last executing test programs: 15m59.735815474s ago: executing program 3 (id=703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80000001, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000030000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 15m59.008146487s ago: executing program 3 (id=709): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r1, 0x9b, &(0x7f0000000580)}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x0, 0x28011, r2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x14, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x4008800) recvmmsg$unix(r4, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000001040)="3e98021422576e1f8f1d2ac6dd60fa759900007979a399e581581834335637dd5d84389402a09f581c09118cfd9d9c3310605ef0e1a48220cccc8f2366439a2c1b7086783e30fcbb6e7ef1659a765c75048da95556bf0484f00ce396330354e7680612e8d000224f9429bef58ae26f530809fe159a354b382c38706e3d3d55b394", 0x81}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f0000000000)=0x3, 0x4) setsockopt$inet6_int(r7, 0x29, 0x42, &(0x7f0000000040)=0x1f2b, 0x4) getsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000080)=0x14) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r8, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNGETIFF(r8, 0x800454d2, &(0x7f0000000000)={'dvmrp0\x00'}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) 15m57.539295854s ago: executing program 3 (id=717): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async, rerun: 64) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xe, 0x11, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x81020000}, {0x65, 0x0, 0x0, 0xfaffff7f}}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15m55.958932146s ago: executing program 3 (id=721): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="020440800e00000027bd7000fddbdf25050006002b0000000a004e2300001000fe8000000000000000000000000000390000000000000000dfff0000000000000f0007010100000005000500002000000a004e2110000000ff020000000000000000000000000001ff0f000000000000aaf0a42970e97cc6d47b062e9efa911d413c47c702bc912bf739c2ca142d1f158b2678f08fbe740b5816cc2b41b43620468e61006f109708b63ed60d323f0662f17e7cf1d8724bb60f41962dc90354b6f66838859e63"], 0x70}, 0x1, 0x7}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) unshare(0x2c020400) (async) unshare(0x8000000) (async) r2 = socket$kcm(0x29, 0x2, 0x0) poll(&(0x7f0000000000)=[{r1, 0x100}, {r1, 0x40}, {r2, 0x480}, {0xffffffffffffffff, 0x1008}, {r1, 0x648}, {r1, 0x300}, {r1, 0x4}, {r1, 0x1a80}, {r1, 0x5}, {r1, 0x1008}], 0xa, 0xb140) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000100)=0x22145, 0x4) (async) getsockopt$inet_tcp_int(r3, 0x6, 0x5, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async) r6 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @private=0xa010102}, 0x10) (async) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000240)={0x3, {{0xa, 0x0, 0x0, @mcast1, 0xfffffffc}}, {{0xa, 0x4e25, 0x7fff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xa}}}, 0x108) (async) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000001300)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000001}}]}, 0x110) (async) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendfile(r9, r9, &(0x7f0000000040)=0x8000000000000000, 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32=r3, @ANYRESHEX=r10, @ANYRESDEC=0x0], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20200}, 0x94) 15m55.471307401s ago: executing program 3 (id=725): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000000, 0x39071, 0xffffffffffffffff, 0x65969000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000ff0000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000200000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000010000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) 15m54.621402707s ago: executing program 3 (id=730): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000340)=0x1, 0x4) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000000540)) r10 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x4924b68, 0x0) getpeername(r6, 0x0, &(0x7f0000003b00)) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x17, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000060000000400000009000000181100004233e61733da0d18cf0e39bbca94c289d287df66ebcec0f17f9e15d85ea7a815ce9bc1c8c6364df6208482c35d8e", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf09000000000000550901000000008095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000bf91000000000000b7020000030000008500000085000000b7000000000500009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmmsg$inet(r0, &(0x7f0000003340)=[{{&(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000080)="9898aff7ece10ef2e2340df4ca7d5c8b22efb69134b52490165f141d6274ebb1939fc33bc44e460a7e24d9b835db70326266917f5e2f21c8b7e202bc3939cb2f480ecb0d1740e8c926930d434667800d5b0a40e0217f744aabf5acafbf65dd991701159e4a704f6000a952c3f23f6a824e382e8e0c2eb45852a167", 0x7b}, {&(0x7f0000000140)="ba146d9b3169c398fc0a2353523c6a4472624fc25d", 0x15}, {&(0x7f0000000180)="fec471064089fb1b607c9b3727f0d8d72a7e6c02f991e30f4ab502692e423569aee6228c3dbc47a0f70ab7bee25c074a1654bc9b14ce20f24a941ec7b572e0765e94be9520021be0dc2eadd91d09b6ec8f18261d20e41c7221722d9817513ca9801b46385e5efb764ebd50a1b288e4b9d4317d0ab39115f5c65c662f9f580a644abcf3006d9be00e9f4bde19699aba758dedcc837479a3618daf", 0x9a}, {&(0x7f0000000400)="afd6cf569739a1393e7605d25c5e0f1a7fd9556488c03c132ae89d3f3d719dfe863762e4686149b29c924098543e1f136166dfbccb4d694fc2241f01399382fd985fd8ae2d04e0fff455bf1ae89b7e138f8b2c9dd5c5d07e625234653171adedb785030b51fe9f7d353fa18086ed8d2fdfd1cb34d42f5861c98a656da62e68fc7a5dfc908c3297ff35128dd4877c57b1c4e08390ec161801ec9769ac73d1983ae042b5f4d82fc00959cf47a4149acf67732fb0ea43f89f3e047152ffe9c7c215163c035b1e13be84d774eb1d7c4866bda023245f7a96966ef772606e00", 0xdd}], 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="140000000000000000000000010000000800000000000000110000000000000000000000010d0000010000000000000028aefa7e0e0000000000000000000000070000000717bfac141441ac1414bb7f00000164010101ac14140e01"], 0x58}}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f00000005c0)="6add5a3e8e90a8b9b33571889fbac66c98499019d8d52195eb684555c79d6e3d7d1aefccbb44f4b048178a6fd32b6286b13610d194d856bec2e7a5e32c51de9835cfc6f17d4e2cfd71bfadf454b8c88db79b1e63ae", 0x55}, {&(0x7f0000002100)="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", 0x1000}], 0x2, &(0x7f0000003140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3f}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14}}], 0x50}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f00000031c0)="6af68b192c5b56ad7c3c70b2012de5c196a3a33d316c251c725ac2adfe49c3c81b07b6e9a3838fae8c37ec87d05f5f59145982ef6b2f91b022bef960f110878baf499d1086ca98430dc28e9274f7017c63460fb4be099490bdfb0b21d610be32f0bb458a31410b991ecc29620e96c24b8bc1a7fcd0d22872b70a51e65c36250165a32bb7d1cd", 0x86}, {&(0x7f0000003280)="b3896f3c13db24a6378e65cfb6ac69ced6daceaf888f4f69a551dfea2903e4574dae7a8a13e5f1e54466adb19121b4a90f644131dc435cef3331db68042a7e34c22a35763fa9ffaabbe104845d362a27147826c3361170460c332d7e", 0x5c}], 0x2}}], 0x3, 0x10) 15m39.390608354s ago: executing program 32 (id=730): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000340)=0x1, 0x4) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000000540)) r10 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x4924b68, 0x0) getpeername(r6, 0x0, &(0x7f0000003b00)) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x17, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000060000000400000009000000181100004233e61733da0d18cf0e39bbca94c289d287df66ebcec0f17f9e15d85ea7a815ce9bc1c8c6364df6208482c35d8e", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf09000000000000550901000000008095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000bf91000000000000b7020000030000008500000085000000b7000000000500009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmmsg$inet(r0, &(0x7f0000003340)=[{{&(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000080)="9898aff7ece10ef2e2340df4ca7d5c8b22efb69134b52490165f141d6274ebb1939fc33bc44e460a7e24d9b835db70326266917f5e2f21c8b7e202bc3939cb2f480ecb0d1740e8c926930d434667800d5b0a40e0217f744aabf5acafbf65dd991701159e4a704f6000a952c3f23f6a824e382e8e0c2eb45852a167", 0x7b}, {&(0x7f0000000140)="ba146d9b3169c398fc0a2353523c6a4472624fc25d", 0x15}, {&(0x7f0000000180)="fec471064089fb1b607c9b3727f0d8d72a7e6c02f991e30f4ab502692e423569aee6228c3dbc47a0f70ab7bee25c074a1654bc9b14ce20f24a941ec7b572e0765e94be9520021be0dc2eadd91d09b6ec8f18261d20e41c7221722d9817513ca9801b46385e5efb764ebd50a1b288e4b9d4317d0ab39115f5c65c662f9f580a644abcf3006d9be00e9f4bde19699aba758dedcc837479a3618daf", 0x9a}, {&(0x7f0000000400)="afd6cf569739a1393e7605d25c5e0f1a7fd9556488c03c132ae89d3f3d719dfe863762e4686149b29c924098543e1f136166dfbccb4d694fc2241f01399382fd985fd8ae2d04e0fff455bf1ae89b7e138f8b2c9dd5c5d07e625234653171adedb785030b51fe9f7d353fa18086ed8d2fdfd1cb34d42f5861c98a656da62e68fc7a5dfc908c3297ff35128dd4877c57b1c4e08390ec161801ec9769ac73d1983ae042b5f4d82fc00959cf47a4149acf67732fb0ea43f89f3e047152ffe9c7c215163c035b1e13be84d774eb1d7c4866bda023245f7a96966ef772606e00", 0xdd}], 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="140000000000000000000000010000000800000000000000110000000000000000000000010d0000010000000000000028aefa7e0e0000000000000000000000070000000717bfac141441ac1414bb7f00000164010101ac14140e01"], 0x58}}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f00000005c0)="6add5a3e8e90a8b9b33571889fbac66c98499019d8d52195eb684555c79d6e3d7d1aefccbb44f4b048178a6fd32b6286b13610d194d856bec2e7a5e32c51de9835cfc6f17d4e2cfd71bfadf454b8c88db79b1e63ae", 0x55}, {&(0x7f0000002100)="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", 0x1000}], 0x2, &(0x7f0000003140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3f}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14}}], 0x50}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f00000031c0)="6af68b192c5b56ad7c3c70b2012de5c196a3a33d316c251c725ac2adfe49c3c81b07b6e9a3838fae8c37ec87d05f5f59145982ef6b2f91b022bef960f110878baf499d1086ca98430dc28e9274f7017c63460fb4be099490bdfb0b21d610be32f0bb458a31410b991ecc29620e96c24b8bc1a7fcd0d22872b70a51e65c36250165a32bb7d1cd", 0x86}, {&(0x7f0000003280)="b3896f3c13db24a6378e65cfb6ac69ced6daceaf888f4f69a551dfea2903e4574dae7a8a13e5f1e54466adb19121b4a90f644131dc435cef3331db68042a7e34c22a35763fa9ffaabbe104845d362a27147826c3361170460c332d7e", 0x5c}], 0x2}}], 0x3, 0x10) 12.498320026s ago: executing program 2 (id=7007): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x7, 0x2}, {0x6, 0xfd}]}) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000540)=0xfff) write$ppp(r2, &(0x7f00000000c0)="43f1", 0x2) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', r4, 0x4, 0x1, 0x4, 0xffffffff, 0xc, @rand_addr=' \x01\x00', @mcast1, 0x1, 0x7800, 0x1ff, 0x1}}) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0xb, @dev}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_RT_PRIORITY={0x8}]}, 0x48}}, 0x0) 11.712461976s ago: executing program 2 (id=7018): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket(0x2b, 0xa, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e5b, 0x1, @mcast1, 0x5}, 0x1c) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) connect$can_bcm(r1, &(0x7f00000004c0), 0xffffff82) (async) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64, @ANYRES64, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="ecff000001"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2, 0x0, 0x0, {0x0, 0x2710}, {}, {0xffec}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}}, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x2c, &(0x7f0000000140)=0xffffffbe, 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@ipv4={""/10, ""/2, @local}, 0x0}, &(0x7f0000000080)=0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffd31}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r3, 0x0, 0x0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$rxrpc(0x21, 0x2, 0xa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a0104000000000000", @ANYRES8=r0], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r6, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) (async) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @multicast, 'lo\x00'}}, 0x1e) 11.334222562s ago: executing program 2 (id=7021): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c9"}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000002b80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002b40)={&(0x7f0000001600)={0x1508, 0x0, 0x5, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [{{0x254, 0x1, {{0x2}, 0x5, 0x2, 0x11b9, 0x40, 0x23, 'syz0\x00', "9eb93265736fa7679ce513ff6ff757fe48b919fc36d418a0d21b2858cc2b0cf9", "18b5deaa838eb46691eda380fea5199dd927c434dcdecc86a49b477b8f9ec740", [{0x2, 0x4, {0x3, 0x7}}, {0x7ff, 0x4, {0x0, 0x4}}, {0x1, 0x2, {0x2}}, {0x1, 0x4, {0x0, 0x800}}, {0x9cd, 0x9, {0x3, 0x2}}, {0x4, 0xb, {0x3, 0xe8}}, {0x9, 0x85c0, {0x1, 0x6}}, {0xba0, 0x3ff, {0x3, 0x3}}, {0x4, 0x6, {0x0, 0x3}}, {0x7, 0x4, {0x3, 0x938}}, {0x9, 0x5, {0x3, 0xc0}}, {0x8, 0xffff, {0x0, 0x2}}, {0x7, 0x800, {0x0, 0x6}}, {0xfff, 0x7, {0x2, 0x9}}, {0x3, 0x3, {0x3, 0x8}}, {0x9, 0x9ba, {0x2, 0x101}}, {0xa6f, 0x1, {0x1, 0x51}}, {0xa, 0x2, {0x3, 0x8c}}, {0x101, 0xfffc, {0x1, 0x5}}, {0xc4, 0x0, {0x1, 0xfffffffd}}, {0x3, 0x5, {0x1, 0x9}}, {0xe8, 0x9, {0x1, 0xd}}, {0x2, 0x9a, {0x1, 0x400}}, {0x19c3, 0x1bea, {0x1, 0x3}}, {0x5, 0x9, {0x0, 0x10000}}, {0xb, 0x4de, {0x1, 0x9}}, {0x4, 0xd, {0x3, 0x3}}, {0x4, 0xd793, {0x1, 0x7fff}}, {0x10, 0x1, {0x0, 0x5}}, {0x9, 0x4, {0x1, 0x6}}, {0x1, 0xf, {0x0, 0x60ee8e60}}, {0xfff9, 0x0, {0x1, 0xfffffffd}}, {0xffe5, 0xa8, {0x2, 0x8}}, {0x3, 0x1, {0x3, 0xfff}}, {0xac1d, 0x7fff, {0x3, 0x1}}, {0x5, 0x7fff, {0x2}}, {0xfc00, 0x2, {0x0, 0x297b}}, {0x0, 0x0, {0x0, 0x7}}, {0x7b5, 0x7, {0x0, 0x2}}, {0x3, 0xbea, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x2, 0x9, 0x3, 0x6, 0x6, 'syz1\x00', "4f9bcc182b4ce82112e0a7e17d7be7da88f9f8fd1e14439be3bacd657f861477", "34f2effbaf9d82cd36b9287c1171d927d22e9cd004887aa893ef49d4b7d4eb09", [{0x800, 0x3, {0x1, 0x9aad}}, {0x0, 0x9, {0x3, 0x1f41}}, {0x4, 0x4, {0x2}}, {0x2, 0x5, {0x3}}, {0x0, 0x8, {0x1, 0x2}}, {0x5, 0x6, {0x0, 0x9}}, {0x7, 0xf, {0x2, 0x2}}, {0x3ab, 0x7, {0x0, 0xe}}, {0x5, 0x1, {0x0, 0x20cc}}, {0x3ff, 0x1000, {0x1, 0xe}}, {0x5, 0x8, {0x1, 0x9}}, {0x0, 0xf7, {0x3, 0x2}}, {0x1740, 0x0, {0x2, 0xe}}, {0x3, 0x1, {0x0, 0x8001}}, {0x9, 0xfffd, {0x2, 0x5}}, {0x2, 0xf4da, {0x1, 0x9}}, {0x7, 0x7ff, {0x1}}, {0xe1b0, 0x800, {0x0, 0x7fff}}, {0x8, 0xf79, {0x1, 0x9}}, {0x0, 0x3, {0x2, 0x7}}, {0xaeb, 0x1f6, {0x0, 0x5}}, {0x0, 0x4, {0x1, 0x7}}, {0x9, 0x5, {0x0, 0xdb3}}, {0x7, 0x10, {0x3, 0xa82}}, {0x0, 0x8000, {0x0, 0xffffffff}}, {0x784, 0x82f1, {0x0, 0xff}}, {0xa, 0x0, {0x0, 0xfffffffa}}, {0x7, 0x3, {0x1, 0x8000000}}, {0x6, 0x9, {0x0, 0x400}}, {0x800, 0xa586, {0x1, 0x8}}, {0x64, 0x7, {0x0, 0xfff}}, {0x5dcb, 0x2, {0x2, 0x4}}, {0x4, 0x7f, {0x0, 0x4}}, {0x7fff, 0x4, {0x2, 0xd42b}}, {0x7, 0xfc, {0x1, 0xc000000}}, {0xc, 0x6, {0x0, 0x800}}, {0x7fff, 0x7, {0x0, 0x100}}, {0x200, 0x5, {0x1, 0xb}}, {0x4, 0x7fff, {0x1, 0x3}}, {0x15, 0x7f, {0x3, 0x3ff}}]}}}, {{0x254, 0x1, {{0x0, 0x9}, 0x4e, 0x4, 0x8, 0x4, 0x22, 'syz1\x00', "16e7c4676f3375f378facac7d9b98ba4f305190852a0a4192621567761f50a54", "d907079798382b4bea44ea2f32d6ef6f839febc7010a2cba8afdcfcce55c1857", [{0x2, 0xa7f7, {0x0, 0x8}}, {0x6, 0x5, {0x3, 0x3a8}}, {0xfeff, 0x7, {0x0, 0x100}}, {0x7, 0xfffd, {0x0, 0x100}}, {0x54c, 0x0, {0x2, 0x749}}, {0xfff, 0x5, {0x2, 0xef7a}}, {0x10, 0x0, {0x3, 0x3}}, {0x484, 0xc7c0, {0x0, 0xa}}, {0xe8a, 0x86, {0x3, 0x2}}, {0x4, 0x3, {0x1, 0x4}}, {0x0, 0xb81b, {0x3, 0x10}}, {0x200, 0x3, {0x1, 0x5}}, {0x81, 0x40, {0x2, 0x6}}, {0x9, 0x6, {0x0, 0x10000}}, {0x7, 0x1115, {0x3, 0x58af}}, {0x3, 0x9, {0x3, 0x4}}, {0x3, 0x1, {0x0, 0x9}}, {0x3, 0x7}, {0xee44, 0xffff, {0x2, 0xfff}}, {0x2, 0xff, {0x0, 0x4}}, {0x9, 0x8b2, {0x1, 0x100}}, {0xdd14, 0x3, {0x2, 0x6ae}}, {0x8000, 0x2, {0x3, 0x6}}, {0xb948, 0xd, {0x1}}, {0x1ff, 0x1, {0x3, 0xb}}, {0x4, 0x7, {0x0, 0x4}}, {0x1, 0x0, {0x0, 0x1}}, {0xf800, 0x9, {0x3, 0x6d}}, {0x3ff, 0xa, {0x1, 0x7}}, {0x4, 0xb62, {0x2, 0x80000001}}, {0x1000, 0x0, {0x2, 0x80000001}}, {0x8000, 0x100, {0x2, 0x4}}, {0x6, 0x8, {0x1, 0x2}}, {0x5, 0x6, {0x0, 0xe}}, {0x4, 0xfff1, {0x3, 0x4747b1ed}}, {0x9, 0x0, {0x3, 0x2}}, {0x100, 0x6, {0x2, 0xf}}, {0x9, 0x1, {0x0, 0xfffffffa}}, {0x6, 0x9, {0x0, 0x8}}, {0x8, 0x8, {0x1, 0xd}}]}}}, {{0x254, 0x1, {{0x3, 0xaa}, 0x1a, 0x4, 0x5, 0x2, 0x28, 'syz1\x00', "2692780c0ec92d3aee70dd0cdacddb1fc302e2ebfc87c2fdc50bf0c64568d4e7", "5caa7b5b998fcb5ee101d0e555236d0d643b6da82c83bc9460c649141afbc086", [{0x6, 0xd, {0x1, 0x1}}, {0xdec1, 0x6, {0x2, 0x8}}, {0x31, 0x7, {0x1, 0x6}}, {0x0, 0x100, {0x0, 0x2}}, {0x6, 0xe720, {0x0, 0xffff}}, {0x3, 0xffff, {0x2, 0xff}}, {0x9, 0x6, {0x1, 0xffffffff}}, {0x556, 0x8000, {0x2, 0xfff}}, {0x7, 0x3, {0x3, 0xf3c1}}, {0x2, 0xe, {0x2, 0x1}}, {0x0, 0x1839, {0x1, 0x61b}}, {0x1, 0x5, {0x2, 0x7fffffff}}, {0x4, 0x2fcc, {0x2}}, {0x6, 0x4, {0x0, 0x758}}, {0x60d, 0x0, {0x3, 0x100}}, {0x0, 0xb8, {0x3, 0xe}}, {0x300, 0x6, {0x1, 0x5}}, {0x3, 0x2, {0x1, 0xfffffff9}}, {0x7cda, 0x3ff, {0x2, 0x9}}, {0x100, 0x4, {0x3, 0x8}}, {0xfff9, 0x3e3, {0x0, 0x3}}, {0xaf3, 0xff, {0x1, 0x80000000}}, {0x2c4, 0xb136, {0x1, 0xffff0001}}, {0x5, 0x1, {0x1, 0x7f}}, {0x101, 0x2b, {0x2, 0x7}}, {0x5, 0x8001, {0x2, 0x8}}, {0x5, 0xb, {0x2, 0xfffff1cb}}, {0x1ff, 0x8, {0x3, 0x80000001}}, {0xe, 0x4, {0x2, 0x80000001}}, {0x101, 0x3, {0x1, 0xfdc}}, {0x6, 0x4, {0x3, 0x5}}, {0x3, 0x4, {0x2, 0x401}}, {0x7, 0x8}, {0xd5, 0x9, {0x0, 0xc}}, {0x800, 0xa193, {0x0, 0x10001}}, {0x4, 0x7, {0x1, 0xf0}}, {0xec55, 0x3, {0x3, 0xfffff801}}, {0x3, 0x4, {0x2, 0x8}}, {0x7, 0x1, {0x2}}, {0x4857, 0x3, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0x224}, 0x40, 0x5, 0x8, 0x0, 0x21, 'syz1\x00', "8e19384337518a253d96479893923a6586eccce0512c6cc5decb5c3f184aabab", "583dd612f4c364976efabd1cf4dfebf846d2999f505a3dc041aa6777131b2518", [{0xc3, 0x609, {0x3, 0x6}}, {0x7, 0x7, {0x3, 0x3}}, {0x7, 0x40, {0x1}}, {0x8, 0x4, {0x3, 0x9}}, {0x200, 0x1, {0x2, 0xf}}, {0x1ff, 0x8, {0x3, 0x9}}, {0x5, 0x8, {0x2, 0x842}}, {0x1000, 0x4, {0x0, 0x800}}, {0x200, 0x200, {0x1, 0x6}}, {0xfff, 0x5, {0x2, 0x40}}, {0x40, 0x96a5, {0x1, 0x5}}, {0x4e61, 0x3, {0x0, 0xfffff8a5}}, {0x9, 0x4, {0x2, 0x3330}}, {0xfff8, 0x10, {0x1, 0x7ff}}, {0x3, 0x100, {0x3, 0x3}}, {0x1ff, 0x48, {0x2, 0x7f}}, {0x101, 0x1, {0x1, 0xff}}, {0x20, 0x3ff, {0x2, 0x5}}, {0x4, 0x9, {0x3, 0x9}}, {0x9, 0xd7, {0x2, 0xda3}}, {0x1ff, 0x6, {0x3, 0x3}}, {0x757, 0x3, {0x3, 0x6}}, {0xd, 0x1000, {0x1}}, {0x40, 0x8, {0x0, 0xffff55bd}}, {0x7987, 0x2, {0x1, 0x80}}, {0x4, 0x0, {0x1, 0x100}}, {0x8001, 0x6, {0x2, 0x7fffffff}}, {0x1, 0x100, {0x2, 0x8}}, {0x5, 0x101, {0x1}}, {0x4, 0xfff6, {0x1, 0x9}}, {0x2, 0xe, {0x2, 0x7}}, {0x8, 0x1, {0x3, 0x5}}, {0x4, 0x3cfc, {0x1, 0x9}}, {0x5, 0x9, {0x0, 0x3}}, {0x401, 0x8, {0x0, 0xbaa8}}, {0x400, 0xfff1, {0x2}}, {0x9, 0x9, {0x1, 0x8}}, {0x0, 0x1, {0x2, 0xf1}}, {0x54, 0xffff, {0xd6ff1014a91fbca2, 0xb2b}}, {0x4, 0xfff7, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x3, 0xe6}, 0x1, 0x6, 0x401, 0x5, 0x8, 'syz0\x00', "f65c92ece67469abca6152d38e2905975d15877703b2b9ace3192ce537de2108", "4496eed6e2183153e9547d917d4812c63de8662b8aed80ada765d9dccd0220d1", [{0x3, 0x7, {0x3, 0x5}}, {0x1000, 0x5, {0x3, 0x1}}, {0x7, 0x200, {0x3, 0x2}}, {0x4, 0x6, {0x2, 0x7}}, {0x6, 0x8, {0x1, 0x2}}, {0x1, 0xc3a3, {0x0, 0x2}}, {0x1, 0x101, {0x3, 0x3}}, {0xc8a3, 0x7ff, {0x3, 0x4}}, {0x1, 0x7, {0x1}}, {0x0, 0x0, {0x2, 0xc}}, {0x0, 0x6, {0x3, 0x6}}, {0x9, 0x7, {0x1, 0x7ff}}, {0xb, 0x62f2, {0x1, 0xfff}}, {0x4, 0x400, {0x3, 0x400}}, {0xfff3, 0x8, {0x0, 0x5}}, {0xd, 0x1c73, {0x3}}, {0x1000, 0xfff8, {0x2, 0x3b8f712}}, {0x7, 0x1, {0x2, 0x8397}}, {0x5, 0x8000, {0x0, 0x6}}, {0x5, 0xf3a, {0x2, 0x3}}, {0xffff, 0x7, {0x3, 0xf2}}, {0x6, 0xfffb, {0x3, 0x59}}, {0x6, 0x4, {0x3, 0xb}}, {0xf, 0x4, {0x2, 0x7}}, {0x6, 0x4, {0x3, 0x6}}, {0x1, 0x4, {0x0, 0x2}}, {0xe5dc, 0x8000, {0x2, 0x1}}, {0x7, 0x7, {0x3, 0x100}}, {0x401, 0x80, {0x0, 0x97}}, {0x7, 0x8, {0x1, 0x9}}, {0x0, 0x1, {0x0, 0x8}}, {0xd0, 0x9, {0x3, 0x20}}, {0x8, 0x2, {0x1, 0x8}}, {0x7, 0x7ff, {0x2, 0xfb3}}, {0x778, 0x0, {0x1, 0x387a}}, {0x1f4, 0x4, {0x1, 0x1}}, {0x183, 0x6, {0x3, 0xf14}}, {0x7f, 0x6, {0x2, 0xa9bf}}, {0xd, 0x5e, {0x1, 0x4}}, {0x4, 0xa, {0x0, 0x46c839dd}}]}}}, {{0x254, 0x1, {{0x3, 0x5}, 0x5, 0x7f, 0x5, 0x401, 0x16, 'syz0\x00', "15903ae5475dde6bf97c8460cfa8660acf3c21cacdd8450a4149b1960afe1fa1", "ea8768c10a6f962b714e85fc06f6d151b90301a4c12de1b4fd55bd074142dfba", [{0xcfd2, 0x8, {0x0, 0x7}}, {0x2, 0x7, {0x3, 0x2}}, {0x5, 0x4, {0x2, 0x5}}, {0x0, 0x0, {0x1, 0x8}}, {0x1, 0x3, {0x0, 0x3}}, {0xa95a, 0x2, {0x0, 0x5}}, {0x4, 0xaf4, {0x0, 0x2}}, {0x7f, 0x800, {0x1, 0xfff}}, {0x2, 0xfff2, {0x1, 0xfe8}}, {0x0, 0xac3, {0x2, 0x7}}, {0x0, 0x5, {0x3, 0x7}}, {0x5, 0xfff7, {0x0, 0x8}}, {0x6, 0x1747, {0x1, 0x8}}, {0x1ff, 0x7ff, {0x2, 0x5}}, {0x3, 0x5, {0xeedbbd93fc8e7c5, 0x800}}, {0x164, 0x100, {0x2, 0x1}}, {0x5, 0x7, {0x2, 0x1}}, {0x0, 0x9, {0x3, 0x4}}, {0xc4e, 0x0, {0x1, 0xffffffff}}, {0x3, 0x2, {0x2, 0x7}}, {0x5, 0xaf, {0x0, 0x9}}, {0xb, 0xd5, {0x1}}, {0x6, 0x8e, {0x2, 0x8}}, {0x0, 0x203, {0x0, 0xfffffffe}}, {0x400, 0x5, {0x2, 0x7}}, {0x4, 0xe6c, {0x2, 0xcd7f}}, {0x1, 0x1, {0x2, 0x9}}, {0x1, 0x6, {0x2, 0x9}}, {0x3, 0x5, {0x3, 0x7}}, {0x3d22, 0xb36, {0x2, 0xfff}}, {0x1000, 0x466, {0x3, 0x2}}, {0x4, 0xa, {0x3, 0xf8}}, {0xa85, 0x5, {0x3, 0x8}}, {0x61, 0x5, {0x3}}, {0x2, 0x8, {0x2, 0x4}}, {0x6, 0x1000, {0x0, 0x3d9}}, {0x8000, 0x4, {0x4, 0x10000}}, {0x7fff, 0x4, {0x3, 0x5}}, {0x87a4, 0xc9c2, {0x2, 0x5}}, {0x2, 0x7ff, {0x3, 0x9}}]}}}, {{0x254, 0x1, {{0x2, 0x6723}, 0x5, 0xd, 0x5, 0x4f8b, 0x23, 'syz1\x00', "f3ba882998ebb7b22b4512de0e06e58a4fcb7ac6a4ef983ddfbb4449cb37b464", "a62cd68eaba483a6ba64b1d2a6dc53ed2a67af65500c3f323cb2af952cdfc119", [{0x1, 0x7, {0x2, 0x80000000}}, {0x8, 0x80, {0x3, 0x1}}, {0x0, 0x3, {0x2}}, {0x379d, 0x2285, {0x1, 0x5}}, {0x3451, 0xfffe, {0x0, 0x9}}, {0x6, 0x9, {0x2, 0xd6}}, {0x200, 0x2, {0x1, 0x9}}, {0x9, 0x4, {0x1, 0xfffffffd}}, {0xe, 0x8, {0x2, 0x9}}, {0x9, 0x56e1, {0x2, 0x800}}, {0x7fff, 0xacd, {0x2, 0x61ad}}, {0x1e69, 0x0, {0x0, 0x7}}, {0x7f, 0x4, {0x0, 0x5}}, {0x214, 0xb0c, {0x2, 0x10001}}, {0x101, 0x10, {0x3, 0xe69}}, {0x545d, 0x51, {0x1, 0x8}}, {0xa, 0x91, {0x3, 0xe0}}, {0x6, 0x6, {0x3}}, {0x1000, 0x7ff, {0x3, 0xfff}}, {0xb, 0x1, {0x1, 0x1}}, {0x9, 0x401, {0x3, 0x80000000}}, {0x4, 0x5, {0x2, 0x1}}, {0xffe9, 0x800, {0x1, 0x446}}, {0x2f9c, 0x1, {0x0, 0x7}}, {0x400, 0x8, {0x3, 0x5c}}, {0x7, 0x5, {0x1, 0x2d1}}, {0x0, 0x401, {0x1, 0x4}}, {0x4, 0x5, {0x0, 0x4}}, {0x2cd, 0x3, {0x1, 0x3}}, {0x0, 0x1ff, {0x0, 0x8}}, {0x6, 0x651, {0x0, 0x5}}, {0x40, 0x2, {0x3, 0xc73}}, {0x2, 0x9, {0x1, 0x2d6a}}, {0x7, 0x7413, {0x2, 0x7fff}}, {0x7, 0x2, {0x1, 0x3}}, {0xf208, 0x9, {0x2, 0x3ff}}, {0x8, 0x80, {0x2}}, {0x7, 0x80, {0x3, 0x4}}, {0xee, 0x9, {0x1, 0x3}}, {0x9c, 0x40, {0x2, 0xfffffff7}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x0, 0x0, 0xa7a2, 0x2, 0x12, 'syz0\x00', "1072e05abdb925efca00f7ec1db9254d8e8b14f4f8e458bcfb8db4e5a50a6a21", "8d3488e78929a01135e6e04334186970f4c4a7035a197b773c97ae6a79926113", [{0x4, 0x907, {0x3, 0x5}}, {0xdc, 0x0, {0x0, 0x1}}, {0x1, 0x401, {0x1, 0x7f}}, {0xc, 0x5, {0x2, 0x10000}}, {0x9, 0x5, {0x2, 0x1ff}}, {0x5, 0x4, {0x1}}, {0x7, 0x8001, {0x0, 0x400}}, {0x6, 0xf, {0x1, 0x8}}, {0xfff9, 0x3, {0x2, 0xfffffffe}}, {0x2, 0x8, {0x2, 0x4}}, {0x4, 0x6, {0x0, 0x5}}, {0x2, 0x8, {0x2, 0x2}}, {0x411, 0x4800, {0x3, 0x4}}, {0x4, 0x6, {0x1, 0x2}}, {0x6, 0x6, {0x2, 0x3ff}}, {0x2, 0x5, {0x3, 0x7}}, {0x0, 0xffff, {0x3}}, {0xfff, 0xfffd, {0x0, 0x4}}, {0x5, 0x7, {0x1, 0x7}}, {0x8, 0xbf5, {0x1, 0x7}}, {0x1000, 0xf71, {0x3, 0x1}}, {0xff, 0x0, {0x2}}, {0xff, 0x452, {0x0, 0xa}}, {0xe, 0x2, {0x3, 0x6}}, {0x9, 0x42, {0x0, 0x2}}, {0x3, 0xffff, {0x2, 0x7}}, {0x3, 0x8, {0x2, 0xa}}, {0x0, 0x9, {0x2, 0x1}}, {0x0, 0xf, {0x2, 0x7}}, {0x2, 0x5, {0x0, 0x9}}, {0x6, 0x4, {0x0, 0x8}}, {0x8, 0x7, {0x0, 0x7e08e797}}, {0xfffd, 0x5, {0x3, 0x3ff}}, {0x8, 0x4, {0x1, 0x5}}, {0x4, 0x1ff, {0x2}}, {0x2, 0x6a3a, {0x2, 0x2}}, {0x9, 0x9, {0x3, 0x4}}, {0x0, 0x3, {0x3, 0xa}}, {0x9, 0x3ff, {0x3, 0x1ff}}, {0x200, 0x8, {0x1, 0x100}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x1}, 0x8804) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000240)={0x9, 0xc, 0x1f5, 0x4, 0x1}) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r7, 0xeb923771a6a8c729, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x200840c4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r7, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r4, 0x0) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000580)="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", 0x1b6}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)='v&U', 0x3}], 0x1}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r10}, 0x20) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000280)={r10, 0x1}, &(0x7f00000002c0)=0x8) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000100)="dc354157b68cdfe7371d35f95e9701d1e1179daab1b539a647e30f8cb203ea5f8a1c872c4a04e779f4359e633aaade6022fe13f9811cf105b8c00bc6a3f2a382cfc9df836634c79d190be6f14de5c19f4388face685ee4531e14122d9e87549347a30eff3a1a62e150e01882c63c1b6902cc3ec6ded69eb4ba4b83b2e8b6b3040a452e81fb6015516320f2354d0bbf88f7b888c95c641d8e86d97391873cffcbcbe667f13bc2162a4dc3bb867c78814bf29417e188d84cbf", 0xb8}, {&(0x7f00000001c0)="9009184dc63d33ebee300fe9abf60f8851067b88a8cf52af13287e6acee1a24fa25aa96583611550ff108d75c550c6cbfbbc99139b839a", 0x37}, {&(0x7f0000000200)="275c97bdaf8c4e274997b3b8006b96b145b0e6fbfa6708", 0x17}, {&(0x7f00000003c0)="011aeb6e0ddcdc5bbae28d9b830eefd72c656dd75dd532ff52347c9b7e87001e050ae34ddff5c85573ead8665261c90422079e01a47965489da62164dde76e8c58df2570159b168329d1d0a9de59e659feb4adeee6774111f649601863710553d0ea3b9019daffa96d83d5caf5250fad9632a4cdc51a5c06cdbb136c1a494cd6c19aad51b9cad79ded4776d8534b5e3d92e28e255e06c0ffd26fe73f00d3c9c3f9ab722d5cecdd30ac99b81931faf06436da06a9a7e0eb72c60979a161d9501c680957354ac9d7eba168f8204845de86020d457cf372cd677d3f8f7a11785f8ba4a1b750807ad8", 0xe7}, {&(0x7f00000004c0)="44778c310d165e9704c2ad5916a185977ca097f5", 0x14}], 0x5) 9.0344022s ago: executing program 5 (id=7041): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) bind$can_raw(r0, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000f99631000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x3, 0x1c, &(0x7f0000000840)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9a", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000580)=@req3={0x7813, 0x3, 0x2, 0x81, 0x475, 0x4, 0x3}, 0x1c) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x1e, 0x4, 0x0) sendmmsg(r7, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c40)="eeebda0e5da6a279a29651a96f09c3f8e4ef4223548a2dfbb7b66b14205fadc308fdd2fba9bccaaad0ef76ea19cd2c1bf57db9cec10505662e12f25481abb10ee76c05f27377152ae42b2c8952092b5eab6450cb02627f53fb0d9503b34af7214aae81209b23dc1bd51d04dc4cc1167cdd3f482f1805036ea69b26abc13b07d6943a47a1405ce46f48ef1d17f60000e15ffe9853ff5209fcc8b004d486f224476ae0a4f1", 0xa4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000700)="886f392103da9c7dde773c292b69ed1602d1c5538c22c1963570f27412fe1268a28e35fed2f1770939eae197e745dcd8084029fe89c84dabaae3552ba53c85bf7403ad149dc259207cbe26546331c04792d93a18d41bdc34478b257d04d255ed151ce5afe6a57988d2d6890705af5f392ddb26e750405f04cba516e617ab16f01438d7f6f4ca9a357f1e42664a36dbf50a6157f9971991e56704122af2", 