last executing test programs: 5m13.493903791s ago: executing program 4 (id=4782): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) sendmsg$netlink(r0, &(0x7f0000004200)={0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000880)={0x1390, 0x2b, 0x200, 0x70bd26, 0x25dfdbfe, "", [@generic="3bca1af1aaf1aa1ce3f03e41bc98a36d2d31701938a6d9baf6b7dde8b73f43860425c3b6c9e845e99e52a90d6ec730aa87d7f51403d0cd3e20c356989844638e489f9c9f431d15a8249a7a896c3feee73dbf7ec521323ccbf8a5be090732189de0743d4666acade9c7c56a2c7eea052a5589c97ce45ae6f9b33f84e2da2853c733a3f7237efcb8ee68a82964540d32bb66a798419c1f00386438444fdad12e750494b8b18effee5865695d52b044f01f96f520b6f8222656decf273677f2007afd2a189c54ffd20ee91ed9ba9045f8e918230e02057f8b554571c2e4424290", @generic="6ded65f426e77a414e9585a20aaa2ca6faa543f679ad851e6a81c7e305718476f274fe521951be780c73c3c2417779ffcc395ecc1895033ea31c42d452879480894c8f", @nested={0x120a, 0x16, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @pid=r1}, @generic="eb22b5f4d67646b97f9e10494c025f76c99edfa99b515686380940385fda8f138c965c77369782aaa8be2f563986de630b159df6c0d5d77e7e17c21d89af626c5b881d24ceccba2f405d8d256fca6401b467c602736f8a41b8ff2757506c3e5fd715b8df205170fab36ef2697feda0fbaae20de355b1241a8921b5acff4a19b21df00dbf9165f0520a988fdf74e81de2887b43b4abee71497c76f80122d4e0b08003564ceb50ad8fc9b6850632e15da8cfa7db9cc62badab90227f73eeb652c42db51c9bb9c53b13939bda3df3a2048d13013d265361ff7c37f6a9feac52d7d0309be61e02270702651ad9bc6266419656a76ac6e3525964d238052653fbb03c5b06aab064d3bb3332d3ed6f99a6cc654389d9ff27b6b110d3714902f368e64fb50a5a774c097f88f75241e6121ad046f1754d9cbbbc9ba76e5e87189b2325300d188465276b5caf73931b92ebc8d025c2f32062885d1459cbe0a1aa3a17effe7b3ed405f05aad49bf7d2159941c65e31ee01ceaf8bd32e537fad49e1668b56565d761f8e88007ade305050f93f9fd593700cb36135998934a2e178c986250c60bedd051e7675419e1be1217025b3919f4cfde287b615442477b4484f48b47c6052157208de6c2a2cc461ba199449422ec632c0e9b33c3662b30f0d90f018b2266cd91821f3d7a238b39fb29890297489215dd28afcaad4b6f527fcee24ae183e5ec2c0cd08e7e005f777bfca00181cfa6dccd8eb6d6583226a6d13f88ea644472b64d9b419f2fb1dd0dcf151a896c25f3d14c2ecad49dff1243e192ffd8df072915499f1fb086539aa243da9d86c7cf6e4081f308189a5a477cdf702c9934bc4878e8f7d8ce1693f8dc29eead998eb89c5be7705747e1e552ffb680342330f2797b5853827a68daa367500e25f4cbc07b03cd22cdc0fe86c5a5238fbff56659e154259902cd88d9f1d7548657fc64052ed2f043c171a80c180915638440ba102facaefe79ec5b08b03ae4c4719586f1a91305add1b1004bc382f31aecb3f7b212fa22be738b86cefeba0f64c12de4149eaa823d719187f699833b1efd6ab3184ce861c9795d597701f459b1af3ff2b02ac089f3387d3a0f22dfeb6ab2f2c5ae84c3778654f1e9eccd00e3c5e18c787846afdda1fc411c66a7870c7c68f1599dc0d9f04f56d2d6021aeb0043f9416f36af94db2df27915588b9fc997d54ec222d518f1e6c7c44ccd2d34ec7817f8ff784621780fad8adeea0541de1d5794e943c2f7d23479d6cfd93794e6c89a056a2167c717130f1d22d6392a80ec314a25d8d9ff68f48d2a6f7219e0380e57901b284c02b7adf6162653ba92828e9e46fbdf4302d8e09e6ebb688a3a63a97fea24d9f14c97a7bbacd1930285d8fa2c26faecc90a0bee2dd95ee450c9928614e90c2eb2dd3035170c1fd1fc1647a7c712f3f0016efb6aa4c6aa68b4ac9b3e793784a7e72a10dd2ace9fa0f246794e3df706f8d282e016d9fb1f07553d8185ae4714b211b1d113ba1757141cbedaf3c66cafde46d732fdde7764a7a0a3b0967f003aecb29e02a019041d465599bae28edbc45422dca1abbc707975d0079c6998561e68ffa3a7a7bc20f67373ff7374627b3d712f93bdb9afdd3bbcf7d456f8a7c4badc150f269d0816d6e11c1927e6a0790d9436b16637c49670bc787c041e72f91993195bf3710d2884b7eff85165a88c4c63a035f98f7b0caa1f30e38030282cfe983a2b722f2780540e6841ba97cdafdc9d54499f1922238774fa5394feeff8e776ef972cd8ae2c5f238a7358517c7a42ed83d77632039fe610a8509c9ea42b1721c2f1b2bddb4dd2c372ca0f1f7e3447b35496288ac985d650dbd70aebe3c3e9af0bd830b2c8da46e38949586d38a6f927ac3470459f40e556cf2c229c20aa814d89c814a48e656dfd2bdbc1ae00321886d514677bfd737c1e3bae4b6922808bef15abd0da29f6809c55bc714e5c5e05a22b762afb99a60cc47456c45501daf484210c34bafacb44e2430451bfe901617ab6055f7d6fdf18f0cd1d5d20270fafbc2812df58b0daeffc5c4113da6d341cefac0b42bb3659f5b1ecdb71685ea80492851945a71a5af7af600e01d8c5126fc18f0d5feb06f7598ca24f09549d37d143656b5dae3744fac09f7b3fc54914d1c176588cba021e9f7903c382b0e198a38ff03a856c482af3a0a22bdf3ae49f0b5a239ad2502c97b55dfdd5748f09a30d38ffec3de4379a18d9d5b3d13611ddb0b2ba17c65e8b26bf97ad1bcf6d5745d4ac04dc6a8752be11e26c17d4e9ae139b82bc8532b96a38ce22aac6193ae585daffb0e5f1914a9d146e65b4fc886128795e72f5c2aad549fdd5d9d641209571101754fd89e412f1bb28824e498bc2b1b93a5b540913315f73e485f49ad1bf23ed1418b9a679828d256d8a8700ebfcec64d299c9bd9bc92950bf03f8abac318b9d1b9253b2ffdb2dcc68b06050d4e49b19332642d2f4855516ee84b706a89c7fee84d1b6ab6801dcd876a6c935aaceaacb07f5cca32244a801723da499b1bf63a8ea1d69ca99e287d68f7254282a3d2efb44c4e9ca0079f3492384235c0866e237468596c9f9d080a51d9eb76d413fe54161819e066007be0f132c69b2c12ff954a049e6ef758beb4a490a066d4ce7993358837b0e6e2738ceba3309b57815c6355d746e420e063dfc40edb9e5986e2d392f95d970bb1720edef456f9fdf4c4ad88437a2a88a841b2c861e32437ac68f98bc4cc4432825f8478b54a5ea6a3643ff430370f898789f5c9ebf47a39b04d7aac2288035a3ecfeac601cd5f1226c88db797d69a3e6914ac5a57c7446070a362dc992bc4f4ba5e7f141bf75b551afd81f3b405bfccdc0c9385af2d676f0a9fdf9a58a30341b471acca59303ea5cba7e67f419d42553fc33a45db4517e06e5db5255f65f2400f3d738c26be3bd86d242c1805d0991e45a70a2a93185fb211ad6a4c753e581cff12a0d476da80c0b791029a6cddf4d3da4017fae8e6c2ffbd600bbcaf8d5a0f2942a644e0d8db74fe48a29239209e857981bd971e612449918202159f847be6ea6bc9af9166249ee3b7b65381bd3bda75530fac3a317a6b1bdfcfd929bfe0034b144b2daa2ee9f9ac09a3b9d98b64b95e737dbb4a2298e997ed1c6bbc8352a63d147c10764d9818920dfd65aa81a127f40006d1114185d524be5e64d6f4013782f8e1f9f7bbe95dc781b4e82c71ba1613c6010748f0900770368127b904a6e2d2c33adbe4f8da835149711125e30a9b6a86d88562d93eee6481e5000bdd76fef7d4df3a8555ffdb09183f7e4a9a85e002dc040e922bbb7a122ec75e7c22ffe163a715f2761382e98a0095b757eff4d83acc9a0b311a253dab545181e72700192e6a674bc52281dee5f7eebd834c36f837a6ab9d6a335b8f47ee0cfee0d5d09624ae13e5d95431baa7c5066a7efc1418fef4bda39b184a488d47cdde7d72133c4666544272c55d9d6aa119c47798b738b1ffb8ebde0103b8734f4f2bf18a72573ceb6f20ebd57a1a45fb32e3b290b4430a0cd88afc04a71f0b6590e6c3419d529a02eefb381b4f8a99d24691def17ca98945c153ed2bf395b6b11d79a460a44c75a84eb64197a7336ba02ac15ec89e2e6cc89d16d05f228ac0cbe593a9293d496b554cda42c1eb65a6e2498ce6a61be003943f2701d9c6707e7bf4c89a1f8f404e71f01ff5ed80d66794228b642bffdbee072cc52fed728d7959aaee5a6b21a959e796f33b7fcff0d591d3932f297c4fdc68b03280dd12e03cab1d3e13859c3625ab22c25b960bc8b363f612cf89f4264d2ed8b70e2916435812118ba8c719132b9fd9347e1bd8f1d98fe23aac6255fd8c6e513d2935c51afd665dc951d1a7e08b6834a9b4b975f20125e1785c801febd8ea728d92102f1bac4800d2682e87aeaec3bc69e110939ad6b1c92293ff1c02b5a9af192cb2765b5a69bb6051cf04b7cdc4636b82d725af9f6a6ae705192a02cfe36398d8ea814f10781bd744b16ecb32e8e903646877c488be3190254a51215962366e2bd8971023f5571070e7edaee8f58e36e2fb279e022354113a5435a3164f79391085e4f10cf8bbeb900b1ec29f18d311bdfa60c3c6ea7ad0c165069c30226d09cc7a5e3482ca91ef7096286424aba3359880a82c087c1967d8a9759f0239b9b4fe07001de78ac27245cf6b67cd63214eca91029053edc9696b9daf43dfb59b1a5e934984463b01c961ac7b8467e3ba166fbb14bb02ec23e10588c9df8727059edd1038bde00e14c25e3d263489fcd04bd1c3cad6e0a2b27fce8c3786935c6747722b6920e2a4803694b73b626909ec11ee8a4fe10c743e230908f7c6b776b0417c869f98eeee966c61776056ee2f144f7e52f4c74a536bce77f8f478d81b63d5181b87732a19a4f4d1b29ceb24386d6e797b5330e26a973611fd9166e4aa597b52d680de4f1fad0871eea0ab4b6505cad0b7c950a127ba0aa43e398b8b3c3fa360e075219fbc8e140a0ebe61f17d0cbfcbb7d00526cc4788858c763bf853d2b50f6ef12697fd34a38757f9b400f249afa27eed67a20a1626ae359b596efa28412c4d2e8bfa0edc23d49d46f93b66b8d68a1e842f1629ce20f2ddfc57fd18263ae3829b4156102a4766a1beff8ab9f95134d8d8fc21d610d44c4253736362b3ee74e81722e8f22e5b46d7af53167c90d5635b1d32a0c4df3ca8fab4c7c0ba471557a3953d476a3d8ff4a0f9832eec2064faf28890ced066f2ec8153494160aca66f9d7ea11f4b25d3ecff97a33c847544f5bba66e34f34c48f3edb55294d3418a20ffc6bd9a9ddae8f526b55f3b5815dc5288762048b9f6a211abe1608eaefdeea55206e9c8bcfefebc12f97c64743fa41bd8a50defc14ca36e5b2007d427eb389862c7f40a8decc860632b5f31869ab5a036fd0359fc0e7ef7bcfb00038a3b5a35876fea605df5b631bcf83a72320be64b9d10f57674df9d98db39771b98608540e85306e9a8094ec72b421103905dcecb9bae93cd7f87f2e0dc30c129346ee76834e6b076e4485693b7aa20d684b18e7f87887b00a26b99f8e62b7f18b186ef78bcdf637db29e40e9247f1cab8ad0a6c06c5ea8297b4b4318be7070ba348afd7533b0689ed392b52002b5ed4611bc8e7a3a645f43c1caf46014863b0fa3cbf7705edc8902c539e0f02f502e5c70f5201460d0d321c8c0d3f1fced6cd5eb999262e221650edf1668298202df9fa2fe6c31aa29413d347b76f7b09bd187c85947bf935bdf2794b61e560b465430319654a3fb93aa5ea1b3feb5f1da10098b01fd8c21154c1306f4805da858366509450c120ed811121a68a9e47b388366a1e57cd6c0bea0a20498d9ac474d2af428583c3d20fd79d331309ecb4d574a74e6556d3dccc24680f2130f4ada9041c372e4016645ac88ca9d1af69c3f01092b0ed5edcbae137279dcd630373fdf56e5c198110e0cdbe58d4be3911ed58c6c34d1c5c4395bbdb4b843b2a1e4d7bdfb2aa385bfc64e2fd24ebfb7df078376194ffa003176815d4d41722d11dc0f77acb790892f429d918d5de1f1d2dbb4e720e8a3864cd3a9ae283d6f58b574eb701c58f6409484fb72e03565c202e97ccb44304c596e09a04b389c531868769f53c8560d1d4ef365f180d263ddba0c1b5ddb3781cbb7547aa93e48299ab9156b5105682f67547602415e0609a9163c3f08e6e562f7fa5e28e8a0de111924bcede79cf7965601558bceae71eea7f734dc5f2152df50f09ef524f7f7bff9910", @typed={0x8, 0x14d, 0x0, 0x0, @uid=r2}, @typed={0xc, 0x6, 0x0, 0x0, @u64=0x80}, @typed={0xf9, 0xb0, 0x0, 0x0, @binary="646e8f95113c59d968aaabc60f6900c8290815fd7ff7b244036a38e1598d73f999aede4bd0ea6c697165b86a1b45c9df1788fb8ff0c6dffbd1c15f7f78e805e3e8ff1ec11f11f3fec22db075ac192abc94a46b93241c79378a27173f56c2a40d3e3c5c8355411b3d82af2159f5a1165fccac3986e0f9efa5747787cfcda637c11f49daddfff04460c44dde95c49ba4c2cb1e028354dcb07090d8ca602c826f0f1b1da469777503d1c71c2983f1ea889e3df2994776a25e5598800e558bf7f6550ee15a4a16af633380d0df27b209f62e933f4ec32af83a9bbbeaf92dc06a613d30d2816b976d323372fceb3147c5fad10faff2870e"}, @generic="7dc17c02530a3bbd2398d459e802326b668abab1357928409e6dae706ce3555f813ab7b7651efce5e222e807d474f718e2e576c5a13aaf1339135c933e18da28a87badf5b63df442dcc71764ad5fd5355d75e7451f65f8dfeb8078e5b237d41b083c70664618d83a276e70a1b562a974921e096ddc683ba13f807a2d", @generic="2759bb8aa0b662e4154e5bb511127792387f49981f3f541472b4f5d4cf647df2082c07d325dd2798589d65d7b3a6fce7278261f111d319636c5b987bcb5ff2f5b4f63735ee4d341d8d9efbff6790db1fea03921057c829fe17ba6323d5a10e20929504668113ea0886f8560e7ad3474c41ae"]}, @typed={0x14, 0x36, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x20, 0x84, 0x0, 0x0, @binary="55330742705bf791f667b41f947a0d7ff24367767f30589fe7a74482"}, @typed={0xc, 0x28, 0x0, 0x0, @u64=0x7}, @generic="fee520ba768c2235b273d43c763ae2c897"]}, 0x1390}], 0x1, &(0x7f00000040c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20}, 0x80000) 5m13.366417552s ago: executing program 4 (id=4784): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x0, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(0x3) socket(0x1e, 0x800, 0x6) socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x0, 0x3}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async) close(0x3) (async) socket(0x1e, 0x800, 0x6) (async) 5m13.281362608s ago: executing program 4 (id=4785): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0020040002000000280012800b00010067656e65766500001800028014001200fc"], 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001340)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r5], 0x54}}, 0x800) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000140)={0x0, 'vlan0\x00', {0x4}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 5m12.370845643s ago: executing program 4 (id=4793): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9ac43580d71eeda50000fd25cfeeb8c7b80950b1bc18a5a71f044f", @ANYRES32=r0], 0x18}}, 0x0) r1 = socket(0x2, 0x6, 0x3ffffffc) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0xffff, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@getchain={0x44, 0x66, 0x800, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x10, 0x9}, {0x6, 0xf}, {0x1}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0xf}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xee}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x0, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r7, &(0x7f0000000400)=[{}], 0x1, 0x80, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r8) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5839af697b0d8ed3ac1a43deae3cd9615348050ce7de6e183822fbb902f55f19f68f1a74e87d5aa6acbfae2abe4de32ac3f4f95b02ebe277bef11869e96d11d7761f5865ac175f3d43abf76ce8d1bdc9175a068a8ed1d3bab3299f3385f7335c617a4ef3f3c14e157021a234bf5b548b5ac4b86540e13ef0b638b3a0be9bbc5a58a0bf89f9c2d8a1463e5bed", @ANYRES16=r10, @ANYRESDEC=r10, @ANYRESHEX, @ANYBLOB="06000600000000000600045b9c92b73e70427070b383d08453b400000077fd90584bc40000"], 0x50}, 0x4, 0x700000000000000, 0x0, 0x20}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r12) sendmsg$IEEE802154_ADD_IFACE(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="01002bbd01000000df252100000009001f0070687931000000000c000500000000000000000005002000000000009d87f01beba6d8f4", @ANYBLOB='4\x00\x00\x00', @ANYRES16=r14], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) r15 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r15, &(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) 5m11.078986086s ago: executing program 4 (id=4804): r0 = socket$packet(0x11, 0x2, 0x300) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100"], 0x23c}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, r2) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r5, 0x8990, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) write$nci(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="7103b3"], 0xb6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) close(r6) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$sock(r7, &(0x7f0000000000)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x4) close(0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r8, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x2, @local}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000035000000fc020000000000000000000000000000000000000000000000000000000000008286c97c0000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000200010000000000000000005666178a536c68002b70295adbdfaf8d4f3bdd75326da3a7623507fdc97f3370a1be305bbefcfe41233cccca0cfade"], 0xf0}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r9}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) 5m7.821726303s ago: executing program 4 (id=4819): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r2, 0x8f5, 0x100000000000000) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FROZEN\x00', 0x7) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x9, 0x12) sendfile(r4, r4, 0x0, 0x7ff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x1, 'dvmrp1\x00', {}, 0x2386}) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x1, @mcast2, 0x6}, 0x1c) connect$inet6(r7, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf255c00000008000300", @ANYRES32=r6, @ANYBLOB='\b\x00k'], 0x24}}, 0x44) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x60, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080000}, 0x10) 4m52.652386619s ago: executing program 32 (id=4819): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r2, 0x8f5, 0x100000000000000) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FROZEN\x00', 0x7) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x9, 0x12) sendfile(r4, r4, 0x0, 0x7ff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x1, 'dvmrp1\x00', {}, 0x2386}) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x1, @mcast2, 0x6}, 0x1c) connect$inet6(r7, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf255c00000008000300", @ANYRES32=r6, @ANYBLOB='\b\x00k'], 0x24}}, 0x44) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x60, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080000}, 0x10) 4.088212824s ago: executing program 5 (id=7031): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x800, 0x0, 0x3}, 0x20) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0x201, 0x4) (async) socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) (async) listen(r5, 0x0) (async) connect$unix(r5, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r9, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) (async) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) (async) close(r5) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x105044, 0x9745bd4942aed7ea) (async) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) (async) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x0, r3}, 0x10) (async) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1000000002140100699e3779d70a885b"], 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 3.627602491s ago: executing program 5 (id=7035): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @loopback}, &(0x7f0000000380)=0xc) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x87, 0x87, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @datasec={0x3, 0x6, 0x0, 0xf, 0x3, [{0x5, 0x40, 0x9}, {0x4, 0x3, 0x2}, {0x3, 0xfffffffb, 0x1}, {0x5, 0x790d, 0x8}, {0x4, 0x101, 0x6}, {0x2, 0x7fffffff, 0x7fffffff}], "860bbd"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x10001}}]}, {0x0, [0x71]}}, &(0x7f0000000480)=""/228, 0xa3, 0xe4, 0x0, 0xf4, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x9, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xd2}, @exit]}, &(0x7f00000006c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x66665dd4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x0, 0x1, 0x9, 0x5}, {0x2, 0x3, 0xf, 0x2}, {0x0, 0x4, 0xb}, {0x2, 0x2, 0xe, 0x2}, {0x0, 0x2, 0x2, 0xc}, {0x2, 0x4, 0x10, 0x7}, {0x3, 0x5, 0x0, 0x6}, {0x1, 0x4, 0x4, 0xf}, {0x5, 0x4, 0x1, 0x7}, {0x0, 0x5, 0x5, 0x1}], 0x10, 0x6}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffff45}, 0xc) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00)={0x0, 0x1, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1, 0x21, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd33, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0x6, 0x2, 0xa, 0x30, 0xfffffffffffffffc}, @exit, @generic={0x4, 0xf, 0x8, 0x3, 0x6d8}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @generic={0x0, 0x8, 0x7, 0x9, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x48, &(0x7f00000002c0)=""/72, 0x41000, 0x11, '\x00', r1, @fallback=0x3, r2, 0x8, &(0x7f00000005c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x10, 0x5, 0x10}, 0x10, r3, r4, 0x2, &(0x7f0000000c00)=[r5, r6, r7, r8, r9, r10, r11, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c40)=[{0x3, 0x5, 0x10, 0x6}, {0x2, 0x5, 0x0, 0x7}], 0x10, 0x406}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d80), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000dc0)={0x11, 0x0, 0x0}, &(0x7f0000000e00)=0x14) sendmsg$MPTCP_PM_CMD_REMOVE(r12, &(0x7f0000000f00)={&(0x7f0000000d40), 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x64, r13, 0x0, 0x70bd29, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x200000d5) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f40), 0x424a80, 0x0) ioctl$TUNSETOWNER(r15, 0x400454cc, 0xee01) splice(r12, &(0x7f0000000f80)=0x3e, r4, &(0x7f0000000fc0)=0x738, 0x6, 0x3) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r12, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x50, r13, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x64}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x50}}, 0x0) r16 = accept4$inet(0xffffffffffffffff, &(0x7f0000001140)={0x2, 0x0, @initdev}, &(0x7f0000001180)=0x10, 0x80800) getsockopt$inet_pktinfo(r16, 0x0, 0x8, &(0x7f00000011c0)={0x0, @loopback, @multicast1}, &(0x7f0000001200)=0xc) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f0000001240)) r17 = socket$nl_audit(0x10, 0x3, 0x9) sendto(r17, &(0x7f0000001280)="8690bc3729f1243709393945d74297641f333c9a9cddaaca25fbe7e2b56298c611e65c8d514d05fc26faf87a01c61928e2110556ca91a5524255436df9053e9042b74a1398c4f8581a20005e1cbdec7b213ddeb38c35242ec005179227fdfcbed556b709aa51f627eeaa56059eff758a93872e8de88e546bd709439aeae25860c5a8832d65ccf9276054fc4e39158d8fd5236a9d70d0a5acfe379506d69cde76c616c689d3eee0b49a166b109282db8c8418b32b0102a35a03d484198615bce3965eeeaa4935e9e628827c40ceaeb24c59d8590bf4ca9d62", 0xd8, 0x4000040, 0x0, 0x0) splice(r11, &(0x7f0000001380)=0x3, 0xffffffffffffffff, &(0x7f00000013c0)=0x100000000, 0x2, 0x2) getsockopt$inet_pktinfo(r16, 0x0, 0x8, &(0x7f0000001400)={0x0, @local}, &(0x7f0000001440)=0xc) 3.449646995s ago: executing program 3 (id=7036): r0 = socket$kcm(0x2, 0x2, 0x2) r1 = socket$inet6(0xa, 0x3, 0xfa) setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f00000000c0)=0x3, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2, r4, 0x25, 0x2, @val=@perf_event={0x5}}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r6, 0x4, r2}, 0x10) sendto$inet6(r1, 0x0, 0xfffffffffffffd2f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0xfffd, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000002140)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000c40)="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", 0x3f3}, {&(0x7f0000002b40)="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", 0x1c0}, {&(0x7f0000000200)="f2", 0x1}], 0x3}, 0x8400) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0xe0, 0x428, 0x338, 0x338, 0x338, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x45, 0x1}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@eui64={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) bind$tipc(r7, &(0x7f0000000280)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r7, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x3, 0x2}}, 0x10) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0x8) r10 = accept4(r1, 0x0, 0x0, 0x80800) sendto$inet(r10, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000a800000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r12, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r10, &(0x7f0000000680)="81349e542a28fa2e4573bf", 0xb, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x9}, 0x8) 3.43848372s ago: executing program 5 (id=7038): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/218, 0xda}], 0x1}, 0x2}], 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0600006ebbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 3.05980375s ago: executing program 0 (id=7042): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x68, 0x0, 