last executing test programs: 23.907779382s ago: executing program 0 (id=2863): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x14, 0x8, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8900) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)={0x158, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x0, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20040800}, 0x20000080) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100080000000c0001800800010005000000100002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) close(0x3) 23.740185365s ago: executing program 0 (id=2865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000000)=r1, 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x10}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002200), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000000d00)={0x340, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd288}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3796}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x53}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_BEARER={0x168, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xefd1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @mcast1, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x62}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff800}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x60}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x619}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x40084}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="eb00fcffffff0000000600"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x300}, 0x94) 23.665626632s ago: executing program 0 (id=2867): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8008, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x27}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000100000000300000a6e000000", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff00850000000f00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="9ad67b303fadb5cabbb0034ab9d9cc201a00000046922dbe0ead6f7b8342d41af7e1143dada412a8f2a14c1ddaf84e5ee74799298fbc8296a6bad86b9d3094336721e40000000000000000d87768c3fe40cd5cd9d5106ef8a6d6ee0c75f0d1641c3670f04910de", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, 0x140f, 0x1, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x34}}, 0xc080) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$FIONCLEX(r8, 0x5450) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x40000401, @initdev={0xfe, 0x88, '\x00', 0x10, 0x0}, 0x40000006}, 0x1c) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (async) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'pimreg1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r12, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x20004185}, 0x4040800) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000180)="51c0c2cf0033d1af0c5ae2f153666730c61162fef92d79", &(0x7f00000004c0)=@tcp6=r6}, 0xffffffffffffff2c) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000040)) 23.424351485s ago: executing program 0 (id=2869): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000003140)=[{0x0}, {&(0x7f00000002c0)="ca7bfc8312c9237bffa562dc1d03c723970f07a1078c261ec3fdfed5f81f4f5fe8", 0x21}, {0x0}, {&(0x7f0000001000)="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", 0x45b}], 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x3, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000180100002020692500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14, &(0x7f0000000140)={&(0x7f0000000080)="0c952bdd19b8d8f3723a0ae3f72dc3a71e3c866a4c5639f7d9a1ab045031fcd23e1e2d5e2a893fff1f852d41aac9b67ccb5b3ffaa0a242c967d0207f4fff06fb663fad53290e8feead5ec5d985ab85e04097d8904c736a2075f8200f8e5355ece76c3e148c57f53f735feaff3a637aa075fb3b6215d5", 0x76}, 0x1, 0x0, 0x0, 0x404c014}, 0x15) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket(0x6, 0x2, 0x3) write(r6, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100", 0x1b) sendmmsg$inet(r4, &(0x7f0000005900), 0x18, 0x40040) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000ac0)={0x0, @in6={{0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x49c}}, [0x1, 0xfffffffffffff42d, 0x2, 0x8000000000000001, 0x100000001, 0x80, 0x9, 0x5, 0x80, 0x4, 0x2, 0x3, 0x5, 0xb, 0x100]}, &(0x7f0000000bc0)=0x100) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000d80)={r7, 0x4}, 0x8) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00']) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xa20, 0x90, 0x43, 0xa0, 0x90, 0x98, 0x988, 0x178, 0x178, 0x988, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {0x7f}, 0x0, 0x1}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x8b8, 0x8f8, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'\x00', {0xff}, 'veth0_macvtap\x00', {}, 0x8, 0x15}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x1000000, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x56, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x1000003, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x6, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000004, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xfd, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138e}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x5}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xffffbff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1, 0x3}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0xffffffff}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa80) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, &(0x7f0000000280)=""/135, &(0x7f0000000340)="8e6b373c083a4aa28e5588524a41399bf5fbb0f58b843bb2980b248235f47fbd138ca6f66ab492d8720f7d", &(0x7f0000000380)="e1c265e436668d5b10d71843fca2a234a96c4ba30436f6", 0x80, r2}, 0x38) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000a80)={r7, 0xfff2, 0xfffd}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 23.383746547s ago: executing program 0 (id=2870): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x78}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x5, 0x4, 0x854b, 0xd8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xfff4, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e4}, 0x200040d0) r7 = socket$packet(0x11, 0x3, 0x300) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xa000, 0x0) sendto$packet(r7, &(0x7f0000000140)="ba", 0x1, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r6, 0x1, 0x7, 0x6, @multicast}, 0x14) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000002fc0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002f80)={&(0x7f00000022c0)={0xca0, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x71c, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1d0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x180, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfffa, 0x401, 0xfb, 0x5, 0x1, 0x7, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0x4, 0x18, 0x36, 0x1, 0xb, 0x4, 0x1, 0x1b, 0xb, 0x4, 0x6, 0x24, 0x6c, 0x16, 0x16, 0x54, 0x4, 0xc, 0x30, 0x5d, 0x36, 0x3, 0xc, 0xb, 0x36, 0x1b, 0x48, 0x18, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x1, 0xfff, 0xf, 0x3, 0xd1, 0xc7d9, 0x1164]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x0, 0x8}, {0x2, 0x2}, {0x1}, {0x1, 0x5}, {0x5, 0x6}, {0x5, 0x5}, {}, {0x1, 0x8}, {0x4, 0x2}, {0x6, 0x3}, {0x6, 0x4}, {0x0, 0x8}, {0x7, 0x9}, {0x6, 0x3}, {0x1, 0x8}, {0x0, 0x8}, {0x7, 0x4}, {0x5, 0x7}, {0x2}, {0x7, 0x1}, {0x6, 0x7}, {0x4, 0x6}, {0x2, 0x6}, {0x0, 0x9}, {0x7, 0xa}, {0x7, 0x4}, {0x6}, {0x6, 0x4}, {0x2, 0x8}, {0x4, 0x2}, {0x4, 0x2}, {0x3, 0x1}, {0x7, 0x4}, {0x2, 0x1}, {0x6, 0x3}, {0x2, 0x4}, {0x1}]}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x4, 0x3}, {0x1}, {0x2, 0x8}, {0x1, 0x2}, {0x7, 0x7}, {0x6, 0x1}, {0x2, 0x2}, {0x0, 0x2}, {0x2, 0xa}, {0x6, 0x7}, {0x4, 0x5}, {0x3, 0xa}, {0x5, 0x3}, {0x1}, {0x6, 0x8}, {0x1, 0x1}, {0x0, 0x9}, {0x6, 0x6}, {0x1}, {0x3, 0x9}, {0x0, 0xa}, {0x5, 0x3}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0xa7e, 0x1, 0x4, 0x0, 0x5, 0x2]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x4, 0x6c, 0x3, 0x3, 0x36, 0x30, 0x0, 0x9, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd02a, 0x2, 0x41b, 0x3, 0xfff, 0x8, 0x5, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x725, 0x7fb, 0x5, 0x6, 0x7, 0x81]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x864e, 0x9, 0x401, 0x3, 0x8, 0x1, 0x7fff, 0x4]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x22d, 0x400, 0x1, 0x200, 0x7fff, 0x7c, 0x2, 0xe]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x8001, 0x8000, 0x6, 0x3, 0xffff, 0x6]}}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x9c55, 0x8, 0x5, 0x0, 0x1e, 0xe34, 0x9f]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x2, 0xc, 0x3, 0x2d, 0x1b, 0x6, 0x12]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5b}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3a}]}, {0x40c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x30}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x128, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6320, 0x3, 0x5, 0x49f8, 0xb, 0x100, 0xa, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x0, 0x9, 0x6b, 0xf, 0xfff8, 0x1, 0xfff8]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x48, 0x6, 0x36, 0x1b, 0xb, 0x1b, 0x1, 0x6, 0x9, 0x18, 0xdb9fa16acc0c9456, 0xc, 0x1, 0x3, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0xc4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x2, 0x7}, {0x4, 0xe}, {0x5, 0x5}, {0x6, 0x9}, {0x0, 0x4}, {0x6, 0x3}, {0x1}, {0x0, 0x9}, {0x6, 0x4}, {0x2, 0x6}, {0x3, 0x1}, {0x5, 0x9}, {0x4, 0x8}, {0x5, 0x3}, {0x0, 0x4}, {0x1, 0xa}, {0x0, 0x2}, {0x6, 0x4}, {0x6, 0x8}, {0x6, 0x4}, {0x1, 0x9}, {0x0, 0x9}, {0x4, 0x9}, {0x0, 0x3}, {0x1, 0x9}, {0x7, 0x3}, {0x6, 0x8}, {0x0, 0x5}, {0x5, 0xa}, {0x7, 0x8}, {0x3, 0x9}, {0x1, 0x4}, {0x1, 0x8}, {0x2, 0x1}, {0x7, 0x5}, {0x0, 0x1}, {0x7, 0x1}, {0x3, 0x3}, {0x6, 0x5}, {0x0, 0xa}, {0x1, 0x4}, {0x6, 0xa}, {0x0, 0x2}, {0x6, 0x7}, {0x5, 0x3}, {0x2, 0x7}, {0x4, 0x9}, {0x0, 0x7}, {0x5, 0x2}, {0x6, 0x3}, {0x1, 0x2}, {0x1, 0x8}, {0x3, 0x8}, {0x5}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x3}, {0x1, 0x2}, {0x1, 0x8}, {0x6, 0x9}, {0x2, 0x8}, {0x6, 0x3}, {0x2, 0x4}, {0x2, 0xa}, {0x4, 0xa}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x6, 0x9}, {0x7, 0x6}, {0x6, 0xa}, {0x1, 0x7}, {0x1, 0x4}, {0x2, 0xa}, {0x4, 0x1}, {0x7, 0x9}, {0x0, 0x2}, {0x3}, {0x2, 0x8}, {0x6, 0x5}, {0x5, 0x6}, {0x4}, {0x4, 0x7}, {0x3, 0x7}, {0x7}, {0x1, 0xa}, {0x6, 0x5}, {0x5, 0x8}, {0x5, 0x2}, {0x7}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0x2}, {0x5, 0x8}, {0x0, 0x8}, {0x6, 0x2}, {0x0, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x7, 0xd, 0xb, 0x8, 0x6, 0xd812]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x141f, 0x9, 0x7, 0x0, 0xc, 0x3, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x9, 0x5, 0x101, 0x3, 0x1, 0xe16, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x124, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xff2, 0x400, 0xfffc, 0x7, 0x7, 0x8001, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5ab1, 0x7ff, 0x8000, 0x6, 0x11a, 0xa49, 0x5a9]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x4, 0xa}, {0x1, 0x1}, {0x2, 0x8}, {0x4, 0x3}, {0x5, 0x3}, {0x5, 0x9}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x7}, {0x2, 0x4}, {0x6, 0x3}, {0x0, 0x6}, {0x0, 0x8}, {0x3, 0x7}, {0x2, 0x5}, {0x1, 0x7}, {0x6, 0x3}, {0x6, 0x5}, {0x1, 0xa}, {0x0, 0xa}, {0x0, 0x5}, {0x6, 0x3}, {0x3, 0x7}, {0x3, 0x5}, {0x4, 0x9}, {0x1, 0x4}, {0x2, 0x5}, {0x4, 0x1}, {0x0, 0x7}, {0x6, 0x7}, {0x7, 0x5}, {0x6, 0xa}, {0x1, 0x4}, {0x0, 0x2}, {0x5, 0x8}, {0x6, 0x2}, {0x5, 0x6}, {0x5, 0x3}, {0x4, 0x7}, {0x2, 0x6}, {0x2, 0x6}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x9, 0x24, 0x30, 0x2, 0x6, 0x5]}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0x1b, 0x36, 0x48, 0x30, 0x5, 0x36, 0x12, 0x16, 0x4, 0x0, 0x1b, 0x2, 0x60, 0x0, 0x60, 0x18, 0x5, 0x12, 0x12]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x24, 0x6c, 0x24, 0x1, 0x48, 0x16, 0x36, 0x1, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x5}, {0x2}, {0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x6, 0x5}, {0x1, 0x4}, {0x7, 0x8}, {0x0, 0x3}, {0x2, 0x2}, {0x1, 0x2}, {0x2, 0x7}, {0x1, 0x4}, {0x5, 0x2}, {0x1, 0x7}, {0x2, 0xa}, {0x3, 0xa}, {0x5, 0x8}, {0x4, 0x5}, {0x4}, {0x3, 0x8}, {0x1, 0x8}, {0x4, 0x9}, {0x0, 0x4}, {0x2, 0x7}, {0x3, 0x2}, {0x7, 0x6}, {0x7, 0x2}, {0x1, 0x18}, {0x4, 0x8}, {0x7, 0x5}, {0x0, 0x1}, {0x2, 0x5}, {0x1}, {0x4, 0x2}, {0x5, 0x2}, {0x2, 0x8}, {0x5, 0x5}, {0x0, 0x3}, {0x3, 0x8}, {0x3}, {0x6, 0x5}, {0x6, 0x3}, {0x3, 0x7}, {0x5, 0x9}, {0x0, 0x9}, {}, {0x3, 0x8}, {0x5, 0x3}, {0x7}, {0x4, 0x4}, {0x4, 0x3}, {0x3, 0x5}, {0x1, 0x7}, {0x2, 0x8}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x3}, {0x2, 0x7}, {0x1, 0x5}, {0x4}, {0x6, 0x8}, {0x7, 0x5}, {0x5, 0x4}, {0x3, 0x5}, {0x5, 0xa}, {0x0, 0x2}, {0x7, 0x4}, {0x6, 0x5}, {0x4, 0x7}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x0, 0x8}, {0x6, 0x9}, {}, {0x0, 0x1}, {0x0, 0x2}, {0x1, 0x8}, {0x6, 0x3}, {0x2, 0xa}, {0x5, 0x3}, {0x7, 0x6}, {0x6, 0x8}, {0x7, 0x9}, {0x6, 0xa}, {0x0, 0x4}, {0x2, 0x3}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0xa}, {0x3, 0x1}, {0x3, 0x3}, {0x6}, {0x4, 0x8}, {0x1, 0xa}, {0x3}, {0x7, 0x8}, {0x0, 0x9}, {0x5, 0x4}, {0x1, 0x9}, {0x5, 0x8}, {0x2, 0x1}, {0x2}, {0x4, 0xa}, {0x0, 0x8}, {0x1, 0x6}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x3}, {0x6, 0x4}, {0x6, 0x3}, {0x0, 0x7}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x18, 0x36, 0x1, 0xc, 0xd, 0x30, 0x5, 0x36, 0x6c, 0x36, 0x18, 0xc, 0x18, 0x5, 0x28, 0x2, 0x5, 0x9, 0x25, 0x6c, 0x24, 0x10, 0x36, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6091, 0x945, 0x3, 0x3, 0xa3b4, 0x0, 0xfff2, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x21, 0x5, 0x12, 0x6, 0x4, 0x30, 0x60, 0x18, 0x6c, 0xc, 0x23, 0x48, 0x3, 0x6]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x16, 0x0, 0x60, 0x1, 0x30, 0x6c, 0x1b, 0x48, 0xb, 0x1b, 