last executing test programs: 1m24.345577378s ago: executing program 1 (id=20206): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000001440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random='@\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES64], 0x32600) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xf, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000340), &(0x7f0000000300)=""/177}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x14) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x24000000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}}, 0x0) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_gfeatures}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket(0x10, 0x3, 0x0) 1m23.361796949s ago: executing program 1 (id=20209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = gettid() unshare(0x22020600) syz_open_procfs$namespace(r6, &(0x7f00000003c0)='ns/pid_for_children\x00') setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x80000001}, 0x8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r8, 0x10c, 0x8, &(0x7f0000001b00), &(0x7f0000000480)=0x4) 1m22.27052341s ago: executing program 2 (id=20217): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffe8c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="540000000000000000000004000000000000000100000001001d0001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a62", 0xb8}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dc", 0xa2}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c5", 0x21}], 0x1}}], 0x3, 0x20000044) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m18.859664984s ago: executing program 1 (id=20221): r0 = epoll_create1(0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) epoll_create1(0x0) (async, rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) (async) unshare(0x2c020400) clock_gettime(0x0, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000280)={0xa, 0xfffe, 0x0, @private0}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000300)="eb900a14ef57f79f000ad4a650a728c02fd512ab518dab7b377a5e50b3d2b197b8188206b9d2e27f99e392725473992ef4fdbe34d3c204bae7207c537c44e548292e9e11603c153079c94bf373ff1bec5a29", 0x52}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0, 0xfffffffd}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x2, 0x4008844) (async) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$netlink(0x10, 0x3, 0x8000000004) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r5 = accept(r4, 0x0, 0x0) recvmsg$can_bcm(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10003) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r8, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async, rerun: 64) r9 = socket(0x2a, 0x1, 0x4) (rerun: 64) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1m18.816572789s ago: executing program 2 (id=20222): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffe8c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="540000000000000000000004000000000000000100000001001d0001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968f", 0x5f}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84", 0xbd}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c5", 0x21}], 0x1}}], 0x2, 0x20000044) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m18.557809424s ago: executing program 2 (id=20227): socket(0x10, 0x803, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000400)=0x7b, 0x4) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x3a2}], 0x1, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}], 0x30}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 1m18.250207254s ago: executing program 1 (id=20231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a31000000001500"], 0x5c}}, 0x20084884) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r3, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)={0x4c, r6, 0x483, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x34, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) bind$packet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1}, 0xffff}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 1m18.021478577s ago: executing program 0 (id=20233): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b11430c100"/16, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$SIOCAX25DELUID(r2, 0x891c, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088ca4803", 0x1e0ff, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e97", 0x3}], 0x1, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x24000040) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f00000002c0)={r4, &(0x7f0000000000)='\x00', 0x8a0080, &(0x7f0000000040)={@align=0x574, {0x8, 0x3, 0x6, 0x80000001}}, 0xfbc, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000280)=0xd}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000a00)={0x0, 0x1000, "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"}, &(0x7f0000001a40)=0x1008) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000001a80)={0x5, 0x1, 0x6, 0x3, r6}, &(0x7f0000001ac0)=0x10) recvmmsg(r4, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/194, 0xc2}], 0x1}, 0x4}], 0x1, 0x2120, 0x0) 1m17.738852462s ago: executing program 0 (id=20234): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) recvfrom(r3, 0x0, 0x0, 0x10020, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r5, 0x89a3, &(0x7f0000000080)="94b58ec726ebd0") sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f0000002b80)=""/191, 0xbf}, {&(0x7f0000000600)=""/112, 0x70}, {&(0x7f0000000740)=""/195, 0xc3}, {&(0x7f0000003cc0)=""/4077, 0xfed}, {&(0x7f0000000c40)=""/196, 0xc4}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f00000070c0)=""/4096, 0x1000}], 0x8}, 0x0) r6 = socket(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(0xffffffffffffffff) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f00000002c0)=0xfff, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$packet_int(r7, 0x107, 0x14, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdfea253e"], 0x14}, 0x1, 0x0, 0x0, 0x20000015}, 0x20000084) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 1m17.670038474s ago: executing program 2 (id=20235): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x12, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000008b000000000000000600000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b702000014000000b7030000000400048500000086000000bf09000000000000550901000000010395000000000000001daa0600000000002500f4ff9a456adf45000200060000000700000003000000b702000003000000850000002a000000b70000000040000095"], &(0x7f00000010c0)='syzkaller\x00', 0x9, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES64=r0, @ANYRESDEC=r6, @ANYRESOCT=r1], 0x1c}}, 0x840) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) listen(r7, 0x5) r8 = socket$vsock_stream(0x28, 0x1, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r9, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r10 = accept4$unix(r7, 0x0, 0x0, 0x0) sendto$packet(r8, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10012) connect$nfc_llcp(r3, &(0x7f0000000480)={0x27, r6, 0x0, 0x6, 0xf, 0xb, "6cfb9f65fb657ef918155ce92e61ad6cd73ab3a81b8d3c3c7badab5616e96f6ab0525733882ffc2cf15178976417598ff03391f2cea3250d80bf8f779bc483", 0x1f}, 0x60) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000030a010100000000000000000068ec9154000000090a010400000000000000000a0000040900010073797a310000000008000540000000170902000000797a310000000008000a40ffffffbc140000001100010000000000000000000100000a"], 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x50) ioctl$sock_inet_SIOCSIFPFLAGS(r10, 0x8934, &(0x7f0000000140)={'ipvlan1\x00', 0x4}) r11 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000342000/0x2000)=nil, 0x2000, 0x2000008, 0x10, r7, 0x11614000) bind$alg(r11, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) r12 = accept4(r11, 0x0, 0x0, 0x800) sendmmsg$inet_sctp(r12, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="d8dd8f69a636202e14997e2262c8ca3ff57548dd", 0x14}], 0x0, 0x0, 0x0, 0x4c944}], 0x492492492492680, 0x40840) 1m17.46023675s ago: executing program 1 (id=20236): syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000040000000600000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000080000000000000000000002000000000000000000e"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100001000000000000fd00000000000a40000000060a0b0400000000000000000200fffd14000480100001800c0001007061796c6f61640009010073797a30000000000900020073797a32000000001400000011000100000000000000000000fd3aaaef10a206e05e1a5100000a005cce898ce6c85ed85699932a34bc6b9a13a23386262cabaec6b3884f7640c90f80ddd25fb6f2618191ed0d1bbb16fedab5d1fee6afae6b429d36aa7698d5374f03cfc11b"], 0x68}}, 0xc000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1}, 0x20) close(r0) unshare(0x26020480) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xffffffff000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14, &(0x7f0000000080)={0x0, 0x28}, 0x7, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELOBJ={0xb4, 0x14, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_OBJ_USERDATA={0x58, 0x8, "fd38ebde4d0f5dde7265dc80c067f7ca4e50ae2d0e7d5659e3d4b520c4f393b3ed16b8853d03e43b55c99e55e5bcf4e6700754b737c3f406a20bc3443878e17f76599e8b67fdf6741047b759d41f696b9d829a81"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r9, @ANYBLOB="010026bd0100000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="6b00330050100f00ffffffffffff08021100"], 0x88}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) 1m17.150247068s ago: executing program 3 (id=20239): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x56, 0x56, 0x7, [@datasec={0xa, 0x6, 0x0, 0xf, 0x2, [{0x1, 0x8, 0x43a2}, {0x3, 0x2, 0x1000}, {0x4, 0x1, 0xb}, {0x3, 0x5, 0x9}, {0x5, 0x7, 0x4}, {0x1, 0x9, 0x9}], "95e2"}]}, {0x0, [0x5f, 0x5f, 0x0, 0x5f, 0x30]}}, 0x0, 0x77, 0x0, 0x4, 0x9}, 0x28) close(r0) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x7, 0x0, &(0x7f0000000280)="63ec33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @remote, 0x1}, 0x1c) 1m16.931097878s ago: executing program 3 (id=20242): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e72119", 0x9d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/195, 0xc3}], 0x1}, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/192, 0xc0}], 0x1}, 0x2103) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000068000100fae26789de58915a00000000000000000c000200010000001500000014000c80060001008100007a247692c1f8deea00080002"], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 1m16.756381232s ago: executing program 0 (id=20243): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x85}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000d06010100000000000000000700000305000100070000000e0003006269746d61703a697000000005000500020000004a170067fad1ad03af8d5d13b559a38086c555be14a033afd97385c249c2f1772884d313ca80cdf48857b9a85a736b689bdb179ca5491c56fecef29a772e6a48c2cc0951"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f72253388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de3832", 0x9e}, {&(0x7f0000000480)}, {0x0}, {&(0x7f0000000300)="a9be9b2ff3a19d5a12a6e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b231b233db4191791c4001eb574818fec3730b8d4149fe3189eabb6d49eb49a073100"/97, 0x39}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x56, &(0x7f0000003a40)=[{&(0x7f0000000640)="aeeeb0b8c17a0000000000", 0xb}], 0x1}}], 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000680)={0x0, {{0xa, 0x4e21, 0x8, @local, 0x80000001}}, {{0xa, 0x4e20, 0x7, @local}}}, 0x108) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m16.646167219s ago: executing program 4 (id=20244): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffe8c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="540000000000000000000004000000000000000100000001001d0001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84", 0xbd}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6", 0xcb}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c5", 0x21}], 0x1}}], 0x3, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r3, 0x0, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m16.632787847s ago: executing program 2 (id=20245): socket(0x10, 0x803, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000400)=0x7b, 0x4) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x3a2}], 0x1, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}], 0x30}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 1m16.486142s ago: executing program 3 (id=20246): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000100), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, 0x2, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20010000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x3c, r8, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000fc0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034084000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a830a1620ba", 0xd8}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast2, 0x3}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r3) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newtaction={0x6c, 0x30, 0x1af, 0x1000, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x6f, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xfc000000, 0x7, 0x4, 0xfffffffd}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000010c0)={{r9}, "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"}) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000180)='?', 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x20, 0x3b00, 0x0, 0xfffffffffffffdfd) 1m16.423778813s ago: executing program 4 (id=20247): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5c000000}) 1m16.421993234s ago: executing program 0 (id=20248): syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa3e080045000024000000000011907800000000e0000001400017c100039046981ade4f1dfc74dc42cdca8a7978a205000100000000"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="720ac4ff9500"/18], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088a1}, 0x10) 1m16.234905059s ago: executing program 4 (id=20249): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffe8c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="540000000000000000000004000000000000000100000001001d0001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968f", 0x5f}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84", 0xbd}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c5", 0x21}], 0x1}}], 0x2, 0x20000044) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m16.233538963s ago: executing program 0 (id=20250): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) unshare(0x6020400) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x20004000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a80)={'syztnl1\x00', r1, 0x2f, 0x1, 0x0, 0x7, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x7800, 0x9, 0xbef7}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000040)=0x2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000010f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021600000000c0a010100000000000000000700000009000a0073797a31000000000900010073797a30000000003400038030000080080003400000000224000b80100001800c000100636f756e74657200100001800c000100636f756e74657200140000001000010000000000000000000084000a"], 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r7 = gettid() sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}, {&(0x7f0000002000)=ANY=[@ANYBLOB="84040000230000042dbd7000fedbdf250e040a8008003300", @ANYBLOB="a521d3effc8e9e659d7aa1a8a8ee866085cb06df5ed528bd7fe170aef9f6895e15c8cac95979244a0c745826636453aacdc638b5e4f40800a100", @ANYRES32=r4, @ANYBLOB='\b\x00t\x00', @ANYRES32=r6, @ANYBLOB="68d66d532444478e950d6e77cdc864c437031e800800f900", @ANYRES32=r6, @ANYBLOB="8f00a58004005b8004001480b1f778c404ee8668b6d5e0a32d90095749ce8d8de5cf97d852ea0dfd5b67101e1dc66bf791caf5a1b81b05613b908dc37c29f1101f6a9e0a5723b69773857c77a232e291f53b6d9b4997f6812936f235bf912df8a7ced3654142db07e0787ed264487ee8f81b2603c1ab9786a5da7d2bd2643ac5fcc9530600d800ffff000004000680001c00d38077266de2d24d0fc9d20748aac2fa7976328ef3d10400108094001480add5fcf7968fa5f9f7071d6ba719c02170761a114c6ee3fe4b5663dc0400078008000b00758700000800b400", @ANYRES32=r5, @ANYBLOB="0800b90051bbf14f08000a00", @ANYRES32=r6, @ANYBLOB="32bfcde24c401a9c6fa5ee610aff170ae4f7bf615cfd6b458edb0ea391e397ca878c53fbaecd46421d487982dff46b93338c3db6a97a4f3fdd6e475a68c22609c6d8c536ba7ea297e8e13afd040072806300e5800400a98004004780ce061adeacf2ac87107acab1d9077c2bf33f4625e8b513bd421d877818ad1c335ee80f08004800", @ANYRES32=r2, @ANYBLOB="040002801400040000000000000000000000000000000001040031800400538008005100", @ANYRES32=r7, @ANYBLOB="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"], 0x484}], 0x2, 0x0, 0x0, 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES16=r9, @ANYBLOB="000000000100000000000000200000000000", @ANYRES32=r10, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400eb89000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004004c000000"], 0x90}, 0x1, 0x0, 0x0, 0x4000840}, 0x40000) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r11, 0x8, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) r12 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001fc0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000003180)={0xc90, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x42}}}}, [@NL80211_ATTR_TX_RATES={0x174, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x1ff, 0x200, 0x4, 0x7, 0x9, 0xfffd]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x5, 0x13}, {0x4, 0x9}, {0x2, 0x2}, {0x0, 0xa}, {0x3, 0x6}, {0x1}, {0x1, 0x8}, {0x7, 0x6}, {0x6, 0x3}, {0x1, 0x4}, {0x2, 0x6}, {0x0, 0xa}, {0x2, 0x9}, {0x1, 0x7}, {0x1, 0x4}, {0x6, 0x2}]}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x23fa6059521c99d7, 0x29, 0x1b, 0x12, 0x5, 0x6, 0x9, 0x6, 0x16, 0x3e, 0xc, 0x16, 0xc, 0x12, 0x50, 0x36, 0x16, 0x6, 0x9, 0x2, 0x48, 0x12, 0x36, 0x36, 0x48]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x30, 0x16, 0x12, 0x5, 0x6, 0x24]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x0, 0xc, 0x18, 0x1b, 0x9, 0x78]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x3, 0xa}, {0x1, 0x4}, {0x5, 0x3}, {0x6, 0x5}, {0x5, 0x4}, {0x4, 0x7}, {0x5, 0x7}, {0x6, 0x8}, {0x4, 0x4}, {0x2, 0x4}, {0x2, 0x3}, {0x1, 0x5}, {0x0, 0x3}, {0x5, 0x3}, {0x6, 0x7}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x3}, {0x0, 0x7}, {0x7, 0x7}, {0x5, 0x6}, {0x6, 0x9}, {}, {0x2, 0x2}]}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x2, 0x30, 0x48, 0x6c, 0xb, 0xb, 0x60, 0x4, 0x30, 0x6c, 0x60, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xff, 0x400, 0x610, 0xff, 0x9, 0x8, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x2, 0x5, 0x9, 0x491, 0x9, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x363f, 0x0, 0x6fd1, 0xffdf, 0x3, 0x8]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x1}, {0x3, 0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x8}, {0x6, 0x3}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x2}, {0x1, 0x4}, {0x3, 0x6}, {0x5, 0x6}, {0x2, 0x4}, {0x2, 0x8}, {0x7, 0x3}, {0x3, 0x3}, {0x0, 0x9}, {0x4, 0x5}, {0x7, 0x4}, {0x3}, {}, {0x6, 0x5}, {0x4, 0x4}, {0x0, 0xa}, {0x2, 0x8}, {0x0, 0x5}, {0x4, 0x9}, {0x3, 0x5}, {0x3, 0x9}, {0x0, 0x5}, {0x1}, {0x4, 0x4}, {}, {0x5, 0x7}, {0x6, 0x7}, {0x6, 0x5}, {0x3}, {0x5}, {0x4}, {0x1, 0xa}, {0x7, 0x8}, {0x2, 0xa}, {0x5, 0x2}, {0x4, 0x6}, {0x6, 0x3}, {0x7, 0x2}, {0x7, 0x2}, {0x6, 0x2}, {0x0, 0x3}, {0x0, 0x4}, {0x4, 0x7}, {0x4}, {0x4, 0x6}, {0x4, 0x2}, {0x0, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x7, 0x401, 0x524e, 0x3, 0x3, 0x401, 0xf9]}}]}]}, @NL80211_ATTR_TX_RATES={0x114, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x7ca2, 0x7fff, 0xcb4b, 0x5, 0x2, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x30, 0x30, 0x9, 0x48, 0x6, 0xb, 0xc, 0x60, 0x48, 0x12, 0x1, 0x5, 0x63, 0x24, 0xc, 0x30, 0x9, 0x18, 0x16, 0x6, 0x16, 0x2, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0xa5, 0x3, 0x8000, 0x80, 0x1, 0x1000, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x5}, {0x0, 0x3}, {0x7, 0x2}, {0x7, 0x2}, {0x6, 0xa}, {0x3, 0x7}, {0x6, 0xa}, {0x0, 0x7}, {0x7, 0x9}, {0x4, 0x8}, {0x2, 0x9}, {0x5, 0x3}, {0x3, 0x3}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x1000, 0x1, 0x9, 0x3ff, 0x101, 0xfff, 0x5]}}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x16, 0x30, 0x36, 0x0, 0x12, 0x18, 0x12, 0x4, 0x1b, 0x12, 0x6c, 0xb, 0x5, 0x3, 0x48, 0x6, 0x12, 0x0, 0x16, 0x60, 0x1b, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0xb, 0x200, 0xbe40, 0xf, 0xb4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x874f8f533b5eb550, 0x4, 0x12, 0x9, 0x60, 0x60, 0x9, 0x12, 0x9, 0x5, 0x6c, 0x6, 0x24, 0x2, 0xc, 0x24, 0x18, 0x30, 0xc, 0x1b, 0xb, 0x22, 0x1d, 0x55, 0x24, 0x6c, 0x6, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5b3, 0x2, 0xfff8, 0x40, 0xfff, 0x6]}}]}]}, @NL80211_ATTR_TX_RATES={0x1b4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x3, 0x6}, {0x6, 0x9}, {0x2, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x0, 0x2}, {0x5, 0x1}, {0x1, 0x9}, {0x7, 0x3}, {0x3, 0x2}, {0x3, 