0x103, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x73}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8001}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x11) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c001000041000100fcff070004000000030000008f014880040008"], 0x1c0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 3.001756154s ago: executing program 0 (id=7043): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, 0x0, &(0x7f0000000040)) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54", 0x72) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, 0x0, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x810) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@gettfilter={0x3c, 0x2e, 0x800, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1d, 0x5}, {0x0, 0xc}, {0x3, 0x8}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0xffff4bbd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x420021, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dbdc01, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r10, &(0x7f00000009c0)="39858c", 0x3, 0x40000, &(0x7f0000000340)={0x11, 0x10, r9, 0x1, 0x2, 0x6, @random="3b8a1c3c34a9"}, 0x14) 2.861019774s ago: executing program 1 (id=7044): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000880)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0xc, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000040), 0x0}, 0x20) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x3, @a={0x6, 0x3, 0x6, 0x0, 0x36, 0x1, 0x6, {0x10, 0x62, "eb07dfae75b96e189103aeb76336b656891b0fc479a9459f575bb741c39b45120c392ed4b122cce28bb2ef0916f1ba671b72067ec3ca7eb60880f4db6004b913e1bf7dac7c7fbf1b52037c6a120dd8d9f627dc20a4e6569a254d7b2bf396b4823941", 0xe7, 0x2}, 0xad, 0xd8, 0x8, 0x4, 0x11, "b5da330f0dc5226fcf69b2a1012aa55d41"}}, 0x86) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r3, 0x1, 0x70bd25, 0x40000234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xc0}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x810) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="4002020800"], 0x5) 2.803945829s ago: executing program 3 (id=7045): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000100700)={{{@in6=@private0, @in=@initdev}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000100800)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) r5 = syz_open_procfs$namespace(r4, &(0x7f0000001780)='ns/ipc\x00') getpid() sendmmsg$unix(r3, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x18, 0x1, 0x1, [r5, r2]}}], 0x18, 0x800}}], 0x1, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010410000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'ip6erspan0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x10, 0x5, 0x9, 0x2, 0x0, 0x6, 0x836, 0x8, 0x8}}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b7040000000000008500000008000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 2.665880982s ago: executing program 2 (id=7046): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000000), 0x4) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000080)={&(0x7f0000000040)=""/31, 0x1f, 0x2, 0x6}) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair(0x19, 0x6, 0xf62, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@gettfilter={0x54, 0x2e, 0x300, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xe}, {0xd, 0x2}, {0x6, 0xffe0}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x1}, {0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xe95a}, {0x8, 0xb, 0x8001}]}, 0x54}, 0x1, 0x0, 0x0, 0x8090}, 0x184c) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x3}}, 0x10) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000380)={0x2, 0x3}) recvmsg$unix(r1, &(0x7f0000000780)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000480)=""/123, 0x7b}, {&(0x7f0000000500)=""/193, 0xc1}, {&(0x7f0000000600)}, {&(0x7f0000000640)=""/145, 0x91}], 0x4, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x20}, 0x10021) sendmsg$inet_sctp(r1, &(0x7f0000000940)={&(0x7f00000007c0)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000800)="ca05d715fcc325eeb30e6344c5cf357b32b023d6143625361a114dc9ece20cf5cd0201392fa443ff232d009a42e70c6d3109ae444ba427bdb7cb658142d4f09e90752dc3da88fc55ae1aa668479c0bcc25cbbce95bbecfbdb8bc3ba4fe749517cc2ad3e0ad1952bce7a01a4b239035feb328c1422e9d7df003cd5fcf3a6cba9b5c08f7e4f4575f38d9ca6b5515ad8b7c84bc60a24e0135b3738d057c37a54d0b8a11777d8ad9f7bd3203fdded14074d2db9deb5015d6d5183bdd1ee594a3fa00386c2c92608a5c657c86d90841eb60a8ce50972143aeb7e112826bb8807cc03e2d9a16a0bf991a589118d29a1c8a89c87baa43", 0xf3}], 0x1, 0x0, 0x0, 0x20000001}, 0x800) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000980)={0x0, 0x4, 0x9, [0x5, 0xf7, 0x4, 0x5, 0x3, 0x400, 0x2b7d, 0x6, 0x8]}, &(0x7f00000009c0)=0x1a) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000a00)={r4, 0xf}, &(0x7f0000000a40)=0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000a80)={r4, @in={{0x2, 0x4e20, @private=0xa010101}}}, 0x84) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4, 0x110, r7, 0xdd6ab000) r8 = socket$kcm(0x29, 0x7, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) sendmsg$nl_generic(r2, &(0x7f0000001f80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001f40)={&(0x7f0000000c00)={0x133c, 0x34, 0x10, 0x70bd2d, 0x25dfdbfb, {0xf}, [@typed={0x4, 0x14c}, @typed={0x5, 0x12c, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x5f, 0x0, 0x1, [@typed={0x6, 0x133, 0x0, 0x0, @str='.\x00'}]}, @typed={0xc, 0xfb, 0x0, 0x0, @u64=0x10001}, @generic="8e39b95a54cfd57ac50ffe2652a6de08e3b2785ffb1f563a9405f5e6798100615906b6f0dd7eb76cf3a777114e25f9e39c7deda2588a7dcc292ec621451457a9d0ebeddf384d3d043f2ff370d9205e25abaf5fd0bfff2661674d4110b33889f0fe71cfa3df7ec43b28e1b3a48bfaaa9a35561dbc2bba7df404cf8d0bca5349feb1d5b732065b03f2dd0dd19b2c01ad631f30948ca655be02a29f1fd5d5ed4cf635481da99c63a90ff1b81c88c4bee0c8ca804d4412a5024649553f3a678817924c60359c271524832a58a914e1a313e598b50e9fec", @nested={0x1039, 0x32, 0x0, 0x1, [@generic="fbbfa1af36fe279a09231c13dc41a5e9276a9025b7719964fee384bdd3a5a05251f6af7282c8392a9356e63cd6", @generic="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", @typed={0x5, 0x10e, 0x0, 0x0, @str='\x00'}]}, @nested={0x108, 0xd4, 0x0, 0x1, [@generic="6dd32499a51efcaea2e9f574", @generic="af42e42ab68e0046147f448f60f3195eea2ba78bfdbf723ac2f6d248c8cb0e8e512651529172eae857708e318f652b52591b0461de34cdb7629ef70c1ce044325cb94762c1429adf6e90584d4bd9a898db62a39c7407dfa650f0c420", @generic="c6a03df418169e472abd4cad25c21f2286ad3984107117c135d3cd0b62ba322c22f4aee907baca5efa44a85cf4ead7ecf863e405f132cbf646e6c5430df1982eb3a25d944e65084e4e5a7e3ecea37d54ec86802e9765f461158d487c96c1fed714fe06fd33f5737d96aa1d15a6bb56daf3dbec1afca17c15e24711bbd6822c38dda541cf9ad48258ad64dff4e1c699092296a191", @typed={0x8, 0x91, 0x0, 0x0, @uid=r3}]}, @generic="fe50c33e5b5d091d078609ad0652633f515a8a6d5e0a481dcb27198ea44c9ce30eb375219c38b313f09d1350184eea516830462e942b33ffb5ea6b00e94e8c95b27e3e44f1756bad80ded9a48602eee960587282a4473d4ab4fe22477c2a457d3c15a6ea30cf652055384d64e49b07d32ee1896d364cdfdf07d40786c52fe4a3bea707abc29c7c2a70c53300a57cf490e6484b458546c1408236d77dc61d08b01fdee06e25750fde81a2be9135905a64e474e4f3e66b939a6962cde41b3a9c23557c61c21e91486c085157818647cb667fffcc026c44e062c07daf3d58ef23f2b729f567f7e476fc"]}, 0x133c}, 0x1, 0x0, 0x0, 0x2004099c}, 0x4000010) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000001fc0)) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000002000)={@local, 0x0}, &(0x7f0000002040)=0x14) connect$packet(r1, &(0x7f0000002080)={0x11, 0x9, r9, 0x1, 0x2, 0x6, @broadcast}, 0x14) ioctl$F2FS_IOC_COMPRESS_FILE(r8, 0xf518, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f00000020c0)=0x9, 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r1) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000002240)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x38, r10, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x13, 0x13, [{0x6f, 0x1}, {0xb}, {0x9}, {0x18, 0x1}, {0x1b}, {0x1, 0x1}, {0x3}, {0x12}, {0x255f934a80237814}, {0x2}, {0x6c}, {0x48, 0x1}, {0x30, 0x1}, {0x33, 0x1}, {0x9, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x10000800) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000002280)={'geneve1\x00'}) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f00000022c0)={r5, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) 2.6578837s ago: executing program 5 (id=7047): syz_emit_ethernet(0x66, &(0x7f0000000600)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @mcast1, {[@fragment={0x3b, 0x0, 0x0, 0x0, 0x0, 0x2}, @hopopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "0ce3c4989ea1a39290312280e6388bb3012ab2f6fcb2ba"}]}]}}}}}, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x86}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xc8, 0x37, &(0x7f0000000180)="49fb7ac02b2195bc3e3ce44dfaef63732273dc638fb783c54c72d8623cc142678e722214709c7c25935e4bed697d10ff70e6bdb0da84375db877b9468e9de5fe5d85070b47258bef4ff7b29d07de31477dc95c6e47856442b6a8c929fc238498b0ad22d0cb58d47dbd53e8b54d94c474914175b3ca3f93f8004d197b7408e8d1e4f8c6dc5e1231ca73ca02b3f35c62eacf2d80eca54f4417233dc80dd9cae1af854af577c64a4fb1db9e77c07e8188c10b5a83652aef7f533e13ef1c888185891bdff856834d01ee", &(0x7f0000000280)=""/55, 0x5, 0x0, 0xb3, 0x57, &(0x7f00000002c0)="d2633a8fd70d86a94ef830e6e528d9c22c7980655766287c8141249eec387eb00803102497cfac46e170c16accc1baf0f29b35da04bef5987539b132532f033d1424a86150b1e4da8372d0513cb1ff510449e828452d0dd5d5c9f242db0eed99d08245331081d694c2bca017971d4738cde54a6bb19af39ca4c89ad34b51317b49f4fe2081bbc7f1143856696161278c43078cd4fcb0612ed1a8b235d2ffde615f5d2cf3d39a58f120be10bb9b118923ddba8c", &(0x7f0000000380)="283a61078326922b81f8341102d99369e46b47256aec7e93fbbda53c6b9ee843cf18505d4ae70735854f94c5207cf4b85d570ccf54fb9356761f8d0c8e235a5e859563600e3d2ff4fa4a8366d30ad9d509c519cc49832e", 0x2}, 0x50) 2.462249102s ago: executing program 5 (id=7048): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x439, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001e0001000000000000000000020000000100000700000000080001000000000008000f"], 0x2c}, 0x1, 0x0, 0x0, 0x4008012}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e28, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e27, @empty}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x9, 0x2}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYRES8=r5], 0xdc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) setsockopt$inet6_tcp_int(r2, 0x11a, 0x3, &(0x7f0000000100)=0x1000000, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "0500", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x892f}, {}, {}, {0xa888}}}}}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616576000014000280100001004241544d414e5f56840900000079a585bb85e478739a0daae54f8964d6326418024bf43d3a9f6ffc5accf36ab1431ea8ef69a574f9e4b4fc20da034f542273025b8b7ffee5db2d0913d7532abd0b6e9155e71f203d37d73ebd99abf1cadb089cda2fbd76f42457f24685cb21e1e123be621d0864f722419dc7f7b82d985068b137dcc5b9b7d1499ded7b6ba4633515b5f7abd2f2e32371bbc000df2a2de96c3703fcd60479693172da6da4d1d5d9038c3615876ed82013435f5f6e6499c9720e8c6a9c9a106f9fa1c93433cff2cb"], 0xfd12}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@typedef={0xe}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x4}, @var={0x7, 0x0, 0x0, 0xe, 0x2, 0x2}]}, {0x0, [0x30, 0x5f]}}, &(0x7f0000000280)=""/57, 0x44, 0x39, 0x1, 0x3, 0x10000}, 0x28) socket$netlink(0x10, 0x3, 0x4) 2.449065239s ago: executing program 1 (id=7049): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}, 0x8800) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000280)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000380)={0x0, 'geneve1\x00', {0x1}, 0x6}) recvmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r6, 0xff09, 0x110c2300fe) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x10000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x3c, 0x0, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x3c}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r12, @ANYBLOB="040013000a0006000802110000010000060010008005000006001200000000000500c2"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.38837173s ago: executing program 3 (id=7050): r0 = socket(0x1e, 0x5, 0x0) getsockname$packet(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r2, 0x1a, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0xf, 0x1, 0x0, 0x7, 0x3]}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xa4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1c72d68a}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000240005050000000000000000000000001800000000000100ffffffff000000000c00010063616b655f6d71"], 0x30}], 0x1}, 0x0) 2.253970312s ago: executing program 2 (id=7051): sendmsg$inet(0xffffffffffffffff, 0x0, 0x8800) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r4, 0xff09, 0x110c2300fe) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x10000) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, 0x0, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r9, @ANYBLOB="040013000a00060008021100000100000600100080050000060012000000000005"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x2, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) socket$packet(0x11, 0x3, 0x300) 2.24117475s ago: executing program 0 (id=7052): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x2a, 0x0, 0x0, 0x800001}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600101, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f00000000c0)={0x4, 0x1ff, 0x6, 0xd2, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000101840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffff050000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x7ffffff, &(0x7f0000000200), 0x10}, 0x90) socket$unix(0x1, 0x2, 0x0) 2.069846031s ago: executing program 3 (id=7053): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="05f300000000000000002000000004000380"], 0x18}}, 0x0) recvmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)=""/14, 0xe}, {&(0x7f00000002c0)=""/129, 0x81}], 0x2}, 0x2}], 0x1, 0x10002, &(0x7f0000000480)={0x0, 0x3938700}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) sendmsg$netlink(r6, &(0x7f0000004200)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000040c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r7}}}], 0x20}, 0x80000) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newsa={0x1ec, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x120, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x38}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @policy={0xd2, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x0, 0x4e20, 0x2, 0xa, 0x20, 0x80, 0x2c, r2, r7}, {0x8, 0x6, 0xdb, 0xda, 0x8000000000000000, 0x2, 0x6dbc, 0x8}, {0x1, 0x3, 0x5, 0x50b}, 0x1, 0x6e6bbe, 0x0, 0x0, 0x2, 0x3}}, @proto={0x5, 0x19, 0xff}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_dellink={0x34, 0x13, 0x1, 0x70bd25, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0xa, 0x0, 0x1, [{0x8, 0x5, 0x0, 0x0, 0x400}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008014}, 0x20000040) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x1ffffffffffffffe, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xe, 0x0, &(0x7f00000003c0)="eb1ef98073e4ba21ffa3cf1050f0", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) 2.013522949s ago: executing program 0 (id=7054): r0 = socket$kcm(0x2, 0x3, 0x106) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r0}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) (async) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 2.011799897s ago: executing program 1 (id=7055): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="4c00000011000f14001100020000050002000000200000", 0x17) close(0x4) unshare(0x26020480) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/user\x00') unshare(0x40080) close(0x4) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)) unshare(0x20000c00) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xd, 0xb}, {0xffff, 0xffff}, {0xfffe, 0xfffd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r8, {0x0, 0x17}, {0xfff1, 0xb}, {0x4, 0xffe0}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4004810) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000440)="800000", 0x3, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r10, 0x1, 0xd5, 0x6, @broadcast}, 0x14) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000740)=0x4) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x3a, 0x1, 0x0, 0x0) getsockname$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000700)=0x1c) 1.961908638s ago: executing program 2 (id=7056): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newtfilter={0x8c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x60, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xffe0, 0x4}}, @TCA_U32_SEL={0x54, 0x5, {0x7, 0x2, 0x4, 0x0, 0x4, 0x0, 0x3, 0xc2d, [{0x5, 0x5, 0x1, 0x5}, {0xfdd, 0x9, 0x6, 0x3}, {0x8, 0x1000, 0x75, 0x402}, {0x400, 0x2658, 0x40000, 0x1}]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000380)=@framed={{}, [@ldst={0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x10}]}, &(0x7f0000000480)='GPL\x00'}, 0x94) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x12, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 1.694421409s ago: executing program 3 (id=7057): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/218, 0xda}], 0x1}, 0x2}], 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="060000d7bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.681075179s ago: executing program 0 (id=7058): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}}, 0x800) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x30, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x6}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x5}, {0xfffffffd, 0x6}]}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 761.499764ms ago: executing program 2 (id=7059): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$tun(r0, &(0x7f00000000c0)={@void, @val={0x3, 0x80, 0x9, 0x3, 0x9, 0x80}, @ipv4=@icmp={{0xe, 0x4, 0x1, 0x5, 0x4c, 0x67, 0x0, 0xf8, 0x1, 0x0, @local, @multicast2, {[@noop, @timestamp={0x44, 0x8, 0x10, 0x0, 0x1, [0xee]}, @noop, @end, @timestamp={0x44, 0xc, 0xea, 0x0, 0xe, [0xb, 0x7]}, @noop, @lsrr={0x83, 0xb, 0x6d, [@local, @loopback]}]}}, @timestamp={0xd, 0x0, 0x0, 0x4, 0x9, 0x9, 0x400, 0xfffffe00}}}, 0x56) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x18c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_MEDIA={0xdc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xba}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4}, 0x40) shutdown(r0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000003c0)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000440), &(0x7f0000000480)=0x40) connect$phonet_pipe(r0, &(0x7f00000004c0)={0x23, 0x0, 0x5, 0x81}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000500)) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000540), 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xac, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffed9f}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fffffff}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0xac}, 0x1, 0x0, 0x0, 0x480d0}, 0x1) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000b00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000800)={0x2c0, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72}]}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x741}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff80000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}]}, @TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "80a8a1a001dad55b7c5b955a1f8a7be6b6b5442cb5ab876be4b9158e44fab1"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ID={0x71, 0x3, "4c4fbb74ddb547c63248d82058b114ad8836ca577a2faad348f0ac71ae757050669fc9aa19fa33a44434ceb69f8a71a9a9e58f07e0fa6e4e23298f86b2d329d45081fe850ea2a32b9ef5ee784407d257a467a2084374d83d4cb846db2bdb22b2748f9bb7f6e8ef3b6112981af2"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000000}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x1}, 0x20004841) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x38, r3, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SSID={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008890}, 0x4040840) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, 0x9, 0x6, 0x0, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x148}, 0xc, &(0x7f0000001080)={&(0x7f0000000d80)={0x2fc, r3, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_BSS_BASIC_RATES={0x1d, 0x24, [{0x2}, {0x6}, {0x3, 0x1}, {0x36, 0x1}, {0x5, 0x1}, {0x1b}, {0x3, 0x1}, {0x18}, {0x18, 0x1}, {0x9, 0x1}, {0x30}, {0x30, 0x1}, {0x30, 0x1}, {0x36, 0x1}, {0x6, 0x1}, {0x6c, 0x1}, {0x2}, {0x24, 0x1}, {0x6, 0x1}, {0x27, 0x1}, {0x6c, 0x1}, {0x9}, {0x12, 0x1}, {0x9, 0x1}, {0x1, 0x1}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x2a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x6}, {}, {0x6, 0x1}, {0x5, 0x9}, {0x6, 0x5}, {0x1, 0xa}, {0x3, 0xa}, {0x5, 0x5}, {0x0, 0x8}, {0x5, 0x2}, {0x7, 0x8}, {0x6}, {0x6, 0x9}, {0x0, 0x7}, {0x2, 0x1}, {0x5, 0x5}, {0x7, 0x4}, {0x0, 0x1}, {0x4, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x0, 0x9}, {0x5, 0x5}, {0x0, 0x9}, {0x7, 0x7}, {0x0, 0x9}, {0x7, 0x8}, {0x3, 0x8}, {0x2, 0x7}, {0x3, 0x1}, {0x5, 0x9}, {0x5, 0x9}, {0x7, 0x7}, {0x4}, {0x2, 0x7}, {0x7, 0x4}, {0x4, 0x7}, {0x3, 0x6}, {0x0, 0x9}, {0x2, 0x2}, {0x0, 0x3}, {0x4, 0x7}, {0x7, 0xa}, {0x4, 0x3}, {0x1, 0x4}, {0x4, 0x4}, {0x3, 0x4}, {0x0, 0x7}, {0x4, 0x2}, {0x6, 0x1}, {0x2, 0x3}]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x7, 0x5}, {0x2, 0x2}, {0x4, 0xa}, {0x0, 0x6}, {0x6, 0x6}, {0x2, 0x5}, {0x5, 0x2}, {0x1, 0x3}, {0x5, 0xa}, {0x6, 0x5}, {}, {0x5, 0x9}, {0x4}, {0x4}, {0x4, 0x4}, {0x1}, {0x4, 0xa}, {0x2, 0x7}, {0x3, 0x3}, {0x0, 0x2}, {0x6, 0x7}, {0x0, 0x1}, {0x2}, {0x2, 0x2}, {0x4, 0x1}, {0x3, 0x5}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x4, 0x60, 0x6c]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x6}, {0x4, 0x2}, {0x1, 0x7}, {0x1, 0x3}, {0x3, 0x9}, {0x5, 0x3}, {0x1, 0x7}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x5}, {0x2, 0xa}, {0x2, 0x8}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x3}, {0x4, 0x8}, {0x4, 0x7}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x8}, {0x6, 0x6}, {0x6, 0x2}, {0x2, 0x6}, {0x0, 0x3}, {0x1, 0x7}, {0x1, 0x3}, {0x7, 0x2}, {0x0, 0x6}, {0x1, 0x6}, {0x5, 0x7}, {0x1, 0x7}, {0x7, 0x4}, {0x7, 0x6}, {0x1, 0x6}, {0x4, 0xa}, {0x3, 0x6}, {0x7}, {0x1}, {0x2, 0x2}, {0x2, 0x2}, {0x4, 0x3}, {0x2, 0x2}, {0x1, 0x5}, {0x1, 