0x2, 0x6, 0xc, 0x28, 0x0, 0x1, 0x1, 0xb, 0x5, 0x6c, 0x18, 0x6c, 0x36, 0x60, 0x16, 0x1, 0x48, 0x30, 0x24, 0x12, 0x5, 0x1c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x0, 0x6, 0x101, 0x6, 0x401, 0x1, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xbde, 0x8, 0xfff, 0x5, 0xffc0, 0x3, 0x7]}}]}, @NL80211_BAND_5GHZ={0xcc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x4, 0x8000, 0x0, 0xa0ed, 0x5, 0x5]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x12, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x2, 0x7}, {0x3, 0x8}, {0x0, 0xa}, {0x3, 0x5}, {0x5}, {0x7}, {0x1, 0x9}, {0x6, 0x6}, {0x3, 0x4}, {0x7, 0x7}, {0x0, 0x7}, {0x5, 0x6}, {0x7, 0x1}, {0x0, 0x4}, {0x1, 0x2}, {0x1, 0x2}, {0x4, 0x5}, {0x7, 0x5}, {0x3, 0x9}, {0x7, 0x7}, {0x0, 0x3}, {0x1, 0x3}, {0x4, 0x7}, {0x0, 0x8}, {0x7, 0x3}, {0x0, 0x2}, {0x2, 0x6}, {0x7}, {0x5, 0x4}, {0x4, 0x4}, {}, {0x7, 0x8}, {0x6, 0x3}, {0x1, 0x4}, {0x6, 0x8}, {0x5, 0x4}, {0x5, 0x9}, {0x2, 0x3}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x3}, {0x2}, {0x7, 0x1}, {0x2, 0x9}, {0x6, 0x1}, {0x1, 0x7}, {0x2}, {0x7}, {0x6, 0x6}, {0x3, 0x6}, {0x6, 0x8}, {}, {0x0, 0xa}, {0x1, 0x2}, {0x1, 0x1}, {0x4}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x6, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x6}, {0x4, 0x3}, {0x7, 0x4}, {0x5, 0x7}, {0x2, 0x6}, {0x6, 0x4}, {0x6, 0x4}, {0x0, 0xa}, {0x1, 0xa}, {0x2, 0x9}, {0x2, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x2, 0x1}, {0x7}, {0x1}, {0x0, 0x2}, {0x5, 0x9}, {0x4, 0x3}, {0x1, 0x1}, {0x0, 0x7}, {0x7, 0x4}, {0x0, 0x2}, {0x5, 0x9}, {0x2, 0x4}, {0x7, 0x5}, {0x6, 0xa}, {0x5, 0x9}, {0x0, 0x9}, {0x6, 0x3}, {0x6, 0x4}, {0x1, 0xa}, {0x1, 0x1}, {0x5, 0x2}, {0x7, 0x4}, {0x1, 0x8}, {0x6, 0x1}, {0x6, 0x6}, {0x5, 0x1}, {0x2, 0x5}, {0x6, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x3, 0x1}, {0x5, 0x3}, {0x4, 0x7}, {0x5, 0x6}, {0x4, 0x6}, {0x5, 0x5}, {0x4, 0x9}, {0x4}, {0x4, 0x1}, {0x3, 0x3}, {0x4, 0x8}, {0x7, 0x3}, {0x7, 0x6}, {0x1, 0x4}, {0x3, 0x6}, {0x1, 0x5}, {0x3, 0x6}, {0x5, 0x9}, {0x6}, {0x0, 0xa}, {0x3}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6a, 0x36, 0x1, 0x1, 0xc, 0x16, 0xc, 0x4, 0x5c, 0x6c]}]}]}]}, {0x11c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xc8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x4, 0x1}, {0x5, 0x5}, {0x4, 0x7}, {0x3, 0x1}, {0x0, 0x6}, {0x3, 0x1}, {0x1, 0x4}, {0x0, 0xa}, {0x7, 0x6}, {0x4, 0x7}, {0x0, 0x1}, {0x5, 0x7}, {0x2, 0x7}, {0x3, 0x1}, {0x3}, {0x1, 0x5}, {0x3, 0x7}, {0x0, 0x1}, {0x0, 0x3}, {0x5, 0x2}, {0x5, 0x8}, {0x7, 0x9}, {0x1, 0x5}, {0x7}, {0x3, 0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x3}, {0x6}, {0x5}, {0x1, 0xa}, {0x2, 0x6}, {0x0, 0x7}, {0x0, 0x4}, {0x3, 0x4}, {0x1, 0x3}, {0x1, 0xa}, {0x6, 0x8}, {0x4, 0x8}, {0x6, 0x1}, {0x3, 0x6}, {0x2, 0x6}, {0x2, 0xa}, {0x6}, {0x7, 0x9}, {0x4, 0x5}, {0x7, 0x7}, {0x5, 0x8}, {0x1, 0x4}, {0x6, 0x9}, {0x0, 0x5}, {0x1, 0x7}, {0x2, 0x6}, {0x7, 0x7}, {0x5, 0x5}, {0x5, 0x4}, {0x0, 0x2}, {0x2}]}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xb, 0x2e8a1b67c49a0033, 0x14, 0x24, 0xca3fa4639f5c793d, 0x18, 0x3, 0x6c, 0x1b, 0x12, 0x36, 0xc, 0x6, 0x0, 0x6c, 0x5, 0x9, 0x30, 0x24, 0x0, 0x16, 0x12, 0x24, 0x3, 0x48, 0x16, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1}, {0x6, 0x1}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0x5}, {}, {0x0, 0x8}, {0x6, 0x1}, {0x3, 0x4}, {0x4, 0x7}, {0x7, 0x2}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x4, 0x5, 0x12, 0xc, 0x1b, 0x30, 0x0, 0x3, 0x7a, 0x36, 0xc, 0x4, 0x4, 0x6, 0xc, 0x60, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0xc, 0x2, 0x18, 0x3d, 0x16, 0x24, 0x9, 0x16, 0x16, 0x4, 0x3, 0xc, 0x36, 0x24, 0x16]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x79}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa}]}]}, @NL80211_ATTR_TID_CONFIG={0x420, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x18}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5a}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x24, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x395, 0x8, 0x4, 0x616, 0x3, 0x4, 0x7f, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x14}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x416}]}, {0x314, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xea}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2ec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x2, 0x7, 0x0, 0x9, 0x400, 0x3, 0x1000]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0x6e, 0x4, 0x9, 0x36, 0x12, 0x12, 0x18, 0x36, 0x2, 0x4, 0xc, 0x6c, 0x5, 0x2e, 0x18, 0x48, 0x6c, 0x30, 0x12, 0xb, 0x18, 0x30, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x6, 0x81, 0x7, 0x5, 0x9, 0x401, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf591, 0x2, 0x6, 0x9, 0x2, 0x7, 0x9, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x1, 0xb5d, 0x0, 0x0, 0x7, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0xb, 0x36, 0x16, 0x6c, 0x16, 0xb, 0x48, 0x6c, 0x9]}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x36, 0x2, 0x30, 0x1b, 0x9, 0xb, 0x1, 0x30, 0x36, 0x60, 0x1, 0x24, 0x6c, 0x48, 0x3, 0xb, 0x68, 0x0, 0x6f, 0x48, 0x5, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x7, 0x1ff, 0x4, 0x1ff, 0x9, 0x7fff, 0x10]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x6, 0x43, 0x4, 0x6, 0x5, 0x35, 0xb, 0x18, 0x9, 0x48, 0x1, 0x12, 0x3, 0x16, 0x48, 0x1b, 0x2, 0x18, 0x9, 0x24, 0x60, 0x12, 0x6, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x200, 0x6, 0x18, 0x8, 0xd, 0x5, 0x283]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8, 0x5, 0x6, 0x9, 0x9892, 0x1, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0x8}, {0x1, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x1, 0x5}, {0x0, 0xa}, {0x1, 0x8}, {0x0, 0x5}, {0x3, 0x4}, {0x5, 0x4}, {0x0, 0x1}, {0x2, 0x5}, {0x0, 0x2}, {0x7, 0x6}, {0x1, 0xa}, {0x2}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x1}, {0x1, 0x4}, {0x0, 0x4}, {0x3, 0x5}, {0x6, 0x8}, {0x3, 0x8}, {0x3, 0x9}, {0x1, 0x5}, {0x1, 0x4}, {0x2, 0x5}, {0x1, 0x8}, {0x3, 0x1}, {0x6}, {0x0, 0x5}, {0x4, 0xa}, {0x3, 0x3}, {0x5, 0x9}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1b, 0x16, 0x6, 0x9]}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xb, 0x3, 0x3, 0xc, 0xb, 0x12, 0xc, 0x2, 0x3, 0x12, 0x24, 0xb, 0x60, 0x30, 0x12, 0x2, 0x3, 0x60, 0x18, 0x1, 0xc, 0x16, 0x9, 0x16, 0x3, 0x60]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x3, 0x6, 0x3, 0x3, 0x100, 0x400]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x5, 0x4, 0x12, 0x1b, 0xc, 0x5, 0x12, 0xc, 0x16, 0x9, 0x1, 0xc, 0x1b, 0x24, 0x9, 0x6c, 0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1, 0xbe, 0x81, 0x7f, 0x0, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x200, 0x7, 0xb, 0x0, 0x1, 0x213, 0x100]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x9, 0x9, 0x1, 0x10, 0x36, 0xc, 0x30, 0xb, 0x1, 0x12, 0x4, 0x4, 0x16, 0x9, 0x64, 0x18, 0x1b]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x4, 0x4, 0x0, 0x300, 0x7, 0x8000, 0xb5d3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4983, 0x5, 0x0, 0x80, 0x9, 0x3, 0x71f5, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xffff, 0x4, 0x100, 0x5, 0x2, 0xcd15, 0x4a9]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x3, 0x24, 0x18, 0xc, 0x1, 0x7b, 0x9, 0x24, 0x36, 0x48, 0xb, 0x1, 0xc, 0x48, 0x8a, 0x24, 0x30, 0x36, 0x2, 0x4, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x3, 0x897, 0x64, 0x9, 0x3a0, 0x3f]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xef}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaf}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}]}, @NL80211_ATTR_TID_CONFIG={0x148, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3c}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xec}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x84, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x6c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0xc, 0x26, 0x4, 0x1b]}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc5, 0x7000, 0x0, 0x40, 0x8, 0x0, 0x200, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xfff8, 0x7f, 0x9, 0x8, 0xffff, 0x7, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x712, 0xa1b2, 0xada, 0x1, 0x81, 0x1, 0xc, 0xcb8]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x9, 0x16, 0x15]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0xfffe, 0x9, 0x8, 0x0, 0x8, 0x7]}}]}]}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}]}]}]}, 0xca0}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendto$packet(r8, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 23.236385784s ago: executing program 0 (id=2872): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x4, 0x420, 0x9, {}, {0x0, 0xea60}, {0x4, 0x0, 0x1}, 0x1, @canfd={{0x2}, 0x36, 0x3, 0x0, 0x0, "f20cd867bebf62a2e230b92ed57a2f8094e35889087647180e00e0e869c96d0db0d3db025cd25ba5d8f497539fce433fb582b10a9c323cd9c0e7b0bc93f0896e"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x88c1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20000014}) 12.014654937s ago: executing program 1 (id=2941): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000054) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000040)=0x76, 0x29) bind$inet(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, 0x0, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x9, 0x1a, &(0x7f0000000000)=""/26, 0x60880, 0x20, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)=[{0x5, 0x3, 0x10, 0xb}], 0x10, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) socket$l2tp6(0xa, 0x2, 0x73) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet(0x2, 0x4000000000000001, 0x0) 7.237915614s ago: executing program 1 (id=2955): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYRES32=r1], 0x2c}}, 0x40080) 6.843480737s ago: executing program 1 (id=2956): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c12) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000005f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004004) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000080)={0x21, @loopback, 0x4e22, 0x4, 'sed\x00', 0x8, 0x10, 0x76}, 0x2c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdfc6ea55887dfa18d0aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37df95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14ecadd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50ab12b13c1b8ce93093a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841acee7c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a93225a81feb08f5"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r6, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff870013e0fffd0200000000", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.667983712s ago: executing program 3 (id=2960): r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @private1, 0x0, 0x1}, 0x80, &(0x7f0000000240)=[{0x0, 0x2b}], 0x1}, 0x4048810) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) ioctl$FITHAW(r1, 0xc0045878) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="277f7bd0c877f3ac80d5a8952a5e306f3404fd594891f3a0cb68f66686"], 0x48) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x9, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f00000003c0)={0x3, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x6}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000180)='L', 0xfffffffffffffdf0, 0x4000c8d5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000780)=@nat={'nat\x00', 0x1b, 0x5, 0x3e0, 0x0, 0xd8, 0xffffffff, 0xd8, 0x180, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, &(0x7f0000000400), {[{{@ip={@local, @multicast1, 0xff, 0xffffff00, 'netdevsim0\x00', 'vlan1\x00', {0xff}, {0x101}, 0x21, 0x0, 0x11}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x11c, 0x2, 0x1, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2, @rand_addr=0x64010101, @rand_addr=0x64010101, @gre_key=0x9, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @dev={0xac, 0x14, 0x14, 0x34}, @dev={0xac, 0x14, 0x14, 0x38}, @gre_key=0x24ef, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1e, @empty, @local, @gre_key=0x3, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0xf6}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x0, 0x2, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x6, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e20, @port=0x4e24}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000180c200000e88a8000081000002080045220014006500001006"], 0x2a) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x5, 0x4, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0xc, 0xfc0, 0x65, 0x0, 0xd, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfce) 5.221549468s ago: executing program 4 (id=2961): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8931, &(0x7f0000000080)={'bridge_slave_1\x00', @ifru_data=0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0x2}]}, 0x10) close(r2) ioctl$sock_proto_private(r1, 0x8b22, &(0x7f0000000080)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x40000, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2e}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.500625195s ago: executing program 2 (id=2963): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) readv(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x81}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in=@multicast1, 0x3501, 0x5, 0x0, 0x0, 0x0, 0x9}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff0000000000000000100000000000000005000000000000000000000000200000000000000000000000000000000000000100020200000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000a00, 0x0, 0x6}, 0x2c) 4.301308511s ago: executing program 1 (id=2964): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01707"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414, 0x0, 0x24}, 0x28) 4.090754476s ago: executing program 4 (id=2965): socket$kcm(0x2, 0x0, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000110400000000000000000000000000000d03000000000000000000000400000000000000000000000503000000000000"], 0x0, 0x52}, 0x28) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xec, r1, 