0x9d}, {&(0x7f00000007c0)}, {&(0x7f0000000900)="7bcd918fd9614ca6917febc33838ddd2628c7c2aac6949a9a851bde5acce11fc5179f283216b7ecbab61ac1daa40bd9b683b212e8f196b19e119a09c5bdfdfed7651b3bfc84ff9c4ddbacd8110ac81afdcf456c50b7327ecad6dc2200f99c88eab84eb340e121510ac5c97c6a27f417c4269ffa734312f487cf82915ace061215884302be42bba14567f21ef3f437c9ece7013adb1ce3a41571f3b3b80fd7c8851940b7361ea8702e106c1a1425c011096a4c2339fd664c0bd66616fb6e7191ba29d424d63ae362ae58fe3de28ae0771510d5001adb504afd3e76868ebeb30e8fd1b88395ba9308de2bfca373449a0128710", 0xf2}, {&(0x7f0000000a00)="f12ae8d3d0c4dd9cfd2f06a5f97a249b24c0d2092c3c30be837c77807ceea77f7beb71db937884d9041f35c43a141375d2eea2cf24720da6eee2f66ef685cf91d47b08d09b027975f7a252760b585e5b05f9a2e6ad44d56c5788b76567d2dbc16fa0239fb49d079576bc9a10f049e04279fecb860cb5a2f18952d042441e95d1c1917058f88ed3016c85306d614aeba87bcfe4241fffd8eafa5d7bef33a5ed2c3fd2ed33a7487ec020be67a4181923f71fe7b5728e21c7026b8f0c9ac199a67e73a5da02cce85e2ab295221471413f1216128deb2754777288ad6da7c4", 0xdd}, {&(0x7f0000000b00)="d3a1aa3ce3a24c80b7e305434385593b98979b9619c341712c152e71c56833e33ffe5b331f458aab37f6b5b04a69ef599b177e4b04900c70763848dac1d6af6c274a3dd6db822a46db692b5d25f5777a5505f3768bf3b2b2b42b0686059919df1ae8d5b97a3a6322dec5d8eb3891ba4eaf17e2520777f783d64f9ce98f9c3ec55f18", 0x82}], 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x218}}], 0x2, 0x9200000000000000) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x62) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20) r8 = accept4(r4, 0x0, 0x0, 0x800) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x58) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="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", 0xfe}, {&(0x7f0000002600)="cbc6349523a0ea022f4cf4838357a175a757eda2993c746c20729781842a329a6607af23438e764e99603623b307325e6d3246354da1ee3dabdb9db63c86f2b3706e13d36ef334df63cf8e9c2542e3c0d1330523033d7021e7bc91ce35de076cd79bc08a60e8774db941c5dffc8e66cf569b4356ea541d799497ef4c247b7a5b9d340ff34c43b99380dcc288b1c9e8226f76ecb1e1f836698100c47e5872cabff48f59c936113b366f187d34d50865993bda1159532a5a59e8888808326d2c234c", 0xc1}, {&(0x7f0000002700)="bded20d0bc55502d0e6967c4266d67cd732cc399ca6cd1c27871aa84e0dd6aeb9fbf9857f13218c3508c07523e2767cb560b71a98edcb4e047c2", 0x3a}, {&(0x7f0000004c80)="f95a10f66169d1ab37e77e19e1c399c02551ae2287f7a999a237887328796c460802ebb786521db0f7225520494dee55ccf498e9fde25bd0a98d596e3f5764431f8bd96d8ba8e77dead9fcbe13cf433c817a080600b57306edc19bfd245ffdb3e6254ab77e74e3ae10f84e663549a8b4bb225e5f5cd39d11197f805d228550c938fc1273fe6bc47abe9197093935b6cb2b306643267ed2371c9443904c7edc16fae1e60a939a71a124e1832c0f4d631f007fc20ecf253f332a631d8eaa79fbad00ff2d4f72c0ab55a5defae6fae0d439f9d6424c6a5d42fd3625e8625fa2ed2dbebcab90ba227b9b1be06ca33ab4f19f85d91804ff778b73415c8ed9d74e826de8a8e9d6d7f36f914f62f2d499ebdf0939d451e9c893f07bd59a24e4651f1038bcf7f73bfc294ae7d921e1a9971dedd11be3806031cc3382ba4196b05a1d2476f5e3aebd95f3ab433b20ba38513d9a5704e7fea545f6ead41a02b7b90fd59b0971179da8f102e4bffb7045f39e990755a188be862bea945545917d7998d0b0af63de65edd6ab6cfd473c33878f80f382106e4ab3613c169f1774cd1efbeda624defe9f5a7805e2a2c5b9b985730d4f101c1de4237ab4812d33f21762347b25fedf8bdfaa861cdf80f90a60acf47acf97f057ea826deb554244f2027560557d0949ed238506fdde1fc0bed7b24b8111631a6f9da3c623a37b5f9939df6ef9a980f94f10294036e7a4f17632963f718a5c7e41fc143131dbf81958956001bc38099f74923f09985045cb03a88d4b2a457d9f8a6a23ff95f3b7b89c9953531cfdca3b068340f988bd659b7e9123b8ac5c4cddc039b92e3e8287f71c677cdd973793b215dd600f17a221bb991b987ca896c05b2039259f9a9c86f683e46d6c0be010588d4045d9499b8b789bb2c7c786257ca3fcc863cf327b158ba1ab73def4c4130deadbd55c49ba01781333e1ee3f2a279ee705a00feb0bd06461b6dde471c1353566d462975e63912582584dabdc2fe0213eeb3c7d232ef900796782324444089303cae9ed316514d3dcfb3bab1720a939af314904d835fbb3034e233028970c45007a303d38c5c75de3c6482dd119aa00bb5ddf4f7f6911080e04dd0f3a1e8b5cac916ed5dc8681d7143e9040d5f631e0e1c0fc9d4c96866ab466082f395804394b1a25457b310f972540d40845bc83a4540b82b885fbffc2295769723a1a45f5c79711ac9ecfd1eaeaf10068bda1716804fea5f3ff9278bcdf7d81b88de152b7525b364ee98176a8d82c7c8b5adcfbf3d9ee71110ccb55cd0e4c0ce4ecfc1b6051b95d577b75b73645d9fcb0794bc9fa0c9021cc461dd40330cc42b789499b3f3c8ff6a2f3ab0640a9545577ecc762bef4ed004d2cb4a923a3fbf11d5c8c93bf872cc2e7e92075353400f70326c65476ddb72c2504d17c88a1fbf629513bffa7d909a94ee67afbb46c89c2307f38b3292a24f5e5bf65f8ba7445fbc352d0f936e065e3fb2f00621c68bbf857dfd10fe2462eff592a1ecb73d98a9fe5bede3f1f0366c7fa7c6b56454166b189419c7373d7eee148e9f790a9d105aeceb1c6b6d2b47d4bb99f29ec75f4c096dafc979987f1dcc8428897e92a804af2bda0c741e5fb43073d43445e7b646dc9acfe0a81dc22765bcb42a03913422b8098882418017619e7f9cf7267d35e3204b94139dadc990ae89cda026dd49dc1b694e80dfeded86d9f386f67d96d1fc949eb4d49a4bb78622f903f7aa28a2517c16058fc1ff0fe3ac64ae8b72d44d66ac37743d92f9087ebfbf462ffac16e1a7dfebc73ad43f51b31375df054a90bc83e9355379dae6ad7919955ab6de5d6b4a6d34f1b56e1afe8dbc5348518a7a13c1f1d8f333f237221ce306292800db83eaee3d9be76512ad2f1b31bf3ef2a86e1535b6066718ef504d6aa030771e59946597d9214de174ee082c190db1547470193280e75cc6712f94cdca23b131fb79d1d0d1f888f345185fb1a5c8096efe68108ac7b4d2a822a6f7e153d4caaf13e26c9d02040244ccf747bcd7fc52385f531633c5550cc96c0df8d16cf4ce34902bc7a43fd4862ea273abb7866cabed57c59e2974365a7602dc7d609fcae723b8eba081d6cca001f717aeb11812b5237ab6a1a21b3c53eff9de6f4bd2163e843b90e34fb0745e398049e542766a1a36f1f0dd5858379134e1cf737f5993b4087a5dfe3a727fefb81776a31c0d4160f788b1c0c25afc54736307ffdae808f2752e7604de4e6486f37964e403cd279f5e35dc7bed1403f05d42c9d9551f023bc793a3643e87f2050ff1f8fa9b511a2c2b8be257951712d5770b98e3eeec7e056bc9ba6cdd8551e093a7d71390fdcb85cd99b67228afa3076a3a7318b9dcc3947c478807f648a6f3f1ab886ef25dbf2a0ff07993f6df9e78761cbad890a5ce8dfb096401e5e58c0bde7eea58b27195e0442850c2a2a1d66d0d1f7f3ced3f1e56d56ea2b75cca3b77407145e4bba3e429638826b44c7fe14d7c246d737af3b94cc865a6363a2b4054556512c5681b447d12e36e959d90e94f3ad28b32821d79d7eed3b3a772416635700c4e6fabeec16c222743a7ea87bc24aa3179a5345b88e3eb1c9f73201a561c44719dcd49c3a035374c99397b212794167a645fd966cdd3b63fdcbb66b54fd72faff5dc4f34254dcc83178c9a9201cdecbc6b1290f508f98997d6508b87cc80ef75995537373e09807e8bab44d0b84318b6c4bb1ab926cc615184a5afc497081a18698f49781bb53ceb5dbebefcb0bee242f9f30e22d4dd84a455116d172c80ec6425e7f19e5623016c239682cc42537c0e12b723d522c6dcbef921939b29cab2267f30e1b6498c543e7e2d7f109ce399e66926388f6d933c45f5c3b751812619736c294a7746f2ab1b7cd9fc8f3709c0625ee4315de9780e3eab12d4711717f1ad7d42b8eec8672eb372dc1ba99bdc374d8aae0e75d5e4250dc8c57db627be1bc2e02bbe4611ab5ea1be428e5d6e451523e1e99f60022471c72fe8eaf08060156060a7d6438003c5a61d35149e4784b8ff227536e2e92dc7298251ff1a81bae5625f881fd256ff823b5798ab87db40e4f675743d3f29b337f6836afaa857abbd7d9bc888425984013ecc71bab3b4f54ae3f1bfaf4cb4e349df4f9b45b102bfb0db3d9445294e006967fbeb2880eca48c844713d370a4c2edbbd8001bd3add5fa5422a2b5ee5bf060933022d036a29404263e380da54ac5d4dd46747525048e8f22555c84f7b97d84b6d9eba256c9f743d44cfccf190542fc0f1d61bf889a1688abba1155c73e2ea15f004db4abdf253771ea6b82d6459ed5d16acfa75620db4e7d314552f29e396d4bc215445f04a4e289355b1e7892da1104d8f86dceb2c3ab28e84904e4de1408df5dcd79d33fba33a092e2c4501a6fd7784d8f767bd3b791076ece63f74e0b550bd06cd9bc3e2beb5f0893e4a7b5411c22ae77b301a320b282c4bf37dd7560ffd030ff8c213d6d2622dc742e55150fc3defa3327098ae4a540c041f4d4998067616cea2d467eee7b1beecd894d22d8973fb88673f501dc1a25d97f4a1179244178671cd1d416c68cbe0f3c5cdbbabd42e438e0e6683ebcac6eb588b1285b87b0319b047125e3e6d08816637f58d53e21dac74703cfd6b65c68bb3d9a263c06ae1fa59f2e01db16259a62dee6788e1aec9a8094e8dd75914bb6a2cb21cb639adc54fee9df443abac2b7a46ad5c086db7f620f7967c6861d184eb380d2656a3df68dded587a5d87326090c1aa6ee5cec52b3f2323e90ea3168b1e34bd18db749224955693911570b041bb57c4339dc73181ed04e23017a59eecc8ac6daf55314e3da643dd52147b944936b641f3a02e7282fb91aef0c8152ce86c9b3b8af59dbb6e1130fd16e8d43e3c7b5f623dd0261aae9b26b04ae006351daa40d9fe04da513eed8630e4f35e5d38f9917bf73c5b11ac4e262c52880d4432787987eb65fbbfb0f56f2939b5d89a09e2d64d4660ba46700cce0b673e494c20e1c5b8cce583fa51cc6f0c7f073633ba47b8fad3ee829c28720c172dcd7d66b473d17cc4269efad1dbd51cb8b717ab78aefaf706c91377723c9740fe3d2cadd171328628f3d0b91594eb1cf30bec9f2644b8299d8a7674d13ef9d5e21bb601ee11a62e2e51cfe4b5301a6dd1db522a2521c6522162b8d1a8d19fcc059eda5893661086fe27249bfda3315ae27a55de32427a93f6cd06419bcd3d20b87e5f2e12cdd7048fd4e0ac685fc32ed2fc7b5f260698e03d21e30530471898aa5251e4a519618ed72e8576c7b568b2743daecc25a6e88b5552169c7c2668b64b26fe867974ed1f534d3c5824bc36e830295a7f6209bb5ee94c62399f5427dfc1e7f02c960df21386de77206d3ebfa27346160b0b0dba6a8afa6f07f5da339e5c8cc8e891523c5a127632aa22aa4f19689a363957b8399f387ffabd3e5fda4b90a481de86d12a0d8ccf4426813283a9af2caa352f47b928137cd5fe558a05281a6e71a31aea2e6a9d6de5686f3b31d9e3a38e1fb81bf01db70ff0898cbe7e98353af01d8441e3e3185b108e11977f840fa14b05d2da036c8f6bdf2acce549bdb3445bdab96a4fa0ea9aac6f2f7915a77e4fa0bfcee47845fa5eaa1beb9b73ac2d8612f66d6ac3a1cbb1c417aa86daa9be2b12a3a00ced952c9e601763dc9798ca29dc9b94d21487e096905442bff3cacab6bb47bd3fc6e0bf71cfcf43b65b37b0554642ec0d45465476f7c04ad0414ec896263ca7f5603fe3ace915cb83ff0a92898b33a54be7b86f554b9de57c0b2881bae9f1d232ce23966d87eee848c6919165ee78a1c13024f5243fbba2ad8913f1693e8bb15d1e607e3715b4335f3dead7f868cb16f4f0760d977727cab486842f50a22bfad3d4f249200a1dda7b426f97510a32838988c43445fac26561cb275f5cd678bc7f48fabc2bd292bab8d86db13c4f2c8715602c506014e4bfb8024cc9afe3722f7193ed2b610f8dae194f07c334419ec175029697ca335f4bf5f955878fa0482823cce51484837cf93a52d0488883a609b083ebcc512a5dca95277a132ff80ede1f660b54e6d83c117fe0bc3919e4de05943456c5a02e281f06e53e242ba47c5974ed7268478c38075368fba12a8adb560974375e6923b0db244673384155b0da9dc74d0a85f1b7c45e32564f80315376cf421170d2b5bc9b2f3106cafbe540726d201961576ddf1fca8d5afbf185d489b360a54ee56772f2f2f1b120fdf373d8d16f8b607caf6d020e42e300f839337e273df7788bca2cc81984ab09dd9a51facd18b1343ef339223fad6bcbd13b5d49e68cc5b9f05253c54e52779a6b617e64304d73a9266e6a7eb4d01cab3b530e5c4ddc214b10c97eb8dfe332ab4143f9aab182c9a68843c01dca9e3e90879d349a1c16d5402502a50468ce6271838e56700d1d1347ab7bf7430442eace6f0ab1791db040a60145f7a527275efbe9d9a3b28dda3ea56fbc19b392b312c4472201d71d16a9343c6f36ced1fd1716b3ce2ae8439ea0d5be80879d72cd109d14dcea82ef15a7d3aada4477b8190d1d0ac7fe833db0019330920972f656f15c113ec14dc7a374905927a8af611945f1223e2dc9f9e35452380b32f6e1fd944abc2198bfb089cee0bc0a94d91d26d4adeafa1b663c5ac455006ab2759ebb2610e8463c132ae21de573eaa5d6bb539ec50a6cecba6856fb0ccfb485a303293a600326886364a65b1b105e292f05490f7d4d574dd231402551553e93f9fb4f8a93a583d78", 0x1000}], 0x5, &(0x7f00000037c0)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xe515}}, @timestamping={{0x14, 0x1, 0x25, 0xb}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14}}], 0xa8}}, {{&(0x7f0000003880)=@hci={0x1f, 0x3, 0x1}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003900)="8c52471f8e8bf080fbcf84a92748f4a3594023b2db7a9586111b235af9a59d7db7c2f6af2001c4b2cb4ecd0309513aaf9e8ea7a9eabe6ebb458645226f1d8dd92c78475a1b168b10058348b1cf09d98363b3a1bcc1c913f0c185cba607bfd84274e3131cd75f8d6673d6535d5906d0c26770d9454d263cee30b637654df4e60dab84dcb971abd05d1a6958611f628b8a9334453754342fa7054065f905adee6a02b0d95d07432a778a4b45a2853770f59c", 0xb1}], 0x1, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003a40)="206bd7ea649582df77ea49be4b9f602ca8ce8df44bdceb6c44a302098c0c353668d0ba05460eb003f1445b953d2a3e1c70ee08f61fc47dda03d77ff3e560c7b3437d40436da2bd747135cab8ecb0a4cb8dcc2adeb88c23fa919565c795260305cbdc13f7423c93df0d9e4f88f77066df75f4f7fafbb4f3b468cc8ba39907be4a38c12ebb7604bf0a58b6b7cf639e56dcb2c43c37af8d23f0264a55ce47e582b435010f92f636e3ea6d5d7c5ef06f04dfd8649245e024ab", 0xb7}, {&(0x7f0000003b00)="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", 0xfe}, {&(0x7f0000003c00)="730d1070c892a4b36048e976e5d74e8d5b6bd7d260aeb33eb6e3f7259fa708", 0x1f}, {&(0x7f0000003c40)="b9264ea34982", 0x6}, {&(0x7f00000010c0)="224e8fda1ba6883f13ddbf7faa8440a637f52afe711c52cd5c6b20e770ebc1e9f735620bdcd77feb336a13251d0d4ab6583529cbf4f8b7ba87711af9e2aeeb6cd6a67035dedda2f1d70cb29053e9ee9042153a215790455bc3dee028cd27e9585fb9aff0c226119e47c2e0cc53b606e9426f678c3d1f9dd599c65a92563bdf350e58ebaf1924839272338717c2acc7bd55ad2e51979435f600"/168, 0xa8}, {&(0x7f0000003d00)="71243a9b02d0c19c32f61ce448f0317eb10e2756902cc2960523267fc838685ca548082a760c5ab1d41cc9ce95ce6f8772e53663b9c68a136d1eeb9fa625a2dc40cb98d852de2eddba", 0x49}], 0x6}}, {{&(0x7f0000003e00)=@ieee802154={0x24, @short={0x2, 0x1, 0xffff}}, 0x80, &(0x7f0000004240)=[{&(0x7f0000003e80)="6068cc407fd6ddd68d829a2667a32acc8b71bf211e4d7e869df4ae92bdb713878c4c4d03d266adf948209e84282bf44e3e5e7080cfe91fb7ad16e474f0e6bc899eae143c9edfb262f2266329220a22dc6eb4baa2017e555ed8f6ce5d96d913df8032995e3f4999e4a8628b0af449decf12a1ba2491a452a75c618b58ad34d0b32c50106d11a63417edc9ec715da12284e7a5155d843550127792087a4cca61de8361", 0xa2}, {&(0x7f0000003f40)="4d0e74015b286cc196326a2af260ddcdd3ff2c7191ffae7c0fcb8e80743855d1411e0c61739d59e68b6cf90be82c87837c15640673529d16904d73531a08e855291c7da1005da3959d80a2b38042a85d142bf40a93aae6ac6f5354e35b37cab9bd606752a7ce41bff80b9b3b4d5c653237fdc958d67c4ed7", 0x78}, {&(0x7f0000003fc0)="057718ba1c0af2ecacc6da74e11c626ed143bb492c673573cc40c7f00503d49dc92f8eb81305b4c19e0d431ddd8a5005926154e743f5784f9c51dac3d6ae5327f8d25f96ebbd635d5dc6e9f8a3f486a7a0610a6f77d3ca245c2985", 0x5b}, {&(0x7f0000004040)="8ffa03ff9197a5f9c9721a6972fc203fd98314743a8652e8f4c17258a1bed20b54613aca9d3bfc2b3ee3427e4c2fc9", 0x2f}, {&(0x7f0000004080)="eabeafeaaf0728291b899a3c4a8016dcef6b9998d3f8d17049c55e5b1a9cf63c79425d308a346cfae4dfded0c3f9b18a06569f84bcad47095cbd2dd9fe318a2f213f87de8ec55efa5b44f234b0472dd48b74658b19814ec7f6db544619a38b389dd38db67cc8e5b7f77e696446e21e8b6373b6b90b7a40283f64302e22f42355f1d4e7a02d014155a67251ede2ff080115f7e6978af7000ec6ab6ea5ab5799838d53d0c1f1eb9715a0b0ab8cc8362db06e5ea2d4bd21cb05d136774267017bde98b8f47ee36a4301520b59a6b0b77b13f4ed64dcd524cd1245fbaeae16177ecd59737f60", 0xe4}, {&(0x7f0000004180)="7689fede63e2ddc9773228b1d865054be7e8d682c4c9f4e7c316f46d9eba528a16da11dbe308ddcf9416841dee3448ecd18ca6948f85284f287daa8f2a3d259f2dd2d41d0b90ea50228c8aaf6ed6bf4b59c4d0513b72e67d982f1cb324b90dbfbf9c65387aa45f0f0d90ea9fff2c9d3a605684b1b3cae3b257c7ec51335e19aec058f689d056e4310cacd6295ef79ad5462a95d850efb3dc297490fa3a3520de469b920147be6f677770fabd3cc9497fe2", 0xb1}], 0x6}}, {{&(0x7f0000001180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10000}}, 0x80, &(0x7f0000004540)=[{&(0x7f0000004380)="8a585b1db0e7ddc30a7fd78f856ff520f394c2fe6d49fb1291b7be152253280f4135240698ba9745d03e4b696e6497c7110257cb80bdb1668f2346c747b862cc57af50f7f0023de995026ab843facc40d44f0754c655eaf1c0fb34e1bfa1c36184242b308af786b752a36d4c21ab4e0906b4926395", 0x75}, {&(0x7f0000004400)="669c4aa03de28013", 0x8}, {&(0x7f0000004440)="7d2a3b04c96b0078489f89b6f7d94c022844da274938c72eb9372d2fe7e2b9c5fa7de3e6f6b7aabea03749516b7b9a5364094a6826d2384da35f35dcb484cf504ce32a880c7ca744bf434e543d519f12ca2bfe62191b623bcb143a443d47c288441a5e44c1b3970b4b6e429bcea81d7ffd4a2700305ae5f21be351b97c5bcd159ae4261eb005005aeefbb4988af36ec39f1f03f3366aba3653a3795d5afdc9b99010b344a9c0a7ce3de37bc6a76fc1fad57d22b975a8b31c14e1a18d48a07707a2b26994332a58182e8a5eaccf6b1102da0eca1319cc9edf394c5a7eea2f0997f32653fc7e8046", 0xe7}], 0x3, &(0x7f0000004580)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x7fff}}, @timestamping={{0x14, 0x1, 0x25, 0x7ff}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x401}}], 0x90}}, {{&(0x7f0000004640)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x3, 0x3, 0x4}}, 0x80, &(0x7f0000004a40)=[{&(0x7f0000001200)="d7eebaef2f937fbc89533a17ab36b449117a1be991ac820279ffa6c5dd869691e381f3787550bccfd6dcc896b8c84d07b958276fd2e70795f19bdfb9c384e11c7e516789ffbec074a4ffa1efb76e51660b9b7c441b8fe73073712dcd5ca0fa2994eb41d5522963c1305e72928285e063f23bd5f6812502efd63196e6ff70bb289d3c6e555c8aea2c2d8c9d75330e20d33728c72fb3c1eb8e1d98a32d65a9417b717ff207053d21668d353f5b46d7324c8c88b0c8e386f5a19de20e4cfd22067447ffcfa8f4", 0xc5}, {&(0x7f00000047c0)="1a9a8b9fca809a3956e388c6b5a87aaf363faec8a382237048a5fd5ab093738b1fd431e46a82d4609ea647715d6c408d2c13355ab09bfbed262e5dd6cae2d03c46dec162280c4de7da8ed537196a98482889cb83b635ecab225e7d432d6cd3cb3a412e5ffc0ab67e749d46eef55836b287819a69cd0119b98353ac8b791c502e6829e98219f96096a04da1b46d2946ccf04b43603306c38fb8abad466f19f2004bd5acf8e196e43771567486efb16e2474c76abd01c521ae0c10bad341a82532", 0xc0}, {&(0x7f0000004880)="b1c9512a37846b51083a82a89b312ee78c70e8a7abc7a5eb664eb6b421f8d8cff6d0de", 0x23}, {&(0x7f00000048c0)="3a388218b881cb2734037c3fc29edabc4e83854605406b4950fe232e9fb04e14be07725b5d2fa2ea73b2b92a292d69a467e562d480bc937bd41fe714fe000da0513df180048ff10b66f8b5eea8cd27ec5ff113cfb938e4500fa2f3ca5ed1f86503a23a93246d47811e61899a950b8020a8537c74e00bd58c", 0x78}, {&(0x7f0000004940)="dae6a842a12847bbccc8cbacc83dec0e70fb243899b670bba8cb32a57a96118b16b1219383f688d435adfc91a52a151350edbf37845a3dd047ece6cf1f2b63ef96e750d50ad3953ff3f11b6b00f29a897f7828", 0x53}, {&(0x7f00000049c0)="cfe9d6ab8044003c5e22854eccda0733808cba483e17ce2875e736ab6da889ebf451c6faf74d9ad31d9ffac24eb34644e907f536e6289326a52b96cb089b87ba108aac7b79b22999c786021f269115914404ab48f5169ce037fe93e9c84e8b831464fc4689", 0x65}], 0x6, &(0x7f0000004ac0)}}], 0x6, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef1fe1564c", 0x26) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x175c}, 0x1, 0x0, 0x0, 0x4044084}, 0x1dc8b08251aa3334) 8.438846484s ago: executing program 5 (id=7044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000080)={0x54c, r1, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x1b0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0x1, 0x800, 0x800, 0x9, 0x8, 0x40]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x9, 0xc, 0x6c, 0x18, 0x6c, 0x1b, 0x36, 0x30, 0x5, 0x0, 0x673c8b920b91808d, 0x9, 0x1, 0x1, 0x9, 0x24, 0x4, 0x6c, 0x55, 0x30, 0x5, 0x36, 0x1, 0x1b, 0x16, 0x4, 0x5, 0x1b, 0x16, 0x0, 0x5c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0xbba, 0x4, 0x0, 0x9, 0xf8, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x342, 0x8, 0x100, 0x3, 0x7, 0xfe00, 0x6, 0x1ff]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8e3, 0x1, 0x3, 0x5, 0x9, 0x7, 0x800, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x0, 0x7fff, 0x8, 0xc8, 0x3, 0x5]}}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x5, 0xa}, {0x6, 0x3}, {0x0, 0x3}, {0x6, 0x2}, {0x4, 0x8}, {0x7}, {0x4, 0xa}, {0x5, 0xa}, {0x4, 0x1}, {0x1, 0x3}, {0x3, 0x1}, {0x6, 0x6}, {0x0, 0x8}, {0x6}, {0x1, 0x1}, {0x3, 0x9}, {0x7, 0xa}, {0x4, 0x3}, {0x4, 0x6}, {}, {0x4, 0x3}, {0x3, 0x2}, {0x6}, {0x6, 0x8}, {0x5, 0x2}, {0x4, 0x6}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0xa}, {0x0, 0x5}, {0x5, 0xa}, {0x2, 0x3}, {0x2, 0x3}, {0x6, 0xa}, {0x0, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x2, 0xa}, {0x1, 0x3}, {0x7, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x5, 0xa}, {0x7, 0x2}, {0x0, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x6, 0x0, 0x5, 0x8, 0x4, 0x1, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x7ff, 0xf, 0x6, 0x2, 0x4, 0x100]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x2, 0xdeb6, 0x775, 0x2, 0x9fc]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0xa}, {0x3, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x2, 0x6, 0x4, 0x7, 0x2, 0x21d, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xd, 0x6, 0x7d9, 0x8, 0x3, 0xff, 0x310]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xdb, 0xe27, 0xd, 0x8, 0x9c, 0x4, 0x62, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x9, 0x9, 0x1e, 0x0, 0x2b1, 0x4, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x2, 0x0, 0x5, 0x7, 0x7ff, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x35c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x4, 0x4}, {0x1, 0x5}, {0x6, 0x9}, {0x0, 0x8}, {0x1, 0x1}, {0x2, 0x3}, {0x1, 0x4}, {0x7, 0x1}, {0x4, 0x2}, {0x4, 0x9}, {0x6, 0x5}, {0x4, 0x4}, {0x5, 0x3}, {0x6, 0x7}, {0x2}, {0x6, 0x1}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x9}, {0x7}, {0x3, 0x4}, {0x7, 0x4}, {0x5, 0x9}, {0x0, 0x2}, {0x5, 0x8}, {0x0, 0x7}, {0x1, 0x5}, {0x5, 0x3}, {0x3, 0x9}, {0x1}, {0x2, 0x8}, {0x5, 0x3}, {0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0xffff, 0x9, 0x5, 0x8, 0x7, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x6, 0x3}, {0x2}, {}, {0x5, 0xa}, {0x5, 0x7}, {0x6, 0x8}, {0x6, 0x3}, {0x1, 0x1}, {0x7, 0x9}, {0x2, 0x2}, {}, {0x2, 0xa}, {0x7, 0x4}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0x7}, {}, {0x6, 0x1}, {0x0, 0x3}, {0x5}, {0x1, 0x9}, {0x4, 0x4}, {0x0, 0x4}, {0x2, 0xa}, {0x0, 0x1}, {0x5, 0x6}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xad67d7eb560c92f1, 0x1b, 0x24, 0x1, 0x3, 0x48, 0xc, 0x12, 0x6, 0x1b, 0x4, 0x18, 0xb, 0x60, 0x3, 0xb, 0x1b, 0x6c, 0x6c, 0x1b, 0x48]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x91, 0x7, 0x8, 0x100, 0x2, 0x7, 0x2, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x6, 0x2, 0x0, 0x8, 0x8, 0x101]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x2, 0x2}, {}, {0x6, 0x2}, {0x5, 0x3}, {0x1, 0xa}, {0x2, 0x2}, {0x5, 0x8}, {0x7, 0x2}, {0x0, 0x9}, {0x1, 0xa}, {0x6, 0x3}, {0x1, 0x1}, {0x6, 0x3}, {0x6, 0x8}, {0x4, 0xa}, {0x5, 0xa}, {0x5, 0x8}, {0x4, 0x1}, {0x2, 0x5}, {0x1}, {0x2, 0x8}, {0x4, 0x6}, {0x7, 0x4}, {0x2, 0x7}, {0x2, 0x9}, {0x0, 0xa}, {0x1, 0x3}, {0x6, 0x8}, {0x6, 0x9}, {0x7, 0x6}, {0x6, 0x2}, {0x4, 0x5}, {0x5, 0x2}, {0x4, 0x6}, {0x6, 0x3}, {0x0, 0x6}, {0x0, 0x8}, {0x0, 0x3}, {0x2, 0x2}, {0x4, 0x7}, {0x3, 0x4}, {0x3, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6c, 0x12, 0x8654002b6bd70245, 0x60, 0x30, 0x4, 0x2, 0x1, 0x6c, 0x36, 0x16, 0x2, 0x18, 0x24, 0x16, 0xb, 0x6, 0xb, 0x30, 0x1b, 0x16, 0x3, 0xc, 0x1, 0x1b, 0x5, 0x6c, 0x1b, 0x1b, 0x12, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x2, 0x8}, {0x3, 0x1}, {0x2, 0x5}, {0x5, 0x8}, {0x5, 0x9}, {0x5, 0x6}, {0x0, 0xa}, {0x5, 0x8}, {0x7, 0x8}, {0x1, 0x4}, {0x0, 0x8}, {0x6, 0x7}, {0x0, 0x7}, {0x1}, {0x0, 0x1}, {0x4, 0x6}, {0x0, 0xa}, {0x0, 0x5}, {0x4}, {0x5, 0x9}, {0x6, 0x7}, {0x1, 0x9}, {0x2, 0x4}, {0x2, 0x6}, {0x0, 0x3}, {0x3, 0x7}, {0x3, 0x1}, {0x3}, {0x2, 0x8}, {0x4, 0x8}, {0x1, 0x2}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x8}, {0x1, 0x1}, {0x4, 0x7}, {0x5, 0x2}, {0x5, 0x6}, {0x3, 0x9}, {0x0, 0x5}, {0x0, 0x7}, {0x2, 0x1}, {0x1}, {0x6, 0x6}, {0x0, 0x7}, {0x5, 0x2}, {0x3, 0xa}, {0x7, 0x7}, {0x3, 0x6}, {0x3, 0x6}, {0x1, 0x1}, {0x3, 0x9}, {0x0, 0x7}, {0x7, 0x3}, {0x2, 0xa}, {0x1, 0xa}, {0x4, 0x1}, {0x3, 0x9}, {0x6, 0x9}]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x0, 0x3}, {0x1, 0x5}, {0x1}, {0x0, 0x5}, {0x6, 0xa}, {0x0, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x4, 0x2}, {0x7, 0x3}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x3}, {0x7, 0x7}, {0x1, 0x1}, {0x0, 0x4}, {0x6}, {0x0, 0x5}, {0x5}, {0x7, 0x3}, {0x5, 0x9}, {0x1}, {0x2, 0x2}, {0x5, 0x8}, {0x6, 0x6}, {0x2, 0x1}, {0x6, 0x7}, {0x1, 0x9}, {0x2, 0xa}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x77]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x5, 0x30, 0x6, 0x6c, 0x18, 0x36, 0x18, 0x1, 0x2, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x4f, 0x800, 0x380, 0x401, 0xfff5, 0x112]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x3, 0x0, 0x7, 0x19, 0x3ff, 0x45]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x7, 0xa}, {0x7, 0x5}, {0x4}, {0x4, 0x3}, {0x0, 0x1}, {0x2, 0x3}, {0x2, 0x6}, {0x5, 0x1}, {0x7, 0x3}, {0x0, 0x7}, {0x4, 0x3}, {0x6}, {0x0, 0x1}, {0x1}, {0x1, 0x4}, {0x1, 0xa}, {0x6, 0x7}, {0x2, 0x4}, {0x7, 0x5}, {0x1, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x1}, {0x2}, {0x1, 0x9}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x7}, {0x5}, {0x2, 0xa}, {0x7, 0xa}, {0x6, 0x8}, {0x6, 0x4}, {0x2, 0x1}, {0x2, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x2, 0x3, 0x60, 0x60, 0x1b, 0x4, 0x16, 0x3, 0x2, 0x30, 0x12, 0x24, 0x6c, 0x6, 0x60, 0x60, 0x36, 0x12, 0xc, 0x6c, 0xc, 0x18, 0x30, 0x9, 0x6c, 0x48, 0x48]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x2, 0x5}, {0x6, 0x5}, {0x7, 0x6}, {0x2, 0x5}, {0x5, 0x1}, {0x4}, {0x5, 0x4}, {0x6, 0x2}, {0x2, 0x9}, {0x2, 0x1}, {0x7, 0xa}, {0x1, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x0, 0x2}, {0x7, 0x8}, {0x2, 0xa}, {0x4, 0x4}, {0x2, 0x8}, {0x6, 0x4}, {0x6, 0x8}, {0x2, 0x8}, {0x0, 0x9}, {0x5, 0x8}, {0x1, 0x9}, {0x3, 0x5}, {0x1, 0x4}, {0x6}, {0x5, 0xa}, {0x2, 0x8}, {0x0, 0x2}, {0x1, 0x8}, {0x7, 0x3}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xffff, 0x40, 0xfff, 0x7e, 0x8, 0xd, 0xfff7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1308, 0x400, 0x2, 0x81, 0xd, 0x9, 0x4]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x12, 0xb, 0x1b, 0x4, 0x10, 0x9, 0xc, 0x12, 0x4, 0x1, 0x13, 0x1, 0x79eed74a67f51374, 0x6, 0x1, 0x36, 0xc, 0x16, 0xc, 0x12, 0x6c, 0x6, 0x30, 0x6c, 0x44, 0x36, 0x24, 0x16, 0x6]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xf1f0, 0x7, 0xff, 0x2, 0x1, 0x4, 0xfd94]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x3, 0x1, 0x92, 0x6, 0xe262, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x12, 0x12, 0x60, 0x30, 0x36, 0xb, 0x6, 0x48, 0x3, 0x4, 0x4, 0x2, 0x5, 0xc, 0x48, 0x9, 0x0, 0x48, 0x36, 0xb, 0x6c, 0x2, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x1000, 0xff, 0x8001, 0x40, 0x2, 0xed9f, 0x6]}}]}]}, @NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0xa, 0x8, 0x9, 0x7, 0x1, 0x7, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x54c}, 0x1, 0x0, 0x0, 0x20048081}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r3, 0x11, 0x64, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x810100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r4, 0x4, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan0\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000811}, 0x4040005) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) poll(&(0x7f0000000880)=[{r5, 0x2}, {r0, 0x1302}, {r6, 0x208}], 0x3, 0x81) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f00000008c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @remote, @broadcast, @empty}}}}, &(0x7f0000000900)={0x0, 0x2, [0x68d, 0xb78, 0x2f8, 0x84a]}) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000940)={'ip6gretap0\x00', 0x4113795c}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000ac0)={&(0x7f0000000980), 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x78, r7, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x33}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x8, 0xff, 0xca, 0xfe00]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x9]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x360}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x78}, 0x1, 0x0, 0x0, 0x24000059}, 0x1) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, r1, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40840}, 0x4080) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x40, r9, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xc}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7ff}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6b94}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x84) close(r5) r10 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000e40), 0x32e975123c8d9beb) connect$tipc(r10, &(0x7f0000000e80)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x4}}, 0x10) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000003500)={'tunl0\x00', &(0x7f0000003440)={'erspan0\x00', 0x0, 0x10, 0x8000, 0xc0, 0x0, {{0x26, 0x4, 0x3, 0x6, 0x98, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1, {[@ssrr={0x89, 0xb, 0xd2, [@broadcast, @remote]}, @timestamp={0x44, 0x10, 0xb4, 0x0, 0x2, [0x1000, 0x391be1c3, 0x5]}, @cipso={0x86, 0x31, 0x1, [{0x0, 0xb, "f8b49868a4ee672a0c"}, {0x0, 0x4, "0f51"}, {0x6, 0x11, "fdfb230f1e0795f7dc769d2ed3f625"}, {0x2, 0x4, "d185"}, {0x0, 0x3, "b0"}, {0x5, 0x4, "639a"}]}, @timestamp_prespec={0x44, 0x24, 0xf8, 0x3, 0x3, [{@rand_addr=0x64010101, 0x3}, {@local, 0x1}, {@rand_addr=0x64010100, 