0x1}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x3}, {0x7, 0xa}, {0x1, 0x4}, {0x4, 0x3}, {0x7, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x183, 0x6, 0x3ff, 0x5c2e, 0x1, 0x6, 0x1]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x4, 0x3}, {0x0, 0xa}, {0x6}, {0x5, 0x8}, {0x6, 0xa}, {0x0, 0x5}, {0x7, 0x2}, {0x6, 0x3}, {0x7, 0x4}, {0x6, 0x2}, {0x3}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x3}, {0x3}, {0x3, 0x2}, {0x1, 0x3}, {0x1, 0x8}, {0x7}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x5}, {0x0, 0x4}, {0x4, 0xa}, {0x2, 0x2}, {0x7, 0x3}, {0x1}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0x50, 0x1, 0xffff, 0x4, 0xffff, 0x6]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0x8}, {0x1, 0x9}, {0x5, 0x6}, {0x4, 0x5}, {0x7, 0x3}, {0x6}, {0x1, 0xa}, {0x0, 0x4}, {0x6, 0x6}, {0x1, 0x6}, {0x5, 0x7}, {0x0, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x4, 0xa}, {0x4, 0x1}, {0x0, 0x2}, {0x4}, {0x7, 0x9}, {0x3, 0x9}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0xfffe, 0x81, 0xfbff, 0x3, 0x8, 0x7f61]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8000, 0x226, 0x1, 0x4, 0x6, 0x7ff, 0xfff7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x60, 0x6, 0x2, 0x12, 0x6c, 0xc, 0x2e, 0x3, 0x30, 0x9, 0x24, 0x1b, 0x6c, 0x9, 0x6c, 0x2, 0x1, 0x30, 0x36, 0x4, 0x9, 0x0, 0x11, 0x6c, 0x2, 0x60, 0x6c, 0x3, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x26e4, 0x1, 0x3, 0x2, 0x4, 0x100, 0x9, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0xf800, 0x4, 0x85d, 0x4, 0x100, 0x100]}}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x7, 0x7}, {0x2, 0x7}, {}, {0x4, 0x1}, {0x2, 0x6}, {0x7, 0x8}, {0x6, 0x2}, {0x7, 0x6}, {0x2, 0x7}, {0x0, 0x4}, {0x7, 0x8}, {0x5, 0x9}, {0x5, 0xa}, {0x4, 0xa}, {0x2, 0x8}, {0x6, 0x9}, {0x1, 0x4}, {0x6, 0xa}, {0x5, 0x6}, {0x3, 0xa}, {0x0, 0x2}, {0x4, 0x1}, {0x7, 0x5}, {0x2, 0x3}, {0x2, 0x8}, {0x2}, {0x7}, {0x1, 0x8}, {0x1, 0x1}, {0x5, 0x9}, {0x4, 0xa}, {0x0, 0x4}, {0x4, 0x6}, {0x2, 0x3}, {0x3, 0x4}, {0x5, 0x2}, {0x2, 0x6}, {0x5, 0x6}, {0x6, 0x7}, {0x1, 0x2}, {0x7, 0x8}, {0x7, 0x4}, {0x4, 0x4}, {0x4, 0x3}, {0x4, 0x5}, {0x0, 0x7}, {0x6, 0x2}, {0x3, 0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x3}, {0x4, 0x8}, {0x1, 0x4}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x2}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x4}, {0x0, 0x9}, {0x1, 0x3}, {0x6, 0x9}, {0x2, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x1, 0x3b9, 0x9, 0x1000, 0x7, 0xf000, 0xc]}}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x18, 0x1b, 0x60, 0xc, 0x16, 0x1, 0xc444a5360bb3b3f6, 0x16, 0x18, 0x9, 0x48, 0x48]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x18, 0x6c, 0xc, 0x4, 0x3, 0x48, 0x30, 0x5]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x3, 0x24, 0x36, 0x48, 0x16, 0x1b, 0x3, 0x18, 0x12, 0x24, 0x1, 0x18, 0x48, 0xb, 0xc, 0x36, 0x36, 0x5]}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000001140), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001180)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r6, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, r7, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x40, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x801) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000013c0), r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x4c, r9, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe09}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0xbc, 0x9, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xfffffffffffff3df}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'pimreg\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x80}}]}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xe989}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xdb4}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x800}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x20000044) 662.049394ms ago: executing program 0 (id=7060): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190040000800000000000000ffff0800040000000000000000", 0x39}], 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000600)=ANY=[], 0x342) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000200)={'gretap0\x00', 0x0}) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x104a8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendto(r3, 0x0, 0x4a, 0x468fd, &(0x7f00000004c0)=@l2={0x1f, 0x3, @none, 0x9, 0x1}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000340)={0x48, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x1e, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7fff}, @device_a, @device_b, @random="2b8a0e7ea867", {0xb}, "", @value={0x0, 0x1, 0x3, 0x1, 0x5}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xcc}, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r6, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001240)=""/249, 0xf9}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x8, &(0x7f00000000c0)=""/46, 0x2e, 0xe88}, 0x8}], 0x32, 0x10122, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="f9fd33728a6e"}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xff, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000080)=0x8) 626.881158ms ago: executing program 1 (id=7061): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x9, 0x203, 0xd83, 0x1000}, 0x10) (async) sendto$inet6(r0, &(0x7f0000000280)='0', 0xfffd, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x15}, 0x4}}}, 0x84) 425.246752ms ago: executing program 2 (id=7062): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, &(0x7f00000003c0)={{0x8, @multicast2, 0x4e21, 0x1, 'nq\x00', 0x28, 0x3a6, 0x3}, {@private=0xa010300, 0xfffd, 0x2000, 0x8, 0x8, 0x2000050}}, 0x44) (async) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="170000001e000100000000000000000007"], 0x28}}, 0x0) 373.691619ms ago: executing program 3 (id=7063): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x62, 0x8}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x2, 0x3, 0x9}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, r0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002f00090028bd30000000000005000006050011"], 0x1c}, 0x1, 0x0, 0x0, 0xc005}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000ac0)={0x0, @in6={{0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd88}}, 0x8001, 0x5, 0x2, 0x96, 0x65, 0xd88, 0xc}, &(0x7f0000000b80)=0x9c) vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000280)}, {&(0x7f00000002c0)="4c8869b3a5febe4925c71d65913722e324566e18dc31aad6eccb045103c6009090f389c1c92af293cc8c3d38ecf9c5fe02232f6bb290fe438a9c4138c781cecd66c167dd2d21ba07c0dd72ca8264c57e4fd47f139fde13954ce92177ffb63baa842982377d4590ee2a053e6c7a683b2769485366e75d9798c739b5967b61188857525ec7e0364d42ddd824b9fb1a3fce8deb710b765ab6bfb68824e1b6ecf1a6c81f74a21cb1c604d0318ca7f85fab8f9b15fbdd0e80ee2355ed0a8d6b2dc55a834628374104bc8d61f93407736e4c729a005e7a6c3011e773", 0xd9}], 0x2, 0xd) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x44, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x5}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x8, 0x6}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000200)={r10, 0x8, 0x7, 0x0, 0xd, 0xfffffffd}, 0x14) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x62, 0x8}, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x2, 0x3, 0x9}}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, r0}, 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) socket$rds(0x15, 0x5, 0x0) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002f00090028bd30000000000005000006050011"], 0x1c}, 0x1, 0x0, 0x0, 0xc005}, 0x10) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000ac0)={0x0, @in6={{0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd88}}, 0x8001, 0x5, 0x2, 0x96, 0x65, 0xd88, 0xc}, &(0x7f0000000b80)=0x9c) (async) vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000280)}, {&(0x7f00000002c0)="4c8869b3a5febe4925c71d65913722e324566e18dc31aad6eccb045103c6009090f389c1c92af293cc8c3d38ecf9c5fe02232f6bb290fe438a9c4138c781cecd66c167dd2d21ba07c0dd72ca8264c57e4fd47f139fde13954ce92177ffb63baa842982377d4590ee2a053e6c7a683b2769485366e75d9798c739b5967b61188857525ec7e0364d42ddd824b9fb1a3fce8deb710b765ab6bfb68824e1b6ecf1a6c81f74a21cb1c604d0318ca7f85fab8f9b15fbdd0e80ee2355ed0a8d6b2dc55a834628374104bc8d61f93407736e4c729a005e7a6c3011e773", 0xd9}], 0x2, 0xd) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x44, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x5}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x8, 0x6}, &(0x7f00000001c0)=0x8) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000200)={r10, 0x8, 0x7, 0x0, 0xd, 0xfffffffd}, 0x14) (async) 337.779405ms ago: executing program 1 (id=7064): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89b1, &(0x7f0000001940)={'macvlan0\x00', @ifru_names='rose0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0xf}}, @ptr={0x6, 0x0, 0x0, 0x2, 0x3}, @func={0x6}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x50}, 0x28) 245.738126ms ago: executing program 2 (id=7065): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3}}, @const={0x7, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x2e, 0x2e, 0x30, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000240)=""/199, 0x44, 0xc7, 0x1, 0xedc, 0x10000}, 0x28) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x7, r3, 0x41}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)="74949ebb27e184548454f16a8d898482", 0x10}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800e5ffffffff00950000000000000000"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x4a, '\x00', r3, @netfilter, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r4, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 162.504492ms ago: executing program 5 (id=7066): sendmsg$inet(0xffffffffffffffff, 0x0, 0x8800) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r4, 0xff09, 0x110c2300fe) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x10000) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, 0x0, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r9, @ANYBLOB="040013000a0006000802110000010000060010008005000006001200000000000500"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x2, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) socket$packet(0x11, 0x3, 0x300) 0s ago: executing program 1 (id=7067): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0xfffffffe}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newsa={0xf8, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@dev, 0x0, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_getnexthop={0x50, 0x6a, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}, @NHA_MASTER={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_FDB={0x4}, @NHA_ID={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008014}, 0x8000) kernel console output (not intermixed with test programs): slaves [ 741.889151][T27140] __nla_validate_parse: 2 callbacks suppressed [ 741.889175][T27140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5601'. [ 741.931551][T24837] bond2: (slave bond0): failed to get link speed/duplex [ 742.043949][T24837] bond2: (slave bond0): failed to get link speed/duplex [ 742.149375][T10895] bond2: (slave bond0): failed to get link speed/duplex [ 742.259353][T10918] bond2: (slave bond0): failed to get link speed/duplex [ 742.333786][T27155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5603'. [ 742.333815][T27155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5603'. [ 742.363106][T27159] ªªªªª»: renamed from dummy0 (while UP) [ 743.057411][T27178] ieee802154 phy0 wpan0: encryption failed: -22 [ 743.687878][T27195] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5615'. [ 744.814899][T27226] v: renamed from veth0_vlan (while UP) [ 745.310832][T27242] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5629'. [ 745.310864][T27242] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5629'. [ 745.311207][T27240] x_tables: unsorted underflow at hook 1 [ 745.335118][T27244] netlink: 'syz.2.5628': attribute type 4 has an invalid length. [ 745.335153][T27244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5628'. [ 745.389603][T27244] netlink: 'syz.2.5628': attribute type 8 has an invalid length. [ 745.563551][T27253] ieee802154 phy0 wpan0: encryption failed: -22 [ 745.567499][T27252] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.107203][T24837] net_ratelimit: 34 callbacks suppressed [ 746.107229][T24837] bond2: (slave bond0): failed to get link speed/duplex [ 746.218008][T10913] bond2: (slave bond0): failed to get link speed/duplex [ 746.253886][T27272] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 746.325898][T24840] bond2: (slave bond0): failed to get link speed/duplex [ 746.437839][T24837] bond2: (slave bond0): failed to get link speed/duplex [ 746.605476][T24840] bond2: (slave bond0): failed to get link speed/duplex [ 746.716393][T10913] bond2: (slave bond0): failed to get link speed/duplex [ 746.787993][T27292] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5647'. [ 746.788083][T27292] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 746.816695][T27289] pimreg3: entered allmulticast mode [ 746.837193][T24840] bond2: (slave bond0): failed to get link speed/duplex [ 746.949607][T10916] bond2: (slave bond0): failed to get link speed/duplex [ 746.952037][T27298] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5648'. [ 747.059013][T10914] bond2: (slave bond0): failed to get link speed/duplex [ 747.746262][T27314] syzkaller0: left promiscuous mode [ 747.746288][T27314] syzkaller0: left allmulticast mode [ 747.749754][T27314] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 747.874111][T27319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5657'. [ 747.919249][T27314] tipc: Enabled bearer , priority 0 [ 748.340544][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.872727][T27340] batadv_slave_0: entered promiscuous mode [ 749.479965][T27339] batadv_slave_0: left promiscuous mode [ 749.627354][T27366] bond0: entered promiscuous mode [ 749.627446][T27366] bridge0: entered promiscuous mode [ 749.660254][T27366] bond0: left promiscuous mode [ 749.660319][T27366] bridge0: left promiscuous mode [ 749.744619][T27370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5674'. [ 749.757801][T27367] bond0: entered promiscuous mode [ 749.757826][T27367] bridge0: entered promiscuous mode [ 749.758322][T27367] bond0: left promiscuous mode [ 749.758338][T27367] bridge0: left promiscuous mode [ 749.968319][T27375] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5676'. [ 749.985122][T27375] netlink: 'syz.2.5676': attribute type 1 has an invalid length. [ 750.300976][T27384] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 751.147934][T10914] net_ratelimit: 30 callbacks suppressed [ 751.147957][T10914] bond2: (slave bond0): failed to get link speed/duplex [ 751.258238][T10913] bond2: (slave bond0): failed to get link speed/duplex [ 751.377263][T10913] bond2: (slave bond0): failed to get link speed/duplex [ 751.485552][T10915] bond2: (slave bond0): failed to get link speed/duplex [ 751.595751][T10915] bond2: (slave bond0): failed to get link speed/duplex [ 751.818141][T24837] bond2: (slave bond0): failed to get link speed/duplex [ 751.915356][T27434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5697'. [ 751.927020][T10914] bond2: (slave bond0): failed to get link speed/duplex [ 752.037273][T10915] bond2: (slave bond0): failed to get link speed/duplex [ 752.145719][T10914] bond2: (slave bond0): failed to get link speed/duplex [ 752.257361][T10914] bond2: (slave bond0): failed to get link speed/duplex [ 752.853690][T27458] netlink: 'syz.5.5706': attribute type 30 has an invalid length. [ 752.864719][T27460] netlink: 'syz.0.5707': attribute type 10 has an invalid length. [ 753.006424][T27463] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5708'. [ 753.011858][T27463] netlink: 'syz.3.5708': attribute type 1 has an invalid length. [ 753.205955][T27468] netlink: 'syz.1.5710': attribute type 21 has an invalid length. [ 753.510186][T27468] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 753.514256][T27468] bond3 (unregistering): Released all slaves [ 753.606372][T27477] tipc: Enabling of bearer rejected, failed to enable media [ 754.317677][T27506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5722'. [ 754.436010][T27511] syzkaller1: entered promiscuous mode [ 754.436054][T27511] syzkaller1: entered allmulticast mode [ 754.444607][T27507] netlink: 'syz.5.5720': attribute type 12 has an invalid length. [ 754.519933][T27507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5720'. [ 754.521893][T27516] Unknown options in mask 4 [ 755.252934][T27542] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5731'. [ 755.253001][T27542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5731'. [ 755.253063][T27542] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5731'. [ 755.253101][T27542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5731'. [ 755.253161][T27542] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5731'. [ 755.296223][T27545] netlink: 'syz.0.5733': attribute type 21 has an invalid length. [ 755.296285][T27545] netlink: 'syz.0.5733': attribute type 6 has an invalid length. [ 755.296298][T27545] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5733'. [ 755.298823][T27545] netlink: 'syz.0.5733': attribute type 21 has an invalid length. [ 755.298942][T27545] netlink: 'syz.0.5733': attribute type 6 has an invalid length. [ 755.298956][T27545] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5733'. [ 755.842207][T27561] netlink: 'syz.1.5736': attribute type 1 has an invalid length. [ 755.918026][T27561] 8021q: adding VLAN 0 to HW filter on device bond3 [ 756.113461][T27561] bond3: (slave geneve3): making interface the new active one [ 756.132795][T27561] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 756.323832][T27568] bond5: entered promiscuous mode [ 756.328048][T27568] 8021q: adding VLAN 0 to HW filter on device bond5 [ 756.356641][T27579] syzkaller1: entered promiscuous mode [ 756.356667][T27579] syzkaller1: entered allmulticast mode [ 756.367771][T10914] net_ratelimit: 22 callbacks suppressed [ 756.367793][T10914] bond2: (slave bond0): failed to get link speed/duplex [ 756.477637][T10914] bond2: (slave bond0): failed to get link speed/duplex [ 756.586516][T10914] bond2: (slave bond0): failed to get link speed/duplex [ 756.696612][T10914] bond2: (slave bond0): failed to get link speed/duplex [ 756.805492][T10917] bond2: (slave bond0): failed to get link speed/duplex [ 757.177177][T10915] bond2: (slave bond0): failed to get link speed/duplex [ 757.204231][T27608] geneve2: entered promiscuous mode [ 757.229406][T10915] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 32807 - 0 [ 757.229876][T10915] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 32807 - 0 [ 757.230031][T10915] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 32807 - 0 [ 757.230777][T10915] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 32807 - 0 [ 757.302035][T10915] bond2: (slave bond0): failed to get link speed/duplex [ 757.407819][T10917] bond2: (slave bond0): failed to get link speed/duplex [ 757.515814][T10913] bond2: (slave bond0): failed to get link speed/duplex [ 757.629020][T10916] bond2: (slave bond0): failed to get link speed/duplex [ 758.350647][T27645] tipc: Enabling of bearer rejected, failed to enable media [ 758.778710][T27653] siw: device registration error -23 [ 758.879135][T27662] validate_nla: 5 callbacks suppressed [ 758.879159][T27662] netlink: 'syz.2.5769': attribute type 5 has an invalid length. [ 759.086646][T27667] tipc: Enabling of bearer rejected, already enabled [ 759.436384][T27678] bond6: option min_links: invalid value (18446744073709551614) [ 759.436453][T27678] bond6: option min_links: allowed values 0 - 2147483647 [ 759.513431][T27678] bond6 (unregistering): Released all slaves [ 759.829685][T27692] __nla_validate_parse: 11 callbacks suppressed [ 759.829746][T27692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5780'. [ 759.984775][T27701] xt_hashlimit: size too large, truncated to 1048576 [ 760.030322][T27698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5782'. [ 760.054216][T27702] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5783'. [ 760.060059][T27702] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5783'. [ 760.074943][T27702] netlink: 'syz.5.5783': attribute type 32 has an invalid length. [ 760.074966][T27702] netlink: 500 bytes leftover after parsing attributes in process `syz.5.5783'. [ 760.220170][T27710] xt_hashlimit: size too large, truncated to 1048576 [ 760.254419][T27711] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5783'. [ 760.293824][T27718] netlink: 548 bytes leftover after parsing attributes in process `syz.5.5783'. [ 760.997865][T27726] netlink: 'syz.1.5789': attribute type 49 has an invalid length. [ 761.301769][T27747] syzkaller0: entered promiscuous mode [ 761.301795][T27747] syzkaller0: entered allmulticast mode [ 761.508402][T10916] net_ratelimit: 29 callbacks suppressed [ 761.508438][T10916] bond2: (slave bond0): failed to get link speed/duplex [ 761.509870][T27740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5791'. [ 761.591008][T27756] netlink: 'syz.5.5796': attribute type 2 has an invalid length. [ 761.767777][T10916] bond2: (slave bond0): failed to get link speed/duplex [ 761.880718][T24837] bond2: (slave bond0): failed to get link speed/duplex [ 761.988783][T24837] bond2: (slave bond0): failed to get link speed/duplex [ 762.102199][T10915] bond2: (slave bond0): failed to get link speed/duplex [ 762.246577][T10913] bond2: (slave bond0): failed to get link speed/duplex [ 762.278802][T27776] netlink: 'syz.3.5801': attribute type 10 has an invalid length. [ 762.278869][T27776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5801'. [ 762.356056][T10913] bond2: (slave bond0): failed to get link speed/duplex [ 762.467017][T10916] bond2: (slave bond0): failed to get link speed/duplex [ 762.504321][T27785] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5803'. [ 762.575474][T10913] bond2: (slave bond0): failed to get link speed/duplex [ 762.697110][T10914] bond2: (slave bond0): failed to get link speed/duplex [ 762.707627][T10915] nci: nci_ntf_packet: unknown ntf opcode 0x427 [ 762.856585][T27792] bond4: option xmit_hash_policy: invalid value (64) [ 762.890787][T27792] bond4 (unregistering): Released all slaves [ 