0x7}, {0x4, 0x6}, {0x4, 0x2}, {0x1, 0x3}, {0x3, 0x3}, {0x5, 0xa}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1}, {0x0, 0x6}, {0x0, 0x9}, {0x1, 0x4}, {0x5}, {0x7, 0x1}, {0x1, 0x2}, {0x3, 0x8}, {}, {0x2}, {0x1, 0x1}, {0x5}, {0x3, 0x3}, {0x3, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x1, 0x7, 0x8, 0x9, 0x96cc, 0xfff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x7, 0x4d27, 0x200, 0x10, 0x5, 0x1ff, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x7ff, 0x9, 0xa9f5, 0xfff8, 0x0, 0x12a]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x1, 0x8, 0xcfb, 0xb, 0x7f, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x16, 0x9, 0x36, 0x41, 0x1, 0x5, 0x16, 0x36, 0x18, 0x16, 0x48, 0x48, 0x3, 0x6, 0x6c, 0x16, 0x60, 0x2, 0x60, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0x101, 0xfffb, 0x7ff, 0x9, 0x6267, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x9, 0x7fff, 0xfffe, 0xc, 0xf4c0, 0x5]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc8, 0xffff, 0x40, 0x8000, 0x8, 0x1, 0x5]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xb, 0x48, 0xc, 0x20, 0x18, 0x5, 0xb, 0xc, 0x3, 0x5, 0x24, 0xb, 0x9, 0x30, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x30, 0x5, 0x18, 0x3, 0x1, 0x6c, 0xc, 0x1, 0x18, 0x48, 0x4, 0x9, 0x6f, 0xc, 0x4, 0x1b, 0x12, 0x30, 0x18, 0x6c, 0x60, 0x60, 0x4, 0x4]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x5, 0x24, 0x28, 0x16, 0x18, 0x9, 0x60, 0x9, 0x48, 0x6c, 0xb, 0x3, 0x6c, 0xb, 0x5, 0x36, 0x9, 0xc, 0x6, 0x30]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x3cc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x60, 0x4, 0x36, 0x48, 0x9, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x60, 0x60, 0x5, 0x36, 0x6, 0x4, 0x1, 0x16, 0xb, 0x18, 0x1b, 0x48, 0x6, 0xb, 0x5, 0x24, 0x1b, 0x9, 0x2e, 0x3, 0x6c, 0x6c, 0x4]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x7, 0x2, 0x401, 0x6, 0x2, 0x2, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x3, 0x0, 0x2, 0x8, 0x5, 0x2]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x7, 0x9}, {0x6, 0xa}, {0x3, 0x1}, {0x4, 0x1}, {0x7}, {0x2}, {0x7, 0x1}, {0x4, 0x3}, {0x6, 0x3}, {0x3, 0x2}, {0x6, 0x8}, {0x0, 0x7}, {0x6, 0x3}, {0x3, 0x7}, {0x2, 0x5}, {0x2, 0x9}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x5}, {0x3, 0x3}, {0x4, 0x5}, {0x6, 0xa}, {0x1, 0x1}, {0x6, 0x3}, {0x3, 0x4}, {0x7, 0x3}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1d]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x7, 0x9, 0xfffd, 0x1, 0xe, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x101, 0x3, 0x1, 0x1, 0x3, 0xfff7, 0x8001]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x8, 0x0, 0x0, 0x80, 0x8, 0x7]}}]}, @NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x5, 0x2}, {0x7, 0x8}, {0x7, 0x1}, {0x6}, {0x4, 0x3}, {0x1, 0x1}, {0x5}, {0x2, 0x3}, {0x1}, {0x1, 0x2}, {0x3, 0x5}, {0x7, 0x9}, {0x7, 0x5}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x13}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x3, 0x6c, 0x60, 0x6, 0x18, 0x1, 0x9, 0x9, 0x66, 0x36, 0x30, 0x9, 0x5, 0x16, 0xb, 0x6, 0x6c, 0x2, 0x5]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x1, 0x5}, {0x7, 0x3}, {0x1, 0x8}, {0x0, 0x3}, {0x1, 0xa}, {0x0, 0x2}, {0x6, 0x1}, {0x6, 0x8}, {0x7, 0x2}, {0x4, 0x2}, {0x4, 0xa}, {0x5, 0x6}, {0x6, 0x9}, {0x3, 0x3}, {0x6, 0x9}, {0x5, 0x5}, {0x0, 0x6}, {0x2, 0xa}, {0x3, 0x3}, {0x7, 0x1}, {0x5, 0x4}, {0x6, 0x3}, {0x1, 0xa}, {0x5, 0x2}, {0x5, 0x3}, {0x2, 0x5}, {0x1}, {0x3, 0x9}, {0x4, 0x8}, {0x0, 0xa}, {0x7, 0x3}, {0x0, 0x8}, {0x5, 0x5}, {0x7, 0x5}, {0x1, 0x6}, {0x7, 0xa}, {0x6, 0xa}, {0x1, 0x5}, {0x0, 0x5}, {0x7, 0xa}, {0x0, 0x8}, {0x6, 0x3}, {0x1, 0x5}, {0x2, 0x2}, {0x4, 0x9}, {0x6, 0x3}, {0x2, 0x7}, {0x6, 0x9}, {0x6, 0x3}, {0x5, 0x2}, {0x0, 0x8}, {0x7}, {0x3, 0x2}, {0x0, 0x8}, {0x2, 0x2}, {0x3, 0x9}, {0x0, 0x9}, {0x5, 0x4}, {0x5}, {0x2, 0x2}, {0x3, 0x8}, {0x5, 0x1}, {0x2, 0x6}, {0x0, 0x5}, {0x2, 0xa}, {0x3, 0x3}, {0x1, 0x3}, {0x5, 0x8}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0x0, 0x24, 0x16, 0x1, 0x12, 0x30, 0x18, 0x5, 0x1b, 0x9, 0x36, 0x2, 0x36, 0x24, 0x16, 0x48, 0x16, 0x3e, 0x4, 0x36, 0x4, 0x0, 0x4, 0x48, 0x5, 0x18, 0x18, 0x4, 0x16, 0x6]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x48, 0xb, 0x30, 0x30, 0x9]}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x6, 0x5}, {0x5, 0x2}, {0x1, 0x5}, {0x6, 0x1}, {0x3, 0x3}, {0x2, 0x2}, {0x1, 0x1}, {0x2}, {0x6, 0x7}, {0x1, 0x5}, {0x7, 0x7}, {0x3, 0x9}, {0x0, 0x7}, {0x2, 0x6}, {0x5, 0xa}, {0x6, 0x8}, {0x3, 0x4}, {0x2, 0x7}, {0x6}, {0x7, 0x5}, {0x0, 0x5}, {0x7, 0x9}, {0x0, 0x2}, {0x2, 0x9}, {0x2, 0x6}, {0x7, 0xa}, {0x5, 0x3}, {0x4, 0xa}, {0x0, 0x8}, {0x1}, {0x6, 0x5}, {0x2, 0x6}, {0x3, 0x7}, {0x0, 0x7}, {0x7, 0x7}, {0x5, 0x4}, {0x3, 0x9}, {0x6}, {0x7, 0xa}, {0x4, 0x2}, {0x2, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x8, 0x100, 0x2, 0x1800, 0x6, 0x7fff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x16, 0x30, 0x16, 0x5, 0xeb, 0xc, 0x5, 0x60, 0xc, 0x6c, 0x30, 0x16, 0x3, 0x1b, 0x30, 0x3, 0x5, 0x0, 0x24, 0x60, 0x6, 0x30]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0xf5f0, 0x3, 0x6, 0x9ce1, 0x40, 0x6, 0x9df]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0xb181, 0x1, 0x6, 0x4c85, 0x6, 0xc0c, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x110, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x7, 0x2}, {0x4, 0x7}, {0x2, 0xa}, {0x7, 0x4}, {0x5, 0xa}, {0x5, 0x9}, {0x1, 0x5}, {0x6, 0x6}, {0x3, 0x6}, {0x6, 0xa}, {0x0, 0xa}, {0x7, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {0x7, 0x9}, {0x5, 0x9}, {0x7, 0x6}, {0x5, 0x1}, {0x3, 0xa}, {0x4, 0x3}, {0x1, 0x6}, {}, {0x2, 0x9}, {0x7, 0x8}, {0x4, 0x3}, {0x7, 0x2}, {0x5}, {0x7, 0x2}, {0x0, 0x2}, {0x0, 0xa}, {0x5, 0x1}, {0x5, 0x9}, {0x7, 0x2}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x6}, {0x6, 0xa}]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x7, 0x7}, {0x2, 0x2}, {0x0, 0x7}, {0x3, 0x2}, {0x7, 0x1}, {0x3, 0x2}, {0x4, 0x8}, {0x4, 0x6}, {0x4, 0x8}, {0x1}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x1}, {0x0, 0x9}, {0x0, 0x7}, {0x6, 0x4}, {0x0, 0x3}, {0x6, 0x1}, {0x3, 0x4}, {0x7, 0x2}, {0x0, 0x8}, {0x3, 0x4}, {0x3, 0x9}, {0x3, 0x7}, {0x4, 0x8}, {0x0, 0x8}, {0x2, 0x2}, {0x6, 0x6}, {0x5, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x2, 0x4}, {0x0, 0x6}, {0x0, 0x1}, {0x7, 0x3}, {0x1, 0x4}, {0x7, 0x7}, {0x3, 0x3}, {0x7, 0x8}, {0x7, 0x5}, {0x4, 0x5}, {0x6, 0x3}, {0x1, 0x7}, {0x0, 0x8}, {0x7, 0x7}, {0x5, 0x3}, {0x7, 0x2}, {0x6, 0x7}, {0x2, 0x3}, {0x0, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x2, 0x7}, {0x6, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x2, 0x4}, {0x0, 0x9}, {0x2, 0x6}, {0x3, 0x8}, {0x6, 0x3}, {0x5, 0x3}, {0x1, 0x9}, {0x4, 0x9}, {0x7, 0xa}, {0x5, 0x8}, {0x5, 0x8}, {0x6, 0x7}, {0x0, 0x6}, {0x1, 0x7}, {0x2, 0x3}, {0x5, 0x3}, {0x6, 0x6}, {0x2, 0x3}, {0x4, 0x5}, {0x0, 0x5}, {0x5, 0x4}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0x3}, {0x6, 0xa}, {}, {0x2, 0x2}, {0x1, 0x3}, {0x3, 0x9}, {0x2, 0x5}, {0x5, 0x8}, {0x0, 0x6}, {0x4, 0xa}, {0x6, 0x1}, {0x5, 0xa}, {0x7, 0xa}, {0x0, 0x3}, {0x1, 0x9}, {0x7, 0x9}, {0x4, 0x2}, {0x1, 0x3}, {0x2, 0x4}, {}, {0x4, 0x3}, {0x2, 0x1}, {0x2, 0x6}, {0x3, 0x7}, {0x2, 0x5}, {0x6, 0x5}, {0x6, 0x2}, {0x1, 0xa}, {0x1, 0x5}, {0x4}, {0x2, 0x3}, {0x6, 0x1}, {0x5, 0x5}, {0x5, 0x7}, {0x2, 0x6}, {0x2, 0x4}, {0x2}, {0x1, 0x9}, {0x0, 0x9}, {0x0, 0xa}, {0x7, 0x4}, {0x4, 0x5}, {0x0, 0x9}, {0x6, 0x1}, {0x7, 0x7}, {0x1, 0x1}, {0x3, 0xa}, {0x5, 0x8}, {0x1, 0x4}, {0x1, 0x2}, {0x3, 0x7}, {0x3, 0x9}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x2}, {0x5, 0x4}, {}, {0x1, 0x2}, {0x0, 0x1}, {0x3, 0x5}, {0x1}]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1}, {0x1, 0x3}, {0x4, 0x1}, {0x4, 0x5}, {0x4, 0x1}, {0x0, 0x3}, {0x7, 0x1}, {0x5, 0x4}, {0x2, 0x5}, {0x0, 0x8}, {0x3, 0x8}, {0x6}, {0x0, 0x8}, {0x3, 0x2}, {0x1, 0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x6}, {0x0, 0x8}, {0x7, 0x5}, {0x2, 0x5}, {0x1, 0x5}, {0x6, 0x3}, {0x0, 0x8}, {0x1, 0x4}, {0x0, 0x3}, {0x0, 0x11}, {0x6, 0x2}, {0x7, 0x4}, {0x3}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x6}, {0x2, 0xa}, {0x3, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x0, 0x9, 0xf1, 0x6, 0xf001, 0x5, 0xfd22]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x28c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xda9, 0x1, 0x8, 0x0, 0x8, 0x8761, 0x401, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x0, 0x7, 0x5, 0xfff5, 0xddf, 0x5]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x3, 0x1}, {0x4, 0xa}, {0x6, 0x1}, {0x7, 0x5}, {0x0, 0x2}, {0x6, 0xa}, {0x6, 0x7}, {0x3, 0x7}, {0x0, 0x3}, {0x5, 0x2}, {0x6, 0x9}, {0x0, 0x6}, {0x3, 0x5}, {0x6, 0x1}, {0x0, 0x3}, {0x1, 0x8}, {0x0, 0x8}, {0x6, 0x3}, {0x3, 0x9}, {0x1, 0x5}, {0x1}, {0x6, 0x1}, {0x3, 0x7}, {0x2}, {}, {0x7, 0x5}, {0x6, 0x2}, {0x2, 0x4}, {0x5}, {0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x1}, {0x5, 0x8}, {0x2, 0x5}, {0x7, 0x2}, {0x1}, {0x3, 0x4}, {0x5, 0x6}, {0x7, 0x5}]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x0, 0x1}, {0x4, 0xa}, {0x6, 0x2}, {0x4, 0x9}, {0x4, 0x8}, {0x7, 0x9}, {0x2}, {0x7, 0x8}, {0x5, 0x4}, {0x0, 0x3}, {0x7, 0x4}, {0x5}, {0x1}, {0x4, 0x5}, {0x3, 0x2}, {0x3, 0x8}, {0x2, 0x4}, {0x4, 0x9}, {0x5, 0xa}, {0x1, 0x2}, {0x0, 0x9}, {0x1, 0x6}, {0x0, 0x1}, {0x0, 0x4}, {0x3, 0x7}, {0x4, 0x6}, {0x3, 0x2}, {0x3, 0x6}, {0x1, 0x7}, {0x2, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x7, 0x6}, {0x0, 0x9}, {0x0, 0x3}, {0x5, 0x6}, {0x4, 0x7}, {0x7, 0x5}, {0x2, 0x2}, {}, {0x6, 0x1}, {0x0, 0x5}, {0x3, 0x3}, {0x6, 0x4}, {0x4, 0xa}, {0x5, 0x8}, {0x4, 0x3}, {0x2, 0x5}, {0x3, 0x2}, {0x0, 0x8}, {0x1, 0x6}, {0x3, 0x8}, {0x6, 0x4}, {0x7, 0x4}, {0x3, 0x4}, {0x0, 0x9}, {0x5, 0x1}, {0x4, 0x6}, {0x5, 0x1}, {0x4, 0x5}, {0x3, 0x2}, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0x5}, {0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x2, 0x5}, {0x1, 0x3}, {0x7, 0x8}, {0x3, 0x7}, {0x7, 0x9}, {0x7, 0x6}, {0x3}, {0x4, 0xa}, {0x4, 0x8}, {0x5, 0x5}, {0x7, 0x6}, {0x1, 0x2}, {0x0, 0x6}, {0x1, 0x8}, {0x4, 0x2}, {0x3, 0x4}, {0x7, 0x8}, {0x0, 0x6}, {0x0, 0x2}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x7, 0x9}, {0x4, 0x3}, {0x6, 0x3}, {0x2, 0x7}, {0x3, 0x2}, {0x2, 0xa}, {0x0, 0x2}, {0x3, 0x5}, {0x3, 0x1}, {0x0, 0x9}, {}, {0x4, 0x2}, {0x2, 0xa}, {0x2, 0x3}, {0x4, 0x6}, {0x4, 0x7}, {0x1, 0xa}, {0x7}, {0x5, 0x1}, {0x1, 0x7}, {0x1, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x7, 0xa}, {0x1, 0x4}, {0x6, 0x6}, {0x1, 0x3}, {0x2}, {0x7}, {0x3}, {0x0, 0xa}, {0x0, 0x5}, {0x4, 0x4}, {0x1, 0x8}, {0x7, 0x6}, {0x4, 0x7}, {0x0, 0x2}, {0x5, 0x5}, {0x5, 0x1}, {0x1, 0xa}, {0x2, 0x4}, {0x3, 0x1}, {0x5, 0xa}, {0x5}, {0x1, 0x8}, {0x0, 0x7}, {0x6, 0xa}, {0x6, 0x6}, {0x6, 0xa}, {0x1}, {}, {0x3, 0x3}, {0x7, 0x2}, {0x5, 0x8}, {0x3}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x9}, {0x4, 0x3}, {0x4, 0x6}, {0x1, 0x2}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0x9}, {0x1, 0x3}, {0x1, 0x18}, {0x6}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x3}, {0x2, 0xa}, {0x1, 0x6}, {0x3, 0xa}, {0x0, 0x8}, {0x5, 0x4}, {0x6, 0x4}, {0x3}, {0x3, 0x4}, {0x3, 0x9}, {0x6, 0x1}, {0x7, 0x5}, {0x0, 0x2}, {0x2, 0x3}, {0x7, 0x6}, {0x1, 0x6}, {0x2, 0x4}, {0x0, 0x1}, {0x3, 0x2}, {0x3, 0x4}, {0x5}, {0x0, 0x3}, {0x1, 0x8}, {0x4, 0x4}, {0x1, 0x8}, {0x0, 0x3}, {0x3, 0xa}, {0x1, 0x3}, {0x1, 0x4}, {0x7, 0x3}, {0x5, 0x7}, {0x2, 0x7}, {0x1, 0x7}, {0x4, 0x5}, {0x5}, {0x0, 0x2}, {0x0, 0x7}, {0x7, 0x1}, {0x1, 0x9}, {0x4, 0x5}, {0x6, 0xa}, {0x1}, {0x1, 0x6}, {0x6, 0x3}, {0x2, 0x7}, {0x1, 0x2}, {0x4, 0x1}, {0x7, 0x8}, {0x5, 0x6}, {0x6, 0x9}, {0x5, 0x4}, {0x0, 0xa}, {0x5, 0x7}, {0x0, 0x8}, {0x1, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x60, 0x16, 0x24, 0x16, 0x4, 0x13, 0x18, 0x24, 0x6, 0x2, 0x1, 0x16, 0x1b, 0x48, 0x7f, 0xb, 0x60, 0x62, 0x1, 0x12, 0x6, 0x36, 0x0, 0x5, 0x12, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x8, 0x9, 0xf, 0x9, 0x2, 0x4, 0xf]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x40, 0x8, 0xfffe, 0x101, 0x2, 0x300, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x7, 0x7, 0x8, 0xdb55, 0xf, 0x800, 0xb8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4, 0x0, 0xc70, 0x800, 0x2, 0x2, 0xfff8]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x60, 0xc, 0x24, 0x1b, 0xb, 0x4a9934f8db923948, 0x5, 0x18, 0x48, 0x12, 0x7b, 0x5, 0x36, 0x1, 0x3, 0x24, 0x6c, 0x9, 0x5, 0x30]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x27, 0x1, 0x2f01afc56ef579f2, 0x16, 0x5, 0x4, 0x12, 0x79, 0x30, 0x60, 0xc, 0xc, 0x18, 0x30, 0x36, 0xc, 0x18, 0x16, 0x12, 0x2, 0x9, 0xb, 0x18, 0x4, 0x1b, 0x16, 0x3, 0x48, 0x1, 0x36, 0x4]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x4, 0x2}, {0x3, 0x8}, {0x0, 0x6}, {0x4, 0x9}, {0x0, 0xa}, {0x0, 0x2}, {0x4, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {}, {0x6, 0x1}, {0x2, 0x8}, {0x6, 0x1}, {0x0, 0x1}]}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x7, 0x3}, {0x1, 0x7}, {0x2, 0x8}, {0x0, 0x2}, {0x6, 0x9}, {0x1, 0x6}, {0x7, 0x6}, {0x4, 0x5}, {0x3, 0x7}, {0x5, 0x2}, {0x4, 0x6}, {0x6, 0x6}, {0x3, 0xb}, {0x0, 0x6}, {0x1, 0x5}, {0x2, 0x4}, {0x5, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0xe0b, 0x998, 0xca40, 0x7, 0x81, 0xe, 0x2]}}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x6, 0x3}, {0x7, 0x8}, {0x3, 0x4}, {0x1, 0x1}, {0x7, 0x9}, {0x6, 0x3}, {0x3, 0x5}, {0x7}, {0x2, 0x6}, {0x4, 0x8}, {0x2, 0x7}, {0x7, 0x2}, {0x2, 0x5}, {0x0, 0x3}, {0x1, 0x4}, {0x1, 0x9}, {0x5}, {0x6, 0x1}, {0x2, 0xa}, {0x1, 0x4}, {0x2, 0x9}, {0x0, 0x4}, {0x5, 0x6}, {0x1, 0xa}, {0x6, 0x5}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x7, 0x5}, {0x2, 0x9}, {0x0, 0x3}, {0x6, 0x1}, {0x1, 0x6}, {0x0, 0x8}, {0x5, 0x5}, {0x3, 0x8}, {0x7, 0x3}, {0x5, 0x5}, {0x4, 0x8}, {0x0, 0x3}, {0x3, 0x9}, {0x0, 0x9}, {0x4, 0x8}, {0x1, 0x4}, {0x1, 0x3}, {0x3, 0x6}, {0x2, 0x3}, {0x4}, {0x6, 0xa}, {0x4, 0x1}, {0x2, 0x8}, {0x0, 0x8}, {0x6, 0x4}, {0x4, 0x3}, {0x7, 0x7}, {0x1, 0x1}, {0x7, 0xa}, {0x7, 0x1}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0x4}, {0x6, 0x5}, {0x6, 0x8}, {0x1, 0x7}, {0x6, 0x4}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x200, 0xf, 0x5, 0x3, 0x8, 0x44, 0x5]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x4, 0xa}, {0x4, 0x4}, {0x5, 0x5}, {0x7, 0xa}, {0x0, 0x8}]}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x5}, {0x1, 0x1}, {0x1}, {0x0, 0x5}, {}, {0x1, 0x8}, {0x1}, {0x2, 0x9}, {0x0, 0x9}, {0x7, 0x2}, {0x1, 0x9}, {0x2, 0x8}, {0x7, 0x8}, {0x5, 0x8}, {0x3, 0xa}, {0x6, 0x6}, {0x1, 0x3}, {0x5, 0x4}, {0x2, 0x3}, {0x2, 0x4}, {0x1, 0x9}, {0x3, 0x1}, {0x7, 0x3}, {0x6, 0x7}, {0x5, 0x7}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0xa}, {0x3, 0x6}, {0x5, 0x9}, {0x3, 0x1}, {0x1, 0x6}, {0x5, 0x3}, {0x2, 0x1}, {0x2, 0x2}, {0x3, 0x7}, {0x3, 0x6}, {0x7, 0x3}, {0x1, 0x1}, {0x2, 0xa}, {0x5, 0x2}, {0x0, 0x6}, {0x1, 0x7}, {0x5, 0x2}, {0x6, 0x6}, {0x5, 0x3}, {0x3, 0x2}, {0x0, 0x7}, {0x5, 0x2}, {0x0, 0x3}, {0x1, 0x8}, {0x4, 0xa}, {0x0, 0xa}, {0x7, 0x3}, {0x4, 0x9}, {0x6, 0x7}, {0x1, 0x8}, {0x3, 0x2}, {0x0, 0x2}, {0x4, 0x9}, {0x1}, {0x1, 0x8}, {0x5, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x3, 0x8}, {0x1}, {0x7, 0x1}, {0x7, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6, 0x2, 0x60, 0x16, 0x6, 0x12, 0x6, 0x24, 0x5, 0x4, 0x36, 0x3, 0x24, 0xb, 0x35ed5fc572f9c70a, 0x16, 0xb, 0x18, 0xb, 0x12, 0x24, 0xc, 0x16, 0x1, 0x4, 0x36, 0x24, 0x5, 0x30, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa31, 0x4, 0x5, 0xfe00, 0x7fff, 0x4, 0x0, 0x9]}}]}]}, @NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x84, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x100, 0x1, 0xfff7, 0x8, 0x81, 0x7, 0x9]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6c, 0x12, 0x5, 0x6, 0x9, 0x48, 0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x400, 0x3, 0x81, 0xb0, 0x3, 0x5, 0x1]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x6c, 0x48, 0x18, 0x0, 0xc, 0x12, 0x30, 0x0, 0x4a, 0x6c, 0xc, 0x16, 0x36, 0x6c, 0x48, 0x24, 0x3e, 0xb, 0x30]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfe6, 0x1, 0xd, 0x4776, 0xa, 0x1, 0x8560]}}]}]}]}, 0xc90}, 0x1, 0x0, 0x0, 0x40}, 0x40000) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x40084) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000680)=@req={0x28, &(0x7f0000000180)={'veth0_vlan\x00', @ifru_map={0x101, 0xfffffffffffffffd, 0x80, 0x5, 0x63, 0x8}}}) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a40)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 1m16.076743359s ago: executing program 4 (id=20251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0xb, 0x16, 0x1, 0x0, [0x2, 0x3, 0x6, 0x1]}]}, 0x78}}, 0x0) syz_emit_ethernet(0x25b, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x225, 0x3a, 0xff, @mcast2, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x82b3, 0x0, 0x0, [{0xe, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, '\x00'/12}, {0x2, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1e, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000290aa235a670670ffc5dc49dfb58d00000000000000726467cbd3"}]}}}}}}, 0x0) 1m16.071121202s ago: executing program 3 (id=20252): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffe8c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="540000000000000000000004000000000000000100000001001d0001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84", 0xbd}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c5", 0x21}], 0x1}}], 0x3, 0x20000044) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m15.861366218s ago: executing program 3 (id=20253): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x1, &(0x7f00000002c0)=@raw=[@ldst={0x0, 0x2, 0x1, 0x2, 0x5, 0x100, 0xfffffffffffffff0}], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00}, 0x94) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m15.860095223s ago: executing program 4 (id=20254): socket$alg(0x26, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}}}}}}, 0x0) 1m15.342931531s ago: executing program 1 (id=20255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000002c0)={@val={0x8, 0x830}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e24, 0x4e20, 0x1c, 0x0, @wg=@data={0x4, 0x3, 0x3, "c4a167be"}}}}, 0x3e) 1m11.904170835s ago: executing program 4 (id=20256): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffe8c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="540000000000000000000004000000000000000100000001001d0001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3", 0xb2}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2", 0xd2}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c5", 0x21}], 0x1}}], 0x3, 0x20000044) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m10.122869834s ago: executing program 2 (id=20257): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000240)={r1, r1, 0x4, 0x0, 0x0, 0xc0, 0x4, 0x9c3f, 0x6, 0x5, 0x2, 0x7, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfdfd}) 1m8.270860393s ago: executing program 3 (id=20258): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x24, &(0x7f0000001dc0)=[{&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118", 0x9f}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de2145", 0x26}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d", 0x6d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b", 0xa5}, {&(0x7f00000002c0)="b1155498aa147d5345bf7f28767cb0160e43a397bd7570c1d12d3e06a6334296c872c191e6e2b68a08bd78c4988dcf59614cafcfa96f99140ac9f7193e8998f0993fb76c6481e13e3b648c286c934fe1c0fe868869f393b0f0373e25b390c5127c8952ea553daf116c8957ae988f8e6fa82216fa8f80a88894860903df4f", 0x7e}], 0x2}}], 0x3, 0x2090) 1m2.735048255s ago: executing program 0 (id=20259): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000175627ad7000ffe9df25000000009f310987072d6298cd0d470c238abe74a96d86057044e9f3c0352780efa86593430afa1386bdbc4304676eda544b504d9f625dc4b1458faa74305b56932e2b65333f2d9e3ea9cd", @ANYRES32=0x0, @ANYBLOB="000800008b350600280012800b00010065727370616e0000180002800500160002000000040012000500170008000000"], 0x48}, 0x1, 0x0, 0x0, 0x15}, 0xc084) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5450, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r4) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socket(0x25, 0x2, 0x2) 55.357079858s ago: executing program 32 (id=20255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000002c0)={@val={0x8, 0x830}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e24, 0x4e20, 0x1c, 0x0, @wg=@data={0x4, 0x3, 0x3, "c4a167be"}}}}, 0x3e) 50.16639263s ago: executing program 33 (id=20256): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffe8c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="540000000000000000000004000000000000000100000001001d0001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3", 0xb2}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2", 0xd2}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c5", 0x21}], 0x1}}], 0x3, 0x20000044) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 47.208452529s ago: executing program 34 (id=20257): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000240)={r1, r1, 0x4, 0x0, 0x0, 0xc0, 0x4, 0x9c3f, 0x6, 0x5, 0x2, 0x7, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfdfd}) 42.349434563s ago: executing program 35 (id=20258): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x24, &(0x7f0000001dc0)=[{&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118", 0x9f}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de2145", 0x26}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d", 0x6d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b", 0xa5}, {&(0x7f00000002c0)="b1155498aa147d5345bf7f28767cb0160e43a397bd7570c1d12d3e06a6334296c872c191e6e2b68a08bd78c4988dcf59614cafcfa96f99140ac9f7193e8998f0993fb76c6481e13e3b648c286c934fe1c0fe868869f393b0f0373e25b390c5127c8952ea553daf116c8957ae988f8e6fa82216fa8f80a88894860903df4f", 0x7e}], 0x2}}], 0x3, 0x2090) 40.73789315s ago: executing program 36 (id=20259): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000175627ad7000ffe9df25000000009f310987072d6298cd0d470c238abe74a96d86057044e9f3c0352780efa86593430afa1386bdbc4304676eda544b504d9f625dc4b1458faa74305b56932e2b65333f2d9e3ea9cd", @ANYRES32=0x0, @ANYBLOB="000800008b350600280012800b00010065727370616e0000180002800500160002000000040012000500170008000000"], 0x48}, 0x1, 0x0, 0x0, 0x15}, 0xc084) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5450, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r4) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socket(0x25, 0x2, 0x2) 2.552952942s ago: executing program 6 (id=20261): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffe8c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="540000000000000000000004000000000000000100000001001d0001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968f", 0x5f}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84", 0xbd}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c5", 0x21}], 0x1}}], 0x2, 0x20000044) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 5 (id=20260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200fffe240004802000018007000100637400001400028008ba4518d3a4eea10002400000001108000440000000110900010073797a30000000000900020073797a320000000014000000110001000000000000"], 0x78}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4048080) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="58010000100001000000000000000000fe8000000000000000000000000000bb00000000000000000000ffffe000000200000025000000000000000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0a00010000000000000000000000000000000032000000000000000000000000000000000000010000000000000000a3020000000000007f00000000000000ffffffffffffffff0000000000000000330000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00020100000000000000001c001700000000070000000000000000000000002bbd7000000000004c0014"], 0x158}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000640)={0x6, 0x1}, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7, 0x2000}, @sack_perm, @window={0x3, 0x0, 0x401}, @window], 0x6) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x280b40, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): itted already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1175.019831][T21400] syzkaller0: entered promiscuous mode [ 1175.025347][T21400] syzkaller0: entered allmulticast mode [ 1175.034283][T21400] FAULT_INJECTION: forcing a failure. [ 1175.034283][T21400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1175.053452][T21400] CPU: 0 UID: 0 PID: 21400 Comm: syz.2.19520 Not tainted syzkaller #0 PREEMPT(full) [ 1175.053477][T21400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1175.053488][T21400] Call Trace: [ 1175.053496][T21400] [ 1175.053504][T21400] dump_stack_lvl+0xe8/0x150 [ 1175.053534][T21400] should_fail_ex+0x412/0x560 [ 1175.053566][T21400] _copy_from_iter+0x3b0/0x1670 [ 1175.053597][T21400] ? __pfx__copy_from_iter+0x10/0x10 [ 1175.053624][T21400] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1175.053645][T21400] skb_copy_datagram_from_iter+0xf5/0x710 [ 1175.053666][T21400] ? dev_get_by_index+0x22/0x2e0 [ 1175.053684][T21400] ? skb_put+0x11b/0x210 [ 1175.053709][T21400] packet_sendmsg+0x37ea/0x50f0 [ 1175.053742][T21400] ? __lock_acquire+0x6b5/0x2cf0 [ 1175.053789][T21400] ? aa_sk_perm+0x6d5/0x900 [ 1175.053813][T21400] ? __pfx_packet_sendmsg+0x10/0x10 [ 1175.053838][T21400] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1175.053862][T21400] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1175.053880][T21400] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1175.053903][T21400] ____sys_sendmsg+0x972/0x9f0 [ 1175.053936][T21400] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1175.053968][T21400] ? import_iovec+0x73/0xa0 [ 1175.053989][T21400] ___sys_sendmsg+0x2a5/0x360 [ 1175.054016][T21400] ? __pfx____sys_sendmsg+0x10/0x10 [ 1175.054066][T21400] ? __fget_files+0x2a/0x420 [ 1175.054082][T21400] ? __fget_files+0x3a0/0x420 [ 1175.054105][T21400] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1175.054132][T21400] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1175.054162][T21400] ? __pfx_ksys_write+0x10/0x10 [ 1175.054191][T21400] do_syscall_64+0x14d/0xf80 [ 1175.054208][T21400] ? trace_irq_disable+0x3b/0x150 [ 1175.054224][T21400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.054241][T21400] ? clear_bhb_loop+0x40/0x90 [ 1175.054270][T21400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.054287][T21400] RIP: 0033:0x7f822719c819 [ 1175.054305][T21400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1175.054319][T21400] RSP: 002b:00007f8228121028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1175.054337][T21400] RAX: ffffffffffffffda RBX: 00007f8227415fa0 RCX: 00007f822719c819 [ 1175.054349][T21400] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000008 [ 1175.054360][T21400] RBP: 00007f8228121090 R08: 0000000000000000 R09: 0000000000000000 [ 1175.054370][T21400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1175.054381][T21400] R13: 00007f8227416038 R14: 00007f8227415fa0 R15: 00007fff570d1db8 [ 1175.054405][T21400] [ 1176.181224][T21442] lo speed is unknown, defaulting to 1000 [ 1176.836183][T21442] lo speed is unknown, defaulting to 1000 [ 1176.852818][T21442] lo speed is unknown, defaulting to 1000 [ 1177.252332][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.216384][T21459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19537'. [ 1178.238715][T21459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19537'. [ 1178.278515][T21463] FAULT_INJECTION: forcing a failure. [ 1178.278515][T21463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1178.291949][T21463] CPU: 0 UID: 0 PID: 21463 Comm: syz.2.19538 Not tainted syzkaller #0 PREEMPT(full) [ 1178.291972][T21463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1178.291983][T21463] Call Trace: [ 1178.291990][T21463] [ 1178.291997][T21463] dump_stack_lvl+0xe8/0x150 [ 1178.292026][T21463] should_fail_ex+0x412/0x560 [ 1178.292054][T21463] _copy_from_user+0x2d/0xb0 [ 1178.292075][T21463] ___sys_sendmsg+0x1c6/0x360 [ 1178.292103][T21463] ? __pfx____sys_sendmsg+0x10/0x10 [ 1178.292152][T21463] ? __fget_files+0x2a/0x420 [ 1178.292169][T21463] ? __fget_files+0x3a0/0x420 [ 1178.292192][T21463] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1178.292218][T21463] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1178.292251][T21463] ? __pfx_ksys_write+0x10/0x10 [ 1178.292273][T21463] do_syscall_64+0x14d/0xf80 [ 1178.292283][T21463] ? trace_irq_disable+0x3b/0x150 [ 1178.292293][T21463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.292303][T21463] ? clear_bhb_loop+0x40/0x90 [ 1178.292316][T21463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.292326][T21463] RIP: 0033:0x7f822719c819 [ 1178.292337][T21463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1178.292346][T21463] RSP: 002b:00007f8228121028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1178.292358][T21463] RAX: ffffffffffffffda RBX: 00007f8227415fa0 RCX: 00007f822719c819 [ 1178.292365][T21463] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000004 [ 1178.292372][T21463] RBP: 00007f8228121090 R08: 0000000000000000 R09: 0000000000000000 [ 1178.292378][T21463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1178.292384][T21463] R13: 00007f8227416038 R14: 00007f8227415fa0 R15: 00007fff570d1db8 [ 1178.292399][T21463] [ 1178.808651][T21427] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1179.020040][T21476] netlink: 'syz.4.19543': attribute type 13 has an invalid length. [ 1179.043113][T21476] netlink: 'syz.4.19543': attribute type 17 has an invalid length. [ 1179.072608][T21472] syzkaller0: entered promiscuous mode [ 1179.078646][T21472] syzkaller0: entered allmulticast mode [ 1179.083681][T21479] FAULT_INJECTION: forcing a failure. [ 1179.083681][T21479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1179.086315][T21472] FAULT_INJECTION: forcing a failure. [ 1179.086315][T21472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1179.103033][T21479] CPU: 0 UID: 0 PID: 21479 Comm: syz.0.19544 Not tainted syzkaller #0 PREEMPT(full) [ 1179.103056][T21479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1179.103067][T21479] Call Trace: [ 1179.103074][T21479] [ 1179.103082][T21479] dump_stack_lvl+0xe8/0x150 [ 1179.103110][T21479] should_fail_ex+0x412/0x560 [ 1179.103140][T21479] _copy_from_user+0x2d/0xb0 [ 1179.103163][T21479] __sys_connect+0x156/0x450 [ 1179.103187][T21479] ? __pfx___sys_connect+0x10/0x10 [ 1179.103219][T21479] ? __pfx_ksys_write+0x10/0x10 [ 1179.103246][T21479] __x64_sys_connect+0x7a/0x90 [ 1179.103268][T21479] do_syscall_64+0x14d/0xf80 [ 1179.103285][T21479] ? trace_irq_disable+0x3b/0x150 [ 1179.103301][T21479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.103318][T21479] ? clear_bhb_loop+0x40/0x90 [ 1179.103342][T21479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.103360][T21479] RIP: 0033:0x7fdf8e19c819 [ 1179.103376][T21479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.103392][T21479] RSP: 002b:00007fdf8f006028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1179.103410][T21479] RAX: ffffffffffffffda RBX: 00007fdf8e415fa0 RCX: 00007fdf8e19c819 [ 1179.103422][T21479] RDX: 000000000000000e RSI: 0000200000000080 RDI: 0000000000000004 [ 1179.103434][T21479] RBP: 00007fdf8f006090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.103445][T21479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.103456][T21479] R13: 00007fdf8e416038 R14: 00007fdf8e415fa0 R15: 00007ffde667a788 [ 1179.103483][T21479] [ 1179.253797][T21476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1179.259220][T21472] CPU: 1 UID: 0 PID: 21472 Comm: syz.1.19541 Not tainted syzkaller #0 PREEMPT(full) [ 1179.259245][T21472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1179.259256][T21472] Call Trace: [ 1179.259263][T21472] [ 1179.259271][T21472] dump_stack_lvl+0xe8/0x150 [ 1179.259302][T21472] should_fail_ex+0x412/0x560 [ 1179.259333][T21472] _copy_from_user+0x2d/0xb0 [ 1179.259356][T21472] kstrtouint_from_user+0xd6/0x180 [ 1179.259377][T21472] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1179.259410][T21472] proc_fail_nth_write+0x8e/0x210 [ 1179.259435][T21472] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1179.259464][T21472] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1179.259490][T21472] vfs_write+0x29a/0xb90 [ 1179.259518][T21472] ? __pfx_vfs_write+0x10/0x10 [ 1179.259539][T21472] ? __fget_files+0x2a/0x420 [ 1179.259559][T21472] ? __fget_files+0x3a0/0x420 [ 1179.259574][T21472] ? __fget_files+0x2a/0x420 [ 1179.259599][T21472] ksys_write+0x150/0x270 [ 1179.259622][T21472] ? __pfx_ksys_write+0x10/0x10 [ 1179.259651][T21472] do_syscall_64+0x14d/0xf80 [ 1179.259668][T21472] ? trace_irq_disable+0x3b/0x150 [ 1179.259685][T21472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.259703][T21472] ? clear_bhb_loop+0x40/0x90 [ 1179.259725][T21472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.259742][T21472] RIP: 0033:0x7f8a3435d04e [ 1179.259759][T21472] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1179.259773][T21472] RSP: 002b:00007f8a351d8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1179.259792][T21472] RAX: ffffffffffffffda RBX: 00007f8a351d96c0 RCX: 00007f8a3435d04e [ 1179.259805][T21472] RDX: 0000000000000001 RSI: 00007f8a351d90a0 RDI: 000000000000000a [ 1179.259815][T21472] RBP: 00007f8a351d9090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.259826][T21472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.259836][T21472] R13: 00007f8a34616038 R14: 00007f8a34615fa0 R15: 00007ffe60a1a558 [ 1179.259865][T21472] [ 1179.505509][T21476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1179.600500][T21492] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19549'. [ 1179.620908][T21490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19548'. [ 1179.731279][T21500] FAULT_INJECTION: forcing a failure. [ 1179.731279][T21500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1179.748390][T21500] CPU: 1 UID: 0 PID: 21500 Comm: syz.1.19553 Not tainted syzkaller #0 PREEMPT(full) [ 1179.748415][T21500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1179.748427][T21500] Call Trace: [ 1179.748435][T21500] [ 1179.748443][T21500] dump_stack_lvl+0xe8/0x150 [ 1179.748474][T21500] should_fail_ex+0x412/0x560 [ 1179.748505][T21500] _copy_to_user+0x31/0xb0 [ 1179.748529][T21500] simple_read_from_buffer+0xe1/0x170 [ 1179.748559][T21500] proc_fail_nth_read+0x1bb/0x230 [ 1179.748587][T21500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1179.748616][T21500] ? rw_verify_area+0x2a6/0x4d0 [ 1179.748636][T21500] ? tun_chr_write_iter+0x18a/0x200 [ 1179.748655][T21500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1179.748683][T21500] vfs_read+0x20c/0xa70 [ 1179.748701][T21500] ? fdget_pos+0x246/0x320 [ 1179.748722][T21500] ? __pfx___mutex_lock+0x10/0x10 [ 1179.748742][T21500] ? __pfx_vfs_read+0x10/0x10 [ 1179.748763][T21500] ? __fget_files+0x2a/0x420 [ 1179.748784][T21500] ? __fget_files+0x3a0/0x420 [ 1179.748799][T21500] ? __fget_files+0x2a/0x420 [ 1179.748824][T21500] ksys_read+0x150/0x270 [ 1179.748844][T21500] ? __pfx_ksys_read+0x10/0x10 [ 1179.748873][T21500] do_syscall_64+0x14d/0xf80 [ 1179.748890][T21500] ? trace_irq_disable+0x3b/0x150 [ 1179.748904][T21500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.748920][T21500] ? clear_bhb_loop+0x40/0x90 [ 1179.748939][T21500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.748956][T21500] RIP: 0033:0x7f8a3435d04e [ 1179.748971][T21500] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1179.748987][T21500] RSP: 002b:00007f8a351d8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1179.749005][T21500] RAX: ffffffffffffffda RBX: 00007f8a351d96c0 RCX: 00007f8a3435d04e [ 1179.749018][T21500] RDX: 000000000000000f RSI: 00007f8a351d90a0 RDI: 0000000000000003 [ 1179.749030][T21500] RBP: 00007f8a351d9090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.749048][T21500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.749058][T21500] R13: 00007f8a34616038 R14: 00007f8a34615fa0 R15: 00007ffe60a1a558 [ 1179.749087][T21500] [ 1180.185171][T21515] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.19557'. [ 1180.307577][T21528] netlink: 14 bytes leftover after parsing attributes in process `syz.4.19562'. [ 1180.319167][T21527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19562'. [ 1180.340479][T21528] bond0 (unregistering): Released all slaves [ 1180.395453][T21535] FAULT_INJECTION: forcing a failure. [ 1180.395453][T21535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1180.410138][T21535] CPU: 1 UID: 0 PID: 21535 Comm: syz.1.19565 Not tainted syzkaller #0 PREEMPT(full) [ 1180.410168][T21535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1180.410180][T21535] Call Trace: [ 1180.410188][T21535] [ 1180.410196][T21535] dump_stack_lvl+0xe8/0x150 [ 1180.410226][T21535] should_fail_ex+0x412/0x560 [ 1180.410257][T21535] _copy_from_user+0x2d/0xb0 [ 1180.410280][T21535] ___sys_sendmsg+0x1c6/0x360 [ 1180.410311][T21535] ? __pfx____sys_sendmsg+0x10/0x10 [ 1180.410368][T21535] ? __fget_files+0x2a/0x420 [ 1180.410385][T21535] ? __fget_files+0x3a0/0x420 [ 1180.410411][T21535] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1180.410439][T21535] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1180.410473][T21535] ? __pfx_ksys_write+0x10/0x10 [ 1180.410504][T21535] do_syscall_64+0x14d/0xf80 [ 1180.410521][T21535] ? trace_irq_disable+0x3b/0x150 [ 1180.410538][T21535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.410557][T21535] ? clear_bhb_loop+0x40/0x90 [ 1180.410579][T21535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.410597][T21535] RIP: 0033:0x7f8a3439c819 [ 1180.410615][T21535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1180.410629][T21535] RSP: 002b:00007f8a351d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1180.410648][T21535] RAX: ffffffffffffffda RBX: 00007f8a34615fa0 RCX: 00007f8a3439c819 [ 1180.410661][T21535] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1180.410674][T21535] RBP: 00007f8a351d9090 R08: 0000000000000000 R09: 0000000000000000 [ 1180.410685][T21535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1180.410696][T21535] R13: 00007f8a34616038 R14: 00007f8a34615fa0 R15: 00007ffe60a1a558 [ 1180.410724][T21535] [ 1180.831117][T21551] netlink: 'syz.1.19572': attribute type 72 has an invalid length. [ 1180.920530][T21553] lo speed is unknown, defaulting to 1000 [ 1180.954574][T21559] FAULT_INJECTION: forcing a failure. [ 1180.954574][T21559] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.983249][T21559] CPU: 0 UID: 0 PID: 21559 Comm: syz.0.19573 Not tainted syzkaller #0 PREEMPT(full) [ 1180.983276][T21559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1180.983287][T21559] Call Trace: [ 1180.983295][T21559] [ 1180.983303][T21559] dump_stack_lvl+0xe8/0x150 [ 1180.983333][T21559] should_fail_ex+0x412/0x560 [ 1180.983365][T21559] should_failslab+0xa8/0x100 [ 1180.983390][T21559] __kmalloc_noprof+0xe8/0x760 [ 1180.983412][T21559] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1180.983439][T21559] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1180.983472][T21559] genl_family_rcv_msg_doit+0xd9/0x330 [ 1180.983498][T21559] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1180.983525][T21559] ? apparmor_capable+0x126/0x170 [ 1180.983548][T21559] ? bpf_lsm_capable+0x9/0x20 [ 1180.983572][T21559] ? security_capable+0x7e/0x2c0 [ 1180.983603][T21559] genl_rcv_msg+0x61c/0x7a0 [ 1180.983633][T21559] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1180.983657][T21559] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1180.983680][T21559] ? __pfx_nl80211_wiphy_netns+0x10/0x10 [ 1180.983699][T21559] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1180.983722][T21559] ? __lock_acquire+0x6b5/0x2cf0 [ 1180.983756][T21559] netlink_rcv_skb+0x232/0x4b0 [ 1180.983781][T21559] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1180.983801][T21559] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1180.983840][T21559] ? down_read+0x272/0x2e0 [ 1180.983859][T21559] ? genl_rcv+0xd/0x40 [ 1180.983878][T21559] genl_rcv+0x28/0x40 [ 1180.983895][T21559] netlink_unicast+0x80f/0x9b0 [ 1180.983924][T21559] ? __pfx_netlink_unicast+0x10/0x10 [ 1180.983948][T21559] ? netlink_sendmsg+0x650/0xb40 [ 1180.983969][T21559] ? skb_put+0x11b/0x210 [ 1180.983996][T21559] netlink_sendmsg+0x813/0xb40 [ 1180.984028][T21559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1180.984055][T21559] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1180.984075][T21559] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1180.984099][T21559] ____sys_sendmsg+0x972/0x9f0 [ 1180.984132][T21559] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1180.984165][T21559] ? import_iovec+0x73/0xa0 [ 1180.984190][T21559] ___sys_sendmsg+0x2a5/0x360 [ 1180.984221][T21559] ? __pfx____sys_sendmsg+0x10/0x10 [ 1180.984281][T21559] ? __fget_files+0x2a/0x420 [ 1180.984298][T21559] ? __fget_files+0x3a0/0x420 [ 1180.984325][T21559] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1180.984353][T21559] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1180.984388][T21559] ? __pfx_ksys_write+0x10/0x10 [ 1180.984420][T21559] do_syscall_64+0x14d/0xf80 [ 1180.984438][T21559] ? trace_irq_disable+0x3b/0x150 [ 1180.984455][T21559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.984473][T21559] ? clear_bhb_loop+0x40/0x90 [ 1180.984495][T21559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.984513][T21559] RIP: 0033:0x7fdf8e19c819 [ 1180.984531][T21559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1180.984547][T21559] RSP: 002b:00007fdf8efe5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1180.984568][T21559] RAX: ffffffffffffffda RBX: 00007fdf8e416090 RCX: 00007fdf8e19c819 [ 1180.984581][T21559] RDX: 00000000000000c0 RSI: 0000200000000040 RDI: 0000000000000006 [ 1180.984593][T21559] RBP: 00007fdf8efe5090 R08: 0000000000000000 R09: 0000000000000000 [ 1180.984605][T21559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1180.984616][T21559] R13: 00007fdf8e416128 R14: 00007fdf8e416090 R15: 00007ffde667a788 [ 1180.984646][T21559] [ 1181.475686][T21553] lo speed is unknown, defaulting to 1000 [ 1181.488192][T21553] lo speed is unknown, defaulting to 1000 [ 