0x204, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf9b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002600000002000000ffff000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r4, &(0x7f0000000540), 0x0}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500200000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r3, @ANYRESOCT=r2, @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x18, 0x11, 0x1, @empty, @empty, {[], {0x0, 0x4e21, 0x18, 0x0, @wg=@data}}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_getroute={0x1c, 0x1a, 0x100, 0x70bd27, 0x25dfdbfc, {0x2, 0x10, 0xa0, 0x7, 0xfd, 0x2, 0x36, 0xa, 0xc00}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x81) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x88, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x6c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x50, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xb90}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xb}, @NL80211_ATTR_SCAN_SSIDS={0x18, 0x2d, 0x0, 0x1, [{0x14, 0x0, @random="47f4f9953838aff32786693da65b72ec"}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xa, 0xd}}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BSSID={0xa}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}]}, 0x88}}, 0x40004) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r8, @ANYBLOB="010002fffffffdffffff1d08000008000300", @ANYRES32=r7, @ANYBLOB="dc002f800c00020000000000000000000800010000000000c4000380050002000300000005000200020000000c00050005000000000000000c0005000300000000000000080001"], 0xf8}}, 0x0) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x4000000) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[], 0x5c}}, 0x40c4) 4.055492575s ago: executing program 2 (id=2966): epoll_create1(0x0) socket(0x1, 0x80802, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) epoll_create1(0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff000082009500"], &(0x7f0000000000)='GPL\x00', 0x8, 0xff, &(0x7f0000000300)=""/255, 0x41100}, 0x94) 3.924390512s ago: executing program 1 (id=2967): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x100000000000000, 0x0, 0x800}, 0x8900) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) 3.62486975s ago: executing program 2 (id=2968): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @remote, 0x2}, 0x1c) shutdown(r3, 0x1) setsockopt(r3, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, r5, 0x83625fc5352ba305, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x20008000) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r7, &(0x7f0000001740)=[{{&(0x7f0000000440)={0x2, 0x4e23, @rand_addr=0x64010103}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000180)="c2", 0x1}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000016c0)}}], 0x2, 0x2004c044) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000100)=0xc0, 0x3f) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x14, 0x30, 0x871a15abc695f91d, 0x0, 0x80000}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) pipe(&(0x7f00000002c0)) 3.330668917s ago: executing program 1 (id=2969): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f00000000c0)={0x6, 'veth0_to_batadv\x00', {0x1ff}, 0x5}) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) recvfrom$packet(r1, &(0x7f0000000100)=""/223, 0xdf, 0x8001, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) 2.997566223s ago: executing program 2 (id=2970): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1000000274f40d030000000000000000"], 0x10}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0)=0x2, 0x4) unshare(0x60000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000f000713c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000003", 0x2b}], 0x1}, 0x4005) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xcb4}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '}\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0xfffffffd}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xa, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x702, 0xff61, 0x0, &(0x7f0000000a40)="e402004470d8d400eb00c15286dd94945ce296f162f1489768c8c3cfd6d5225fc1204ccf1bf9febd0d25aaaa49d4ea55395beec17ac8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.921149444s ago: executing program 3 (id=2971): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500030000000500", @ANYRES8=r1], 0x7c}}, 0x0) 2.879995758s ago: executing program 4 (id=2972): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/127, 0x9}, 0x1f8}], 0x1, 0x40000002, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000001180)={{r0}, "8d91ea3bc45cdc38260e61ddf3378da6fa04c232252f0ae4576cbf5652899c0b5432670aa784751057a2df2a60052681defeecc193d2825bd39d8a7399e5ecb6ea509501ad5dd666e2cea0ae39c6e510192167fb5d6b8c815efe35eb0135c94a4fd5cbb9de51ecb70b1636cdbc8e8a820c1200248cd2a17ca68fe52babd678d0f1165275e77479242b3d5090bb1ddbbc67afa2028fc1f02a71e924dbc719880242cc43b8953d472d456dfb5ce25b63cbc015e2d7b3ef3c2668053ddb04678457f942e580d83598644ca79a7bb1b5894e43110a6b94e6c1d1c0b053010dab6017d032523a71b554d0f5acacab994506b26438fe675bf2ee2e0f4a0e9aaf051f1248c5fc3d60f04a8bbaf99aade0f87b208b9980448ba7401dd898208c10e8689174c0cc2d2a97663a6b4b04f819a9ef970ce0151ac4f68c34d960cadd6eb7d2a052c78dd7819f909cc7791ed9c33cc18a4e9c8546e071b3a1ecd1991cf1ae8398e6f2d20a956a851cc737712557cf35c3ff8e2f0bb67f549f69b1076da9356041446ba2812873ca741dc2fffb92f7316740aa97ec17fad20e89d0d1888ac8666ca20cd630d540812837ca4cee9fefbfd6715b6de06baecdd785c863bceb2c8c46365a08e3f5931bee9c337493c9a31ea0a111ce5936511d1f69f227edf74dd445c2bad326d112e2e72c7c224e3bc6c783bb213ca8dd2de68321d55f9e0673a2f173c14569b672f3a1e5f931aeedb6e2b430c9bd07c5fa3f023bfdbfcb1d3743099e792fcb7eb7eec802e7ac4b15e9f9f604af1c7aaab39f2a95a7d800703f35abd406832d705465adf0be375121dfed32fa9ae7da3ac2c1165baa439b811cd54f1c38d749a3bcaadaaf4daf8c537f547d9da925f839a04fdd88878dc4aff3da89f66798d6902b90ab4248db6773d0b73e40302d3553abcf9d11a83599e17ead1cb8d5ab4549ed61b4dc2a7e0a4e70d97f8d0908349b62c1df266db64d2469390fab3d154c325865d8eebb95204b75af9959377f95b6970fc27d825e2069417310b6f487b6ceaf76495cba82e30bd20a3bf465bd62e8c13c53d15058ea68c3c90950fedad1e6245b2bf01d3141f9693f63075598f859f3985ba723d43516720edcf61649963c5d5e8ba9d6797180a786871aa9e5c4b13f89af7955e8baf67600ca2856e98d30fe8494d64253724676f19ae4d26dde1f5f8375f8ff58e65640f135f7f7d847ca854e7c0ff5572394fd3d61e89c7d62f1e4da8272cfd9bf75bc10c93d69d74f909fdaba288c7fa76d9e8be76a0b825ccd1d60690c0c264a1f45700905ce08aed5e44896162f82f8d6a309fcb83d1c8bb6fc8f4d8676466fb8d208c07260139e9e217e891798920d1d592c399dda48cbcb86f8ce8af5293f56abb7f305fcb8a809800b2d847d7df1189ba9b3bb4ee09eb0a0be00192d430dab713eac48ca9693a369ea731e1d3ff7d9279a3b64bedf467fb3fce1f354da1c6d86b075bd10398e8c74e1358e1cb69ed83512b0edc5707fe85a7dc87dd1c370bf54ec4941eecfb6d69327b52b9ca32481bdf9bcec64fec6bb1682a66a35e059e6e868645b293c24501301686e2aad469d39f422ffb5fe9e410a878a79cfc0755bd706dcda1868fb1adfaddc6a1f1aefa96eb214785ae4820330c97062018defe6a3495feded38f2b133ca5028435e48290c776ba4eca9437197faa3415aca0315acf225348f87bf4860d63e9b36039aee0d4fa56997584c3feefe0610a55c4201f7e322a136b1d8f75b313a17665d9c0f0deaf72432320c53d81d1cd6ba165e6fc6b761896794298c12559b2b9738927d85f0ccb551ff31f5654810e0d56b636013374578790a119ee58ceb9c897425911c200aac3ca5ef259b375fb7ed3d20df4c45c9a4747b3e2f5ea3d98300b4cf42c990e1aeff50b87813e7f80683860be74ac74abac735e5eb174273c39b77dac2264c6fbaf4229518e96ea98c4360c3b8ac15eb38484c3afba0963160f341411de25e2185bfdd193aa48e263153d91165aa39db6a61e7148187c59fb3b573d365d83d2d325bcc585234a8c34f802ab4881a426f627c3374c8bf130a99987d5f01520ddbc2b2f278a323e3490e75f67957ffd68d0f41e7e9ec19a827938f4ccae08ddf4e2e23937ff557c43e473db07ce28016f0c62ce107f09b6f344c58b3ed0179c26f9fa5f24a261b5fdc117207f0648645632cc9f09d5374ee60a973e288bd8d4dd520c045d59797b416e1c5c8cbd14810260665e5af7031c9bcdc34de56bb8900011784132cdfed5fbd07c60e60408175d9ab4492f42162860516457b5f3382852c089a0db598e8f836c89eb7e461739b0980f482ae0af91efdc542e138f8cb5c02b0a9c834947868140224630096092ba00f5575b4ad615abac2d5775acf5f66253f6928a32b032d2fd5940f59bcce3d99576e801d6c549d17edfdc7c8ee7d3d4125601a757e504a8dda5a0ed936082fe7f42aad0c5850ff4e6829649fe70a134ee7f4c3ea19b58a0a28217f336d2aeccd3b671644b2c0a7ec82a585da895aecbadd6f6f529feb3eb08e175cc899f49ff7fe27643babfd5afa12150cf6fdb32caffa85162f8c527bff0506b6e480a0b0ee0bd2993c30c9d1cb7d3e62d8d8bb403459397238878d4d9f76f3934e1c72ea8968abae9f3e34888a553f588ce5314e2b2aab7688596a7367da81a9db736bc8fda612abac9b25d395bf3dc34801827d484625e4a8494159d5eb0362c1853e9400772ce7f7923852ec14b7f3a6c926eadaa05f0deec7955a603d49e15fa597aa21ec754f13bb6d77f1ca4c6ed280083ef88e79049806dbfd295a4dc0807403687589719b16151482aa801c9b2bbb9529b4a7d144e8b0e77731a1423aca4a21e57eb0cf094472de553dc09bf4e50cab581f2908c068785b83f76dac5a0ef5cbca4e3710e33712b2f6d8490c765d1ba7cf62a9f1a0085e8f46686f088e64f5d4403cf0e16e024834790e8f51d0967160efde119e518f93f50819092ebb4459efab06613a4162d3f7c19af72ae194c8dfe18a2f5bf6d4bb9e109afc5c30bc122a957af51a49cafc47ca1cdbbd0a6669c040e8beebe843434f3cb45b8808949112a884ae2bd454d913fe360aca591e4a853fab858a59c7e5f2f559b2221734283f00961e32532f504e9b70a6b9a914e12ac3b2bbfa2be7fcb3a3408f8131d0451c12beec11270f9225d8c36c3b86b84bd006191f52a5308f7e2984cee31c3135e736380a1d85f24a0ba23a06189d0a2ab04624e8d87234489f0d2ad1cff5b1b34945af8ea9252cbd167270f43574488b320cefaf528662885d3fd03257e5ad654b8ec38c56fdf9585eddaf91d4a8766e09232830b4cc88b7d33fa12f0e853ec15e2e2a4627e3044f3be28abe8f08449e45aa8876d08de04e12a750b153f37a8867d6e0b19496a1d1159923af09522e703eda8f000b4ad51c7747cf2291a28a0719ae4bbb5828190d151bb9f3bd60e050d14601bd20635ce127b274299d197590350fa857342997fb6d7c4a990aaefc66766b2b4195baad99c3b676f250941c7fa9286ac567a6c60ccf49637d53ca3352c26458e3d0b97151ebfbc4c7cffc0bf7dfd17d46064a3868e16a3d3cc289e6581fc1d698180b4d87a46be083e87842a1d4d2339a38ec2ea2c091d87740a175baf141d32892412c07bb3fcdbdb5b5e84cf4a896614b689b770a07bfecce82a1438f003695d13eaee0d08f7ef1cc9ef2975388d3f739f93e660d10ff3d24f391e9197e573306905c5fd3325036199dfe0f6993e1995a08a09244eaf05c28b10f2158c97fd1519cf531187d082b3e6d4802b17bca716f0e92099585d621f22813ebf7f8c0ea0de7bb0f152e24e7ae02b9d0fcd8a73bfe833753a3c1aa9f0b32e15572bf3e034d08e4360c0779a7cac7c127fbf160468a5fb7f463df9233fcb7feddc092e755adaae9154884a4eb86e85c45fa471384b82593844f21058e20ed4691378b56089fcd2f2a5e3b1c6053f6b12658b6e009ec475b9b221512992cfc596c65878e2dc51fe8e14600205aa810e791ccaf2ee450a2d351e07fab09436e00b9520ec7e8077bf819a08fd5a209ffb88879c70a531ac388b9820a96978ed6c9a3de7870ac6a6e42de7438e2ce33d6a7db2fc90c0158324e72d2442786ab6129301c5943341fbc90fdd1151d4842d5165ab01c56d6cf4af5530ec80eddd3b4db5126d9ab7f3ef7c6654937b5e4a731e97219213ee7cd1137f6f29fecb3f0f3a1ff7a854e78c9ded249fbf373fe9285bb482b5371d39aefdaf9cf30b782faf83800018bf16c90607c2e3b330224d587bf178c0b4d3f7dc7b8ff310278624c67382e8cfc0434e81406bb37c44ba3a7967d7ba0dfe28a3137c99ca7a9d5270f505c279184f875c499e01e519807632e497c0295cf4cf5d38b2cb72baa7e7325dc63a9f62593ff9ec1f3bf4da4467a054f65e08ad054ce3340e4d983decb972cef58d749505f235e674a2d25628d7e0fd1789e751112a8989811026f4caf2270a990981c02f19f42853909b19f01dc3b94ad1ed9b2ba8e9dbb349b049101ebcbe318a65ae6b127157e2bc5e38dbada7cc54c2fd9f9d1e5787c5ed3764875dad8381b03f0705544782a710a2942d60551ef020a935c1fa98069711734eb509bafa1a71312ab24c26f8f20f377d85bf5f043fbe97bccfd617a236912b41254f44ce972b6104cf65a2739d6cd2d55ea276406373506343803b81f68aa7ce26356d589ebf03bdfe22f93166dd6a420519fefd1775819f2ca83d57b8e44fee3cc041a2c263d957c25faa0bda1753ccf95045b81215df10aaa4c24314643e1533366684ce09c6be1d8f39c626a4214a03f1e8edd15b18e29594b6ab9036d4238fbba7b683dde25043ed7c8807a58038fa75832573b5d484be6424116d61a885da8454b3c4dff2ca09bc20995d4d52ada330beb836b926d653accea9e38aed0792449b145682aa74aa63b54ba5bd20b5817a9b07f134accfc71ad76c69c444e50c881677a201e63d6903e661166432c52349271c6fc58306881f40d65e32fbb85b52faacc9421c3274b3b584089b2496af6fb25365c8cd84e33c46c5e30c86d1a09db1a0505b1ba55ad01e18a69639ef0e0f6dc91d11743acb37c1e6e103d065ba34b9727d179e30a5f5be351aaca770008a28cd944b248e2bca3c258bcd278b531e26b94afae5af53f92602bec7d072df6dbfde5c8817c4d6c0a2b66ff12ebeac74f6feb05a735879f1de54bd855054a9b2a03f86bd3ad72f91263f538a5028203cc3595013283db4a850335d624beced8ae95b01cd7d0816fce02ed6f58b3f5725ffa435bb4e2cd88983435cb5e105df7341a2ae3de3bb9f33ed366bdca1fbb7a87524117304cbe9bb433b0cf4ee4502d04151598f9d11e642dfa9aad6bd42e3dff75896c563fe28f9773392bc6bd766032f4f6fb6e1b940dc4b8b614fffbbf44ce34403a4cfc2d93aceede69590b43205aca1d10980dd9fe2e6b53a19e4fee8b8f9784a5e4c2686f230c3f6288156250938f92114c46e06cd97e4d635fdcccf5548cff8f54ff3f3de3dc9826e92862dc96e8a3c9b5e392f8f7b1c9d5695f6b83cc64e8d603615e7cff20983ca3323d89b720e7431e99000a74997390d639d24fb6562935014fd36d9acf046b757598865f4d57f3f23d2d276eb64978b777f23540fb764d88b9a8750b316d3084f9f314013d10f4e9de3b19f35238a20e970c17739d570809e27a91bcbf4dbec05ac614"}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x48, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vlan0\x00'}) 2.398878064s ago: executing program 3 (id=2973): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x22) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0xd, 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) 1.873247111s ago: executing program 4 (id=2974): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8931, &(0x7f0000000080)={'bridge_slave_1\x00', @ifru_data=0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0x2}]}, 0x10) close(r2) ioctl$sock_proto_private(r1, 0x8b22, &(0x7f0000000080)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x40000, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2e}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffff, 0x1, 0xfffff000, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0xffffffe1, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x7, 0x30000000, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x100007}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.78794602s ago: executing program 2 (id=2975): socket$kcm(0x2, 