 R14: 00007f0659425fa0 R15: 00007ffc3a69d2d8 [ 1294.389870][ T5520] [ 1294.788435][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1294.952387][ T5528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.959631][ T5528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.967284][ T5528] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.974504][ T5528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1295.015422][ T5542] __nla_validate_parse: 7 callbacks suppressed [ 1295.015438][ T5542] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9693'. [ 1295.038581][ T5540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9694'. [ 1295.162981][ T5528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1295.193553][ T5528] ip6gre1: left promiscuous mode [ 1295.453616][ T5557] FAULT_INJECTION: forcing a failure. [ 1295.453616][ T5557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1295.503152][ T5557] CPU: 0 UID: 0 PID: 5557 Comm: syz.1.9701 Not tainted syzkaller #0 PREEMPT(full) [ 1295.503185][ T5557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1295.503202][ T5557] Call Trace: [ 1295.503211][ T5557] [ 1295.503221][ T5557] dump_stack_lvl+0xe8/0x150 [ 1295.503254][ T5557] should_fail_ex+0x40c/0x560 [ 1295.503291][ T5557] _copy_from_user+0x2d/0xb0 [ 1295.503317][ T5557] __sys_bpf+0x2e7/0xd90 [ 1295.503359][ T5557] ? __pfx___sys_bpf+0x10/0x10 [ 1295.503422][ T5557] ? __fget_files+0x2a/0x420 [ 1295.503459][ T5557] ? ksys_write+0x242/0x270 [ 1295.503484][ T5557] ? __pfx_ksys_write+0x10/0x10 [ 1295.503511][ T5557] __x64_sys_bpf+0xba/0xd0 [ 1295.503539][ T5557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.503577][ T5557] do_syscall_64+0x174/0x580 [ 1295.503597][ T5557] ? trace_irq_disable+0x3b/0x140 [ 1295.503616][ T5557] ? clear_bhb_loop+0x40/0x90 [ 1295.503641][ T5557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.503662][ T5557] RIP: 0033:0x7fc82079de59 [ 1295.503681][ T5557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1295.503698][ T5557] RSP: 002b:00007fc81e9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1295.503721][ T5557] RAX: ffffffffffffffda RBX: 00007fc820a25fa0 RCX: 00007fc82079de59 [ 1295.503736][ T5557] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1295.503750][ T5557] RBP: 00007fc81e9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1295.503763][ T5557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1295.503775][ T5557] R13: 00007fc820a26038 R14: 00007fc820a25fa0 R15: 00007ffeebbe60e8 [ 1295.503808][ T5557] [ 1295.750388][ T5554] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9700'. [ 1295.823489][ T5558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1296.440569][ T5570] FAULT_INJECTION: forcing a failure. [ 1296.440569][ T5570] name failslab, interval 1, probability 0, space 0, times 0 [ 1296.466077][ T5570] CPU: 0 UID: 0 PID: 5570 Comm: syz.2.9706 Not tainted syzkaller #0 PREEMPT(full) [ 1296.466105][ T5570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1296.466117][ T5570] Call Trace: [ 1296.466126][ T5570] [ 1296.466135][ T5570] dump_stack_lvl+0xe8/0x150 [ 1296.466165][ T5570] should_fail_ex+0x40c/0x560 [ 1296.466198][ T5570] should_failslab+0xa8/0x100 [ 1296.466224][ T5570] __kmalloc_cache_noprof+0xa8/0x660 [ 1296.466254][ T5570] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1296.466284][ T5570] ? __kmalloc_cache_noprof+0x150/0x660 [ 1296.466314][ T5570] ? sctp_add_bind_addr+0x8c/0x370 [ 1296.466340][ T5570] ? sctp_add_bind_addr+0x8c/0x370 [ 1296.466381][ T5570] sctp_add_bind_addr+0x8c/0x370 [ 1296.466413][ T5570] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1296.466444][ T5570] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1296.466473][ T5570] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1296.466506][ T5570] ? sctp_v4_is_any+0x35/0x60 [ 1296.466534][ T5570] ? sctp_copy_one_addr+0x93/0x360 [ 1296.466565][ T5570] sctp_bind_addr_copy+0xb3/0x3c0 [ 1296.466594][ T5570] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1296.466623][ T5570] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1296.466649][ T5570] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1296.466677][ T5570] ? __local_bh_enable_ip+0xd0/0x130 [ 1296.466705][ T5570] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1296.466733][ T5570] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1296.466757][ T5570] sctp_sendmsg+0x159b/0x2d00 [ 1296.466794][ T5570] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1296.466821][ T5570] ? aa_sk_perm+0x6d5/0x900 [ 1296.466857][ T5570] ? sock_rps_record_flow+0x19/0x350 [ 1296.466891][ T5570] ? inet_sendmsg+0x298/0x320 [ 1296.466923][ T5570] ? __pfx_inet_sendmsg+0x10/0x10 [ 1296.466951][ T5570] sock_sendmsg_nosec+0x10e/0x180 [ 1296.466981][ T5570] ____sys_sendmsg+0x54e/0x850 [ 1296.467010][ T5570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1296.467042][ T5570] ? import_iovec+0x73/0xa0 [ 1296.467067][ T5570] ___sys_sendmsg+0x2a5/0x360 [ 1296.467088][ T5570] ? __lock_acquire+0x683/0x2cf0 [ 1296.467113][ T5570] ? __pfx____sys_sendmsg+0x10/0x10 [ 1296.467141][ T5570] ? kstrtouint+0x6e/0xe0 [ 1296.467196][ T5570] ? __fget_files+0x2a/0x420 [ 1296.467215][ T5570] ? __fget_files+0x3a2/0x420 [ 1296.467246][ T5570] __sys_sendmmsg+0x273/0x4d0 [ 1296.467274][ T5570] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1296.467306][ T5570] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1296.467353][ T5570] ? ksys_write+0x242/0x270 [ 1296.467386][ T5570] ? __pfx_ksys_write+0x10/0x10 [ 1296.467417][ T5570] __x64_sys_sendmmsg+0xa0/0xc0 [ 1296.467443][ T5570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.467464][ T5570] do_syscall_64+0x174/0x580 [ 1296.467483][ T5570] ? trace_irq_disable+0x3b/0x140 [ 1296.467502][ T5570] ? clear_bhb_loop+0x40/0x90 [ 1296.467538][ T5570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.467557][ T5570] RIP: 0033:0x7fa363f9de59 [ 1296.467575][ T5570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1296.467591][ T5570] RSP: 002b:00007fa3621f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1296.467612][ T5570] RAX: ffffffffffffffda RBX: 00007fa364225fa0 RCX: 00007fa363f9de59 [ 1296.467626][ T5570] RDX: 0000000000000002 RSI: 0000200000000880 RDI: 0000000000000003 [ 1296.467638][ T5570] RBP: 00007fa3621f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1296.467650][ T5570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1296.467661][ T5570] R13: 00007fa364226038 R14: 00007fa364225fa0 R15: 00007fff69fa9058 [ 1296.467692][ T5570] [ 1297.041813][ T5581] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9710'. [ 1297.056707][ T5581] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9710'. [ 1297.086674][ T5585] tipc: Invalid UDP bearer configuration [ 1297.086721][ T5585] tipc: Enabling of bearer rejected, failed to enable media [ 1297.176915][ T5588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9714'. [ 1297.254742][ T5588] gretap0: entered promiscuous mode [ 1297.281691][ T5588] macvtap0: entered promiscuous mode [ 1297.301507][ T5588] macvtap0: entered allmulticast mode [ 1297.326840][ T5588] gretap0: entered allmulticast mode [ 1297.353188][ T5591] syzkaller0: entered promiscuous mode [ 1297.358694][ T5591] syzkaller0: entered allmulticast mode [ 1297.371062][ T5589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9711'. [ 1297.653590][ T5598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9717'. [ 1298.123111][ T5602] vlan2: entered allmulticast mode [ 1298.181883][ T5603] bond1: option updelay: invalid value (18446744073709518847) [ 1298.202955][ C1] net_ratelimit: 12 callbacks suppressed [ 1298.202973][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1298.254664][ T5603] bond1: option updelay: allowed values 0 - 2147483647 [ 1298.345543][ T5603] bond1 (unregistering): Released all slaves [ 1298.539507][ T5858] bond9: (slave erspan0): failed to get link speed/duplex [ 1298.719938][ T35] bond9: (slave erspan0): failed to get link speed/duplex [ 1298.751317][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1298.848804][ T5627] erspan0: entered promiscuous mode [ 1298.869002][ T5627] erspan0: entered allmulticast mode [ 1298.940066][ T5629] netlink: 'syz.4.9724': attribute type 1 has an invalid length. [ 1298.974873][T23565] bond9: (slave erspan0): failed to get link speed/duplex [ 1299.118859][ T35] bond9: (slave erspan0): failed to get link speed/duplex [ 1299.238930][ T35] bond9: (slave erspan0): failed to get link speed/duplex [ 1299.278268][ T5645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9732'. [ 1299.303063][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1299.355153][ T5645] netlink: 'syz.1.9732': attribute type 10 has an invalid length. [ 1299.384006][ T5645] netlink: 'syz.1.9732': attribute type 1 has an invalid length. [ 1299.391780][ T5645] netlink: 'syz.1.9732': attribute type 2 has an invalid length. [ 1299.421350][ T5857] bond9: (slave erspan0): failed to get link speed/duplex [ 1299.699257][T23565] bond9: (slave erspan0): failed to get link speed/duplex [ 1299.727514][ T5661] tipc: Enabled bearer , priority 0 [ 1299.773309][ T5660] tipc: Disabling bearer [ 1299.794856][ T5663] netlink: 'syz.5.9738': attribute type 3 has an invalid length. [ 1299.803170][ T5663] netlink: 3 bytes leftover after parsing attributes in process `syz.5.9738'. [ 1299.819134][ T5858] bond9: (slave erspan0): failed to get link speed/duplex [ 1300.249823][ T5676] netlink: 'syz.2.9744': attribute type 1 has an invalid length. [ 1300.450797][ T5688] netlink: 'syz.0.9745': attribute type 9 has an invalid length. [ 1300.578132][ T5687] bond2: (slave gretap1): making interface the new active one [ 1300.590341][ T5687] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1300.681351][ T5683] netlink: 'syz.4.9742': attribute type 1 has an invalid length. [ 1301.011021][ T5680] netlink: 'syz.1.9743': attribute type 1 has an invalid length. [ 1301.232383][ T5704] FAULT_INJECTION: forcing a failure. [ 1301.232383][ T5704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1301.263080][ T5704] CPU: 1 UID: 0 PID: 5704 Comm: syz.2.9748 Not tainted syzkaller #0 PREEMPT(full) [ 1301.263108][ T5704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1301.263121][ T5704] Call Trace: [ 1301.263129][ T5704] [ 1301.263138][ T5704] dump_stack_lvl+0xe8/0x150 [ 1301.263169][ T5704] should_fail_ex+0x40c/0x560 [ 1301.263203][ T5704] _copy_from_iter+0x1d3/0x1660 [ 1301.263233][ T5704] ? rcu_is_watching+0x15/0xb0 [ 1301.263263][ T5704] ? __mutex_lock+0x30d/0x1550 [ 1301.263287][ T5704] ? __pfx__copy_from_iter+0x10/0x10 [ 1301.263335][ T5704] ? skb_page_frag_refill+0x217/0x460 [ 1301.263384][ T5704] ? sk_msg_clone+0xcec/0xd90 [ 1301.263486][ T5704] sk_msg_memcopy_from_iter+0x35e/0x700 [ 1301.263523][ T5704] tls_sw_sendmsg+0x1a49/0x2860 [ 1301.263580][ T5704] ? __lock_acquire+0x683/0x2cf0 [ 1301.263645][ T5704] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 1301.263679][ T5704] ? __pfx_aa_sk_perm+0x10/0x10 [ 1301.263701][ T5704] ? sock_rps_record_flow+0x19/0x350 [ 1301.263735][ T5704] ? inet_send_prepare+0x5b/0x260 [ 1301.263767][ T5704] ? inet6_sendmsg+0x101/0x120 [ 1301.263791][ T5704] ? __pfx_inet6_sendmsg+0x10/0x10 [ 1301.263811][ T5704] sock_sendmsg_nosec+0x90/0x180 [ 1301.263842][ T5704] ____sys_sendmsg+0x54e/0x850 [ 1301.263870][ T5704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1301.263903][ T5704] ? import_iovec+0x73/0xa0 [ 1301.263928][ T5704] ___sys_sendmsg+0x2a5/0x360 [ 1301.263948][ T5704] ? __lock_acquire+0x683/0x2cf0 [ 1301.263981][ T5704] ? __pfx____sys_sendmsg+0x10/0x10 [ 1301.264040][ T5704] ? __fget_files+0x2a/0x420 [ 1301.264059][ T5704] ? __fget_files+0x3a2/0x420 [ 1301.264088][ T5704] __x64_sys_sendmsg+0x1b1/0x290 [ 1301.264114][ T5704] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1301.264155][ T5704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.264178][ T5704] do_syscall_64+0x174/0x580 [ 1301.264196][ T5704] ? trace_irq_disable+0x3b/0x140 [ 1301.264221][ T5704] ? clear_bhb_loop+0x40/0x90 [ 1301.264246][ T5704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.264266][ T5704] RIP: 0033:0x7fa363f9de59 [ 1301.264305][ T5704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1301.264324][ T5704] RSP: 002b:00007fa3621f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1301.264353][ T5704] RAX: ffffffffffffffda RBX: 00007fa364225fa0 RCX: 00007fa363f9de59 [ 1301.264369][ T5704] RDX: 0000000000008000 RSI: 0000200000001c40 RDI: 0000000000000003 [ 1301.264388][ T5704] RBP: 00007fa3621f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1301.264407][ T5704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1301.264421][ T5704] R13: 00007fa364226038 R14: 00007fa364225fa0 R15: 00007fff69fa9058 [ 1301.264463][ T5704] [ 1301.919644][ T5708] lo speed is unknown, defaulting to 1000 [ 1302.072074][ T5715] syzkaller0: entered promiscuous mode [ 1302.077586][ T5715] syzkaller0: entered allmulticast mode [ 1302.215579][ T5721] __nla_validate_parse: 1 callbacks suppressed [ 1302.215616][ T5721] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9753'. [ 1303.049304][ T5750] netlink: 'syz.5.9761': attribute type 3 has an invalid length. [ 1303.255510][T15107] net_ratelimit: 17 callbacks suppressed [ 1303.255532][T15107] bond9: (slave erspan0): failed to get link speed/duplex [ 1303.346384][ T5760] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9765'. [ 1303.402916][ T5760] vlan2: entered allmulticast mode [ 1303.473038][ T5763] bridge: RTM_NEWNEIGH with invalid ether address [ 1303.501171][ T5764] bond1: option updelay: invalid value (18446744073709518847) [ 1303.508686][ T5764] bond1: option updelay: allowed values 0 - 2147483647 [ 1303.517392][ T5764] bond1 (unregistering): Released all slaves [ 1303.586412][ T5763] bridge: RTM_NEWNEIGH with invalid ether address [ 1303.681417][ T5858] bond9: (slave erspan0): failed to get link speed/duplex [ 1303.786297][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1303.829750][ T5858] bond9: (slave erspan0): failed to get link speed/duplex [ 1303.979741][ T5780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9771'. [ 1303.995941][ T5780] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1304.021339][T23565] bond9: (slave erspan0): failed to get link speed/duplex [ 1304.039381][ T5780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9771'. [ 1304.176776][ T5788] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9773'. [ 1304.234502][T15107] bond9: (slave erspan0): failed to get link speed/duplex [ 1304.276212][ T5792] netlink: 80 bytes leftover after parsing attributes in process `syz.0.9774'. [ 1304.369973][T23565] bond9: (slave erspan0): failed to get link speed/duplex [ 1304.389747][ T5796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9776'. [ 1304.488998][ T5858] bond9: (slave erspan0): failed to get link speed/duplex [ 1304.673524][T15107] bond9: (slave erspan0): failed to get link speed/duplex [ 1304.798992][T23565] bond9: (slave erspan0): failed to get link speed/duplex [ 1304.866767][ T5809] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9780'. [ 1304.964609][ T5812] FAULT_INJECTION: forcing a failure. [ 1304.964609][ T5812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1304.999858][ T5812] CPU: 0 UID: 0 PID: 5812 Comm: syz.1.9781 Not tainted syzkaller #0 PREEMPT(full) [ 1304.999888][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1304.999904][ T5812] Call Trace: [ 1304.999914][ T5812] [ 1304.999924][ T5812] dump_stack_lvl+0xe8/0x150 [ 1304.999957][ T5812] should_fail_ex+0x40c/0x560 [ 1304.999992][ T5812] _copy_from_user+0x2d/0xb0 [ 1305.000018][ T5812] ___sys_recvmsg+0x173/0x5a0 [ 1305.000050][ T5812] ? __pfx____sys_recvmsg+0x10/0x10 [ 1305.000111][ T5812] ? __fget_files+0x2a/0x420 [ 1305.000166][ T5812] do_recvmmsg+0x31a/0x7f0 [ 1305.000201][ T5812] ? __pfx_do_recvmmsg+0x10/0x10 [ 1305.000238][ T5812] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1305.000281][ T5812] ? __fget_files+0x3a2/0x420 [ 1305.000313][ T5812] __x64_sys_recvmmsg+0x198/0x250 [ 1305.000343][ T5812] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1305.000378][ T5812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.000402][ T5812] do_syscall_64+0x174/0x580 [ 1305.000422][ T5812] ? trace_irq_disable+0x3b/0x140 [ 1305.000443][ T5812] ? clear_bhb_loop+0x40/0x90 [ 1305.000470][ T5812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.000493][ T5812] RIP: 0033:0x7fc82079de59 [ 1305.000512][ T5812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1305.000531][ T5812] RSP: 002b:00007fc81e9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1305.000555][ T5812] RAX: ffffffffffffffda RBX: 00007fc820a25fa0 RCX: 00007fc82079de59 [ 1305.000572][ T5812] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 1305.000587][ T5812] RBP: 00007fc81e9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1305.000601][ T5812] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 1305.000615][ T5812] R13: 00007fc820a26038 R14: 00007fc820a25fa0 R15: 00007ffeebbe60e8 [ 1305.000650][ T5812] [ 1305.273227][ T5819] netlink: 80 bytes leftover after parsing attributes in process `syz.1.9785'. [ 1305.652876][ T5839] validate_nla: 1 callbacks suppressed [ 1305.652897][ T5839] netlink: 'syz.2.9784': attribute type 1 has an invalid length. [ 1305.672215][ T5843] netlink: 112 bytes leftover after parsing attributes in process `syz.4.9793'. [ 1305.702518][ T5844] netlink: 'syz.0.9791': attribute type 1 has an invalid length. [ 1306.051135][ T5856] xt_hashlimit: max too large, truncated to 1048576 [ 1306.625098][ T5886] netlink: 'syz.1.9801': attribute type 1 has an invalid length. [ 1306.659134][ T5885] geneve1: left promiscuous mode [ 1306.992480][ T5888] lo speed is unknown, defaulting to 1000 [ 1307.088106][ T5899] FAULT_INJECTION: forcing a failure. [ 1307.088106][ T5899] name failslab, interval 1, probability 0, space 0, times 0 [ 1307.102271][ T5899] CPU: 0 UID: 0 PID: 5899 Comm: syz.4.9808 Not tainted syzkaller #0 PREEMPT(full) [ 1307.102298][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1307.102311][ T5899] Call Trace: [ 1307.102319][ T5899] [ 1307.102328][ T5899] dump_stack_lvl+0xe8/0x150 [ 1307.102359][ T5899] should_fail_ex+0x40c/0x560 [ 1307.102392][ T5899] should_failslab+0xa8/0x100 [ 1307.102421][ T5899] __kmalloc_noprof+0xfe/0x720 [ 1307.102453][ T5899] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1307.102503][ T5899] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1307.102540][ T5899] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1307.102577][ T5899] genl_family_rcv_msg_doit+0xda/0x340 [ 1307.102612][ T5899] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1307.102649][ T5899] ? apparmor_capable+0x126/0x170 [ 1307.102681][ T5899] ? bpf_lsm_capable+0x9/0x20 [ 1307.102700][ T5899] ? security_capable+0x7e/0x2c0 [ 1307.102730][ T5899] genl_rcv_msg+0x614/0x7a0 [ 1307.102765][ T5899] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1307.102792][ T5899] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 1307.102939][ T5899] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 1307.102966][ T5899] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 1307.102994][ T5899] ? __pfx_ref_tracker_free+0x10/0x10 [ 1307.103034][ T5899] netlink_rcv_skb+0x226/0x4a0 [ 1307.103057][ T5899] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1307.103093][ T5899] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1307.103130][ T5899] ? down_read+0x2be/0x330 [ 1307.103156][ T5899] genl_rcv+0x28/0x40 [ 1307.103181][ T5899] netlink_unicast+0x7bb/0x940 [ 1307.103213][ T5899] netlink_sendmsg+0x813/0xb40 [ 1307.103243][ T5899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1307.103270][ T5899] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1307.103300][ T5899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1307.103322][ T5899] sock_sendmsg_nosec+0x13a/0x180 [ 1307.103352][ T5899] ____sys_sendmsg+0x54e/0x850 [ 1307.103380][ T5899] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1307.103413][ T5899] ? import_iovec+0x73/0xa0 [ 1307.103439][ T5899] ___sys_sendmsg+0x2a5/0x360 [ 1307.103460][ T5899] ? __lock_acquire+0x683/0x2cf0 [ 1307.103486][ T5899] ? __pfx____sys_sendmsg+0x10/0x10 [ 1307.103545][ T5899] ? __fget_files+0x2a/0x420 [ 1307.103564][ T5899] ? __fget_files+0x3a2/0x420 [ 1307.103594][ T5899] __x64_sys_sendmsg+0x1b1/0x290 [ 1307.103619][ T5899] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1307.103660][ T5899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.103683][ T5899] do_syscall_64+0x174/0x580 [ 1307.103701][ T5899] ? trace_irq_disable+0x3b/0x140 [ 1307.103721][ T5899] ? clear_bhb_loop+0x40/0x90 [ 1307.103745][ T5899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.103765][ T5899] RIP: 0033:0x7f429639de59 [ 1307.103785][ T5899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1307.103801][ T5899] RSP: 002b:00007f4297284028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1307.103822][ T5899] RAX: ffffffffffffffda RBX: 00007f4296625fa0 RCX: 00007f429639de59 [ 1307.103836][ T5899] RDX: 0000000000000030 RSI: 0000200000000100 RDI: 0000000000000003 [ 1307.103848][ T5899] RBP: 00007f4297284090 R08: 0000000000000000 R09: 0000000000000000 [ 1307.103860][ T5899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1307.103872][ T5899] R13: 00007f4296626038 R14: 00007f4296625fa0 R15: 00007ffc434d8208 [ 1307.103903][ T5899] [ 1307.612652][ T5904] __nla_validate_parse: 4 callbacks suppressed [ 1307.612672][ T5904] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9809'. [ 1308.310577][T23570] net_ratelimit: 22 callbacks suppressed [ 1308.310596][T23570] bond9: (slave erspan0): failed to get link speed/duplex [ 1308.456918][ T5920] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9814'. [ 1308.527773][ T5860] bond9: (slave erspan0): failed to get link speed/duplex [ 1308.765980][T23568] bond9: (slave erspan0): failed to get link speed/duplex [ 1308.979060][T23568] bond9: (slave erspan0): failed to get link speed/duplex [ 1308.992511][ T5928] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9816'. [ 1309.058078][ T5928] vlan3: entered allmulticast mode [ 1309.148695][ T5936] netlink: 208 bytes leftover after parsing attributes in process `syz.1.9820'. [ 1309.184447][ T5938] netlink: 'syz.2.9821': attribute type 6 has an invalid length. [ 1309.225466][ T5936] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9820'. [ 1309.230288][ T5938] netlink: 'syz.2.9821': attribute type 7 has an invalid length. [ 1309.266977][ T5938] netlink: 'syz.2.9821': attribute type 8 has an invalid length. [ 1309.286970][ T5938] netlink: 'syz.2.9821': attribute type 15 has an invalid length. [ 1309.298953][ T5857] bond9: (slave erspan0): failed to get link speed/duplex [ 1309.312310][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1309.331864][ T5943] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9822'. [ 1309.398145][ T5928] bond1: option updelay: invalid value (18446744073709518847) [ 1309.405845][ T5928] bond1: option updelay: allowed values 0 - 2147483647 [ 1309.478402][ T5928] bond1 (unregistering): Released all slaves [ 1309.673585][ T5858] bond9: (slave erspan0): failed to get link speed/duplex [ 1309.795492][ T5858] bond9: (slave erspan0): failed to get link speed/duplex [ 1309.842415][ T5960] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1309.919919][T23568] bond9: (slave erspan0): failed to get link speed/duplex [ 1310.087992][T23566] bond9: (slave erspan0): failed to get link speed/duplex [ 1310.313481][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1310.574401][ T5999] pim6reg99999999: entered allmulticast mode [ 1310.684209][ T6005] netlink: 80 bytes leftover after parsing attributes in process `syz.0.9836'. [ 1310.790388][ T6008] syzkaller0: entered promiscuous mode [ 1310.807623][ T6008] syzkaller0: entered allmulticast mode [ 1310.963942][ T6008] tipc: Started in network mode [ 1311.017825][ T6008] tipc: Node identity b617bbe5a65b, cluster identity 4711 [ 1311.028416][ T6008] tipc: Enabled bearer , priority 0 [ 1311.037761][ T6006] tipc: Resetting bearer [ 1311.132139][ T6006] tipc: Disabling bearer [ 1311.348974][ T6025] netlink: 'syz.5.9842': attribute type 4 has an invalid length. [ 1311.472082][ T6029] syzkaller0: entered promiscuous mode [ 1311.477604][ T6029] syzkaller0: entered allmulticast mode [ 1311.486268][ T6033] FAULT_INJECTION: forcing a failure. [ 1311.486268][ T6033] name failslab, interval 1, probability 0, space 0, times 0 [ 1311.511037][ T6029] netlink: 220 bytes leftover after parsing attributes in process `syz.4.9841'. [ 1311.528626][ T6033] CPU: 0 UID: 0 PID: 6033 Comm: syz.1.9844 Not tainted syzkaller #0 PREEMPT(full) [ 1311.528651][ T6033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1311.528663][ T6033] Call Trace: [ 1311.528673][ T6033] [ 1311.528682][ T6033] dump_stack_lvl+0xe8/0x150 [ 1311.528710][ T6033] should_fail_ex+0x40c/0x560 [ 1311.528741][ T6033] should_failslab+0xa8/0x100 [ 1311.528765][ T6033] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1311.528792][ T6033] ? local_lock_release+0x9c/0x160 [ 1311.528824][ T6033] ? __alloc_skb+0x1d7/0x7a0 [ 1311.528839][ T6033] ? __alloc_skb+0x1d7/0x7a0 [ 1311.528863][ T6033] __alloc_skb+0x1d7/0x7a0 [ 1311.528884][ T6033] netlink_ack+0x136/0xb30 [ 1311.528903][ T6033] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1311.528932][ T6033] ? rcu_is_watching+0x15/0xb0 [ 1311.528956][ T6033] ? trace_contention_end+0x3d/0x140 [ 1311.528988][ T6033] netlink_rcv_skb+0x2a4/0x4a0 [ 1311.529010][ T6033] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1311.529031][ T6033] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1311.529069][ T6033] ? netlink_deliver_tap+0x2e/0x1b0 [ 1311.529090][ T6033] ? netlink_deliver_tap+0x2e/0x1b0 [ 1311.529114][ T6033] xfrm_netlink_rcv+0x79/0x90 [ 1311.529133][ T6033] netlink_unicast+0x7bb/0x940 [ 1311.529183][ T6033] netlink_sendmsg+0x813/0xb40 [ 1311.529213][ T6033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1311.529239][ T6033] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1311.529268][ T6033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1311.529289][ T6033] sock_sendmsg_nosec+0x13a/0x180 [ 1311.529317][ T6033] ____sys_sendmsg+0x54e/0x850 [ 1311.529343][ T6033] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1311.529373][ T6033] ? import_iovec+0x73/0xa0 [ 1311.529397][ T6033] ___sys_sendmsg+0x2a5/0x360 [ 1311.529416][ T6033] ? __lock_acquire+0x683/0x2cf0 [ 1311.529440][ T6033] ? __pfx____sys_sendmsg+0x10/0x10 [ 1311.529513][ T6033] ? __fget_files+0x2a/0x420 [ 1311.529533][ T6033] ? __fget_files+0x3a2/0x420 [ 1311.529563][ T6033] __x64_sys_sendmsg+0x1b1/0x290 [ 1311.529589][ T6033] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1311.529640][ T6033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.529662][ T6033] do_syscall_64+0x174/0x580 [ 1311.529680][ T6033] ? trace_irq_disable+0x3b/0x140 [ 1311.529716][ T6033] ? clear_bhb_loop+0x40/0x90 [ 1311.529753][ T6033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.529772][ T6033] RIP: 0033:0x7fc82079de59 [ 1311.529807][ T6033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1311.529825][ T6033] RSP: 002b:00007fc81e9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1311.529846][ T6033] RAX: ffffffffffffffda RBX: 00007fc820a25fa0 RCX: 00007fc82079de59 [ 1311.529861][ T6033] RDX: 00000000000080c4 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 1311.529874][ T6033] RBP: 00007fc81e9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1311.529886][ T6033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1311.529898][ T6033] R13: 00007fc820a26038 R14: 00007fc820a25fa0 R15: 00007ffeebbe60e8 [ 1311.529931][ T6033] [ 1311.597808][ T6029] bridge_slave_0: left allmulticast mode [ 1311.920509][ T6029] bridge_slave_0: left promiscuous mode [ 1311.926457][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.968106][ T6029] bridge_slave_1: left allmulticast mode [ 1311.999525][ T6029] bridge_slave_1: left promiscuous mode [ 1312.018468][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.038054][ T6029] bond0: (slave bond_slave_0): Releasing backup interface [ 1312.052857][ T6044] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9848'. [ 1312.063285][ T6029] bond0: (slave bond_slave_1): Releasing backup interface [ 1312.076203][ T6029] team0: Port device team_slave_0 removed [ 1312.119648][ T6029] team0: Port device team_slave_1 removed [ 1312.144702][ T6036] team0: Port device xfrm0 added [ 1312.343738][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 1312.433304][ T3291] Bluetooth: hci3: command tx timeout [ 1312.484309][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9851'. [ 1312.730870][ T6070] __nla_validate_parse: 1 callbacks suppressed [ 1312.730888][ T6070] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9855'. [ 1313.372790][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9857'. [ 1313.408141][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9858'. [ 1313.444767][ T5857] net_ratelimit: 16 callbacks suppressed [ 1313.444786][ T5857] bond9: (slave erspan0): failed to get link speed/duplex [ 1313.462007][ T6085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9858'. [ 1313.471012][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9858'. [ 1313.479877][ T6085] netlink: 'syz.0.9858': attribute type 5 has an invalid length. [ 1313.501010][ T6085] netlink: 88 bytes leftover after parsing attributes in process `syz.0.9858'. [ 1313.574594][ T6085] nbd: must specify a size in bytes for the device [ 1313.579150][ T6088] 8021q: VLANs not supported on team0 [ 1313.596373][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9858'. [ 1313.656244][ T3821] bond9: (slave erspan0): failed to get link speed/duplex [ 1313.760082][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1313.871042][ T81] bond9: (slave erspan0): failed to get link speed/duplex [ 1313.881513][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9863'. [ 1313.943262][ T6107] netlink: 'syz.4.9867': attribute type 1 has an invalid length. [ 1313.951856][ T6107] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9867'. [ 1314.011013][ T60] bond9: (slave erspan0): failed to get link speed/duplex [ 1314.011677][ T6112] netlink: 'syz.1.9868': attribute type 13 has an invalid length. [ 1314.105005][ T6126] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9868'. [ 1314.209404][ T1312] bond9: (slave erspan0): failed to get link speed/duplex [ 1314.484625][ T1312] bond9: (slave erspan0): failed to get link speed/duplex [ 1314.624377][ T6161] bond9: (slave erspan0): failed to get link speed/duplex [ 1314.784422][ T6123] bond9: (slave erspan0): failed to get link speed/duplex [ 1314.869314][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1315.187631][ T6171] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1315.296240][ T6171] bond1 (unregistering): Released all slaves [ 1315.425163][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1315.846249][ T6194] netlink: 'syz.2.9883': attribute type 1 has an invalid length. [ 1316.130221][ T6194] bond3: entered promiscuous mode [ 1316.136075][ T6194] bond3: entered allmulticast mode [ 1316.142483][ T6194] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1316.391475][ T6122] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1316.410873][ T6122] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1316.433367][ T6122] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1316.456745][ T6122] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1316.775968][ T6223] xt_hashlimit: size too large, truncated to 1048576 [ 1317.087473][ T81] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1317.259499][ T6219] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 1317.512063][ T6237] IPVS: length: 120 != 169957401544 [ 1317.617599][ T6242] FAULT_INJECTION: forcing a failure. [ 1317.617599][ T6242] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1317.653841][ T6242] CPU: 1 UID: 0 PID: 6242 Comm: syz.0.9898 Not tainted syzkaller #0 PREEMPT(full) [ 1317.653868][ T6242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1317.653880][ T6242] Call Trace: [ 1317.653889][ T6242] [ 1317.653898][ T6242] dump_stack_lvl+0xe8/0x150 [ 1317.653928][ T6242] should_fail_ex+0x40c/0x560 [ 1317.653964][ T6242] prepare_alloc_pages+0x230/0x650 [ 1317.653995][ T6242] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1317.654022][ T6242] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1317.654049][ T6242] ? __pfx_policy_nodemask+0x10/0x10 [ 1317.654071][ T6242] ? __folio_batch_add_and_move+0x11a/0xc50 [ 1317.654100][ T6242] ? lock_acquire+0x106/0x350 [ 1317.654130][ T6242] alloc_pages_mpol+0x212/0x380 [ 1317.654160][ T6242] folio_alloc_mpol_noprof+0x39/0x160 [ 1317.654186][ T6242] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1317.654214][ T6242] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1317.654250][ T6242] do_wp_page+0x1163/0x4c70 [ 1317.654296][ T6242] ? __pfx_do_wp_page+0x10/0x10 [ 1317.654320][ T6242] ? do_raw_spin_lock+0x12b/0x2f0 [ 1317.654351][ T6242] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1317.654390][ T6242] handle_mm_fault+0x1490/0x3080 [ 1317.654432][ T6242] ? handle_mm_fault+0xec/0x3080 [ 1317.654467][ T6242] ? __pfx_handle_mm_fault+0x10/0x10 [ 1317.654496][ T6242] ? follow_page_pte+0xbd0/0xe70 [ 1317.654532][ T6242] ? __pfx_follow_page_pte+0x10/0x10 [ 1317.654572][ T6242] __get_user_pages+0x1678/0x2720 [ 1317.654633][ T6242] __gup_longterm_locked+0xd52/0x15c0 [ 1317.654672][ T6242] ? lock_acquire+0x106/0x350 [ 1317.654701][ T6242] ? sanity_check_pinned_pages+0x810/0x8d0 [ 1317.654734][ T6242] gup_fast_fallback+0x1d8c/0x20e0 [ 1317.654795][ T6242] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1317.654818][ T6242] ? __kmalloc_noprof+0x1ad/0x720 [ 1317.654849][ T6242] ? kasan_save_track+0x4f/0x80 [ 1317.654872][ T6242] ? pin_user_pages_fast+0x4d/0xb0 [ 1317.654901][ T6242] iov_iter_extract_pages+0x369/0x5f0 [ 1317.654933][ T6242] extract_iter_to_sg+0xee0/0x25f0 [ 1317.654977][ T6242] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 1317.655014][ T6242] ? rcu_is_watching+0x15/0xb0 [ 1317.655039][ T6242] ? trace_kmalloc+0x2a/0xf0 [ 1317.655071][ T6242] ? __asan_memset+0x22/0x50 [ 1317.655102][ T6242] af_alg_get_rsgl+0x493/0x8d0 [ 1317.655150][ T6242] aead_recvmsg+0x51d/0xd10 [ 1317.655179][ T6242] ? __pfx_aa_sk_perm+0x10/0x10 [ 1317.655206][ T6242] ? __pfx_aead_recvmsg+0x10/0x10 [ 1317.655223][ T6242] ? __lock_acquire+0x683/0x2cf0 [ 1317.655243][ T6242] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1317.655269][ T6242] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1317.655294][ T6242] ? security_socket_recvmsg+0x7e/0x2c0 [ 1317.655322][ T6242] ? __pfx_aead_recvmsg+0x10/0x10 [ 1317.655343][ T6242] sock_recvmsg+0x196/0x1e0 [ 1317.655376][ T6242] ____sys_recvmsg+0x1e6/0x4a0 [ 1317.655409][ T6242] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1317.655448][ T6242] ? import_iovec+0x73/0xa0 [ 1317.655473][ T6242] ___sys_recvmsg+0x213/0x5a0 [ 1317.655511][ T6242] ? __pfx____sys_recvmsg+0x10/0x10 [ 1317.655537][ T6242] ? __fget_files+0x2a/0x420 [ 1317.655574][ T6242] ? __fget_files+0x3a2/0x420 [ 1317.655603][ T6242] __x64_sys_recvmsg+0x1ae/0x290 [ 1317.655628][ T6242] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1317.655673][ T6242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.655694][ T6242] do_syscall_64+0x174/0x580 [ 1317.655714][ T6242] ? trace_irq_disable+0x3b/0x140 [ 1317.655733][ T6242] ? clear_bhb_loop+0x40/0x90 [ 1317.655757][ T6242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.655776][ T6242] RIP: 0033:0x7f065919de59 [ 1317.655800][ T6242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1317.655817][ T6242] RSP: 