0x1}, {@private=0xa010101, 0xffffff8a}]}, @timestamp_addr={0x44, 0x14, 0x9e, 0x1, 0x8, [{@rand_addr=0x64010101, 0x7fffffff}, {@broadcast, 0xfffff001}]}]}}}}}) sendmmsg(r11, &(0x7f00000048c0)=[{{&(0x7f0000000ec0)=@generic={0x1c, "581ded8a06599659ee1b13dbdb5a8ecc44c826a5ce98bf438464f7617802dfa334e652af2c8783f1da8bc3b70b0e06930030c0d3fd7402a5d8be706a82c950d422507c9f9b47664ed4b87048d7348feb21ab07543c9c8dd379f70196fd15ee0f83f93b516b63fc0f3189ae6b7ffc1c8a3b8281d7d4c950ee19c64713fac6"}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000f40)="6f555fc6abacbfe0e951f4557beeb9e0142b54e35fef4e6fe4ee56781a7b1cfd08ea8fec67d65a64433321a77d6d5e04a200910f0155ec1eb5fbf6c1c8c0ef942057246f1ca98bab0e8952485e4cadf93031c16413c8bcdfb16e2676d714c75c6a68f21f1ffc8ef319afa261ad895561a8db98aefe313f4d5ad4ed539b8f88dfaa241b2d3c6f02792f473bd0e9671216541bb48cf8df3e488271c26bb4346c67d39cdf17895f98c625fc0ee4ad7296d8497ca1110ea1cc9dca6268a7", 0xbc}], 0x1, &(0x7f0000001040)=[{0x1010, 0x10a, 0x8, "9ffda16bd7a9a7af2d828af10e2986e5f2d8f0f71129ddd90824e179f0bf4c57884d0dc98cecbb9e080fb5b83602a4749890401e89cf801f0cbc52509e5217ee147d054e006eade95f9a26b088b707f54e9d4aa9f6fee01ef475e4555ca2601eb15e56b7170b2f6b971e7ee7a2e132183a9f0627ba003f8459f7ce2886aea6963778c69c4ea31d591b37f1fcc0a5ce3134a5b3c1df65b5236f9ae3cc4f17e474080b650f97ddfa1c3c5f79fe3fdae7737a4abde37cc84ee8b3d342d5ca68bcd1e5d8a58bda4f9aed46eb151b76dbef06f37e8df6167976d6b2bbb75a3db56ba5e580a5980e506236d6c5f8072f08708303438aca8f10fd0899d8bcd6c0ae798c229a7454c1bc3f48afe0974014fa3132dd2c4afa89c434ad09c4db790c2205623f80a534bf38ceac71c76765dee821c55a67f141afde9be7268c009043fabab0839f24414f4aa27d940f622b0e0fbc9ab76451279f7d0d4930c5e9fb68f900de29de896b54fd521dbb81495d4c5e385e339f6dd9b1535c9acf932daf71504cb114562a41aa3bd8144ea9e5e8eecec2a15c8d2606a90b1272b8e2e39dbba18e20268a21a17abf79e17852f9d31abffcd3cb8125e02c94e5e5ac28c75059a41e1a9522c72a42816b4f7ac3d597c1e81eb7c7a7a0667a6f70f211b607bea721e978593bddd9a40faaa89717ce7f161c67d9cb5c58ba606bbbcb28f5e4f5962221202665f1131ff0b8d9a048d7ed150d094d7a763604dca0666364dd1d07438d29786ead16b10d9f194f6296bdbbb754a47624ab34d9a0270c6b8c8951c7fda40d1dd33f1563d888271889379aa25de1c41c182b34b9f0add30b770f5609edf62a5c9759d028d1462d3bcbbbb6f824efdef2b719d59b9532d75a419cfb391d99b5c0ac4069f9c66cf265a9854c64b215c5e5425475b4112b5be4d0a1f9833a05bcd61e61dc267557f4720ddf926b55c396ddbd7034179f5ade6d565ca856767bdead3121393deb5b007c042a106a318bbc58ba9b4a822a8105c44648eb5b46687e562f8e43ef0998c88c2903b3c86475531e1e0dfcbc3e5a3319427be31d97fb916fe4306bf0975b87f72ba1f424d07d969c6ae3486ddb6ed86bace21da156d1deee261f011053768ead4f79f893e232941cf7fba42c2b8476cb0a19f0fa7023f98af7ca44422a035de230849080d06e2811615d09a473d690c1f0450e5b51d66ee7b78c7ff5752ff682ec0f506a031e290789e15459ed05f43600a734c31a29511e735c4d95d363df4821a902d9213e5e0f289d8219d8625418f2aa158f5e6cc648846695c4feb4a8eff432cc0893f69f743a70897ba382a02538f7dafb6456a2c0bb47dc8915f27799ef9fbaf4b4aeda114d9ffbea9048f5d01032da81bb7e3dd0afe4ddf5be0296546e2c31d92a080adbe35695edfa1c0b816f0da16e6af29679a93faf777cb83bab6b3c4efedd93cf5cf10a1198857c413420f2f24dc8ee982bbe320d8aee46be532f817adf897489a695c6857b7fc3689f6456389fb5ccabee58d4d5493cd62c0ee2d9990717d7fcc5e65084a4ade6ce85d8147a27a2f28f4e76537129942caf3009c73324685a23e85ded905c96dc935a60091693f82d9797b59f9361f9065456ccbd63ec18bfa076c9a736eebcdfce6bd27370007d2e5c324f3d005ba1ff7add4f8d4d72712289de74b8208672d2bf20ff4b3cbafebd5337cd0a995bc1d0be6ce0eff0feea434959d991e271bcec4cb936ead8d78e6a6f8652b799c25782ae9f565c968c9780647f252498ee2019e766f567b06bdfe7de283dbf7c0a45ee8e19600278f63201cf54eadd564fd25a2592081493c479bb41007e2a48fdf385f8455f305c24d9844652c709b4380cf40a059c1bddc14807cab935d9b68f13484f92a3171f9c1508ebc9fb549014a370ef6f89c6f73002a847e1f552411b0035ddfa27cc384aa4398ef932bfc04c976d985c1327698af6474949085efee4d22489e2d3599cf9c58c498e9359ccbfe56fd15f70bdb8d30f114998410dea60f11ac2fef062f3406ea63fbd9058e1743132c06a235ee89e49df0a406bf3ae95b66855ab304fb640d927c5dc1922638660b607be1415b20b283b62bcb62726b5d59b356e6238c4fa16ec7a9824d5d07124ab9ba1496becf4f85dc9e9e5bbe997a2c909dc99c27043627f5b1899c63a208de614c6103bfddd4dd5c18b9bc7676c4149f41531c308477354cd8ea07a15d946e856087739b118a31655f537a4fe723ba2487931cdf508c952e3ae0fcac7b0ab1ec9bf9f4486898fab829409aacc0dccdf1c5babd8c4d4c3d10539ec06eac697416afded191901383c644d2b404aaf9356c0c7de8e07f2ff7feede108eda7ea73bc4ed390bf851c6717aa16369a20995127db43809c4d0ab0cd62fe9c5b29746c09f9a136a8a9632fdf5b610018176a0e163ca32578251f96dc7682efc50457149c3b5b546e3ae6d70bf7a7cad835d8cb50cd47c7702cacac9b22b63ec15e395a40607e1d3384229721fc9d6253171719e89eb2e96de5d17813b3da105415b6962e90827d67c6e01b5b729223222fcf14b52f5b5013ae721962e9b1c7d3923598d032aff0a9b97b2e3da2045393c6c5cf487ac650ec5489807957a1ad0921e8c23093ee1e139d4efa77b206e8cd40c9f3a372ac1183bb88b5fff6d7260f99e67f271256f3e9d3e8f04d283643404dd4c9087c92e4a3ef3857f8f2b56e07856a49d5b5ce2bb4f4ffaca3823b8c61deec6f7ce670458a80e5ab13a76f6f47d46798581067a303ac779f3eecc812ae1b3cd24bac7674cb42ecfc1f72775d14e19e3383d77f19ce1789842b6d0c72ce0236afb2c970e5140a93bb7ff52d3486d69cc5e157c91354b12dc1361f3394d4d07fd58a3f66ad414a7e86930af21b89962a33109ac491735273d21c2a631509bf8c4bf0e1958de165596c692d14b86b982b2f80a660a680c62238352e5c343330ebe8efc6563c405b1832c7cfef616ab6018f796d1185202bea562f07b35036734e895ffa30051259b544ac015e7a8ac62f2b3004865bef6888d4cea9b34dacc3be85c07a3e9788610925d9373fd7a0d4ac6a299ff03e062e109da74c7d05553b4f9ed168d2ad7c419a2dd7947ee8077c90d8fb76eac8ae237badd464421c2014a2695e02ddf3e04fd997e2ddad36cf079f43822a7e1814ded6b330f2267c081e170a4001b05f88ee1f78721c75ea1aa885f2ee865a307a3061ab65862bb7651037c4a134e865605f71fb3434ab9ece593c79df3b760f46b47a4dd1f41b0a32e3a4306fc3c03cb682e94058af0a281960d428874c3603b8c84c655400e7fcfe34638bfcc86de0d33d72cd5afb6d1d827c9b3c596de399b062e24a2f5522427871cfea1e2c468f7af193fe1a09280775fd197d19e27797dc026510c74e34809a59ead45a8b649a0a5171fbce807186efd25c8eb8707ad840f38f46c7dd9ad3ae66a3e4d4efe0dc828fae89f548e976274dfd7032bf86f63acb3c11efde7d3c38d160345ba7887e7436d96ba4ab8a41a61693c97bb4f6c7c7c94026c02920fd7493c0a7c0150f21f74d36cfb5f6603df16257fcb01e2d7554889ab30abda8e7c8f71802d96edbe4b16feb7552c4f5639bdca88fd518e7ec01d7eeb0d7fc5759a9fb3b882645a0315233a089b049513ffbd1273817deed8e54401704bd5511c82a400086e1f8214a0e4c83bc5a71457ec39b0a54d3b5ebb291f0fea8dc8e8041fe0252156bb00b24d42ee985452170abe892b4e084d2cdb9d1eec3b0187d1e21c6f2390a5ebf6058fd356ece4ddbf6a018c5897b7acb31f5602c89a72a2ab4a4c7dbcb4c551eacbb2369265706b73ef589aff61d51f67500f87ce5dd81a8a92ff975c74d7a62b4994ff01fe8133e49080257fca048e1f367d6fd1ba80557f92705549c5443aa4c8f38c0ff196df000c1c210fdfa37b043054007daee0c230bb5694101296592bba9b6feb672478995a05469d00379c4277a182d0dbfd994d125783e360682b30cd82beb6fd18e75231651494ebda2a45db51028e6e18be6b5594e02db6739c83e767c63c88921334f2c70b032ef0d4c28ab8a7fe7e9427638ba8efb5fab89cc2b4c1203fc22dd881d5eab2a8c2150d1cf51d94e7cbb89603bb39f8cd324a4451f744cbb3f1c5f22a537829b1ac05684c32921399ab2df35c8f4e48c417643e8ac1522d2e9e49287483721630814aa38a85d1e15b355ac38f9a777499a04499875e0029c6affd6a9a01f1d12e2e12fe1fa909bb500d72657bee351fd3c573bbd8bfdc948e8da2876eee90961e354c4be828d72c817b6e708c3af387605d2da289cd594fe81c036f59922f366b143d8ec88f674e3009650c4c5ce71c49e2bbaf2329bb0e188b26b63d6873c0c07b1cb898ac4a17c02300aaf62a7ba21e11ed2b1c644f246f8acd7ec24b6cba5ff8b85674d92ff0726c346ca1b082388b31c4dd930da0b65e54abe37d9d487377b34c461a82d1400c4c42f34d1c759d6b2a276f113218589d83d04ea902784b6b4eb0391d373b453cffc7160facf8793120cb887ded165b4f5e53414a49c8feed1253c2fab3e16118bc66322d93649738873d4b56d8c7bf7ab08772cd4d24a3c2a1ee7075247ced65c837cf4db6701562d3190904af7c60a735ea32cf7d7a8db68b7127da2ec2a52f002f4dd2bb6b4c4ae48636169b5f6a91f2e7e160e4d5f2e8357c94f2985428acc1378d01592a8baa42ba69d75d8e684cb23d4a9ccd8167e74e70dbe6a0998cc999e0a649aebebd8604b6c0808b395909570201b7134b8b81c18cf25c7165cdd2504cfe3918df7dccf552e4100f481a5897e4cdc6a7f61f39c3ce0755348f70915cedf9f5d5202bd4e0de7c139d40883e24349524b330098945556d4a6235a7c6b5423ca33ee2a502deeb342084fe77cece13fb09d6b8fca722f48d12359415d9e386b7ccf2387df9a6ae1576bbd420244695e80817460c5a4d945a40746daf8b32468a2d0746f1d50de63f67b9f030df2aba6123c6e022c1673c663b97c2160bd42847c11dc63ea51ac9fce82c5cf1437829a3d145d19cce948711bce87dba9fecb5777cd7596e922ccf04f3f3c21bd7aa2cd18ff32a58b9bd41d913e118df75bf17b838d1ec552c5a09489bc335271a6b204f94d944dcf2d24f9ee957b7bad477c78e3baa9aace8af6315c0b6c04eead6bfa690694e4b910a831a73785e7924bda33029aec44002f473f1301143a8fbb8122b616895e1a6f09876285db401ac3ecf2bbf9f554f1a777172d29987a4319433048810f8429ebb345f0d4f7571e4023bb4ac8c0f442e6cff889bb2ecf26a85c603541466b03045ecc89748fce06c6639e2047db5b13682bca68c58cc0a325c80f08ca553b14086460376a3ff2c30a641ca0e1b3f11428cefb95352f211745f1672908a1cb351f8ddc4b0c98e74aeaaab563735dc09230bdfddea83a8f76a275e83c5a07a1c10819c442870e027e40f797a88ff088c2cd3c746898f41c0145ff1e636b25fa2e09e82e3775e69642849b9f30a00268ec17909663a48c148acbc592773109d83e1654456ae15de6d0f2163c100bbf4f98d4b745b7802e0ab2b610740feab15ab8e73d05a92c99d0d41dc5e5bd91f261be55cb1190261b6bd58ae3f873f0b2bd711a769cde337675af47e926d1c688dc537f09f456e566acd08c9cf025ca2ab4907fc7355bd2b237e4f587ebbd975403b900fc20066d8d13a05a0fb5e9635873ef68cef0608c20092c07498242e"}, {0x58, 0x10f, 0xee7, "a24ba0c618e733371a01efe868ccf4fb16e265c8081659ff0d548084e9b2bb4392b36e7d423756b8661f5257333429b1b28b8a0b925029f6c104fe18a0c0529f709c41"}, {0xa8, 0x109, 0x400, "3ca6b304fcf004bdaa9a6a0fd34faddd52ed8b38dc9cf422488bc54eb70361346233d6ffcc7f30b0b169374a7131b6173cf3f2b42a14aeb7cf25873c91e1556a421a3f11ea01420697bb6b1dc7f1b779622cf3351dfc18ee35fb9a71b91c8b35203d7b32d9b7138674bd2a84a4855130b42523d66bb31fcfbb0b12bdcdcf8f8bacfaf9b020e3ae3e7aeda46601d31e366183df246e"}, {0x90, 0x113, 0x5, "79d5cbbbfdeb84a2b668fec1a08f673226f478213526b1e811c58ac8b6fde600d036f84ed7b00a465433c0b5b4dbdbd252bbfe6bf7cb79395c46c8a59c7c655518f4269731232e79b9125ef2781e626590aaa13e31ddbdd2d670fa38a8fe45d16694697eb8817a6556e3228d55d05d1bacabaf373e21b042fc9a6e4a34"}, {0x38, 0x102, 0x6419, "7549f6ae6e8893e5f9767ae88fb14cf692a72a9915c590b77bf2bcb640827e15ae177e51f6b5"}, {0x90, 0x107, 0x0, "33c9872b1a01325536f35bacbd92f79c35e33302c9488f48b08ccf5d9979cacb6c3f62119572947625decb65416b441783159e78faf092ecf8a5c6cb71210ed47f6e040e14fb94bd5dff4a8a3c43dd43884c15d9322cb95c0ac728c2954a1f36e2f907ea5cb0b9629589c2ebe9d8b00bf91f21cbefc9a03854f1"}, {0x1010, 0x10e, 0x81, "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"}, {0x68, 0x109, 0x2, "0d4120da90b6c2491817c9b0ff101a4cc0f0f773bdc984f2fa60fa13207b3d1ccfaa00cb3c4f6e4c984a6da0c6d8d1557bb6a018cda0342d8b2d292dc053b6047c56b2291d37d857da3a6d490a3d59f79903abbc9a"}, {0xf0, 0x101, 0x10000, "72f1a21bc1653b8b9b8c4cb81a499679d2177b61bc4ed907064997fc15e9a76f2f24f3aab7af32b42f7b2bb97aff96f4374f13fb7aa370f6cdd934d1bdeb129a0c95f1c5b59b0774a10d8bd39ef0472f806aa628c357bd2f19a985545f323dfd085a4c0ad81e0bd2fe81c7e74c1f269e7ada11d2116c7ad782bdba68fb59e3d82c1a5cefc7db41a716575f1b3870c1da31da83a54a94d083c9a057c0ac968d4096824b7393104fc4c97df8e926aa2815badd121326a34ff5eedf824faed52c157002601db447956d29af25757f54135d4e950362c937c63c9b"}], 0x23d0}}, {{&(0x7f0000003540)=@xdp={0x2c, 0x3, r12, 0x1}, 0x80, &(0x7f0000004780)=[{&(0x7f00000035c0)="9a4b8f5b825f7b71a8635077082a3dde4390983951317171ed8713422c25135eaa608685ecf83142a39b7761", 0x2c}, {&(0x7f0000003600)="6a8d6370bb6e80d593e80fcdb648a47b079d7df6a5cd314e242e33658175ffe9e27f2d02a999f9c0a774c4565cf3836eee82719c76ac523da658d84751775a4e84f38c17037831cb807d66ca37e15e5327f52023823228634a9663cc4fd690dc58b8026ea4f222004f17bbccb47937523b1db42858d5679ab46b3c51408198104548cee7985896da65711e8449a1ebeca76c48e9", 0x94}, {&(0x7f00000036c0)="c72266c5eb98f1439ddda6ed49cb6c81c82e913b8b298a63ccf43794721bc53111afa4484942adfea3efc873bb1626bbd79d852f237edcb2c39548b15d556040d3aa2b084c0666c2527821f7eb9f204c7cd3ae7a6c0a2c39c764f95adc6387c486622228749ed1d089aeeb304c0ca853e751937ac5056d3b7e171c66e70cf949d9bb2c3708125de9119d6a39ac9f1cc183ff", 0x92}, {&(0x7f0000003780)="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", 0x1000}], 0x4, &(0x7f00000047c0)=[{0xe0, 0x118, 0x8001, "2f462b03b6c9ca17a4bec6f317e423d21dbba8d3cc5c5c709162a4ad0ff23a5b5f8f79449f53a2e02a86fdf49811c862eb1732be4039aeb8727018409366079150f0a92b2419e87b846b84d54be1e33698c0b7e63cdd7e301cd45933fdd58478851b336c3a6d1a0ac1f18b582cfa2c1ae6b5d27e9107e99f97ddc439f047bceb104421ecd4de5720f8dfa4af7d1717d8b78a1f0189e59f0cfac46ec8a3372db6f234216a59b9e7b7b04320439b6e8d561a70f88a6ffb5c41e0eb236da9d99e66727debf3e1199726ddc6"}], 0xe0}}], 0x2, 0x800) ioctl$BTRFS_IOC_INO_PATHS(r8, 0xc0389423, &(0x7f0000004980)={0x100, 0x20, [0x10, 0x5, 0x800, 0xffffffffffff0001], &(0x7f0000004940)=[0x0, 0x0, 0x0, 0x0]}) pipe(&(0x7f00000049c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r13, &(0x7f0000004a00)=""/191, 0xbf, 0x10002, &(0x7f0000004ac0)={0x11, 0x1, r12, 0x1, 0xd, 0x6, @local}, 0x14) 8.275486929s ago: executing program 5 (id=7045): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000010100000000b6f40c84"], 0x48}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x100c0, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000080)=0x1) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r5, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @local}}}], 0x20}}], 0x1, 0x4880) 7.998386978s ago: executing program 5 (id=7048): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) socket$inet6(0xa, 0x2, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x11, 0x0, &(0x7f0000000080)="dc188619b95d02ff4284860188a86a4e08", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$kcm(0xa, 0x922000000003, 0x11) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a32000000"], 0x94}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x4008014) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000000000000000000000000000010000005db81d63e405000000d73a5fc2bc8ff04f2f6ca96bd0105f6361f922a52a960100000000000000d745ffcb", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000550901000000000095000000000000009405080010000000bf98000000000000560800000000000085000000b4000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x475, 0x4, 0x3}, 0x1c) 6.864439455s ago: executing program 5 (id=7052): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000000)=ANY=[], 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_buf(r5, 0x0, 0x2f, 0x0, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff050000", @ANYRES32=r4], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r6}) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000004c0)={'nat\x00', 0x0, 0x3, 0xa3, [0xc416, 0x9, 0x83e4, 0xc, 0x1, 0x20ff], 0x0, 0x0, &(0x7f0000000400)=""/163}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000001000030500000000", @ANYRES32=0x0, @ANYBLOB="000000000080801fd87fe12db878b9004800128008000104687372003c000280060005000180000008000100", @ANYRES32=r7, @ANYRES64=r2], 0x68}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) 6.488228343s ago: executing program 4 (id=7053): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) sendfile(r0, r1, 0x0, 0x4010000) (fail_nth: 54) 5.70708266s ago: executing program 4 (id=7054): r0 = socket$inet_smc(0x2b, 0x1, 0x0) accept$inet(r0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000140)="438d9ea065cba49945c7638ceae1ae0ce81d2d58efd38019218141da7ee97f61370daaa59e5e4edee1adfb43605d7933647892544940be4a59f9d63d5aff73ce8b498e0e64898f4d38dfcf9a4ab12a254c24c199e882ca2207e036ddacc2ac995e14ad43c4391ecc34effaadb5d6559ea5669139d9c6f29ebe977a497c310a9c40", 0x81}], 0x1, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0xb, 0xfffff038}, {0x20, 0x81, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r2, 0x3000) mkdirat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x1ff) 5.338567587s ago: executing program 2 (id=7057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x20, 0x1405, 0x1, 0x70bd2d, 0x25dfdbfe, "", [{{0x8, 0x1, 0x1}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x48800) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x20, 0x1405, 0x1, 0x70bd2d, 0x25dfdbfe, "", [{{0x8, 0x1, 0x1}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x48800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000080)={0x9, 0x18, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000080)={0x9, 0x18, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) socket(0x2, 0xa, 0x300) (async) r4 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000002ec0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x22, 0x16, 0x69, 0x0, 0x60, 0x73, 0x0, @empty, @broadcast}, "14f3"}}, 0x24) (async) write$tun(r5, &(0x7f0000002ec0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x22, 0x16, 0x69, 0x0, 0x60, 0x73, 0x0, @empty, @broadcast}, "14f3"}}, 0x24) close(r3) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000dc0)="59dc027705ff49009114339f491924c72c5c131ac0fa7792a5523452b6a1cfa635ba9d611726ff39af", 0x29, 0x8004, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x14) 5.241833038s ago: executing program 1 (id=7058): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000100)=0xffff0001, 0x4) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x1000, 0x0, @private2, 0x9}]}, &(0x7f00000002c0)=0x5a) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r4, 0x8917, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000340)={0x0, @multicast2, @multicast2}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={r5, @in={{0x2, 0x7, @empty}}, 0x5, 0x2}, 0x90) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r5, 0xfff9}, &(0x7f00000000c0)=0x8) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x1, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r6, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000740)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000d40)={r7, &(0x7f0000000800), &(0x7f0000000d00)=@udp6, 0x2}, 0x20) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 5.19462654s ago: executing program 4 (id=7059): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900140000060015000200000014001680100008800c00028008000100060000005c94ffd012fb665a7345851eaf35c4fb3d09906772fbc6f9702eadb5ebd37cc315115d0d1b6aea67e20f39575ab1888fa6e6d1ff558719b2b91821e1713056db2ca902998e49a69f927766aa35e2196f539a9ce0f8157f69"], 0x38}, 0x1, 0x0, 0x0, 0x20004840}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000001800128008000100687372000c00028008000100", @ANYRES32=r2, @ANYBLOB="db4a1cd1301cdfda00e893dc2ac837fa73224954d6af46ca3960bc"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r7 = socket(0x2, 0x2, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ppoll(&(0x7f00000007c0)=[{r8, 0x8080}, {0xffffffffffffffff, 0xc002}, {r7, 0x80}, {r7, 0x10}, {0xffffffffffffffff, 0x511}, {r4, 0xa}, {r4, 0x8066}, {0xffffffffffffffff, 0x7001}, {r8, 0x4104}, {r8, 0x1}], 0xa, 0x0, 0x0, 0x0) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r9, &(0x7f0000000000)=[{&(0x7f0000000400)="1054", 0x2}], 0x1, 0x2, 0x7) unshare(0x400) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x468f74858728407a, 0x0) vmsplice(r10, 0x0, 0x0, 0x0) setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x1) sendto$inet(r7, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvfrom$l2tp(r7, 0x0, 0x0, 0x12002, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="090000007000ffdbdf2501916621dd7308cd0d000000d254ccb078abf3b869de62831358dbb6980499b7d1ea39c88eb26899f844cd5debaa012850b1f633f203fef00263aeadc284730cdab2724024e61c11d55b7c6836132d65d2830debf871574faf8dbe36528f219934d9797ba9aca6bdb991bf48cc370f51889677ec2806186108f152f8b1bc16883abdbdd3e90890db2ee19cb3e2c29d734dae8cd092de"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) r11 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r11, &(0x7f000000d1c0)={&(0x7f000000c040)={0xa, 0x4e23, 0x2, @remote}, 0x1c, &(0x7f000000d140)=[{&(0x7f000000c080)="91f7fbfa31448eb0f64d1ad0a070d762d94fca46645507cb9b414c0ca1c5c85f73c107eab575efb7abbf3749218732e8efc28d5d107930ed27c13554aa201e5dd824061bc46b054225147f3888fb3180c7ada36381afa70fc87f5dae87879e94155c0502998b900dd1b6e652a54c775b566209bbba08e5b0417ba90b640ad2c9b4192f4e6751393296c179c0b8005f07502f01fa10a7bbe0fee19a367abfbb25e9feb72b637287e4858ba1fc41a6ad34122e26088851e661850b8034fccfbe6d7166e9ad3d017bbbadf7107b90817a2c6da4c257c2fd5363b570aebd8e5ab90ceedd0957528fe66fdf34b4fa900adb824470ae539f78ea1f5f2d8085e6a1203c50fe645df674ff8e81bad1679655d154066c57fe9dc17069c3ae29602c9242f22bee8ed9aff5d02b6e156542aecf8b428e6465eb0d7fbdc374a783b79d5a81f6c465950ad067c280867022fc583f739ffd43c45842a6453b10e9d2ac4e1c7447bdffaf5351083f04177d9c9f116fa1d2309cc6e73a3da2e833c9b2b760961b73d337b430d8f9cf5db048629fb1ddad5ad63fa59a209b3f8456ff2c2294a6a5718cbe25f73e63304cdb14d4f7680a25a25aa84d3836695151a65b981d2f8ef8acbcccedc5e52521fca5cb1d99b881e2afa6c8edd2c5af8fb67e3978be253b2fe704dd6dfb05ccca8f963bab2e4f5d974cf721940f3d28496bc2bd6bfc660c4d072ce5b9dae6cea2d773d744eabbfeede39fb77ad03ebe2c591d946634a0c99c898f479272cbbffe291aa676df7e95a6ee2e84814bada2296b8a2872a4bb4b4f7f529b50faa032d11d2ce9a4b7ab57f0ed03773ebd969000170fcf8bf9a0909e0596f83df69cd1563b882bba731d257f4e97874514a958d4da46648a3d64d9cf159337867c5c2af44ea76b13d33f937f0a356195c4a909e7f71ee59c0dbfd03a857edc5a6a0525dd6599d537b41ec6276d1f2f21a6a6e672f9cb39c25b7f079e3aff60abe6c4c67623088cae3e6aa7ea4e0fc587a8cdcad562784fd681a38b4b96c9d5175423fee22677f7fa30be85437f1605d77da2c1acc971307226ed0a82814aae4cf882c40ccef663b9ada214405f3553ed422ccc2f27e3f40b41ba796b5f498865b7d2b979d9512d10f7b61af6092e519f556f1e22b49ac863053937a195cb38dbd4db9311099f3e2302af97cd93ef01eef0728b52314aad6e8a59cc9440eb67d43432961f81d2e136214e71e5a572edf7dbb70c3a19e9b28ce6055f18aa3d2561f409798442f0aba6380df01c5d79f92393fc1aed69f52b23b02dc0894370cb6b652b6c896d6740e2f54c337038c843349d104b60ee4f6b8185d0930de46ccf8373aee6eb897668d8d4ca20d9cfd7c647e52467afaaedba430ed4851abe85c3f660a19d2786abdbee885e50e521d66f7038f063833825a31a8ed764f6d03d3bfc16e1d30e88dd4628da3013addd2a97e78261d316b22a8f81e93c9bc0fc2b2318d2684dc9d4f3008dc4c39d291228375b2a67626ff813c9eb3632e502fae69b4da52139aeb8ef46f6b263d18499b65f4819fc24ffd4c60b3b890ffc9efa78a9dbd4be1562c5088f98298946af33f8653812f25fef3c153915d6ebeafb74ed0460c29bb63654bf60910a7bac4d472ebf700e9733e40f6a625062835c6f6ff8caf3c3c6cd371a5299e2cf081eae8cbaaf8902f62b83993cf3398386eb3806310639d16e6686e81a09df9fab50e1a46cb1e42dcc83c031ed00a63dad9a356d075d42a40f18b55716008e83a15490501f1a879f698995456c48e8ae5999d564fd30d9765ecdc91c0d5c573954fed116005fe2a3fc53ccdac19fa2a7e2cf4eac3dd57eab49d7f71e3fd8cdec9026e9cfc2b2cbe69d3eb04224c98131500e34f3e73f8b7f284a88e7ef0dfaaabb766518ffbe19ef67ce0220e9626ce4bde652ce480257cade09f3f53780b8de9e505bd44d66eb07a1ee3c45b914d052a3f5a5f9bc5d1d0bcc6c38406a2630ccf0e1f429c68c59cfe0be6ad11d2366ca421d41197f0a934ca2a93c844d8e65fff9", 0x5ad}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="1400000000daaf7c9e3f391f31eb923ea4e04e000000290000003e000000010000000000000018000000000000002900ec4bd9ec870000370000000c000060f4d8ce6746062c07176c69d7189940dad05a17993fb381c5372ca1d82d97c3e1210a9e12fa501bceda2dcb414276d7efde716821091904c8cc2f66e94630bd321e8886c6ebce570a14e0"], 0x30}, 0x8084) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010027bd7000fddbdf2d02000000"], 0x14}}, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000001c0)=0x2, 0x4) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012cbd7000fbdbdf2501000000050002000200000006000a004e210000050003007300000008000600ac1414bb08000b00", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r12, @ANYBLOB="c50dfd7eedb297d1d072ef05e526fb10a1bd2f1f021b6f81840f9fc2f387f6d8d3f1afa09bef7a5e6416b43e95afd1ac362498cd7c33995e4a162fadaa37449b3dfa4e180a0d590b031c3f51c95330691717fbfa697f92bcc0eac7727fed53d38fd1d1f389e1a13485febbfbb61914f601293ebd3ee0913ef7092d380db720dcaf5ba9f2f8759cc010bf7757bf4deb71ab2c9259dcc905ed6391363f1c8a1e2727c48ed85bb10997a0201b0e214568de4942b504aa5911f696a40d14be304cfa4a20ccc4613efdc97cbcc502e908880bbd6c9699cc44"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40050) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f0000000440)={0x2, 0xc}) accept$phonet_pipe(r7, &(0x7f0000000480), &(0x7f00000004c0)=0x10) 4.881529029s ago: executing program 4 (id=7060): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001400)={0x6, 0xa, &(0x7f00000015c0)=ANY=[@ANYBLOB="dc0f2d180000000100000000000000000200003cb510000000000040830300010400001862000009000000000000000600000085000000b9000000186a00000100000000000000080000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x8000, 0x1000, &(0x7f0000000280)=""/4096, 0x9491d519d0db20a0, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000012c0)={0x1, 0x5, 0x80, 0xfffff6fd}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001340)=[{0x0, 0x4, 0xd, 0x1}, {0x3, 0x4, 0x9, 0x4}, {0x0, 0x1, 0xc, 0x9}, {0x3, 0x4, 0x2, 0x3}, {0x5, 0x4, 0xf, 0x2}, {0x1, 0x4, 0x9, 0x5}, {0x5, 0x1, 0x2, 0x7}, {0x5, 0x5, 0xd, 0x7}, {0x5, 0x4, 0x5, 0xc}], 0x10, 0x8510}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYRESOCT=r0], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r6, &(0x7f0000000040)={0x11, 0x1, r7, 0x1, 0x9}, 0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r7, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x14) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x21c000, 0x800}, 0x20) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f00000000c0)=0x21202, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000200000007910000000000000db000000400000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x0, r11}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001500)={r0, r1, 0x25, 0x14, @void}, 0x10) 4.876149613s ago: executing program 0 (id=7061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4030000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000002000000180001801400018008000100e000000108000200ffffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004084) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x1, 0x3, 0x0, 0x0, "65ff088235dc5b6d"}}, 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x7, 0x0, 0xffffffff, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x7, 0x0, 0x0, "a464357177330772"}}, 0x48}, 0x1, 0x0, 0x0, 0x200440c3}, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x5, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400050000000000000014aa0000000020000000000000008400000008000000200100000000000000000000000000022000000000000000840000000800000000000000000000000000ffff0a010100"], 0x58, 0x4855}, 0x24000052) recvfrom(r1, &(0x7f0000000400)=""/206, 0xce, 0x10160, &(0x7f0000000500)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) 4.7508273s ago: executing program 0 (id=7062): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x6, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff000000}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @private=0xa010101}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0xff, 0xff, 0x1d7b96eb5fec8c1, 0xff, 0x0, 0xff]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x24004040) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000003c0)=@allocspi={0x11c, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {{{@in=@multicast1, @in=@empty, 0x4e21, 0x3, 0x4e22, 0x10, 0x2, 0x80, 0xa0, 0x3b}, {@in=@remote, 0x4d4, 0x32}, @in6=@rand_addr=' \x01\x00', {0x373a, 0x4, 0x2, 0xab8, 0x8, 0x1, 0x4, 0x3}, {0x22, 0xd2, 0x4, 0x3}, {0x0, 0xce, 0x7}, 0x70bd2c, 0x3504, 0xf016e6580cc0e8b0, 0x1, 0x0, 0x2c}, 0x1, 0x2}, [@encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e20, @in6=@rand_addr=' \x01\x00'}}, @replay_thresh={0x8, 0xb, 0x10}]}, 0x11c}, 0x1, 0x0, 0x0, 0x48095}, 0x4000014) 4.671805336s ago: executing program 0 (id=7063): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x8000000, 0x0, 0x2, 0x1, 0xbfec, 