0x0, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000110400000000000000000000000000000d03000000000000000000000400000000000000000000000503000000000000"], 0x0, 0x52}, 0x28) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xec, r1, 0x204, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf9b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002600000002000000ffff000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r4, &(0x7f0000000540), 0x0}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500200000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r3, @ANYRESOCT=r2, @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x18, 0x11, 0x1, @empty, @empty, {[], {0x0, 0x4e21, 0x18, 0x0, @wg=@data}}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_getroute={0x1c, 0x1a, 0x100, 0x70bd27, 0x25dfdbfc, {0x2, 0x10, 0xa0, 0x7, 0xfd, 0x2, 0x36, 0xa, 0xc00}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x81) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x88, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x6c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x50, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xb90}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xb}, @NL80211_ATTR_SCAN_SSIDS={0x18, 0x2d, 0x0, 0x1, [{0x14, 0x0, @random="47f4f9953838aff32786693da65b72ec"}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xa, 0xd}}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BSSID={0xa}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}]}, 0x88}}, 0x40004) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r8, @ANYBLOB="010002fffffffdffffff1d08000008000300", @ANYRES32=r7, @ANYBLOB="dc002f800c00020000000000000000000800010000000000c4000380050002000300000005000200020000000c00050005000000000000000c0005000300000000000000080001"], 0xf8}}, 0x0) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x4000000) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[], 0x5c}}, 0x40c4) 1.040685283s ago: executing program 4 (id=2976): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01707"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414, 0x0, 0x24}, 0x28) 946.11149ms ago: executing program 2 (id=2977): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x5, 0xa, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000340000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0xff}}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r6}, 0xc) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) r12 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000e00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b00)={0x240, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x8, 0x3}}}}, [@NL80211_ATTR_IE={0x5e, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x7f}, 0x8, 0x9, @device_a, 0xced, 0x4, 0xe3}}, @prep={0x83, 0x1f, {{}, 0x5, 0xfc, @device_a, 0xef, @void, 0x3, 0x3, @broadcast, 0x401}}, @ht={0x2d, 0x1a, {0x0, 0x0, 0x3, 0x0, {0x410, 0x1, 0x0, 0x237, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x6, 0x4, 0x6}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xb9, 0x68, 0x1}}]}, @NL80211_ATTR_IE={0x1b8, 0x2a, [@ht={0x2d, 0x1a, {0x8000, 0x1, 0x4, 0x0, {0x2, 0x7f, 0x0, 0x5, 0x0, 0x1, 0x0, 0x3}, 0x1, 0x1ff, 0xb}}, @erp={0x2a, 0x1}, @perr={0x84, 0xb6, {0x7, 0xc, [{{0x0, 0x1}, @device_b, 0xfffffffb, @value, 0x1d}, {{}, @broadcast, 0x9, @void, 0x8}, {{}, @device_b, 0x4, @void, 0x12}, {{}, @device_b, 0x9, @void, 0xd}, {{}, @broadcast, 0xffffdffa, @void, 0x9}, {{}, @device_a, 0xa932, @void, 0x27}, {{0x0, 0x1}, @device_a, 0x6, @value, 0x5}, {{}, @device_a, 0xc67, @void, 0x33}, {{}, @device_b, 0x9, @void, 0x10}, {{0x0, 0x1}, @broadcast, 0x4a7, @value=@broadcast, 0x38}, {{0x0, 0x1}, @device_b, 0x4, @value, 0x18}, {{}, @device_b, 0x2, @void, 0x11}]}}, @ibss={0x6, 0x2, 0xfffe}, @gcr_ga={0xbd, 0x6, @broadcast}, @perr={0x84, 0xcf, {0x2, 0xd, [{{0x0, 0x1}, @broadcast, 0x80000001, @value, 0x3b}, {{}, @broadcast, 0x7fff, @void, 0x8}, {{0x0, 0x1}, @device_a, 0x7fffffff, @value=@broadcast, 0x28}, {{}, @broadcast, 0x0, @void, 0x2a}, {{}, @device_a, 0x1, @void, 0x41}, {{}, @device_b, 0x4, @void, 0x24}, {{0x0, 0x1}, @broadcast, 0x9, @value=@broadcast, 0x2c}, {{}, @device_a, 0x9, @void, 0x14}, {{0x0, 0x1}, @broadcast, 0x2, @value=@device_b, 0xf}, {{0x0, 0x1}, @device_a, 0x6, @value=@broadcast, 0x36}, {{}, @device_b, 0xccb, @void, 0x29}, {{0x0, 0x1}, @device_a, 0x4, @value, 0x21}, {{}, @broadcast, 0x8, @void, 0xf}]}}]}]}, 0x240}}, 0x24000014) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r12, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r7, @ANYRES16=r11, @ANYRESOCT=r4], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r8, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d0984e7e6db7f90c5b959a5231eb5d6615538d482", 0x2c}], 0x2) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000200)={0x4bc, 0x0, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [{{0x254, 0x1, {{0x3, 0x5}, 0xb, 0x73, 0x7, 0x2, 0x23, 'syz0\x00', "aca6b73d76c20f44751fc8371ecdb97f2e13e0ce0a2e0ba4a3dc387add700399", "ff00dcf336bf5798c54ccd06b0de35f71d2d19748984bbc3923aea7ec2ad02ae", [{0x7, 0x970, {0x3, 0xdfc1}}, {0x8, 0x9e4, {0x1, 0x2}}, {0xf, 0x0, {0x0, 0x5}}, {0x9, 0xc248, {0x0, 0x5}}, {0x3, 0x0, {0x1, 0x4}}, {0x200, 0x6, {0x0, 0x6164}}, {0x9, 0xc329, {0x1, 0xd}}, {0x3, 0x0, {0x3, 0x9}}, {0xf4, 0x0, {0x0, 0x8}}, {0xfb2b, 0x0, {0x3, 0xfff}}, {0x1, 0x7fff, {0x1, 0xfffffeff}}, {0x4, 0xc2, {0x3, 0x1c7}}, {0x5, 0x4, {0x2, 0x4}}, {0x9, 0x65, {0x1, 0x81}}, {0x86d3, 0x6, {0x2, 0x10001}}, {0x40, 0x72e, {0x1, 0xa}}, {0xe7c0, 0x101, {0x1, 0x7}}, {0x1, 0x5, {0x2, 0x4}}, {0xba, 0x6, {0x3, 0x19}}, {0x100, 0x8, {0x1, 0xfff}}, {0x5, 0xc281, {0x2, 0x3}}, {0x81, 0x1, {0x0, 0xffff}}, {0xff, 0x7, {0x1, 0xffffffa7}}, {0x1ff, 0x1, {0x0, 0x1}}, {0x1, 0x9, {0x1, 0x7ff}}, {0x6, 0x5, {0x0, 0x1}}, {0xfffd, 0xff, {0x2, 0x3}}, {0x7, 0x7110, {0x0, 0x10001}}, {0xc, 0x9, {0x1, 0x1}}, {0x4, 0x9, {0x0, 0xfffffffe}}, {0x3, 0x7b, {0x0, 0x3}}, {0xde, 0x2, {0x1, 0x2}}, {0x800, 0x80, {0x2, 0x2}}, {0xff, 0xfffe, {0x3, 0xfffffff7}}, {0x7f, 0x9, {0x1, 0x8b}}, {0x9, 0x2}, {0x1, 0x26e9, {0x2, 0x1}}, {0x5, 0x2, {0x3, 0x2}}, {0x6eb9, 0x401, {0x3, 0x1}}, {0x0, 0x5, {0x2, 0xfcf}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0xe, 0x8, 0x2, 0x6, 0x16, 'syz0\x00', "8a74c8c7e3f1d0efb9c388053f34914227b51500e12a8678776c0bb5b454b6fe", "d108535bbb25822eb4c8e1164f9fc17c868a5ff8e1a70ef3fea139650ca4ea61", [{0x1, 0x2, {0x2, 0x400}}, {0x2, 0xfff, {0x0, 0x73b2}}, {0x1, 0x7, {0x1, 0xb3d}}, {0xd0ca, 0xef, {0x1, 0x5}}, {0x9, 0x1, {0x1, 0x3}}, {0xc82d, 0x6, {0x1, 0x3}}, {0x0, 0xa, {0x0, 0x2}}, {0x3ff, 0x5, {0x3, 0x7}}, {0x3, 0xac, {0x3, 0x18a}}, {0x1, 0xf, {0x1, 0x8}}, {0x3ff, 0x5, {0x1, 0xf75}}, {0x0, 0x7, {0x0, 0xf2dc}}, {0x4, 0x100, {0x1, 0x8443}}, {0x1, 0x3, {0x1, 0x7}}, {0x400, 0x4, {0x3, 0x6}}, {0x8, 0x0, {0x3, 0x1}}, {0x101, 0x7, {0x3, 0x1}}, {0x2, 0x0, {0x0, 0x4}}, {0x1, 0x9, {0x2, 0x57}}, {0xf15, 0x9d5, {0x1, 0x6}}, {0x8, 0x6, {0x1, 0x5}}, {0x1, 0x4, {0x1, 0x8}}, {0x0, 0x5, {0x2, 0x9}}, {0x7, 0x40, {0x2, 0x6}}, {0x4, 0x81, {0x3, 0xfff}}, {0xb, 0x8000, {0x3, 0x8}}, {0x3ff, 0x6, {0x0, 0x10001}}, {0xbb7a, 0x4, {0x3, 0x9}}, {0x1, 0x0, {0x2, 0x84}}, {0x8, 0x2, {0x3, 0xa}}, {0x3000, 0xa, {0x2, 0xfffffff9}}, {0x1, 0x3, {0x0, 0x3}}, {0x0, 0x1, {0x3, 0x8001}}, {0x1, 0x3, {0x3, 0x101}}, {0x3, 0x760, {0x2}}, {0xff, 0x6c0b, {0x0, 0x5}}, {0x5, 0x7, {0x2}}, {0x3, 0x2, {0x2, 0x4d3}}, {0xffff, 0x8, {0x2}}, {0x8, 0x5, {0x1, 0x9}}]}}}]}, 0x4bc}}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r14 = socket$unix(0x1, 0x2, 0x0) bind$unix(r14, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 768.0025ms ago: executing program 4 (id=2978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b160000000000000000020000084c00048018000180080001006f7366000c000280080001400000000430000180080001006e617400240002800800014000000000080005400000001708000640000000000800024000ddff010900010073797a30000000000900020073797a3200"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100"], 0x38}}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r4, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x2, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x110) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x2, @empty, 0x4e24, 0x0, 'none\x00', 0x14, 0x3, 0x33}, {@local, 0x4e23, 0x1, 0xe5, 0x400, 0x40}}, 0x44) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x52}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=ANY=[@ANYBLOB="380000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100804000100000008001b000000000008002900000001"], 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000002c0)={r5, &(0x7f0000000100)='-/^\x00', 0x8200, &(0x7f0000000140)={@align=0xa, {0x3, 0x9, 0x8279, 0x10001}}, 0x4, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x9c82}) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x0, 0x1c, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP2_TO={0x0, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x0, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xfffff801}, @IPSET_ATTR_PROTO={0x0, 0x7, 0xc}, @IPSET_ATTR_IP={0x0, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x100048d3}, 0x880) 421.894816ms ago: executing program 3 (id=2979): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @remote, 0x2}, 0x1c) shutdown(r3, 0x1) setsockopt(r3, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, r5, 0x83625fc5352ba305, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x20008000) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r7, &(0x7f0000001740)=[{{&(0x7f0000000440)={0x2, 0x4e23, @rand_addr=0x64010103}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000180)="c2", 0x1}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000016c0)}}], 0x2, 0x2004c044) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000100)=0xc0, 0x3f) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x14, 0x30, 0x871a15abc695f91d, 0x0, 0x80000}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) pipe(&(0x7f00000002c0)) 278.53893ms ago: executing program 3 (id=2980): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fffffff300000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 0s ago: executing program 3 (id=2981): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x2, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x50) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000340)='memory.events\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r6, 0x20, &(0x7f0000000500)={&(0x7f0000000380)=""/222, 0xde, 0x0, &(0x7f0000000480)=""/106, 0x6a}}, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r7, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40004}, 0x4040000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x100, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r3) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r10, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r4, 0x4, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r1, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0xc010) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r0) sendmsg$IEEE802154_ADD_IFACE(r11, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r12, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x90) ioctl$XFS_IOC_EXCHANGE_RANGE(r6, 0x40285881, &(0x7f0000000c00)={r9, 0x0, 0x2, 0xfff, 0x9, 0xb}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c40)={'ipvlan1\x00'}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r13, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x4c, r14, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x80c0) sendmsg$nl_route(r6, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)=@getneightbl={0x14, 0x42, 0x20, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000ec0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): T11836] CPU: 0 UID: 0 PID: 11836 Comm: syz.0.1991 Not tainted syzkaller #0 PREEMPT(full) [ 316.111742][T11836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 316.111751][T11836] Call Trace: [ 316.111762][T11836] [ 316.111771][T11836] dump_stack_lvl+0xe8/0x150 [ 316.111803][T11836] should_fail_ex+0x40c/0x560 [ 316.111835][T11836] _copy_to_user+0x31/0xb0 [ 316.111858][T11836] bpf_test_finish+0x53c/0x6b0 [ 316.111889][T11836] ? __pfx_bpf_test_finish+0x10/0x10 [ 316.111920][T11836] bpf_prog_test_run_skb+0x11fe/0x2230 [ 316.111958][T11836] ? __fget_files+0x3a2/0x420 [ 316.111979][T11836] ? __fget_files+0x2a/0x420 [ 316.112001][T11836] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 316.112022][T11836] bpf_prog_test_run+0x2c5/0x340 [ 316.112048][T11836] __sys_bpf+0xa22/0xd90 [ 316.112077][T11836] ? __pfx___sys_bpf+0x10/0x10 [ 316.112108][T11836] ? __fget_files+0x2a/0x420 [ 316.112146][T11836] ? ksys_write+0x242/0x270 [ 316.112185][T11836] ? __pfx_ksys_write+0x10/0x10 [ 316.112216][T11836] __x64_sys_bpf+0xba/0xd0 [ 316.112238][T11836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.112259][T11836] do_syscall_64+0x174/0x580 [ 316.112281][T11836] ? trace_irq_disable+0x3b/0x140 [ 316.112304][T11836] ? clear_bhb_loop+0x40/0x90 [ 316.112328][T11836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.112348][T11836] RIP: 0033:0x7fb101b9de59 [ 316.112367][T11836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.112383][T11836] RSP: 002b:00007fb1029b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 316.112401][T11836] RAX: ffffffffffffffda RBX: 00007fb101e25fa0 RCX: 00007fb101b9de59 [ 316.112413][T11836] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 316.112425][T11836] RBP: 00007fb1029b5090 R08: 0000000000000000 R09: 0000000000000000 [ 316.112434][T11836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.112445][T11836] R13: 00007fb101e26038 R14: 00007fb101e25fa0 R15: 00007ffc75f5dbf8 [ 316.112475][T11836] [ 317.202281][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.208703][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.253491][T11852] netlink: 892 bytes leftover after parsing attributes in process `syz.2.1997'. [ 318.023048][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2002'. [ 319.156164][T11878] netlink: 