763.314601][T27808] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20000 [ 765.463717][T27785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 766.283868][T27871] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20004 [ 766.343787][T27870] syzkaller1: entered promiscuous mode [ 766.343814][T27870] syzkaller1: entered allmulticast mode [ 766.411962][T27870] __nla_validate_parse: 1 callbacks suppressed [ 766.411986][T27870] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5820'. [ 766.549811][T27876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5823'. [ 766.595435][T10916] net_ratelimit: 33 callbacks suppressed [ 766.595459][T10916] bond2: (slave bond0): failed to get link speed/duplex [ 766.706294][T10916] bond2: (slave bond0): failed to get link speed/duplex [ 766.815591][T10916] bond2: (slave bond0): failed to get link speed/duplex [ 766.887667][T27882] batadv_slave_0: Caught tx_queue_len zero misconfig [ 766.926656][T10914] bond2: (slave bond0): failed to get link speed/duplex [ 766.944839][T27885] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5826'. [ 767.035544][T10917] bond2: (slave bond0): failed to get link speed/duplex [ 767.111992][T27894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5828'. [ 767.146482][T10914] bond2: (slave bond0): failed to get link speed/duplex [ 767.255423][T10917] bond2: (slave bond0): failed to get link speed/duplex [ 767.366903][T10917] bond2: (slave bond0): failed to get link speed/duplex [ 767.475888][T10917] bond2: (slave bond0): failed to get link speed/duplex [ 767.586363][T10915] bond2: (slave bond0): failed to get link speed/duplex [ 768.553190][T27931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5841'. [ 768.821138][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 768.878824][T27941] netlink: 'syz.3.5846': attribute type 1 has an invalid length. [ 769.385995][T27960] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5851'. [ 769.884108][T27975] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5857'. [ 769.884137][T27975] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5857'. [ 770.059454][T27980] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5856'. [ 770.061484][T27983] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5856'. [ 770.864127][T27999] veth7: entered promiscuous mode [ 770.864152][T27999] veth7: entered allmulticast mode [ 771.239032][T28022] tipc: Enabling of bearer rejected, failed to enable media [ 771.638613][T28034] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.638655][T28034] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.660506][T28041] net_ratelimit: 24 callbacks suppressed [ 771.660528][T28041] openvswitch: netlink: IP tunnel dst address not specified [ 771.660556][T28041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 771.712444][T28038] __nla_validate_parse: 2 callbacks suppressed [ 771.712468][T28038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5869'. [ 771.712485][T28038] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 771.746367][T28020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5866'. [ 771.748547][T10917] bond2: (slave bond0): failed to get link speed/duplex [ 771.825960][T28034] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.826002][T28034] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.133159][T28034] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.133210][T28034] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.207729][T10914] bond2: (slave bond0): failed to get link speed/duplex [ 772.342121][T28034] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.342163][T28034] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.425712][T24837] bond2: (slave bond0): failed to get link speed/duplex [ 772.538609][T10892] bond2: (slave bond0): failed to get link speed/duplex [ 772.761436][T28061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5877'. [ 772.915770][T10913] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.915810][T10913] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.915887][T10913] bond2: (slave bond0): failed to get link speed/duplex [ 772.996405][T10914] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.996446][T10914] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.997447][T10914] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.997476][T10914] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.016869][T28063] syzkaller0: entered promiscuous mode [ 773.016896][T28063] syzkaller0: entered allmulticast mode [ 773.036877][T10892] bond2: (slave bond0): failed to get link speed/duplex [ 773.036948][T10914] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.036975][T10914] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.166926][T28070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5879'. [ 773.410882][T28075] netlink: 'syz.1.5881': attribute type 39 has an invalid length. [ 773.412845][T28076] netlink: 'syz.1.5881': attribute type 39 has an invalid length. [ 773.600980][T28083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5882'. [ 773.627437][T28082] netlink: 'syz.2.5883': attribute type 1 has an invalid length. [ 773.654098][T10913] smc: removing ib device sýz2 [ 773.893708][T12225] wg1 speed is unknown, defaulting to 1000 [ 773.893777][T12225] sýz2: Port: 1 Link DOWN [ 773.911032][T10913] smbdirect: ib_dev[sýz2] removed [ 774.387836][T28084] bond6: (slave gretap3): making interface the new active one [ 774.422749][T28084] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 774.441171][T24837] bond2: (slave bond0): failed to get link speed/duplex [ 774.914770][T28102] x_tables: duplicate underflow at hook 2 [ 775.214434][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 775.237106][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 775.245682][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 775.260664][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 775.275939][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 776.610655][T28139] bridge0: port 1(ipvlan2) entered blocking state [ 776.610871][T28139] bridge0: port 1(ipvlan2) entered disabled state [ 776.611133][T28139] ipvlan2: entered allmulticast mode [ 776.611152][T28139] bridge0: entered allmulticast mode [ 776.649331][T28139] ipvlan2: left allmulticast mode [ 776.649357][T28139] bridge0: left allmulticast mode [ 776.765849][T24840] net_ratelimit: 17 callbacks suppressed [ 776.765899][T24840] bond2: (slave bond0): failed to get link speed/duplex [ 776.873960][T28144] batadv_slave_0: entered promiscuous mode [ 776.882665][T24840] bond2: (slave bond0): failed to get link speed/duplex [ 776.909040][T28144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5901'. [ 777.365975][T24840] bond2: (slave bond0): failed to get link speed/duplex [ 777.375500][T21024] Bluetooth: hci3: command tx timeout [ 778.157087][T10892] bond2: (slave bond0): failed to get link speed/duplex [ 778.283117][T10916] bond2: (slave bond0): failed to get link speed/duplex [ 778.387875][T24837] bond2: (slave bond0): failed to get link speed/duplex [ 778.499427][T24837] bond2: (slave bond0): failed to get link speed/duplex [ 778.609724][T24837] bond2: (slave bond0): failed to get link speed/duplex [ 778.716216][T10892] bond2: (slave bond0): failed to get link speed/duplex [ 778.865576][T10892] bond2: (slave bond0): failed to get link speed/duplex [ 779.455782][T21024] Bluetooth: hci3: command tx timeout [ 779.753246][T28187] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5910'. [ 780.303394][T28104] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.303656][T28104] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.303830][T28104] bridge_slave_0: entered allmulticast mode [ 780.327411][T28104] bridge_slave_0: entered promiscuous mode [ 780.337792][T28104] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.337969][T28104] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.338201][T28104] bridge_slave_1: entered allmulticast mode [ 780.340200][T28104] bridge_slave_1: entered promiscuous mode [ 780.416384][T28104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.420095][T28104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.477892][T28104] team0: Port device team_slave_0 added [ 780.481143][T28104] team0: Port device team_slave_1 added [ 780.533119][T28104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.533139][T28104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.533164][T28104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.568689][T28104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.568744][T28104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.570125][T28104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.882039][T28104] hsr_slave_0: entered promiscuous mode [ 780.883576][T28104] hsr_slave_1: entered promiscuous mode [ 780.884478][T28104] debugfs: 'hsr0' already exists in 'hsr' [ 780.884511][T28104] Cannot create hsr debugfs directory [ 781.013746][T28201] x_tables: duplicate underflow at hook 3 [ 781.536801][T21024] Bluetooth: hci3: command tx timeout [ 782.659937][T28239] net_ratelimit: 10 callbacks suppressed [ 782.659963][T28239] ip_tables: iptables: counters copy to user failed while replacing table [ 782.810348][T28104] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.871325][T28244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5922'. [ 782.871392][T28244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5922'. [ 782.940364][T10916] bond2: (slave bond0): failed to get link speed/duplex [ 783.054359][T24840] bond2: (slave bond0): failed to get link speed/duplex [ 783.388811][T28104] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.460404][T28258] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5926'. [ 783.476094][T24837] bond2: (slave bond0): failed to get link speed/duplex [ 783.497800][T28257] xt_hashlimit: size too large, truncated to 1048576 [ 783.585893][T10914] bond2: (slave bond0): failed to get link speed/duplex [ 783.599482][T28262] xt_hashlimit: size too large, truncated to 1048576 [ 783.615961][T21024] Bluetooth: hci3: command tx timeout [ 783.643329][T28266] netlink: 'syz.0.5927': attribute type 1 has an invalid length. [ 784.025559][T28104] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.167559][T28266] 8021q: adding VLAN 0 to HW filter on device bond6 [ 784.210398][T28275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5928'. [ 784.210427][T28275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5928'. [ 784.211267][T28275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5928'. [ 784.211287][T28275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5928'. [ 784.234851][T10918] bond2: (slave bond0): failed to get link speed/duplex [ 784.335740][T10915] bond2: (slave bond0): failed to get link speed/duplex [ 785.138177][T10913] bond2: (slave bond0): failed to get link speed/duplex [ 785.328729][T10916] bond2: (slave bond0): failed to get link speed/duplex [ 785.344448][T28104] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 785.378684][T28104] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 785.379676][T28104] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 785.409605][T28104] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 785.441504][T28305] FAULT_INJECTION: forcing a failure. [ 785.441504][T28305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.441541][T28305] CPU: 1 UID: 0 PID: 28305 Comm: syz.0.5937 Not tainted syzkaller #0 PREEMPT(full) [ 785.441566][T28305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 785.441579][T28305] Call Trace: [ 785.441589][T28305] [ 785.441600][T28305] dump_stack_lvl+0xe8/0x150 [ 785.441654][T28305] should_fail_ex+0x410/0x560 [ 785.441688][T28305] _copy_to_user+0x31/0xb0 [ 785.441719][T28305] simple_read_from_buffer+0xe1/0x170 [ 785.441757][T28305] proc_fail_nth_read+0x1bb/0x230 [ 785.441814][T28305] ? common_file_perm+0x20e/0x2b0 [ 785.441847][T28305] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 785.441883][T28305] ? rw_verify_area+0x24a/0x4c0 [ 785.441917][T28305] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 785.441947][T28305] vfs_read+0x213/0xa80 [ 785.441983][T28305] ? __pfx___mutex_lock+0x10/0x10 [ 785.442013][T28305] ? __pfx_vfs_read+0x10/0x10 [ 785.442045][T28305] ? __fget_files+0x2a/0x420 [ 785.442078][T28305] ? __fget_files+0x3a2/0x420 [ 785.442103][T28305] ? __fget_files+0x2a/0x420 [ 785.442140][T28305] ksys_read+0x150/0x270 [ 785.442173][T28305] ? __pfx_ksys_read+0x10/0x10 [ 785.442214][T28305] do_syscall_64+0x166/0x520 [ 785.442237][T28305] ? trace_irq_disable+0x3b/0x140 [ 785.442260][T28305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.442284][T28305] ? clear_bhb_loop+0x70/0xc0 [ 785.442310][T28305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.442335][T28305] RIP: 0033:0x7f95f675e98e [ 785.442356][T28305] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 785.442373][T28305] RSP: 002b:00007f95f7600fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 785.442398][T28305] RAX: ffffffffffffffda RBX: 00007f95f76016c0 RCX: 00007f95f675e98e [ 785.442413][T28305] RDX: 000000000000000f RSI: 00007f95f76010a0 RDI: 0000000000000004 [ 785.442427][T28305] RBP: 00007f95f7601090 R08: 0000000000000000 R09: 0000000000000000 [ 785.442441][T28305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.442454][T28305] R13: 00007f95f6a26038 R14: 00007f95f6a25fa0 R15: 00007fff3e51fd18 [ 785.442490][T28305] [ 785.508930][T10918] bond2: (slave bond0): failed to get link speed/duplex [ 785.562938][T28104] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 785.710529][T28313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5938'. [ 785.711017][T28104] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 785.712048][T28104] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 785.749659][T28104] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 786.409753][T28104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.440466][T28104] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.469847][T24837] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.470117][T24837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.500602][T28337] ovs-system: entered promiscuous mode [ 786.564584][T10913] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.564873][T10913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.641916][T28338] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5943'. [ 786.782724][T28347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5945'. [ 787.676250][T10918] net_ratelimit: 8 callbacks suppressed [ 787.676301][T10918] bond2: (slave bond0): failed to get link speed/duplex [ 787.808696][T24840] bond2: (slave bond0): failed to get link speed/duplex [ 787.938521][T10913] bond2: (slave bond0): failed to get link speed/duplex [ 788.294587][T10892] bond2: (slave bond0): failed to get link speed/duplex [ 788.399970][T28379] syzkaller1: entered promiscuous mode [ 788.400045][T28379] syzkaller1: entered allmulticast mode [ 788.476954][T24837] bond2: (slave bond0): failed to get link speed/duplex [ 788.819949][T10918] bond2: (slave bond0): failed to get link speed/duplex [ 788.926871][T24837] bond2: (slave bond0): failed to get link speed/duplex [ 788.985164][T28409] ip_tables: iptables: counters copy to user failed while replacing table [ 788.985673][T28408] ip_tables: iptables: counters copy to user failed while replacing table [ 788.988715][T28408] x_tables: duplicate underflow at hook 1 [ 789.037206][T10918] bond2: (slave bond0): failed to get link speed/duplex [ 789.188089][T28411] __nla_validate_parse: 1 callbacks suppressed [ 789.188113][T28411] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5965'. [ 789.372469][T28104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.648072][T28104] veth0_vlan: entered promiscuous mode [ 789.995766][T28104] veth1_vlan: entered promiscuous mode [ 790.548534][T28458] xt_hashlimit: size too large, truncated to 1048576 [ 790.874214][T28104] veth0_macvtap: entered promiscuous mode [ 790.909916][T28104] veth1_macvtap: entered promiscuous mode [ 791.054273][T28104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.156242][T28104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.265591][T24840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.265719][T24840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.265815][T24840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.265914][T24840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.728646][T28485] netlink: 'syz.1.5984': attribute type 21 has an invalid length. [ 791.759966][T28485] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5984'. [ 791.839961][T24837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.840023][T24837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.906352][T24837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.906384][T24837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.720210][T10916] net_ratelimit: 14 callbacks suppressed [ 792.720233][T10916] bond2: (slave bond0): failed to get link speed/duplex [ 792.835749][T10916] bond2: (slave bond0): failed to get link speed/duplex [ 793.026035][T24837] bond2: (slave bond0): failed to get link speed/duplex [ 793.198206][T10918] bond2: (slave bond0): failed to get link speed/duplex [ 793.312341][T24837] bond2: (slave bond0): failed to get link speed/duplex [ 793.416853][T10913] bond2: (slave bond0): failed to get link speed/duplex [ 793.447131][T28543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5997'. [ 793.447158][T28543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5997'. [ 793.482428][T28544] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5996'. [ 793.548994][T10913] bond2: (slave bond0): failed to get link speed/duplex [ 793.601825][T28544] netlink: 538 bytes leftover after parsing attributes in process `syz.3.5996'. [ 793.715372][T10918] bond2: (slave bond0): failed to get link speed/duplex [ 793.817508][T28550] atomic_op ffff8880298781e0 conn xmit_atomic 0000000000000000 [ 794.120642][T10892] bond2: (slave bond0): failed to get link speed/duplex [ 794.345582][T10892] bond2: (slave bond0): failed to get link speed/duplex [ 794.596332][T28579] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6007'. [ 794.604030][T28579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6007'. [ 794.631495][T28584] netlink: 'syz.3.6007': attribute type 4 has an invalid length. [ 794.631558][T28584] netlink: 8183 bytes leftover after parsing attributes in process `syz.3.6007'. [ 794.662686][T28585] netlink: 'syz.1.6005': attribute type 2 has an invalid length. [ 794.679895][T28585] set match dimension is over the limit! [ 796.155347][T28526] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 796.873802][T28610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6014'. [ 797.306252][T28630] xt_hashlimit: size too large, truncated to 1048576 [ 797.791411][T28640] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6020'. [ 797.976527][T10913] net_ratelimit: 23 callbacks suppressed [ 797.976554][T10913] bond2: (slave bond0): failed to get link speed/duplex [ 798.090717][T10916] bond2: (slave bond0): failed to get link speed/duplex [ 798.205907][T10892] bond2: (slave bond0): failed to get link speed/duplex [ 798.317603][T10892] bond2: (slave bond0): failed to get link speed/duplex [ 798.431140][T10918] bond2: (slave bond0): failed to get link speed/duplex [ 798.536277][T10918] bond2: (slave bond0): failed to get link speed/duplex [ 798.574506][T28665] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6026'. [ 798.649330][T10913] bond2: (slave bond0): failed to get link speed/duplex [ 798.763429][T24837] bond2: (slave bond0): failed to get link speed/duplex [ 798.867264][T10917] bond2: (slave bond0): failed to get link speed/duplex [ 798.979928][T10913] bond2: (slave bond0): failed to get link speed/duplex [ 799.567811][T28699] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6037'. [ 799.567842][T28699] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6037'. [ 799.934872][T28710] netlink: 296 bytes leftover after parsing attributes in process `syz.1.6041'. [ 800.120855][T28722] netlink: 'syz.5.6040': attribute type 1 has an invalid length. [ 800.120883][T28722] netlink: 'syz.5.6040': attribute type 268 has an invalid length. [ 800.120899][T28722] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6040'. [ 800.393088][T28689] ieee802154 phy0 wpan0: encryption failed: -22 [ 801.094773][T28745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6045'. [ 801.570859][T28760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6049'. [ 801.651260][T28760] 8021q: adding VLAN 0 to HW filter on device bond7 [ 801.653503][T28760] bond0: (slave bond7): Enslaving as an active interface with an up link [ 802.067878][T28780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6056'. [ 802.221663][T28780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6056'. [ 803.001077][T10914] net_ratelimit: 31 callbacks suppressed [ 803.001102][T10914] bond2: (slave bond0): failed to get link speed/duplex [ 803.108371][T10918] bond2: (slave bond0): failed to get link speed/duplex [ 803.167489][T28811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6065'. [ 803.167529][T28811] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6065'. [ 803.508085][T10914] bond2: (slave bond0): failed to get link speed/duplex [ 803.638265][T10918] bond2: (slave bond0): failed to get link speed/duplex [ 803.731981][T28829] ±ÿª¨úrBº“€: renamed from lo (while UP) [ 803.760536][T10918] bond2: (slave bond0): failed to get link speed/duplex [ 803.808357][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 803.823013][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 803.836485][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 803.839904][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 803.842108][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 803.873847][T28829] batadv0: entered promiscuous mode [ 803.874970][T28829] macsec1: entered promiscuous mode [ 803.879950][T28829] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 803.934525][T28829] batadv0: left promiscuous mode [ 804.324633][T28844] IPVS: set_ctl: invalid protocol: 47 172.30.0.6:20001 [ 804.583618][T10914] bond2: (slave bond0): failed to get link speed/duplex [ 804.655986][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 804.686671][T10914] bond2: (slave bond0): failed to get link speed/duplex [ 