0xb6}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000006180)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000002240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010102}}}], 0x20}}], 0x1, 0x4000800) r6 = socket(0x2b, 0x1, 0x10001) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000040)={0x7fff, 0x4, 0x0, 0x0, 0x97, 0x0, 0x101}, &(0x7f0000000080)=0x20) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/138, 0x8a}], 0x1}, 0x2) r7 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair(0x1d, 0x3, 0x1, &(0x7f00000008c0)) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r9, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r9, 0x913e0000) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r11, 0x3000) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r12, 0x0) 4.25208416s ago: executing program 1 (id=7064): r0 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000100), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000a3f18394c00f49b6c483c6774be2d71f964018f414c18adde77fb838c878fdb16edb6d1bbdf582eead44a733d6486fe6562df3d7d7e285ae735188c6755fe58cf029eb1b404894d3438e7a3a7205bca8d44bb500fc1943a881d187ae57ee853db597f5aed2239be2febc57d811696fb581a6cdbd58553fdb419995f66342bce21c6c2252f057b057898620dc170a55befd238a5c187b7306eb34dea3a91e2b71126fd63f6f11637b8c6f9d85404a095c", @ANYRES32=0x0, @ANYBLOB="1111020020980000280012800b0001006d61637365630000180002800c0004000300000100c28000080005000300008008000500", @ANYRES32=r4, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) pread64(r6, &(0x7f0000001840)=""/4096, 0x1000, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000240), 0x12) pread64(r6, &(0x7f0000000340)=""/69, 0x45, 0x3) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000740)={&(0x7f0000000700)=@can={{0x0, 0x0, 0x0, 0x1}, 0x4, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0x4008851}, 0x40008d5) sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="0201000a0a0000002abd700000000000030006000000000002000000e00000090000000000000000030005000000000002000000e00000010000000000000000020010"], 0x50}}, 0x0) 745.765878ms ago: executing program 1 (id=7065): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x1011, &(0x7f0000000840)=""/4113, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0), 0xda4e1521bbfc0b4) r2 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="a0005bf8", 0x4}, {&(0x7f00000007c0)='\a^XaS', 0x5}], 0x2, 0x0, 0x0, 0x900}, 0x4000800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="dc000000", @ANYRES16=0x0, @ANYBLOB="020026bd7000fddbdf250f000000080004000100000008000500d2000000140003800800010000000000080005000a010101400003800600070000ff000008000500ac1414aa080001000100000014000600fe80000000000000000000000000001d0800010002000000080001000000000028000380140002006d6163766c616e310000000000000000060007004e24000006000400030000002c000280060002004e23000006000e004e22000008000900020000000800070046540000060002004e21000008000400f2ffffff0800040006000000"], 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0xc000) bind$alg(r5, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg(r6, &(0x7f000000be40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[{0x10, 0x115, 0x9}, {0x10, 0x117, 0xfffffffd}], 0x20}}], 0x2, 0x448b0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000000, 0x13, r4, 0x180000000) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES16=r3, @ANYRES32=r3, @ANYBLOB="ef55bb406f000000"], 0x206c}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) 670.684411ms ago: executing program 0 (id=7066): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_to_bridge\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x15}}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@bloom_filter={0x1e, 0x0, 0x4000, 0x5, 0x4c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x80000000000000}, 0x50) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xa855}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'vlan0\x00', @local}) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) (async) r7 = socket$qrtr(0x2a, 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) (async) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x20}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000180)={0x4, 0x9, 0x6, 0xff, 0x80000000}, 0x14) bind$qrtr(r7, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) (async) sendto$packet(r6, &(0x7f00000004c0)="05032955cb151c00d3f1140000004788031c09102c28c4089e5431b46b9ef142315e741363caee499b1d1bff0000b9667bc87209b6d532b0f42c39d068165fec813ffc0a15ff71d3aead6c1f877a33b80afee7f9b36fd10554c52a0800000000000000f45b52cf690b04bc0db019e04c970e42a7a9d25963c188e565445c1f7f75", 0x81, 0x20000044, &(0x7f00000001c0)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000007914c0000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2a}, 0x94) 669.126495ms ago: executing program 4 (id=7067): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) 636.527842ms ago: executing program 1 (id=7068): syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x10, 0x2b, 0x0, @private2, @local, {[@fragment={0x0, 0x0, 0x3, 0x0, 0x0, 0x1}], {0x0, 0x0, 0x8}}}}}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x777a, 0x3}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="439002fa804ed16c1c83a784bb79db1cbdf7d085f2627d9a62123bb1f074de9b7f9f56a5fa666967c32b806a9b1e9bd4a41b243d19", 0x35) 573.017022ms ago: executing program 1 (id=7069): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r2}, &(0x7f0000000ac0), &(0x7f0000000b00)}, 0x20) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) ppoll(&(0x7f0000000100)=[{r1, 0x5082}], 0x1, 0x0, 0x0, 0x0) (async) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x70bd29, 0x700, {0x0, 0x0, 0x0, r4, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48084}, 0x0) 354.864124ms ago: executing program 2 (id=7070): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f0000000380)=0xfffffffe, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r5) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r5) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009e492a626a68033b16732db03e94f9f5692794296197ee5ec6be3d2562e271f31fb0ee0d81d0e9dc24df7108a001171c4415dc8f9a11436a9005da29fcd7a09602c78415b5864bf8051b9625d013cafc6935fe3c08e10ba15f9685f02e6f05ae883f15a0a3b02a26149dd50a52ffd6591c966bf7a8ed19c1ae2be066fa553a00a4c7607e12c2e1b8352d44302f346a10cc67cf3316ad8dfd7568130eb02f9d1a1941d13dbf491347112b2fe8275c95a7b6bc75a7deb2", @ANYRESDEC=r8, @ANYRES32, @ANYRESHEX=r6], 0x50) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r4, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5000000}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000841}, 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80000000}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf7b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048801}, 0x4011) 353.052087ms ago: executing program 4 (id=7071): r0 = socket(0x11, 0x2, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000240), &(0x7f0000000280)=0x3d) connect(r0, &(0x7f0000000380)=@vsock={0x28, 0x0, 0xffffffff}, 0x80) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05040000000000000000060000f808000300", @ANYRES32=r4, @ANYBLOB="080005000900"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0xdc, r3, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x59, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x8, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x2ff, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x49, 0xf, [@preq={0x82, 0x25, {{0x1, 0x0, 0x1}, 0x80, 0x7, 0x5, @broadcast, 0x59e2c473, @void, 0x60e00, 0xc9, 0x1, [{{0x0, 0x0, 0x1}, @broadcast, 0x9}]}}, @ht={0x2d, 0x1a, {0x2, 0x0, 0x4, 0x0, {0x5, 0x108a, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, 0x8, 0x3150, 0x1}}, @supported_rates]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xdc}}, 0x20000014) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r5, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x41004) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x33}], 0x1}, 0x0) 222.740043ms ago: executing program 0 (id=7072): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'wlc\x00', 0x34, 0x80001, 0x6c}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x8, 0x20000, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 138.28742ms ago: executing program 1 (id=7073): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/167, 0xa7}], 0x1}, 0xfff}], 0x1, 0x122, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x8000000, 0x4, 0x3a8, 0xffffffff, 0x0, 0x2d8, 0xe8, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'ip6gre0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0xff000000, 0x0, 0xffffffff], 0x4e23, 0x4e22, 0x4e22, 0x4e22, 0xf6, 0xc, 0xfffffff0, 0x3, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f57625092d006bb183ddd9b468ffd1ab108839f458a6b7fd70870ecd20a0"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 54.469152ms ago: executing program 0 (id=7074): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f00000003c0)={0x28, 0x0, 0xffffd8ee, @host}, 0x10) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000180)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_a, @random="d6a08bdc4229"}, 0x0, @random=0x2, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18, 0x1}, {0x24}]}, @val={0x3, 0x1, 0x34}, @val={0x4, 0x6, {0x1, 0xc8, 0x400}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0xf, 0x74, 0xff}}, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x50, 0x1}}, @val={0x76, 0x6, {0x0, 0x28, 0x1c, 0x3ff}}}, 0x53) 16.984077ms ago: executing program 2 (id=7075): unshare(0x2a060400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9, 0x2}, 0xe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x208, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x208, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x8, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0xd, 0xff, 0x1ff, 'pptp\x00', 'syz0\x00', {0xc7d1}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x40, 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r2, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="34ec0f7a0dafad8e3100000000000000050000000900020073797a320000000009000440000000000900010073797a0100000000c3d4682d442da34dc4ac9e05f9529166469814f1f64ecd7687e7b10a0e681f1c0fc679e7"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25040117800c0003"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$kcm(0x29, 0x2, 0x0) 0s ago: executing program 5 (id=7076): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000ab8000000090a010200000000000000000700000a68000d40c2a02fa2829b41e398a046ed729c3199ec31c22ab4443414c6983f4fa6bff757af7eb7a93b7f61fd69dcfe24c36a21535afe488c2592694239c85bc28819199e29b2cb95038c504e46f9a5a969edff83a3e7686437e91805d72515997396401c23b73ce608000a40000000010c00104000000000000000050900020073797a320000000008000a40000000000c0010400000000000000001080007400000004064000000090a010400000000000000000700000408000a40000000000900020073797a31000000000900010073797a30000000000800054000000020280011800a00010071756f7461000000180002800c00014000000000000000040800024000000000140000001000010000000000000000000a84000a"], 0x144}, 0x1, 0x0, 0x0, 0x4000058}, 0x20008844) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff9}, {0x1, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x4, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0x7, 0x6, @multicast}, 0x14) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000380)={{r0}, 0x1, &(0x7f0000000040)=[0x8], 0x9, 0x1, 0x1}) listen(r0, 0xf) kernel console output (not intermixed with test programs): ace geneve2 may have been left with an inconsistent configuration, please check. [ 999.835815][T28348] syzkaller0: entered promiscuous mode [ 999.841354][T28348] syzkaller0: entered allmulticast mode [ 999.854184][T28348] tipc: Enabled bearer , priority 0 [ 999.881720][T28348] tipc: Resetting bearer [ 999.951836][T28347] tipc: Resetting bearer [ 1000.083979][T28347] tipc: Disabling bearer [ 1000.276234][T28361] netlink: 1028 bytes leftover after parsing attributes in process `syz.5.5974'. [ 1000.285778][T28361] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1000.353865][T28356] syzkaller0: entered promiscuous mode [ 1000.380391][T28356] syzkaller0: entered allmulticast mode [ 1000.434955][T28372] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5976'. [ 1000.634867][T28374] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5977'. [ 1001.018958][T28377] vlan0: left promiscuous mode [ 1001.260927][T28377] ip6gre3: left promiscuous mode [ 1001.265949][T28377] ip6gre3: left allmulticast mode [ 1001.335391][T28377] gretap2: left allmulticast mode [ 1001.341404][T28377] macvtap1: left allmulticast mode [ 1001.347219][T28377] macvtap2: left allmulticast mode [ 1001.387448][ T8491] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1001.395900][ T8491] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.404550][ T8491] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1001.445219][ T8491] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.527573][ T8491] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1001.576044][ T8491] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.615681][ T8491] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1001.628067][ T8491] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.643879][T28401] lo speed is unknown, defaulting to 1000 [ 1001.656238][T28401] lo speed is unknown, defaulting to 1000 [ 1001.816760][T12090] IPVS: stop unused estimator thread 0... [ 1001.857865][T28411] netlink: 'syz.4.5987': attribute type 1 has an invalid length. [ 1001.974967][T28411] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1002.030469][T28411] bond8: entered promiscuous mode [ 1002.035668][T28411] bond8: entered allmulticast mode [ 1002.145446][T28411] macvlan2: entered promiscuous mode [ 1002.150819][T28411] macvlan2: entered allmulticast mode [ 1002.160667][T28411] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1002.196053][T28419] bridge_slave_0: left allmulticast mode [ 1002.201796][T28419] bridge_slave_0: left promiscuous mode [ 1002.208113][T28419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.241376][T28419] bridge_slave_1: left allmulticast mode [ 1002.247092][T28419] bridge_slave_1: left promiscuous mode [ 1002.252939][T28419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.288518][T28419] bond0: (slave bond_slave_0): Releasing backup interface [ 1002.308697][T28419] bond0: (slave bond_slave_1): Releasing backup interface [ 1002.347766][T28419] team0: Port device team_slave_0 removed [ 1002.377656][T28419] team0: Port device team_slave_1 removed [ 1002.386444][T28419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.394261][T28419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.410293][T28419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.417736][T28419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.460646][T28419] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1002.814794][T28438] team0: Port device dummy0 removed [ 1002.822283][T28438] bond6: (slave bridge5): Releasing active interface [ 1003.836135][T28475] siw: device registration error -23 [ 1003.894631][T28471] syzkaller0: entered promiscuous mode [ 1003.900174][T28471] syzkaller0: entered allmulticast mode [ 1004.051917][T28479] bridge_slave_1: default FDB implementation only supports local addresses [ 1006.981120][T28504] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 1006.999654][T28504] __nla_validate_parse: 6 callbacks suppressed [ 1006.999680][T28504] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6009'. [ 1008.464257][T28518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6014'. [ 1008.464378][T28509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1008.557156][T28520] syzkaller1: entered promiscuous mode [ 1008.562887][T28520] syzkaller1: entered allmulticast mode [ 1009.258319][T28551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6023'. [ 1009.294378][T28554] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1009.302894][T28554] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1009.322809][T28550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6023'. [ 1009.372748][T28554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6024'. [ 1009.412006][T28560] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6026'. [ 1009.439198][T28554] hsr_slave_0: left promiscuous mode [ 1009.446887][T28554] hsr_slave_1: left promiscuous mode [ 1010.231725][T28595] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.255640][T28595] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.421164][T28608] xt_hashlimit: size too large, truncated to 1048576 [ 1011.035761][T28640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6046'. [ 1011.480807][T28659] netlink: 'syz.0.6051': attribute type 1 has an invalid length. [ 1011.590019][T28659] bond2: entered promiscuous mode [ 1011.602614][T28659] bond2: entered allmulticast mode [ 1011.610855][T28659] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1011.701769][T28659] bridge1: entered promiscuous mode [ 1011.707248][T28659] bridge1: entered allmulticast mode [ 1011.713338][T28659] bond2: (slave bridge1): Enslaving as a backup interface with an up link [ 1011.742645][T28659] bridge2: entered promiscuous mode [ 1011.748117][T28659] bridge2: entered allmulticast mode [ 1011.754248][T28659] bond2: (slave bridge2): Enslaving as a backup interface with a down link [ 1011.775431][T12047] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1011.925560][ T1057] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1011.938427][T12047] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 1012.248362][T28704] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1012.320107][T28707] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6063'. [ 1012.365549][T28708] netlink: 'syz.0.6061': attribute type 10 has an invalid length. [ 1012.385827][T28710] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6063'. [ 1012.390133][T28708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1012.405753][T28708] team0: Port device bond0 added [ 1012.591269][T28719] syzkaller0: entered promiscuous mode [ 1012.596803][T28719] syzkaller0: entered allmulticast mode [ 1012.639042][T28719] ip6tnl1: entered allmulticast mode [ 1012.652417][ T1057] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1012.747104][ T1057] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1012.755079][ T5360] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1013.141381][T28724] syzkaller0: entered promiscuous mode [ 1013.146919][T28724] syzkaller0: entered allmulticast mode [ 1013.157401][T28724] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6067'. [ 1013.235357][ T6128] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1013.366224][T28730] netlink: 'syz.0.6070': attribute type 1 has an invalid length. [ 1013.437782][T28730] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1013.466396][ T5360] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1013.663841][T28738] SET target dimension over the limit! [ 1013.862026][T28729] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6069'. [ 1013.877560][T28729] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6069'. [ 1014.006066][T28754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6076'. [ 1014.108662][T28754] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1014.242961][T28759] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1014.279057][T28759] bond9: (slave vti0): The slave device specified does not support setting the MAC address [ 1014.313092][T28759] bond9: (slave vti0): Error -95 calling set_mac_address [ 1014.359162][T28771] FAULT_INJECTION: forcing a failure. [ 1014.359162][T28771] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.434287][T28771] CPU: 1 UID: 0 PID: 28771 Comm: syz.0.6081 Not tainted syzkaller #0 PREEMPT(full) [ 1014.434317][T28771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1014.434330][T28771] Call Trace: [ 1014.434339][T28771] [ 1014.434349][T28771] dump_stack_lvl+0xe8/0x150 [ 1014.434390][T28771] should_fail_ex+0x40c/0x560 [ 1014.434429][T28771] should_failslab+0xa8/0x100 [ 1014.434462][T28771] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1014.434488][T28771] ? skb_clone+0x212/0x3a0 [ 1014.434524][T28771] ? skb_clone+0x212/0x3a0 [ 1014.434558][T28771] skb_clone+0x212/0x3a0 [ 1014.434589][T28771] __netlink_deliver_tap+0x413/0x860 [ 1014.434632][T28771] ? netlink_deliver_tap+0x2e/0x1b0 [ 1014.434661][T28771] netlink_deliver_tap+0x19c/0x1b0 [ 1014.434689][T28771] netlink_unicast+0x77f/0x940 [ 1014.434727][T28771] netlink_sendmsg+0x813/0xb40 [ 1014.434765][T28771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1014.434797][T28771] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1014.434834][T28771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1014.434859][T28771] sock_sendmsg_nosec+0x13a/0x180 [ 1014.434894][T28771] ____sys_sendmsg+0x54e/0x850 [ 1014.434927][T28771] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1014.434964][T28771] ? import_iovec+0x73/0xa0 [ 1014.434993][T28771] ___sys_sendmsg+0x2a5/0x360 [ 1014.435018][T28771] ? __lock_acquire+0x683/0x2cf0 [ 1014.435054][T28771] ? __pfx____sys_sendmsg+0x10/0x10 [ 1014.435123][T28771] ? __fget_files+0x2a/0x420 [ 1014.435149][T28771] ? __fget_files+0x3a2/0x420 [ 1014.435189][T28771] __x64_sys_sendmsg+0x1b1/0x290 [ 1014.435224][T28771] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1014.435273][T28771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.435297][T28771] do_syscall_64+0x174/0x580 [ 1014.435320][T28771] ? trace_irq_disable+0x3b/0x140 [ 1014.435347][T28771] ? clear_bhb_loop+0x40/0x90 [ 1014.435374][T28771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.435395][T28771] RIP: 0033:0x7fb820f9de59 [ 1014.435417][T28771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.435435][T28771] RSP: 002b:00007fb821e13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1014.435459][T28771] RAX: ffffffffffffffda RBX: 00007fb821225fa0 RCX: 00007fb820f9de59 [ 1014.435475][T28771] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1014.435489][T28771] RBP: 00007fb821e13090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.435510][T28771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.435523][T28771] R13: 00007fb821226038 R14: 00007fb821225fa0 R15: 00007fff7479f0a8 [ 1014.435560][T28771] [ 1014.436298][T28761] bond9: (slave dummy0): Error -99 calling set_mac_address [ 1014.480632][T28778] xt_hashlimit: overflow, rate too high: 0 [ 1014.769690][T28782] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1015.176081][T28802] openvswitch: netlink: Message has 4 unknown bytes. [ 1015.232438][T28802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1015.448471][T28816] dvmrp8: entered allmulticast mode [ 1015.542457][T28822] tipc: Enabled bearer , priority 0 [ 1015.551992][T28822] syzkaller0: entered promiscuous mode [ 1015.569933][T28822] syzkaller0: entered allmulticast mode [ 1015.590487][T28822] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1015.623115][T28823] xt_CT: No such helper "syz0" [ 1015.677738][T28830] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6099'. [ 1015.694086][T28831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6099'. [ 1015.724852][T28822] tipc: Resetting bearer [ 1015.733603][T28834] lo speed is unknown, defaulting to 1000 [ 1015.745982][T28820] tipc: Resetting bearer [ 1015.821884][T28820] tipc: Disabling bearer [ 1015.887812][T28834] lo speed is unknown, defaulting to 1000 [ 1015.913372][T28834] lo speed is unknown, defaulting to 1000 [ 1015.921423][T28844] netlink: 292 bytes leftover after parsing attributes in process `syz.0.6103'. [ 1015.927517][T28846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6105'. [ 1015.940550][T28834] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1015.961158][T28834] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1016.000927][T28834] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1016.071985][T28834] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1016.187944][T28850] ip6gre3: entered promiscuous mode [ 1016.193440][T28850] ip6gre3: entered allmulticast mode [ 1016.203057][T12072] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1016.211281][T12072] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1016.225560][ T5360] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1016.233200][T28834] lo speed is unknown, defaulting to 1000 [ 1016.266667][T28834] lo speed is unknown, defaulting to 1000 [ 1016.298370][T28834] lo speed is unknown, defaulting to 1000 [ 1016.326140][T28834] lo speed is unknown, defaulting to 1000 [ 1016.369066][T28834] lo speed is unknown, defaulting to 1000 [ 1016.421235][T28834] lo speed is unknown, defaulting to 1000 [ 1016.493986][T28834] lo speed is unknown, defaulting to 1000 [ 1016.502162][T28834] lo speed is unknown, defaulting to 1000 [ 1016.648982][ T6128] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1017.143991][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1017.163420][T28898] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 1017.309529][ T5360] lo speed is unknown, defaulting to 1000 [ 1017.492354][T28906] __nla_validate_parse: 3 callbacks suppressed [ 1017.492375][T28906] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6122'. [ 1017.517913][T28904] tipc: Enabled bearer , priority 0 [ 1017.547682][T28904] syzkaller0: entered promiscuous mode [ 1017.563619][T28904] syzkaller0: entered allmulticast mode [ 1017.664418][T28904] tipc: Resetting bearer [ 1017.839090][T28904] tipc: Disabling bearer [ 1017.872354][T28911] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 1018.633363][T28936] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1018.641397][T28936] ip6gretap1: left allmulticast mode [ 1018.669694][T28936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1018.677792][T28936] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1018.717738][T28936] bond3: left allmulticast mode [ 1018.729642][T28936] bond5: left allmulticast mode [ 1018.737241][T28936] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1018.750473][T28936] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1018.759417][T28936] bond7: entered allmulticast mode [ 1018.764785][T28936] macvtap0: left allmulticast mode [ 1018.769940][T28936] bond7: left allmulticast mode [ 1018.775591][T28936] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 1018.790330][T28936] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1018.800418][T28936] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1018.869263][T28936] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1018.879680][T28936] geneve4: left allmulticast mode [ 1018.895440][T28936] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1018.909243][T28936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1018.918819][T28936] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1018.960750][T28952] netlink: 276 bytes leftover after parsing attributes in process `syz.1.6135'. [ 1018.962745][T28936] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1018.977363][T28936] ip6tnl1: left allmulticast mode [ 1018.994722][ T1062] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1019.003607][ T1062] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1019.019442][ T8491] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 1019.019462][ T8491] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1019.056037][T25010] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1019.119131][ T1062] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1019.128022][ T1062] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1019.195027][T28948] syzkaller0: entered promiscuous mode [ 1019.200543][T28948] syzkaller0: entered allmulticast mode [ 1019.867858][T28975] netlink: 'syz.5.6139': attribute type 1 has an invalid length. [ 1019.956026][T25010] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1020.147187][T28986] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.6143'. [ 1020.343962][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1020.383332][T28989] syzkaller0: entered promiscuous mode [ 1020.384281][T28995] netlink: 'syz.0.6145': attribute type 29 has an invalid length. [ 1020.405644][T28989] syzkaller0: entered allmulticast mode [ 1020.449522][T28996] netlink: 'syz.0.6145': attribute type 29 has an invalid length. [ 1020.478223][T28995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6145'. [ 1020.487146][T28995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6145'. [ 1020.498333][T28989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6142'. [ 1020.568925][T28989] ipvlan2: entered allmulticast mode [ 1020.574285][T28989] syz_tun: entered allmulticast mode [ 1020.611969][T29000] netlink: 'syz.1.6147': attribute type 62 has an invalid length. [ 1020.880263][T29009] lo speed is unknown, defaulting to 1000 [ 1020.888154][T29009] lo speed is unknown, defaulting to 1000 [ 1021.390061][T29009] lo speed is unknown, defaulting to 1000 [ 1021.548651][T29040] netlink: 'syz.1.6159': attribute type 21 has an invalid length. [ 1021.580483][T29037] Cannot find set identified by id 0 to match [ 1021.670843][ T30] audit: type=1107 audit(1783076266.484:22): pid=29043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¯M=~VÖ(‹¶Œ„YX.