892 bytes leftover after parsing attributes in process `syz.2.2009'. [ 320.518061][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2015'. [ 320.620310][T11899] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2015'. [ 321.334681][T11917] netlink: 892 bytes leftover after parsing attributes in process `syz.3.2021'. [ 321.562749][T11811] Set syz1 is full, maxelem 65536 reached [ 321.769851][T11931] netlink: 'syz.3.2025': attribute type 3 has an invalid length. [ 321.799679][T11931] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20002 [ 322.304222][T11944] FAULT_INJECTION: forcing a failure. [ 322.304222][T11944] name failslab, interval 1, probability 0, space 0, times 0 [ 322.362674][T11944] CPU: 1 UID: 0 PID: 11944 Comm: syz.4.2031 Not tainted syzkaller #0 PREEMPT(full) [ 322.362701][T11944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 322.362712][T11944] Call Trace: [ 322.362720][T11944] [ 322.362729][T11944] dump_stack_lvl+0xe8/0x150 [ 322.362764][T11944] should_fail_ex+0x40c/0x560 [ 322.362801][T11944] should_failslab+0xa8/0x100 [ 322.362829][T11944] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 322.362853][T11944] ? skb_clone+0x212/0x3a0 [ 322.362875][T11944] ? skb_clone+0x212/0x3a0 [ 322.362903][T11944] skb_clone+0x212/0x3a0 [ 322.362930][T11944] __netlink_deliver_tap+0x413/0x860 [ 322.362967][T11944] ? netlink_deliver_tap+0x2e/0x1b0 [ 322.362992][T11944] netlink_deliver_tap+0x19c/0x1b0 [ 322.363016][T11944] netlink_unicast+0x77f/0x940 [ 322.363049][T11944] netlink_sendmsg+0x813/0xb40 [ 322.363082][T11944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.363110][T11944] ? aa_sock_msg_perm+0xf1/0x1b0 [ 322.363141][T11944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.363164][T11944] sock_sendmsg_nosec+0x13a/0x180 [ 322.363194][T11944] ____sys_sendmsg+0x54e/0x850 [ 322.363223][T11944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.363255][T11944] ? import_iovec+0x73/0xa0 [ 322.363281][T11944] ___sys_sendmsg+0x2a5/0x360 [ 322.363302][T11944] ? __lock_acquire+0x683/0x2cf0 [ 322.363332][T11944] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.363396][T11944] ? __fget_files+0x2a/0x420 [ 322.363420][T11944] ? __fget_files+0x3a2/0x420 [ 322.363452][T11944] __x64_sys_sendmsg+0x1b1/0x290 [ 322.363479][T11944] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 322.363519][T11944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.363540][T11944] do_syscall_64+0x174/0x580 [ 322.363563][T11944] ? clear_bhb_loop+0x40/0x90 [ 322.363587][T11944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.363606][T11944] RIP: 0033:0x7f2f5199de59 [ 322.363623][T11944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.363639][T11944] RSP: 002b:00007f2f5286f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.363660][T11944] RAX: ffffffffffffffda RBX: 00007f2f51c25fa0 RCX: 00007f2f5199de59 [ 322.363676][T11944] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 322.363688][T11944] RBP: 00007f2f5286f090 R08: 0000000000000000 R09: 0000000000000000 [ 322.363699][T11944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.363710][T11944] R13: 00007f2f51c26038 R14: 00007f2f51c25fa0 R15: 00007fff70a396a8 [ 322.363738][T11944] [ 323.015387][T11968] FAULT_INJECTION: forcing a failure. [ 323.015387][T11968] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 323.031248][T11968] CPU: 1 UID: 0 PID: 11968 Comm: syz.0.2042 Not tainted syzkaller #0 PREEMPT(full) [ 323.031273][T11968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 323.031285][T11968] Call Trace: [ 323.031296][T11968] [ 323.031304][T11968] dump_stack_lvl+0xe8/0x150 [ 323.031338][T11968] should_fail_ex+0x40c/0x560 [ 323.031382][T11968] prepare_alloc_pages+0x230/0x650 [ 323.031416][T11968] __alloc_frozen_pages_noprof+0x12f/0x380 [ 323.031446][T11968] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 323.031476][T11968] ? __pfx_policy_nodemask+0x10/0x10 [ 323.031502][T11968] ? __folio_batch_add_and_move+0x11a/0xc50 [ 323.031523][T11968] ? lock_acquire+0x106/0x350 [ 323.031556][T11968] alloc_pages_mpol+0x212/0x380 [ 323.031589][T11968] folio_alloc_mpol_noprof+0x39/0x160 [ 323.031619][T11968] vma_alloc_folio_noprof+0xe1/0x1e0 [ 323.031649][T11968] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 323.031689][T11968] do_wp_page+0x1163/0x4c70 [ 323.031728][T11968] ? __pfx_do_wp_page+0x10/0x10 [ 323.031744][T11968] ? do_raw_spin_lock+0x12b/0x2f0 [ 323.031768][T11968] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 323.031800][T11968] handle_mm_fault+0x1490/0x3080 [ 323.031835][T11968] ? handle_mm_fault+0xec/0x3080 [ 323.031863][T11968] ? __pfx_handle_mm_fault+0x10/0x10 [ 323.031884][T11968] ? follow_page_pte+0xbd0/0xe70 [ 323.031919][T11968] ? __pfx_follow_page_pte+0x10/0x10 [ 323.031950][T11968] __get_user_pages+0x1678/0x2720 [ 323.032021][T11968] __gup_longterm_locked+0xd52/0x15c0 [ 323.032055][T11968] ? sanity_check_pinned_pages+0x817/0x8d0 [ 323.032090][T11968] gup_fast_fallback+0x1d8c/0x20e0 [ 323.032143][T11968] ? __pfx_gup_fast_fallback+0x10/0x10 [ 323.032170][T11968] ? pin_user_pages_fast+0x4d/0xb0 [ 323.032192][T11968] iov_iter_extract_pages+0x369/0x5f0 [ 323.032224][T11968] extract_iter_to_sg+0xee0/0x25f0 [ 323.032260][T11968] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 323.032281][T11968] ? __kmalloc_noprof+0x396/0x720 [ 323.032304][T11968] ? __kmalloc_noprof+0x1ad/0x720 [ 323.032325][T11968] ? sock_kmalloc+0xd6/0x160 [ 323.032354][T11968] ? sock_kmalloc+0xd6/0x160 [ 323.032384][T11968] ? __asan_memset+0x22/0x50 [ 323.032409][T11968] af_alg_get_rsgl+0x493/0x8d0 [ 323.032451][T11968] ? af_alg_alloc_areq+0xac/0x200 [ 323.032481][T11968] skcipher_recvmsg+0x39d/0xe10 [ 323.032521][T11968] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 323.032539][T11968] ? __lock_acquire+0x683/0x2cf0 [ 323.032562][T11968] ? aa_sock_msg_perm+0xf1/0x1b0 [ 323.032590][T11968] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 323.032608][T11968] ? security_socket_recvmsg+0x7e/0x2c0 [ 323.032628][T11968] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 323.032648][T11968] sock_recvmsg+0x196/0x1e0 [ 323.032681][T11968] ____sys_recvmsg+0x1e6/0x4a0 [ 323.032714][T11968] ? __pfx_____sys_recvmsg+0x10/0x10 [ 323.032754][T11968] ? import_iovec+0x73/0xa0 [ 323.032781][T11968] ___sys_recvmsg+0x213/0x5a0 [ 323.032811][T11968] ? __pfx____sys_recvmsg+0x10/0x10 [ 323.032840][T11968] ? __fget_files+0x2a/0x420 [ 323.032883][T11968] ? __fget_files+0x3a2/0x420 [ 323.032915][T11968] __x64_sys_recvmsg+0x1ae/0x290 [ 323.032941][T11968] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 323.032985][T11968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.033006][T11968] do_syscall_64+0x174/0x580 [ 323.033026][T11968] ? trace_irq_disable+0x3b/0x140 [ 323.033051][T11968] ? clear_bhb_loop+0x40/0x90 [ 323.033076][T11968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.033094][T11968] RIP: 0033:0x7fb101b9de59 [ 323.033113][T11968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.033129][T11968] RSP: 002b:00007fb1029b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 323.033150][T11968] RAX: ffffffffffffffda RBX: 00007fb101e25fa0 RCX: 00007fb101b9de59 [ 323.033164][T11968] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 323.033175][T11968] RBP: 00007fb1029b5090 R08: 0000000000000000 R09: 0000000000000000 [ 323.033187][T11968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 323.033199][T11968] R13: 00007fb101e26038 R14: 00007fb101e25fa0 R15: 00007ffc75f5dbf8 [ 323.033231][T11968] [ 324.068722][T11988] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2052'. [ 324.251044][T11993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2054'. [ 324.871781][T12029] netlink: 'syz.3.2067': attribute type 3 has an invalid length. [ 324.892295][T12029] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2067'. [ 325.196075][T12037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.494278][T12037] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.506591][ T5892] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 325.621141][ T48] bond1: (slave bridge2): link status up again after 0 ms [ 325.690439][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 325.730771][ T48] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 325.839129][ T5892] bond1: (slave bridge2): failed to get link speed/duplex [ 325.969550][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 326.100046][ T5886] bond1: (slave bridge2): failed to get link speed/duplex [ 326.201904][ T5886] bond1: (slave bridge2): failed to get link speed/duplex [ 326.323401][T12077] netlink: 'syz.2.2076': attribute type 1 has an invalid length. [ 326.331187][T12077] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2076'. [ 326.622479][ T5886] bond1: (slave bridge2): failed to get link speed/duplex [ 326.719684][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 326.767091][T12090] FAULT_INJECTION: forcing a failure. [ 326.767091][T12090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.781697][T12090] CPU: 1 UID: 0 PID: 12090 Comm: syz.3.2088 Not tainted syzkaller #0 PREEMPT(full) [ 326.781724][T12090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 326.781735][T12090] Call Trace: [ 326.781742][T12090] [ 326.781749][T12090] dump_stack_lvl+0xe8/0x150 [ 326.781784][T12090] should_fail_ex+0x40c/0x560 [ 326.781816][T12090] _copy_from_user+0x2d/0xb0 [ 326.781840][T12090] ___sys_sendmsg+0x1c6/0x360 [ 326.781863][T12090] ? __lock_acquire+0x683/0x2cf0 [ 326.781901][T12090] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.781956][T12090] ? __fget_files+0x2a/0x420 [ 326.781980][T12090] ? __fget_files+0x3a2/0x420 [ 326.782013][T12090] __x64_sys_sendmsg+0x1b1/0x290 [ 326.782039][T12090] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 326.782079][T12090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.782100][T12090] do_syscall_64+0x174/0x580 [ 326.782120][T12090] ? trace_irq_disable+0x3b/0x140 [ 326.782142][T12090] ? clear_bhb_loop+0x40/0x90 [ 326.782165][T12090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.782182][T12090] RIP: 0033:0x7f675a39de59 [ 326.782199][T12090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.782214][T12090] RSP: 002b:00007f675b1f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.782233][T12090] RAX: ffffffffffffffda RBX: 00007f675a625fa0 RCX: 00007f675a39de59 [ 326.782247][T12090] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 326.782258][T12090] RBP: 00007f675b1f2090 R08: 0000000000000000 R09: 0000000000000000 [ 326.782269][T12090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.782280][T12090] R13: 00007f675a626038 R14: 00007f675a625fa0 R15: 00007ffe634c2a88 [ 326.782309][T12090] [ 326.967021][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 327.066479][ T5894] bond1: (slave bridge2): failed to get link speed/duplex [ 327.146387][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 327.264533][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 327.364989][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 327.476787][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2096'. [ 327.499470][T12127] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2096'. [ 327.603409][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 327.700045][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 327.851741][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 328.090747][T12144] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2102'. [ 328.106590][T12144] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2102'. [ 328.121298][T12144] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2102'. [ 328.148067][T12145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2101'. [ 328.515881][T12161] team0: Port device xfrm0 removed [ 328.523264][ T48] tipc: Resetting bearer [ 328.713182][T12161] x_tables: duplicate underflow at hook 1 [ 328.725644][T12171] netlink: 'syz.4.2109': attribute type 1 has an invalid length. [ 329.894231][T12203] __nla_validate_parse: 6 callbacks suppressed [ 329.894250][T12203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2120'. [ 329.923921][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2122'. [ 329.966334][T12200] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2122'. [ 330.221136][T12213] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2125'. [ 330.407403][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2125'. [ 330.467025][T12213] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2125'. [ 330.476118][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2125'. [ 330.485219][T12213] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2125'. [ 330.494267][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2125'. [ 330.503338][T12213] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2125'. [ 330.529704][T12222] bridge_slave_0: entered promiscuous mode [ 331.118593][T12247] lo speed is unknown, defaulting to 1000 [ 331.156030][T12253] syzkaller0: entered promiscuous mode [ 331.161554][T12253] syzkaller0: entered allmulticast mode [ 331.405984][T12263] syzkaller0: entered allmulticast mode [ 331.649674][T12260] lo speed is unknown, defaulting to 1000 [ 331.842042][ T5898] net_ratelimit: 31 callbacks suppressed [ 331.842063][ T5898] bond1: (slave bridge2): failed to get link speed/duplex [ 331.934729][T12264] Set syz1 is full, maxelem 65536 reached [ 332.001532][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 332.115529][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 332.522406][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 332.623941][T12291] execmem: unable to allocate memory [ 332.684664][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 332.803482][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 332.911880][ T5898] bond1: (slave bridge2): failed to get link speed/duplex [ 332.950170][T12301] Unsupported ieee802154 address type: 0 [ 333.018356][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 