1181.580091][T21568] syzkaller0: entered promiscuous mode [ 1181.586065][T21568] syzkaller0: entered allmulticast mode [ 1181.612715][T21568] tcf_pedit_act: 7 callbacks suppressed [ 1181.612733][T21568] tc action pedit 'at' offset 257 out of bounds [ 1181.624955][T21568] tc action pedit 'at' offset 257 out of bounds [ 1181.631254][T21568] tc action pedit 'at' offset 257 out of bounds [ 1181.637545][T21568] tc action pedit 'at' offset 257 out of bounds [ 1181.643795][T21568] tc action pedit 'at' offset 257 out of bounds [ 1181.650084][T21568] tc action pedit 'at' offset 257 out of bounds [ 1181.656346][T21568] tc action pedit 'at' offset 257 out of bounds [ 1181.662671][T21568] tc action pedit 'at' offset 257 out of bounds [ 1181.668970][T21568] tc action pedit 'at' offset 257 out of bounds [ 1181.675223][T21568] tc action pedit 'at' offset 257 out of bounds [ 1181.681544][T21568] 0: reclassify loop, rule prio 0, protocol 800 [ 1182.031286][T21580] netlink: 'syz.2.19581': attribute type 13 has an invalid length. [ 1182.071044][T21580] netlink: 'syz.2.19581': attribute type 17 has an invalid length. [ 1182.241340][T21580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1182.280567][T21580] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.314705][T21580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1182.655129][T21599] netlink: 'syz.3.19588': attribute type 1 has an invalid length. [ 1182.663730][T21599] netlink: 224 bytes leftover after parsing attributes in process `syz.3.19588'. [ 1182.848302][T21601] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.19589'. [ 1184.447075][T21616] netlink: 'syz.3.19596': attribute type 1 has an invalid length. [ 1184.511215][T21626] gretap1: entered allmulticast mode [ 1184.522181][T21626] bond3: (slave gretap1): making interface the new active one [ 1184.536247][T21626] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1184.613451][T21629] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.19600'. [ 1184.876615][T21638] netlink: 'syz.3.19603': attribute type 1 has an invalid length. [ 1184.885673][T21638] netlink: 224 bytes leftover after parsing attributes in process `syz.3.19603'. [ 1184.924060][T21646] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 1184.973079][T21642] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1185.081242][T21642] bond2 (unregistering): Released all slaves [ 1185.378384][T21662] x_tables: duplicate underflow at hook 2 [ 1185.449159][T21661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19609'. [ 1185.452243][T21662] lo speed is unknown, defaulting to 1000 [ 1185.487688][T21667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19611'. [ 1185.771475][T21676] netlink: 9 bytes leftover after parsing attributes in process `syz.0.19617'. [ 1185.979112][T21662] lo speed is unknown, defaulting to 1000 [ 1185.986644][T21662] lo speed is unknown, defaulting to 1000 [ 1186.178251][T21693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19624'. [ 1186.334206][T21706] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 1186.597763][T21718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19633'. [ 1186.609611][T21718] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1186.665224][T21724] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19634'. [ 1187.266437][T21743] tipc: Enabling of bearer rejected, failed to enable media [ 1187.530785][ T8442] team0: left allmulticast mode [ 1187.535689][ T8442] team_slave_0: left allmulticast mode [ 1187.542125][ T8442] team_slave_1: left allmulticast mode [ 1187.552255][ T8442] team0: left promiscuous mode [ 1187.558069][ T8442] team_slave_0: left promiscuous mode [ 1187.563908][ T8442] team_slave_1: left promiscuous mode [ 1187.570595][ T8442] bridge0: port 3(team0) entered disabled state [ 1187.590411][ T8442] bridge_slave_1: left allmulticast mode [ 1187.596119][ T8442] bridge_slave_1: left promiscuous mode [ 1187.609453][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.898479][ T8442] team0: Port device bridge1 removed [ 1188.122052][ T8442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1188.132408][ T8442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1188.141975][ T8442] bond0 (unregistering): Released all slaves [ 1188.151938][ T8442] bond1 (unregistering): Released all slaves [ 1188.167087][ T8442] bond2 (unregistering): Released all slaves [ 1188.195104][T21771] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 1189.238270][ T8442] hsr_slave_0: left promiscuous mode [ 1189.245259][ T8442] hsr_slave_1: left promiscuous mode [ 1189.252075][ T8442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1189.262652][ T8442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1189.422445][ T8442] team0 (unregistering): Port device team_slave_1 removed [ 1189.436000][ T8442] team0 (unregistering): Port device team_slave_0 removed [ 1189.567188][T21766] Bluetooth: hci2: command 0x0406 tx timeout [ 1192.105875][T21818] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1192.308488][T21849] netlink: 'syz.1.19671': attribute type 1 has an invalid length. [ 1192.316393][T21849] netlink: 224 bytes leftover after parsing attributes in process `syz.1.19671'. [ 1192.321527][T21851] x_tables: ip6_tables: mark.1 match: invalid size 16 (kernel) != (user) 24 [ 1192.360401][T21847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19672'. [ 1192.385192][T21847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19672'. [ 1192.690062][T20313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.706949][T20313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.039435][T21893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19690'. [ 1193.117470][T21897] tipc: Enabled bearer , priority 0 [ 1193.130054][T21897] tipc: Disabling bearer [ 1193.451412][T21916] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19700'. [ 1193.589659][T21925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19704'. [ 1193.679132][T21935] tipc: Can't bind to reserved service type 2 [ 1193.744419][T21939] netlink: 'syz.1.19707': attribute type 13 has an invalid length. [ 1193.768552][T21939] netlink: 'syz.1.19707': attribute type 17 has an invalid length. [ 1193.777098][T31388] lo speed is unknown, defaulting to 1000 [ 1193.839599][T21939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1193.847728][T21939] 8021q: adding VLAN 0 to HW filter on device team0 [ 1193.859389][T21939] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1193.887987][ T7849] lo speed is unknown, defaulting to 1000 [ 1193.894622][T31388] lo speed is unknown, defaulting to 1000 [ 1194.015444][T21949] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19713'. [ 1194.171761][T21959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19714'. [ 1194.266590][T21959] netlink: 'syz.0.19714': attribute type 3 has an invalid length. [ 1194.270243][T21961] netlink: 'syz.2.19717': attribute type 13 has an invalid length. [ 1194.283083][T21961] netlink: 'syz.2.19717': attribute type 17 has an invalid length. [ 1194.287382][T21959] netlink: 'syz.0.19714': attribute type 3 has an invalid length. [ 1194.336522][T21961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1194.346133][T21961] 8021q: adding VLAN 0 to HW filter on device team0 [ 1194.373807][T21961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1194.411643][T21969] syzkaller0: entered promiscuous mode [ 1194.417564][T21969] syzkaller0: entered allmulticast mode [ 1194.483455][T21972] tc action pedit offset must be on 32 bit boundaries [ 1194.630625][T21981] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19725'. [ 1194.693002][T21982] lo speed is unknown, defaulting to 1000 [ 1194.731624][T21987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19724'. [ 1194.768578][T21987] bond3: entered promiscuous mode [ 1194.774424][T21987] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1194.832306][T21987] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1194.848743][T21987] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 1194.883631][T21987] bond3: (slave vti0): Error -95 calling set_mac_address [ 1195.042244][T21982] lo speed is unknown, defaulting to 1000 [ 1195.569989][T22023] netlink: 'syz.0.19738': attribute type 1 has an invalid length. [ 1195.963361][T22036] netlink: 'syz.3.19742': attribute type 13 has an invalid length. [ 1195.979098][T22036] netlink: 'syz.3.19742': attribute type 17 has an invalid length. [ 1196.262801][T22036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1196.271358][T22036] 8021q: adding VLAN 0 to HW filter on device team0 [ 1196.284940][T22036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1196.344188][T20313] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1196.355751][T20313] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1196.370291][T20313] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1196.390505][T20313] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1197.393376][T22092] lo speed is unknown, defaulting to 1000 [ 1197.680468][T22121] validate_nla: 1 callbacks suppressed [ 1197.680487][T22121] netlink: 'syz.3.19765': attribute type 13 has an invalid length. [ 1197.712889][T22092] lo speed is unknown, defaulting to 1000 [ 1197.736990][T22121] netlink: 'syz.3.19765': attribute type 17 has an invalid length. [ 1197.759811][T22128] netlink: 'syz.2.19767': attribute type 1 has an invalid length. [ 1197.779027][T22128] __nla_validate_parse: 13 callbacks suppressed [ 1197.779047][T22128] netlink: 224 bytes leftover after parsing attributes in process `syz.2.19767'. [ 1197.818147][T22121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1197.827065][T22121] 8021q: adding VLAN 0 to HW filter on device team0 [ 1197.890303][T22121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1198.019771][T22136] netlink: 56 bytes leftover after parsing attributes in process `syz.0.19769'. [ 1198.243374][T22154] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19776'. [ 1198.504668][T22161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19778'. [ 1198.804019][T22171] netlink: 'syz.2.19780': attribute type 1 has an invalid length. [ 1198.835499][T22171] netlink: 224 bytes leftover after parsing attributes in process `syz.2.19780'. [ 1199.814369][T21766] Bluetooth: hci5: command 0x0406 tx timeout [ 1199.867600][T22192] erspan0: entered promiscuous mode [ 1199.873654][T22192] macsec1: entered promiscuous mode [ 1199.894264][T22192] erspan0: left promiscuous mode [ 1199.910590][T22194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19787'. [ 1199.954394][T22191] syzkaller0: entered promiscuous mode [ 1199.963497][T22191] syzkaller0: entered allmulticast mode [ 1200.643223][T22235] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.19800'. [ 1200.668683][T22235] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1200.700391][T22233] syzkaller0: entered promiscuous mode [ 1200.709039][T22233] syzkaller0: entered allmulticast mode [ 1200.710657][T22235] netlink: 'syz.0.19800': attribute type 9 has an invalid length. [ 1200.723811][T22235] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.19800'. [ 1202.822223][T22298] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20002 [ 1202.993633][T22311] FAULT_INJECTION: forcing a failure. [ 1202.993633][T22311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1203.007276][T22311] CPU: 1 UID: 0 PID: 22311 Comm: syz.2.19825 Not tainted syzkaller #0 PREEMPT(full) [ 1203.007302][T22311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1203.007314][T22311] Call Trace: [ 1203.007322][T22311] [ 1203.007330][T22311] dump_stack_lvl+0xe8/0x150 [ 1203.007362][T22311] should_fail_ex+0x412/0x560 [ 1203.007393][T22311] _copy_to_user+0x31/0xb0 [ 1203.007416][T22311] simple_read_from_buffer+0xe1/0x170 [ 1203.007446][T22311] proc_fail_nth_read+0x1bb/0x230 [ 1203.007475][T22311] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1203.007503][T22311] ? rw_verify_area+0x2a6/0x4d0 [ 1203.007523][T22311] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1203.007550][T22311] vfs_read+0x20c/0xa70 [ 1203.007569][T22311] ? fdget_pos+0x246/0x320 [ 1203.007591][T22311] ? __pfx___mutex_lock+0x10/0x10 [ 1203.007618][T22311] ? __pfx_vfs_read+0x10/0x10 [ 1203.007640][T22311] ? __fget_files+0x2a/0x420 [ 1203.007661][T22311] ? __fget_files+0x3a0/0x420 [ 1203.007677][T22311] ? __fget_files+0x2a/0x420 [ 1203.007701][T22311] ksys_read+0x150/0x270 [ 1203.007725][T22311] ? __pfx_ksys_read+0x10/0x10 [ 1203.007756][T22311] do_syscall_64+0x14d/0xf80 [ 1203.007774][T22311] ? trace_irq_disable+0x3b/0x150 [ 1203.007790][T22311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.007809][T22311] ? clear_bhb_loop+0x40/0x90 [ 1203.007831][T22311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.007849][T22311] RIP: 0033:0x7f822715d04e [ 1203.007867][T22311] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1203.007884][T22311] RSP: 002b:00007f8228120fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1203.007904][T22311] RAX: ffffffffffffffda RBX: 00007f82281216c0 RCX: 00007f822715d04e [ 1203.007918][T22311] RDX: 000000000000000f RSI: 00007f82281210a0 RDI: 0000000000000003 [ 1203.007937][T22311] RBP: 00007f8228121090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.007948][T22311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1203.007958][T22311] R13: 00007f8227416038 R14: 00007f8227415fa0 R15: 00007fff570d1db8 [ 1203.007989][T22311] [ 1203.528096][T22324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19828'. [ 1203.537460][T22321] lo speed is unknown, defaulting to 1000 [ 1203.632668][T22326] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.19832'. [ 1203.707022][T22315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19828'. [ 1203.910701][T22337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19836'. [ 1203.920954][T22342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19837'. [ 1203.945736][T22342] FAULT_INJECTION: forcing a failure. [ 1203.945736][T22342] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.980470][T22345] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20002 [ 1204.011895][T22321] lo speed is unknown, defaulting to 1000 [ 1204.021275][T22342] CPU: 0 UID: 0 PID: 22342 Comm: syz.1.19837 Not tainted syzkaller #0 PREEMPT(full) [ 1204.021300][T22342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1204.021312][T22342] Call Trace: [ 1204.021320][T22342] [ 1204.021328][T22342] dump_stack_lvl+0xe8/0x150 [ 1204.021359][T22342] should_fail_ex+0x412/0x560 [ 1204.021392][T22342] should_failslab+0xa8/0x100 [ 1204.021418][T22342] __kmalloc_cache_noprof+0x88/0x660 [ 1204.021441][T22342] ? ipcomp_init_state+0x125/0x2a0 [ 1204.021468][T22342] ipcomp_init_state+0x125/0x2a0 [ 1204.021492][T22342] ipcomp4_init_state+0xca/0xb20 [ 1204.021518][T22342] ? __xfrm_init_state+0x842/0x1460 [ 1204.021541][T22342] __xfrm_init_state+0xac9/0x1460 [ 1204.021558][T22342] ? __xfrm_init_state+0x842/0x1460 [ 1204.021580][T22342] xfrm_add_sa+0x3073/0x4230 [ 1204.021621][T22342] ? __pfx_xfrm_add_sa+0x10/0x10 [ 1204.021644][T22342] ? apparmor_capable+0x126/0x170 [ 1204.021672][T22342] ? __nla_parse+0x40/0x60 [ 1204.021696][T22342] xfrm_user_rcv_msg+0x7ae/0xc40 [ 1204.021728][T22342] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1204.021783][T22342] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1204.021814][T22342] ? rcu_is_watching+0x15/0xb0 [ 1204.021845][T22342] ? trace_contention_end+0x3d/0x150 [ 1204.021865][T22342] ? __mutex_lock+0x319/0x1300 [ 1204.021891][T22342] netlink_rcv_skb+0x232/0x4b0 [ 1204.021917][T22342] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1204.021944][T22342] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1204.021981][T22342] ? netlink_deliver_tap+0x2e/0x1b0 [ 1204.022003][T22342] ? netlink_deliver_tap+0x2e/0x1b0 [ 1204.022029][T22342] xfrm_netlink_rcv+0x79/0x90 [ 1204.022055][T22342] netlink_unicast+0x80f/0x9b0 [ 1204.022084][T22342] ? __pfx_netlink_unicast+0x10/0x10 [ 1204.022106][T22342] ? netlink_sendmsg+0x650/0xb40 [ 1204.022127][T22342] ? skb_put+0x11b/0x210 [ 1204.022154][T22342] netlink_sendmsg+0x813/0xb40 [ 1204.022186][T22342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1204.022213][T22342] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1204.022233][T22342] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1204.022258][T22342] ____sys_sendmsg+0x972/0x9f0 [ 1204.022292][T22342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1204.022326][T22342] ? import_iovec+0x73/0xa0 [ 1204.022352][T22342] ___sys_sendmsg+0x2a5/0x360 [ 1204.022382][T22342] ? __pfx____sys_sendmsg+0x10/0x10 [ 1204.022441][T22342] ? __fget_files+0x2a/0x420 [ 1204.022458][T22342] ? __fget_files+0x3a0/0x420 [ 1204.022485][T22342] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1204.022514][T22342] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1204.022547][T22342] ? __pfx_ksys_write+0x10/0x10 [ 1204.022579][T22342] do_syscall_64+0x14d/0xf80 [ 1204.022596][T22342] ? trace_irq_disable+0x3b/0x150 [ 1204.022613][T22342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.022631][T22342] ? clear_bhb_loop+0x40/0x90 [ 1204.022653][T22342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.022671][T22342] RIP: 0033:0x7f8a3439c819 [ 1204.022689][T22342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1204.022705][T22342] RSP: 002b:00007f8a351d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1204.022725][T22342] RAX: ffffffffffffffda RBX: 00007f8a34615fa0 RCX: 00007f8a3439c819 [ 1204.022739][T22342] RDX: 0000000000000844 RSI: 0000200000000040 RDI: 0000000000000009 [ 1204.022751][T22342] RBP: 00007f8a351d9090 R08: 0000000000000000 R09: 0000000000000000 [ 1204.022762][T22342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1204.022773][T22342] R13: 00007f8a34616038 R14: 00007f8a34615fa0 R15: 00007ffe60a1a558 [ 1204.022803][T22342] [ 1204.231448][T22346] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20002 [ 1204.695472][T22364] bridge_slave_0: left allmulticast mode [ 1204.703371][T22364] bridge_slave_0: left promiscuous mode [ 1204.717342][T22364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.738454][T22364] bridge_slave_1: left allmulticast mode [ 1204.745408][T22364] bridge_slave_1: left promiscuous mode [ 1204.751458][T22366] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.19844'. [ 1204.751591][T22364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.783664][T22364] bond0: (slave bond_slave_0): Releasing backup interface [ 1204.793794][T22364] bond0: (slave bond_slave_1): Releasing backup interface [ 1204.804616][T22364] team0: Port device team_slave_0 removed [ 1204.816044][T22364] team0: Port device team_slave_1 removed [ 1204.822574][T22364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1204.831954][T22364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.841716][T22364] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1205.458845][T22396] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.19855'. [ 1205.476373][T22400] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.19857'. [ 1205.600816][T22403] netlink: 'syz.1.19859': attribute type 1 has an invalid length. [ 1205.614937][T22409] FAULT_INJECTION: forcing a failure. [ 1205.614937][T22409] name failslab, interval 1, probability 0, space 0, times 0 [ 1205.630775][T22403] sctp: [Deprecated]: syz.1.19859 (pid 22403) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1205.630775][T22403] Use struct sctp_sack_info instead [ 1205.649178][T22409] CPU: 1 UID: 0 PID: 22409 Comm: syz.4.19860 Not tainted syzkaller #0 PREEMPT(full) [ 1205.649204][T22409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1205.649215][T22409] Call Trace: [ 1205.649223][T22409] [ 1205.649230][T22409] dump_stack_lvl+0xe8/0x150 [ 1205.649259][T22409] should_fail_ex+0x412/0x560 [ 1205.649290][T22409] should_failslab+0xa8/0x100 [ 1205.649315][T22409] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1205.649338][T22409] ? __alloc_skb+0x1d0/0x7d0 [ 1205.649358][T22409] ? __local_bh_enable_ip+0xd0/0x130 [ 1205.649385][T22409] __alloc_skb+0x1d0/0x7d0 [ 1205.649407][T22409] ? netlink_ack_tlv_len+0x6c/0x210 [ 1205.649433][T22409] netlink_ack+0x146/0xa50 [ 1205.649453][T22409] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1205.649470][T22409] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1205.649495][T22409] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1205.649518][T22409] ? __lock_acquire+0x6b5/0x2cf0 [ 1205.649550][T22409] netlink_rcv_skb+0x2b6/0x4b0 [ 1205.649574][T22409] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1205.649594][T22409] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1205.649633][T22409] ? down_read+0x272/0x2e0 [ 1205.649658][T22409] ? genl_rcv+0xd/0x40 [ 1205.649678][T22409] genl_rcv+0x28/0x40 [ 1205.649694][T22409] netlink_unicast+0x80f/0x9b0 [ 1205.649724][T22409] ? __pfx_netlink_unicast+0x10/0x10 [ 1205.649747][T22409] ? netlink_sendmsg+0x650/0xb40 [ 1205.649768][T22409] ? skb_put+0x11b/0x210 [ 1205.649794][T22409] netlink_sendmsg+0x813/0xb40 [ 