804.731545][T28855] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6073'. [ 804.818165][T24840] bond2: (slave bond0): failed to get link speed/duplex [ 804.895002][T28856] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6072'. [ 804.979875][T10918] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 804.979918][T10918] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.017136][T10892] bond2: (slave bond0): failed to get link speed/duplex [ 805.087427][T28858] netlink: 'syz.2.6074': attribute type 21 has an invalid length. [ 805.087456][T28858] netlink: 'syz.2.6074': attribute type 22 has an invalid length. [ 805.087470][T28858] netlink: 'syz.2.6074': attribute type 23 has an invalid length. [ 805.087484][T28858] netlink: 'syz.2.6074': attribute type 25 has an invalid length. [ 805.087498][T28858] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6074'. [ 805.147837][T24837] bond2: (slave bond0): failed to get link speed/duplex [ 805.308826][T10918] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.308867][T10918] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.546229][T10918] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.546270][T10918] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.861953][T10918] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.861994][T10918] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.015699][T21024] Bluetooth: hci1: command tx timeout [ 806.049221][T28889] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6083'. [ 807.181482][T28903] erspan0: vlans aren't supported yet for dev_uc|mc_add() [ 807.210268][T10918] veth0: left allmulticast mode [ 807.210298][T10918] veth0: left promiscuous mode [ 807.210545][T10918] bridge0: port 1(veth0) entered disabled state [ 807.362912][T10918] erspan0: left allmulticast mode [ 807.362941][T10918] erspan0: left promiscuous mode [ 807.363185][T10918] bridge5: port 1(erspan0) entered disabled state [ 807.468398][T10918] pimreg: left allmulticast mode [ 808.099516][T21024] Bluetooth: hci1: command tx timeout [ 808.509745][T28947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6095'. [ 808.698790][T10918] bond3 (unregistering): (slave geneve3): Releasing active interface [ 808.833040][T10918] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 809.132857][T10918] bond2 (unregistering): (slave bond0): Releasing active interface [ 809.134639][T10918] bond0 (unregistering): Released all slaves [ 809.146191][T10918] bond1 (unregistering): Released all slaves [ 809.160008][T10918] bond2 (unregistering): Released all slaves [ 809.180372][T10918] bond3 (unregistering): Released all slaves [ 809.218313][T10918] bond4 (unregistering): Released all slaves [ 809.232202][T10918] bond5 (unregistering): Released all slaves [ 809.243803][T10918] bond6 (unregistering): Released all slaves [ 809.258257][T10918] bond7 (unregistering): Released all slaves [ 809.533513][T10918] : left promiscuous mode [ 809.726198][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 809.786852][T28962] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6097'. [ 809.788656][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.822988][T28959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6096'. [ 809.899154][T28968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6097'. [ 809.913898][T10918] ovs-system: left promiscuous mode [ 810.105917][T28963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6098'. [ 810.175857][T21024] Bluetooth: hci1: command tx timeout [ 810.283428][T10918] tipc: Disabling bearer [ 810.288514][T10918] tipc: Left network mode [ 811.362950][T10918] IPVS: stopping backup sync thread 17032 ... [ 811.984356][T29017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6109'. [ 812.274576][T21024] Bluetooth: hci1: command tx timeout [ 812.364992][T29026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6111'. [ 812.840925][T29036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6113'. [ 813.030111][T29036] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6113'. [ 813.414385][T29042] net_ratelimit: 10 callbacks suppressed [ 813.414411][T29042] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 813.414526][T29020] veth0: entered promiscuous mode [ 813.470869][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 813.780700][T10918] hsr_slave_0: left promiscuous mode [ 813.801258][T10918] hsr_slave_1: left promiscuous mode [ 813.914309][T10918] veth0_macvtap: left promiscuous mode [ 813.914415][T10918] veth0_vlan: left promiscuous mode [ 814.453367][T10918] team0 (unregistering): Port device vlan0 removed [ 814.992169][T29019] veth0: left promiscuous mode [ 814.993053][T29068] netlink: 404 bytes leftover after parsing attributes in process `syz.5.6118'. [ 814.993123][T29068] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6118'. [ 814.993219][T29068] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6118'. [ 814.993289][T29068] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6118'. [ 815.343278][T28830] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.343416][T28830] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.343614][T28830] bridge_slave_0: entered allmulticast mode [ 815.384747][T28830] bridge_slave_0: entered promiscuous mode [ 815.404337][T28830] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.404738][T28830] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.404952][T28830] bridge_slave_1: entered allmulticast mode [ 815.433467][T28830] bridge_slave_1: entered promiscuous mode [ 815.729645][T29086] netlink: 27 bytes leftover after parsing attributes in process `syz.5.6120'. [ 815.747657][T28830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.892924][T28830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.103924][T28830] team0: Port device team_slave_0 added [ 816.144339][T28830] team0: Port device team_slave_1 added [ 816.186471][T10918] IPVS: stop unused estimator thread 0... [ 816.519296][T28830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.519319][T28830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.519346][T28830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.588971][T28830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.595486][T28830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.595554][T28830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.741508][T29109] netlink: 'syz.5.6129': attribute type 39 has an invalid length. [ 816.835009][T29107] xt_l2tp: v2 sid > 0xffff: 1114112 [ 817.254302][T28830] hsr_slave_0: entered promiscuous mode [ 817.270689][T28830] hsr_slave_1: entered promiscuous mode [ 817.357204][T29130] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6132'. [ 817.682182][T29138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6134'. [ 817.682246][T29138] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 819.160166][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 819.512264][T29187] netlink: 11 bytes leftover after parsing attributes in process `syz.2.6144'. [ 819.961696][T29196] netlink: 'syz.3.6146': attribute type 1 has an invalid length. [ 820.048261][T29197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6146'. [ 820.151655][T29196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 820.225928][T29202] bond1: (slave bridge1): making interface the new active one [ 820.227402][T29202] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 820.376182][T10917] bridge_slave_1: left allmulticast mode [ 820.376251][T10917] bridge_slave_1: left promiscuous mode [ 820.376873][T10917] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.409451][T10917] bridge_slave_0: left allmulticast mode [ 820.409484][T10917] bridge_slave_0: left promiscuous mode [ 820.409724][T10917] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.645111][T10917] pimreg3: left allmulticast mode [ 820.954261][T29222] netlink: 'syz.3.6154': attribute type 1 has an invalid length. [ 821.258180][T10917] 0ªî{X¹¦ (unregistering): left promiscuous mode [ 821.502222][T10917] bond4 (unregistering): (slave bridge5): Releasing backup interface [ 821.502254][T10917] bridge5 (unregistering): left promiscuous mode [ 821.502275][T10917] bridge5 (unregistering): left allmulticast mode [ 821.583662][T10917] bond1 (unregistering): (slave .`): Releasing active interface [ 821.583690][T10917] bond1 (unregistering): (slave .`): the permanent HWaddr of slave - aa:aa:aa:aa:aa:17 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 821.621423][T10917] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 821.638953][T10917] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 821.655136][T10917] .` (unregistering): (slave macsec0): Releasing backup interface [ 821.656404][T10917] veth1_macvtap: left promiscuous mode [ 821.659387][T10917] .` (unregistering): (slave team0): Releasing backup interface [ 821.690715][T10917] .` (unregistering): Released all slaves [ 821.715723][T10917] bond1 (unregistering): (slave bond0): Releasing active interface [ 821.718594][T10917] bond1 (unregistering): Released all slaves [ 821.774306][T10917] bond0 (unregistering): (slave bond2): Releasing active interface [ 821.781881][T10917] bond0 (unregistering): Released all slaves [ 821.812325][T10917] bond2 (unregistering): Released all slaves [ 821.839498][T10917] bond3 (unregistering): Released all slaves [ 821.882316][T10917] bond4 (unregistering): Released all slaves [ 821.908391][T10917] bond5 (unregistering): Released all slaves [ 821.940077][T10917] bond6 (unregistering): Released all slaves [ 821.962174][T10917] bond7 (unregistering): Released all slaves [ 822.183857][T29222] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 822.209223][T10917] tipc: Disabling bearer [ 822.236816][T10917] tipc: Left network mode [ 823.943192][T28830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 823.990331][T28830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 824.120049][T29256] ±ÿª¨úrBº“€: entered promiscuous mode [ 824.120376][T29256] tunl0: entered promiscuous mode [ 824.140729][T29256] gre0: entered promiscuous mode [ 824.246227][T29256] gretap0: entered promiscuous mode [ 824.432255][T29256] erspan0: entered promiscuous mode [ 824.499374][T29256] ip_vti0: entered promiscuous mode [ 824.552594][T29256] ip6_vti0: entered promiscuous mode [ 824.583125][T29256] sit0: entered promiscuous mode [ 824.628254][T29256] ip6tnl0: entered promiscuous mode [ 824.649573][T29256] ip6gre0: entered promiscuous mode [ 824.680667][T29256] ip6gretap0: entered promiscuous mode [ 824.760611][T29292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 824.791895][T29256] vcan0: entered promiscuous mode [ 824.841475][T29292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 824.846530][T29292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6165'. [ 824.864841][T29256] bond0: entered promiscuous mode [ 824.864866][T29256] bond7: entered promiscuous mode [ 824.885837][T29256] team0: entered promiscuous mode [ 824.917062][T29256] nlmon0: entered promiscuous mode [ 824.942309][T29256] vxcan0: entered promiscuous mode [ 824.957809][T29256] vxcan1: entered promiscuous mode [ 824.993923][T29292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6165'. [ 825.025708][T29256] veth0: entered promiscuous mode [ 825.048958][T29256] veth1: entered promiscuous mode [ 825.054008][T29256] wg0: entered promiscuous mode [ 825.167042][T29256] wg1: entered promiscuous mode [ 825.250932][T29256] wg2: entered promiscuous mode [ 825.315690][T29256] veth0_to_bridge: entered promiscuous mode [ 825.357988][T29256] bridge_slave_0: entered promiscuous mode [ 825.430409][T29256] veth1_to_bridge: entered promiscuous mode [ 825.502040][T29256] bridge_slave_1: entered promiscuous mode [ 825.570445][T29256] veth0_to_bond: entered promiscuous mode [ 825.611136][T29256] bond_slave_0: entered promiscuous mode [ 825.613110][T29256] veth1_to_bond: entered promiscuous mode [ 825.698605][T29256] bond_slave_1: entered promiscuous mode [ 825.701994][T29256] veth0_to_team: entered promiscuous mode [ 825.751132][T29256] team_slave_0: entered promiscuous mode [ 825.753140][T29256] veth1_to_team: entered promiscuous mode [ 825.821132][T29256] team_slave_1: entered promiscuous mode [ 825.821499][T29256] veth0_to_batadv: entered promiscuous mode [ 825.885736][T29256] batadv_slave_0: entered promiscuous mode [ 825.909572][T29256] xfrm0: entered promiscuous mode [ 825.936227][T29256] veth0_to_hsr: entered promiscuous mode [ 825.995870][T29256] veth1_to_hsr: entered promiscuous mode [ 826.030074][T29256] hsr0: entered promiscuous mode [ 826.051243][T29256] veth1_virt_wifi: entered promiscuous mode [ 826.068928][T29256] veth0_virt_wifi: entered promiscuous mode [ 826.106061][T29256] virt_wifi0: entered promiscuous mode [ 826.131673][T29256] vlan1: entered promiscuous mode [ 826.150428][T29256] macvlan0: entered promiscuous mode [ 826.171740][T29256] macvlan1: entered promiscuous mode [ 826.213848][T29256] ipvlan0: entered promiscuous mode [ 826.225397][T29256] ipvlan1: entered promiscuous mode [ 826.289724][T29256] macvtap0: entered promiscuous mode [ 826.316205][T29256] macsec0: entered promiscuous mode [ 826.338063][T29256] geneve0: entered promiscuous mode [ 826.338625][T29256] geneve1: entered promiscuous mode [ 826.414098][T29256] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 826.464391][T29256] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 826.496103][T29256] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 826.500307][T29256] mac80211_hwsim hwsim53 wlan1: entered promiscuous mode [ 826.500479][T29256] bridge_slave_0.: entered promiscuous mode [ 826.502552][T29256] team1: entered promiscuous mode [ 826.545576][T29256] vxlan0: entered promiscuous mode [ 826.563755][T29256] geneve1.1: entered promiscuous mode [ 826.564228][T29256] sit1: entered promiscuous mode [ 826.625608][T29256] bridge1: entered promiscuous mode [ 826.760362][T29256] bond1: entered promiscuous mode [ 826.772281][T29256] vlan2: entered promiscuous mode [ 826.772616][T29256] mac80211_hwsim hwsim58 wlan2: entered promiscuous mode [ 826.772792][T29256] gretap1: entered promiscuous mode [ 826.772924][T29256] ip6tnl1: entered promiscuous mode [ 826.799980][T29256] bond2: entered promiscuous mode [ 826.812243][T29256] gretap2: entered promiscuous mode [ 826.812412][T29256] ip6tnl2: entered promiscuous mode [ 826.830428][T29256] ip6gre1: entered promiscuous mode [ 826.832101][T29256] veth2: entered promiscuous mode [ 826.832283][T29256] veth3: entered promiscuous mode [ 826.832447][T29256] ip6_vti1: entered promiscuous mode [ 826.832574][T29256] bond4: entered promiscuous mode [ 826.832813][T29256] dvmrp1: entered promiscuous mode [ 826.878660][T29256] ;: entered promiscuous mode [ 826.880490][T29256] veth4: entered promiscuous mode [ 826.880667][T29256] veth5: entered promiscuous mode [ 826.909009][T29256] bond5: entered promiscuous mode [ 826.926732][T29256] veth6: entered promiscuous mode [ 826.927417][T29256] veth7: entered promiscuous mode [ 826.992863][T29256] gtp0: entered promiscuous mode [ 827.047257][T29256] bond6: entered promiscuous mode [ 827.071668][T29256] vlan3: entered promiscuous mode [ 827.079709][T29256] mac80211_hwsim hwsim71 wlan3: entered promiscuous mode [ 827.109736][T28830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 827.132690][T28830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 827.231254][T10913] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.231323][T10913] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.231391][T10913] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 32807 - 0 [ 827.231516][T10913] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.231587][T10913] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.231683][T10913] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 32807 - 0 [ 827.231784][T10913] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.231850][T10913] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.231913][T10913] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 32807 - 0 [ 827.546960][T28830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 827.595567][T28830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 827.620880][T28830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 827.657781][T28830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 828.045386][T24840] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 828.045428][T24840] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.045455][T24840] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 32807 - 0 [ 828.047471][T29327] netlink: 'syz.2.6169': attribute type 1 has an invalid length. [ 828.289521][T29327] bond7: entered promiscuous mode [ 828.290063][T29327] 8021q: adding VLAN 0 to HW filter on device bond7 [ 828.346123][T29287] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 828.532912][T29348] bond7: (slave bridge7): making interface the new active one [ 828.532941][T29348] bridge7: entered promiscuous mode [ 828.558239][T29348] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 828.628315][T18374] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 828.818604][T29355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6173'. [ 829.374016][T29365] macvlan0: entered promiscuous mode [ 829.383589][T29354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 829.751061][T29383] syzkaller0: entered promiscuous mode [ 829.751088][T29383] syzkaller0: entered allmulticast mode [ 830.215630][T28830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.244228][T29395] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6179'. [ 830.572238][T28830] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.890601][T29414] nbd: couldn't find device at index 15663104 [ 830.924265][T29414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6182'. [ 831.015419][T29420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6182'. [ 831.032285][T10914] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.032489][T10914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.094948][T29423] openvswitch: netlink: ct_state flags ffffffff unsupported [ 831.128593][T10892] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.128711][T10892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.253008][T10917] hsr_slave_0: left promiscuous mode [ 831.262241][T10917] hsr_slave_1: left promiscuous mode [ 832.136233][T10917] veth0_macvtap: left promiscuous mode [ 832.148080][T10917] veth1_vlan: left promiscuous mode [ 832.148213][T10917] veth0_vlan: left promiscuous mode [ 837.196282][T10917] team0 (unregistering): Port device team_slave_1 removed [ 837.875667][ T9] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 838.087063][T10917] IPVS: stop unused estimator thread 0... [ 838.228953][T29550] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6196'. [ 838.370348][T29553] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 838.509393][T29567] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6199'. [ 838.509421][T29567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6199'. [ 838.509441][T29567] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6199'. [ 838.509455][T29567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6199'. [ 838.509471][T29567] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6199'. [ 838.741964][ T5744] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 838.804722][T29577] netlink: 'syz.0.6200': attribute type 21 has an invalid length. [ 839.004042][T29585] netlink: 'syz.2.6202': attribute type 1 has an invalid length. [ 839.004070][T29585] netlink: 'syz.2.6202': attribute type 7 has an invalid length. [ 839.004084][T29585] netlink: 'syz.2.6202': attribute type 8 has an invalid length. [ 839.004108][T29585] netlink: 208 bytes leftover after parsing attributes in process `syz.2.6202'. [ 839.004126][T29585] NCSI netlink: No device for ifindex 65584 [ 839.080843][T29578] bond2: option lp_interval: invalid value (0) [ 839.080871][T29578] bond2: option lp_interval: allowed values 1 - 2147483647 [ 839.103998][T29578] bond2 (unregistering): Released all slaves [ 839.158408][T29589] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6204'. [ 839.173015][T29592] netlink: 'syz.0.6205': attribute type 49 has an invalid length. [ 839.228715][ T31] audit: type=1804 audit(1789589887.854:12): pid=29596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6205" name="/newroot/625/cgroup.controllers" dev="tmpfs" ino=3207 res=1 errno=0 [ 839.230473][ T31] audit: type=1800 audit(1789589887.854:13): pid=29596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6205" name="cgroup.controllers" dev="tmpfs" ino=3207 res=0 errno=0 [ 839.341877][T29589] geneve0: entered allmulticast mode [ 839.749252][T28830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.921602][T29616] netlink: 'syz.3.6212': attribute type 1 has an invalid length. [ 839.921824][T29616] block nbd296: server does not support multiple connections per device. [ 839.922184][T29616] block nbd296: shutting down sockets [ 839.976818][T29620] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6213'. [ 840.050791][T28830] veth0_vlan: entered promiscuous mode [ 840.067351][T29622] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6214'. [ 840.202000][T28830] veth1_vlan: entered promiscuous mode [ 840.402376][T28830] veth0_macvtap: entered promiscuous mode [ 840.436069][T28830] veth1_macvtap: entered promiscuous mode [ 840.569829][T28830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 840.638235][T29655] bridge2: entered promiscuous mode [ 840.638262][T29655] bridge2: entered allmulticast mode [ 840.665102][T29655] team0: Port device bridge2 added [ 840.672583][T29657] bridge0: port 3(team0) entered blocking state [ 840.672688][T29657] bridge0: port 3(team0) entered disabled state [ 840.672888][T29657] team0: entered allmulticast mode [ 840.672905][T29657] team_slave_0: entered allmulticast mode [ 840.672922][T29657] team_slave_1: entered allmulticast mode [ 840.688358][T29657] team0: entered promiscuous mode [ 840.688381][T29657] team_slave_0: entered promiscuous mode [ 840.689485][T29657] team_slave_1: entered promiscuous mode [ 840.702923][T29657] bridge0: port 3(team0) entered blocking state [ 840.703028][T29657] bridge0: port 3(team0) entered forwarding state [ 840.730759][T28830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.308374][T29683] netlink: 'syz.2.6225': attribute type 1 has an invalid length. [ 841.469950][T29688] 