333.150719][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 334.116145][T12336] netlink: 'syz.2.2167': attribute type 1 has an invalid length. [ 334.208783][T12342] lo speed is unknown, defaulting to 1000 [ 334.252754][T12336] netlink: 'syz.2.2167': attribute type 1 has an invalid length. [ 335.156677][T12383] __nla_validate_parse: 131 callbacks suppressed [ 335.156698][T12383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2177'. [ 335.546498][T12399] lo speed is unknown, defaulting to 1000 [ 336.079903][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2190'. [ 336.192452][T12417] netlink: 'syz.3.2189': attribute type 3 has an invalid length. [ 336.237682][T12417] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2189'. [ 336.699317][T12434] lo speed is unknown, defaulting to 1000 [ 336.891420][ T5805] net_ratelimit: 28 callbacks suppressed [ 336.891441][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 336.964112][T12443] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 337.061760][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 337.250056][ T5892] bond1: (slave bridge2): failed to get link speed/duplex [ 337.361412][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 338.243599][T12440] Set syz1 is full, maxelem 65536 reached [ 338.340936][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 338.456901][ T5892] bond1: (slave bridge2): failed to get link speed/duplex [ 338.515326][T12482] netlink: 'syz.1.2205': attribute type 1 has an invalid length. [ 338.586455][T12482] bond4: (slave dummy0): making interface the new active one [ 338.608982][T12482] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 339.056172][T12482] bond4: entered promiscuous mode [ 339.070434][T12482] dummy0: entered promiscuous mode [ 339.188133][T12487] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 339.339828][ T5892] bond1: (slave bridge2): failed to get link speed/duplex [ 339.361621][T12478] bond4: left promiscuous mode [ 339.366930][T12478] dummy0: left promiscuous mode [ 340.499346][T12530] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2223'. [ 340.526647][T12530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2223'. [ 340.537442][T12530] netlink: 'syz.4.2223': attribute type 1 has an invalid length. [ 340.600912][T12530] bond5: entered promiscuous mode [ 340.606487][T12530] 8021q: adding VLAN 0 to HW filter on device bond5 [ 340.620710][T12530] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2223'. [ 340.630323][T12530] bond5: entered allmulticast mode [ 341.058655][T12564] netlink: 'syz.1.2235': attribute type 1 has an invalid length. [ 341.154039][T12567] netlink: 'syz.3.2236': attribute type 5 has an invalid length. [ 341.174051][T12567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2236'. [ 341.187467][T12564] macvtap1: entered allmulticast mode [ 341.202547][T12564] macvtap2: entered allmulticast mode [ 341.239018][T12564] bond5: (slave bridge2): making interface the new active one [ 341.248128][T12564] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 341.455148][T12574] FAULT_INJECTION: forcing a failure. [ 341.455148][T12574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.468252][T12574] CPU: 0 UID: 0 PID: 12574 Comm: syz.0.2238 Not tainted syzkaller #0 PREEMPT(full) [ 341.468276][T12574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 341.468287][T12574] Call Trace: [ 341.468294][T12574] [ 341.468301][T12574] dump_stack_lvl+0xe8/0x150 [ 341.468332][T12574] should_fail_ex+0x40c/0x560 [ 341.468361][T12574] _copy_from_user+0x2d/0xb0 [ 341.468381][T12574] bpf_test_init+0xd8/0x150 [ 341.468410][T12574] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 341.468450][T12574] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 341.468479][T12574] ? __fget_files+0x2a/0x420 [ 341.468509][T12574] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 341.468535][T12574] bpf_prog_test_run+0x2c5/0x340 [ 341.468565][T12574] __sys_bpf+0xa22/0xd90 [ 341.468597][T12574] ? __pfx___sys_bpf+0x10/0x10 [ 341.468632][T12574] ? __fget_files+0x2a/0x420 [ 341.468672][T12574] ? ksys_write+0x242/0x270 [ 341.468703][T12574] ? __pfx_ksys_write+0x10/0x10 [ 341.468736][T12574] __x64_sys_bpf+0xba/0xd0 [ 341.468758][T12574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.468779][T12574] do_syscall_64+0x174/0x580 [ 341.468799][T12574] ? trace_irq_disable+0x3b/0x140 [ 341.468822][T12574] ? clear_bhb_loop+0x40/0x90 [ 341.468845][T12574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.468864][T12574] RIP: 0033:0x7fb101b9de59 [ 341.468883][T12574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.468899][T12574] RSP: 002b:00007fb1029b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 341.468919][T12574] RAX: ffffffffffffffda RBX: 00007fb101e25fa0 RCX: 00007fb101b9de59 [ 341.468933][T12574] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 341.468945][T12574] RBP: 00007fb1029b5090 R08: 0000000000000000 R09: 0000000000000000 [ 341.468957][T12574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.468969][T12574] R13: 00007fb101e26038 R14: 00007fb101e25fa0 R15: 00007ffc75f5dbf8 [ 341.469000][T12574] [ 341.484249][T12577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2239'. [ 341.816078][T12584] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2243'. [ 342.010990][ T12] net_ratelimit: 14 callbacks suppressed [ 342.011011][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 342.139698][T12604] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2249'. [ 342.152286][T12604] bridge0: port 3(netdevsim1) entered blocking state [ 342.159283][T12604] bridge0: port 3(netdevsim1) entered disabled state [ 342.167451][T12604] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 342.178003][T12604] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 342.187619][T12604] bridge0: port 3(netdevsim1) entered blocking state [ 342.194507][T12604] bridge0: port 3(netdevsim1) entered forwarding state [ 342.218616][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 342.352789][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 342.445738][ T5898] bond1: (slave bridge2): failed to get link speed/duplex [ 342.509521][T12611] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2252'. [ 342.562141][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 342.720654][ T57] bond1: (slave bridge2): failed to get link speed/duplex [ 342.753210][T12619] FAULT_INJECTION: forcing a failure. [ 342.753210][T12619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.771126][T12619] CPU: 1 UID: 0 PID: 12619 Comm: syz.2.2255 Not tainted syzkaller #0 PREEMPT(full) [ 342.771152][T12619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 342.771163][T12619] Call Trace: [ 342.771171][T12619] [ 342.771178][T12619] dump_stack_lvl+0xe8/0x150 [ 342.771212][T12619] should_fail_ex+0x40c/0x560 [ 342.771248][T12619] _copy_from_user+0x2d/0xb0 [ 342.771271][T12619] ___sys_sendmsg+0x1c6/0x360 [ 342.771294][T12619] ? __lock_acquire+0x683/0x2cf0 [ 342.771324][T12619] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.771381][T12619] ? __fget_files+0x2a/0x420 [ 342.771432][T12619] ? __fget_files+0x3a2/0x420 [ 342.771465][T12619] __x64_sys_sendmsg+0x1b1/0x290 [ 342.771490][T12619] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 342.771528][T12619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.771547][T12619] do_syscall_64+0x174/0x580 [ 342.771568][T12619] ? trace_irq_disable+0x3b/0x140 [ 342.771591][T12619] ? clear_bhb_loop+0x40/0x90 [ 342.771614][T12619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.771633][T12619] RIP: 0033:0x7f512739de59 [ 342.771657][T12619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.771673][T12619] RSP: 002b:00007f512832d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.771693][T12619] RAX: ffffffffffffffda RBX: 00007f5127625fa0 RCX: 00007f512739de59 [ 342.771707][T12619] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 342.771719][T12619] RBP: 00007f512832d090 R08: 0000000000000000 R09: 0000000000000000 [ 342.771731][T12619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.771742][T12619] R13: 00007f5127626038 R14: 00007f5127625fa0 R15: 00007ffc4ca0ebd8 [ 342.771772][T12619] [ 342.972168][ T5898] bond1: (slave bridge2): failed to get link speed/duplex [ 343.110710][ T5892] bond1: (slave bridge2): failed to get link speed/duplex [ 343.223847][ T5898] bond1: (slave bridge2): failed to get link speed/duplex [ 343.371858][ T57] bond1: (slave bridge2): failed to get link speed/duplex [ 343.833686][T12649] trusted_key: syz.3.2261 sent an empty control message without MSG_MORE. [ 344.303311][T12666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2263'. [ 344.967122][T12672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2266'. [ 345.193116][T12681] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 345.951416][T12718] __nla_validate_parse: 3 callbacks suppressed [ 345.951471][T12718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2279'. [ 345.965243][T12717] FAULT_INJECTION: forcing a failure. [ 345.965243][T12717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.001548][T12717] CPU: 1 UID: 0 PID: 12717 Comm: syz.2.2282 Not tainted syzkaller #0 PREEMPT(full) [ 346.001595][T12717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 346.001618][T12717] Call Trace: [ 346.001725][T12717] [ 346.001811][T12717] dump_stack_lvl+0xe8/0x150 [ 346.001973][T12717] should_fail_ex+0x40c/0x560 [ 346.002098][T12717] _copy_from_user+0x2d/0xb0 [ 346.002149][T12717] __sys_bpf+0x2e7/0xd90 [ 346.002199][T12717] ? __pfx___sys_bpf+0x10/0x10 [ 346.002241][T12717] ? __fget_files+0x2a/0x420 [ 346.002302][T12717] ? ksys_write+0x242/0x270 [ 346.002344][T12717] ? __pfx_ksys_write+0x10/0x10 [ 346.002376][T12717] __x64_sys_bpf+0xba/0xd0 [ 346.002398][T12717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.002439][T12717] do_syscall_64+0x174/0x580 [ 346.002553][T12717] ? trace_irq_disable+0x3b/0x140 [ 346.002582][T12717] ? clear_bhb_loop+0x40/0x90 [ 346.002605][T12717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.002629][T12717] RIP: 0033:0x7f512739de59 [ 346.002654][T12717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.002671][T12717] RSP: 002b:00007f512832d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 346.002697][T12717] RAX: ffffffffffffffda RBX: 00007f5127625fa0 RCX: 00007f512739de59 [ 346.002710][T12717] RDX: 000000000000004c RSI: 0000200000000540 RDI: 000000000000000a [ 346.002722][T12717] RBP: 00007f512832d090 R08: 0000000000000000 R09: 0000000000000000 [ 346.002733][T12717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.002744][T12717] R13: 00007f5127626038 R14: 00007f5127625fa0 R15: 00007ffc4ca0ebd8 [ 346.002784][T12717] [ 346.381942][T12718] hsr_slave_0: left promiscuous mode [ 346.393687][T12718] hsr_slave_1: left promiscuous mode [ 346.455288][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2283'. [ 347.018324][T12756] FAULT_INJECTION: forcing a failure. [ 347.018324][T12756] name failslab, interval 1, probability 0, space 0, times 0 [ 347.030979][T12756] CPU: 0 UID: 0 PID: 12756 Comm: syz.0.2294 Not tainted syzkaller #0 PREEMPT(full) [ 347.031005][T12756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 347.031017][T12756] Call Trace: [ 347.031025][T12756] [ 347.031032][T12756] dump_stack_lvl+0xe8/0x150 [ 347.031067][T12756] should_fail_ex+0x40c/0x560 [ 347.031101][T12756] should_failslab+0xa8/0x100 [ 347.031131][T12756] __kmalloc_noprof+0xfe/0x720 [ 347.031190][T12756] ? lock_sock_nested+0x6a/0x100 [ 347.031335][T12756] ? sock_kmalloc+0xd6/0x160 [ 347.031364][T12756] ? sock_kmalloc+0xd6/0x160 [ 347.031394][T12756] sock_kmalloc+0xd6/0x160 [ 347.031421][T12756] af_alg_alloc_areq+0x8c/0x200 [ 347.031515][T12756] skcipher_recvmsg+0x31e/0xe10 [ 347.031554][T12756] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 347.031573][T12756] ? __lock_acquire+0x683/0x2cf0 [ 347.031616][T12756] ? aa_sock_msg_perm+0xf1/0x1b0 [ 347.031714][T12756] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 347.031742][T12756] ? security_socket_recvmsg+0x7e/0x2c0 [ 347.031788][T12756] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 347.031808][T12756] sock_recvmsg+0x196/0x1e0 [ 347.031886][T12756] ____sys_recvmsg+0x1e6/0x4a0 [ 347.031919][T12756] ? __pfx_____sys_recvmsg+0x10/0x10 [ 347.031958][T12756] ? import_iovec+0x73/0xa0 [ 347.032016][T12756] ___sys_recvmsg+0x213/0x5a0 [ 347.032046][T12756] ? __pfx____sys_recvmsg+0x10/0x10 [ 347.032075][T12756] ? __fget_files+0x2a/0x420 [ 347.032117][T12756] ? __fget_files+0x3a2/0x420 [ 347.032151][T12756] __x64_sys_recvmsg+0x1ae/0x290 [ 347.032192][T12756] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 347.032235][T12756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.032257][T12756] do_syscall_64+0x174/0x580 [ 347.032276][T12756] ? trace_irq_disable+0x3b/0x140 [ 347.032300][T12756] ? clear_bhb_loop+0x40/0x90 [ 347.032323][T12756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.032342][T12756] RIP: 0033:0x7fb101b9de59 [ 347.032360][T12756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.032375][T12756] RSP: 002b:00007fb1029b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 347.032396][T12756] RAX: ffffffffffffffda RBX: 00007fb101e25fa0 RCX: 00007fb101b9de59 [ 347.032410][T12756] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 347.032422][T12756] RBP: 00007fb1029b5090 R08: 0000000000000000 R09: 0000000000000000 [ 347.032433][T12756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.032444][T12756] R13: 00007fb101e26038 R14: 00007fb101e25fa0 R15: 00007ffc75f5dbf8 [ 347.032475][T12756] [ 347.373853][ T5805] net_ratelimit: 20 callbacks suppressed [ 347.374001][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 347.482476][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 347.606563][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 347.732493][ T5898] bond1: (slave bridge2): failed to get link speed/duplex [ 347.864503][ T5898] bond1: (slave bridge2): failed to get link