¶i‡dKR­óëé4ÜÎE•œ˜¨æÂ{E~' [ 1021.826428][T29053] xt_hashlimit: overflow, try lower: 6/0 [ 1021.835662][T29053] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6164'. [ 1021.846058][T29053] netlink: 'syz.1.6164': attribute type 1 has an invalid length. [ 1022.396073][T29072] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6170'. [ 1022.565775][T29080] xt_TCPMSS: Only works on TCP SYN packets [ 1022.903868][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1023.412080][T29097] openvswitch: netlink: Tunnel attr 25 out of range max 16 [ 1023.994434][T29110] lo speed is unknown, defaulting to 1000 [ 1024.002266][T29110] lo speed is unknown, defaulting to 1000 [ 1024.654081][T23846] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1024.684039][T29133] tipc: Enabling of bearer rejected, failed to enable media [ 1024.699980][T29110] lo speed is unknown, defaulting to 1000 [ 1025.455365][T29161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6193'. [ 1025.544105][ T5360] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1025.716285][T29166] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6196'. [ 1025.864109][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1025.917383][T29171] lo speed is unknown, defaulting to 1000 [ 1025.925132][T29171] lo speed is unknown, defaulting to 1000 [ 1026.582918][T29171] lo speed is unknown, defaulting to 1000 [ 1026.776711][ T5749] page_pool_release_retry() stalled pool shutdown: id 110, 1 inflight 545 sec [ 1027.270126][T29209] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6205'. [ 1028.178618][ T5637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1028.192928][ T5637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1028.202373][ T5637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1028.217107][ T5637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1028.225449][ T5637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1029.064696][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1029.105489][T29227] lo speed is unknown, defaulting to 1000 [ 1029.124814][T29227] lo speed is unknown, defaulting to 1000 [ 1029.309144][T29252] bridge0: port 1(syz_tun) entered blocking state [ 1029.331221][T29252] bridge0: port 1(syz_tun) entered disabled state [ 1029.352615][T29252] syz_tun: entered allmulticast mode [ 1029.397996][T29255] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1029.398636][T29252] syz_tun: entered promiscuous mode [ 1029.455704][T29252] bridge0: port 1(syz_tun) entered blocking state [ 1029.462390][T29252] bridge0: port 1(syz_tun) entered forwarding state [ 1029.492901][T29251] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1029.570592][T29266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1029.689427][T29266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6218'. [ 1029.701732][T29227] lo speed is unknown, defaulting to 1000 [ 1029.954285][T29274] ±ÿ: renamed from lo (while UP) [ 1030.024642][ T5360] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1030.454160][T12068] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1030.512176][ T5637] Bluetooth: hci1: command tx timeout [ 1030.594520][T23846] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1030.984181][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1031.476677][T12068] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1031.523440][T12068] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1031.550541][T29227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.567634][T29227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.602481][T29227] bridge_slave_0: entered allmulticast mode [ 1031.630527][T29227] bridge_slave_0: entered promiscuous mode [ 1031.965915][T29227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.995141][T29227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.026430][T29227] bridge_slave_1: entered allmulticast mode [ 1032.062999][T29227] bridge_slave_1: entered promiscuous mode [ 1032.083809][T29326] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6234'. [ 1032.117047][T29327] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6235'. [ 1032.149999][T29327] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6235'. [ 1032.208325][T29330] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6235'. [ 1032.222929][T29330] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6235'. [ 1032.344486][ T6128] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1032.400839][T29227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.630630][ T5637] Bluetooth: hci1: command tx timeout [ 1032.702220][T29227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1032.971223][T29227] team0: Port device team_slave_0 added [ 1033.038292][T29227] team0: Port device team_slave_1 added [ 1033.143333][T29340] netlink: 'syz.1.6238': attribute type 1 has an invalid length. [ 1033.442025][T29227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1033.464949][T29227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.529609][T29227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1033.645872][T29227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1033.690485][T29227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.870413][T29227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.041914][T29365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6242'. [ 1034.287772][T29355] syzkaller0: entered promiscuous mode [ 1034.301532][T29355] syzkaller0: entered allmulticast mode [ 1034.339271][T29360] geneve0: entered promiscuous mode [ 1034.367491][T29360] geneve0: left promiscuous mode [ 1034.425205][T29371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6242'. [ 1034.465847][T29363] geneve0: entered promiscuous mode [ 1034.496540][T29363] geneve0: left promiscuous mode [ 1034.575265][T29365] gretap2: entered allmulticast mode [ 1034.665339][ T5637] Bluetooth: hci1: command tx timeout [ 1035.952077][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1035.976186][T29374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6243'. [ 1036.762092][ T5637] Bluetooth: hci1: command tx timeout [ 1039.418774][T29376] lo speed is unknown, defaulting to 1000 [ 1039.474258][T29227] hsr_slave_0: entered promiscuous mode [ 1039.481038][T29227] hsr_slave_1: entered promiscuous mode [ 1039.489282][T29227] debugfs: 'hsr0' already exists in 'hsr' [ 1039.495275][T29227] Cannot create hsr debugfs directory [ 1039.513405][T29376] lo speed is unknown, defaulting to 1000 [ 1039.576426][ T8491] dvmrp8: left allmulticast mode [ 1040.109125][ T8491] geneve0 (unregistering): left promiscuous mode [ 1040.197778][ T8491] bond0 (unregistering): Released all slaves [ 1040.208349][ T8491] bond1 (unregistering): Released all slaves [ 1040.241800][ T8491] bond2 (unregistering): Released all slaves [ 1040.257089][ T8491] bond3 (unregistering): Released all slaves [ 1040.271482][ T8491] bond4 (unregistering): Released all slaves [ 1040.285541][ T8491] bond5 (unregistering): Released all slaves [ 1040.299630][ T8491] bond6 (unregistering): Released all slaves [ 1040.313637][ T8491] bond7 (unregistering): Released all slaves [ 1040.342305][ T8491] bond8 (unregistering): Released all slaves [ 1040.364941][ T8491] bond9 (unregistering): Released all slaves [ 1040.381742][ T8491] bond10 (unregistering): Released all slaves [ 1040.399103][ T8491] bond11 (unregistering): Released all slaves [ 1040.414064][ T8491] bond12 (unregistering): Released all slaves [ 1040.442994][ T8491] bond13 (unregistering): Released all slaves [ 1040.468255][ T8491] bond14 (unregistering): Released all slaves [ 1040.569865][T29376] lo speed is unknown, defaulting to 1000 [ 1040.975066][ T8491] tipc: Left network mode [ 1041.474373][T29416] netlink: 'syz.4.6248': attribute type 10 has an invalid length. [ 1041.556330][T29416] geneve1: entered promiscuous mode [ 1041.571278][T29416] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 1041.661388][T29424] netlink: 'syz.5.6251': attribute type 3 has an invalid length. [ 1042.012391][ T1062] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.023210][ T1062] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.031461][ T1062] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.055131][ T1062] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.169464][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1043.143998][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1043.527595][T29469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6257'. [ 1043.570212][T29470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6257'. [ 1043.639076][T12068] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 1043.748955][T29458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1043.922131][ T6128] IPVS: starting estimator thread 0... [ 1044.015261][T29487] IPVS: using max 27 ests per chain, 64800 per kthread [ 1044.434828][T29497] netlink: 'syz.0.6262': attribute type 3 has an invalid length. [ 1044.442714][T29497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6262'. [ 1044.788451][T12068] smc: removing ib device syz1 [ 1044.832847][ T5749] lo speed is unknown, defaulting to 1000 [ 1044.838667][ T5749] syz1: Port: 1 Link DOWN [ 1044.856930][T12068] smbdirect: ib_dev[syz1] removed [ 1044.862423][T29486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6260'. [ 1045.063964][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1045.804332][T29517] kthread_run failed with err -4 [ 1045.862685][T29524] sctp: [Deprecated]: syz.4.6268 (pid 29524) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1045.862685][T29524] Use struct sctp_sack_info instead [ 1046.019023][T29533] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6269'. [ 1046.060004][T29535] xt_hashlimit: overflow, rate too high: 0 [ 1046.190035][T29227] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1046.210459][T29227] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1046.266824][T29227] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1046.391692][T29227] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1046.408203][T29545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1046.431869][T29227] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1046.984198][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1047.442765][T29227] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1047.529675][T29227] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1047.978539][T29227] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1047.994860][T29585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6278'. [ 1048.491699][T29605] netlink: 'syz.1.6282': attribute type 13 has an invalid length. [ 1048.907667][ T6128] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1049.009679][T29605] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1049.110456][T29605] syzkaller0: entered promiscuous mode [ 1049.114000][ T6125] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1049.116033][T29605] syzkaller0: entered allmulticast mode [ 1049.651978][T29628] lo speed is unknown, defaulting to 1000 [ 1049.676073][T29628] lo speed is unknown, defaulting to 1000 [ 1049.704859][T29227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.783195][T29227] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.896344][T12068] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.903550][T12068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1050.044070][T12068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.051306][T12068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1050.053003][ T8491] IPVS: stop unused estimator thread 0... [ 1050.126985][T29659] FAULT_INJECTION: forcing a failure. [ 1050.126985][T29659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1050.142028][T29659] CPU: 0 UID: 0 PID: 29659 Comm: syz.1.6291 Not tainted syzkaller #0 PREEMPT(full) [ 1050.142055][T29659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1050.142068][T29659] Call Trace: [ 1050.142077][T29659] [ 1050.142086][T29659] dump_stack_lvl+0xe8/0x150 [ 1050.142129][T29659] should_fail_ex+0x40c/0x560 [ 1050.142167][T29659] _copy_from_user+0x2d/0xb0 [ 1050.142191][T29659] __sys_bpf+0x2e7/0xd90 [ 1050.142229][T29659] ? __pfx___sys_bpf+0x10/0x10 [ 1050.142266][T29659] ? __fget_files+0x2a/0x420 [ 1050.142313][T29659] ? ksys_write+0x242/0x270 [ 1050.142348][T29659] ? __pfx_ksys_write+0x10/0x10 [ 1050.142384][T29659] __x64_sys_bpf+0xba/0xd0 [ 1050.142409][T29659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.142432][T29659] do_syscall_64+0x174/0x580 [ 1050.142457][T29659] ? trace_irq_disable+0x3b/0x140 [ 1050.142483][T29659] ? clear_bhb_loop+0x40/0x90 [ 1050.142509][T29659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.142529][T29659] RIP: 0033:0x7fa4ca59de59 [ 1050.142550][T29659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1050.142568][T29659] RSP: 002b:00007fa4cb49d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1050.142591][T29659] RAX: ffffffffffffffda RBX: 00007fa4ca825fa0 RCX: 00007fa4ca59de59 [ 1050.142606][T29659] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1050.142619][T29659] RBP: 00007fa4cb49d090 R08: 0000000000000000 R09: 0000000000000000 [ 1050.142632][T29659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1050.142644][T29659] R13: 00007fa4ca826038 R14: 00007fa4ca825fa0 R15: 00007ffc70e994c8 [ 1050.142677][T29659] [ 1050.179343][T29629] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6286'. [ 1051.051900][T29690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6296'. [ 1051.077906][T29690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6296'. [ 1051.124787][T29690] netlink: 58 bytes leftover after parsing attributes in process `syz.4.6296'. [ 1051.487999][T29702] netlink: 'syz.4.6297': attribute type 2 has an invalid length. [ 1051.979710][T29714] netlink: 'syz.0.6299': attribute type 10 has an invalid length. [ 1052.044107][T29714] team0: Port device dummy0 added [ 1052.076271][T29718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6300'. [ 1052.315235][T29718] bond15: entered promiscuous mode [ 1052.322761][T29718] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1052.360041][T29227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1052.510673][T29227] veth0_vlan: entered promiscuous mode [ 1052.533095][T29227] veth1_vlan: entered promiscuous mode [ 1052.694549][T29227] veth0_macvtap: entered promiscuous mode [ 1052.705476][T29227] veth1_macvtap: entered promiscuous mode [ 1052.727069][T29227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1052.739102][T29227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1052.836139][T12072] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.849267][T12072] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.864495][T12072] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.873258][T12072] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.927687][T29754] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6307'. [ 1053.014998][T29754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6307'. [ 1053.141986][ T7425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1053.205267][ T7425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.393686][T29774] netlink: 'syz.5.6312': attribute type 1 has an invalid length. [ 1053.412249][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1053.436536][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.746045][T29795] xt_l2tp: wrong L2TP version: 0 [ 1053.764341][T29797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6210'. [ 1053.773346][T29797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1053.968376][T29806] x_tables: duplicate underflow at hook 1 [ 1053.982623][T29797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1054.104698][ T5641] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1054.124032][ T5641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1054.153245][ T5641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1054.191443][ T5641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1054.199191][ T5641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1054.471697][T29822] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1054.496440][T29822] bridge0: port 2(bond4) entered blocking state [ 1054.503036][T29822] bridge0: port 2(bond4) entered disabled state [ 1054.510185][T29822] bond4: entered allmulticast mode [ 1054.518107][T29822] bond4: entered promiscuous mode [ 1054.524805][T29822] bridge0: port 2(bond4) entered blocking state [ 1054.531209][T29822] bridge0: port 2(bond4) entered forwarding state [ 1055.078618][T12090] bridge0: port 2(bond4) entered disabled state [ 1055.092420][T29839] lo speed is unknown, defaulting to 1000 [ 1055.137538][T29839] lo speed is unknown, defaulting to 1000 [ 1055.518768][T29811] lo speed is unknown, defaulting to 1000 [ 1055.519582][T29860] syzkaller0: entered promiscuous mode [ 1055.535186][T29860] syzkaller0: entered allmulticast mode [ 1055.544379][T29860] tipc: Started in network mode [ 1055.549312][T29811] lo speed is unknown, defaulting to 1000 [ 1055.558510][T29860] tipc: Node identity da1c00fcc7ea, cluster identity 4711 [ 1055.570547][T29860] tipc: Enabled bearer , priority 0 [ 1055.638043][T29860] tipc: Resetting bearer [ 1055.659216][T29857] tipc: Resetting bearer [ 1055.685021][T29857] tipc: Disabling bearer [ 1055.842033][T12072] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.205564][T12072] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.271063][ T5641] Bluetooth: hci0: command tx timeout [ 1056.345379][T29896] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1056.416986][T12072] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.677589][T12072] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.922997][T29811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.930285][T29811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.937511][T29811] bridge_slave_0: entered allmulticast mode [ 1057.001700][T29811] bridge_slave_0: entered promiscuous mode [ 1057.011717][T29811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.018992][T29811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.026207][T29811] bridge_slave_1: entered allmulticast mode [ 1057.034165][T29811] bridge_slave_1: entered promiscuous mode [ 1057.130686][T29811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.211004][T29811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1057.888039][T12072] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 1058.084539][T29943] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6340'. [ 1058.090164][T12072] bond0 (unregistering): Released all slaves [ 1058.109342][T12072] bond1 (unregistering): Released all slaves [ 1058.124995][T12072] bond2 (unregistering): Released all slaves [ 1058.139410][T12072] bond3 (unregistering): Released all slaves [ 1058.153320][T12072] bond4 (unregistering): Released all slaves [ 1058.169916][T12072] bond5 (unregistering): Released all slaves [ 1058.178086][T29940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6341'. [ 1058.241173][T12072] bond6 (unregistering): Released all slaves [ 1058.257273][T12072] bond7 (unregistering): Released all slaves [ 1058.271821][T12072] bond8 (unregistering): Released all slaves [ 1058.286934][T12072] bond9 (unregistering): Released all slaves [ 1058.343904][ T5641] Bluetooth: hci0: command tx timeout [ 1058.367762][T29811] team0: Port device team_slave_0 added [ 1058.465315][T29811] team0: Port device team_slave_1 added [ 1058.514127][T29949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1058.771769][T29811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1058.780795][T29811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.809909][T29811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.860401][T12072] : left promiscuous mode [ 1059.028220][T29811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1059.067068][T29811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.093010][T29811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1059.178371][T12072] tipc: Disabling bearer [ 1059.189617][T12072] tipc: Left network mode [ 1059.227330][T29811] hsr_slave_0: entered promiscuous mode [ 1059.234226][T29811] hsr_slave_1: entered promiscuous mode [ 1059.240748][T29811] debugfs: 'hsr0' already exists in 'hsr' [ 1059.246525][T29811] Cannot create hsr debugfs directory [ 1059.576658][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1059.596338][T29975] netlink: 'syz.0.6344': attribute type 11 has an invalid length. [ 1059.636231][T29975] netlink: 'syz.0.6344': attribute type 11 has an invalid length. [ 1059.655666][T29975] netlink: 'syz.0.6344': attribute type 11 has an invalid length. [ 1059.668864][T29975] netlink: 'syz.0.6344': attribute type 11 has an invalid length. [ 1059.684298][T29975] netlink: 'syz.0.6344': attribute type 11 has an invalid length. [ 1059.695605][T29975] netlink: 'syz.0.6344': attribute type 11 has an invalid length. [ 1059.705585][T29975] netlink: 'syz.0.6344': attribute type 11 has an invalid length. [ 1059.715245][T29975] netlink: 'syz.0.6344': attribute type 11 has an invalid length. [ 1059.732318][T29975] netlink: 'syz.0.6344': attribute type 11 has an invalid length. [ 1059.753539][T29975] netlink: 'syz.0.6344': attribute type 11 has an invalid length. [ 1060.109691][T29996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6349'. [ 1060.147990][T29999] x_tables: duplicate underflow at hook 1 [ 1060.159260][T29996] x_tables: duplicate underflow at hook 1 [ 1060.424195][ T5641] Bluetooth: hci0: command tx timeout [ 1060.705541][T30020] netlink: 'syz.5.6354': attribute type 1 has an invalid length. [ 1060.713504][T30020] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6354'. [ 1061.508101][T30042] netlink: 'syz.5.6359': attribute type 1 has an invalid length. [ 1061.980576][ T6125] IPVS: starting estimator thread 0... [ 1062.171039][T30050] IPVS: using max 26 ests per chain, 62400 per kthread [ 1062.510045][ T5641] Bluetooth: hci0: command tx timeout [ 1062.986193][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1064.641370][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1064.648543][T30021] veth0_to_team: entered allmulticast mode [ 1064.657525][T30026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1064.678734][T30042] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 1064.975826][T30053] netlink: 'syz.1.6362': attribute type 1 has an invalid length. [ 1065.000321][T30061] Bluetooth: MGMT ver 1.23 [ 1065.085625][T30061] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6365'. [ 1065.478391][T30073] bond1: (slave gretap1): making interface the new active one [ 1065.503072][T30073] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1065.604466][T30086] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8 [ 1065.785509][T30092] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6368'. [ 1066.142126][T30112] netlink: 'syz.2.6372': attribute type 4 has an invalid length. [ 1066.203948][T30112] netlink: 'syz.2.6372': attribute type 4 has an invalid length. [ 1066.503408][T30118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.511183][T30118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.614948][T30128] sctp: [Deprecated]: syz.5.6374 (pid 30128) Use of int in maxseg socket option. [ 1066.614948][T30128] Use struct sctp_assoc_value instead [ 1066.635208][T30128] netlink: 'syz.5.6374': attribute type 1 has an invalid length. [ 1066.642989][T30128] netlink: 'syz.5.6374': attribute type 4 has an invalid length. [ 1066.653990][T30128] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.6374'. [ 1066.790511][T30118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1067.247479][T30136] bridge0: port 1(syz_tun) entered disabled state [ 1067.395377][T12090] bond2: (slave bridge1): link status up again after 0 ms [ 1067.409034][ T7425] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.426808][ T7425] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.461696][ T7425] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.477019][ T7425] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.506828][T12093] bond2: (slave bridge1): link status up again after 0 ms [ 1067.520616][T12093] bond2: (slave bridge1): failed to get link speed/duplex [ 1067.619064][T30148] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8 [ 1067.673776][T12060] bond2: (slave bridge1): failed to get link speed/duplex [ 1067.790060][T29811] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1067.808442][T29811] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1067.849878][T29811] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1067.878774][T29811] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1067.887038][T29811] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1067.908703][T29811] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1067.919986][T29811] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1067.930398][T30155] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6380'. [ 1068.007885][T29811] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1068.265183][T29811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.315091][ T1057] bond2: (slave bridge1): failed to get link speed/duplex [ 1068.358875][T29811] 8021q: adding VLAN 0 to HW filter on device team0 [ 1068.383661][T30166] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6383'. [ 1068.393305][ T1057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.400471][ T1057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1068.580623][ T1057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.587838][ T1057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1068.670742][T30172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6384'. [ 1068.849224][T30180] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6386'. [ 1068.912609][T12068] bond2: (slave bridge1): failed to get link speed/duplex [ 1069.034084][T12060] bond2: (slave bridge1): failed to get link speed/duplex [ 1069.732631][T12060] net_ratelimit: 4 callbacks suppressed [ 1069.732655][T12060] bond2: (slave bridge1): failed to get link speed/duplex [ 1069.765694][T30212] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6392'. [ 1069.909711][T12047] bond2: (slave bridge1): failed to get link speed/duplex [ 1069.919230][T30204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6391'. [ 1070.084027][T12068] bond2: (slave bridge1): failed to get link speed/duplex [ 1070.277202][T30221] bond5: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 1070.303835][T30221] bond5: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 1070.331448][T30221] bond5: entered allmulticast mode [ 1070.354870][T29811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.470502][T30227] wlan0 speed is unknown, defaulting to 1000 [ 1070.547589][T30232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6395'. [ 1070.570307][T30230] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6396'. [ 1070.629519][T30233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6396'. [ 1070.646702][T30227] wlan0 speed is unknown, defaulting to 1000 [ 1070.667078][T30227] wlan0 speed is unknown, defaulting to 1000 [ 1070.701202][T30227] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1070.791372][T30227] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1070.846687][T30227] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1070.917161][T30227] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1070.945108][T12047] bond2: (slave bridge1): failed to get link speed/duplex [ 1071.074041][T12072] bond2: (slave bridge1): failed to get link speed/duplex [ 1071.155706][T30227] wlan0 speed is unknown, defaulting to 1000 [ 1071.178252][T30227] wlan0 speed is unknown, defaulting to 1000 [ 1071.194477][T30227] wlan0 speed is unknown, defaulting to 1000 [ 1071.203334][T30246] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6398'. [ 1071.209714][T30227] wlan0 speed is unknown, defaulting to 1000 [ 1071.212772][T30246] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6398'. [ 1071.236286][T30227] wlan0 speed is unknown, defaulting to 1000 [ 1071.247928][T29811] veth0_vlan: entered promiscuous mode [ 1071.276911][T30247] netlink: 'syz.1.6398': attribute type 13 has an invalid length. [ 1071.286619][T30227] wlan0 speed is unknown, defaulting to 1000 [ 1071.293742][ T1057] bond2: (slave bridge1): failed to get link speed/duplex [ 1071.301745][T29811] veth1_vlan: entered promiscuous mode [ 1071.321187][T30227] wlan0 speed is unknown, defaulting to 1000 [ 1071.408620][T30227] wlan0 speed is unknown, defaulting to 1000 [ 1071.431202][T29811] veth0_macvtap: entered promiscuous mode [ 1071.442396][T29811] veth1_macvtap: entered promiscuous mode [ 1071.469444][T30251] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6399'. [ 1071.498463][T25010] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1071.527556][T29811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1071.585610][T30253] netlink: 13 bytes leftover after parsing attributes in process `syz.2.6400'. [ 1071.596138][T30253] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6400'. [ 1071.701661][T29811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.725626][T12068] bond2: (slave bridge1): link status up again after 0 ms [ 1071.753172][T12047] bond2: (slave bridge1): link status up again after 0 ms [ 1071.763428][ T6128] wlan0 speed is unknown, defaulting to 1000 [ 1071.787236][T12072] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.796374][T12072] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.805154][T12072] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.813894][T12072] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.849515][T12068] bond2: (slave bridge1): link status up again after 0 ms [ 1071.849972][T30259] lo speed is unknown, defaulting to 1000 [ 1071.870520][T12068] bond2: (slave bridge1): failed to get link speed/duplex [ 1071.908840][T30259] lo speed is unknown, defaulting to 1000 [ 1071.916642][T30259] wlan0 speed is unknown, defaulting to 1000 [ 1072.267275][T30273] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6406'. [ 1072.374927][T30275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6407'. [ 1072.411656][T22227] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1072.456915][T12072] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1072.473083][T12072] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1072.574307][T12047] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1072.583142][T12060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.584826][T12047] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1072.597238][T12060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.704938][T12072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.714102][T12072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.098924][T30305] nbd: must specify at least one socket [ 1073.194566][T30307] veth0_to_team: left allmulticast mode [ 1073.256855][T30307] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1073.264314][T30307] bond2: left allmulticast mode [ 1073.271663][T30307] bridge1: left allmulticast mode [ 1073.283003][T30307] bridge2: left allmulticast mode [ 1073.354734][T30307] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1073.373598][T30307] bond5: left allmulticast mode [ 1073.390189][T30307] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1074.091221][ T5641] block nbd5: Receive control failed (result -32) [ 1074.131851][T30332] can: request_module (can-proto-4) failed. [ 1074.730268][T30355] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1074.774924][ T7425] net_ratelimit: 15 callbacks suppressed [ 1074.774947][ T7425] bond2: (slave bridge1): failed to get link speed/duplex [ 1074.815474][ T6128] bridge0: entered promiscuous mode [ 1074.915324][T12060] bond2: (slave bridge1): failed to get link speed/duplex [ 1075.035685][T12068] bond2: (slave bridge1): failed to get link speed/duplex [ 1075.149520][T30374] netlink: 'syz.2.6435': attribute type 21 has an invalid length. [ 1075.416820][T12060] bond2: (slave bridge1): failed to get link speed/duplex [ 1075.544982][T12060] bond2: (slave bridge1): failed to get link speed/duplex [ 1075.675358][T12047] bond2: (slave bridge1): failed to get link speed/duplex [ 1075.697924][T30390] __nla_validate_parse: 16 callbacks suppressed [ 1075.697945][T30390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6443'. [ 1075.726452][T30389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6444'. [ 1075.816556][T12047] bond2: (slave bridge1): failed to get link speed/duplex [ 1075.847523][T30395] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6446'. [ 1075.856761][T30395] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6446'. [ 1075.865728][T30395] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6446'. [ 1076.035588][T12068] bond2: (slave bridge1): failed to get link speed/duplex [ 1076.276077][T30410] netlink: 'syz.5.6449': attribute type 8 has an invalid length. [ 1076.301909][T30414] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 1076.396290][T12060] bond2: (slave bridge1): failed to get link speed/duplex [ 1076.424451][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1076.434793][T30419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6451'. [ 1076.447467][T30419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6451'. [ 1076.456976][T30419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6451'. [ 1076.614101][T12047] bond2: (slave bridge1): failed to get link speed/duplex [ 1076.692173][T30432] netlink: 'syz.4.6455': attribute type 4 has an invalid length. [ 1076.814845][T30436] netlink: 'syz.4.6455': attribute type 4 has an invalid length. [ 1077.133427][T30439] siw: device registration error -23 [ 1077.178543][T30443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.188884][T30443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.344220][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1078.373385][T30462] syzkaller0: entered promiscuous mode [ 1078.379735][T30462] syzkaller0: entered allmulticast mode [ 1079.880274][T30366] net_ratelimit: 5 callbacks suppressed [ 1079.880297][T30366] Set syz1 is full, maxelem 65536 reached [ 1083.028649][ T1057] bond2: (slave bridge1): failed to get link speed/duplex [ 1083.348943][T30526] macsec0: entered promiscuous mode [ 1083.362371][T30529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6472'. [ 1083.516204][T30532] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6475'. [ 1083.578196][T30536] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6475'. [ 1083.594327][T12047] bond2: (slave bridge1): failed to get link speed/duplex [ 1083.619852][T30529] macsec0 (unregistering): left promiscuous mode [ 1083.857536][T30543] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6477'. [ 1083.914181][T12072] bond2: (slave bridge1): failed to get link speed/duplex [ 1083.944253][T30555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6476'. [ 1084.091712][ T1057] bond2: (slave bridge1): failed to get link speed/duplex [ 1084.162348][T30563] netlink: 'syz.2.6479': attribute type 13 has an invalid length. [ 1084.358834][T30571] FAULT_INJECTION: forcing a failure. [ 1084.358834][T30571] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.396402][T30571] CPU: 1 UID: 0 PID: 30571 Comm: syz.1.6481 Not tainted syzkaller #0 PREEMPT(full) [ 1084.396432][T30571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1084.396444][T30571] Call Trace: [ 1084.396453][T30571] [ 1084.396462][T30571] dump_stack_lvl+0xe8/0x150 [ 1084.396505][T30571] should_fail_ex+0x40c/0x560 [ 1084.396543][T30571] should_failslab+0xa8/0x100 [ 1084.396575][T30571] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1084.396600][T30571] ? local_lock_release+0x9c/0x160 [ 1084.396627][T30571] ? __alloc_skb+0x1d7/0x7a0 [ 1084.396647][T30571] ? __alloc_skb+0x1d7/0x7a0 [ 1084.396676][T30571] __alloc_skb+0x1d7/0x7a0 [ 1084.396701][T30571] alloc_skb_with_frags+0xc6/0x760 [ 1084.396789][T30571] ? skb_set_owner_w+0x263/0x3d0 [ 1084.396819][T30571] sock_alloc_send_pskb+0x878/0x990 [ 1084.396863][T30571] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1084.396889][T30571] ? lockdep_hardirqs_on+0x7a/0x110 [ 1084.396921][T30571] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1084.396981][T30571] ? bt_sock_wait_ready+0x4f8/0x600 [ 1084.397059][T30571] ? skb_put+0x112/0x210 [ 1084.397083][T30571] bt_skb_sendmsg+0xd8/0x5d0 [ 1084.397137][T30571] ? release_sock+0x2f/0x260 [ 1084.397162][T30571] ? __pfx_bt_skb_sendmsg+0x10/0x10 [ 1084.397183][T30571] ? rfcomm_sock_sendmsg+0x162/0x450 [ 1084.397205][T30571] ? rfcomm_sock_sendmsg+0x162/0x450 [ 1084.397226][T30571] ? __local_bh_enable_ip+0xd0/0x130 [ 1084.397288][T30571] rfcomm_sock_sendmsg+0x28c/0x450 [ 1084.397316][T30571] ? __pfx_rfcomm_sock_sendmsg+0x10/0x10 [ 1084.397337][T30571] sock_sendmsg_nosec+0x13a/0x180 [ 1084.397369][T30571] sock_sendmsg+0x1ca/0x2d0 [ 1084.397403][T30571] ? __pfx_sock_sendmsg+0x10/0x10 [ 1084.397445][T30571] ? __asan_memset+0x22/0x50 [ 1084.397469][T30571] ? iov_iter_bvec+0xb8/0x180 [ 1084.397493][T30571] splice_to_socket+0xb5e/0x12a0 [ 1084.397587][T30571] ? __pfx_splice_to_socket+0x10/0x10 [ 1084.397638][T30571] ? shmem_file_splice_read+0xa2b/0xb90 [ 1084.397683][T30571] ? __pfx_splice_to_socket+0x10/0x10 [ 1084.397710][T30571] direct_splice_actor+0x101/0x160 [ 1084.397742][T30571] splice_direct_to_actor+0x57b/0xcb0 [ 1084.397790][T30571] ? __pfx_direct_splice_actor+0x10/0x10 [ 1084.397816][T30571] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1084.397852][T30571] do_splice_direct+0x195/0x290 [ 1084.397882][T30571] ? __pfx_do_splice_direct+0x10/0x10 [ 1084.397921][T30571] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1084.397952][T30571] ? bpf_lsm_file_permission+0x9/0x20 [ 1084.397998][T30571] ? security_file_permission+0x75/0x260 [ 1084.398048][T30571] ? rw_verify_area+0x203/0x4c0 [ 1084.398080][T30571] do_sendfile+0x52e/0x7c0 [ 1084.398135][T30571] ? __pfx_do_sendfile+0x10/0x10 [ 1084.398157][T30571] ? __fget_files+0x3a2/0x420 [ 1084.398194][T30571] __se_sys_sendfile64+0x144/0x1a0 [ 1084.398221][T30571] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1084.398254][T30571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.398277][T30571] do_syscall_64+0x174/0x580 [ 1084.398299][T30571] ? trace_irq_disable+0x3b/0x140 [ 1084.398324][T30571] ? clear_bhb_loop+0x40/0x90 [ 1084.398351][T30571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.398372][T30571] RIP: 0033:0x7fa4ca59de59 [ 1084.398392][T30571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.398408][T30571] RSP: 002b:00007fa4cb47c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1084.398430][T30571] RAX: ffffffffffffffda RBX: 00007fa4ca826090 RCX: 00007fa4ca59de59 [ 1084.398444][T30571] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1084.398457][T30571] RBP: 00007fa4cb47c090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.398469][T30571] R10: 0000000004010000 R11: 0000000000000246 R12: 0000000000000002 [ 1084.398482][T30571] R13: 00007fa4ca826128 R14: 00007fa4ca826090 R15: 00007ffc70e994c8 [ 1084.398515][T30571] [ 1084.651516][T30579] netlink: 16170 bytes leftover after parsing attributes in process `syz.0.6484'. [ 1084.799042][T12047] bond2: (slave bridge1): failed to get link speed/duplex [ 1085.044180][T12060] bond2: (slave bridge1): failed to get link speed/duplex [ 1085.164175][T12068] bond2: (slave bridge1): failed to get link speed/duplex [ 1085.284610][T12047] bond2: (slave bridge1): failed to get link speed/duplex [ 1085.434073][T12047] bond2: (slave bridge1): failed to get link speed/duplex [ 1085.540841][T30613] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6492'. [ 1085.721585][T30613] ip6gre0: Master is either lo or non-ether device [ 1085.815207][T12072] bond2: (slave bridge1): failed to get link speed/duplex [ 1085.845145][T30628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6494'. [ 1085.889500][T30629] team0: Port device dummy0 removed [ 1085.981307][T30631] bond6: entered promiscuous mode [ 1086.212096][T30629] bridge0: port 1(syz_tun) entered disabled state [ 1086.242374][T30629] syz_tun: left allmulticast mode [ 1086.259149][T30629] syz_tun: left promiscuous mode [ 1086.280627][T30629] bridge0: port 1(syz_tun) entered disabled state [ 1086.320576][T30629] team0: Port device bond0 removed [ 1086.782900][T30629] bond2: (slave bridge1): Removing an active aggregator [ 1086.800065][T30629] bond2: (slave bridge1): Releasing backup interface [ 1086.813345][T30629] bond2: (slave bridge1): the permanent HWaddr of slave - 8a:49:ec:6c:95:ee - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1086.880060][T30629] bridge1: left promiscuous mode [ 1086.910429][T30629] bond2: (slave bridge2): Releasing backup interface [ 1086.949270][T30629] bridge2: left promiscuous mode [ 1086.980521][T30629] bond4: left allmulticast mode [ 1087.004328][T30629] bond4: left promiscuous mode [ 1087.009576][T30629] bridge0: port 2(bond4) entered disabled state [ 1087.130700][T12060] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.197523][T30628] bond6: left promiscuous mode [ 1087.217526][T12060] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.244250][T12060] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.274957][T12060] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.391441][ T6108] page_pool_release_retry() stalled pool shutdown: id 110, 1 inflight 606 sec [ 1087.568727][ T30] audit: type=1800 audit(1783076332.384:23): pid=30684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6506" name="memory.events" dev="tmpfs" ino=689 res=0 errno=0 [ 1087.743487][T30695] bridge0: port 3(syz_tun) entered blocking state [ 1087.781313][T30695] bridge0: port 3(syz_tun) entered disabled state [ 1087.803000][T30695] syz_tun: entered allmulticast mode [ 1087.811125][T30695] syz_tun: entered promiscuous mode [ 1088.302718][T30725] netlink: 'syz.5.6513': attribute type 32 has an invalid length. [ 1088.357099][T30724] netlink: 'syz.5.6513': attribute type 32 has an invalid length. [ 1088.931205][T30735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1089.755147][T30765] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6523'. [ 1089.840024][T30768] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6525'. [ 1090.290317][T30784] netlink: 'syz.4.6530': attribute type 1 has an invalid length. [ 1090.298819][T30784] netlink: 248 bytes leftover after parsing attributes in process `syz.4.6530'. [ 1090.424442][T30786] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6531'. [ 1090.553466][T30790] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1091.053139][T30807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6535'. [ 1091.089912][T30807] netlink: 'syz.1.6535': attribute type 1 has an invalid length. [ 1091.250746][T30807] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1091.400683][T30811] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1091.407847][T30811] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 1091.418901][T30811] bond2: (slave gre1): Error -95 calling set_mac_address [ 1091.537265][T30814] gretap2: entered promiscuous mode [ 1091.565928][T30814] bond2: (slave gretap2): making interface the new active one [ 1091.632444][T30829] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6536'. [ 1091.656819][T30814] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 1091.932690][T30836] macsec2: entered promiscuous mode [ 1091.937978][T30836] bridge0: entered promiscuous mode [ 1092.063171][T30840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6540'. [ 1092.403863][T30822] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 1092.552428][T30692] Set syz1 is full, maxelem 65536 reached [ 1092.562216][T30512] udevd[30512]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1093.011144][T30874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6548'. [ 1093.020552][T30874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6548'. [ 1093.120147][T30878] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1093.196439][T30887] netlink: 192 bytes leftover after parsing attributes in process `syz.1.6548'. [ 1093.373606][T30894] netlink: 'syz.2.6555': attribute type 1 has an invalid length. [ 1093.440402][T30894] bond1: entered promiscuous mode [ 1093.464823][T30894] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1093.692001][T30906] bond1: entered allmulticast mode [ 1093.713033][T30909] bridge0: entered allmulticast mode [ 1093.767220][T30894] bond1: (slave bridge1): making interface the new active one [ 1093.775390][T30894] bridge1: entered promiscuous mode [ 1093.780887][T30894] bridge1: entered allmulticast mode [ 1093.788693][T30892] xt_hashlimit: size too large, truncated to 1048576 [ 1093.795521][T30894] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1093.820171][T30909] syz_tun: left allmulticast mode [ 1093.825909][T30892] xt_hashlimit: max too large, truncated to 1048576 [ 1093.892260][T30909] syz_tun: left promiscuous mode [ 1093.897773][T30909] bridge0: port 3(syz_tun) entered disabled state [ 1094.025273][T30909] bridge_slave_1: left allmulticast mode [ 1094.030982][T30909] bridge_slave_1: left promiscuous mode [ 1094.036856][T30909] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.112550][T30909] bridge_slave_0: left allmulticast mode [ 1094.118262][T30909] bridge_slave_0: left promiscuous mode [ 1094.124144][T30909] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.241890][T30920] ipip0: entered promiscuous mode [ 1094.523856][T30933] xt_time: unknown flags 0xf4 [ 1094.586458][T30936] syzkaller0: entered promiscuous mode [ 1094.592172][T30936] syzkaller0: entered allmulticast mode [ 1095.064512][T30954] __nla_validate_parse: 3 callbacks suppressed [ 1095.064527][T30954] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6569'. [ 1095.155000][T30958] netlink: 112 bytes leftover after parsing attributes in process `syz.5.6570'. [ 1095.179934][T30958] vlan4: entered allmulticast mode [ 1095.185475][T30958] bond0: entered allmulticast mode [ 1095.193119][T30958] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6570'. [ 1095.376269][T30966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6572'. [ 1096.070145][T30958] bond0 (unregistering): Released all slaves [ 1096.172137][T30966] hsr_slave_0: left promiscuous mode [ 1096.186412][T30966] hsr_slave_1: left promiscuous mode [ 1096.338757][T30992] tipc: Enabling of bearer rejected, failed to enable media [ 1096.367182][T30992] tipc: Enabling of bearer rejected, failed to enable media [ 1096.487812][T30989] lo speed is unknown, defaulting to 1000 [ 1096.523280][T30989] lo speed is unknown, defaulting to 1000 [ 1096.610141][T30989] wlan0 speed is unknown, defaulting to 1000 [ 1096.708561][T31001] x_tables: duplicate underflow at hook 1 [ 1096.717675][T31001] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 40 [ 1096.903966][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1096.910427][T31005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.141187][T31020] lo speed is unknown, defaulting to 1000 [ 1097.149901][T31020] lo speed is unknown, defaulting to 1000 [ 1097.158104][T31020] wlan0 speed is unknown, defaulting to 1000 [ 1097.258105][T31020] tc_dump_action: action bad kind [ 1097.520466][T31032] sctp: [Deprecated]: syz.1.6591 (pid 31032) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1097.520466][T31032] Use struct sctp_sack_info instead [ 1098.056854][T31065] netlink: 'syz.0.6601': attribute type 1 has an invalid length. [ 1098.121791][T31068] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6602'. [ 1098.222008][T31071] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6603'. [ 1098.229773][T31062] bond7: (slave bridge6): Enslaving as a backup interface with an up link [ 1098.265657][T31065] bond7: (slave bridge7): Enslaving as a backup interface with a down link [ 1098.397486][T31078] atomic_op ffff888051759198 conn xmit_atomic 0000000000000000 [ 1098.478431][T31078] xfrm1: entered allmulticast mode [ 1098.508488][T31086] netlink: 19 bytes leftover after parsing attributes in process `syz.0.6607'. [ 1098.519249][T31086] netlink: 19 bytes leftover after parsing attributes in process `syz.0.6607'. [ 1098.784296][T31105] sctp: [Deprecated]: syz.4.6612 (pid 31105) Use of int in max_burst socket option deprecated. [ 1098.784296][T31105] Use struct sctp_assoc_value instead [ 1098.955492][T31108] batman_adv: batadv0: Adding interface: vlan2 [ 1098.961703][T31108] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.986957][T31108] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 1099.040530][T31116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1099.047908][T31116] IPv6: NLM_F_CREATE should be set when creating new route [ 1099.055245][T31116] IPv6: NLM_F_CREATE should be set when creating new route [ 1099.103970][T31118] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1099.321232][T31132] netlink: 'syz.1.6619': attribute type 58 has an invalid length. [ 1099.334121][T31132] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6619'. [ 1099.716130][T31151] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6625'. [ 1099.902171][T31162] netlink: 'syz.5.6627': attribute type 1 has an invalid length. [ 1100.012726][T31162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1100.069072][T31173] bond0: (slave ip6gretap2): making interface the new active one [ 1100.078309][T31173] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1100.146037][T31176] Cannot find set identified by id 0 to match [ 1100.189447][T31176] __nla_validate_parse: 1 callbacks suppressed [ 1100.189467][T31176] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6633'. [ 1100.204979][T31176] tc_dump_action: action bad kind [ 1100.221277][T31182] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6635'. [ 1100.231257][T31182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6635'. [ 1100.357877][T31185] tipc: Failed to remove unknown binding: 66,0,0/0:3129399813/3129399815 [ 1100.396449][T31185] tipc: Failed to remove unknown binding: 66,0,0/0:3129399813/3129399814 [ 1100.419144][T31191] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6637'. [ 1100.573471][T31205] tipc: Failed to remove unknown binding: 66,0,0/0:3129399813/3129399815 [ 1100.585783][T31205] tipc: Failed to remove unknown binding: 66,0,0/0:3129399813/3129399814 [ 1100.649963][T31202] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1100.890902][T31213] ipip2: entered promiscuous mode [ 1101.200545][T31220] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6643'. [ 1101.399746][T31238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1101.650259][T31245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1101.689312][T31245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1101.733561][T31246] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6647'. [ 1101.875889][T31254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6650'. [ 1102.409437][T31272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6655'. [ 1102.440569][T31272] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1102.449984][T31272] bond3: entered promiscuous mode [ 1102.455203][T31272] dummy0: entered promiscuous mode [ 1102.771551][T31277] vxcan6: entered allmulticast mode [ 1103.234223][T31271] bond3: left promiscuous mode [ 1103.239228][T31271] dummy0: left promiscuous mode [ 1104.112568][T31288] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6660'. [ 1104.123548][T31289] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6660'. [ 1104.135943][T31288] IPVS: set_ctl: invalid protocol: 59 100.1.1.5:20002 [ 1104.328721][T31236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1107.990583][ T5641] Bluetooth: hci5: command 0x0406 tx timeout [ 1108.190258][T31327] netlink: 'syz.2.6670': attribute type 33 has an invalid length. [ 1108.282841][T31327] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1108.302656][T31327] bond2 (unregistering): Released all slaves [ 1108.573543][T31335] netlink: 'syz.5.6671': attribute type 13 has an invalid length. [ 1108.594442][T31336] netlink: 'syz.5.6671': attribute type 13 has an invalid length. [ 1108.602492][T31335] netlink: 'syz.5.6671': attribute type 17 has an invalid length. [ 1108.611272][T31336] netlink: 'syz.5.6671': attribute type 17 has an invalid length. [ 1108.616817][T31342] tipc: Started in network mode [ 1108.624116][T31342] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 1108.674901][T31342] tipc: Enabling of bearer rejected, failed to enable media [ 1108.837687][T31353] __nla_validate_parse: 1 callbacks suppressed [ 1108.837711][T31353] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6675'. [ 1108.904079][T31335] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1108.946767][T31336] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1109.176004][T31352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6677'. [ 1109.199998][T31352] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6677'. [ 1109.497036][T31372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6681'. [ 1109.876478][T31388] netlink: 'syz.0.6685': attribute type 39 has an invalid length. [ 1110.075621][T31394] syzkaller0: entered promiscuous mode [ 1110.081178][T31394] syzkaller0: entered allmulticast mode [ 1111.077928][T31442] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6701'. [ 