002b:00007f065a0cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1317.655856][ T6242] RAX: ffffffffffffffda RBX: 00007f0659425fa0 RCX: 00007f065919de59 [ 1317.655873][ T6242] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1317.655906][ T6242] RBP: 00007f065a0cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1317.655920][ T6242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1317.655934][ T6242] R13: 00007f0659426038 R14: 00007f0659425fa0 R15: 00007ffc3a69d2d8 [ 1317.655971][ T6242] [ 1317.722154][ T6245] gretap0: entered promiscuous mode [ 1318.254715][ T6245] macvtap0: entered promiscuous mode [ 1318.260260][ T6245] macvtap0: entered allmulticast mode [ 1318.276622][ T6245] gretap0: entered allmulticast mode [ 1318.546683][ T6118] net_ratelimit: 14 callbacks suppressed [ 1318.546702][ T6118] bond9: (slave erspan0): failed to get link speed/duplex [ 1318.679021][ T6122] bond9: (slave erspan0): failed to get link speed/duplex [ 1318.865224][ T6155] bond9: (slave erspan0): failed to get link speed/duplex [ 1319.089284][ T6122] bond9: (slave erspan0): failed to get link speed/duplex [ 1319.214371][ T6120] bond9: (slave erspan0): failed to get link speed/duplex [ 1319.304903][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1319.349219][ T6120] bond9: (slave erspan0): failed to get link speed/duplex [ 1319.469182][ T6144] bond9: (slave erspan0): failed to get link speed/duplex [ 1319.579086][ T6144] bond9: (slave erspan0): failed to get link speed/duplex [ 1319.700194][ T6119] bond9: (slave erspan0): failed to get link speed/duplex [ 1319.740014][ T6223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1320.245613][ T6283] __nla_validate_parse: 9 callbacks suppressed [ 1320.245633][ T6283] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9910'. [ 1321.621498][ T6324] bridge0: port 3(vlan3) entered blocking state [ 1321.643863][ T6324] bridge0: port 3(vlan3) entered disabled state [ 1321.650767][ T6324] vlan3: entered allmulticast mode [ 1321.655924][ T6324] geneve0: entered allmulticast mode [ 1321.662901][ T6324] vlan3: entered promiscuous mode [ 1321.667949][ T6324] geneve0: entered promiscuous mode [ 1321.789667][ T6329] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9922'. [ 1321.857106][ T6329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1321.948489][ T6337] netlink: 344 bytes leftover after parsing attributes in process `syz.5.9926'. [ 1322.100879][ T6346] FAULT_INJECTION: forcing a failure. [ 1322.100879][ T6346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1322.152585][ T6346] CPU: 0 UID: 0 PID: 6346 Comm: syz.5.9929 Not tainted syzkaller #0 PREEMPT(full) [ 1322.152616][ T6346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1322.152630][ T6346] Call Trace: [ 1322.152640][ T6346] [ 1322.152650][ T6346] dump_stack_lvl+0xe8/0x150 [ 1322.152683][ T6346] should_fail_ex+0x40c/0x560 [ 1322.152721][ T6346] _copy_from_user+0x2d/0xb0 [ 1322.152747][ T6346] generic_map_update_batch+0x6a3/0x9a0 [ 1322.152789][ T6346] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1322.152829][ T6346] ? __fget_files+0x2a/0x420 [ 1322.152860][ T6346] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1322.152890][ T6346] bpf_map_do_batch+0x391/0x630 [ 1322.152949][ T6346] __sys_bpf+0xbe5/0xd90 [ 1322.153017][ T6346] ? __pfx___sys_bpf+0x10/0x10 [ 1322.153052][ T6346] ? __fget_files+0x2a/0x420 [ 1322.153094][ T6346] ? ksys_write+0x242/0x270 [ 1322.153123][ T6346] ? __pfx_ksys_write+0x10/0x10 [ 1322.153157][ T6346] __x64_sys_bpf+0xba/0xd0 [ 1322.153189][ T6346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.153214][ T6346] do_syscall_64+0x174/0x580 [ 1322.153238][ T6346] ? clear_bhb_loop+0x40/0x90 [ 1322.153266][ T6346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.153288][ T6346] RIP: 0033:0x7fe8ab19de59 [ 1322.153309][ T6346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1322.153328][ T6346] RSP: 002b:00007fe8a93f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1322.153352][ T6346] RAX: ffffffffffffffda RBX: 00007fe8ab425fa0 RCX: 00007fe8ab19de59 [ 1322.153368][ T6346] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 1322.153383][ T6346] RBP: 00007fe8a93f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1322.153397][ T6346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1322.153410][ T6346] R13: 00007fe8ab426038 R14: 00007fe8ab425fa0 R15: 00007ffe7bcba568 [ 1322.153445][ T6346] [ 1322.385209][ T6352] netlink: 'syz.0.9931': attribute type 3 has an invalid length. [ 1322.422302][ T6352] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9931'. [ 1322.601329][ T6359] tipc: Enabled bearer , priority 0 [ 1322.633814][ T6357] tipc: Disabling bearer [ 1322.662190][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 1322.913536][ T6371] netlink: 'syz.5.9935': attribute type 1 has an invalid length. [ 1323.116969][ T6375] FAULT_INJECTION: forcing a failure. [ 1323.116969][ T6375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1323.130061][ T6375] CPU: 1 UID: 0 PID: 6375 Comm: syz.1.9937 Not tainted syzkaller #0 PREEMPT(full) [ 1323.130087][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1323.130099][ T6375] Call Trace: [ 1323.130108][ T6375] [ 1323.130116][ T6375] dump_stack_lvl+0xe8/0x150 [ 1323.130147][ T6375] should_fail_ex+0x40c/0x560 [ 1323.130180][ T6375] _copy_from_user+0x2d/0xb0 [ 1323.130203][ T6375] bpf_prog_test_run_xdp+0xe12/0x11d0 [ 1323.130244][ T6375] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1323.130274][ T6375] ? __fget_files+0x2a/0x420 [ 1323.130300][ T6375] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1323.130324][ T6375] bpf_prog_test_run+0x2c5/0x340 [ 1323.130351][ T6375] __sys_bpf+0xa22/0xd90 [ 1323.130379][ T6375] ? __pfx___sys_bpf+0x10/0x10 [ 1323.130409][ T6375] ? __fget_files+0x2a/0x420 [ 1323.130445][ T6375] ? ksys_write+0x242/0x270 [ 1323.130472][ T6375] ? __pfx_ksys_write+0x10/0x10 [ 1323.130501][ T6375] __x64_sys_bpf+0xba/0xd0 [ 1323.130531][ T6375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.130554][ T6375] do_syscall_64+0x174/0x580 [ 1323.130573][ T6375] ? trace_irq_disable+0x3b/0x140 [ 1323.130593][ T6375] ? clear_bhb_loop+0x40/0x90 [ 1323.130618][ T6375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.130639][ T6375] RIP: 0033:0x7fc82079de59 [ 1323.130658][ T6375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1323.130676][ T6375] RSP: 002b:00007fc81e9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1323.130705][ T6375] RAX: ffffffffffffffda RBX: 00007fc820a25fa0 RCX: 00007fc82079de59 [ 1323.130721][ T6375] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 1323.130734][ T6375] RBP: 00007fc81e9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1323.130747][ T6375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1323.130760][ T6375] R13: 00007fc820a26038 R14: 00007fc820a25fa0 R15: 00007ffeebbe60e8 [ 1323.130792][ T6375] [ 1323.612009][ C1] net_ratelimit: 24 callbacks suppressed [ 1323.612033][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1323.627975][ T6155] bond9: (slave erspan0): failed to get link speed/duplex [ 1323.668970][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9941'. [ 1323.696386][ T6383] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9939'. [ 1323.754139][ T81] bond9: (slave erspan0): failed to get link speed/duplex [ 1323.853954][ T6389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1323.870395][ T6144] bond9: (slave erspan0): failed to get link speed/duplex [ 1324.136403][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9943'. [ 1324.240326][ T6395] tipc: Started in network mode [ 1324.248571][ T6395] tipc: Node identity 3afe8b91a977, cluster identity 4711 [ 1324.259439][ T6395] tipc: Enabled bearer , priority 0 [ 1324.306441][ T6393] tipc: Disabling bearer [ 1324.317320][ T6397] veth0: entered promiscuous mode [ 1324.323946][ T6397] netlink: 4644 bytes leftover after parsing attributes in process `syz.4.9944'. [ 1324.333670][ T6155] bond9: (slave erspan0): failed to get link speed/duplex [ 1324.346820][ T6396] veth0: left promiscuous mode [ 1324.459281][ T6122] bond9: (slave erspan0): failed to get link speed/duplex [ 1324.583375][ T6155] bond9: (slave erspan0): failed to get link speed/duplex [ 1324.639174][ T6405] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9949'. [ 1324.658132][ T6405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1324.722545][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1324.752138][ T6122] bond9: (slave erspan0): failed to get link speed/duplex [ 1324.956345][ T6120] bond9: (slave erspan0): failed to get link speed/duplex [ 1325.041339][ T6427] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9954'. [ 1325.236400][ T6438] netlink: 'syz.2.9958': attribute type 3 has an invalid length. [ 1325.320342][ T6435] lo speed is unknown, defaulting to 1000 [ 1325.440744][ T6446] __nla_validate_parse: 4 callbacks suppressed [ 1325.440764][ T6446] netlink: 912 bytes leftover after parsing attributes in process `syz.4.9961'. [ 1325.535493][ T6450] syzkaller0: entered promiscuous mode [ 1325.548393][ T6450] syzkaller0: entered allmulticast mode [ 1325.661160][ T6450] netlink: 'syz.1.9963': attribute type 13 has an invalid length. [ 1325.704574][ T6122] wlan1: Trigger new scan to find an IBSS to join [ 1325.926304][ T6464] FAULT_INJECTION: forcing a failure. [ 1325.926304][ T6464] name failslab, interval 1, probability 0, space 0, times 0 [ 1325.959145][ T6464] CPU: 1 UID: 0 PID: 6464 Comm: syz.4.9967 Not tainted syzkaller #0 PREEMPT(full) [ 1325.959172][ T6464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1325.959185][ T6464] Call Trace: [ 1325.959193][ T6464] [ 1325.959202][ T6464] dump_stack_lvl+0xe8/0x150 [ 1325.959233][ T6464] should_fail_ex+0x40c/0x560 [ 1325.959266][ T6464] should_failslab+0xa8/0x100 [ 1325.959292][ T6464] __kmalloc_node_track_caller_noprof+0x100/0x730 [ 1325.959325][ T6464] ? kasan_save_track+0x4f/0x80 [ 1325.959344][ T6464] ? kasan_save_track+0x3e/0x80 [ 1325.959361][ T6464] ? xfrm_dump_sa+0x34b/0x5e0 [ 1325.959381][ T6464] ? xfrm_dump_sa+0x34b/0x5e0 [ 1325.959407][ T6464] kmemdup_noprof+0x2b/0x70 [ 1325.959432][ T6464] xfrm_dump_sa+0x34b/0x5e0 [ 1325.959459][ T6464] ? __pfx_xfrm_dump_sa+0x10/0x10 [ 1325.959520][ T6464] ? netlink_dump+0x1e7/0xee0 [ 1325.959549][ T6464] ? __alloc_skb+0x4cc/0x7a0 [ 1325.959575][ T6464] netlink_dump+0x711/0xee0 [ 1325.959597][ T6464] ? __netlink_lookup+0xc6/0x8b0 [ 1325.959631][ T6464] ? __pfx_netlink_dump+0x10/0x10 [ 1325.959665][ T6464] ? netlink_lookup+0x30/0x200 [ 1325.959685][ T6464] ? netlink_lookup+0x30/0x200 [ 1325.959714][ T6464] __netlink_dump_start+0x589/0x7b0 [ 1325.959744][ T6464] xfrm_user_rcv_msg+0x903/0xf30 [ 1325.959770][ T6464] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1325.959826][ T6464] ? __mutex_trylock_common+0x15f/0x270 [ 1325.959857][ T6464] ? __pfx_xfrm_dump_sa+0x10/0x10 [ 1325.959875][ T6464] ? __pfx_xfrm_dump_sa_done+0x10/0x10 [ 1325.959897][ T6464] ? rcu_is_watching+0x15/0xb0 [ 1325.959923][ T6464] ? trace_contention_end+0x3d/0x140 [ 1325.959958][ T6464] netlink_rcv_skb+0x226/0x4a0 [ 1325.959988][ T6464] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1325.960010][ T6464] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1325.960051][ T6464] ? netlink_deliver_tap+0x2e/0x1b0 [ 1325.960073][ T6464] ? netlink_deliver_tap+0x2e/0x1b0 [ 1325.960100][ T6464] xfrm_netlink_rcv+0x79/0x90 [ 1325.960120][ T6464] netlink_unicast+0x7bb/0x940 [ 1325.960152][ T6464] netlink_sendmsg+0x813/0xb40 [ 1325.960186][ T6464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1325.960214][ T6464] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1325.960245][ T6464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1325.960267][ T6464] sock_sendmsg_nosec+0x13a/0x180 [ 1325.960297][ T6464] ____sys_sendmsg+0x54e/0x850 [ 1325.960327][ T6464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1325.960359][ T6464] ? import_iovec+0x73/0xa0 [ 1325.960385][ T6464] ___sys_sendmsg+0x2a5/0x360 [ 1325.960405][ T6464] ? __lock_acquire+0x683/0x2cf0 [ 1325.960432][ T6464] ? __pfx____sys_sendmsg+0x10/0x10 [ 1325.960494][ T6464] ? __fget_files+0x2a/0x420 [ 1325.960514][ T6464] ? __fget_files+0x3a2/0x420 [ 1325.960545][ T6464] __x64_sys_sendmsg+0x1b1/0x290 [ 1325.960571][ T6464] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1325.960614][ T6464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.960636][ T6464] do_syscall_64+0x174/0x580 [ 1325.960662][ T6464] ? trace_irq_disable+0x3b/0x140 [ 1325.960682][ T6464] ? clear_bhb_loop+0x40/0x90 [ 1325.960708][ T6464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.960727][ T6464] RIP: 0033:0x7f429639de59 [ 1325.960746][ T6464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1325.960762][ T6464] RSP: 002b:00007f4297284028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1325.960785][ T6464] RAX: ffffffffffffffda RBX: 00007f4296625fa0 RCX: 00007f429639de59 [ 1325.960799][ T6464] RDX: 0000000020040840 RSI: 0000200000000080 RDI: 0000000000000003 [ 1325.960813][ T6464] RBP: 00007f4297284090 R08: 0000000000000000 R09: 0000000000000000 [ 1325.960826][ T6464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1325.960837][ T6464] R13: 00007f4296626038 R14: 00007f4296625fa0 R15: 00007ffc434d8208 [ 1325.960872][ T6464] [ 1326.010419][ T6461] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9966'. [ 1326.412458][ T6465] netlink: 'syz.2.9964': attribute type 1 has an invalid length. [ 1326.583408][ T6471] netlink: 'syz.4.9968': attribute type 1 has an invalid length. [ 1326.591204][ T6471] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9968'. [ 1326.949826][ T6487] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9973'. [ 1326.985232][ T6487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1327.387816][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9978'. [ 1327.685899][ T6509] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1327.713573][ T6509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9981'. [ 1328.621310][ T6524] netlink: 'syz.4.9988': attribute type 1 has an invalid length. [ 1328.739188][ T6538] tipc: Enabled bearer , priority 0 [ 1328.785157][ T6144] net_ratelimit: 20 callbacks suppressed [ 1328.785179][ T6144] bond9: (slave erspan0): failed to get link speed/duplex [ 1328.835905][ T6538] gre0: entered allmulticast mode [ 1328.972501][ T6535] tipc: Disabling bearer [ 1329.104144][ T6153] bond9: (slave erspan0): failed to get link speed/duplex [ 1329.210508][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1329.229151][ T6153] bond9: (slave erspan0): failed to get link speed/duplex [ 1329.349296][ T6155] bond9: (slave erspan0): failed to get link speed/duplex [ 1329.456138][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9998'. [ 1329.513683][ T6559] netlink: 'syz.4.9998': attribute type 5 has an invalid length. [ 1329.526691][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9998'. [ 1329.541660][ T6559] sctp: [Deprecated]: syz.4.9998 (pid 6559) Use of int in maxseg socket option. [ 1329.541660][ T6559] Use struct sctp_assoc_value instead [ 1329.571497][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9997'. [ 1329.767303][ T6144] bond9: (slave erspan0): failed to get link speed/duplex [ 1329.789398][ T81] wlan1: Trigger new scan to find an IBSS to join [ 1329.880429][ T6155] bond9: (slave erspan0): failed to get link speed/duplex [ 1330.021587][ T6120] bond9: (slave erspan0): failed to get link speed/duplex [ 1330.051751][ T6583] netlink: 'syz.4.10006': attribute type 4 has an invalid length. [ 1330.210344][ T81] bond9: (slave erspan0): failed to get link speed/duplex [ 1330.319653][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1330.672086][ T6603] syzkaller0: entered promiscuous mode [ 1330.685025][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10017'. [ 1330.691140][ T6603] syzkaller0: entered allmulticast mode [ 1330.764071][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1330.939800][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.222717][ T6618] FAULT_INJECTION: forcing a failure. [ 1331.222717][ T6618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1331.262528][ T6618] CPU: 0 UID: 0 PID: 6618 Comm: syz.0.10020 Not tainted syzkaller #0 PREEMPT(full) [ 1331.262574][ T6618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1331.262587][ T6618] Call Trace: [ 1331.262595][ T6618] [ 1331.262605][ T6618] dump_stack_lvl+0xe8/0x150 [ 1331.262655][ T6618] should_fail_ex+0x40c/0x560 [ 1331.262691][ T6618] _copy_from_user+0x2d/0xb0 [ 1331.262716][ T6618] generic_map_update_batch+0x651/0x9a0 [ 1331.262758][ T6618] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1331.262790][ T6618] ? __fget_files+0x2a/0x420 [ 1331.262820][ T6618] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1331.262850][ T6618] bpf_map_do_batch+0x391/0x630 [ 1331.262881][ T6618] __sys_bpf+0xbe5/0xd90 [ 1331.262912][ T6618] ? __pfx___sys_bpf+0x10/0x10 [ 1331.262947][ T6618] ? __fget_files+0x2a/0x420 [ 1331.262988][ T6618] ? ksys_write+0x242/0x270 [ 1331.263018][ T6618] ? __pfx_ksys_write+0x10/0x10 [ 1331.263148][ T6618] __x64_sys_bpf+0xba/0xd0 [ 1331.263182][ T6618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.263206][ T6618] do_syscall_64+0x174/0x580 [ 1331.263227][ T6618] ? trace_irq_disable+0x3b/0x140 [ 1331.263252][ T6618] ? clear_bhb_loop+0x40/0x90 [ 1331.263279][ T6618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.263301][ T6618] RIP: 0033:0x7f065919de59 [ 1331.263322][ T6618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1331.263341][ T6618] RSP: 002b:00007f065a0cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1331.263365][ T6618] RAX: ffffffffffffffda RBX: 00007f0659425fa0 RCX: 00007f065919de59 [ 1331.263381][ T6618] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 000000000000001a [ 1331.263396][ T6618] RBP: 00007f065a0cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1331.263409][ T6618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1331.263422][ T6618] R13: 00007f0659426038 R14: 00007f0659425fa0 R15: 00007ffc3a69d2d8 [ 1331.263457][ T6618] [ 1331.883126][ T6629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10024'. [ 1332.046355][ T6641] netlink: 'syz.1.10028': attribute type 2 has an invalid length. [ 1332.056083][ T6641] netlink: 232 bytes leftover after parsing attributes in process `syz.1.10028'. [ 1332.242027][ T6647] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10031'. [ 1332.270240][ T6647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1332.317340][ T6645] ip6gre1: entered promiscuous mode [ 1332.329982][ T6645] ip6gre1: entered allmulticast mode [ 1332.688216][ T6658] FAULT_INJECTION: forcing a failure. [ 1332.688216][ T6658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1332.722637][ T6658] CPU: 0 UID: 0 PID: 6658 Comm: syz.5.10034 Not tainted syzkaller #0 PREEMPT(full) [ 1332.722666][ T6658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1332.722679][ T6658] Call Trace: [ 1332.722687][ T6658] [ 1332.722696][ T6658] dump_stack_lvl+0xe8/0x150 [ 1332.722727][ T6658] should_fail_ex+0x40c/0x560 [ 1332.722761][ T6658] _copy_from_user+0x2d/0xb0 [ 1332.722785][ T6658] __sys_bpf+0x2e7/0xd90 [ 1332.722815][ T6658] ? __pfx___sys_bpf+0x10/0x10 [ 1332.722847][ T6658] ? __fget_files+0x2a/0x420 [ 1332.722896][ T6658] ? ksys_write+0x242/0x270 [ 1332.722921][ T6658] ? __pfx_ksys_write+0x10/0x10 [ 1332.722950][ T6658] __x64_sys_bpf+0xba/0xd0 [ 1332.722978][ T6658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.722999][ T6658] do_syscall_64+0x174/0x580 [ 1332.723017][ T6658] ? trace_irq_disable+0x3b/0x140 [ 1332.723036][ T6658] ? clear_bhb_loop+0x40/0x90 [ 1332.723060][ T6658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.723079][ T6658] RIP: 0033:0x7fe8ab19de59 [ 1332.723097][ T6658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1332.723114][ T6658] RSP: 002b:00007fe8a93f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1332.723134][ T6658] RAX: ffffffffffffffda RBX: 00007fe8ab425fa0 RCX: 00007fe8ab19de59 [ 1332.723148][ T6658] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 1332.723163][ T6658] RBP: 00007fe8a93f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1332.723175][ T6658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1332.723187][ T6658] R13: 00007fe8ab426038 R14: 00007fe8ab425fa0 R15: 00007ffe7bcba568 [ 1332.723218][ T6658] [ 1332.835399][ T6661] netlink: 'syz.0.10035': attribute type 1 has an invalid length. [ 1332.941726][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 1333.008361][ T6661] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1333.024896][ T6665] macvlan2: entered promiscuous mode [ 1333.033096][ T6665] macvlan2: entered allmulticast mode [ 1333.042786][ T6665] bond1: entered allmulticast mode [ 1333.047986][ T6665] bond1: entered promiscuous mode [ 1333.054551][ T6665] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1333.066179][ T6665] team0: Port device macvlan2 added [ 1333.103296][ T6661] bond1: (slave ip6gretap2): making interface the new active one [ 1333.115007][ T6661] ip6gretap2: entered promiscuous mode [ 1333.121077][ T6661] ip6gretap2: entered allmulticast mode [ 1333.142775][ T6661] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1333.234522][ T6666] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10036'. [ 1333.380341][ T6667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1333.825984][ T6118] net_ratelimit: 21 callbacks suppressed [ 1333.826003][ T6118] bond9: (slave erspan0): failed to get link speed/duplex [ 1333.851086][ T6684] lo speed is unknown, defaulting to 1000 [ 1333.872048][ T6687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10043'. [ 1333.959056][ T6153] bond9: (slave erspan0): failed to get link speed/duplex [ 1333.975402][ T6691] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10046'. [ 1333.995283][ T6691] ip6gre2: entered promiscuous mode [ 1334.000610][ T6691] ip6gre2: entered allmulticast mode [ 1334.025842][ T6687] syzkaller0: entered promiscuous mode [ 1334.044097][ T6687] syzkaller0: entered allmulticast mode [ 1334.248420][ T6118] bond9: (slave erspan0): failed to get link speed/duplex [ 1334.778473][ T6716] FAULT_INJECTION: forcing a failure. [ 1334.778473][ T6716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1334.803483][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1334.847398][ T6716] CPU: 1 UID: 0 PID: 6716 Comm: syz.5.10050 Not tainted syzkaller #0 PREEMPT(full) [ 1334.847434][ T6716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1334.847447][ T6716] Call Trace: [ 1334.847456][ T6716] [ 1334.847464][ T6716] dump_stack_lvl+0xe8/0x150 [ 1334.847495][ T6716] should_fail_ex+0x40c/0x560 [ 1334.847540][ T6716] _copy_to_user+0x31/0xb0 [ 1334.847563][ T6716] simple_read_from_buffer+0xe1/0x170 [ 1334.847588][ T6716] proc_fail_nth_read+0x1bb/0x230 [ 1334.847612][ T6716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1334.847635][ T6716] ? rw_verify_area+0x24a/0x4c0 [ 1334.847659][ T6716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1334.847678][ T6716] vfs_read+0x213/0xa80 [ 1334.847705][ T6716] ? __pfx___mutex_lock+0x10/0x10 [ 1334.847725][ T6716] ? __pfx_vfs_read+0x10/0x10 [ 1334.847748][ T6716] ? __fget_files+0x2a/0x420 [ 1334.847779][ T6716] ? __fget_files+0x3a2/0x420 [ 1334.847797][ T6716] ? __fget_files+0x2a/0x420 [ 1334.847828][ T6716] ksys_read+0x150/0x270 [ 1334.847853][ T6716] ? __pfx_ksys_read+0x10/0x10 [ 1334.847883][ T6716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.847905][ T6716] do_syscall_64+0x174/0x580 [ 1334.847922][ T6716] ? trace_irq_disable+0x3b/0x140 [ 1334.847940][ T6716] ? clear_bhb_loop+0x40/0x90 [ 1334.847963][ T6716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.847982][ T6716] RIP: 0033:0x7fe8ab15e68e [ 1334.848000][ T6716] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1334.848017][ T6716] RSP: 