8021q: adding VLAN 0 to HW filter on device bond9 [ 841.482821][T29688] bond8: (slave bond9): making interface the new active one [ 841.490257][T29688] bond8: (slave bond9): Enslaving as an active interface with an up link [ 841.608384][T29688] bond8: (slave gretap5): Enslaving as a backup interface with an up link [ 841.636760][T29702] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.644343][T29683] 8021q: adding VLAN 0 to HW filter on device bond8 [ 841.715047][T10915] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.724672][T29695] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.728773][T29696] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.094261][T29733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 842.119776][T29698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.119801][T29698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.226290][T29684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.226314][T29684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.021041][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 843.027891][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 843.032282][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 843.034369][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 843.035009][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 843.311912][T29782] siw: device registration error -23 [ 843.346448][T29782] vlan2: entered promiscuous mode [ 843.346474][T29782] geneve1: entered promiscuous mode [ 843.347011][T29782] vlan2: entered allmulticast mode [ 843.347029][T29782] geneve1: entered allmulticast mode [ 843.416656][T29784] x_tables: duplicate underflow at hook 2 [ 843.705798][T29796] __nla_validate_parse: 2 callbacks suppressed [ 843.705821][T29796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6242'. [ 843.979402][T29806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6244'. [ 843.979893][T29810] netlink: 65011 bytes leftover after parsing attributes in process `syz.5.6244'. [ 843.984747][T29806] lo: entered promiscuous mode [ 843.984943][T29806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 844.709072][T29836] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6247'. [ 844.755055][T29842] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6247'. [ 845.055385][T21024] Bluetooth: hci5: command tx timeout [ 845.140700][T29857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6252'. [ 845.277705][T29860] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6254'. [ 845.912357][T29870] veth0_macvtap: entered allmulticast mode [ 845.912600][T29870] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 846.183293][ T31] audit: type=1800 audit(1789589894.804:14): pid=29877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6257" name=0A dev="tmpfs" ino=3255 res=0 errno=0 [ 846.322979][ T31] audit: type=1800 audit(1789589894.944:15): pid=29893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6257" name=0A dev="tmpfs" ino=3255 res=0 errno=0 [ 846.770791][T29773] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.770988][T29773] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.771197][T29773] bridge_slave_0: entered allmulticast mode [ 846.774066][T29773] bridge_slave_0: entered promiscuous mode [ 846.780124][T29773] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.780240][T29773] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.780410][T29773] bridge_slave_1: entered allmulticast mode [ 846.782320][T29773] bridge_slave_1: entered promiscuous mode [ 846.816884][T29773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.820472][T29773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.976804][T29773] team0: Port device team_slave_0 added [ 846.980313][T29773] team0: Port device team_slave_1 added [ 847.136609][T21024] Bluetooth: hci5: command tx timeout [ 847.169153][T29773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.169178][T29773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.169205][T29773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 847.171391][T29773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 847.171408][T29773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.171434][T29773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.381304][T29773] hsr_slave_0: entered promiscuous mode [ 847.382494][T29773] hsr_slave_1: entered promiscuous mode [ 847.383302][T29773] debugfs: 'hsr0' already exists in 'hsr' [ 847.383325][T29773] Cannot create hsr debugfs directory [ 847.498001][T29924] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6262'. [ 847.711452][T29933] xt_NETMAP: bad rangesize 37. [ 847.719224][T29933] IPv6: NLM_F_CREATE should be specified when creating new route [ 848.199418][T29958] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6271'. [ 848.199459][T29958] netlink: 'syz.5.6271': attribute type 7 has an invalid length. [ 848.199474][T29958] netlink: 'syz.5.6271': attribute type 8 has an invalid length. [ 848.199487][T29958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6271'. [ 848.592793][T29978] ip_tables: iptables: counters copy to user failed while replacing table [ 848.624860][T29979] ip6gre2: entered allmulticast mode [ 848.639363][T29981] netlink: 'syz.3.6274': attribute type 30 has an invalid length. [ 849.215329][T21024] Bluetooth: hci5: command tx timeout [ 849.613650][T29989] __nla_validate_parse: 1 callbacks suppressed [ 849.613676][T29989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6275'. [ 849.613703][T29989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6275'. [ 849.746462][T10913] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.746540][T10913] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.746580][T10913] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.746617][T10913] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.269928][T30044] netlink: 'syz.1.6284': attribute type 5 has an invalid length. [ 850.377151][T30048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6286'. [ 850.579628][T30058] ipt_REJECT: TCP_RESET invalid for non-tcp [ 851.013214][T30055] syzkaller0: entered promiscuous mode [ 851.013242][T30055] syzkaller0: entered allmulticast mode [ 851.295634][T21024] Bluetooth: hci5: command tx timeout [ 851.315044][T30091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6291'. [ 851.780792][T30096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6295'. [ 851.780831][T30096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6295'. [ 854.872052][T30096] geneve4: entered promiscuous mode [ 854.872079][T30096] geneve4: entered allmulticast mode [ 855.244837][T29773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 855.284349][T29773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 855.293117][T29773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 855.318358][T29773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 855.319407][T29773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 855.362592][T29773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 855.363742][T29773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 855.388908][T29773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 855.558745][T29773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.605958][T29773] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.624708][T10913] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.624828][T10913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.669773][T10915] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.669893][T10915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.068283][T30147] Cannot find add_set index 4 as target [ 856.399924][T30166] Bluetooth: MGMT ver 1.23 [ 856.648539][T30152] syzkaller0: entered promiscuous mode [ 856.648567][T30152] syzkaller0: entered allmulticast mode [ 861.971573][T30255] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 862.000044][T30255] bond1 (unregistering): Released all slaves [ 862.130364][T30270] netlink: 'syz.2.6324': attribute type 1 has an invalid length. [ 862.130393][T30270] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.6324'. [ 862.130411][T30270] netlink: 'syz.2.6324': attribute type 1 has an invalid length. [ 862.130425][T30270] netlink: 2016 bytes leftover after parsing attributes in process `syz.2.6324'. [ 862.232165][T30274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6324'. [ 862.232192][T30274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6324'. [ 862.326492][T30270] 8021q: adding VLAN 0 to HW filter on device bond10 [ 862.353998][T30274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 862.363694][T30274] bond10: (slave bond0): Enslaving as an active interface with a down link [ 862.438711][T29773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 862.564103][T30279] syzkaller1: entered promiscuous mode [ 862.564132][T30279] syzkaller1: entered allmulticast mode [ 862.679246][T30293] netlink: 16215 bytes leftover after parsing attributes in process `syz.5.6331'. [ 862.741716][T29773] veth0_vlan: entered promiscuous mode [ 862.767714][T29773] veth1_vlan: entered promiscuous mode [ 862.945100][T29773] veth0_macvtap: entered promiscuous mode [ 862.969704][T29773] veth1_macvtap: entered promiscuous mode [ 863.022262][T29773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 863.048385][T29773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.125454][T29700] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.125859][T29700] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.125899][T29700] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.125932][T29700] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.140557][T30304] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6335'. [ 863.312364][T29684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.312387][T29684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.419033][T29696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.419059][T29696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.721768][T30327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6342'. [ 863.866722][T30333] bond3: entered promiscuous mode [ 863.866760][T30333] bond3: entered allmulticast mode [ 864.100626][T30342] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 864.591353][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 864.597833][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 864.604635][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 864.619680][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 864.627683][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 864.671680][T30355] FAULT_INJECTION: forcing a failure. [ 864.671680][T30355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 864.671716][T30355] CPU: 0 UID: 0 PID: 30355 Comm: syz.1.6350 Not tainted syzkaller #0 PREEMPT(full) [ 864.671741][T30355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 864.671755][T30355] Call Trace: [ 864.671764][T30355] [ 864.671775][T30355] dump_stack_lvl+0xe8/0x150 [ 864.671811][T30355] should_fail_ex+0x410/0x560 [ 864.671842][T30355] _copy_from_iter+0x1d3/0x1660 [ 864.671903][T30355] ? __lock_acquire+0x747/0x2de0 [ 864.671930][T30355] ? __pfx__copy_from_iter+0x10/0x10 [ 864.671972][T30355] tun_get_user+0x26b/0x44d0 [ 864.672013][T30355] ? aa_file_perm+0x18b/0x15f0 [ 864.672046][T30355] ? aa_file_perm+0x4ed/0x15f0 [ 864.672073][T30355] ? __pfx_tun_get_user+0x10/0x10 [ 864.672098][T30355] ? __lock_acquire+0x747/0x2de0 [ 864.672122][T30355] ? kstrtoull+0x137/0x1d0 [ 864.672161][T30355] ? ref_tracker_alloc+0x341/0x4b0 [ 864.672186][T30355] ? lock_acquire+0x115/0x350 [ 864.672210][T30355] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 864.672239][T30355] ? lock_acquire+0x115/0x350 [ 864.672262][T30355] ? tun_get+0x1c/0x2f0 [ 864.672291][T30355] ? tun_get+0x1c/0x2f0 [ 864.672314][T30355] ? tun_get+0x1c/0x2f0 [ 864.672342][T30355] tun_chr_write_iter+0x113/0x200 [ 864.672370][T30355] vfs_write+0x612/0xba0 [ 864.672406][T30355] ? __pfx_vfs_write+0x10/0x10 [ 864.672446][T30355] ? __fget_files+0x2a/0x420 [ 864.672485][T30355] ksys_write+0x150/0x270 [ 864.672519][T30355] ? __pfx_ksys_write+0x10/0x10 [ 864.672566][T30355] do_syscall_64+0x166/0x520 [ 864.672590][T30355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.672612][T30355] ? clear_bhb_loop+0x70/0xc0 [ 864.672638][T30355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.672670][T30355] RIP: 0033:0x7f6a41b9e159 [ 864.672691][T30355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 864.672709][T30355] RSP: 002b:00007f6a42a6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 864.672734][T30355] RAX: ffffffffffffffda RBX: 00007f6a41e25fa0 RCX: 00007f6a41b9e159 [ 864.672751][T30355] RDX: 0000000000000072 RSI: 0000200000000100 RDI: 0000000000000005 [ 864.672765][T30355] RBP: 00007f6a42a6b090 R08: 0000000000000000 R09: 0000000000000000 [ 864.672778][T30355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.672792][T30355] R13: 00007f6a41e26038 R14: 00007f6a41e25fa0 R15: 00007ffc94bd5738 [ 864.672827][T30355] [ 865.542591][T10918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.542616][T10918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.828871][T30407] netlink: 'syz.0.6362': attribute type 1 has an invalid length. [ 865.893634][T30412] Cannot find set identified by id 4 to match [ 866.100705][T30416] netlink: 'syz.1.6363': attribute type 10 has an invalid length. [ 866.118328][T30416] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 866.120284][T30418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6364'. [ 866.120305][T30418] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6364'. [ 866.120331][T30418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6364'. [ 866.444362][T30431] ip_tables: iptables: counters copy to user failed while replacing table [ 866.477653][T29698] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 866.478198][T10913] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 866.478240][T10913] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 866.478275][T10913] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 866.736905][T21024] Bluetooth: hci4: command tx timeout [ 866.947099][T30449] openvswitch: netlink: Flow key attr not present in new flow. [ 866.947410][T30449] openvswitch: netlink: Flow key attr not present in new flow. [ 867.313334][T30473] __nla_validate_parse: 6 callbacks suppressed [ 867.313356][T30473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6377'. [ 867.680112][T30488] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6381'. [ 867.731164][T30488] macsec1: entered promiscuous mode [ 867.773855][T30488] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 868.188889][T30505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 868.331325][T30358] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.331543][T30358] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.331708][T30358] bridge_slave_0: entered allmulticast mode [ 868.338305][T30358] bridge_slave_0: entered promiscuous mode [ 868.343146][T30358] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.343322][T30358] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.343474][T30358] bridge_slave_1: entered allmulticast mode [ 868.346306][T30358] bridge_slave_1: entered promiscuous mode [ 868.381603][T30358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.384985][T30358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.460813][T30358] team0: Port device team_slave_0 added [ 868.492410][T30358] team0: Port device team_slave_1 added [ 868.690319][T30519] netlink: 27 bytes leftover after parsing attributes in process `syz.0.6387'. [ 868.696211][T30358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.696228][T30358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.696252][T30358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.701701][T30358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 868.701720][T30358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.701745][T30358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.733697][T30522] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6389'. [ 868.758993][T30524] geneve2: entered promiscuous mode [ 868.759017][T30524] geneve2: entered allmulticast mode [ 868.816966][T21024] Bluetooth: hci4: command tx timeout [ 868.921248][T29684] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 868.922814][T29702] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 868.922869][T29702] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 868.922932][T29702] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 868.958785][T30358] hsr_slave_0: entered promiscuous mode [ 868.965533][T30358] hsr_slave_1: entered promiscuous mode [ 868.971180][T30358] debugfs: 'hsr0' already exists in 'hsr' [ 868.971204][T30358] Cannot create hsr debugfs directory [ 868.994905][T30524] ip_tables: iptables: counters copy to user failed while replacing table [ 869.443548][T30358] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.443592][T30358] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.490018][T30533] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6391'. [ 869.692731][T30358] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.692775][T30358] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.757442][T30529] syzkaller1: entered promiscuous mode [ 869.758441][T30529] syzkaller1: entered allmulticast mode [ 869.765081][T30548] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 869.805040][T30552] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6397'. [ 869.956896][T30358] bond0: (slave netdevsim1): Releasing backup interface [ 869.961931][T30358] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.961971][T30358] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.269998][T30358] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 870.270039][T30358] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.468762][T30571] syzkaller0: entered promiscuous mode [ 870.468790][T30571] syzkaller0: entered allmulticast mode [ 870.896514][T21024] Bluetooth: hci4: command tx timeout [ 871.219482][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.621906][T30358] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 871.671987][T30358] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 871.675727][T30358] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 871.711109][T30358] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 871.722927][T30358] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 871.754791][T30358] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 871.763981][T30358] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 871.794894][T30358] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 871.935854][T30358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.989957][T30358] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.008433][T29695] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.008551][T29695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.039683][T29695] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.039802][T29695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.229481][T30639] smc: net device bond0 applied user defined pnetid SYZ2 [ 872.297009][T29695] IPVS: starting estimator thread 0... [ 872.406615][T30645] IPVS: using max 24 ests per chain, 57600 per kthread [ 872.976348][T21024] Bluetooth: hci4: command tx timeout [ 873.188190][T30680] xt_time: unknown flags 0x68 [ 873.292837][T30682] team0: left allmulticast mode [ 873.292864][T30682] team_slave_0: left allmulticast mode [ 873.292881][T30682] team_slave_1: left allmulticast mode [ 873.342751][T30682] team0: left promiscuous mode [ 873.342776][T30682] team_slave_0: left promiscuous mode [ 873.343070][T30682] team_slave_1: left promiscuous mode [ 873.363269][T30682] bridge0: port 3(team0) entered disabled state [ 873.399295][T30682] bridge_slave_0: left allmulticast mode [ 873.399323][T30682] bridge_slave_0: left promiscuous mode [ 873.399557][T30682] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.439874][T30682] bridge_slave_1: left allmulticast mode [ 873.439902][T30682] bridge_slave_1: left promiscuous mode [ 873.440120][T30682] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.490285][T30682] bond0: (slave bond_slave_0): Releasing backup interface [ 873.511227][T30682] bond0: (slave bond_slave_1): Releasing backup interface [ 873.538446][T30701] xt_HMARK: spi-set and port-set can't be combined [ 873.541301][T30682] team0: Port device team_slave_0 removed [ 873.571110][T30682] team0: Port device team_slave_1 removed [ 873.577324][T30682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 873.577442][T30682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 873.602229][T30682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 873.602258][T30682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 873.614121][T30682] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 873.693403][T30707] netlink: 'syz.1.6426': attribute type 1 has an invalid length. [ 873.789084][T30707] bond1: entered promiscuous mode [ 873.789617][T30707] 8021q: adding VLAN 0 to HW filter on device bond1 [ 873.844016][T30358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 874.013865][T30358] veth0_vlan: entered promiscuous mode [ 874.063308][T30358] veth1_vlan: entered promiscuous mode [ 874.110135][T30358] veth0_macvtap: entered promiscuous mode [ 874.137124][T30358] veth1_macvtap: entered promiscuous mode [ 874.164215][T30358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 874.207057][T30358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 874.245452][T29702] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.258521][T29684] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.259306][T29684] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.259527][T29684] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.506954][T29695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.506980][T29695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.610032][T29695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.610056][T29695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.953816][T30742] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6433'. [ 875.117737][T30752] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6436'. [ 875.249872][T30759] FAULT_INJECTION: forcing a failure. [ 875.249872][T30759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 