1205.649826][T22409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1205.649853][T22409] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1205.649873][T22409] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1205.649897][T22409] ____sys_sendmsg+0x972/0x9f0 [ 1205.649931][T22409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1205.649965][T22409] ? import_iovec+0x73/0xa0 [ 1205.649990][T22409] ___sys_sendmsg+0x2a5/0x360 [ 1205.650020][T22409] ? __pfx____sys_sendmsg+0x10/0x10 [ 1205.650079][T22409] ? __fget_files+0x2a/0x420 [ 1205.650096][T22409] ? __fget_files+0x3a0/0x420 [ 1205.650123][T22409] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1205.650151][T22409] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1205.650185][T22409] ? __pfx_ksys_write+0x10/0x10 [ 1205.650217][T22409] do_syscall_64+0x14d/0xf80 [ 1205.650232][T22409] ? trace_irq_disable+0x3b/0x150 [ 1205.650248][T22409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.650266][T22409] ? clear_bhb_loop+0x40/0x90 [ 1205.650287][T22409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.650303][T22409] RIP: 0033:0x7fd17879c819 [ 1205.650321][T22409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1205.650337][T22409] RSP: 002b:00007fd1795b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1205.650357][T22409] RAX: ffffffffffffffda RBX: 00007fd178a15fa0 RCX: 00007fd17879c819 [ 1205.650371][T22409] RDX: 0000000020004000 RSI: 0000200000000e00 RDI: 0000000000000004 [ 1205.650383][T22409] RBP: 00007fd1795b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1205.650395][T22409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1205.650406][T22409] R13: 00007fd178a16038 R14: 00007fd178a15fa0 R15: 00007ffe3e7e8688 [ 1205.650435][T22409] [ 1206.008782][T22415] netlink: 'syz.4.19864': attribute type 8 has an invalid length. [ 1206.017457][T22413] netlink: 'syz.4.19864': attribute type 8 has an invalid length. [ 1206.183641][T22426] vlan2: entered promiscuous mode [ 1206.189385][T22426] vlan2: entered allmulticast mode [ 1206.194839][T22426] geneve1: entered allmulticast mode [ 1206.218236][T22428] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.19869'. [ 1206.397320][T22445] netlink: 'syz.0.19869': attribute type 13 has an invalid length. [ 1206.405620][T22445] netlink: 'syz.0.19869': attribute type 17 has an invalid length. [ 1206.413729][T22445] netlink: 'syz.0.19869': attribute type 27 has an invalid length. [ 1206.563664][T22454] FAULT_INJECTION: forcing a failure. [ 1206.563664][T22454] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.576689][T22454] CPU: 0 UID: 0 PID: 22454 Comm: syz.2.19877 Not tainted syzkaller #0 PREEMPT(full) [ 1206.576713][T22454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1206.576724][T22454] Call Trace: [ 1206.576732][T22454] [ 1206.576740][T22454] dump_stack_lvl+0xe8/0x150 [ 1206.576775][T22454] should_fail_ex+0x412/0x560 [ 1206.576805][T22454] should_failslab+0xa8/0x100 [ 1206.576827][T22454] ? sk_prot_alloc+0x57/0x210 [ 1206.576852][T22454] kmem_cache_alloc_noprof+0x87/0x650 [ 1206.576870][T22454] ? security_inode_alloc+0x39/0x310 [ 1206.576898][T22454] sk_prot_alloc+0x57/0x210 [ 1206.576916][T22454] ? sk_alloc+0x27/0x390 [ 1206.576930][T22454] sk_alloc+0x3a/0x390 [ 1206.576945][T22454] inet6_create+0x7f0/0x1260 [ 1206.576956][T22454] ? inet6_create+0x83/0x1260 [ 1206.576968][T22454] __sock_create+0x4b2/0x9d0 [ 1206.576986][T22454] mptcp_subflow_create_socket+0xfb/0x800 [ 1206.577002][T22454] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1206.577013][T22454] ? tomoyo_check_open_permission+0x38e/0x470 [ 1206.577028][T22454] ? tomoyo_check_open_permission+0x1d3/0x470 [ 1206.577042][T22454] ? aa_label_sk_perm+0x532/0x6e0 [ 1206.577060][T22454] __mptcp_nmpc_sk+0x155/0x790 [ 1206.577072][T22454] ? do_raw_spin_lock+0x12b/0x2f0 [ 1206.577083][T22454] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1206.577095][T22454] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1206.577109][T22454] mptcp_sendmsg_fastopen+0xd4/0x580 [ 1206.577120][T22454] ? __local_bh_enable_ip+0xd0/0x130 [ 1206.577136][T22454] mptcp_sendmsg+0x1961/0x1bf0 [ 1206.577154][T22454] ? aa_sk_perm+0x6d5/0x900 [ 1206.577172][T22454] ? __pfx_aa_sk_perm+0x10/0x10 [ 1206.577186][T22454] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1206.577199][T22454] ? inet6_sendmsg+0x101/0x120 [ 1206.577210][T22454] ____sys_sendmsg+0x5c7/0x9f0 [ 1206.577229][T22454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1206.577258][T22454] ? import_iovec+0x73/0xa0 [ 1206.577281][T22454] ___sys_sendmsg+0x2a5/0x360 [ 1206.577311][T22454] ? __pfx____sys_sendmsg+0x10/0x10 [ 1206.577346][T22454] ? __fget_files+0x2a/0x420 [ 1206.577355][T22454] ? __fget_files+0x3a0/0x420 [ 1206.577369][T22454] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1206.577387][T22454] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1206.577406][T22454] ? __pfx_ksys_write+0x10/0x10 [ 1206.577424][T22454] do_syscall_64+0x14d/0xf80 [ 1206.577434][T22454] ? trace_irq_disable+0x3b/0x150 [ 1206.577443][T22454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.577453][T22454] ? clear_bhb_loop+0x40/0x90 [ 1206.577465][T22454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.577475][T22454] RIP: 0033:0x7f822719c819 [ 1206.577486][T22454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1206.577495][T22454] RSP: 002b:00007f8228121028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1206.577507][T22454] RAX: ffffffffffffffda RBX: 00007f8227415fa0 RCX: 00007f822719c819 [ 1206.577515][T22454] RDX: e07e872420dfefca RSI: 0000200000000780 RDI: 0000000000000003 [ 1206.577521][T22454] RBP: 00007f8228121090 R08: 0000000000000000 R09: 0000000000000000 [ 1206.577528][T22454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1206.577534][T22454] R13: 00007f8227416038 R14: 00007f8227415fa0 R15: 00007fff570d1db8 [ 1206.577549][T22454] [ 1207.337423][T22475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19888'. [ 1207.378497][T22475] syzkaller1: entered promiscuous mode [ 1207.384580][T22475] syzkaller1: entered allmulticast mode [ 1207.402639][T22475] netlink: 'syz.4.19888': attribute type 10 has an invalid length. [ 1207.693844][T22499] netlink: 'syz.3.19898': attribute type 72 has an invalid length. [ 1208.124866][T22522] FAULT_INJECTION: forcing a failure. [ 1208.124866][T22522] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.142169][T22522] CPU: 1 UID: 0 PID: 22522 Comm: syz.4.19904 Not tainted syzkaller #0 PREEMPT(full) [ 1208.142195][T22522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1208.142205][T22522] Call Trace: [ 1208.142214][T22522] [ 1208.142221][T22522] dump_stack_lvl+0xe8/0x150 [ 1208.142249][T22522] should_fail_ex+0x412/0x560 [ 1208.142278][T22522] should_failslab+0xa8/0x100 [ 1208.142303][T22522] __kmalloc_noprof+0xe8/0x760 [ 1208.142324][T22522] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1208.142348][T22522] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1208.142375][T22522] genl_family_rcv_msg_doit+0xd9/0x330 [ 1208.142400][T22522] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1208.142426][T22522] ? apparmor_capable+0x126/0x170 [ 1208.142448][T22522] ? bpf_lsm_capable+0x9/0x20 [ 1208.142481][T22522] ? security_capable+0x7e/0x2c0 [ 1208.142511][T22522] genl_rcv_msg+0x61c/0x7a0 [ 1208.142534][T22522] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1208.142550][T22522] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1208.142573][T22522] ? __pfx_nl80211_set_bss+0x10/0x10 [ 1208.142589][T22522] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1208.142612][T22522] ? __lock_acquire+0x6b5/0x2cf0 [ 1208.142645][T22522] netlink_rcv_skb+0x232/0x4b0 [ 1208.142670][T22522] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1208.142690][T22522] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1208.142729][T22522] ? down_read+0x272/0x2e0 [ 1208.142747][T22522] ? genl_rcv+0xd/0x40 [ 1208.142766][T22522] genl_rcv+0x28/0x40 [ 1208.142783][T22522] netlink_unicast+0x80f/0x9b0 [ 1208.142813][T22522] ? __pfx_netlink_unicast+0x10/0x10 [ 1208.142835][T22522] ? netlink_sendmsg+0x650/0xb40 [ 1208.142857][T22522] ? skb_put+0x11b/0x210 [ 1208.142883][T22522] netlink_sendmsg+0x813/0xb40 [ 1208.142914][T22522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1208.142940][T22522] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1208.142959][T22522] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1208.142983][T22522] ____sys_sendmsg+0x972/0x9f0 [ 1208.143016][T22522] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1208.143049][T22522] ? import_iovec+0x73/0xa0 [ 1208.143073][T22522] ___sys_sendmsg+0x2a5/0x360 [ 1208.143102][T22522] ? __pfx____sys_sendmsg+0x10/0x10 [ 1208.143158][T22522] ? __fget_files+0x2a/0x420 [ 1208.143174][T22522] ? __fget_files+0x3a0/0x420 [ 1208.143200][T22522] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1208.143225][T22522] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1208.143257][T22522] ? __pfx_ksys_write+0x10/0x10 [ 1208.143288][T22522] do_syscall_64+0x14d/0xf80 [ 1208.143305][T22522] ? trace_irq_disable+0x3b/0x150 [ 1208.143320][T22522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.143338][T22522] ? clear_bhb_loop+0x40/0x90 [ 1208.143359][T22522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.143377][T22522] RIP: 0033:0x7fd17879c819 [ 1208.143394][T22522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1208.143409][T22522] RSP: 002b:00007fd1795b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1208.143429][T22522] RAX: ffffffffffffffda RBX: 00007fd178a15fa0 RCX: 00007fd17879c819 [ 1208.143443][T22522] RDX: 0000000000000004 RSI: 0000200000000340 RDI: 0000000000000003 [ 1208.143462][T22522] RBP: 00007fd1795b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1208.143473][T22522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1208.143484][T22522] R13: 00007fd178a16038 R14: 00007fd178a15fa0 R15: 00007ffe3e7e8688 [ 1208.143513][T22522] [ 1208.827020][T22537] netlink: 'syz.0.19911': attribute type 72 has an invalid length. [ 1208.872357][T22544] FAULT_INJECTION: forcing a failure. [ 1208.872357][T22544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1208.903476][T22544] CPU: 0 UID: 0 PID: 22544 Comm: syz.3.19913 Not tainted syzkaller #0 PREEMPT(full) [ 1208.903504][T22544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1208.903515][T22544] Call Trace: [ 1208.903523][T22544] [ 1208.903531][T22544] dump_stack_lvl+0xe8/0x150 [ 1208.903559][T22544] should_fail_ex+0x412/0x560 [ 1208.903591][T22544] _copy_from_user+0x2d/0xb0 [ 1208.903614][T22544] __sys_bpf+0x229/0x950 [ 1208.903635][T22544] ? __pfx___sys_bpf+0x10/0x10 [ 1208.903667][T22544] ? ksys_write+0x242/0x270 [ 1208.903691][T22544] ? __pfx_ksys_write+0x10/0x10 [ 1208.903718][T22544] __x64_sys_bpf+0x7c/0x90 [ 1208.903744][T22544] do_syscall_64+0x14d/0xf80 [ 1208.903762][T22544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.903781][T22544] ? clear_bhb_loop+0x40/0x90 [ 1208.903802][T22544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.903820][T22544] RIP: 0033:0x7fce4a39c819 [ 1208.903839][T22544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1208.903854][T22544] RSP: 002b:00007fce4b1af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1208.903874][T22544] RAX: ffffffffffffffda RBX: 00007fce4a615fa0 RCX: 00007fce4a39c819 [ 1208.903887][T22544] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 1208.903899][T22544] RBP: 00007fce4b1af090 R08: 0000000000000000 R09: 0000000000000000 [ 1208.903911][T22544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1208.903921][T22544] R13: 00007fce4a616038 R14: 00007fce4a615fa0 R15: 00007ffea7118ed8 [ 1208.903951][T22544] [ 1209.341853][T22562] __nla_validate_parse: 2 callbacks suppressed [ 1209.341872][T22562] netlink: 48 bytes leftover after parsing attributes in process `syz.0.19924'. [ 1209.534234][T22575] bond4: option fail_over_mac: invalid value (127) [ 1209.543240][T22575] bond4 (unregistering): Released all slaves [ 1209.596330][T22577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19926'. [ 1209.636948][T22577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19926'. [ 1209.646283][T22577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19926'. [ 1209.664956][T22577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19926'. [ 1209.743234][T22584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19929'. [ 1209.794524][T22586] netlink: 'syz.3.19930': attribute type 28 has an invalid length. [ 1209.818872][T22588] FAULT_INJECTION: forcing a failure. [ 1209.818872][T22588] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.837802][T22588] CPU: 1 UID: 0 PID: 22588 Comm: syz.1.19931 Not tainted syzkaller #0 PREEMPT(full) [ 1209.837827][T22588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1209.837839][T22588] Call Trace: [ 1209.837847][T22588] [ 1209.837856][T22588] dump_stack_lvl+0xe8/0x150 [ 1209.837886][T22588] should_fail_ex+0x412/0x560 [ 1209.837918][T22588] should_failslab+0xa8/0x100 [ 1209.837940][T22588] ? skb_clone+0x212/0x3a0 [ 1209.837957][T22588] kmem_cache_alloc_noprof+0x87/0x650 [ 1209.837985][T22588] skb_clone+0x212/0x3a0 [ 1209.838015][T22588] __netlink_deliver_tap+0x404/0x850 [ 1209.838050][T22588] ? netlink_deliver_tap+0x2e/0x1b0 [ 1209.838073][T22588] netlink_deliver_tap+0x19c/0x1b0 [ 1209.838089][T22588] netlink_sendskb+0x68/0x140 [ 1209.838102][T22588] netlink_unicast+0x3a3/0x9b0 [ 1209.838118][T22588] ? __pfx_netlink_unicast+0x10/0x10 [ 1209.838135][T22588] netlink_rcv_skb+0x2b6/0x4b0 [ 1209.838149][T22588] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1209.838160][T22588] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1209.838182][T22588] ? down_read+0x272/0x2e0 [ 1209.838193][T22588] ? genl_rcv+0xd/0x40 [ 1209.838203][T22588] genl_rcv+0x28/0x40 [ 1209.838212][T22588] netlink_unicast+0x80f/0x9b0 [ 1209.838228][T22588] ? __pfx_netlink_unicast+0x10/0x10 [ 1209.838243][T22588] ? netlink_sendmsg+0x650/0xb40 [ 1209.838256][T22588] ? skb_put+0x11b/0x210 [ 1209.838272][T22588] netlink_sendmsg+0x813/0xb40 [ 1209.838289][T22588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1209.838306][T22588] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1209.838324][T22588] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1209.838347][T22588] ____sys_sendmsg+0x972/0x9f0 [ 1209.838380][T22588] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1209.838413][T22588] ? import_iovec+0x73/0xa0 [ 1209.838431][T22588] ___sys_sendmsg+0x2a5/0x360 [ 1209.838449][T22588] ? __pfx____sys_sendmsg+0x10/0x10 [ 1209.838481][T22588] ? __fget_files+0x2a/0x420 [ 1209.838490][T22588] ? __fget_files+0x3a0/0x420 [ 1209.838505][T22588] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1209.838521][T22588] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1209.838540][T22588] ? __pfx_ksys_write+0x10/0x10 [ 1209.838558][T22588] do_syscall_64+0x14d/0xf80 [ 1209.838567][T22588] ? trace_irq_disable+0x3b/0x150 [ 1209.838577][T22588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.838587][T22588] ? clear_bhb_loop+0x40/0x90 [ 1209.838599][T22588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.838609][T22588] RIP: 0033:0x7f8a3439c819 [ 1209.838620][T22588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1209.838629][T22588] RSP: 002b:00007f8a351d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1209.838641][T22588] RAX: ffffffffffffffda RBX: 00007f8a34615fa0 RCX: 00007f8a3439c819 [ 1209.838649][T22588] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1209.838655][T22588] RBP: 00007f8a351d9090 R08: 0000000000000000 R09: 0000000000000000 [ 1209.838662][T22588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1209.838669][T22588] R13: 00007f8a34616038 R14: 00007f8a34615fa0 R15: 00007ffe60a1a558 [ 1209.838685][T22588] [ 1210.295564][T22603] FAULT_INJECTION: forcing a failure. [ 1210.295564][T22603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1210.322663][T22603] CPU: 0 UID: 0 PID: 22603 Comm: syz.3.19935 Not tainted syzkaller #0 PREEMPT(full) [ 1210.322689][T22603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1210.322700][T22603] Call Trace: [ 1210.322708][T22603] [ 1210.322716][T22603] dump_stack_lvl+0xe8/0x150 [ 1210.322745][T22603] should_fail_ex+0x412/0x560 [ 1210.322776][T22603] _copy_from_iter+0x1d3/0x1670 [ 1210.322798][T22603] ? rcu_is_watching+0x15/0xb0 [ 1210.322827][T22603] ? __pfx__copy_from_iter+0x10/0x10 [ 1210.322852][T22603] ? netlink_sendmsg+0x650/0xb40 [ 1210.322874][T22603] ? skb_put+0x11b/0x210 [ 1210.322899][T22603] netlink_sendmsg+0x6c0/0xb40 [ 1210.322928][T22603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1210.322953][T22603] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1210.322972][T22603] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1210.322995][T22603] ____sys_sendmsg+0x972/0x9f0 [ 1210.323029][T22603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1210.323061][T22603] ? import_iovec+0x73/0xa0 [ 1210.323086][T22603] ___sys_sendmsg+0x2a5/0x360 [ 1210.323116][T22603] ? __pfx____sys_sendmsg+0x10/0x10 [ 1210.323169][T22603] ? __fget_files+0x2a/0x420 [ 1210.323186][T22603] ? __fget_files+0x3a0/0x420 [ 1210.323212][T22603] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1210.323248][T22603] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1210.323281][T22603] ? __pfx_ksys_write+0x10/0x10 [ 1210.323312][T22603] do_syscall_64+0x14d/0xf80 [ 1210.323330][T22603] ? trace_irq_disable+0x3b/0x150 [ 1210.323347][T22603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.323364][T22603] ? clear_bhb_loop+0x40/0x90 [ 1210.323387][T22603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.323405][T22603] RIP: 0033:0x7fce4a39c819 [ 1210.323422][T22603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1210.323438][T22603] RSP: 002b:00007fce4b1af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1210.323457][T22603] RAX: ffffffffffffffda RBX: 00007fce4a615fa0 RCX: 00007fce4a39c819 [ 1210.323470][T22603] RDX: 0000000000008000 RSI: 0000200000000c00 RDI: 0000000000000003 [ 1210.323482][T22603] RBP: 00007fce4b1af090 R08: 0000000000000000 R09: 0000000000000000 [ 1210.323494][T22603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1210.323505][T22603] R13: 00007fce4a616038 R14: 00007fce4a615fa0 R15: 00007ffea7118ed8 [ 1210.323534][T22603] [ 1210.612580][T22608] syzkaller1: entered promiscuous mode [ 1210.618158][T22608] syzkaller1: entered allmulticast mode [ 1210.670028][T22616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19940'. [ 1210.737644][T22622] netlink: 1 bytes leftover after parsing attributes in process `syz.3.19943'. [ 1211.080795][T22642] lo speed is unknown, defaulting to 1000 [ 1211.098381][T22647] validate_nla: 1 callbacks suppressed [ 1211.098402][T22647] netlink: 'syz.0.19952': attribute type 1 has an invalid length. [ 1211.125129][T22647] netlink: 'syz.0.19952': attribute type 3 has an invalid length. [ 1211.139555][T22647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19952'. [ 1211.148807][T22647] netlink: 2 bytes leftover after parsing attributes in process `syz.0.19952'. [ 1211.316163][T22642] lo speed is unknown, defaulting to 1000 [ 1211.621284][T22664] FAULT_INJECTION: forcing a failure. [ 1211.621284][T22664] name failslab, interval 1, probability 0, space 0, times 0 [ 1211.687014][T22664] CPU: 0 UID: 0 PID: 22664 Comm: syz.4.19958 Not tainted syzkaller #0 PREEMPT(full) [ 1211.687031][T22664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1211.687039][T22664] Call Trace: [ 1211.687043][T22664] [ 1211.687049][T22664] dump_stack_lvl+0xe8/0x150 [ 1211.687068][T22664] should_fail_ex+0x412/0x560 [ 1211.687088][T22664] should_failslab+0xa8/0x100 [ 1211.687102][T22664] ? skb_clone+0x212/0x3a0 [ 1211.687112][T22664] kmem_cache_alloc_noprof+0x87/0x650 [ 1211.687134][T22664] skb_clone+0x212/0x3a0 [ 1211.687145][T22664] __netlink_deliver_tap+0x404/0x850 [ 1211.687167][T22664] ? netlink_deliver_tap+0x2e/0x1b0 [ 1211.687181][T22664] netlink_deliver_tap+0x19c/0x1b0 [ 1211.687195][T22664] netlink_sendskb+0x68/0x140 [ 1211.687208][T22664] netlink_unicast+0x3a3/0x9b0 [ 1211.687225][T22664] ? __pfx_netlink_unicast+0x10/0x10 [ 1211.687242][T22664] netlink_rcv_skb+0x2b6/0x4b0 [ 1211.687256][T22664] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1211.687267][T22664] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1211.687289][T22664] ? down_read+0x272/0x2e0 [ 1211.687300][T22664] ? genl_rcv+0xd/0x40 [ 1211.687310][T22664] genl_rcv+0x28/0x40 [ 1211.687319][T22664] netlink_unicast+0x80f/0x9b0 [ 1211.687335][T22664] ? __pfx_netlink_unicast+0x10/0x10 [ 1211.687348][T22664] ? netlink_sendmsg+0x650/0xb40 [ 1211.687361][T22664] ? skb_put+0x11b/0x210 [ 1211.687376][T22664] netlink_sendmsg+0x813/0xb40 [ 1211.687395][T22664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1211.687410][T22664] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1211.687421][T22664] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1211.687435][T22664] ____sys_sendmsg+0x972/0x9f0 [ 1211.687456][T22664] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1211.687475][T22664] ? import_iovec+0x73/0xa0 [ 1211.687489][T22664] ___sys_sendmsg+0x2a5/0x360 [ 1211.687507][T22664] ? __pfx____sys_sendmsg+0x10/0x10 [ 1211.687540][T22664] ? __fget_files+0x2a/0x420 [ 1211.687549][T22664] ? __fget_files+0x3a0/0x420 [ 1211.687564][T22664] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1211.687581][T22664] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1211.687600][T22664] ? __pfx_ksys_write+0x10/0x10 [ 1211.687618][T22664] do_syscall_64+0x14d/0xf80 [ 1211.687628][T22664] ? trace_irq_disable+0x3b/0x150 [ 1211.687638][T22664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.687648][T22664] ? clear_bhb_loop+0x40/0x90 [ 1211.687661][T22664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.687671][T22664] RIP: 0033:0x7fd17879c819 [ 1211.687681][T22664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1211.687690][T22664] RSP: 002b:00007fd1795b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1211.687702][T22664] RAX: ffffffffffffffda RBX: 00007fd178a15fa0 RCX: 00007fd17879c819 [ 1211.687710][T22664] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000003 [ 1211.687720][T22664] RBP: 00007fd1795b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1211.687730][T22664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1211.687741][T22664] R13: 00007fd178a16038 R14: 00007fd178a15fa0 R15: 00007ffe3e7e8688 [ 1211.687770][T22664] [ 1212.334130][T22672] rdma_rxe: rxe_newlink: failed to add wg1 [ 1212.561610][T22686] FAULT_INJECTION: forcing a failure. [ 1212.561610][T22686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1212.615178][T22686] CPU: 1 UID: 0 PID: 22686 Comm: syz.3.19967 Not tainted syzkaller #0 PREEMPT(full) [ 1212.615204][T22686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1212.615216][T22686] Call Trace: [ 1212.615223][T22686] [ 1212.615232][T22686] dump_stack_lvl+0xe8/0x150 [ 1212.615262][T22686] should_fail_ex+0x412/0x560 [ 1212.615294][T22686] _copy_to_user+0x31/0xb0 [ 1212.615317][T22686] simple_read_from_buffer+0xe1/0x170 [ 1212.615348][T22686] proc_fail_nth_read+0x1bb/0x230 [ 1212.615376][T22686] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1212.615409][T22686] ? rw_verify_area+0x2a6/0x4d0 [ 1212.615429][T22686] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1212.615455][T22686] vfs_read+0x20c/0xa70 [ 1212.615474][T22686] ? fdget_pos+0x246/0x320 [ 1212.615497][T22686] ? __pfx___mutex_lock+0x10/0x10 [ 1212.615517][T22686] ? __pfx_vfs_read+0x10/0x10 [ 1212.615539][T22686] ? __fget_files+0x2a/0x420 [ 1212.615561][T22686] ? __fget_files+0x3a0/0x420 [ 1212.615577][T22686] ? __fget_files+0x2a/0x420 [ 1212.615602][T22686] ksys_read+0x150/0x270 [ 1212.615625][T22686] ? __pfx_ksys_read+0x10/0x10 [ 1212.615657][T22686] do_syscall_64+0x14d/0xf80 [ 1212.615676][T22686] ? trace_irq_disable+0x3b/0x150 [ 1212.615692][T22686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.615711][T22686] ? clear_bhb_loop+0x40/0x90 [ 1212.615733][T22686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.615751][T22686] RIP: 0033:0x7fce4a35d04e [ 1212.615769][T22686] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1212.615785][T22686] RSP: 002b:00007fce4b1aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1212.615804][T22686] RAX: ffffffffffffffda RBX: 00007fce4b1af6c0 RCX: 00007fce4a35d04e [ 1212.615818][T22686] RDX: 000000000000000f RSI: 00007fce4b1af0a0 RDI: 0000000000000003 [ 1212.615830][T22686] RBP: 00007fce4b1af090 R08: 0000000000000000 R09: 0000000000000000 [ 1212.615842][T22686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1212.615854][T22686] R13: 00007fce4a616038 R14: 00007fce4a615fa0 R15: 00007ffea7118ed8 [ 1212.615885][T22686] [ 1213.081064][T22694] syzkaller0: entered promiscuous mode [ 1213.092486][T22694] syzkaller0: entered allmulticast mode [ 1213.123968][T22694] FAULT_INJECTION: forcing a failure. [ 1213.123968][T22694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1213.143153][T22694] CPU: 0 UID: 0 PID: 22694 Comm: syz.3.19972 Not tainted syzkaller #0 PREEMPT(full) [ 1213.143179][T22694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1213.143191][T22694] Call Trace: [ 1213.143199][T22694] [ 1213.143207][T22694] dump_stack_lvl+0xe8/0x150 [ 1213.143238][T22694] should_fail_ex+0x412/0x560 [ 1213.143271][T22694] _copy_from_user+0x2d/0xb0 [ 1213.143294][T22694] kstrtouint_from_user+0xd6/0x180 [ 1213.143317][T22694] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1213.143353][T22694] proc_fail_nth_write+0x8e/0x210 [ 1213.143380][T22694] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1213.143411][T22694] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1213.143439][T22694] vfs_write+0x29a/0xb90 [ 1213.143469][T22694] ? __pfx_vfs_write+0x10/0x10 [ 1213.143492][T22694] ? __fget_files+0x2a/0x420 [ 1213.143514][T22694] ? __fget_files+0x3a0/0x420 [ 1213.143531][T22694] ? __fget_files+0x2a/0x420 [ 1213.143557][T22694] ksys_write+0x150/0x270 [ 1213.143581][T22694] ? __pfx_ksys_write+0x10/0x10 [ 1213.143614][T22694] do_syscall_64+0x14d/0xf80 [ 1213.143632][T22694] ? trace_irq_disable+0x3b/0x150 [ 1213.143649][T22694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.143668][T22694] ? clear_bhb_loop+0x40/0x90 [ 1213.143691][T22694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.143709][T22694] RIP: 0033:0x7fce4a35d04e [ 1213.143727][T22694] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1213.143742][T22694] RSP: 002b:00007fce4b1aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1213.143762][T22694] RAX: ffffffffffffffda RBX: 00007fce4b1af6c0 RCX: 00007fce4a35d04e [ 1213.143775][T22694] RDX: 0000000000000001 RSI: 00007fce4b1af0a0 RDI: 0000000000000008 [ 1213.143787][T22694] RBP: 00007fce4b1af090 R08: 0000000000000000 R09: 0000000000000000 [ 1213.143799][T22694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.143810][T22694] R13: 00007fce4a616038 R14: 00007fce4a615fa0 R15: 00007ffea7118ed8 [ 1213.143841][T22694] [ 1213.642861][T22725] unsupported nlmsg_type 40 [ 1213.702105][T22728] FAULT_INJECTION: forcing a failure. [ 1213.702105][T22728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1213.715328][T22728] CPU: 0 UID: 0 PID: 22728 Comm: syz.3.19978 Not tainted syzkaller #0 PREEMPT(full) [ 1213.715344][T22728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1213.715352][T22728] Call Trace: [ 1213.715358][T22728] [ 1213.715364][T22728] dump_stack_lvl+0xe8/0x150 [ 1213.715384][T22728] should_fail_ex+0x412/0x560 [ 1213.715405][T22728] _copy_from_user+0x2d/0xb0 [ 1213.715419][T22728] kstrtouint_from_user+0xd6/0x180 [ 1213.715431][T22728] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1213.715450][T22728] proc_fail_nth_write+0x8e/0x210 [ 1213.715466][T22728] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1213.715484][T22728] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1213.715500][T22728] vfs_write+0x29a/0xb90 [ 1213.715517][T22728] ? __pfx_vfs_write+0x10/0x10 [ 1213.715529][T22728] ? __fget_files+0x2a/0x420 [ 1213.715542][T22728] ? __fget_files+0x3a0/0x420 [ 1213.715551][T22728] ? __fget_files+0x2a/0x420 [ 1213.715564][T22728] ksys_write+0x150/0x270 [ 1213.715577][T22728] ? __pfx_ksys_write+0x10/0x10 [ 1213.715595][T22728] do_syscall_64+0x14d/0xf80 [ 1213.715606][T22728] ? trace_irq_disable+0x3b/0x150 [ 1213.715615][T22728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.715625][T22728] ? clear_bhb_loop+0x40/0x90 [ 1213.715638][T22728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.715649][T22728] RIP: 0033:0x7fce4a35d04e [ 1213.715659][T22728] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1213.715668][T22728] RSP: 002b:00007fce4b18dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1213.715680][T22728] RAX: ffffffffffffffda RBX: 00007fce4b18e6c0 RCX: 00007fce4a35d04e [ 1213.715687][T22728] RDX: 0000000000000001 RSI: 00007fce4b18e0a0 RDI: 0000000000000006 [ 1213.715700][T22728] RBP: 00007fce4b18e090 R08: 0000000000000000 R09: 0000000000000000 [ 1213.715706][T22728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.715712][T22728] R13: 00007fce4a616128 R14: 00007fce4a616090 R15: 00007ffea7118ed8 [ 1213.715730][T22728] [ 1216.055204][T22697] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1216.257051][T22733] __nla_validate_parse: 6 callbacks suppressed [ 1216.257070][T22733] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.19980'. [ 1216.416437][T22745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19985'. [ 1216.445180][T22750] netlink: 'syz.3.19984': attribute type 1 has an invalid length. [ 1216.477270][T22750] netlink: 224 bytes leftover after parsing attributes in process `syz.3.19984'. [ 1216.922944][T22781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19995'. [ 1216.979352][T22784] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.19996'. [ 1217.004436][T22788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19998'. [ 1217.049783][T22788] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19998'. [ 1217.078372][T22792] FAULT_INJECTION: forcing a failure. [ 1217.078372][T22792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1217.099327][T22792] CPU: 1 UID: 0 PID: 22792 Comm: syz.1.19999 Not tainted syzkaller #0 PREEMPT(full) [ 1217.099360][T22792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1217.099371][T22792] Call Trace: [ 1217.099380][T22792] [ 1217.099388][T22792] dump_stack_lvl+0xe8/0x150 [ 1217.099417][T22792] should_fail_ex+0x412/0x560 [ 1217.099449][T22792] _copy_from_user+0x2d/0xb0 [ 1217.099472][T22792] ___sys_sendmsg+0x1c6/0x360 [ 1217.099505][T22792] ? __pfx____sys_sendmsg+0x10/0x10 [ 1217.099559][T22792] ? __fget_files+0x2a/0x420 [ 1217.099576][T22792] ? __fget_files+0x3a0/0x420 [ 1217.099600][T22792] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1217.099629][T22792] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1217.099662][T22792] ? __pfx_ksys_write+0x10/0x10 [ 1217.099694][T22792] do_syscall_64+0x14d/0xf80 [ 1217.099713][T22792] ? trace_irq_disable+0x3b/0x150 [ 1217.099729][T22792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.099748][T22792] ? clear_bhb_loop+0x40/0x90 [ 1217.099770][T22792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.099789][T22792] RIP: 0033:0x7f8a3439c819 [ 1217.099807][T22792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1217.099824][T22792] RSP: 002b:00007f8a351d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1217.099844][T22792] RAX: ffffffffffffffda RBX: 00007f8a34615fa0 RCX: 00007f8a3439c819 [ 1217.099858][T22792] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1217.099870][T22792] RBP: 00007f8a351d9090 R08: 0000000000000000 R09: 0000000000000000 [ 1217.099881][T22792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1217.099892][T22792] R13: 00007f8a34616038 R14: 00007f8a34615fa0 R15: 00007ffe60a1a558 [ 1217.099922][T22792] [ 1217.394160][T22802] netlink: 'syz.4.20000': attribute type 1 has an invalid length. [ 1217.417645][T22802] netlink: 224 bytes leftover after parsing attributes in process `syz.4.20000'. [ 1217.634707][T22816] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20008'. [ 1217.764158][T22827] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 1220.652226][T22821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1221.053123][T22861] netlink: 'syz.3.20016': attribute type 1 has an invalid length. [ 1221.076904][T22861] netlink: 224 bytes leftover after parsing attributes in process `syz.3.20016'. [ 1222.732150][T22880] syzkaller0: entered promiscuous mode [ 1222.745573][T22880] syzkaller0: entered allmulticast mode [ 1226.470624][T22923] netlink: 'syz.2.20034': attribute type 1 has an invalid length. [ 1226.497016][T22923] __nla_validate_parse: 1 callbacks suppressed [ 1226.497034][T22923] netlink: 224 bytes leftover after parsing attributes in process `syz.2.20034'. [ 1226.591960][T18502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1226.617925][T18502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.240734][T22948] lo: entered allmulticast mode [ 1227.260710][T22948] lo: left allmulticast mode [ 1227.705811][T22966] FAULT_INJECTION: forcing a failure. [ 1227.705811][T22966] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.753952][T22966] CPU: 1 UID: 0 PID: 22966 Comm: syz.1.20053 Not tainted syzkaller #0 PREEMPT(full) [ 1227.753979][T22966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1227.753991][T22966] Call Trace: [ 1227.753998][T22966] [ 1227.754007][T22966] dump_stack_lvl+0xe8/0x150 [ 1227.754037][T22966] should_fail_ex+0x412/0x560 [ 1227.754070][T22966] should_failslab+0xa8/0x100 [ 1227.754096][T22966] __kmalloc_cache_noprof+0x88/0x660 [ 1227.754118][T22966] ? nfnetlink_rcv+0xfe1/0x27b0 [ 1227.754145][T22966] nfnetlink_rcv+0xfe1/0x27b0 [ 1227.754200][T22966] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1227.754237][T22966] ? ref_tracker_free+0x693/0x840 [ 1227.754284][T22966] ? __netlink_deliver_tap+0x807/0x850 [ 1227.754307][T22966] ? netlink_deliver_tap+0x2e/0x1b0 [ 1227.754347][T22966] netlink_unicast+0x80f/0x9b0 [ 1227.754376][T22966] ? __pfx_netlink_unicast+0x10/0x10 [ 1227.754400][T22966] ? netlink_sendmsg+0x650/0xb40 [ 1227.754421][T22966] ? skb_put+0x11b/0x210 [ 1227.754450][T22966] netlink_sendmsg+0x813/0xb40 [ 1227.754481][T22966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1227.754507][T22966] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1227.754528][T22966] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1227.754553][T22966] ____sys_sendmsg+0x972/0x9f0 [ 1227.754587][T22966] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1227.754628][T22966] ? import_iovec+0x73/0xa0 [ 1227.754653][T22966] ___sys_sendmsg+0x2a5/0x360 [ 1227.754684][T22966] ? __pfx____sys_sendmsg+0x10/0x10 [ 1227.754744][T22966] ? __fget_files+0x2a/0x420 [ 1227.754761][T22966] ? __fget_files+0x3a0/0x420 [ 1227.754788][T22966] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1227.754815][T22966] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1227.754851][T22966] ? __pfx_ksys_write+0x10/0x10 [ 1227.754883][T22966] do_syscall_64+0x14d/0xf80 [ 1227.754901][T22966] ? trace_irq_disable+0x3b/0x150 [ 1227.754917][T22966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.754939][T22966] ? clear_bhb_loop+0x40/0x90 [ 1227.754962][T22966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.754980][T22966] RIP: 0033:0x7f8a3439c819 [ 1227.754997][T22966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1227.755013][T22966] RSP: 002b:00007f8a351d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1227.755033][T22966] RAX: ffffffffffffffda RBX: 00007f8a34615fa0 RCX: 00007f8a3439c819 [ 1227.755047][T22966] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1227.755059][T22966] RBP: 00007f8a351d9090 R08: 0000000000000000 R09: 0000000000000000 [ 1227.755071][T22966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1227.755082][T22966] R13: 00007f8a34616038 R14: 00007f8a34615fa0 R15: 00007ffe60a1a558 [ 1227.755113][T22966] [ 1228.176220][T22969] netlink: 'syz.0.20054': attribute type 1 has an invalid length. [ 1228.187088][T22969] netlink: 224 bytes leftover after parsing attributes in process `syz.0.20054'. [ 1228.488731][T20313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.496584][T20313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.513973][T22982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20058'. [ 1228.949771][T22997] netlink: 'syz.2.20062': attribute type 1 has an invalid length. [ 1228.962754][T22998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20062'. [ 1229.006335][T23000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20064'. [ 1229.022189][T22997] netlink: 244 bytes leftover after parsing attributes in process `syz.2.20062'. [ 1229.034586][T23000] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20064'. [ 1230.012756][T23022] sit2: entered allmulticast mode [ 1230.097502][T23022] FAULT_INJECTION: forcing a failure. [ 1230.097502][T23022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1230.194477][T23022] CPU: 1 UID: 0 PID: 23022 Comm: syz.2.20070 Not tainted syzkaller #0 PREEMPT(full) [ 1230.194503][T23022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1230.194515][T23022] Call Trace: [ 1230.194523][T23022] [ 1230.194531][T23022] dump_stack_lvl+0xe8/0x150 [ 1230.194562][T23022] should_fail_ex+0x412/0x560 [ 1230.194594][T23022] _copy_from_user+0x2d/0xb0 [ 1230.194617][T23022] __sys_sendto+0x2b0/0x710 [ 1230.194644][T23022] ? __pfx___sys_sendto+0x10/0x10 [ 1230.194666][T23022] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1230.194698][T23022] ? __fget_files+0x3a0/0x420 [ 1230.194725][T23022] ? ksys_write+0x242/0x270 [ 1230.194748][T23022] ? __pfx_ksys_write+0x10/0x10 [ 1230.194773][T23022] __x64_sys_sendto+0xde/0x100 [ 1230.194800][T23022] do_syscall_64+0x14d/0xf80 [ 1230.194817][T23022] ? trace_irq_disable+0x3b/0x150 [ 1230.194834][T23022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.194852][T23022] ? clear_bhb_loop+0x40/0x90 [ 1230.194874][T23022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.194892][T23022] RIP: 0033:0x7f822719c819 [ 1230.194909][T23022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1230.194925][T23022] RSP: 002b:00007f8228121028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1230.194945][T23022] RAX: ffffffffffffffda RBX: 00007f8227415fa0 RCX: 00007f822719c819 [ 1230.194959][T23022] RDX: 0000000000000028 RSI: 0000200000000400 RDI: 0000000000000003 [ 1230.194970][T23022] RBP: 00007f8228121090 R08: 0000200000000200 R09: 0000000000000014 [ 1230.194983][T23022] R10: 0000000000040880 R11: 0000000000000246 R12: 0000000000000001 [ 1230.194994][T23022] R13: 00007f8227416038 R14: 00007f8227415fa0 R15: 00007fff570d1db8 [ 1230.195023][T23022] [ 1230.562427][T23031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20074'. [ 1230.589704][T23031] netlink: 84 bytes leftover after parsing attributes in process `syz.4.20074'. [ 1230.640834][T23039] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 1230.688897][T23031] Bluetooth: MGMT ver 1.23 [ 1230.820827][T23042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20074'. [ 1230.975371][T23045] netlink: 'syz.0.20078': attribute type 32 has an invalid length. [ 1231.174913][T23047] netlink: 'syz.3.20079': attribute type 83 has an invalid length. [ 1231.926010][T23069] netlink: 'syz.2.20088': attribute type 33 has an invalid length. [ 1231.953196][T23072] __nla_validate_parse: 2 callbacks suppressed [ 1231.953216][T23072] netlink: 268 bytes leftover after parsing attributes in process `syz.4.20089'. [ 1232.208658][T23080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20094'. [ 1232.448888][T23082] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20092'. [ 1232.527203][ T5826] Bluetooth: hci3: command tx timeout [ 1232.577505][T23096] FAULT_INJECTION: forcing a failure. [ 1232.577505][T23096] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.650242][T23096] CPU: 1 UID: 0 PID: 23096 Comm: syz.3.20097 Not tainted syzkaller #0 PREEMPT(full) [ 1232.650269][T23096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1232.650281][T23096] Call Trace: [ 1232.650289][T23096] [ 1232.650297][T23096] dump_stack_lvl+0xe8/0x150 [ 1232.650328][T23096] should_fail_ex+0x412/0x560 [ 1232.650359][T23096] should_failslab+0xa8/0x100 [ 1232.650384][T23096] __kvmalloc_node_noprof+0x178/0x8a0 [ 1232.650407][T23096] ? page_pool_create_percpu+0x2dd/0xb80 [ 1232.650427][T23096] ? page_pool_create_percpu+0xaf/0xb80 [ 1232.650450][T23096] page_pool_create_percpu+0x2dd/0xb80 [ 1232.650471][T23096] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1232.650497][T23096] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 1232.650521][T23096] ? arch_stack_walk+0xfb/0x150 [ 1232.650561][T23096] ? __pfx_stack_trace_save+0x10/0x10 [ 1232.650588][T23096] ? stack_depot_save_flags+0x33/0x810 [ 1232.650613][T23096] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1232.650635][T23096] ? bpf_test_init+0x9f/0x150 [ 1232.650655][T23096] ? bpf_prog_test_run_xdp+0x529/0x1160 [ 1232.650676][T23096] ? bpf_prog_test_run+0x2c7/0x340 [ 1232.650693][T23096] ? __sys_bpf+0x643/0x950 [ 1232.650711][T23096] ? __x64_sys_bpf+0x7c/0x90 [ 1232.650776][T23096] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1232.650811][T23096] ? _copy_from_user+0x94/0xb0 [ 1232.650833][T23096] ? bpf_test_init+0x113/0x150 [ 1232.650853][T23096] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1232.650878][T23096] bpf_prog_test_run_xdp+0x81c/0x1160 [ 1232.650910][T23096] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1232.650943][T23096] ? __fget_files+0x2a/0x420 [ 1232.650965][T23096] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1232.650990][T23096] bpf_prog_test_run+0x2c7/0x340 [ 1232.651012][T23096] __sys_bpf+0x643/0x950 [ 1232.651032][T23096] ? __pfx___sys_bpf+0x10/0x10 [ 1232.651064][T23096] ? ksys_write+0x242/0x270 [ 1232.651087][T23096] ? __pfx_ksys_write+0x10/0x10 [ 1232.651114][T23096] __x64_sys_bpf+0x7c/0x90 [ 1232.651136][T23096] do_syscall_64+0x14d/0xf80 [ 1232.651154][T23096] ? trace_irq_disable+0x3b/0x150 [ 1232.651170][T23096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.651188][T23096] ? clear_bhb_loop+0x40/0x90 [ 1232.651210][T23096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.651228][T23096] RIP: 0033:0x7fce4a39c819 [ 1232.651246][T23096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1232.651265][T23096] RSP: 002b:00007fce4b1af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1232.651284][T23096] RAX: ffffffffffffffda RBX: 00007fce4a615fa0 RCX: 00007fce4a39c819 [ 1232.651298][T23096] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 1232.651309][T23096] RBP: 00007fce4b1af090 R08: 0000000000000000 R09: 0000000000000000 [ 1232.651321][T23096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1232.651332][T23096] R13: 00007fce4a616038 R14: 00007fce4a615fa0 R15: 00007ffea7118ed8 [ 1232.651361][T23096] [ 1232.653592][T23096] page_pool_create_percpu() gave up with errno -12 [ 1233.219331][T23111] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 1235.294991][T23084] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1235.869393][T23129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20103'. [ 1235.994396][T23133] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20107'. [ 1236.093518][T23135] lo speed is unknown, defaulting to 1000 [ 1236.148914][T23145] FAULT_INJECTION: forcing a failure. [ 1236.148914][T23145] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.225488][T23145] CPU: 1 UID: 0 PID: 23145 Comm: syz.0.20113 Not tainted syzkaller #0 PREEMPT(full) [ 1236.225515][T23145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1236.225527][T23145] Call Trace: [ 1236.225535][T23145] [ 1236.225543][T23145] dump_stack_lvl+0xe8/0x150 [ 1236.225573][T23145] should_fail_ex+0x412/0x560 [ 1236.225605][T23145] should_failslab+0xa8/0x100 [ 1236.225632][T23145] __kmalloc_cache_noprof+0x88/0x660 [ 1236.225652][T23145] ? __pfx_stack_trace_save+0x10/0x10 [ 1236.225672][T23145] ? rtnl_newlink+0x136/0x1bb0 [ 1236.225699][T23145] rtnl_newlink+0x136/0x1bb0 [ 1236.225722][T23145] ? kasan_save_track+0x3e/0x80 [ 1236.225741][T23145] ? kasan_save_free_info+0x46/0x50 [ 1236.225764][T23145] ? __kasan_slab_free+0x5c/0x80 [ 1236.225784][T23145] ? dev_hard_start_xmit+0x2d8/0x870 [ 1236.225809][T23145] ? __dev_queue_xmit+0x14d9/0x3920 [ 1236.225825][T23145] ? __netlink_deliver_tap+0x5ad/0x850 [ 1236.225847][T23145] ? netlink_deliver_tap+0x19c/0x1b0 [ 1236.225867][T23145] ? netlink_unicast+0x7e3/0x9b0 [ 1236.225894][T23145] ? netlink_sendmsg+0x813/0xb40 [ 1236.225917][T23145] ? __pfx_rtnl_newlink+0x10/0x10 [ 1236.225937][T23145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.225988][T23145] ? kasan_quarantine_put+0xbb/0x1f0 [ 1236.226008][T23145] ? lockdep_hardirqs_on+0x7a/0x110 [ 1236.226030][T23145] ? kmem_cache_free+0x187/0x630 [ 1236.226049][T23145] ? nlmon_xmit+0xb0/0x100 [ 1236.226083][T23145] ? __lock_acquire+0x6b5/0x2cf0 [ 1236.226111][T23145] ? __local_bh_enable_ip+0xd0/0x130 [ 1236.226134][T23145] ? lockdep_hardirqs_on+0x7a/0x110 [ 1236.226150][T23145] ? __dev_queue_xmit+0x2b6/0x3920 [ 1236.226168][T23145] ? __local_bh_enable_ip+0xd0/0x130 [ 1236.226188][T23145] ? __dev_queue_xmit+0x2b6/0x3920 [ 1236.226229][T23145] ? __pfx_rtnl_newlink+0x10/0x10 [ 1236.226250][T23145] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1236.226277][T23145] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1236.226298][T23145] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1236.226319][T23145] ? ref_tracker_free+0x693/0x840 [ 1236.226336][T23145] ? __copy_skb_header+0xa3/0x4a0 [ 1236.226363][T23145] ? __pfx_ref_tracker_free+0x10/0x10 [ 1236.226384][T23145] ? __skb_clone+0x63/0x7a0 [ 1236.226416][T23145] netlink_rcv_skb+0x232/0x4b0 [ 1236.226441][T23145] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1236.226465][T23145] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1236.226498][T23145] ? netlink_deliver_tap+0x2e/0x1b0 [ 1236.226528][T23145] netlink_unicast+0x80f/0x9b0 [ 1236.226557][T23145] ? __pfx_netlink_unicast+0x10/0x10 [ 1236.226580][T23145] ? netlink_sendmsg+0x650/0xb40 [ 1236.226601][T23145] ? skb_put+0x11b/0x210 [ 1236.226628][T23145] netlink_sendmsg+0x813/0xb40 [ 1236.226659][T23145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1236.226686][T23145] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1236.226705][T23145] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1236.226729][T23145] ____sys_sendmsg+0x972/0x9f0 [ 1236.226761][T23145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1236.226789][T23145] ? import_iovec+0x73/0xa0 [ 1236.226813][T23145] ___sys_sendmsg+0x2a5/0x360 [ 1236.226843][T23145] ? __pfx____sys_sendmsg+0x10/0x10 [ 1236.226906][T23145] ? __fget_files+0x2a/0x420 [ 1236.226923][T23145] ? __fget_files+0x3a0/0x420 [ 1236.226948][T23145] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1236.226974][T23145] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1236.227008][T23145] ? __pfx_ksys_write+0x10/0x10 [ 1236.227040][T23145] do_syscall_64+0x14d/0xf80 [ 1236.227057][T23145] ? trace_irq_disable+0x3b/0x150 [ 1236.227073][T23145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.227091][T23145] ? clear_bhb_loop+0x40/0x90 [ 1236.227112][T23145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.227130][T23145] RIP: 0033:0x7fdf8e19c819 [ 1236.227147][T23145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1236.227163][T23145] RSP: 002b:00007fdf8f006028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1236.227184][T23145] RAX: ffffffffffffffda RBX: 00007fdf8e415fa0 RCX: 00007fdf8e19c819 [ 1236.227198][T23145] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000005 [ 1236.227210][T23145] RBP: 00007fdf8f006090 R08: 0000000000000000 R09: 0000000000000000 [ 1236.227221][T23145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1236.227233][T23145] R13: 00007fdf8e416038 R14: 00007fdf8e415fa0 R15: 00007ffde667a788 [ 1236.227262][T23145] [ 1236.874488][T23135] lo speed is unknown, defaulting to 1000 [ 1237.111854][T23142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1237.464900][T23160] FAULT_INJECTION: forcing a failure. [ 1237.464900][T23160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1237.482888][T23162] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 1237.501471][T23160] CPU: 1 UID: 0 PID: 23160 Comm: syz.1.20116 Not tainted syzkaller #0 PREEMPT(full) [ 1237.501498][T23160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1237.501510][T23160] Call Trace: [ 1237.501518][T23160] [ 1237.501527][T23160] dump_stack_lvl+0xe8/0x150 [ 1237.501562][T23160] should_fail_ex+0x412/0x560 [ 1237.501594][T23160] _copy_to_user+0x31/0xb0 [ 1237.501619][T23160] simple_read_from_buffer+0xe1/0x170 [ 1237.501649][T23160] proc_fail_nth_read+0x1bb/0x230 [ 1237.501678][T23160] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1237.501706][T23160] ? rw_verify_area+0x2a6/0x4d0 [ 1237.501725][T23160] ? __fget_files+0x2a/0x420 [ 1237.501740][T23160] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1237.501766][T23160] vfs_read+0x20c/0xa70 [ 1237.501789][T23160] ? fdget_pos+0x246/0x320 [ 1237.501810][T23160] ? __pfx___mutex_lock+0x10/0x10 [ 1237.501829][T23160] ? __pfx_vfs_read+0x10/0x10 [ 1237.501851][T23160] ? __fget_files+0x2a/0x420 [ 1237.501872][T23160] ? __fget_files+0x3a0/0x420 [ 1237.501888][T23160] ? __fget_files+0x2a/0x420 [ 1237.501914][T23160] ksys_read+0x150/0x270 [ 1237.501936][T23160] ? __pfx_ksys_read+0x10/0x10 [ 1237.501968][T23160] do_syscall_64+0x14d/0xf80 [ 1237.501985][T23160] ? trace_irq_disable+0x3b/0x150 [ 1237.502002][T23160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.502021][T23160] ? clear_bhb_loop+0x40/0x90 [ 1237.502043][T23160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.502061][T23160] RIP: 0033:0x7f8a3435d04e [ 1237.502079][T23160] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1237.502095][T23160] RSP: 002b:00007f8a351d8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1237.502115][T23160] RAX: ffffffffffffffda RBX: 00007f8a351d96c0 RCX: 00007f8a3435d04e [ 1237.502128][T23160] RDX: 000000000000000f RSI: 00007f8a351d90a0 RDI: 0000000000000006 [ 1237.502140][T23160] RBP: 00007f8a351d9090 R08: 0000000000000000 R09: 0000000000000000 [ 1237.502151][T23160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1237.502162][T23160] R13: 00007f8a34616038 R14: 00007f8a34615fa0 R15: 00007ffe60a1a558 [ 1237.502192][T23160] [ 1237.888034][T23135] lo speed is unknown, defaulting to 1000 [ 1238.229472][T23171] FAULT_INJECTION: forcing a failure. [ 1238.229472][T23171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1238.317096][T23171] CPU: 1 UID: 0 PID: 23171 Comm: syz.0.20118 Not tainted syzkaller #0 PREEMPT(full) [ 1238.317123][T23171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1238.317135][T23171] Call Trace: [ 1238.317143][T23171] [ 1238.317152][T23171] dump_stack_lvl+0xe8/0x150 [ 1238.317182][T23171] should_fail_ex+0x412/0x560 [ 1238.317214][T23171] _copy_to_user+0x31/0xb0 [ 1238.317239][T23171] bpf_test_finish+0x1db/0x6b0 [ 1238.317271][T23171] ? __pfx_bpf_test_finish+0x10/0x10 [ 1238.317295][T23171] ? eth_type_trans+0x348/0x7e0 [ 1238.317330][T23171] bpf_prog_test_run_skb+0x1105/0x21f0 [ 1238.317370][T23171] ? __fget_files+0x2a/0x420 [ 1238.317386][T23171] ? __fget_files+0x3a0/0x420 [ 1238.317402][T23171] ? __fget_files+0x2a/0x420 [ 1238.317424][T23171] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1238.317447][T23171] bpf_prog_test_run+0x2c7/0x340 [ 1238.317471][T23171] __sys_bpf+0x643/0x950 [ 1238.317491][T23171] ? __pfx___sys_bpf+0x10/0x10 [ 1238.317524][T23171] ? ksys_write+0x242/0x270 [ 1238.317547][T23171] ? __pfx_ksys_write+0x10/0x10 [ 1238.317575][T23171] __x64_sys_bpf+0x7c/0x90 [ 1238.317599][T23171] do_syscall_64+0x14d/0xf80 [ 1238.317624][T23171] ? trace_irq_disable+0x3b/0x150 [ 1238.317641][T23171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.317660][T23171] ? clear_bhb_loop+0x40/0x90 [ 1238.317683][T23171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.317701][T23171] RIP: 0033:0x7fdf8e19c819 [ 1238.317719][T23171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1238.317735][T23171] RSP: 002b:00007fdf8f006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1238.317755][T23171] RAX: ffffffffffffffda RBX: 00007fdf8e415fa0 RCX: 00007fdf8e19c819 [ 1238.317769][T23171] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 000000000000000a [ 1238.317781][T23171] RBP: 00007fdf8f006090 R08: 0000000000000000 R09: 0000000000000000 [ 1238.317793][T23171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1238.317804][T23171] R13: 00007fdf8e416038 R14: 00007fdf8e415fa0 R15: 00007ffde667a788 [ 1238.317834][T23171] [ 1238.733186][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.747662][T23135] lo speed is unknown, defaulting to 1000 [ 1239.422795][T23178] FAULT_INJECTION: forcing a failure. [ 1239.422795][T23178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1239.531419][T23178] CPU: 1 UID: 0 PID: 23178 Comm: syz.0.20120 Not tainted syzkaller #0 PREEMPT(full) [ 1239.531445][T23178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1239.531456][T23178] Call Trace: [ 1239.531464][T23178] [ 1239.531472][T23178] dump_stack_lvl+0xe8/0x150 [ 1239.531501][T23178] should_fail_ex+0x412/0x560 [ 1239.531533][T23178] _copy_to_user+0x31/0xb0 [ 1239.531557][T23178] simple_read_from_buffer+0xe1/0x170 [ 1239.531586][T23178] proc_fail_nth_read+0x1bb/0x230 [ 1239.531620][T23178] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1239.531648][T23178] ? rw_verify_area+0x2a6/0x4d0 [ 1239.531674][T23178] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1239.531700][T23178] vfs_read+0x20c/0xa70 [ 1239.531719][T23178] ? fdget_pos+0x246/0x320 [ 1239.531741][T23178] ? __pfx___mutex_lock+0x10/0x10 [ 1239.531761][T23178] ? __pfx_vfs_read+0x10/0x10 [ 1239.531783][T23178] ? __fget_files+0x2a/0x420 [ 1239.531804][T23178] ? __fget_files+0x3a0/0x420 [ 1239.531819][T23178] ? __fget_files+0x2a/0x420 [ 1239.531846][T23178] ksys_read+0x150/0x270 [ 1239.531868][T23178] ? __pfx_ksys_read+0x10/0x10 [ 1239.531900][T23178] do_syscall_64+0x14d/0xf80 [ 1239.531918][T23178] ? trace_irq_disable+0x3b/0x150 [ 1239.531935][T23178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.531954][T23178] ? clear_bhb_loop+0x40/0x90 [ 1239.531976][T23178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.531994][T23178] RIP: 0033:0x7fdf8e15d04e [ 1239.532012][T23178] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1239.532027][T23178] RSP: 002b:00007fdf8efe4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1239.532047][T23178] RAX: ffffffffffffffda RBX: 00007fdf8efe56c0 RCX: 00007fdf8e15d04e [ 1239.532060][T23178] RDX: 000000000000000f RSI: 00007fdf8efe50a0 RDI: 0000000000000005 [ 1239.532072][T23178] RBP: 00007fdf8efe5090 R08: 0000000000000000 R09: 0000000000000000 [ 1239.532083][T23178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1239.532094][T23178] R13: 00007fdf8e416128 R14: 00007fdf8e416090 R15: 00007ffde667a788 [ 1239.532124][T23178] [ 1240.026978][T23141] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1240.486481][T23183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20122'. [ 1240.506711][T23184] netlink: 'syz.0.20123': attribute type 1 has an invalid length. [ 1240.771800][T23187] gretap2: entered allmulticast mode [ 1240.801466][T23187] bond2: (slave gretap2): making interface the new active one [ 1240.819537][T23187] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 1240.899598][T23199] xt_hashlimit: size too large, truncated to 1048576 [ 1241.422700][T23208] erspan0: entered promiscuous mode [ 1241.428647][T23208] macsec1: entered promiscuous mode [ 1241.451808][T23208] erspan0: left promiscuous mode [ 1241.670698][T23217] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20130'. [ 1242.287388][T23232] FAULT_INJECTION: forcing a failure. [ 1242.287388][T23232] name failslab, interval 1, probability 0, space 0, times 0 [ 1242.334478][T23232] CPU: 1 UID: 0 PID: 23232 Comm: syz.0.20134 Not tainted syzkaller #0 PREEMPT(full) [ 1242.334509][T23232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1242.334521][T23232] Call Trace: [ 1242.334529][T23232] [ 1242.334538][T23232] dump_stack_lvl+0xe8/0x150 [ 1242.334569][T23232] should_fail_ex+0x412/0x560 [ 1242.334603][T23232] should_failslab+0xa8/0x100 [ 1242.334628][T23232] __kmalloc_noprof+0xe8/0x760 [ 1242.334651][T23232] ? nf_tables_newrule+0x152c/0x28b0 [ 1242.334670][T23232] ? nla_strcmp+0x106/0x140 [ 1242.334693][T23232] nf_tables_newrule+0x152c/0x28b0 [ 1242.334727][T23232] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1242.334748][T23232] ? nfnl_pernet+0x23/0x240 [ 1242.334779][T23232] ? __nla_parse+0x40/0x60 [ 1242.334804][T23232] nfnetlink_rcv+0x1240/0x27b0 [ 1242.334858][T23232] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1242.334896][T23232] ? ref_tracker_free+0x693/0x840 [ 1242.334942][T23232] ? __netlink_deliver_tap+0x807/0x850 [ 1242.334966][T23232] ? netlink_deliver_tap+0x2e/0x1b0 [ 1242.335013][T23232] netlink_unicast+0x80f/0x9b0 [ 1242.335043][T23232] ? __pfx_netlink_unicast+0x10/0x10 [ 1242.335067][T23232] ? netlink_sendmsg+0x650/0xb40 [ 1242.335088][T23232] ? skb_put+0x11b/0x210 [ 1242.335116][T23232] netlink_sendmsg+0x813/0xb40 [ 1242.335148][T23232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1242.335175][T23232] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1242.335195][T23232] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1242.335219][T23232] ____sys_sendmsg+0x972/0x9f0 [ 1242.335254][T23232] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1242.335288][T23232] ? import_iovec+0x73/0xa0 [ 1242.335313][T23232] ___sys_sendmsg+0x2a5/0x360 [ 1242.335344][T23232] ? __pfx____sys_sendmsg+0x10/0x10 [ 1242.335403][T23232] ? __fget_files+0x2a/0x420 [ 1242.335420][T23232] ? __fget_files+0x3a0/0x420 [ 1242.335447][T23232] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1242.335476][T23232] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1242.335510][T23232] ? __pfx_ksys_write+0x10/0x10 [ 1242.335543][T23232] do_syscall_64+0x14d/0xf80 [ 1242.335561][T23232] ? trace_irq_disable+0x3b/0x150 [ 1242.335577][T23232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.335595][T23232] ? clear_bhb_loop+0x40/0x90 [ 1242.335618][T23232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.335635][T23232] RIP: 0033:0x7fdf8e19c819 [ 1242.335653][T23232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1242.335669][T23232] RSP: 002b:00007fdf8f006028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1242.335688][T23232] RAX: ffffffffffffffda RBX: 00007fdf8e415fa0 RCX: 00007fdf8e19c819 [ 1242.335701][T23232] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1242.335713][T23232] RBP: 00007fdf8f006090 R08: 0000000000000000 R09: 0000000000000000 [ 1242.335724][T23232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1242.335735][T23232] R13: 00007fdf8e416038 R14: 00007fdf8e415fa0 R15: 00007ffde667a788 [ 1242.335766][T23232] [ 1242.777469][T23238] nbd: socks must be embedded in a SOCK_ITEM attr [ 1243.964095][T23282] netlink: 56 bytes leftover after parsing attributes in process `syz.3.20148'. [ 1244.221937][T23288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20151'. [ 1244.316472][T23292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.093039][T23316] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 1245.147770][T23308] netlink: 56 bytes leftover after parsing attributes in process `syz.0.20157'. [ 1248.018881][T23312] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1248.379279][T23341] netlink: 'syz.2.20166': attribute type 1 has an invalid length. [ 1248.403368][T23341] netlink: 224 bytes leftover after parsing attributes in process `syz.2.20166'. [ 1249.571919][T23374] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.20176'. [ 1249.813853][T23381] lo speed is unknown, defaulting to 1000 [ 1249.891803][T23377] FAULT_INJECTION: forcing a failure. [ 1249.891803][T23377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1249.943217][T23377] CPU: 1 UID: 0 PID: 23377 Comm: syz.0.20177 Not tainted syzkaller #0 PREEMPT(full) [ 1249.943244][T23377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1249.943257][T23377] Call Trace: [ 1249.943265][T23377] [ 1249.943273][T23377] dump_stack_lvl+0xe8/0x150 [ 1249.943312][T23377] should_fail_ex+0x412/0x560 [ 1249.943344][T23377] _copy_to_user+0x31/0xb0 [ 1249.943369][T23377] bpf_test_finish+0x1db/0x6b0 [ 1249.943401][T23377] ? __pfx_bpf_test_finish+0x10/0x10 [ 1249.943426][T23377] ? eth_type_trans+0x348/0x7e0 [ 1249.943461][T23377] bpf_prog_test_run_skb+0x1105/0x21f0 [ 1249.943503][T23377] ? __fget_files+0x2a/0x420 [ 1249.943519][T23377] ? __fget_files+0x3a0/0x420 [ 1249.943535][T23377] ? __fget_files+0x2a/0x420 [ 1249.943556][T23377] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1249.943578][T23377] bpf_prog_test_run+0x2c7/0x340 [ 1249.943602][T23377] __sys_bpf+0x643/0x950 [ 1249.943622][T23377] ? __pfx___sys_bpf+0x10/0x10 [ 1249.943655][T23377] ? ksys_write+0x242/0x270 [ 1249.943678][T23377] ? __pfx_ksys_write+0x10/0x10 [ 1249.943706][T23377] __x64_sys_bpf+0x7c/0x90 [ 1249.943731][T23377] do_syscall_64+0x14d/0xf80 [ 1249.943749][T23377] ? trace_irq_disable+0x3b/0x150 [ 1249.943765][T23377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.943783][T23377] ? clear_bhb_loop+0x40/0x90 [ 1249.943805][T23377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.943822][T23377] RIP: 0033:0x7fdf8e19c819 [ 1249.943840][T23377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1249.943855][T23377] RSP: 002b:00007fdf8f006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1249.943876][T23377] RAX: ffffffffffffffda RBX: 00007fdf8e415fa0 RCX: 00007fdf8e19c819 [ 1249.943889][T23377] RDX: 0000000000000050 RSI: 0000200000001200 RDI: 000000000000000a [ 1249.943901][T23377] RBP: 00007fdf8f006090 R08: 0000000000000000 R09: 0000000000000000 [ 1249.943912][T23377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1249.943921][T23377] R13: 00007fdf8e416038 R14: 00007fdf8e415fa0 R15: 00007ffde667a788 [ 1249.943944][T23377] [ 1250.354277][T23381] lo speed is unknown, defaulting to 1000 [ 1250.905973][T23397] xt_hashlimit: size too large, truncated to 1048576 [ 1251.889906][T23423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20192'. [ 1251.972142][T31388] hid-generic 0005:9C3F:0006.0006: item fetching failed at offset 0/1 [ 1252.006648][T31388] hid-generic 0005:9C3F:0006.0006: probe with driver hid-generic failed with error -22 [ 1252.105761][T23429] sock: sock_timestamping_bind_phc: sock not bind to device [ 1254.012319][T23459] bond4: invalid ARP target 0.0.0.0 specified for addition [ 1254.042751][T23459] bond4: option arp_ip_target: invalid value (0) [ 1254.193031][T23459] bond4 (unregistering): Released all slaves [ 1255.038553][T23498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20214'. [ 1255.058673][T23498] nbd: socks must be embedded in a SOCK_ITEM attr [ 1255.084720][T23498] FAULT_INJECTION: forcing a failure. [ 1255.084720][T23498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1255.132380][T23498] CPU: 1 UID: 0 PID: 23498 Comm: syz.4.20214 Not tainted syzkaller #0 PREEMPT(full) [ 1255.132407][T23498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1255.132418][T23498] Call Trace: [ 1255.132426][T23498] [ 1255.132435][T23498] dump_stack_lvl+0xe8/0x150 [ 1255.132465][T23498] should_fail_ex+0x412/0x560 [ 1255.132498][T23498] _copy_from_user+0x2d/0xb0 [ 1255.132521][T23498] kstrtouint_from_user+0xd6/0x180 [ 1255.132543][T23498] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1255.132577][T23498] proc_fail_nth_write+0x8e/0x210 [ 1255.132603][T23498] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1255.132634][T23498] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1255.132661][T23498] vfs_write+0x29a/0xb90 [ 1255.132690][T23498] ? __pfx_vfs_write+0x10/0x10 [ 1255.132713][T23498] ? __fget_files+0x2a/0x420 [ 1255.132734][T23498] ? __fget_files+0x3a0/0x420 [ 1255.132750][T23498] ? __fget_files+0x2a/0x420 [ 1255.132776][T23498] ksys_write+0x150/0x270 [ 1255.132799][T23498] ? __pfx_ksys_write+0x10/0x10 [ 1255.132838][T23498] do_syscall_64+0x14d/0xf80 [ 1255.132856][T23498] ? trace_irq_disable+0x3b/0x150 [ 1255.132872][T23498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.132891][T23498] ? clear_bhb_loop+0x40/0x90 [ 1255.132913][T23498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.132931][T23498] RIP: 0033:0x7fd17875d04e [ 1255.132949][T23498] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1255.132965][T23498] RSP: 002b:00007fd1795b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1255.132991][T23498] RAX: ffffffffffffffda RBX: 00007fd1795b46c0 RCX: 00007fd17875d04e [ 1255.133005][T23498] RDX: 0000000000000001 RSI: 00007fd1795b40a0 RDI: 0000000000000004 [ 1255.133017][T23498] RBP: 00007fd1795b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1255.133028][T23498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1255.133038][T23498] R13: 00007fd178a16038 R14: 00007fd178a15fa0 R15: 00007ffe3e7e8688 [ 1255.133068][T23498] [ 1255.467149][T23484] syzkaller0: entered promiscuous mode [ 1255.472657][T23484] syzkaller0: entered allmulticast mode [ 1259.187375][T23531] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.20222'. [ 1259.747533][T23555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20231'. [ 1259.783074][T23555] netlink: 'syz.1.20231': attribute type 1 has an invalid length. [ 1259.802027][T23555] netlink: 224 bytes leftover after parsing attributes in process `syz.1.20231'. [ 1260.631305][T23589] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20236'. [ 1260.668799][T23587] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.20237'. [ 1261.561907][T23589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1261.577899][T23618] netlink: 'syz.3.20246': attribute type 1 has an invalid length. [ 1261.587943][T23618] netlink: 'syz.3.20246': attribute type 21 has an invalid length. [ 1261.620823][T23618] netlink: 132 bytes leftover after parsing attributes in process `syz.3.20246'. [ 1261.656290][T23618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20246'. [ 1261.694929][T23619] netlink: 72 bytes leftover after parsing attributes in process `syz.3.20246'. [ 1261.725487][T23619] netlink: 72 bytes leftover after parsing attributes in process `syz.3.20246'. [ 1261.857626][T23626] netlink: 'syz.0.20250': attribute type 1 has an invalid length. [ 1261.892883][T23626] netlink: 224 bytes leftover after parsing attributes in process `syz.0.20250'. [ 1261.934131][T23629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20251'. [ 1271.433186][ C1] sched: DL replenish lagged too much [ 1273.591564][T23645] netlink: 64 bytes leftover after parsing attributes in process `syz.1.20255'. [ 1281.022945][T23648] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 1291.155405][T23660] netlink: 40 bytes leftover after parsing attributes in process `syz.0.20259'. [ 1300.662489][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.086436][ T5826] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1308.732332][T21766] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1308.842617][T21766] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1309.103887][T11712] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1310.633263][T11712] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1311.465687][T23664] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1311.519699][T23671] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1312.338423][T21766] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1312.441700][T21766] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1312.734840][T21766] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1313.106098][T21766] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1314.132740][T23671] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1314.468416][T23666] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1314.568617][T23671] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1314.608138][T23671] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1316.102227][T23671] Bluetooth: hci7: command tx timeout [ 1317.109926][T23671] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1317.403926][T23671] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1318.334492][T21766] Bluetooth: hci7: command tx timeout [ 1320.404733][ T5826] Bluetooth: hci7: command tx timeout [ 1321.125499][T11712] Bluetooth: hci0: command tx timeout [ 1321.800947][T23679] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1322.489379][T23679] Bluetooth: hci7: command tx timeout [ 1322.817308][T23679] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1323.452934][T23679] Bluetooth: hci0: command tx timeout [ 1324.141662][T23679] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1325.309997][T23679] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1325.404192][T23679] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1325.555512][T23671] Bluetooth: hci0: command tx timeout [ 1327.741625][T23671] Bluetooth: hci0: command tx timeout [ 1328.745983][T23671] Bluetooth: hci8: command tx timeout [ 1330.925242][T23671] Bluetooth: hci8: command tx timeout [ 1333.117968][T23671] Bluetooth: hci8: command tx timeout [ 1335.509710][T23671] Bluetooth: hci8: command tx timeout [ 1361.721631][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.568252][T11712] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1367.622526][T11712] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1367.969681][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1368.019329][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1368.118996][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1368.163834][T11712] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1368.908831][T11712] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1368.968028][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1368.992686][T11712] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1369.039686][T11712] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1370.091873][T11712] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1370.781150][T11712] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1371.328358][T23679] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1371.482677][T23679] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1371.498299][T23679] Bluetooth: hci1: command tx timeout [ 1371.579859][T23671] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1375.138548][T23671] Bluetooth: hci1: command tx timeout [ 1375.144007][T23671] Bluetooth: hci3: command tx timeout [ 1375.174205][T23671] Bluetooth: hci2: command tx timeout [ 1377.320620][T23679] Bluetooth: hci2: command tx timeout [ 1377.326062][T23679] Bluetooth: hci3: command tx timeout [ 1377.357058][T23679] Bluetooth: hci1: command tx timeout [ 1379.497329][T23671] Bluetooth: hci1: command tx timeout [ 1379.502767][T23671] Bluetooth: hci3: command tx timeout [ 1379.531718][T23671] Bluetooth: hci2: command tx timeout [ 1381.622469][T23679] Bluetooth: hci2: command tx timeout [ 1381.638012][T23679] Bluetooth: hci3: command tx timeout [ 1383.046239][T23679] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1383.443529][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1383.464215][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1383.521426][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1383.762091][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1383.810380][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1383.838604][T11712] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1383.993358][T11712] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1384.286509][T23671] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1385.944504][T11712] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1388.043252][T23679] Bluetooth: hci4: command tx timeout [ 1390.672303][T23671] Bluetooth: hci4: command tx timeout [ 1390.693901][T23671] Bluetooth: hci5: command tx timeout [ 1393.838091][T23679] Bluetooth: hci5: command tx timeout [ 1393.843527][T23679] Bluetooth: hci4: command tx timeout [ 1396.224104][T23679] Bluetooth: hci4: command tx timeout [ 1396.238001][T23679] Bluetooth: hci5: command tx timeout [ 1398.342424][T23679] Bluetooth: hci5: command tx timeout [ 1420.475816][T23671] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1421.342806][T23671] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1421.412549][T23671] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1421.529089][T23671] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1421.962065][T23671] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1423.097987][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.258396][T11712] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1423.517640][T11712] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1423.570574][T11712] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1423.662826][T11712] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1424.039530][T11712] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1426.152719][T23679] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1426.223426][T23679] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1426.550043][T23679] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1426.572270][T23679] Bluetooth: hci6: command tx timeout [ 1426.593594][T11712] Bluetooth: hci0: command tx timeout [ 1427.409063][ T5826] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1427.721948][ T5826] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1428.227825][T23679] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1428.286932][T23679] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1428.310577][T23679] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1428.711866][T23679] Bluetooth: hci6: command tx timeout [ 1428.727638][T23679] Bluetooth: hci0: command tx timeout [ 1428.745222][T23679] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1428.862538][T23679] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1430.216016][T23671] Bluetooth: hci9: command tx timeout [ 1431.085559][T23679] Bluetooth: hci0: command tx timeout [ 1431.099063][T23679] Bluetooth: hci6: command tx timeout [ 1431.263969][T23671] Bluetooth: hci8: command tx timeout [ 1432.365862][T23671] Bluetooth: hci9: command tx timeout [ 1433.183726][T23671] Bluetooth: hci6: command tx timeout [ 1433.200023][T23671] Bluetooth: hci0: command tx timeout [ 1433.389839][T23679] Bluetooth: hci8: command tx timeout [ 1434.475488][T23679] Bluetooth: hci9: command tx timeout [ 1435.496246][T23679] Bluetooth: hci8: command tx timeout [ 1436.589777][T23679] Bluetooth: hci9: command tx timeout [ 1437.574868][T23679] Bluetooth: hci8: command tx timeout [ 1440.761311][T11712] Bluetooth: hci7: command 0x0406 tx timeout [ 1440.788631][T11712] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1441.142915][T11712] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1441.182283][T11712] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1441.295957][T11712] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1441.593942][T11712] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1444.884125][T23671] Bluetooth: hci10: command tx timeout [ 1447.415655][T23679] Bluetooth: hci10: command tx timeout [ 1448.679960][T16931] bond0: (slave syz_tun): Releasing backup interface [ 1449.520190][T23679] Bluetooth: hci10: command tx timeout [ 1451.578056][T23679] Bluetooth: hci10: command tx timeout [ 1459.664744][T20313] bridge_slave_1: left allmulticast mode [ 1459.687549][T20313] bridge_slave_1: left promiscuous mode [ 1460.140232][T20313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.093064][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1529.953341][T23671] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1530.188514][T23671] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1531.102933][T23671] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1532.497967][T23671] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1532.548247][T23671] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1535.891954][T23671] Bluetooth: hci1: command tx timeout [ 1537.977659][T23671] Bluetooth: hci1: command tx timeout [ 1539.983448][T23679] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1540.025206][T23679] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1540.055142][T11712] Bluetooth: hci1: command tx timeout [ 1540.318094][T23679] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1540.506799][T11712] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1540.565111][T11712] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1540.864190][T11712] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1540.918636][T11712] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1540.971655][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1541.396992][T11712] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1541.452060][T11712] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1541.884418][T23679] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1542.264426][T23679] Bluetooth: hci1: command tx timeout [ 1542.283311][T23679] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1542.342827][T23679] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1542.473390][T23679] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1542.539779][T23679] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1543.319251][T23679] Bluetooth: hci2: command tx timeout [ 1544.471098][T23671] Bluetooth: hci3: command tx timeout [ 1544.783652][T23671] Bluetooth: hci4: command tx timeout [ 1545.371742][T23679] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1545.438145][T11712] Bluetooth: hci2: command tx timeout [ 1545.702032][T23679] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1545.753216][T23679] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1545.844038][T23679] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1545.949875][T11712] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1546.021503][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.857804][T11712] Bluetooth: hci4: command tx timeout [ 1546.862885][T23671] Bluetooth: hci3: command tx timeout [ 1547.491841][T23671] Bluetooth: hci2: command tx timeout [ 1547.974337][T23671] Bluetooth: hci0: command 0x0406 tx timeout [ 1547.988624][T11712] Bluetooth: hci6: command 0x0406 tx timeout [ 1548.379435][T23671] Bluetooth: hci5: command tx timeout [ 1549.200217][T23671] Bluetooth: hci4: command tx timeout [ 1549.205663][T23671] Bluetooth: hci3: command tx timeout [ 1549.642777][T23671] Bluetooth: hci2: command tx timeout [ 1550.414823][T23671] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1550.452462][T23671] Bluetooth: hci5: command tx timeout [ 1550.491675][T23671] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1550.528715][T23671] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1551.332639][T21766] Bluetooth: hci3: command tx timeout [ 1551.354221][T21766] Bluetooth: hci4: command tx timeout [ 1551.695183][T23778] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1551.851000][T23778] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1552.724455][T23679] Bluetooth: hci5: command tx timeout [ 1553.375087][T11712] Bluetooth: hci9: command 0x0406 tx timeout [ 1553.436901][T11712] Bluetooth: hci8: command 0x0406 tx timeout [ 1554.240295][T23679] Bluetooth: hci7: command tx timeout [ 1554.777146][T23679] Bluetooth: hci5: command tx timeout [ 1556.396832][T23679] Bluetooth: hci7: command tx timeout [ 1558.458630][T23679] Bluetooth: hci7: command tx timeout [ 1560.542430][T23679] Bluetooth: hci7: command tx timeout [ 1568.565371][T23679] Bluetooth: hci10: command 0x0406 tx timeout [ 1595.014204][T23671] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1595.319020][T23671] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1595.643800][T23671] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1595.957782][T23671] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1596.260962][T23671] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1599.343636][T23671] Bluetooth: hci11: command tx timeout [ 1599.722930][T23679] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1599.767883][T23679] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1599.801267][T23679] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1600.037771][T23679] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1600.077692][T23679] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1601.447492][T23671] Bluetooth: hci11: command tx timeout [ 1601.471678][T11712] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1601.599071][T11712] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1601.644339][T11712] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1601.729103][T23671] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1601.822070][T23671] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1603.363973][T23671] Bluetooth: hci12: command tx timeout [ 1603.506120][T23671] Bluetooth: hci11: command tx timeout [ 1604.327568][T23671] Bluetooth: hci13: command tx timeout [ 1604.580393][T23679] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1604.662291][T23679] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1604.733037][T23679] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1604.810162][T23679] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1604.867953][T23679] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1605.411230][T23671] Bluetooth: hci12: command tx timeout [ 1605.571872][T23671] Bluetooth: hci11: command tx timeout [ 1606.455131][T23671] Bluetooth: hci13: command tx timeout [ 1607.582117][T23671] Bluetooth: hci14: command tx timeout [ 1607.640084][T23671] Bluetooth: hci12: command tx timeout [ 1607.831142][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.607000][T23671] Bluetooth: hci13: command tx timeout [ 1609.869531][T23671] Bluetooth: hci14: command tx timeout [ 1609.875063][T23671] Bluetooth: hci12: command tx timeout [ 1610.911423][T23671] Bluetooth: hci13: command tx timeout [ 1611.950765][T23671] Bluetooth: hci14: command tx timeout [ 1614.058510][T23671] Bluetooth: hci14: command tx timeout [ 1621.425596][ T30] INFO: task kworker/0:2:797 blocked for more than 143 seconds. [ 1621.441535][ T30] Not tainted syzkaller #0 [ 1621.446498][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1622.334237][ T30] task:kworker/0:2 state:D stack:23744 pid:797 tgid:797 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1622.435280][ T30] Workqueue: events switchdev_deferred_process_work [ 1622.449802][ T30] Call Trace: [ 1622.453118][ T30] [ 1622.456065][ T30] __schedule+0x15dd/0x52d0 [ 1622.726476][T23679] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1622.760137][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 1622.765405][ T30] ? __pfx___schedule+0x10/0x10 [ 1623.322634][ T30] ? schedule+0x90/0x360 [ 1624.474307][T23679] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1626.476227][T23679] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1626.797861][ T30] schedule+0x164/0x360 [ 1626.802078][ T30] schedule_preempt_disabled+0x13/0x30 [ 1626.823506][ T30] __mutex_lock+0x7fe/0x1300 [ 1627.168564][T23679] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1627.203104][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1627.247181][T23679] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1627.705641][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 1627.720210][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1627.725286][ T30] ? process_scheduled_works+0xa8d/0x18c0 [ 1628.183335][ T30] ? process_scheduled_works+0xa8d/0x18c0 [ 1628.197997][ T30] switchdev_deferred_process_work+0xe/0x20 [ 1628.203924][ T30] process_scheduled_works+0xb6e/0x18c0 [ 1628.854203][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1628.868877][ T30] ? assign_work+0x3d5/0x5e0 [ 1628.873517][ T30] worker_thread+0xa53/0xfc0 [ 1629.979504][T23679] Bluetooth: hci15: command tx timeout [ 1630.465341][ T30] kthread+0x388/0x470 [ 1630.477999][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1630.483165][ T30] ? __pfx_kthread+0x10/0x10