002b:00007fe8a93f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1334.848037][ T6716] RAX: ffffffffffffffda RBX: 00007fe8a93f66c0 RCX: 00007fe8ab15e68e [ 1334.848051][ T6716] RDX: 000000000000000f RSI: 00007fe8a93f60a0 RDI: 0000000000000004 [ 1334.848064][ T6716] RBP: 00007fe8a93f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1334.848077][ T6716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1334.848088][ T6716] R13: 00007fe8ab426038 R14: 00007fe8ab425fa0 R15: 00007ffe7bcba568 [ 1334.848120][ T6716] [ 1335.351929][ T6118] bond9: (slave erspan0): failed to get link speed/duplex [ 1335.521411][ T6737] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10057'. [ 1335.557975][ T6737] ip6gre2: entered promiscuous mode [ 1335.601156][ T6737] ip6gre2: entered allmulticast mode [ 1335.698103][ T6122] bond9: (slave erspan0): failed to get link speed/duplex [ 1335.859839][ T6747] geneve2: entered promiscuous mode [ 1335.907311][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1335.915627][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1336.082112][ T6749] gre0: entered promiscuous mode [ 1336.087133][ T6749] gre0: entered allmulticast mode [ 1336.124615][ T6155] bond9: (slave erspan0): failed to get link speed/duplex [ 1336.153959][ T6759] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10064'. [ 1336.259508][ T6155] bond9: (slave erspan0): failed to get link speed/duplex [ 1336.379225][ T81] bond9: (slave erspan0): failed to get link speed/duplex [ 1336.490228][ T6772] gretap1: entered allmulticast mode [ 1336.668521][ T6770] syzkaller0: entered promiscuous mode [ 1336.702370][ T6770] syzkaller0: entered allmulticast mode [ 1336.718835][ T6783] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10071'. [ 1336.742793][ T6781] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.10069'. [ 1336.779075][ T6774] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.10069'. [ 1338.249307][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10086'. [ 1339.236781][ C1] net_ratelimit: 4 callbacks suppressed [ 1339.236796][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1340.274326][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1340.515657][ T6832] tipc: Enabling of bearer rejected, failed to enable media [ 1340.539090][ T81] bond9: (slave erspan0): failed to get link speed/duplex [ 1340.629351][ T6848] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10088'. [ 1340.649090][ T6120] bond9: (slave erspan0): failed to get link speed/duplex [ 1340.699478][ T6854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1340.758836][ T6122] bond9: (slave erspan0): failed to get link speed/duplex [ 1340.796298][ T6858] FAULT_INJECTION: forcing a failure. [ 1340.796298][ T6858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1340.809385][ T6858] CPU: 1 UID: 0 PID: 6858 Comm: syz.0.10091 Not tainted syzkaller #0 PREEMPT(full) [ 1340.809409][ T6858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1340.809421][ T6858] Call Trace: [ 1340.809429][ T6858] [ 1340.809437][ T6858] dump_stack_lvl+0xe8/0x150 [ 1340.809467][ T6858] should_fail_ex+0x40c/0x560 [ 1340.809500][ T6858] _copy_from_user+0x2d/0xb0 [ 1340.809522][ T6858] ___sys_recvmsg+0x173/0x5a0 [ 1340.809550][ T6858] ? __pfx____sys_recvmsg+0x10/0x10 [ 1340.809577][ T6858] ? __fget_files+0x2a/0x420 [ 1340.809623][ T6858] do_recvmmsg+0x31a/0x7f0 [ 1340.809654][ T6858] ? __pfx_do_recvmmsg+0x10/0x10 [ 1340.809686][ T6858] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1340.809718][ T6858] ? __fget_files+0x3a2/0x420 [ 1340.809744][ T6858] __x64_sys_recvmmsg+0x198/0x250 [ 1340.809771][ T6858] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1340.809801][ T6858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.809823][ T6858] do_syscall_64+0x174/0x580 [ 1340.809840][ T6858] ? trace_irq_disable+0x3b/0x140 [ 1340.809858][ T6858] ? clear_bhb_loop+0x40/0x90 [ 1340.809881][ T6858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.809899][ T6858] RIP: 0033:0x7f065919de59 [ 1340.809916][ T6858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1340.809931][ T6858] RSP: 002b:00007f065a0cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1340.809951][ T6858] RAX: ffffffffffffffda RBX: 00007f0659425fa0 RCX: 00007f065919de59 [ 1340.809965][ T6858] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000004 [ 1340.809997][ T6858] RBP: 00007f065a0cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1340.810010][ T6858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1340.810022][ T6858] R13: 00007f0659426038 R14: 00007f0659425fa0 R15: 00007ffc3a69d2d8 [ 1340.810054][ T6858] [ 1340.879237][ T6113] bond9: (slave erspan0): failed to get link speed/duplex [ 1341.097558][ T6861] netlink: zone id is out of range [ 1341.102882][ T6861] netlink: zone id is out of range [ 1341.123652][ T6861] netlink: zone id is out of range [ 1341.137728][ T6861] FAULT_INJECTION: forcing a failure. [ 1341.137728][ T6861] name failslab, interval 1, probability 0, space 0, times 0 [ 1341.186551][ T6861] CPU: 1 UID: 0 PID: 6861 Comm: syz.2.10092 Not tainted syzkaller #0 PREEMPT(full) [ 1341.186578][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1341.186590][ T6861] Call Trace: [ 1341.186599][ T6861] [ 1341.186608][ T6861] dump_stack_lvl+0xe8/0x150 [ 1341.186638][ T6861] should_fail_ex+0x40c/0x560 [ 1341.186672][ T6861] should_failslab+0xa8/0x100 [ 1341.186698][ T6861] __kmalloc_cache_noprof+0xa8/0x660 [ 1341.186732][ T6861] ? ovs_ct_limit_cmd_set+0x2f8/0xb00 [ 1341.186757][ T6861] ? ovs_ct_limit_cmd_set+0x2f8/0xb00 [ 1341.186787][ T6861] ovs_ct_limit_cmd_set+0x2f8/0xb00 [ 1341.186826][ T6861] genl_family_rcv_msg_doit+0x233/0x340 [ 1341.186863][ T6861] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1341.186906][ T6861] ? bpf_lsm_capable+0x9/0x20 [ 1341.186924][ T6861] ? security_capable+0x7e/0x2c0 [ 1341.186956][ T6861] genl_rcv_msg+0x614/0x7a0 [ 1341.186995][ T6861] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1341.187023][ T6861] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 1341.187048][ T6861] ? __pfx_ref_tracker_free+0x10/0x10 [ 1341.187088][ T6861] netlink_rcv_skb+0x226/0x4a0 [ 1341.187112][ T6861] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1341.187142][ T6861] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1341.187180][ T6861] ? down_read+0x2be/0x330 [ 1341.187206][ T6861] genl_rcv+0x28/0x40 [ 1341.187232][ T6861] netlink_unicast+0x7bb/0x940 [ 1341.187269][ T6861] netlink_sendmsg+0x813/0xb40 [ 1341.187303][ T6861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1341.187331][ T6861] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1341.187362][ T6861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1341.187383][ T6861] sock_sendmsg_nosec+0x13a/0x180 [ 1341.187414][ T6861] ____sys_sendmsg+0x54e/0x850 [ 1341.187443][ T6861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1341.187475][ T6861] ? import_iovec+0x73/0xa0 [ 1341.187500][ T6861] ___sys_sendmsg+0x2a5/0x360 [ 1341.187521][ T6861] ? __lock_acquire+0x683/0x2cf0 [ 1341.187548][ T6861] ? __pfx____sys_sendmsg+0x10/0x10 [ 1341.187607][ T6861] ? __fget_files+0x2a/0x420 [ 1341.187626][ T6861] ? __fget_files+0x3a2/0x420 [ 1341.187657][ T6861] __x64_sys_sendmsg+0x1b1/0x290 [ 1341.187682][ T6861] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1341.187724][ T6861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.187762][ T6861] do_syscall_64+0x174/0x580 [ 1341.187780][ T6861] ? trace_irq_disable+0x3b/0x140 [ 1341.187800][ T6861] ? clear_bhb_loop+0x40/0x90 [ 1341.187825][ T6861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.187846][ T6861] RIP: 0033:0x7fa363f9de59 [ 1341.187864][ T6861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1341.187882][ T6861] RSP: 002b:00007fa3621f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1341.187904][ T6861] RAX: ffffffffffffffda RBX: 00007fa364225fa0 RCX: 00007fa363f9de59 [ 1341.187918][ T6861] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 1341.187930][ T6861] RBP: 00007fa3621f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1341.187943][ T6861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1341.187955][ T6861] R13: 00007fa364226038 R14: 00007fa364225fa0 R15: 00007fff69fa9058 [ 1341.187987][ T6861] [ 1341.195897][ T6865] FAULT_INJECTION: forcing a failure. [ 1341.195897][ T6865] name failslab, interval 1, probability 0, space 0, times 0 [ 1341.324616][ T6868] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10095'. [ 1341.402089][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1341.469558][ T6865] CPU: 0 UID: 0 PID: 6865 Comm: syz.0.10094 Not tainted syzkaller #0 PREEMPT(full) [ 1341.469657][ T6865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1341.469699][ T6865] Call Trace: [ 1341.469724][ T6865] [ 1341.469744][ T6865] dump_stack_lvl+0xe8/0x150 [ 1341.469820][ T6865] should_fail_ex+0x40c/0x560 [ 1341.469910][ T6865] should_failslab+0xa8/0x100 [ 1341.469978][ T6865] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1341.470052][ T6865] ? local_lock_release+0x9c/0x160 [ 1341.470142][ T6865] ? __alloc_skb+0x1d7/0x7a0 [ 1341.470181][ T6865] ? __alloc_skb+0x1d7/0x7a0 [ 1341.470244][ T6865] __alloc_skb+0x1d7/0x7a0 [ 1341.470302][ T6865] netlink_sendmsg+0x5d4/0xb40 [ 1341.470386][ T6865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1341.470463][ T6865] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1341.470529][ T6865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1341.470584][ T6865] sock_sendmsg_nosec+0x13a/0x180 [ 1341.470656][ T6865] ____sys_sendmsg+0x54e/0x850 [ 1341.470719][ T6865] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1341.470790][ T6865] ? import_iovec+0x73/0xa0 [ 1341.470850][ T6865] ___sys_sendmsg+0x2a5/0x360 [ 1341.470896][ T6865] ? __lock_acquire+0x683/0x2cf0 [ 1341.470971][ T6865] ? __pfx____sys_sendmsg+0x10/0x10 [ 1341.471126][ T6865] ? __fget_files+0x2a/0x420 [ 1341.471177][ T6865] ? __fget_files+0x3a2/0x420 [ 1341.471249][ T6865] __x64_sys_sendmsg+0x1b1/0x290 [ 1341.471312][ T6865] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1341.471408][ T6865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.471456][ T6865] do_syscall_64+0x174/0x580 [ 1341.471502][ T6865] ? trace_irq_disable+0x3b/0x140 [ 1341.471546][ T6865] ? clear_bhb_loop+0x40/0x90 [ 1341.471606][ T6865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.471654][ T6865] RIP: 0033:0x7f065919de59 [ 1341.471716][ T6865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1341.471756][ T6865] RSP: 002b:00007f065a0cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1341.471811][ T6865] RAX: ffffffffffffffda RBX: 00007f0659425fa0 RCX: 00007f065919de59 [ 1341.471850][ T6865] RDX: 00000000040080c4 RSI: 0000200000000000 RDI: 0000000000000003 [ 1341.471888][ T6865] RBP: 00007f065a0cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1341.471924][ T6865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1341.471953][ T6865] R13: 00007f0659426038 R14: 00007f0659425fa0 R15: 00007ffc3a69d2d8 [ 1341.472029][ T6865] [ 1341.483040][ T6871] netlink: 148 bytes leftover after parsing attributes in process `syz.5.10095'. [ 1341.913770][ T6876] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10097'. [ 1341.925318][ T6863] lo speed is unknown, defaulting to 1000 [ 1342.091056][ T6884] veth1_to_bond: entered promiscuous mode [ 1342.117855][ T6884] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10101'. [ 1342.210587][ T6884] veth1_to_bond (unregistering): left promiscuous mode [ 1342.266747][ T6884] bond0: (slave bond_slave_1): Releasing backup interface [ 1342.292643][ T6896] FAULT_INJECTION: forcing a failure. [ 1342.292643][ T6896] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1342.307162][ T6896] CPU: 1 UID: 0 PID: 6896 Comm: syz.5.10105 Not tainted syzkaller #0 PREEMPT(full) [ 1342.307188][ T6896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1342.307208][ T6896] Call Trace: [ 1342.307216][ T6896] [ 1342.307225][ T6896] dump_stack_lvl+0xe8/0x150 [ 1342.307255][ T6896] should_fail_ex+0x40c/0x560 [ 1342.307288][ T6896] prepare_alloc_pages+0x230/0x650 [ 1342.307318][ T6896] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1342.307345][ T6896] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1342.307382][ T6896] ? __pfx_policy_nodemask+0x10/0x10 [ 1342.307420][ T6896] ? __folio_batch_add_and_move+0x11a/0xc50 [ 1342.307448][ T6896] ? lock_acquire+0x106/0x350 [ 1342.307476][ T6896] alloc_pages_mpol+0x212/0x380 [ 1342.307506][ T6896] folio_alloc_mpol_noprof+0x39/0x160 [ 1342.307532][ T6896] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1342.307560][ T6896] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1342.307595][ T6896] do_wp_page+0x1163/0x4c70 [ 1342.307641][ T6896] ? __pfx_do_wp_page+0x10/0x10 [ 1342.307664][ T6896] ? do_raw_spin_lock+0x12b/0x2f0 [ 1342.307695][ T6896] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1342.307734][ T6896] handle_mm_fault+0x1490/0x3080 [ 1342.307775][ T6896] ? handle_mm_fault+0xec/0x3080 [ 1342.307811][ T6896] ? __pfx_handle_mm_fault+0x10/0x10 [ 1342.307839][ T6896] ? follow_page_pte+0xbd0/0xe70 [ 1342.307876][ T6896] ? __pfx_follow_page_pte+0x10/0x10 [ 1342.307916][ T6896] __get_user_pages+0x1678/0x2720 [ 1342.307977][ T6896] __gup_longterm_locked+0xd52/0x15c0 [ 1342.308007][ T6896] ? lock_acquire+0x106/0x350 [ 1342.308034][ T6896] ? sanity_check_pinned_pages+0x810/0x8d0 [ 1342.308067][ T6896] gup_fast_fallback+0x1d8c/0x20e0 [ 1342.308126][ T6896] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1342.308151][ T6896] ? __kmalloc_noprof+0x1ad/0x720 [ 1342.308181][ T6896] ? kasan_save_track+0x4f/0x80 [ 1342.308210][ T6896] ? pin_user_pages_fast+0x4d/0xb0 [ 1342.308250][ T6896] iov_iter_extract_pages+0x369/0x5f0 [ 1342.308280][ T6896] extract_iter_to_sg+0xee0/0x25f0 [ 1342.308322][ T6896] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 1342.308356][ T6896] ? rcu_is_watching+0x15/0xb0 [ 1342.308380][ T6896] ? trace_kmalloc+0x2a/0xf0 [ 1342.308411][ T6896] ? __asan_memset+0x22/0x50 [ 1342.308440][ T6896] af_alg_get_rsgl+0x493/0x8d0 [ 1342.308502][ T6896] aead_recvmsg+0x51d/0xd10 [ 1342.308532][ T6896] ? __pfx_aa_sk_perm+0x10/0x10 [ 1342.308559][ T6896] ? __pfx_aead_recvmsg+0x10/0x10 [ 1342.308577][ T6896] ? __lock_acquire+0x683/0x2cf0 [ 1342.308597][ T6896] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1342.308624][ T6896] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1342.308648][ T6896] ? security_socket_recvmsg+0x7e/0x2c0 [ 1342.308676][ T6896] ? __pfx_aead_recvmsg+0x10/0x10 [ 1342.308697][ T6896] sock_recvmsg+0x196/0x1e0 [ 1342.308729][ T6896] ____sys_recvmsg+0x1e6/0x4a0 [ 1342.308761][ T6896] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1342.308800][ T6896] ? import_iovec+0x73/0xa0 [ 1342.308824][ T6896] ___sys_recvmsg+0x213/0x5a0 [ 1342.308853][ T6896] ? __pfx____sys_recvmsg+0x10/0x10 [ 1342.308889][ T6896] ? __fget_files+0x2a/0x420 [ 1342.308929][ T6896] ? __fget_files+0x3a2/0x420 [ 1342.308961][ T6896] __x64_sys_recvmsg+0x1ae/0x290 [ 1342.308987][ T6896] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1342.309031][ T6896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.309054][ T6896] do_syscall_64+0x174/0x580 [ 1342.309072][ T6896] ? trace_irq_disable+0x3b/0x140 [ 1342.309091][ T6896] ? clear_bhb_loop+0x40/0x90 [ 1342.309116][ T6896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.309136][ T6896] RIP: 0033:0x7fe8ab19de59 [ 1342.309156][ T6896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1342.309173][ T6896] RSP: 002b:00007fe8a93f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1342.309196][ T6896] RAX: ffffffffffffffda RBX: 00007fe8ab425fa0 RCX: 00007fe8ab19de59 [ 1342.309217][ T6896] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1342.309231][ T6896] RBP: 00007fe8a93f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1342.309244][ T6896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1342.309256][ T6896] R13: 00007fe8ab426038 R14: 00007fe8ab425fa0 R15: 00007ffe7bcba568 [ 1342.309288][ T6896] [ 1343.070306][ T6908] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10107'. [ 1343.095348][ T6912] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10109'. [ 1343.192883][ T6916] FAULT_INJECTION: forcing a failure. [ 1343.192883][ T6916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1343.205968][ T6916] CPU: 1 UID: 0 PID: 6916 Comm: syz.1.10110 Not tainted syzkaller #0 PREEMPT(full) [ 1343.205994][ T6916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1343.206007][ T6916] Call Trace: [ 1343.206016][ T6916] [ 1343.206025][ T6916] dump_stack_lvl+0xe8/0x150 [ 1343.206056][ T6916] should_fail_ex+0x40c/0x560 [ 1343.206090][ T6916] _copy_to_user+0x31/0xb0 [ 1343.206116][ T6916] simple_read_from_buffer+0xe1/0x170 [ 1343.206144][ T6916] proc_fail_nth_read+0x1bb/0x230 [ 1343.206169][ T6916] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1343.206194][ T6916] ? rw_verify_area+0x24a/0x4c0 [ 1343.206220][ T6916] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1343.206241][ T6916] vfs_read+0x213/0xa80 [ 1343.206270][ T6916] ? __pfx___mutex_lock+0x10/0x10 [ 1343.206292][ T6916] ? __pfx_vfs_read+0x10/0x10 [ 1343.206317][ T6916] ? __fget_files+0x2a/0x420 [ 1343.206342][ T6916] ? __fget_files+0x3a2/0x420 [ 1343.206360][ T6916] ? __fget_files+0x2a/0x420 [ 1343.206387][ T6916] ksys_read+0x150/0x270 [ 1343.206413][ T6916] ? __pfx_ksys_read+0x10/0x10 [ 1343.206445][ T6916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1343.206467][ T6916] do_syscall_64+0x174/0x580 [ 1343.206484][ T6916] ? trace_irq_disable+0x3b/0x140 [ 1343.206503][ T6916] ? clear_bhb_loop+0x40/0x90 [ 1343.206528][ T6916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1343.206547][ T6916] RIP: 0033:0x7fc82075e68e [ 1343.206565][ T6916] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1343.206582][ T6916] RSP: 002b:00007fc81e9f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1343.206611][ T6916] RAX: ffffffffffffffda RBX: 00007fc81e9f66c0 RCX: 00007fc82075e68e [ 1343.206626][ T6916] RDX: 000000000000000f RSI: 00007fc81e9f60a0 RDI: 0000000000000004 [ 1343.206640][ T6916] RBP: 00007fc81e9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1343.206653][ T6916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1343.206665][ T6916] R13: 00007fc820a26038 R14: 00007fc820a25fa0 R15: 00007ffeebbe60e8 [ 1343.206699][ T6916] [ 1343.475006][ T6902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1343.570945][ T6919] syzkaller0: entered promiscuous mode [ 1343.576581][ T6919] syzkaller0: entered allmulticast mode [ 1343.819068][ T6913] netlink: 'syz.5.10108': attribute type 1 has an invalid length. [ 1343.933672][ T6922] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10112'. [ 1344.007632][ T6928] FAULT_INJECTION: forcing a failure. [ 1344.007632][ T6928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1344.020815][ T6928] CPU: 1 UID: 0 PID: 6928 Comm: syz.0.10113 Not tainted syzkaller #0 PREEMPT(full) [ 1344.020842][ T6928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1344.020855][ T6928] Call Trace: [ 1344.020863][ T6928] [ 1344.020872][ T6928] dump_stack_lvl+0xe8/0x150 [ 1344.020903][ T6928] should_fail_ex+0x40c/0x560 [ 1344.020936][ T6928] _copy_from_iter+0x1d3/0x1660 [ 1344.020968][ T6928] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1344.021001][ T6928] ? kmem_cache_alloc_noprof+0x308/0x5f0 [ 1344.021026][ T6928] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 1344.021055][ T6928] ? __build_skb+0x62/0x440 [ 1344.021081][ T6928] ? __build_skb+0x62/0x440 [ 1344.021107][ T6928] ? __pfx__copy_from_iter+0x10/0x10 [ 1344.021135][ T6928] ? __build_skb+0x2a2/0x440 [ 1344.021161][ T6928] ? netlink_sendmsg+0x650/0xb40 [ 1344.021180][ T6928] ? skb_put+0x112/0x210 [ 1344.021216][ T6928] netlink_sendmsg+0x6c0/0xb40 [ 1344.021248][ T6928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1344.021274][ T6928] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1344.021317][ T6928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1344.021336][ T6928] sock_sendmsg_nosec+0x13a/0x180 [ 1344.021362][ T6928] ____sys_sendmsg+0x54e/0x850 [ 1344.021389][ T6928] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1344.021416][ T6928] ? import_iovec+0x73/0xa0 [ 1344.021437][ T6928] ___sys_sendmsg+0x2a5/0x360 [ 1344.021455][ T6928] ? __lock_acquire+0x683/0x2cf0 [ 1344.021477][ T6928] ? __pfx____sys_sendmsg+0x10/0x10 [ 1344.021525][ T6928] ? __fget_files+0x2a/0x420 [ 1344.021542][ T6928] ? __fget_files+0x3a2/0x420 [ 1344.021568][ T6928] __x64_sys_sendmsg+0x1b1/0x290 [ 1344.021589][ T6928] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1344.021623][ T6928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.021643][ T6928] do_syscall_64+0x174/0x580 [ 1344.021659][ T6928] ? trace_irq_disable+0x3b/0x140 [ 1344.021676][ T6928] ? clear_bhb_loop+0x40/0x90 [ 1344.021698][ T6928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.021715][ T6928] RIP: 0033:0x7f065919de59 [ 1344.021732][ T6928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1344.021747][ T6928] RSP: 002b:00007f065a0cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1344.021766][ T6928] RAX: ffffffffffffffda RBX: 00007f0659425fa0 RCX: 00007f065919de59 [ 1344.021779][ T6928] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 1344.021790][ T6928] RBP: 00007f065a0cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1344.021807][ T6928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1344.021818][ T6928] R13: 00007f0659426038 R14: 00007f0659425fa0 R15: 00007ffc3a69d2d8 [ 1344.021845][ T6928] [ 1344.282456][ T6113] net_ratelimit: 11 callbacks suppressed [ 1344.282475][ T6113] bond9: (slave erspan0): failed to get link speed/duplex [ 1344.533994][ T6113] bond9: (slave erspan0): failed to get link speed/duplex [ 1344.652950][ T6120] bond9: (slave erspan0): failed to get link speed/duplex [ 1344.799634][ T6122] bond9: (slave erspan0): failed to get link speed/duplex [ 1344.919315][ T6122] bond9: (slave erspan0): failed to get link speed/duplex [ 1344.970384][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1345.040139][ T6122] bond9: (slave erspan0): failed to get link speed/duplex [ 1345.088586][ T6949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.096398][ T6949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.148588][ T6959] sctp: [Deprecated]: syz.4.10124 (pid 6959) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1345.148588][ T6959] Use struct sctp_sack_info instead [ 1345.165812][ T6113] bond9: (slave erspan0): failed to get link speed/duplex [ 1345.339240][ T6153] bond9: (slave erspan0): failed to get link speed/duplex [ 1345.468876][ T6119] bond9: (slave erspan0): failed to get link speed/duplex [ 1345.540774][ T6976] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10128'. [ 1345.684743][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10132'. [ 1345.910411][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10134'. [ 1346.182713][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1346.717529][ T7022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10146'. [ 1346.883606][ T7030] tipc: Enabled bearer , priority 0 [ 1346.997034][ T7030] syzkaller0: entered promiscuous mode [ 1347.023173][ T7030] syzkaller0: entered allmulticast mode [ 1347.036903][ T7030] tipc: Resetting bearer [ 1347.090908][ T7028] tipc: Resetting bearer [ 1347.307704][ T7042] netlink: 'syz.1.10150': attribute type 1 has an invalid length. [ 1349.382340][ C1] net_ratelimit: 12 callbacks suppressed [ 1349.382362][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1350.077383][ T7071] Cannot find del_set index 4 as target [ 1350.428902][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1351.280656][ T7028] tipc: Disabling bearer [ 1351.294626][ T7042] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1351.295223][ T7048] erspan0: left promiscuous mode [ 1351.309778][ T7048] erspan0: left allmulticast mode [ 1351.380751][ T7054] syzkaller0: entered promiscuous mode [ 1351.386281][ T7054] syzkaller0: entered allmulticast mode [ 1351.396731][T21293] tipc: Node number set to 273464293 [ 1351.476799][ T6118] bond9: (slave erspan0): failed to get link speed/duplex [ 1351.478305][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1351.701773][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10161'. [ 1352.596360][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1353.727613][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1354.619042][ T6119] bond9: (slave erspan0): failed to get link speed/duplex [ 1354.758957][ T6114] bond9: (slave erspan0): failed to get link speed/duplex [ 1354.779111][ T7109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10167'. [ 1354.801323][ T6120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.810999][ T6120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.828029][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1354.849509][T21293] ------------[ cut here ]------------ [ 1354.856254][T21293] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 1354.866202][T21293] WARNING: net/mac80211/rate.c:404 at __rate_control_send_low+0x60c/0x8a0, CPU#0: kworker/0:13/21293 [ 1354.877260][T21293] Modules linked in: [ 1354.882890][T21293] CPU: 0 UID: 0 PID: 21293 Comm: kworker/0:13 Not tainted syzkaller #0 PREEMPT(full) [ 1354.892516][T21293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1354.902653][T21293] Workqueue: mld mld_ifc_work [ 1354.907449][T21293] RIP: 0010:__rate_control_send_low+0x638/0x8a0 [ 1354.913782][T21293] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 1354.933487][T21293] RSP: 0018:ffffc900044de738 EFLAGS: 00010246 [ 1354.939612][T21293] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 1354.947609][T21293] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9044d020 [ 1354.955639][T21293] RBP: ffff888080170f40 R08: 0000000000000000 R09: 0000000000000000 [ 1354.963781][T21293] R10: 0000000000000004 R11: 0000000000000000 R12: ffff8880744c0168 [ 1354.971814][T21293] R13: dffffc0000000000 R14: ffffffff9044d020 R15: ffff888080173258 [ 1354.979842][T21293] FS: 0000000000000000(0000) GS:ffff888125226000(0000) knlGS:0000000000000000 [ 1354.988853][T21293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1354.995473][T21293] CR2: 00007f065a0abff8 CR3: 0000000060570000 CR4: 00000000003526f0 [ 1355.003504][T21293] Call Trace: [ 1355.006808][T21293] [ 1355.009817][T21293] rate_control_send_low+0x1a7/0x7b0 [ 1355.015140][T21293] ? __lock_acquire+0x683/0x2cf0 [ 1355.020135][T21293] rate_control_get_rate+0x20b/0x5d0 [ 1355.025467][T21293] ieee80211_tx_h_rate_ctrl+0xafa/0x1760 [ 1355.031300][T21293] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1355.037411][T21293] ? __asan_memcpy+0x40/0x70 [ 1355.042095][T21293] invoke_tx_handlers_late+0xb5/0x1830 [ 1355.047689][T21293] ? ieee80211_tx_h_select_key+0xd1c/0x1a90 [ 1355.053704][T21293] ieee80211_tx_dequeue+0x3fb6/0x55a0 [ 1355.059219][T21293] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 1355.064987][T21293] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1355.070434][T21293] ? do_raw_spin_lock+0x12b/0x2f0 [ 1355.075495][T21293] ? ieee80211_queue_skb+0x16e0/0x22c0 [ 1355.081055][T21293] ieee80211_hwsim_wake_tx_queue+0xbb/0x150 [ 1355.087107][T21293] ieee80211_queue_skb+0x1923/0x22c0 [ 1355.092521][T21293] ieee80211_tx+0x2c2/0x4b0 [ 1355.097073][T21293] ? __pfx_ieee80211_tx+0x10/0x10 [ 1355.102220][T21293] ? ieee80211_xmit+0x2e5/0x3c0 [ 1355.107127][T21293] __ieee80211_subif_start_xmit+0xf06/0x1690 [ 1355.113237][T21293] ? __ieee80211_subif_start_xmit+0x2ca/0x1690 [ 1355.119489][T21293] ? worker_thread+0xa47/0xfb0 [ 1355.124293][T21293] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 1355.130809][T21293] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 1355.137097][T21293] ieee80211_subif_start_xmit+0xf1/0x570 [ 1355.142845][T21293] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 1355.149182][T21293] ? __pfx_netif_skb_features+0x10/0x10 [ 1355.154784][T21293] dev_hard_start_xmit+0x2cd/0x830 [ 1355.159997][T21293] __dev_queue_xmit+0x1435/0x37f0 [ 1355.165052][T21293] ? __lock_acquire+0x683/0x2cf0 [ 1355.170072][T21293] ? __dev_queue_xmit+0x29b/0x37f0 [ 1355.175204][T21293] ? ___neigh_create+0x1cd2/0x22b0 [ 1355.180398][T21293] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1355.185799][T21293] ? neigh_resolve_output+0x428/0x720 [ 1355.191235][T21293] ? eth_header+0x11b/0x200 [ 1355.195761][T21293] ? __asan_memcpy+0x40/0x70 [ 1355.200429][T21293] ? ip6_output+0x11e/0x540 [ 1355.204953][T21293] ip6_output+0x337/0x540 [ 1355.209341][T21293] ? __pfx_ip6_output+0x10/0x10 [ 1355.214219][T21293] NF_HOOK+0x177/0x4f0 [ 1355.218317][T21293] ? __pfx_NF_HOOK+0x10/0x10 [ 1355.222966][T21293] ? icmp6_dst_alloc+0x39b/0x430 [ 1355.227978][T21293] ? __pfx_dst_output+0x10/0x10 [ 1355.232905][T21293] ? __local_bh_enable_ip+0xd0/0x130 [ 1355.238229][T21293] ? icmp6_dst_alloc+0x39b/0x430 [ 1355.243268][T21293] ? icmp6_dst_alloc+0x39b/0x430 [ 1355.248255][T21293] mld_sendpack+0x890/0xe10 [ 1355.252867][T21293] ? mld_sendpack+0x206/0xe10 [ 1355.257578][T21293] ? __pfx_mld_sendpack+0x10/0x10 [ 1355.262710][T21293] mld_ifc_work+0x839/0xe70 [ 1355.267246][T21293] ? rcu_is_watching+0x15/0xb0 [ 1355.272073][T21293] ? process_scheduled_works+0xa20/0x14e0 [ 1355.277822][T21293] process_scheduled_works+0xa8e/0x14e0 [ 1355.283472][T21293] ? __pfx_process_scheduled_works+0x10/0x10 [ 1355.289552][T21293] ? assign_work+0x3cf/0x5d0 [ 1355.294191][T21293] worker_thread+0xa47/0xfb0 [ 1355.298896][T21293] kthread+0x388/0x470 [ 1355.302988][T21293] ? __pfx_worker_thread+0x10/0x10 [ 1355.308124][T21293] ? __pfx_kthread+0x10/0x10 [ 1355.312766][T21293] ret_from_fork+0x514/0xb70 [ 1355.317382][T21293] ? __pfx_ret_from_fork+0x10/0x10 [ 1355.322544][T21293] ? __switch_to+0xc89/0x1420 [ 1355.327260][T21293] ? __pfx_kthread+0x10/0x10 [ 1355.331906][T21293] ret_from_fork_asm+0x1a/0x30 [ 1355.336717][T21293] [ 1355.339795][T21293] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1355.347087][T21293] CPU: 0 UID: 0 PID: 21293 Comm: kworker/0:13 Not tainted syzkaller #0 PREEMPT(full) [ 1355.356675][T21293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1355.366750][T21293] Workqueue: mld mld_ifc_work [ 1355.371466][T21293] Call Trace: [ 1355.374765][T21293] [ 1355.377718][T21293] vpanic+0x56c/0xa60 [ 1355.381772][T21293] ? __pfx__printk+0x10/0x10 [ 1355.386388][T21293] ? __pfx_vpanic+0x10/0x10 [ 1355.390911][T21293] ? is_bpf_text_address+0x292/0x2b0 [ 1355.396226][T21293] ? is_bpf_text_address+0x26/0x2b0 [ 1355.401460][T21293] panic+0xc5/0xd0 [ 1355.405205][T21293] ? __pfx_panic+0x10/0x10 [ 1355.409667][T21293] ? ret_from_fork_asm+0x1a/0x30 [ 1355.414635][T21293] __warn+0x315/0x4c0 [ 1355.418637][T21293] ? __rate_control_send_low+0x60c/0x8a0 [ 1355.424303][T21293] ? __rate_control_send_low+0x60c/0x8a0 [ 1355.429967][T21293] __report_bug+0x331/0x530 [ 1355.434570][T21293] ? __rate_control_send_low+0x60c/0x8a0 [ 1355.440235][T21293] ? __pfx___report_bug+0x10/0x10 [ 1355.445287][T21293] ? stack_trace_save+0xa9/0x100 [ 1355.450256][T21293] ? __pfx_stack_trace_save+0x10/0x10 [ 1355.455649][T21293] ? kfree+0x1c5/0x640 [ 1355.459762][T21293] report_bug_entry+0x19a/0x290 [ 1355.464638][T21293] ? __rate_control_send_low+0x638/0x8a0 [ 1355.470288][T21293] ? __rate_control_send_low+0x63d/0x8a0 [ 1355.475946][T21293] handle_bug+0xce/0x200 [ 1355.480212][T21293] exc_invalid_op+0x1a/0x50 [ 1355.484747][T21293] asm_exc_invalid_op+0x1a/0x20 [ 1355.489634][T21293] RIP: 0010:__rate_control_send_low+0x638/0x8a0 [ 1355.495950][T21293] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 1355.515584][T21293] RSP: 0018:ffffc900044de738 EFLAGS: 00010246 [ 1355.521696][T21293] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 1355.529696][T21293] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9044d020 [ 1355.537698][T21293] RBP: ffff888080170f40 R08: 0000000000000000 R09: 0000000000000000 [ 1355.545693][T21293] R10: 0000000000000004 R11: 0000000000000000 R12: ffff8880744c0168 [ 1355.553688][T21293] R13: dffffc0000000000 R14: ffffffff9044d020 R15: ffff888080173258 [ 1355.561698][T21293] ? __rate_control_send_low+0x600/0x8a0 [ 1355.567382][T21293] rate_control_send_low+0x1a7/0x7b0 [ 1355.572704][T21293] ? __lock_acquire+0x683/0x2cf0 [ 1355.577667][T21293] rate_control_get_rate+0x20b/0x5d0 [ 1355.582999][T21293] ieee80211_tx_h_rate_ctrl+0xafa/0x1760 [ 1355.588684][T21293] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1355.594792][T21293] ? __asan_memcpy+0x40/0x70 [ 1355.599424][T21293] invoke_tx_handlers_late+0xb5/0x1830 [ 1355.604921][T21293] ? ieee80211_tx_h_select_key+0xd1c/0x1a90 [ 1355.610858][T21293] ieee80211_tx_dequeue+0x3fb6/0x55a0 [ 1355.616335][T21293] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 1355.622098][T21293] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1355.627555][T21293] ? do_raw_spin_lock+0x12b/0x2f0 [ 1355.632627][T21293] ? ieee80211_queue_skb+0x16e0/0x22c0 [ 1355.638167][T21293] ieee80211_hwsim_wake_tx_queue+0xbb/0x150 [ 1355.644107][T21293] ieee80211_queue_skb+0x1923/0x22c0 [ 1355.649460][T21293] ieee80211_tx+0x2c2/0x4b0 [ 1355.653987][T21293] ? __pfx_ieee80211_tx+0x10/0x10 [ 1355.659042][T21293] ? ieee80211_xmit+0x2e5/0x3c0 [ 1355.663917][T21293] __ieee80211_subif_start_xmit+0xf06/0x1690 [ 1355.669922][T21293] ? __ieee80211_subif_start_xmit+0x2ca/0x1690 [ 1355.676102][T21293] ? worker_thread+0xa47/0xfb0 [ 1355.680924][T21293] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 1355.687377][T21293] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 1355.693636][T21293] ieee80211_subif_start_xmit+0xf1/0x570 [ 1355.699316][T21293] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 1355.705584][T21293] ? __pfx_netif_skb_features+0x10/0x10 [ 1355.711160][T21293] dev_hard_start_xmit+0x2cd/0x830 [ 1355.716323][T21293] __dev_queue_xmit+0x1435/0x37f0 [ 1355.721369][T21293] ? __lock_acquire+0x683/0x2cf0 [ 1355.726340][T21293] ? __dev_queue_xmit+0x29b/0x37f0 [ 1355.731490][T21293] ? ___neigh_create+0x1cd2/0x22b0 [ 1355.736631][T21293] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1355.742029][T21293] ? neigh_resolve_output+0x428/0x720 [ 1355.747436][T21293] ? eth_header+0x11b/0x200 [ 1355.751961][T21293] ? __asan_memcpy+0x40/0x70 [ 1355.756602][T21293] ? ip6_output+0x11e/0x540 [ 1355.761114][T21293] ip6_output+0x337/0x540 [ 1355.765470][T21293] ? __pfx_ip6_output+0x10/0x10 [ 1355.770337][T21293] NF_HOOK+0x177/0x4f0 [ 1355.774419][T21293] ? __pfx_NF_HOOK+0x10/0x10 [ 1355.779037][T21293] ? icmp6_dst_alloc+0x39b/0x430 [ 1355.784001][T21293] ? __pfx_dst_output+0x10/0x10 [ 1355.788865][T21293] ? __local_bh_enable_ip+0xd0/0x130 [ 1355.794163][T21293] ? icmp6_dst_alloc+0x39b/0x430 [ 1355.799109][T21293] ? icmp6_dst_alloc+0x39b/0x430 [ 1355.804055][T21293] mld_sendpack+0x890/0xe10 [ 1355.808592][T21293] ? mld_sendpack+0x206/0xe10 [ 1355.813290][T21293] ? __pfx_mld_sendpack+0x10/0x10 [ 1355.818351][T21293] mld_ifc_work+0x839/0xe70 [ 1355.822866][T21293] ? rcu_is_watching+0x15/0xb0 [ 1355.827649][T21293] ? process_scheduled_works+0xa20/0x14e0 [ 1355.833394][T21293] process_scheduled_works+0xa8e/0x14e0 [ 1355.838976][T21293] ? __pfx_process_scheduled_works+0x10/0x10 [ 1355.844979][T21293] ? assign_work+0x3cf/0x5d0 [ 1355.849604][T21293] worker_thread+0xa47/0xfb0 [ 1355.854250][T21293] kthread+0x388/0x470 [ 1355.858353][T21293] ? __pfx_worker_thread+0x10/0x10 [ 1355.863504][T21293] ? __pfx_kthread+0x10/0x10 [ 1355.868124][T21293] ret_from_fork+0x514/0xb70 [ 1355.872746][T21293] ? __pfx_ret_from_fork+0x10/0x10 [ 1355.877889][T21293] ? __switch_to+0xc89/0x1420 [ 1355.882605][T21293] ? __pfx_kthread+0x10/0x10 [ 1355.887211][T21293] ret_from_fork_asm+0x1a/0x30 [ 1355.892007][T21293] [ 1355.895628][T21293] Kernel Offset: disabled [ 1355.899960][T21293] Rebooting in 86400 seconds..