speed/duplex [ 347.995203][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 348.149653][T12784] netlink: 'syz.1.2296': attribute type 4 has an invalid length. [ 348.185104][ T5898] bond1: (slave bridge2): failed to get link speed/duplex [ 348.332868][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 348.463660][ T5892] bond1: (slave bridge2): failed to get link speed/duplex [ 348.614073][ T5892] bond1: (slave bridge2): failed to get link speed/duplex [ 348.705276][T12810] netlink: 'syz.1.2305': attribute type 3 has an invalid length. [ 348.713066][T12810] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2305'. [ 349.184309][T12829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2311'. [ 350.051929][T12858] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2316'. [ 350.094413][T12858] rdma_rxe: rxe_newlink: failed to add lo [ 350.378143][T12871] FAULT_INJECTION: forcing a failure. [ 350.378143][T12871] name failslab, interval 1, probability 0, space 0, times 0 [ 350.393308][T12869] Bluetooth: MGMT ver 1.23 [ 350.400073][T12871] CPU: 1 UID: 0 PID: 12871 Comm: syz.0.2322 Not tainted syzkaller #0 PREEMPT(full) [ 350.400100][T12871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 350.400111][T12871] Call Trace: [ 350.400118][T12871] [ 350.400124][T12871] dump_stack_lvl+0xe8/0x150 [ 350.400155][T12871] should_fail_ex+0x40c/0x560 [ 350.400186][T12871] should_failslab+0xa8/0x100 [ 350.400212][T12871] __kmalloc_noprof+0xfe/0x720 [ 350.400236][T12871] ? sk_prot_alloc+0xe7/0x210 [ 350.400256][T12871] ? sk_prot_alloc+0xe7/0x210 [ 350.400282][T12871] sk_prot_alloc+0xe7/0x210 [ 350.400301][T12871] ? sk_alloc+0x27/0x390 [ 350.400334][T12871] sk_alloc+0x3a/0x390 [ 350.400359][T12871] bpf_prog_test_run_skb+0x3a6/0x2230 [ 350.400486][T12871] ? __fget_files+0x3a2/0x420 [ 350.400509][T12871] ? __fget_files+0x2a/0x420 [ 350.400537][T12871] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 350.400561][T12871] bpf_prog_test_run+0x2c5/0x340 [ 350.400590][T12871] __sys_bpf+0xa22/0xd90 [ 350.400622][T12871] ? __pfx___sys_bpf+0x10/0x10 [ 350.400656][T12871] ? __fget_files+0x2a/0x420 [ 350.400696][T12871] ? ksys_write+0x242/0x270 [ 350.400725][T12871] ? __pfx_ksys_write+0x10/0x10 [ 350.400756][T12871] __x64_sys_bpf+0xba/0xd0 [ 350.400777][T12871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.400798][T12871] do_syscall_64+0x174/0x580 [ 350.400818][T12871] ? trace_irq_disable+0x3b/0x140 [ 350.400840][T12871] ? clear_bhb_loop+0x40/0x90 [ 350.400863][T12871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.400881][T12871] RIP: 0033:0x7fb101b9de59 [ 350.400899][T12871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.400916][T12871] RSP: 002b:00007fb1029b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 350.400939][T12871] RAX: ffffffffffffffda RBX: 00007fb101e25fa0 RCX: 00007fb101b9de59 [ 350.400952][T12871] RDX: 000000000000004c RSI: 0000200000000540 RDI: 000000000000000a [ 350.400963][T12871] RBP: 00007fb1029b5090 R08: 0000000000000000 R09: 0000000000000000 [ 350.400975][T12871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.400986][T12871] R13: 00007fb101e26038 R14: 00007fb101e25fa0 R15: 00007ffc75f5dbf8 [ 350.401015][T12871] [ 350.842229][T12875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2324'. [ 351.588812][T12911] netlink: 'syz.1.2332': attribute type 235 has an invalid length. [ 351.597606][T12911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2332'. [ 351.921985][T12925] netlink: 'syz.0.2334': attribute type 1 has an invalid length. [ 352.013834][T12925] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2334'. [ 352.022920][T12925] netlink: 'syz.0.2334': attribute type 1 has an invalid length. [ 352.169004][T12935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2339'. [ 352.239791][T12940] netlink: 'syz.0.2340': attribute type 3 has an invalid length. [ 352.247636][T12940] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2340'. [ 352.366167][T12943] xt_hashlimit: size too large, truncated to 1048576 [ 352.437767][ T13] net_ratelimit: 33 callbacks suppressed [ 352.437788][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 352.537593][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 352.583420][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2345'. [ 352.646794][T12953] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2345'. [ 352.692373][T12955] netlink: 'syz.3.2347': attribute type 1 has an invalid length. [ 352.700170][T12955] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2347'. [ 352.719372][T12955] netlink: 'syz.3.2347': attribute type 1 has an invalid length. [ 352.765165][ T5900] bond1: (slave bridge2): failed to get link speed/duplex [ 352.991344][ T5900] bond1: (slave bridge2): failed to get link speed/duplex [ 353.094811][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 353.153594][T12975] FAULT_INJECTION: forcing a failure. [ 353.153594][T12975] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 353.169476][T12975] CPU: 0 UID: 0 PID: 12975 Comm: syz.3.2355 Not tainted syzkaller #0 PREEMPT(full) [ 353.169502][T12975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 353.169513][T12975] Call Trace: [ 353.169520][T12975] [ 353.169527][T12975] dump_stack_lvl+0xe8/0x150 [ 353.169559][T12975] should_fail_ex+0x40c/0x560 [ 353.169593][T12975] prepare_alloc_pages+0x230/0x650 [ 353.169664][T12975] __alloc_frozen_pages_noprof+0x12f/0x380 [ 353.169693][T12975] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 353.169724][T12975] ? __pfx_policy_nodemask+0x10/0x10 [ 353.169760][T12975] alloc_pages_mpol+0x212/0x380 [ 353.169793][T12975] folio_alloc_mpol_noprof+0x39/0x160 [ 353.169822][T12975] vma_alloc_folio_noprof+0xe1/0x1e0 [ 353.169853][T12975] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 353.169898][T12975] do_wp_page+0x1163/0x4c70 [ 353.169937][T12975] ? __pfx_do_wp_page+0x10/0x10 [ 353.169953][T12975] ? do_raw_spin_lock+0x12b/0x2f0 [ 353.169978][T12975] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 353.170009][T12975] handle_mm_fault+0x1490/0x3080 [ 353.170041][T12975] ? handle_mm_fault+0xec/0x3080 [ 353.170070][T12975] ? __pfx_handle_mm_fault+0x10/0x10 [ 353.170091][T12975] ? follow_page_pte+0xbd0/0xe70 [ 353.170121][T12975] ? __pfx_follow_page_pte+0x10/0x10 [ 353.170153][T12975] __get_user_pages+0x1678/0x2720 [ 353.170215][T12975] __gup_longterm_locked+0xd52/0x15c0 [ 353.170238][T12975] ? lock_acquire+0x106/0x350 [ 353.170270][T12975] ? sanity_check_pinned_pages+0x810/0x8d0 [ 353.170305][T12975] gup_fast_fallback+0x1d8c/0x20e0 [ 353.170356][T12975] ? __pfx_gup_fast_fallback+0x10/0x10 [ 353.170373][T12975] ? __kmalloc_noprof+0x1ad/0x720 [ 353.170397][T12975] ? kasan_save_track+0x4f/0x80 [ 353.170424][T12975] ? pin_user_pages_fast+0x4d/0xb0 [ 353.170446][T12975] iov_iter_extract_pages+0x369/0x5f0 [ 353.170479][T12975] extract_iter_to_sg+0xee0/0x25f0 [ 353.170512][T12975] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 353.170538][T12975] ? rcu_is_watching+0x15/0xb0 [ 353.170577][T12975] ? trace_kmalloc+0x2a/0xf0 [ 353.170601][T12975] ? __asan_memset+0x22/0x50 [ 353.170625][T12975] af_alg_get_rsgl+0x493/0x8d0 [ 353.170666][T12975] ? af_alg_alloc_areq+0xac/0x200 [ 353.170695][T12975] skcipher_recvmsg+0x39d/0xe10 [ 353.170735][T12975] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 353.170753][T12975] ? __lock_acquire+0x683/0x2cf0 [ 353.170776][T12975] ? aa_sock_msg_perm+0xf1/0x1b0 [ 353.170804][T12975] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 353.170822][T12975] ? security_socket_recvmsg+0x7e/0x2c0 [ 353.170841][T12975] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 353.170867][T12975] sock_recvmsg+0x196/0x1e0 [ 353.170896][T12975] ____sys_recvmsg+0x1e6/0x4a0 [ 353.170928][T12975] ? __pfx_____sys_recvmsg+0x10/0x10 [ 353.170966][T12975] ? import_iovec+0x73/0xa0 [ 353.170991][T12975] ___sys_recvmsg+0x213/0x5a0 [ 353.171018][T12975] ? __pfx____sys_recvmsg+0x10/0x10 [ 353.171044][T12975] ? __fget_files+0x2a/0x420 [ 353.171084][T12975] ? __fget_files+0x3a2/0x420 [ 353.171115][T12975] __x64_sys_recvmsg+0x1ae/0x290 [ 353.171137][T12975] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 353.171175][T12975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.171194][T12975] do_syscall_64+0x174/0x580 [ 353.171213][T12975] ? trace_irq_disable+0x3b/0x140 [ 353.171233][T12975] ? clear_bhb_loop+0x40/0x90 [ 353.171253][T12975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.171271][T12975] RIP: 0033:0x7f675a39de59 [ 353.171288][T12975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.171303][T12975] RSP: 002b:00007f675b1f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 353.171322][T12975] RAX: ffffffffffffffda RBX: 00007f675a625fa0 RCX: 00007f675a39de59 [ 353.171335][T12975] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 353.171346][T12975] RBP: 00007f675b1f2090 R08: 0000000000000000 R09: 0000000000000000 [ 353.171356][T12975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.171366][T12975] R13: 00007f675a626038 R14: 00007f675a625fa0 R15: 00007ffe634c2a88 [ 353.171397][T12975] [ 353.714882][ T114] bond1: (slave bridge2): failed to get link speed/duplex [ 353.780666][T12981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2356'. [ 353.801685][T12984] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2359'. [ 353.848859][ T114] bond1: (slave bridge2): failed to get link speed/duplex [ 353.981711][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 354.077922][ T114] bond1: (slave bridge2): failed to get link speed/duplex [ 354.147873][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2363'. [ 354.206803][ T114] bond1: (slave bridge2): failed to get link speed/duplex [ 354.236056][T12998] xt_hashlimit: size too large, truncated to 1048576 [ 354.573303][T13004] lo speed is unknown, defaulting to 1000 [ 354.586706][T13009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.056307][T13018] lo speed is unknown, defaulting to 1000 [ 355.291967][T13026] netlink: 'syz.4.2372': attribute type 21 has an invalid length. [ 355.300168][T13026] netlink: 'syz.4.2372': attribute type 4 has an invalid length. [ 355.310382][T13026] netlink: 'syz.4.2372': attribute type 3 has an invalid length. [ 355.850384][T13039] FAULT_INJECTION: forcing a failure. [ 355.850384][T13039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.863649][T13039] CPU: 0 UID: 0 PID: 13039 Comm: syz.0.2376 Not tainted syzkaller #0 PREEMPT(full) [ 355.863675][T13039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 355.863687][T13039] Call Trace: [ 355.863695][T13039] [ 355.863703][T13039] dump_stack_lvl+0xe8/0x150 [ 355.863736][T13039] should_fail_ex+0x40c/0x560 [ 355.863770][T13039] _copy_from_user+0x2d/0xb0 [ 355.863794][T13039] ___sys_recvmsg+0x173/0x5a0 [ 355.863823][T13039] ? __pfx____sys_recvmsg+0x10/0x10 [ 355.863850][T13039] ? __fget_files+0x2a/0x420 [ 355.863902][T13039] do_recvmmsg+0x31a/0x7f0 [ 355.863933][T13039] ? __pfx_do_recvmmsg+0x10/0x10 [ 355.863968][T13039] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 355.864088][T13039] ? __fget_files+0x3a2/0x420 [ 355.864130][T13039] __x64_sys_recvmmsg+0x198/0x250 [ 355.864157][T13039] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 355.864190][T13039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.864212][T13039] do_syscall_64+0x174/0x580 [ 355.864232][T13039] ? trace_irq_disable+0x3b/0x140 [ 355.864256][T13039] ? clear_bhb_loop+0x40/0x90 [ 355.864278][T13039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.864297][T13039] RIP: 0033:0x7fb101b9de59 [ 355.864316][T13039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.864333][T13039] RSP: 002b:00007fb102994028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 355.864353][T13039] RAX: ffffffffffffffda RBX: 00007fb101e26090 RCX: 00007fb101b9de59 [ 355.864366][T13039] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 355.864379][T13039] RBP: 00007fb102994090 R08: 0000000000000000 R09: 0000000000000000 [ 355.864391][T13039] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 355.864402][T13039] R13: 00007fb101e26128 R14: 00007fb101e26090 R15: 00007ffc75f5dbf8 [ 355.864433][T13039] [ 355.907410][T13037] syzkaller0: left allmulticast mode [ 356.149912][T13037] bond5: left allmulticast mode [ 356.776252][T13055] __nla_validate_parse: 9 callbacks suppressed [ 356.776278][T13055] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2382'. [ 357.258523][T13067] tipc: Enabled bearer , priority 10 [ 357.340856][T13070] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2388'. [ 357.352512][T13070] tipc: Resetting bearer [ 357.526794][T13070] tipc: Disabling bearer [ 357.617061][ T114] net_ratelimit: 19 callbacks suppressed [ 357.617101][ T114] bond1: (slave bridge2): failed to get link speed/duplex [ 357.769799][ T114] bond1: (slave bridge2): failed to get link speed/duplex [ 357.874568][T13084] xt_connbytes: Forcing CT accounting to be enabled [ 357.884353][T13081] netlink: 'syz.3.2392': attribute type 1 has an invalid length. [ 357.907505][T13081] syzkaller0: entered promiscuous mode [ 357.913032][T13081] syzkaller0: entered allmulticast mode [ 357.929958][T13081] tipc: Enabled bearer , priority 0 [ 358.001968][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 358.026626][T13080] tipc: Resetting bearer [ 358.131057][T13080] tipc: Disabling bearer [ 358.222786][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 358.313503][T13101] netlink: 'syz.2.2400': attribute type 1 has an invalid length. [ 358.341476][T13101] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2400'. [ 358.356405][T13101] netlink: 'syz.2.2400': attribute type 1 has an invalid length. [ 358.389749][ T5890] bond1: (slave bridge2): failed to get link speed/duplex [ 358.509656][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 358.611750][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 358.731420][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 358.750891][T13111] netlink: 'syz.2.2403': attribute type 