875.249907][T30759] CPU: 0 UID: 0 PID: 30759 Comm: syz.5.6435 Not tainted syzkaller #0 PREEMPT(full) [ 875.249931][T30759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 875.249943][T30759] Call Trace: [ 875.249952][T30759] [ 875.249962][T30759] dump_stack_lvl+0xe8/0x150 [ 875.249998][T30759] should_fail_ex+0x410/0x560 [ 875.250026][T30759] _copy_from_user+0x2d/0xb0 [ 875.250052][T30759] ___sys_sendmsg+0x1c6/0x360 [ 875.250082][T30759] ? __lock_acquire+0x747/0x2de0 [ 875.250121][T30759] ? __pfx____sys_sendmsg+0x10/0x10 [ 875.250185][T30759] ? __fget_files+0x2a/0x420 [ 875.250214][T30759] ? __fget_files+0x3a2/0x420 [ 875.250254][T30759] __x64_sys_sendmsg+0x1b1/0x290 [ 875.250286][T30759] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 875.250336][T30759] do_syscall_64+0x166/0x520 [ 875.250360][T30759] ? trace_irq_disable+0x3b/0x140 [ 875.250382][T30759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.250404][T30759] ? clear_bhb_loop+0x70/0xc0 [ 875.250433][T30759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.250455][T30759] RIP: 0033:0x7efd37f9e159 [ 875.250476][T30759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.250494][T30759] RSP: 002b:00007efd38ee6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 875.250518][T30759] RAX: ffffffffffffffda RBX: 00007efd38226090 RCX: 00007efd37f9e159 [ 875.250533][T30759] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 875.250546][T30759] RBP: 00007efd38ee6090 R08: 0000000000000000 R09: 0000000000000000 [ 875.250559][T30759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.250572][T30759] R13: 00007efd38226128 R14: 00007efd38226090 R15: 00007ffffecb59b8 [ 875.250604][T30759] [ 875.261799][T30757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6437'. [ 875.261822][T30757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6437'. [ 876.359331][T30806] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6449'. [ 876.448864][T30808] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 876.452581][T30811] FAULT_INJECTION: forcing a failure. [ 876.452581][T30811] name failslab, interval 1, probability 0, space 0, times 0 [ 876.452619][T30811] CPU: 1 UID: 0 PID: 30811 Comm: syz.0.6451 Not tainted syzkaller #0 PREEMPT(full) [ 876.452643][T30811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 876.452657][T30811] Call Trace: [ 876.452666][T30811] [ 876.452676][T30811] dump_stack_lvl+0xe8/0x150 [ 876.452711][T30811] should_fail_ex+0x410/0x560 [ 876.452740][T30811] ? __alloc_skb+0x1db/0x7a0 [ 876.452765][T30811] should_failslab+0xa8/0x100 [ 876.452793][T30811] ? __alloc_skb+0x1db/0x7a0 [ 876.452813][T30811] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 876.452845][T30811] ? __alloc_skb+0x18d/0x7a0 [ 876.452869][T30811] ? __alloc_skb+0x1db/0x7a0 [ 876.452904][T30811] __alloc_skb+0x1db/0x7a0 [ 876.452933][T30811] netlink_sendmsg+0x5d4/0xb40 [ 876.452976][T30811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 876.453015][T30811] ? apparmor_socket_sendmsg+0x98/0x360 [ 876.453042][T30811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 876.453071][T30811] sock_sendmsg_nosec+0x13a/0x180 [ 876.453106][T30811] ____sys_sendmsg+0x54e/0x850 [ 876.453140][T30811] ? __pfx_____sys_sendmsg+0x10/0x10 [ 876.453187][T30811] ? import_iovec+0x73/0xa0 [ 876.453218][T30811] ___sys_sendmsg+0x2a5/0x360 [ 876.453243][T30811] ? __lock_acquire+0x747/0x2de0 [ 876.453271][T30811] ? __pfx____sys_sendmsg+0x10/0x10 [ 876.453335][T30811] ? __fget_files+0x2a/0x420 [ 876.453362][T30811] ? __fget_files+0x3a2/0x420 [ 876.453403][T30811] __x64_sys_sendmsg+0x1b1/0x290 [ 876.453432][T30811] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 876.453479][T30811] do_syscall_64+0x166/0x520 [ 876.453500][T30811] ? trace_irq_disable+0x3b/0x140 [ 876.453519][T30811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.453539][T30811] ? clear_bhb_loop+0x70/0xc0 [ 876.453562][T30811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.453580][T30811] RIP: 0033:0x7f2f6559e159 [ 876.453599][T30811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.453614][T30811] RSP: 002b:00007f2f6650d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 876.453636][T30811] RAX: ffffffffffffffda RBX: 00007f2f65825fa0 RCX: 00007f2f6559e159 [ 876.453651][T30811] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 876.453663][T30811] RBP: 00007f2f6650d090 R08: 0000000000000000 R09: 0000000000000000 [ 876.453675][T30811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.453686][T30811] R13: 00007f2f65826038 R14: 00007f2f65825fa0 R15: 00007ffee2f0d1b8 [ 876.453716][T30811] [ 876.521005][T30813] syzkaller1: entered promiscuous mode [ 876.521029][T30813] syzkaller1: entered allmulticast mode [ 876.903299][T30824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6455'. [ 876.914269][T30824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6455'. [ 876.946448][T30827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6456'. [ 877.011874][T30830] netlink: 'syz.3.6458': attribute type 4 has an invalid length. [ 877.011904][T30830] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6458'. [ 877.038679][T30830] .`: renamed from bond0 (while UP) [ 877.286350][T30835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 877.554720][T30850] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6468'. [ 878.482550][T30880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 878.483459][T30878] FAULT_INJECTION: forcing a failure. [ 878.483459][T30878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 878.483491][T30878] CPU: 0 UID: 0 PID: 30878 Comm: syz.5.6476 Not tainted syzkaller #0 PREEMPT(full) [ 878.483516][T30878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 878.483528][T30878] Call Trace: [ 878.483537][T30878] [ 878.483547][T30878] dump_stack_lvl+0xe8/0x150 [ 878.483583][T30878] should_fail_ex+0x410/0x560 [ 878.483614][T30878] _copy_from_iter+0x1d3/0x1660 [ 878.483639][T30878] ? __alloc_skb+0x27a/0x7a0 [ 878.483666][T30878] ? __alloc_skb+0x27a/0x7a0 [ 878.483703][T30878] ? __alloc_skb+0x27a/0x7a0 [ 878.483726][T30878] ? __pfx__copy_from_iter+0x10/0x10 [ 878.483748][T30878] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 878.483779][T30878] ? __alloc_skb+0x27a/0x7a0 [ 878.483801][T30878] ? __alloc_skb+0x27a/0x7a0 [ 878.483831][T30878] ? netlink_sendmsg+0x650/0xb40 [ 878.483862][T30878] ? skb_put+0x112/0x210 [ 878.483889][T30878] netlink_sendmsg+0x6c0/0xb40 [ 878.483931][T30878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 878.483969][T30878] ? apparmor_socket_sendmsg+0x98/0x360 [ 878.483995][T30878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 878.484022][T30878] sock_sendmsg_nosec+0x13a/0x180 [ 878.484056][T30878] ____sys_sendmsg+0x54e/0x850 [ 878.484090][T30878] ? __pfx_____sys_sendmsg+0x10/0x10 [ 878.484128][T30878] ? import_iovec+0x73/0xa0 [ 878.484158][T30878] ___sys_sendmsg+0x2a5/0x360 [ 878.484184][T30878] ? __lock_acquire+0x747/0x2de0 [ 878.484211][T30878] ? __pfx____sys_sendmsg+0x10/0x10 [ 878.484278][T30878] ? __fget_files+0x2a/0x420 [ 878.484306][T30878] ? __fget_files+0x3a2/0x420 [ 878.484346][T30878] __x64_sys_sendmsg+0x1b1/0x290 [ 878.484374][T30878] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 878.484430][T30878] do_syscall_64+0x166/0x520 [ 878.484454][T30878] ? trace_irq_disable+0x3b/0x140 [ 878.484477][T30878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.484500][T30878] ? clear_bhb_loop+0x70/0xc0 [ 878.484526][T30878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.484546][T30878] RIP: 0033:0x7efd37f9e159 [ 878.484567][T30878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.484584][T30878] RSP: 002b:00007efd38f07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 878.484609][T30878] RAX: ffffffffffffffda RBX: 00007efd38225fa0 RCX: 00007efd37f9e159 [ 878.484625][T30878] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 878.484640][T30878] RBP: 00007efd38f07090 R08: 0000000000000000 R09: 0000000000000000 [ 878.484653][T30878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.484667][T30878] R13: 00007efd38226038 R14: 00007efd38225fa0 R15: 00007ffffecb59b8 [ 878.484712][T30878] [ 878.505878][T30883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 880.131393][T30959] netlink: 'syz.0.6499': attribute type 4 has an invalid length. [ 880.483439][T30965] __nla_validate_parse: 7 callbacks suppressed [ 880.483463][T30965] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6501'. [ 880.923405][T30986] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 881.563274][T31017] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6517'. [ 881.716595][T31023] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6515'. [ 881.778764][T31026] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 881.778861][T31026] gretap1: entered promiscuous mode [ 881.778877][T31026] gretap1: entered allmulticast mode [ 881.901189][T31025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6520'. [ 882.129585][T31033] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6523'. [ 882.310770][T31044] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6528'. [ 882.909039][T31061] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 883.006895][T31076] openvswitch: netlink: IP tunnel dst address not specified [ 883.006934][T31076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 883.353594][T31091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6543'. [ 883.874633][T31111] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6554'. [ 883.929764][T31112] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6552'. [ 884.271628][T31126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 884.293782][T31134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 885.075055][T31167] netlink: 'syz.1.6571': attribute type 1 has an invalid length. [ 885.172916][T31169] sctp: [Deprecated]: syz.0.6572 (pid 31169) Use of int in maxseg socket option. [ 885.172916][T31169] Use struct sctp_assoc_value instead [ 885.273467][T31176] nbd: must specify an index to disconnect [ 885.363876][T31180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6576'. [ 885.496835][T31186] xt_MASQUERADE: bad MAP_IPS. [ 885.925765][T31198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6583'. [ 886.280657][T31212] netlink: 'syz.2.6588': attribute type 10 has an invalid length. [ 886.300713][T31212] team0: Port device vlan0 added [ 886.443843][T31219] sctp_getsockopt_delayed_ack: 55 callbacks suppressed [ 886.443866][T31219] sctp: [Deprecated]: syz.0.6592 (pid 31219) Use of struct sctp_assoc_value in delayed_ack socket option. [ 886.443866][T31219] Use struct sctp_sack_info instead [ 886.444289][T31219] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6592'. [ 886.745435][T31231] FAULT_INJECTION: forcing a failure. [ 886.745435][T31231] name failslab, interval 1, probability 0, space 0, times 0 [ 886.745471][T31231] CPU: 0 UID: 0 PID: 31231 Comm: syz.2.6596 Not tainted syzkaller #0 PREEMPT(full) [ 886.745505][T31231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 886.745518][T31231] Call Trace: [ 886.745527][T31231] [ 886.745537][T31231] dump_stack_lvl+0xe8/0x150 [ 886.745578][T31231] should_fail_ex+0x410/0x560 [ 886.745610][T31231] ? __alloc_skb+0x1db/0x7a0 [ 886.745637][T31231] should_failslab+0xa8/0x100 [ 886.745666][T31231] ? __alloc_skb+0x1db/0x7a0 [ 886.745687][T31231] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 886.745719][T31231] ? __alloc_skb+0x18d/0x7a0 [ 886.745743][T31231] ? __alloc_skb+0x1db/0x7a0 [ 886.745774][T31231] __alloc_skb+0x1db/0x7a0 [ 886.745803][T31231] netlink_ack+0x136/0xb30 [ 886.745832][T31231] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 886.745939][T31231] ? ref_tracker_free+0x689/0x830 [ 886.745972][T31231] ? __pfx_ref_tracker_free+0x10/0x10 [ 886.746006][T31231] netlink_rcv_skb+0x2a4/0x4a0 [ 886.746038][T31231] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 886.746065][T31231] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 886.746109][T31231] ? netlink_deliver_tap+0x2e/0x1b0 [ 886.746137][T31231] ? netlink_deliver_tap+0x2e/0x1b0 [ 886.746173][T31231] netlink_unicast+0x7bd/0x940 [ 886.746211][T31231] netlink_sendmsg+0x813/0xb40 [ 886.746251][T31231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 886.746288][T31231] ? apparmor_socket_sendmsg+0x98/0x360 [ 886.746315][T31231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 886.746344][T31231] sock_sendmsg_nosec+0x13a/0x180 [ 886.746380][T31231] ____sys_sendmsg+0x54e/0x850 [ 886.746415][T31231] ? __pfx_____sys_sendmsg+0x10/0x10 [ 886.746452][T31231] ? import_iovec+0x73/0xa0 [ 886.746483][T31231] ___sys_sendmsg+0x2a5/0x360 [ 886.746519][T31231] ? __lock_acquire+0x747/0x2de0 [ 886.746547][T31231] ? __pfx____sys_sendmsg+0x10/0x10 [ 886.746581][T31231] ? kstrtouint+0x6e/0xe0 [ 886.746642][T31231] ? __fget_files+0x2a/0x420 [ 886.746671][T31231] ? __fget_files+0x3a2/0x420 [ 886.746710][T31231] __sys_sendmmsg+0x273/0x4d0 [ 886.746743][T31231] ? __pfx___sys_sendmmsg+0x10/0x10 [ 886.746782][T31231] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 886.746828][T31231] ? ksys_write+0x242/0x270 [ 886.746862][T31231] ? __pfx_ksys_write+0x10/0x10 [ 886.746902][T31231] __x64_sys_sendmmsg+0xa0/0xc0 [ 886.746933][T31231] do_syscall_64+0x166/0x520 [ 886.746956][T31231] ? trace_irq_disable+0x3b/0x140 [ 886.746979][T31231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.747003][T31231] ? clear_bhb_loop+0x70/0xc0 [ 886.747029][T31231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.747051][T31231] RIP: 0033:0x7fa13859e159 [ 886.747072][T31231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.747090][T31231] RSP: 002b:00007fa1367f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 886.747115][T31231] RAX: ffffffffffffffda RBX: 00007fa138825fa0 RCX: 00007fa13859e159 [ 886.747131][T31231] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 886.747146][T31231] RBP: 00007fa1367f6090 R08: 0000000000000000 R09: 0000000000000000 [ 886.747161][T31231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.747174][T31231] R13: 00007fa138826038 R14: 00007fa138825fa0 R15: 00007ffe253b1908 [ 886.747209][T31231] [ 887.254584][T31238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6598'. [ 887.329199][T31246] tipc: Enabling of bearer rejected, failed to enable media [ 887.985616][T31281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6607'. [ 887.985655][T31281] netlink: 'syz.0.6607': attribute type 5 has an invalid length. [ 887.985673][T31281] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6607'. [ 888.188606][T31288] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6610'. [ 888.330681][T31300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6613'. [ 888.445044][T31306] tipc: Enabling of bearer rejected, failed to enable media [ 888.596420][T31311] IPVS: Error joining to the multicast group [ 888.638689][T31312] netlink: 'syz.2.6616': attribute type 8 has an invalid length. [ 888.990857][T31329] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6623'. [ 889.342282][T31352] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6627'. [ 889.342313][T31352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6627'. [ 889.505446][T31364] IPVS: set_ctl: invalid protocol: 136 172.20.20.36:20001 [ 889.506858][T31364] IPVS: set_ctl: invalid protocol: 51 172.30.0.3:20004 [ 889.605773][T31368] netlink: 'syz.3.6634': attribute type 8 has an invalid length. [ 890.307912][T31403] netlink: 'syz.1.6646': attribute type 8 has an invalid length. [ 890.446068][T31407] SET target dimension over the limit! [ 890.659305][T31417] netlink: 'syz.0.6651': attribute type 62 has an invalid length. [ 890.860246][T31427] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 890.860289][T31427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 890.941371][T31430] __nla_validate_parse: 6 callbacks suppressed [ 890.941395][T31430] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6655'. [ 891.140724][T31441] xt_hashlimit: size too large, truncated to 1048576 [ 891.140748][T31441] xt_hashlimit: max too large, truncated to 1048576 [ 891.140760][T31441] xt_hashlimit: overflow, rate too high: 0 [ 891.294202][T31445] netlink: 'syz.5.6659': attribute type 8 has an invalid length. [ 891.745018][T31465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6664'. [ 891.745055][T31465] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 891.953923][T31475] netlink: 'syz.2.6668': attribute type 1 has an invalid length. [ 892.037554][T31476] bond3: (slave geneve2): making interface the new active one [ 892.038256][T31476] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 892.068688][T31477] macvtap1: entered promiscuous mode [ 892.069002][T31477] macvtap1: entered allmulticast mode [ 892.069017][T31477] veth1_vlan: entered allmulticast mode [ 892.098075][T29700] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 892.098135][T29700] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 892.124881][T29697] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 892.124936][T29697] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 892.318590][T31489] netlink: 'syz.1.6673': attribute type 8 has an invalid length. [ 892.411795][T31496] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 892.558132][T31505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6678'. [ 892.558167][T31505] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6678'. [ 892.772310][T31507] bond0 (unregistering): Released all slaves [ 892.809706][T31516] ip_tables: iptables: counters copy to user failed while replacing table [ 893.138939][T31529] netlink: 'syz.1.6687': attribute type 1 has an invalid length. [ 893.138968][T31529] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6687'. [ 893.144155][T31527] netlink: 'syz.3.6688': attribute type 8 has an invalid length. [ 893.331794][T31532] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6689'. [ 894.069790][T31567] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6701'. [ 894.201437][T31575] netlink: 'syz.3.6705': attribute type 1 has an invalid length. [ 894.276689][T31575] bond0: entered promiscuous mode [ 894.277150][T31575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.313920][T31575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6705'. [ 894.371797][T31575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.383335][T31575] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 894.383362][T31575] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 894.399906][T31575] bond0: (slave wireguard0): making interface the new active one [ 894.399938][T31575] wireguard0: entered promiscuous mode [ 894.419167][T31575] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 894.486047][T31588] mac80211_hwsim hwsim76 wlan0: entered promiscuous mode [ 894.522972][T31575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6705'. [ 894.587880][T31581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6705'. [ 894.629826][T31597] netlink: 'syz.0.6710': attribute type 39 has an invalid length. [ 895.285224][T31607] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.737928][T31625] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 896.319603][T31659] __nla_validate_parse: 3 callbacks suppressed [ 896.319626][T31659] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6728'. [ 896.416796][T31661] netlink: 'syz.0.6729': attribute type 2 has an invalid length. [ 896.468112][T31661] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6729'. [ 896.771340][T31684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6737'. [ 897.022488][T31686] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6738'. [ 897.040261][T31693] netlink: 'syz.5.6739': attribute type 4 has an invalid length. [ 897.569732][T31727] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6751'. [ 897.813064][T31734] netlink: 108 bytes leftover after parsing attributes in process `syz.5.6753'. [ 897.957493][T31743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6756'. [ 897.958974][T31742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6756'. [ 898.094401][T31743] veth3: entered promiscuous mode [ 898.171887][T31742] veth5: entered promiscuous mode [ 898.283377][T31754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6762'. [ 898.363553][T31756] netlink: 'syz.3.6761': attribute type 1 has an invalid length. [ 898.363573][T31756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6761'. [ 898.488768][T31765] netlink: 'syz.3.6764': attribute type 9 has an invalid length. [ 898.488795][T31765] netlink: 'syz.3.6764': attribute type 4 has an invalid length. [ 898.545731][T31763] netlink: Invalid conntrack timeout [ 898.545770][T31763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 898.811371][T30726] hid-generic 0005:4C4A:0009.0002: item fetching failed at offset 0/1 [ 898.814125][T30726] hid-generic 0005:4C4A:0009.0002: probe with driver hid-generic failed with error -22 [ 898.902050][ T5628] Bluetooth: hci3: command 0x0406 tx timeout [ 899.394565][T31797] netlink: 'syz.1.6773': attribute type 58 has an invalid length. [ 899.490584][T31798] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 900.244211][T31836] netlink: 'syz.5.6786': attribute type 1 has an invalid length. [ 900.365004][T31841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 901.852532][T31912] __nla_validate_parse: 73 callbacks suppressed [ 901.852558][T31912] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6812'. [ 901.988185][T31920] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6809'. [ 902.554410][T31936] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6815'. [ 902.569682][T31937] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6815'. [ 902.596723][T31936] 8021q: adding VLAN 0 to HW filter on device bond4 [ 902.628427][T31941] 8021q: VLANs not supported on sit0 [ 902.632158][T31936] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6815'. [ 902.827446][T31954] netlink: 'syz.2.6819': attribute type 1 has an invalid length. [ 902.848838][T31952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 902.849687][T31952] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6821'. [ 902.850005][T31952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6821'. [ 903.350288][T31969] syz_tun: entered allmulticast mode [ 903.358375][T31965] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6824'. [ 903.370802][T31969] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6825'. [ 903.532865][T31967] syz_tun: left allmulticast mode [ 903.692398][T31986] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6832'. [ 903.694222][T31986] netlink: 'syz.3.6832': attribute type 1 has an invalid length. [ 903.704251][T31986] bond0: left promiscuous mode [ 903.704278][T31986] wireguard0: left promiscuous mode [ 904.742821][T32027] mac80211_hwsim hwsim73 ÿ: renamed from wlan1 (while UP) [ 904.773348][T32029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 906.898970][T32045] __nla_validate_parse: 8 callbacks suppressed [ 906.898993][T32045] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6853'. [ 906.965319][T32054] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 906.965625][T32054] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 906.965990][T32054] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 906.966236][T32054] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 906.966473][T32054] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 906.966698][T32054] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 906.966935][T32054] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 906.967159][T32054] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 906.967432][T32054] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 906.987273][T32058] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6856'. [ 907.242014][T32068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6860'. [ 907.277864][T32071] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 907.302510][T32070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6858'. [ 907.317422][T32070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6858'. [ 907.324620][T32077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6860'. [ 907.365012][T32078] netlink: 'syz.5.6861': attribute type 7 has an invalid length. [ 907.365038][T32078] netlink: 140 bytes leftover after parsing attributes in process `syz.5.6861'. [ 907.431354][T32081] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6862'. [ 907.506167][T32070] netlink: 'syz.1.6858': attribute type 5 has an invalid length. [ 907.968022][T32108] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6868'. [ 908.392172][T32141] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 908.657038][T32155] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6879'. [ 908.748730][T21024] Bluetooth: hci1: connection err: -111 [ 908.797313][T32160] netlink: 'syz.1.6881': attribute type 7 has an invalid length. [ 908.866789][T32161] netlink: 'syz.1.6881': attribute type 11 has an invalid length. [ 908.867233][T32160] netlink: 'syz.1.6881': attribute type 142 has an invalid length. [ 909.060978][T32135] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 909.885797][T29695] tipc: Subscription rejected, illegal request [ 909.938087][T32212] netlink: 'syz.1.6892': attribute type 1 has an invalid length. [ 909.939920][T32214] netlink: 'syz.3.6893': attribute type 4 has an invalid length. [ 910.483499][T32231] bridge_slave_1: default FDB implementation only supports local addresses [ 910.483836][T32234] bridge_slave_1: default FDB implementation only supports local addresses [ 910.712768][T32250] netlink: 'syz.3.6906': attribute type 46 has an invalid length. [ 910.942754][T32267] net_ratelimit: 26 callbacks suppressed [ 910.942777][T32267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 910.973512][T32267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 910.993044][T32267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 911.012618][T32267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 911.447473][T32280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 911.966012][T32305] __nla_validate_parse: 54 callbacks suppressed [ 911.966037][T32305] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6923'. [ 912.120167][T32313] openvswitch: netlink: Invalid VLAN frame [ 912.254000][T32317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6928'. [ 912.254033][T32317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6928'. [ 912.254051][T32317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6928'. [ 912.288839][T32317] netlink: 'syz.1.6928': attribute type 1 has an invalid length. [ 912.584919][T32336] x_tables: duplicate underflow at hook 2 [ 915.399140][T32324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 915.593990][T32348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 915.960416][T32360] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 915.981703][T32360] netlink: 'syz.2.6942': attribute type 1 has an invalid length. [ 916.032089][T32360] 8021q: adding VLAN 0 to HW filter on device bond4 [ 916.037861][T32360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6942'. [ 916.176730][T32374] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6942'. [ 916.183270][T32373] ipt_REJECT: TCP_RESET invalid for non-tcp [ 916.443371][T32385] netlink: 'syz.5.6948': attribute type 2 has an invalid length. [ 916.524742][T32389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6952'. [ 916.889399][T32401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6957'. [ 917.334568][T32427] syzkaller0: entered promiscuous mode [ 917.334593][T32427] syzkaller0: entered allmulticast mode [ 917.509759][T32436] netlink: Setting conntrack mark requires 'commit' flag. [ 917.509797][T32436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 917.856200][T32454] netlink: 'syz.1.6973': attribute type 4 has an invalid length. [ 918.092907][T32467] netlink: 'syz.2.6975': attribute type 21 has an invalid length. [ 918.092939][T32467] IPv6: NLM_F_CREATE should be specified when creating new route [ 918.266493][T32476] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6978'. [ 918.360192][T32479] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6978'. [ 918.462639][T32488] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6982'. [ 918.491013][T32491] set match dimension is over the limit! [ 918.493646][T32491] netlink: 'syz.3.6980': attribute type 26 has an invalid length. [ 918.493672][T32491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6980'. [ 918.522729][T32491] netlink: 'syz.3.6980': attribute type 26 has an invalid length. [ 918.522756][T32491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6980'. [ 918.608385][T32491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6980'. [ 918.610341][T32499] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6983'. [ 918.767184][T32504] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6985'. [ 918.941530][T32506] syzkaller0: entered promiscuous mode [ 918.941556][T32506] syzkaller0: entered allmulticast mode [ 919.031639][T32512] xt_hashlimit: max too large, truncated to 1048576 [ 919.049467][T32512] No such timeout policy "syz1" [ 919.172636][T32521] syz_tun: entered allmulticast mode [ 919.319678][T32524] netlink: 1032 bytes leftover after parsing attributes in process `syz.2.6990'. [ 919.457422][T32535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 919.741426][T29697] IPVS: starting estimator thread 0... [ 919.835320][T32552] IPVS: using max 25 ests per chain, 60000 per kthread [ 919.906802][T32557] xt_HMARK: spi-set and port-set can't be combined [ 919.909488][T32557] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 920.059369][T32563] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.059392][T32563] IPv6: NLM_F_CREATE should be set when creating new route [ 920.369651][T32571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 920.418379][T32572] netlink: 'syz.5.7005': attribute type 10 has an invalid length. [ 920.741546][T32583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 920.744434][T32583] bridge0: port 3(bond1) entered blocking state [ 920.764087][T32583] bridge0: port 3(bond1) entered disabled state [ 920.764327][T32583] bond1: entered allmulticast mode [ 920.786574][T32583] bond1: entered promiscuous mode [ 920.791388][T32583] bridge0: port 3(bond1) entered blocking state [ 920.791530][T32583] bridge0: port 3(bond1) entered forwarding state [ 920.806695][T32593] netlink: 'syz.1.7012': attribute type 2 has an invalid length. [ 920.806720][T32593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7012'. [ 920.822775][T32594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 921.075409][T32604] vlan0: entered promiscuous mode [ 921.159870][T29697] bridge0: port 3(bond1) entered disabled state [ 921.344357][T32615] netlink: 'syz.0.7020': attribute type 21 has an invalid length. [ 921.344461][T32615] netlink: 'syz.0.7020': attribute type 5 has an invalid length. [ 921.344478][T32615] netlink: 'syz.0.7020': attribute type 6 has an invalid length. [ 921.373163][T32617] netlink: 'syz.5.7018': attribute type 23 has an invalid length. [ 921.433777][T32617] netlink: 'syz.5.7018': attribute type 23 has an invalid length. [ 921.474812][T32618] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 921.488429][T32617] netlink: 'syz.5.7018': attribute type 23 has an invalid length. [ 921.577822][T32617] netlink: 'syz.5.7018': attribute type 23 has an invalid length. [ 921.617694][T32617] netlink: 'syz.5.7018': attribute type 23 has an invalid length. [ 921.660105][T32617] netlink: 'syz.5.7018': attribute type 23 has an invalid length. [ 921.711859][T32617] netlink: 'syz.5.7018': attribute type 23 has an invalid length. [ 922.343346][T32632] bond5: entered promiscuous mode [ 922.343420][T32632] bond5: entered allmulticast mode [ 922.344062][T32632] 8021q: adding VLAN 0 to HW filter on device bond5 [ 922.790991][T29695] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 922.791035][T29695] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.141217][T29695] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.141260][T29695] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.468389][T29695] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.468442][T29695] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.560484][T32680] SET target dimension over the limit! [ 923.714247][T32692] __nla_validate_parse: 9 callbacks suppressed [ 923.714269][T32692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7042'. [ 923.715974][T32692] netlink: 420 bytes leftover after parsing attributes in process `syz.0.7042'. [ 923.770138][T29695] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.770177][T29695] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.883107][T29695] dvmrp8: left allmulticast mode [ 924.904683][T29695] batman_adv: batadv0: Interface deactivated: gretap1 [ 924.929622][T32743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7054'. [ 924.929699][T32743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7054'. [ 924.929732][T32743] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7054'. [ 924.939564][T32741] netlink: 180 bytes leftover after parsing attributes in process `syz.3.7053'. [ 925.361442][T29695] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 925.578249][T29695] batman_adv: batadv0: Removing interface: gretap1 [ 925.730747][T29695] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 925.730797][T29695] bridge2 (unregistering): left promiscuous mode [ 925.758838][T29695] bond5 (unregistering): (slave bridge3): Releasing active interface [ 925.810463][T29695] bond0 (unregistering): (slave team0): Releasing backup interface [ 925.812986][T29695] bond0 (unregistering): Released all slaves [ 925.839700][T29695] bond1 (unregistering): Released all slaves [ 925.862641][T29695] bond2 (unregistering): Released all slaves [ 925.886391][T29695] bond3 (unregistering): Released all slaves [ 925.903148][T29695] bond4 (unregistering): (slave wireguard0): Releasing backup interface [ 925.903174][T29695] wireguard0: left promiscuous mode [ 925.904581][T29695] bond4 (unregistering): Released all slaves [ 925.932196][T29695] bond5 (unregistering): Released all slaves [ 925.947585][T32724] syzkaller1: entered promiscuous mode [ 925.947608][T32724] syzkaller1: entered allmulticast mode [ 926.209307][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 926.308113][T29695] tipc: Disabling bearer [ 926.325218][T29695] tipc: Left network mode [ 926.776390][ T341] ------------[ cut here ]------------ [ 926.776410][ T341] !chanctx_conf [ 926.776420][ T341] WARNING: net/mac80211/rate.c:51 at rate_control_rate_init+0x5a6/0x630, CPU#1: syz.5.7066/341 [ 926.799119][ T341] Modules linked in: [ 926.803812][ T341] CPU: 1 UID: 0 PID: 341 Comm: syz.5.7066 Not tainted syzkaller #0 PREEMPT(full) [ 926.813753][ T341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 926.824288][ T341] RIP: 0010:rate_control_rate_init+0x5a6/0x630 [ 926.830648][ T341] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 b6 97 71 f6 90 0f 0b 90 eb e1 e8 ab 97 71 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00 [ 926.851100][ T341] RSP: 0018:ffffc90004526fe8 EFLAGS: 00010287 [ 926.857777][ T341] RAX: ffffffff8b563305 RBX: ffff8880289f8050 RCX: 0000000000080000 [ 926.865960][ T341] RDX: ffffc900120e1000 RSI: 0000000000000404 RDI: 0000000000000405 [ 926.873969][ T341] RBP: dffffc0000000000 R08: ffffffff8b562e77 R09: 0000000000000000 [ 926.882187][ T341] R10: dffffc0000000000 R11: ffffed100513f031 R12: ffffffff8b562e77 [ 926.890394][ T341] R13: ffff888051310f40 R14: 0000000000000001 R15: 0000000000000000 [ 926.899872][ T341] FS: 00007efd38f076c0(0000) GS:ffff888124dd2000(0000) knlGS:0000000000000000 [ 926.909987][ T341] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 926.917302][ T341] CR2: 00007fc7ced46000 CR3: 0000000081450000 CR4: 00000000003526f0 [ 926.925773][ T341] Call Trace: [ 926.929139][ T341] [ 926.932262][ T341] rate_control_rate_init_all_links+0xf4/0x190 [ 926.938612][ T341] sta_apply_auth_flags+0x1bc/0x430 [ 926.944411][ T341] sta_apply_parameters+0x1291/0x1b50 [ 926.949946][ T341] ieee80211_add_station+0x3de/0x700 [ 926.955811][ T341] rdev_add_station+0xfc/0x290 [ 926.960744][ T341] nl80211_new_station+0x1b4e/0x1fd0 [ 926.966372][ T341] ? trace_contention_end+0x3d/0x140 [ 926.971735][ T341] ? __pfx_nl80211_new_station+0x10/0x10 [ 926.978052][ T341] ? __rtnl_unlock+0xc8/0xf0 [ 926.982906][ T341] ? nl80211_pre_doit+0x53d/0x890 [ 926.988241][ T341] genl_family_rcv_msg_doit+0x233/0x340 [ 926.993852][ T341] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 927.000097][ T341] ? bpf_lsm_capable+0x9/0x20 [ 927.004851][ T341] ? security_capable+0x7e/0x2c0 [ 927.011052][ T341] genl_rcv_msg+0x614/0x7a0 [ 927.016321][ T341] ? __pfx_genl_rcv_msg+0x10/0x10 [ 927.021403][ T341] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 927.026925][ T341] ? __pfx_nl80211_new_station+0x10/0x10 [ 927.032968][ T341] ? __pfx_nl80211_post_doit+0x10/0x10 [ 927.038613][ T341] netlink_rcv_skb+0x226/0x4a0 [ 927.043442][ T341] ? __pfx_genl_rcv_msg+0x10/0x10 [ 927.048714][ T341] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 927.054397][ T341] ? down_read+0x2be/0x330 [ 927.059186][ T341] genl_rcv+0x28/0x40 [ 927.063258][ T341] netlink_unicast+0x7bd/0x940 [ 927.068564][ T341] netlink_sendmsg+0x813/0xb40 [ 927.073591][ T341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 927.079309][ T341] ? apparmor_socket_sendmsg+0x98/0x360 [ 927.084920][ T341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 927.090398][ T341] sock_sendmsg_nosec+0x13a/0x180 [ 927.095678][ T341] ____sys_sendmsg+0x54e/0x850 [ 927.100512][ T341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 927.106459][ T341] ? import_iovec+0x73/0xa0 [ 927.111848][ T341] ___sys_sendmsg+0x2a5/0x360 [ 927.117368][ T341] ? __lock_acquire+0x747/0x2de0 [ 927.122381][ T341] ? __pfx____sys_sendmsg+0x10/0x10 [ 927.128216][ T341] ? futex_wake+0x51b/0x5f0 [ 927.132867][ T341] ? __fget_files+0x2a/0x420 [ 927.137872][ T341] ? __fget_files+0x3a2/0x420 [ 927.142648][ T341] __x64_sys_sendmsg+0x1b1/0x290 [ 927.147778][ T341] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 927.153335][ T341] do_syscall_64+0x166/0x520 [ 927.158278][ T341] ? trace_irq_disable+0x3b/0x140 [ 927.163529][ T341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.169742][ T341] ? clear_bhb_loop+0x70/0xc0 [ 927.174471][ T341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.180682][ T341] RIP: 0033:0x7efd37f9e159 [ 927.185220][ T341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.204947][ T341] RSP: 002b:00007efd38f07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 927.214217][ T341] RAX: ffffffffffffffda RBX: 00007efd38225fa0 RCX: 00007efd37f9e159 [ 927.223038][ T341] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000010 [ 927.231266][ T341] RBP: 00007efd3803506b R08: 0000000000000000 R09: 0000000000000000 [ 927.239610][ T341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 927.247727][ T341] R13: 00007efd38226038 R14: 00007efd38225fa0 R15: 00007ffffecb59b8 [ 927.255961][ T341] [ 927.259032][ T341] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 927.266349][ T341] CPU: 1 UID: 0 PID: 341 Comm: syz.5.7066 Not tainted syzkaller #0 PREEMPT(full) [ 927.275758][ T341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 927.285857][ T341] Call Trace: [ 927.289186][ T341] [ 927.292155][ T341] vpanic+0x56d/0xa60 [ 927.296226][ T341] ? __pfx__printk+0x10/0x10 [ 927.300871][ T341] ? __pfx_vpanic+0x10/0x10 [ 927.305423][ T341] ? is_bpf_text_address+0x292/0x2b0 [ 927.310773][ T341] ? is_bpf_text_address+0x26/0x2b0 [ 927.316033][ T341] panic+0xc5/0xd0 [ 927.319903][ T341] ? __pfx_panic+0x10/0x10 [ 927.324514][ T341] __warn+0x315/0x4c0 [ 927.328600][ T341] ? rate_control_rate_init+0x5a6/0x630 [ 927.334568][ T341] ? rate_control_rate_init+0x5a6/0x630 [ 927.340161][ T341] __report_bug+0x276/0x570 [ 927.344790][ T341] ? rate_control_rate_init+0x5a6/0x630 [ 927.350388][ T341] ? __pfx___report_bug+0x10/0x10 [ 927.355450][ T341] ? lockdep_hardirqs_on+0x7b/0x110 [ 927.360755][ T341] ? irqentry_exit+0x218/0x910 [ 927.365552][ T341] ? trace_irq_disable+0x3b/0x140 [ 927.370634][ T341] ? rate_control_rate_init+0x5a8/0x630 [ 927.377096][ T341] ? rate_control_rate_init+0x5a6/0x630 [ 927.382692][ T341] report_bug+0x16b/0x220 [ 927.387077][ T341] ? rate_control_rate_init+0x5a6/0x630 [ 927.392768][ T341] ? rate_control_rate_init+0x5a8/0x630 [ 927.398541][ T341] handle_bug+0x9c/0x200 [ 927.402856][ T341] exc_invalid_op+0x1a/0x50 [ 927.407774][ T341] asm_exc_invalid_op+0x1a/0x20 [ 927.412732][ T341] RIP: 0010:rate_control_rate_init+0x5a6/0x630 [ 927.418932][ T341] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 b6 97 71 f6 90 0f 0b 90 eb e1 e8 ab 97 71 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00 [ 927.439440][ T341] RSP: 0018:ffffc90004526fe8 EFLAGS: 00010287 [ 927.445651][ T341] RAX: ffffffff8b563305 RBX: ffff8880289f8050 RCX: 0000000000080000 [ 927.453662][ T341] RDX: ffffc900120e1000 RSI: 0000000000000404 RDI: 0000000000000405 [ 927.461675][ T341] RBP: dffffc0000000000 R08: ffffffff8b562e77 R09: 0000000000000000 [ 927.469774][ T341] R10: dffffc0000000000 R11: ffffed100513f031 R12: ffffffff8b562e77 [ 927.477879][ T341] R13: ffff888051310f40 R14: 0000000000000001 R15: 0000000000000000 [ 927.485975][ T341] ? rate_control_rate_init+0x117/0x630 [ 927.492015][ T341] ? rate_control_rate_init+0x117/0x630 [ 927.497636][ T341] ? rate_control_rate_init+0x5a5/0x630 [ 927.503234][ T341] ? rate_control_rate_init+0x5a5/0x630 [ 927.508852][ T341] rate_control_rate_init_all_links+0xf4/0x190 [ 927.515229][ T341] sta_apply_auth_flags+0x1bc/0x430 [ 927.520485][ T341] sta_apply_parameters+0x1291/0x1b50 [ 927.526024][ T341] ieee80211_add_station+0x3de/0x700 [ 927.531388][ T341] rdev_add_station+0xfc/0x290 [ 927.536207][ T341] nl80211_new_station+0x1b4e/0x1fd0 [ 927.541637][ T341] ? trace_contention_end+0x3d/0x140 [ 927.546978][ T341] ? __pfx_nl80211_new_station+0x10/0x10 [ 927.552672][ T341] ? __rtnl_unlock+0xc8/0xf0 [ 927.557355][ T341] ? nl80211_pre_doit+0x53d/0x890 [ 927.562438][ T341] genl_family_rcv_msg_doit+0x233/0x340 [ 927.568033][ T341] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 927.574350][ T341] ? bpf_lsm_capable+0x9/0x20 [ 927.579133][ T341] ? security_capable+0x7e/0x2c0 [ 927.584118][ T341] genl_rcv_msg+0x614/0x7a0 [ 927.588673][ T341] ? __pfx_genl_rcv_msg+0x10/0x10 [ 927.593730][ T341] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 927.599313][ T341] ? __pfx_nl80211_new_station+0x10/0x10 [ 927.605017][ T341] ? __pfx_nl80211_post_doit+0x10/0x10 [ 927.610880][ T341] netlink_rcv_skb+0x226/0x4a0 [ 927.615699][ T341] ? __pfx_genl_rcv_msg+0x10/0x10 [ 927.620961][ T341] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 927.626332][ T341] ? down_read+0x2be/0x330 [ 927.630811][ T341] genl_rcv+0x28/0x40 [ 927.634830][ T341] netlink_unicast+0x7bd/0x940 [ 927.639661][ T341] netlink_sendmsg+0x813/0xb40 [ 927.644484][ T341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 927.649834][ T341] ? apparmor_socket_sendmsg+0x98/0x360 [ 927.655418][ T341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 927.660755][ T341] sock_sendmsg_nosec+0x13a/0x180 [ 927.665844][ T341] ____sys_sendmsg+0x54e/0x850 [ 927.672378][ T341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 927.678169][ T341] ? import_iovec+0x73/0xa0 [ 927.682740][ T341] ___sys_sendmsg+0x2a5/0x360 [ 927.687550][ T341] ? __lock_acquire+0x747/0x2de0 [ 927.692722][ T341] ? __pfx____sys_sendmsg+0x10/0x10 [ 927.698221][ T341] ? futex_wake+0x51b/0x5f0 [ 927.702835][ T341] ? __fget_files+0x2a/0x420 [ 927.707496][ T341] ? __fget_files+0x3a2/0x420 [ 927.712338][ T341] __x64_sys_sendmsg+0x1b1/0x290 [ 927.717331][ T341] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 927.723475][ T341] do_syscall_64+0x166/0x520 [ 927.728226][ T341] ? trace_irq_disable+0x3b/0x140 [ 927.733305][ T341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.739406][ T341] ? clear_bhb_loop+0x70/0xc0 [ 927.744157][ T341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.750161][ T341] RIP: 0033:0x7efd37f9e159 [ 927.754626][ T341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.775130][ T341] RSP: 002b:00007efd38f07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 927.783588][ T341] RAX: ffffffffffffffda RBX: 00007efd38225fa0 RCX: 00007efd37f9e159 [ 927.791603][ T341] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000010 [ 927.799785][ T341] RBP: 00007efd3803506b R08: 0000000000000000 R09: 0000000000000000 [ 927.807807][ T341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 927.815830][ T341] R13: 00007efd38226038 R14: 00007efd38225fa0 R15: 00007ffffecb59b8 [ 927.823968][ T341] [ 927.827222][ T341] Kernel Offset: disabled [ 927.831562][ T341] Rebooting in 86400 seconds..