1111.087447][T31442] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6701'. [ 1111.099815][T31442] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6701'. [ 1111.162786][T31442] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6701'. [ 1111.637996][T31472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.646468][T31472] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.666704][T31479] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6711'. [ 1111.814368][T31472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1111.882171][T31472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1111.895641][T31472] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1111.935584][T31497] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8 [ 1111.950076][T31472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1111.980058][T31472] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1112.102570][T31508] netlink: 'syz.1.6715': attribute type 21 has an invalid length. [ 1112.110721][T31508] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6715'. [ 1112.147493][T12072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.154732][T12072] bridge0: port 1(bridge_slave_0) entered listening state [ 1112.174145][T12072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.181446][T12072] bridge0: port 2(bridge_slave_1) entered listening state [ 1112.216721][T31508] netlink: 'syz.1.6715': attribute type 5 has an invalid length. [ 1112.518566][T31520] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1112.869000][T31542] bond9: option packets_per_slave: invalid value (1048582) [ 1112.876273][T31542] bond9: option packets_per_slave: allowed values 0 - 65535 [ 1112.889353][T31542] bond9 (unregistering): Released all slaves [ 1112.941232][T31539] lo speed is unknown, defaulting to 1000 [ 1112.949061][T31539] lo speed is unknown, defaulting to 1000 [ 1112.956737][T31539] wlan0 speed is unknown, defaulting to 1000 [ 1113.140112][T31552] x_tables: duplicate underflow at hook 1 [ 1114.554292][T31596] lo: Caught tx_queue_len zero misconfig [ 1114.841469][T31611] __nla_validate_parse: 3 callbacks suppressed [ 1114.841490][T31611] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6742'. [ 1114.921077][T31612] FAULT_INJECTION: forcing a failure. [ 1114.921077][T31612] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.947707][T31615] netlink: 'syz.4.6740': attribute type 12 has an invalid length. [ 1114.959749][T31612] CPU: 0 UID: 0 PID: 31612 Comm: syz.5.6738 Not tainted syzkaller #0 PREEMPT(full) [ 1114.959779][T31612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1114.959792][T31612] Call Trace: [ 1114.959801][T31612] [ 1114.959810][T31612] dump_stack_lvl+0xe8/0x150 [ 1114.959847][T31612] should_fail_ex+0x40c/0x560 [ 1114.959885][T31612] should_failslab+0xa8/0x100 [ 1114.959918][T31612] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1114.959942][T31612] ? local_lock_release+0x9c/0x160 [ 1114.959965][T31612] ? __alloc_skb+0x1d7/0x7a0 [ 1114.959985][T31612] ? __alloc_skb+0x1d7/0x7a0 [ 1114.960014][T31612] __alloc_skb+0x1d7/0x7a0 [ 1114.960041][T31612] alloc_skb_with_frags+0xc6/0x760 [ 1114.960073][T31612] ? skb_set_owner_w+0x263/0x3d0 [ 1114.960102][T31612] sock_alloc_send_pskb+0x878/0x990 [ 1114.960159][T31612] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1114.960186][T31612] ? lockdep_hardirqs_on+0x7a/0x110 [ 1114.960207][T31612] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1114.960236][T31612] ? bt_sock_wait_ready+0x4f8/0x600 [ 1114.960268][T31612] ? skb_put+0x112/0x210 [ 1114.960293][T31612] bt_skb_sendmsg+0xd8/0x5d0 [ 1114.960314][T31612] ? release_sock+0x2f/0x260 [ 1114.960338][T31612] ? __pfx_bt_skb_sendmsg+0x10/0x10 [ 1114.960359][T31612] ? rfcomm_sock_sendmsg+0x162/0x450 [ 1114.960381][T31612] ? rfcomm_sock_sendmsg+0x162/0x450 [ 1114.960401][T31612] ? __local_bh_enable_ip+0xd0/0x130 [ 1114.960429][T31612] rfcomm_sock_sendmsg+0x28c/0x450 [ 1114.960455][T31612] ? __pfx_rfcomm_sock_sendmsg+0x10/0x10 [ 1114.960476][T31612] sock_sendmsg_nosec+0x13a/0x180 [ 1114.960504][T31612] sock_sendmsg+0x1ca/0x2d0 [ 1114.960538][T31612] ? __pfx_sock_sendmsg+0x10/0x10 [ 1114.960578][T31612] ? __asan_memset+0x22/0x50 [ 1114.960601][T31612] ? iov_iter_bvec+0xb8/0x180 [ 1114.960626][T31612] splice_to_socket+0xb5e/0x12a0 [ 1114.960675][T31612] ? __pfx_splice_to_socket+0x10/0x10 [ 1114.960730][T31612] ? shmem_file_splice_read+0xa2b/0xb90 [ 1114.960775][T31612] ? __pfx_splice_to_socket+0x10/0x10 [ 1114.960803][T31612] direct_splice_actor+0x101/0x160 [ 1114.960836][T31612] splice_direct_to_actor+0x57b/0xcb0 [ 1114.960886][T31612] ? __pfx_direct_splice_actor+0x10/0x10 [ 1114.960915][T31612] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1114.960955][T31612] do_splice_direct+0x195/0x290 [ 1114.960986][T31612] ? __pfx_do_splice_direct+0x10/0x10 [ 1114.961013][T31612] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1114.961045][T31612] ? bpf_lsm_file_permission+0x9/0x20 [ 1114.961067][T31612] ? security_file_permission+0x75/0x260 [ 1114.961093][T31612] ? rw_verify_area+0x203/0x4c0 [ 1114.961124][T31612] do_sendfile+0x52e/0x7c0 [ 1114.961163][T31612] ? __pfx_do_sendfile+0x10/0x10 [ 1114.961187][T31612] ? __fget_files+0x3a2/0x420 [ 1114.961221][T31612] __se_sys_sendfile64+0x144/0x1a0 [ 1114.961245][T31612] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1114.961276][T31612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.961298][T31612] do_syscall_64+0x174/0x580 [ 1114.961319][T31612] ? trace_irq_disable+0x3b/0x140 [ 1114.961344][T31612] ? clear_bhb_loop+0x40/0x90 [ 1114.961371][T31612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.961392][T31612] RIP: 0033:0x7f9bce39de59 [ 1114.961413][T31612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.961431][T31612] RSP: 002b:00007f9bcf2c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1114.961456][T31612] RAX: ffffffffffffffda RBX: 00007f9bce626090 RCX: 00007f9bce39de59 [ 1114.961471][T31612] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1114.961483][T31612] RBP: 00007f9bcf2c5090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.961496][T31612] R10: 0000000004010000 R11: 0000000000000246 R12: 0000000000000002 [ 1114.961509][T31612] R13: 00007f9bce626128 R14: 00007f9bce626090 R15: 00007ffe8dde5ed8 [ 1114.961543][T31612] [ 1114.991837][T31616] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6741'. [ 1115.473080][T31624] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:0 [ 1115.498073][T31625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6744'. [ 1115.744314][T31634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6745'. [ 1116.107751][ T1318] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1116.591746][T31666] netlink: 'syz.2.6754': attribute type 9 has an invalid length. [ 1116.992682][T31679] bond17: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 1117.002181][T31679] bond17: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 1117.013539][T31679] bond17: entered allmulticast mode [ 1117.019262][T31679] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1117.073373][T31685] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8 [ 1117.239857][T31683] netlink: 'syz.2.6759': attribute type 9 has an invalid length. [ 1117.644386][T31695] tipc: Enabled bearer , priority 0 [ 1117.866753][T31710] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6765'. [ 1117.912428][T31697] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1117.932463][T31697] syzkaller0: entered promiscuous mode [ 1117.937998][T31697] syzkaller0: entered allmulticast mode [ 1118.012617][T31697] tipc: Resetting bearer [ 1118.019406][T31708] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1118.108910][T12072] tipc: Resetting bearer [ 1118.184583][T31710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6765'. [ 1118.228489][T31698] tipc: Resetting bearer [ 1118.250461][T31698] tipc: Disabling bearer [ 1118.386098][T31730] tipc: Enabled bearer , priority 0 [ 1118.393635][T31730] syzkaller0: entered promiscuous mode [ 1118.421965][T31730] syzkaller0: entered allmulticast mode [ 1118.450850][T31730] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1118.466582][T31733] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8 [ 1118.527395][T31730] tipc: Resetting bearer [ 1118.551127][T31729] tipc: Resetting bearer [ 1118.570298][T31737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6772'. [ 1118.730736][T31729] tipc: Disabling bearer [ 1118.829758][T31747] FAULT_INJECTION: forcing a failure. [ 1118.829758][T31747] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.904160][T31740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6773'. [ 1118.913176][T31740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6773'. [ 1118.922685][T31747] CPU: 0 UID: 0 PID: 31747 Comm: syz.0.6775 Not tainted syzkaller #0 PREEMPT(full) [ 1118.922714][T31747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1118.922727][T31747] Call Trace: [ 1118.922736][T31747] [ 1118.922745][T31747] dump_stack_lvl+0xe8/0x150 [ 1118.922784][T31747] should_fail_ex+0x40c/0x560 [ 1118.922822][T31747] should_failslab+0xa8/0x100 [ 1118.922855][T31747] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1118.922879][T31747] ? local_lock_release+0x9c/0x160 [ 1118.922905][T31747] ? __alloc_skb+0x1d7/0x7a0 [ 1118.922924][T31747] ? __alloc_skb+0x1d7/0x7a0 [ 1118.922954][T31747] __alloc_skb+0x1d7/0x7a0 [ 1118.922991][T31747] alloc_skb_with_frags+0xc6/0x760 [ 1118.923023][T31747] ? skb_set_owner_w+0x263/0x3d0 [ 1118.923051][T31747] sock_alloc_send_pskb+0x878/0x990 [ 1118.923096][T31747] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1118.923122][T31747] ? lockdep_hardirqs_on+0x7a/0x110 [ 1118.923144][T31747] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1118.923174][T31747] ? bt_sock_wait_ready+0x4f8/0x600 [ 1118.923206][T31747] ? skb_put+0x112/0x210 [ 1118.923232][T31747] bt_skb_sendmsg+0xd8/0x5d0 [ 1118.923253][T31747] ? release_sock+0x2f/0x260 [ 1118.923279][T31747] ? __pfx_bt_skb_sendmsg+0x10/0x10 [ 1118.923301][T31747] ? rfcomm_sock_sendmsg+0x162/0x450 [ 1118.923323][T31747] ? rfcomm_sock_sendmsg+0x162/0x450 [ 1118.923345][T31747] ? __local_bh_enable_ip+0xd0/0x130 [ 1118.923373][T31747] rfcomm_sock_sendmsg+0x28c/0x450 [ 1118.923399][T31747] ? __pfx_rfcomm_sock_sendmsg+0x10/0x10 [ 1118.923419][T31747] sock_sendmsg_nosec+0x13a/0x180 [ 1118.923452][T31747] sock_sendmsg+0x1ca/0x2d0 [ 1118.923488][T31747] ? __pfx_sock_sendmsg+0x10/0x10 [ 1118.923531][T31747] ? __asan_memset+0x22/0x50 [ 1118.923555][T31747] ? iov_iter_bvec+0xb8/0x180 [ 1118.923582][T31747] splice_to_socket+0xb5e/0x12a0 [ 1118.923631][T31747] ? __pfx_splice_to_socket+0x10/0x10 [ 1118.923685][T31747] ? shmem_file_splice_read+0xa2b/0xb90 [ 1118.923729][T31747] ? __pfx_splice_to_socket+0x10/0x10 [ 1118.923757][T31747] direct_splice_actor+0x101/0x160 [ 1118.923789][T31747] splice_direct_to_actor+0x57b/0xcb0 [ 1118.923833][T31747] ? __pfx_direct_splice_actor+0x10/0x10 [ 1118.923858][T31747] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1118.923900][T31747] do_splice_direct+0x195/0x290 [ 1118.923929][T31747] ? __pfx_do_splice_direct+0x10/0x10 [ 1118.923957][T31747] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1118.923998][T31747] ? bpf_lsm_file_permission+0x9/0x20 [ 1118.924020][T31747] ? security_file_permission+0x75/0x260 [ 1118.924045][T31747] ? rw_verify_area+0x203/0x4c0 [ 1118.924079][T31747] do_sendfile+0x52e/0x7c0 [ 1118.924114][T31747] ? __pfx_do_sendfile+0x10/0x10 [ 1118.924137][T31747] ? __fget_files+0x3a2/0x420 [ 1118.924174][T31747] __se_sys_sendfile64+0x144/0x1a0 [ 1118.924200][T31747] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1118.924232][T31747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.924255][T31747] do_syscall_64+0x174/0x580 [ 1118.924276][T31747] ? trace_irq_disable+0x3b/0x140 [ 1118.924300][T31747] ? clear_bhb_loop+0x40/0x90 [ 1118.924326][T31747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.924347][T31747] RIP: 0033:0x7fb820f9de59 [ 1118.924367][T31747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1118.924384][T31747] RSP: 002b:00007fb821df2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1118.924408][T31747] RAX: ffffffffffffffda RBX: 00007fb821226090 RCX: 00007fb820f9de59 [ 1118.924423][T31747] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1118.924435][T31747] RBP: 00007fb821df2090 R08: 0000000000000000 R09: 0000000000000000 [ 1118.924448][T31747] R10: 0000000004010000 R11: 0000000000000246 R12: 0000000000000002 [ 1118.924461][T31747] R13: 00007fb821226128 R14: 00007fb821226090 R15: 00007fff7479f0a8 [ 1118.924496][T31747] [ 1119.825191][ T5641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1119.843549][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1119.856747][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1119.866072][ T5641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1119.883490][ T5641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1120.003832][T31770] SET target dimension over the limit! [ 1120.265881][T31780] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8 [ 1120.432044][T31786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6786'. [ 1120.706888][T31752] lo speed is unknown, defaulting to 1000 [ 1120.714718][T31752] lo speed is unknown, defaulting to 1000 [ 1120.722327][T31752] wlan0 speed is unknown, defaulting to 1000 [ 1121.123843][T31815] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6793'. [ 1121.170784][T31752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.178128][T31752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.207270][T31752] bridge_slave_0: entered allmulticast mode [ 1121.215379][T31752] bridge_slave_0: entered promiscuous mode [ 1121.224533][T31752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.232209][T31752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.239436][T31752] bridge_slave_1: entered allmulticast mode [ 1121.247604][T31752] bridge_slave_1: entered promiscuous mode [ 1121.292083][T31752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.323374][T31752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1121.556683][T31825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6795'. [ 1121.572917][T31825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6795'. [ 1121.606021][T31821] netlink: 'syz.2.6794': attribute type 8 has an invalid length. [ 1121.617281][T31752] team0: Port device team_slave_0 added [ 1121.626661][T31752] team0: Port device team_slave_1 added [ 1121.754402][T31752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1121.786756][T31752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.812703][T31752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1121.825954][T31752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1121.832941][T31752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.858851][T31752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1121.944148][ T5637] Bluetooth: hci2: command tx timeout [ 1122.123025][T31833] netlink: 420 bytes leftover after parsing attributes in process `syz.0.6797'. [ 1122.145621][T31833] netlink: 420 bytes leftover after parsing attributes in process `syz.0.6797'. [ 1122.362846][T31752] hsr_slave_0: entered promiscuous mode [ 1122.375233][T31752] hsr_slave_1: entered promiscuous mode [ 1122.383353][T31752] debugfs: 'hsr0' already exists in 'hsr' [ 1122.398145][T31752] Cannot create hsr debugfs directory [ 1122.458207][T31850] sctp: [Deprecated]: syz.2.6800 (pid 31850) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1122.458207][T31850] Use struct sctp_sack_info instead [ 1122.491804][T31830] syzkaller1: entered promiscuous mode [ 1122.504651][T31830] syzkaller1: entered allmulticast mode [ 1122.941210][T31752] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1122.952149][T31752] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.005796][T31860] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6804'. [ 1123.032608][T31752] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1123.360383][T31871] bond10: ARP target 9.0.0.0 is already present [ 1123.366993][T31871] bond10: option arp_ip_target: invalid value (9) [ 1123.395327][T31871] bond10 (unregistering): Released all slaves [ 1123.577604][T31752] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1123.588042][T31752] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.613834][T31752] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1123.641229][T31882] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1123.684510][T31880] netlink: 'syz.4.6810': attribute type 1 has an invalid length. [ 1123.709717][T31882] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6811'. [ 1124.024081][ T5637] Bluetooth: hci2: command tx timeout [ 1124.329758][T31752] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1124.360822][T31752] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.405920][T31752] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1124.566535][T31906] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6818'. [ 1124.605419][T31905] macvtap1: entered promiscuous mode [ 1124.610774][T31905] vlan0: entered promiscuous mode [ 1124.637193][T31905] vlan0: left promiscuous mode [ 1124.637680][T31907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1124.745983][T31907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1124.832601][T31907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1124.863218][T31752] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1124.874534][T31752] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.886066][T31752] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1124.975712][T31917] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1125.002483][T31917] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1125.196397][T31920] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1126.104419][ T5637] Bluetooth: hci2: command tx timeout [ 1128.183852][ T5637] Bluetooth: hci2: command tx timeout [ 1129.259276][T31940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6825'. [ 1129.810735][T31752] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1129.823673][T31948] netlink: 'syz.4.6827': attribute type 30 has an invalid length. [ 1129.864546][T31948] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6827'. [ 1129.885785][T31752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1129.920749][T31948] bond1: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 1130.001853][T31948] bond1 (unregistering): Released all slaves [ 1130.070055][T31752] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1130.089881][T31752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1130.098325][T31752] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1130.135564][T31752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1130.146393][T31752] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1130.151993][T31952] netlink: 'syz.1.6828': attribute type 3 has an invalid length. [ 1130.181213][T31752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1130.383307][T31752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1130.407731][T31752] 8021q: adding VLAN 0 to HW filter on device team0 [ 1130.423316][T12093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.430509][T12093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1130.550596][T12072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.557913][T12072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1130.797782][T31974] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6832'. [ 1130.838539][T31974] netlink: 'syz.4.6832': attribute type 10 has an invalid length. [ 1130.865130][T31974] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1130.884808][T31974] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1131.208803][T31988] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1131.921801][T32007] syzkaller1: entered promiscuous mode [ 1131.952598][T32007] syzkaller1: entered allmulticast mode [ 1132.059140][T31752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1132.590935][T32015] xt_cgroup: invalid path, errno=-2 [ 1132.592002][T32014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6839'. [ 1132.904715][T32023] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8 [ 1133.107836][T31752] veth0_vlan: entered promiscuous mode [ 1133.142646][T31752] veth1_vlan: entered promiscuous mode [ 1133.187024][T32033] netlink: 'syz.0.6844': attribute type 1 has an invalid length. [ 1133.275137][T31752] veth0_macvtap: entered promiscuous mode [ 1133.364460][T31752] veth1_macvtap: entered promiscuous mode [ 1133.451650][T31752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1133.483694][T31752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1133.499957][T32050] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6847'. [ 1133.600527][T12093] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.622619][T12093] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.690391][T12093] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.720060][T12093] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.247323][T12060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.262441][T12060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.330671][T32064] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8 [ 1134.385113][T32071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6853'. [ 1134.468694][T32070] tap0: tun_chr_ioctl cmd 1074025677 [ 1134.474119][T32070] tap0: linktype set to 804 [ 1134.482648][ T1062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.483351][T32070] tap0: tun_chr_ioctl cmd 2148553947 [ 1134.497887][T32070] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6854'. [ 1134.519488][ T1062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.675428][T32085] ip6tnl0: Caught tx_queue_len zero misconfig [ 1134.974856][T32096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6860'. [ 1135.066542][T32096] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1135.206903][T32096] bond1: entered promiscuous mode [ 1135.221990][T32104] netlink: 'syz.5.6862': attribute type 1 has an invalid length. [ 1135.229783][T32104] netlink: 'syz.5.6862': attribute type 2 has an invalid length. [ 1135.238053][T32104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6862'. [ 1135.263844][T32096] bond1: entered allmulticast mode [ 1135.285681][T32096] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1135.295873][T32096] team0: Port device bond1 added [ 1135.644177][T32102] team0: Port device bond1 removed [ 1135.651125][T32102] bond1 (unregistering): Released all slaves [ 1136.048398][T32120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6864'. [ 1136.174700][T32128] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6867'. [ 1136.176536][T32124] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8 [ 1136.218348][T32120] bond0: entered promiscuous mode [ 1136.227713][T32120] bond_slave_0: entered promiscuous mode [ 1136.248729][T32120] bond_slave_1: entered promiscuous mode [ 1136.289481][T32120] gretap0: entered promiscuous mode [ 1136.326226][T32120] hsr1: entered promiscuous mode [ 1136.516839][T12060] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1136.525817][T12060] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.566403][T32137] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6869'. [ 1136.688758][T32137] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6869'. [ 1137.413770][T32163] bond1: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1137.430679][T32163] bond1 (unregistering): Released all slaves [ 1137.617394][T32176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6881'. [ 1137.631396][T32182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6881'. [ 1137.660204][T32182] team0 (unregistering): Port device team_slave_0 removed [ 1137.671263][T32182] team0 (unregistering): Port device team_slave_1 removed [ 1137.949349][T32193] lo speed is unknown, defaulting to 1000 [ 1137.961844][T32193] lo speed is unknown, defaulting to 1000 [ 1137.973084][T32193] wlan0 speed is unknown, defaulting to 1000 [ 1139.215546][T32210] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1139.341475][T32220] netlink: 'syz.5.6894': attribute type 1 has an invalid length. [ 1139.434814][T32220] bond1 (unregistering): Released all slaves [ 1139.475942][T32223] __nla_validate_parse: 4 callbacks suppressed [ 1139.475964][T32223] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6894'. [ 1139.912487][T32230] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8 [ 1139.980064][T32231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6896'. [ 1140.064971][T32233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6898'. [ 1140.132075][T32235] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6899'. [ 1140.275784][T32238] syzkaller0: entered promiscuous mode [ 1140.281310][T32238] syzkaller0: entered allmulticast mode [ 1140.290074][T32238] tipc: Started in network mode [ 1140.294990][T32238] tipc: Node identity 6ec1f0af8776, cluster identity 4711 [ 1140.302382][T32238] tipc: Enabled bearer , priority 0 [ 1140.364934][T32238] tipc: Resetting bearer [ 1140.406171][T32238] tipc: Disabling bearer [ 1140.558601][T11516] wlan0 speed is unknown, defaulting to 1000 [ 1140.976757][T32252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6906'. [ 1141.124118][ T5637] block nbd6: Receive control failed (result -107) [ 1141.336942][T32259] syzkaller1: entered promiscuous mode [ 1141.342648][T32259] syzkaller1: entered allmulticast mode [ 1141.705458][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1141.792265][T32276] lo speed is unknown, defaulting to 1000 [ 1141.830594][T32276] lo speed is unknown, defaulting to 1000 [ 1141.842798][T32284] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6914'. [ 1141.854103][T32276] wlan0 speed is unknown, defaulting to 1000 [ 1142.115889][T32295] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1142.135879][T32293] pim6reg1: entered promiscuous mode [ 1142.141208][T32293] pim6reg1: entered allmulticast mode [ 1142.347491][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1142.357416][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1142.537614][T32306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6922'. [ 1142.570804][T32307] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6922'. [ 1142.868259][T32319] batadv_slave_0: entered promiscuous mode [ 1142.879192][T32318] batadv_slave_0: left promiscuous mode [ 1143.269808][T32334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1143.283055][T32334] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6929'. [ 1143.294216][T32334] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6929'. [ 1143.745708][T32349] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8 [ 1143.866185][ T5641] Bluetooth: hci3: command 0x040f tx timeout [ 1144.011037][T32352] mac80211_hwsim hwsim46 wlan0: Caught tx_queue_len zero misconfig [ 1144.123498][T32351] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 1144.435822][T32361] lo speed is unknown, defaulting to 1000 [ 1144.443572][T32361] lo speed is unknown, defaulting to 1000 [ 1144.451832][T32361] wlan0 speed is unknown, defaulting to 1000 [ 1144.670937][T32372] netlink: 'syz.4.6939': attribute type 3 has an invalid length. [ 1144.686777][T32372] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6939'. [ 1144.690659][T32376] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6940'. [ 1145.079570][T32392] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8 [ 1145.210734][T32394] lo speed is unknown, defaulting to 1000 [ 1145.225845][T32394] lo speed is unknown, defaulting to 1000 [ 1145.233575][T32394] wlan0 speed is unknown, defaulting to 1000 [ 1145.328190][T32399] bond10 (unregistering): Released all slaves [ 1145.412746][T32403] netdevsim netdevsim0: Direct firmware load for á failed with error -2 [ 1145.422498][T32403] netdevsim netdevsim0: Falling back to sysfs fallback for: á [ 1145.593129][T32407] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6949'. [ 1145.712235][T32414] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6952'. [ 1145.758436][T32418] syzkaller0: entered promiscuous mode [ 1145.772730][T32418] syzkaller0: entered allmulticast mode [ 1145.804946][T32418] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1146.169819][T32425] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 1146.177191][T32425] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 1146.211289][T32425] veth0_virt_wifi: entered allmulticast mode [ 1146.221821][T32425] veth0_virt_wifi: entered promiscuous mode [ 1146.369578][T32433] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8 [ 1146.475419][T32437] lo speed is unknown, defaulting to 1000 [ 1146.482310][T32437] lo speed is unknown, defaulting to 1000 [ 1146.489140][T32437] wlan0 speed is unknown, defaulting to 1000 [ 1146.824742][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1147.084061][T32450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6962'. [ 1147.299764][T32458] veth0: entered promiscuous mode [ 1147.317543][T32459] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1147.816968][T32482] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6967'. [ 1148.121544][T32459] veth0: left promiscuous mode [ 1148.342847][T32502] netlink: 766 bytes leftover after parsing attributes in process `syz.0.6973'. [ 1148.454718][T25010] page_pool_release_retry() stalled pool shutdown: id 110, 1 inflight 667 sec [ 1148.832981][T32513] FAULT_INJECTION: forcing a failure. [ 1148.832981][T32513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1148.846078][T32513] CPU: 0 UID: 0 PID: 32513 Comm: syz.0.6978 Not tainted syzkaller #0 PREEMPT(full) [ 1148.846115][T32513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1148.846128][T32513] Call Trace: [ 1148.846138][T32513] [ 1148.846147][T32513] dump_stack_lvl+0xe8/0x150 [ 1148.846190][T32513] should_fail_ex+0x40c/0x560 [ 1148.846230][T32513] _copy_from_user+0x2d/0xb0 [ 1148.846258][T32513] ___sys_recvmsg+0x173/0x5a0 [ 1148.846295][T32513] ? __pfx____sys_recvmsg+0x10/0x10 [ 1148.846325][T32513] ? __fget_files+0x2a/0x420 [ 1148.846389][T32513] do_recvmmsg+0x31a/0x7f0 [ 1148.846426][T32513] ? __pfx_do_recvmmsg+0x10/0x10 [ 1148.846467][T32513] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1148.846494][T32513] ? __fget_files+0x3a2/0x420 [ 1148.846530][T32513] __x64_sys_recvmmsg+0x198/0x250 [ 1148.846562][T32513] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1148.846600][T32513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.846623][T32513] do_syscall_64+0x174/0x580 [ 1148.846644][T32513] ? trace_irq_disable+0x3b/0x140 [ 1148.846675][T32513] ? clear_bhb_loop+0x40/0x90 [ 1148.846703][T32513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.846724][T32513] RIP: 0033:0x7fb820f9de59 [ 1148.846747][T32513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1148.846766][T32513] RSP: 002b:00007fb821e13028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1148.846789][T32513] RAX: ffffffffffffffda RBX: 00007fb821225fa0 RCX: 00007fb820f9de59 [ 1148.846804][T32513] RDX: 00000000040001af RSI: 0000200000000a40 RDI: 0000000000000004 [ 1148.846818][T32513] RBP: 00007fb821e13090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.846831][T32513] R10: 0000000000012122 R11: 0000000000000246 R12: 0000000000000002 [ 1148.846844][T32513] R13: 00007fb821226038 R14: 00007fb821225fa0 R15: 00007fff7479f0a8 [ 1148.846878][T32513] [ 1148.943303][T32518] IPVS: set_ctl: invalid protocol: 92 172.30.1.5:20004 [ 1149.615208][T32541] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1149.625282][T32541] veth1_vlan: left promiscuous mode [ 1149.631938][T32541] veth0_vlan: left promiscuous mode [ 1149.675119][T32548] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6989'. [ 1149.703149][T32541] veth0_vlan: entered promiscuous mode [ 1149.712541][T32541] veth1_vlan: entered promiscuous mode [ 1149.713286][T32552] FAULT_INJECTION: forcing a failure. [ 1149.713286][T32552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1149.723616][T32541] veth1_macvtap: left promiscuous mode [ 1149.744974][T32552] CPU: 1 UID: 0 PID: 32552 Comm: syz.1.6990 Not tainted syzkaller #0 PREEMPT(full) [ 1149.745003][T32552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1149.745017][T32552] Call Trace: [ 1149.745029][T32552] [ 1149.745038][T32552] dump_stack_lvl+0xe8/0x150 [ 1149.745077][T32552] should_fail_ex+0x40c/0x560 [ 1149.745110][T32552] _copy_from_user+0x2d/0xb0 [ 1149.745136][T32552] ___sys_recvmsg+0x173/0x5a0 [ 1149.745163][T32552] ? lockdep_hardirqs_on+0x7a/0x110 [ 1149.745191][T32552] ? __pfx____sys_recvmsg+0x10/0x10 [ 1149.745222][T32552] ? __fget_files+0x2a/0x420 [ 1149.745280][T32552] do_recvmmsg+0x31a/0x7f0 [ 1149.745315][T32552] ? __pfx_do_recvmmsg+0x10/0x10 [ 1149.745353][T32552] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1149.745377][T32552] ? __fget_files+0x3a2/0x420 [ 1149.745413][T32552] __x64_sys_recvmmsg+0x198/0x250 [ 1149.745442][T32552] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1149.745477][T32552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.745501][T32552] do_syscall_64+0x174/0x580 [ 1149.745521][T32552] ? trace_irq_disable+0x3b/0x140 [ 1149.745546][T32552] ? clear_bhb_loop+0x40/0x90 [ 1149.745572][T32552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.745591][T32552] RIP: 0033:0x7fa4ca59de59 [ 1149.745621][T32552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1149.745637][T32552] RSP: 002b:00007fa4cb49d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1149.745660][T32552] RAX: ffffffffffffffda RBX: 00007fa4ca825fa0 RCX: 00007fa4ca59de59 [ 1149.745674][T32552] RDX: 00000000040001af RSI: 0000200000000a40 RDI: 0000000000000004 [ 1149.745689][T32552] RBP: 00007fa4cb49d090 R08: 0000000000000000 R09: 0000000000000000 [ 1149.745700][T32552] R10: 0000000000012122 R11: 0000000000000246 R12: 0000000000000002 [ 1149.745713][T32552] R13: 00007fa4ca826038 R14: 00007fa4ca825fa0 R15: 00007ffc70e994c8 [ 1149.745748][T32552] [ 1149.766628][T32541] veth0_macvtap: left promiscuous mode [ 1149.995685][T32555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1150.007302][T32541] veth0_macvtap: entered promiscuous mode [ 1150.015348][T32541] veth1_macvtap: entered promiscuous mode [ 1150.032579][T32541] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1150.040974][T32541] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1150.049888][T32541] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1150.058385][T32541] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1150.069814][T32541] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1150.080837][T32541] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1150.090694][T32541] mac80211_hwsim hwsim50 wlan0: entered promiscuous mode [ 1150.113299][T32541] batman_adv: batadv0: Interface activated: vlan2 [ 1150.125122][T32541] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1150.134125][T32541] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1150.142281][T32541] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1150.179574][T12068] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.191533][T32564] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 1150.259223][ T1062] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.306434][ T1062] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.338351][T12093] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.392224][T32570] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.6996'. [ 1150.848979][T32591] FAULT_INJECTION: forcing a failure. [ 1150.848979][T32591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1150.874160][T32591] CPU: 0 UID: 0 PID: 32591 Comm: syz.0.7002 Not tainted syzkaller #0 PREEMPT(full) [ 1150.874189][T32591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1150.874201][T32591] Call Trace: [ 1150.874209][T32591] [ 1150.874218][T32591] dump_stack_lvl+0xe8/0x150 [ 1150.874257][T32591] should_fail_ex+0x40c/0x560 [ 1150.874296][T32591] _copy_from_user+0x2d/0xb0 [ 1150.874322][T32591] ___sys_recvmsg+0x173/0x5a0 [ 1150.874357][T32591] ? __pfx____sys_recvmsg+0x10/0x10 [ 1150.874389][T32591] ? __fget_files+0x2a/0x420 [ 1150.874447][T32591] do_recvmmsg+0x31a/0x7f0 [ 1150.874480][T32591] ? __pfx_do_recvmmsg+0x10/0x10 [ 1150.874519][T32591] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1150.874543][T32591] ? __fget_files+0x3a2/0x420 [ 1150.874579][T32591] __x64_sys_recvmmsg+0x198/0x250 [ 1150.874610][T32591] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1150.874648][T32591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.874671][T32591] do_syscall_64+0x174/0x580 [ 1150.874693][T32591] ? trace_irq_disable+0x3b/0x140 [ 1150.874721][T32591] ? clear_bhb_loop+0x40/0x90 [ 1150.874745][T32591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.874766][T32591] RIP: 0033:0x7fb820f9de59 [ 1150.874786][T32591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.874805][T32591] RSP: 002b:00007fb821e13028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1150.874828][T32591] RAX: ffffffffffffffda RBX: 00007fb821225fa0 RCX: 00007fb820f9de59 [ 1150.874844][T32591] RDX: 00000000040001af RSI: 0000200000000a40 RDI: 0000000000000004 [ 1150.874858][T32591] RBP: 00007fb821e13090 R08: 0000000000000000 R09: 0000000000000000 [ 1150.874871][T32591] R10: 0000000000012122 R11: 0000000000000246 R12: 0000000000000002 [ 1150.874884][T32591] R13: 00007fb821226038 R14: 00007fb821225fa0 R15: 00007fff7479f0a8 [ 1150.874919][T32591] [ 1151.760248][T32620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7010'. [ 1151.772824][T32617] netlink: 'syz.2.7007': attribute type 11 has an invalid length. [ 1151.827961][T32620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7010'. [ 1151.998265][T32619] lo speed is unknown, defaulting to 1000 [ 1152.034653][T32630] netlink: 'syz.5.7013': attribute type 1 has an invalid length. [ 1152.049553][T32619] lo speed is unknown, defaulting to 1000 [ 1152.085916][T32619] wlan0 speed is unknown, defaulting to 1000 [ 1152.156693][T32635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7016'. [ 1152.157155][T32637] FAULT_INJECTION: forcing a failure. [ 1152.157155][T32637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1152.165605][T32635] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7016'. [ 1152.275157][T32637] CPU: 1 UID: 0 PID: 32637 Comm: syz.1.7015 Not tainted syzkaller #0 PREEMPT(full) [ 1152.275187][T32637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1152.275199][T32637] Call Trace: [ 1152.275213][T32637] [ 1152.275223][T32637] dump_stack_lvl+0xe8/0x150 [ 1152.275260][T32637] should_fail_ex+0x40c/0x560 [ 1152.275298][T32637] _copy_from_user+0x2d/0xb0 [ 1152.275325][T32637] ___sys_recvmsg+0x173/0x5a0 [ 1152.275360][T32637] ? __pfx____sys_recvmsg+0x10/0x10 [ 1152.275393][T32637] ? __fget_files+0x2a/0x420 [ 1152.275453][T32637] do_recvmmsg+0x31a/0x7f0 [ 1152.275490][T32637] ? __pfx_do_recvmmsg+0x10/0x10 [ 1152.275530][T32637] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1152.275556][T32637] ? __fget_files+0x3a2/0x420 [ 1152.275592][T32637] __x64_sys_recvmmsg+0x198/0x250 [ 1152.275622][T32637] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1152.275657][T32637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.275681][T32637] do_syscall_64+0x174/0x580 [ 1152.275703][T32637] ? trace_irq_disable+0x3b/0x140 [ 1152.275729][T32637] ? clear_bhb_loop+0x40/0x90 [ 1152.275754][T32637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.275774][T32637] RIP: 0033:0x7fa4ca59de59 [ 1152.275793][T32637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1152.275811][T32637] RSP: 002b:00007fa4cb49d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1152.275834][T32637] RAX: ffffffffffffffda RBX: 00007fa4ca825fa0 RCX: 00007fa4ca59de59 [ 1152.275849][T32637] RDX: 00000000040001af RSI: 0000200000000a40 RDI: 0000000000000004 [ 1152.275863][T32637] RBP: 00007fa4cb49d090 R08: 0000000000000000 R09: 0000000000000000 [ 1152.275876][T32637] R10: 0000000000012122 R11: 0000000000000246 R12: 0000000000000002 [ 1152.275888][T32637] R13: 00007fa4ca826038 R14: 00007fa4ca825fa0 R15: 00007ffc70e994c8 [ 1152.275922][T32637] [ 1152.619849][T32649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7020'. [ 1152.629058][T32649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7020'. [ 1153.247901][T32679] netlink: 'syz.0.7027': attribute type 1 has an invalid length. [ 1153.325163][T32676] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7025'. [ 1153.433321][T32679] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1153.490384][T32689] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7030'. [ 1153.653902][T32699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1153.757983][T32686] bond10: (slave veth5): Enslaving as an active interface with a down link [ 1153.779107][T32685] batadv_slave_0: mtu less than device minimum [ 1153.840367][T32679] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 1153.856477][T32679] bond10: (slave batadv8): making interface the new active one [ 1153.867699][T32679] batadv8: entered promiscuous mode [ 1153.873555][T32679] bond10: (slave batadv8): Enslaving as an active interface with an up link [ 1154.170459][T32710] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7033'. [ 1155.717677][T32751] xfrm0: Caught tx_queue_len zero misconfig [ 1156.097618][T32766] lo speed is unknown, defaulting to 1000 [ 1156.105960][T32766] lo speed is unknown, defaulting to 1000 [ 1156.113719][T32766] wlan0 speed is unknown, defaulting to 1000 [ 1156.310532][ T306] __nla_validate_parse: 2 callbacks suppressed [ 1156.310558][ T306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7049'. [ 1157.103394][ T320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7050'. [ 1157.273183][ T326] netlink: 'syz.1.7051': attribute type 4 has an invalid length. [ 1157.274079][ T328] netlink: 'syz.1.7051': attribute type 4 has an invalid length. [ 1158.301450][ T6128] lo speed is unknown, defaulting to 1000 [ 1158.354308][T22227] lo speed is unknown, defaulting to 1000 [ 1158.500029][ T332] lo speed is unknown, defaulting to 1000 [ 1158.617179][ T332] lo speed is unknown, defaulting to 1000 [ 1158.625036][ T332] wlan0 speed is unknown, defaulting to 1000 [ 1158.840111][ T345] syzkaller1: entered promiscuous mode [ 1158.845700][ T345] syzkaller1: entered allmulticast mode [ 1158.975279][ T345] syzkaller0: entered promiscuous mode [ 1158.980820][ T345] syzkaller0: entered allmulticast mode [ 1159.072218][ T354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7059'. [ 1159.410727][ T371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7060'. [ 1159.783563][ T376] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7064'. [ 1163.480965][ T393] bond4 (unregistering): Released all slaves [ 1163.623359][ T396] batadv_slave_0: entered promiscuous mode [ 1163.667936][ T396] tipc: Enabling of bearer rejected, failed to enable media [ 1163.682791][ T396] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1163.698409][ T398] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7071'. [ 1163.714897][ T398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1163.726320][ T398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1163.790329][ T398] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1163.867853][ T398] bond0 (unregistering): Released all slaves [ 1163.949764][ T395] batadv_slave_0: left promiscuous mode [ 1164.036960][ T406] netlink: 'syz.2.7075': attribute type 3 has an invalid length. [ 1164.041321][T12090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.055257][T12090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.067138][ T410] xt_HMARK: spi-set and port-set can't be combined [ 1164.079492][ T5360] wlan0 speed is unknown, defaulting to 1000 [ 1164.086724][ T5360] syz0: Port: 1 Link ACTIVE [ 1164.092464][ T406] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7075'. [ 1164.112991][ T407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1164.123351][ T5360] ------------[ cut here ]------------ [ 1164.131353][ T5360] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 1164.141399][ T5360] WARNING: net/mac80211/rate.c:404 at __rate_control_send_low+0x60c/0x8a0, CPU#1: kworker/1:3/5360 [ 1164.152330][ T5360] Modules linked in: [ 1164.158723][ T5360] CPU: 1 UID: 0 PID: 5360 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 1164.168176][ T5360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1164.178338][ T5360] Workqueue: mld mld_ifc_work [ 1164.183175][ T5360] RIP: 0010:__rate_control_send_low+0x638/0x8a0 [ 1164.189514][ T5360] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 1164.209239][ T5360] RSP: 0018:ffffc900033ae738 EFLAGS: 00010246 [ 1164.215431][ T5360] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 1164.223455][ T5360] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90696d40 [ 1164.231800][ T5360] RBP: ffff88804d500f40 R08: 0000000000000000 R09: 0000000000000000 [ 1164.239926][ T5360] R10: 0000000000000004 R11: 0000000000000000 R12: ffff888033b2d2a8 [ 1164.248002][ T5360] R13: dffffc0000000000 R14: ffffffff90696d40 R15: ffff88804d503258 [ 1164.256146][ T5360] FS: 0000000000000000(0000) GS:ffff888125063000(0000) knlGS:0000000000000000 [ 1164.260414][ T409] syzkaller0: entered promiscuous mode [ 1164.265175][ T5360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1164.277233][ T5360] CR2: 00007fb818000020 CR3: 0000000084bf0000 CR4: 00000000003526f0 [ 1164.285279][ T5360] Call Trace: [ 1164.288601][ T5360] [ 1164.291671][ T5360] rate_control_send_low+0x1a7/0x7b0 [ 1164.297227][ T5360] ? __lock_acquire+0x683/0x2cf0 [ 1164.302613][ T5360] rate_control_get_rate+0x20b/0x5d0 [ 1164.308899][ T5360] ieee80211_tx_h_rate_ctrl+0xafa/0x1760 [ 1164.313799][ T409] syzkaller0: entered allmulticast mode [ 1164.314683][ T5360] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1164.326353][ T5360] ? __asan_memcpy+0x40/0x70 [ 1164.330991][ T5360] invoke_tx_handlers_late+0xb5/0x1830 [ 1164.336521][ T5360] ? ieee80211_tx_h_select_key+0xd1c/0x1a90 [ 1164.342457][ T5360] ieee80211_tx_dequeue+0x3fb6/0x55a0 [ 1164.348041][ T5360] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 1164.354118][ T5360] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1164.359531][ T5360] ? do_raw_spin_lock+0x12b/0x2f0 [ 1164.364625][ T5360] ? ieee80211_queue_skb+0x16e0/0x22c0 [ 1164.370155][ T5360] ieee80211_hwsim_wake_tx_queue+0xbb/0x150 [ 1164.376671][ T5360] ieee80211_queue_skb+0x1923/0x22c0 [ 1164.382012][ T5360] ieee80211_tx+0x2c2/0x4b0 [ 1164.386601][ T5360] ? __pfx_ieee80211_tx+0x10/0x10 [ 1164.391696][ T5360] ? ieee80211_xmit+0x2e5/0x3c0 [ 1164.396613][ T5360] __ieee80211_subif_start_xmit+0xf06/0x1690 [ 1164.402602][ T5360] ? __ieee80211_subif_start_xmit+0x2ca/0x1690 [ 1164.408860][ T5360] ? worker_thread+0xa47/0xfb0 [ 1164.413688][ T5360] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 1164.420106][ T5360] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 1164.426497][ T5360] ieee80211_subif_start_xmit+0xf1/0x570 [ 1164.432171][ T5360] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 1164.438527][ T5360] ? __pfx_netif_skb_features+0x10/0x10 [ 1164.444233][ T5360] dev_hard_start_xmit+0x2cd/0x830 [ 1164.449382][ T5360] __dev_queue_xmit+0x1435/0x37f0 [ 1164.454514][ T5360] ? __lock_acquire+0x683/0x2cf0 [ 1164.459510][ T5360] ? __dev_queue_xmit+0x29b/0x37f0 [ 1164.464690][ T5360] ? ___neigh_create+0x1cd2/0x22b0 [ 1164.469904][ T5360] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1164.475408][ T5360] ? neigh_resolve_output+0x428/0x720 [ 1164.480826][ T5360] ? eth_header+0x11b/0x200 [ 1164.485484][ T5360] ? __asan_memcpy+0x40/0x70 [ 1164.490121][ T5360] ? ip6_output+0x11e/0x540 [ 1164.494738][ T5360] ip6_output+0x337/0x540 [ 1164.499111][ T5360] ? __pfx_ip6_output+0x10/0x10 [ 1164.504033][ T5360] NF_HOOK+0x177/0x4f0 [ 1164.508189][ T5360] ? __pfx_NF_HOOK+0x10/0x10 [ 1164.512829][ T5360] ? icmp6_dst_alloc+0x39b/0x430 [ 1164.517969][ T5360] ? __pfx_dst_output+0x10/0x10 [ 1164.522873][ T5360] ? __local_bh_enable_ip+0xd0/0x130 [ 1164.528407][ T5360] ? icmp6_dst_alloc+0x39b/0x430 [ 1164.533429][ T5360] ? icmp6_dst_alloc+0x39b/0x430 [ 1164.538439][ T5360] mld_sendpack+0x890/0xe10 [ 1164.542985][ T5360] ? mld_sendpack+0x206/0xe10 [ 1164.547719][ T5360] ? __pfx_mld_sendpack+0x10/0x10 [ 1164.552803][ T5360] mld_ifc_work+0x839/0xe70 [ 1164.557357][ T5360] ? rcu_is_watching+0x15/0xb0 [ 1164.562184][ T5360] ? process_scheduled_works+0xa20/0x14e0 [ 1164.568011][ T5360] process_scheduled_works+0xa8e/0x14e0 [ 1164.573655][ T5360] ? __pfx_process_scheduled_works+0x10/0x10 [ 1164.579672][ T5360] ? assign_work+0x3cf/0x5d0 [ 1164.584403][ T5360] worker_thread+0xa47/0xfb0 [ 1164.589055][ T5360] kthread+0x388/0x470 [ 1164.593195][ T5360] ? __pfx_worker_thread+0x10/0x10 [ 1164.598400][ T5360] ? __pfx_kthread+0x10/0x10 [ 1164.603028][ T5360] ret_from_fork+0x514/0xb70 [ 1164.607742][ T5360] ? __pfx_ret_from_fork+0x10/0x10 [ 1164.612892][ T5360] ? __switch_to+0xc89/0x1420 [ 1164.617675][ T5360] ? __pfx_kthread+0x10/0x10 [ 1164.622302][ T5360] ret_from_fork_asm+0x1a/0x30 [ 1164.627147][ T5360] [ 1164.630186][ T5360] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1164.637991][ T5360] CPU: 1 UID: 0 PID: 5360 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 1164.647354][ T5360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1164.657578][ T5360] Workqueue: mld mld_ifc_work [ 1164.662263][ T5360] Call Trace: [ 1164.665541][ T5360] [ 1164.668466][ T5360] vpanic+0x56c/0xa60 [ 1164.672587][ T5360] ? __pfx__printk+0x10/0x10 [ 1164.677340][ T5360] ? __pfx_vpanic+0x10/0x10 [ 1164.681973][ T5360] ? is_bpf_text_address+0x292/0x2b0 [ 1164.687296][ T5360] ? is_bpf_text_address+0x26/0x2b0 [ 1164.692511][ T5360] panic+0xc5/0xd0 [ 1164.696261][ T5360] ? __pfx_panic+0x10/0x10 [ 1164.700708][ T5360] ? ret_from_fork_asm+0x1a/0x30 [ 1164.705672][ T5360] __warn+0x315/0x4c0 [ 1164.709841][ T5360] ? __rate_control_send_low+0x60c/0x8a0 [ 1164.715599][ T5360] ? __rate_control_send_low+0x60c/0x8a0 [ 1164.721247][ T5360] __report_bug+0x331/0x530 [ 1164.725854][ T5360] ? unwind_next_frame+0x8f/0x2550 [ 1164.731077][ T5360] ? lock_acquire+0x106/0x350 [ 1164.735766][ T5360] ? __rate_control_send_low+0x60c/0x8a0 [ 1164.741422][ T5360] ? __pfx___report_bug+0x10/0x10 [ 1164.746453][ T5360] ? unwind_next_frame+0x1baf/0x2550 [ 1164.751756][ T5360] report_bug_entry+0x19a/0x290 [ 1164.756602][ T5360] ? __rate_control_send_low+0x638/0x8a0 [ 1164.762246][ T5360] ? __rate_control_send_low+0x63d/0x8a0 [ 1164.767941][ T5360] handle_bug+0xce/0x200 [ 1164.772239][ T5360] exc_invalid_op+0x1a/0x50 [ 1164.776786][ T5360] asm_exc_invalid_op+0x1a/0x20 [ 1164.781680][ T5360] RIP: 0010:__rate_control_send_low+0x638/0x8a0 [ 1164.787955][ T5360] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 1164.807711][ T5360] RSP: 0018:ffffc900033ae738 EFLAGS: 00010246 [ 1164.813788][ T5360] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 1164.821768][ T5360] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90696d40 [ 1164.829757][ T5360] RBP: ffff88804d500f40 R08: 0000000000000000 R09: 0000000000000000 [ 1164.837779][ T5360] R10: 0000000000000004 R11: 0000000000000000 R12: ffff888033b2d2a8 [ 1164.845919][ T5360] R13: dffffc0000000000 R14: ffffffff90696d40 R15: ffff88804d503258 [ 1164.853971][ T5360] ? __rate_control_send_low+0x600/0x8a0 [ 1164.859722][ T5360] rate_control_send_low+0x1a7/0x7b0 [ 1164.865859][ T5360] ? __lock_acquire+0x683/0x2cf0 [ 1164.870866][ T5360] rate_control_get_rate+0x20b/0x5d0 [ 1164.876219][ T5360] ieee80211_tx_h_rate_ctrl+0xafa/0x1760 [ 1164.882012][ T5360] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1164.888105][ T5360] ? __asan_memcpy+0x40/0x70 [ 1164.892757][ T5360] invoke_tx_handlers_late+0xb5/0x1830 [ 1164.898242][ T5360] ? ieee80211_tx_h_select_key+0xd1c/0x1a90 [ 1164.904156][ T5360] ieee80211_tx_dequeue+0x3fb6/0x55a0 [ 1164.909595][ T5360] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 1164.915363][ T5360] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1164.920744][ T5360] ? do_raw_spin_lock+0x12b/0x2f0 [ 1164.925781][ T5360] ? ieee80211_queue_skb+0x16e0/0x22c0 [ 1164.931270][ T5360] ieee80211_hwsim_wake_tx_queue+0xbb/0x150 [ 1164.937185][ T5360] ieee80211_queue_skb+0x1923/0x22c0 [ 1164.942540][ T5360] ieee80211_tx+0x2c2/0x4b0 [ 1164.947093][ T5360] ? __pfx_ieee80211_tx+0x10/0x10 [ 1164.952179][ T5360] ? ieee80211_xmit+0x2e5/0x3c0 [ 1164.957079][ T5360] __ieee80211_subif_start_xmit+0xf06/0x1690 [ 1164.963729][ T5360] ? __ieee80211_subif_start_xmit+0x2ca/0x1690 [ 1164.970276][ T5360] ? worker_thread+0xa47/0xfb0 [ 1164.975066][ T5360] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 1164.981495][ T5360] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 1164.987751][ T5360] ieee80211_subif_start_xmit+0xf1/0x570 [ 1164.993400][ T5360] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 1164.999665][ T5360] ? __pfx_netif_skb_features+0x10/0x10 [ 1165.005231][ T5360] dev_hard_start_xmit+0x2cd/0x830 [ 1165.010370][ T5360] __dev_queue_xmit+0x1435/0x37f0 [ 1165.015420][ T5360] ? __lock_acquire+0x683/0x2cf0 [ 1165.020389][ T5360] ? __dev_queue_xmit+0x29b/0x37f0 [ 1165.025511][ T5360] ? ___neigh_create+0x1cd2/0x22b0 [ 1165.030638][ T5360] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1165.036022][ T5360] ? neigh_resolve_output+0x428/0x720 [ 1165.041405][ T5360] ? eth_header+0x11b/0x200 [ 1165.045946][ T5360] ? __asan_memcpy+0x40/0x70 [ 1165.050570][ T5360] ? ip6_output+0x11e/0x540 [ 1165.055815][ T5360] ip6_output+0x337/0x540 [ 1165.060205][ T5360] ? __pfx_ip6_output+0x10/0x10 [ 1165.065092][ T5360] NF_HOOK+0x177/0x4f0 [ 1165.069213][ T5360] ? __pfx_NF_HOOK+0x10/0x10 [ 1165.073818][ T5360] ? icmp6_dst_alloc+0x39b/0x430 [ 1165.078795][ T5360] ? __pfx_dst_output+0x10/0x10 [ 1165.083657][ T5360] ? __local_bh_enable_ip+0xd0/0x130 [ 1165.088953][ T5360] ? icmp6_dst_alloc+0x39b/0x430 [ 1165.093904][ T5360] ? icmp6_dst_alloc+0x39b/0x430 [ 1165.098860][ T5360] mld_sendpack+0x890/0xe10 [ 1165.103394][ T5360] ? mld_sendpack+0x206/0xe10 [ 1165.108092][ T5360] ? __pfx_mld_sendpack+0x10/0x10 [ 1165.113156][ T5360] mld_ifc_work+0x839/0xe70 [ 1165.117676][ T5360] ? rcu_is_watching+0x15/0xb0 [ 1165.122538][ T5360] ? process_scheduled_works+0xa20/0x14e0 [ 1165.128262][ T5360] process_scheduled_works+0xa8e/0x14e0 [ 1165.133842][ T5360] ? __pfx_process_scheduled_works+0x10/0x10 [ 1165.139835][ T5360] ? assign_work+0x3cf/0x5d0 [ 1165.144441][ T5360] worker_thread+0xa47/0xfb0 [ 1165.149076][ T5360] kthread+0x388/0x470 [ 1165.153162][ T5360] ? __pfx_worker_thread+0x10/0x10 [ 1165.158280][ T5360] ? __pfx_kthread+0x10/0x10 [ 1165.162884][ T5360] ret_from_fork+0x514/0xb70 [ 1165.167495][ T5360] ? __pfx_ret_from_fork+0x10/0x10 [ 1165.172641][ T5360] ? __switch_to+0xc89/0x1420 [ 1165.177343][ T5360] ? __pfx_kthread+0x10/0x10 [ 1165.181945][ T5360] ret_from_fork_asm+0x1a/0x30 [ 1165.186728][ T5360] [ 1165.189901][ T5360] Kernel Offset: disabled [ 1165.194225][ T5360] Rebooting in 86400 seconds..