3 has an invalid length. [ 358.779403][T13111] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2403'. [ 358.834874][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 358.946422][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 359.408768][T13127] netlink: 'syz.2.2408': attribute type 1 has an invalid length. [ 359.461195][T13127] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2408'. [ 359.537877][T13127] netlink: 'syz.2.2408': attribute type 1 has an invalid length. [ 359.860136][T13128] syzkaller0: left promiscuous mode [ 359.894441][T13128] bond4: left promiscuous mode [ 359.911135][T13128] veth3: left promiscuous mode [ 359.943616][T13128] bond5: left promiscuous mode [ 361.314475][T13172] lo speed is unknown, defaulting to 1000 [ 362.073332][T13177] ipvlan8: entered promiscuous mode [ 362.427107][T13198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2433'. [ 362.552947][T13196] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.563033][T13196] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.580973][T13209] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2436'. [ 362.721121][ T13] net_ratelimit: 18 callbacks suppressed [ 362.721142][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 362.828874][ T114] bond1: (slave bridge2): failed to get link speed/duplex [ 362.940130][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 363.051622][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 363.360898][T13196] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.370699][T13196] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.507347][ T5898] bond1: (slave bridge2): failed to get link speed/duplex [ 363.634752][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 363.745315][ T5898] bond1: (slave bridge2): failed to get link speed/duplex [ 363.761803][T13247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2446'. [ 363.908872][T13196] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.918838][T13196] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.087416][ T5890] bond1: (slave bridge2): failed to get link speed/duplex [ 364.186223][T13196] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.196020][T13196] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.273841][ T5890] bond1: (slave bridge2): failed to get link speed/duplex [ 364.392024][ T5890] bond1: (slave bridge2): failed to get link speed/duplex [ 364.656115][ T5805] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.689430][ T5805] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.720440][ T5890] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.749802][ T5890] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.857486][ T5805] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.877115][ T5805] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.921114][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.951406][T13286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2456'. [ 364.962991][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.996146][T13280] netlink: 'syz.0.2456': attribute type 1 has an invalid length. [ 365.025869][T13280] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2456'. [ 365.144799][T13293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2460'. [ 365.506300][T13307] SET target dimension over the limit! [ 366.006426][T13332] tipc: Enabling of bearer rejected, already enabled [ 366.891073][T13373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2482'. [ 366.900082][T13373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2482'. [ 366.909051][T13373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2482'. [ 366.918154][T13373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2482'. [ 366.980133][T13373] netlink: 'syz.3.2482': attribute type 6 has an invalid length. [ 367.139620][T13383] FAULT_INJECTION: forcing a failure. [ 367.139620][T13383] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 367.196923][T13383] CPU: 0 UID: 0 PID: 13383 Comm: syz.0.2487 Not tainted syzkaller #0 PREEMPT(full) [ 367.196948][T13383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 367.196965][T13383] Call Trace: [ 367.196973][T13383] [ 367.196980][T13383] dump_stack_lvl+0xe8/0x150 [ 367.197013][T13383] should_fail_ex+0x40c/0x560 [ 367.197045][T13383] prepare_alloc_pages+0x230/0x650 [ 367.197075][T13383] __alloc_frozen_pages_noprof+0x12f/0x380 [ 367.197104][T13383] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 367.197131][T13383] ? __pfx_policy_nodemask+0x10/0x10 [ 367.197152][T13383] ? __folio_batch_add_and_move+0x11a/0xc50 [ 367.197200][T13383] ? lock_acquire+0x106/0x350 [ 367.197231][T13383] alloc_pages_mpol+0x212/0x380 [ 367.197262][T13383] folio_alloc_mpol_noprof+0x39/0x160 [ 367.197289][T13383] vma_alloc_folio_noprof+0xe1/0x1e0 [ 367.197317][T13383] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 367.197351][T13383] do_wp_page+0x1163/0x4c70 [ 367.197385][T13383] ? __pfx_do_wp_page+0x10/0x10 [ 367.197401][T13383] ? do_raw_spin_lock+0x12b/0x2f0 [ 367.197424][T13383] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 367.197453][T13383] handle_mm_fault+0x1490/0x3080 [ 367.197494][T13383] ? handle_mm_fault+0xec/0x3080 [ 367.197523][T13383] ? __pfx_handle_mm_fault+0x10/0x10 [ 367.197544][T13383] ? follow_page_pte+0xbd0/0xe70 [ 367.197571][T13383] ? __pfx_follow_page_pte+0x10/0x10 [ 367.197598][T13383] __get_user_pages+0x1678/0x2720 [ 367.197654][T13383] __gup_longterm_locked+0xd52/0x15c0 [ 367.197678][T13383] ? lock_acquire+0x106/0x350 [ 367.197709][T13383] ? sanity_check_pinned_pages+0x810/0x8d0 [ 367.197740][T13383] gup_fast_fallback+0x1d8c/0x20e0 [ 367.197788][T13383] ? __pfx_gup_fast_fallback+0x10/0x10 [ 367.197806][T13383] ? __kmalloc_noprof+0x1ad/0x720 [ 367.197829][T13383] ? kasan_save_track+0x4f/0x80 [ 367.197857][T13383] ? pin_user_pages_fast+0x4d/0xb0 [ 367.197879][T13383] iov_iter_extract_pages+0x369/0x5f0 [ 367.197913][T13383] extract_iter_to_sg+0xee0/0x25f0 [ 367.197947][T13383] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 367.197972][T13383] ? rcu_is_watching+0x15/0xb0 [ 367.198000][T13383] ? trace_kmalloc+0x2a/0xf0 [ 367.198025][T13383] ? __asan_memset+0x22/0x50 [ 367.198049][T13383] af_alg_get_rsgl+0x493/0x8d0 [ 367.198088][T13383] ? af_alg_alloc_areq+0xac/0x200 [ 367.198117][T13383] skcipher_recvmsg+0x39d/0xe10 [ 367.198157][T13383] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 367.198176][T13383] ? __lock_acquire+0x683/0x2cf0 [ 367.198199][T13383] ? aa_sock_msg_perm+0xf1/0x1b0 [ 367.198227][T13383] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 367.198245][T13383] ? security_socket_recvmsg+0x7e/0x2c0 [ 367.198264][T13383] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 367.198285][T13383] sock_recvmsg+0x196/0x1e0 [ 367.198316][T13383] ____sys_recvmsg+0x1e6/0x4a0 [ 367.198346][T13383] ? __pfx_____sys_recvmsg+0x10/0x10 [ 367.198384][T13383] ? import_iovec+0x73/0xa0 [ 367.198408][T13383] ___sys_recvmsg+0x213/0x5a0 [ 367.198436][T13383] ? __pfx____sys_recvmsg+0x10/0x10 [ 367.198464][T13383] ? __fget_files+0x2a/0x420 [ 367.198506][T13383] ? __fget_files+0x3a2/0x420 [ 367.198538][T13383] __x64_sys_recvmsg+0x1ae/0x290 [ 367.198562][T13383] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 367.198601][T13383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.198620][T13383] do_syscall_64+0x174/0x580 [ 367.198640][T13383] ? trace_irq_disable+0x3b/0x140 [ 367.198663][T13383] ? clear_bhb_loop+0x40/0x90 [ 367.198686][T13383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.198705][T13383] RIP: 0033:0x7fb101b9de59 [ 367.198725][T13383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.198740][T13383] RSP: 002b:00007fb1029b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 367.198760][T13383] RAX: ffffffffffffffda RBX: 00007fb101e25fa0 RCX: 00007fb101b9de59 [ 367.198773][T13383] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000006 [ 367.198783][T13383] RBP: 00007fb1029b5090 R08: 0000000000000000 R09: 0000000000000000 [ 367.198793][T13383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.198803][T13383] R13: 00007fb101e26038 R14: 00007fb101e25fa0 R15: 00007ffc75f5dbf8 [ 367.198831][T13383] [ 367.888243][ T5805] net_ratelimit: 20 callbacks suppressed [ 367.888270][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 368.047260][ T5890] bond1: (slave bridge2): failed to get link speed/duplex [ 368.115171][T13402] netlink: 'syz.1.2491': attribute type 1 has an invalid length. [ 368.165266][ T5886] bond1: (slave bridge2): failed to get link speed/duplex [ 368.181746][T13402] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2491'. [ 368.275318][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 368.431874][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 368.530337][T13416] netlink: 'syz.2.2496': attribute type 3 has an invalid length. [ 368.551590][ T5896] bond1: (slave bridge2): failed to get link speed/duplex [ 368.614267][T13416] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2496'. [ 368.661692][ T5886] bond1: (slave bridge2): failed to get link speed/duplex [ 368.777666][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 368.949843][ T5896] bond1: (slave bridge2): failed to get link speed/duplex [ 369.094656][T13444] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2499'. [ 369.112552][ T5896] bond1: (slave bridge2): failed to get link speed/duplex [ 369.429589][T13457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2504'. [ 369.456991][T13457] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 369.741840][T13462] netlink: 996 bytes leftover after parsing attributes in process `syz.3.2507'. [ 370.105462][T13478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2512'. [ 370.409402][T13489] veth0: entered promiscuous mode [ 370.415117][T13489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2515'. [ 370.696047][T13503] netlink: 996 bytes leftover after parsing attributes in process `syz.0.2518'. [ 371.528629][T13530] netlink: 566 bytes leftover after parsing attributes in process `syz.3.2524'. [ 371.588151][T13532] netlink: 566 bytes leftover after parsing attributes in process `syz.3.2524'. [ 372.077463][T13563] FAULT_INJECTION: forcing a failure. [ 372.077463][T13563] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 372.104871][T13563] CPU: 1 UID: 0 PID: 13563 Comm: syz.4.2534 Not tainted syzkaller #0 PREEMPT(full) [ 372.104898][T13563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 372.104909][T13563] Call Trace: [ 372.104917][T13563] [ 372.104925][T13563] dump_stack_lvl+0xe8/0x150 [ 372.104958][T13563] should_fail_ex+0x40c/0x560 [ 372.104992][T13563] prepare_alloc_pages+0x230/0x650 [ 372.105026][T13563] __alloc_frozen_pages_noprof+0x12f/0x380 [ 372.105055][T13563] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 372.105085][T13563] ? __pfx_policy_nodemask+0x10/0x10 [ 372.105110][T13563] ? __folio_batch_add_and_move+0x11a/0xc50 [ 372.105130][T13563] ? lock_acquire+0x106/0x350 [ 372.105163][T13563] alloc_pages_mpol+0x212/0x380 [ 372.105197][T13563] folio_alloc_mpol_noprof+0x39/0x160 [ 372.105227][T13563] vma_alloc_folio_noprof+0xe1/0x1e0 [ 372.105258][T13563] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 372.105296][T13563] do_wp_page+0x1163/0x4c70 [ 372.105333][T13563] ? __pfx_do_wp_page+0x10/0x10 [ 372.105350][T13563] ? do_raw_spin_lock+0x12b/0x2f0 [ 372.105374][T13563] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 372.105406][T13563] handle_mm_fault+0x1490/0x3080 [ 372.105440][T13563] ? handle_mm_fault+0xec/0x3080 [ 372.105469][T13563] ? __pfx_handle_mm_fault+0x10/0x10 [ 372.105490][T13563] ? follow_page_pte+0xbd0/0xe70 [ 372.105519][T13563] ? __pfx_follow_page_pte+0x10/0x10 [ 372.105552][T13563] __get_user_pages+0x1678/0x2720 [ 372.105619][T13563] __gup_longterm_locked+0xd52/0x15c0 [ 372.105643][T13563] ? lock_acquire+0x106/0x350 [ 372.105674][T13563] ? sanity_check_pinned_pages+0x810/0x8d0 [ 372.105710][T13563] gup_fast_fallback+0x1d8c/0x20e0 [ 372.105762][T13563] ? __pfx_gup_fast_fallback+0x10/0x10 [ 372.105779][T13563] ? __kmalloc_noprof+0x1ad/0x720 [ 372.105803][T13563] ? kasan_save_track+0x4f/0x80 [ 372.105837][T13563] ? pin_user_pages_fast+0x4d/0xb0 [ 372.105859][T13563] iov_iter_extract_pages+0x369/0x5f0 [ 372.105892][T13563] extract_iter_to_sg+0xee0/0x25f0 [ 372.105928][T13563] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 372.105955][T13563] ? rcu_is_watching+0x15/0xb0 [ 372.105983][T13563] ? trace_kmalloc+0x2a/0xf0 [ 372.106008][T13563] ? __asan_memset+0x22/0x50 [ 372.106032][T13563] af_alg_get_rsgl+0x493/0x8d0 [ 372.106072][T13563] ? af_alg_alloc_areq+0xac/0x200 [ 372.106102][T13563] skcipher_recvmsg+0x39d/0xe10 [ 372.106143][T13563] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 372.106161][T13563] ? __lock_acquire+0x683/0x2cf0 [ 372.106184][T13563] ? aa_sock_msg_perm+0xf1/0x1b0 [ 372.106211][T13563] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 372.106230][T13563] ? security_socket_recvmsg+0x7e/0x2c0 [ 372.106248][T13563] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 372.106269][T13563] sock_recvmsg+0x196/0x1e0 [ 372.106301][T13563] ____sys_recvmsg+0x1e6/0x4a0 [ 372.106335][T13563] ? __pfx_____sys_recvmsg+0x10/0x10 [ 372.106375][T13563] ? import_iovec+0x73/0xa0 [ 372.106401][T13563] ___sys_recvmsg+0x213/0x5a0 [ 372.106431][T13563] ? __pfx____sys_recvmsg+0x10/0x10 [ 372.106460][T13563] ? __fget_files+0x2a/0x420 [ 372.106503][T13563] ? __fget_files+0x3a2/0x420 [ 372.106538][T13563] __x64_sys_recvmsg+0x1ae/0x290 [ 372.106565][T13563] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 372.106609][T13563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.106630][T13563] do_syscall_64+0x174/0x580 [ 372.106650][T13563] ? trace_irq_disable+0x3b/0x140 [ 372.106673][T13563] ? clear_bhb_loop+0x40/0x90 [ 372.106697][T13563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.106716][T13563] RIP: 0033:0x7f2f5199de59 [ 372.106734][T13563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.106750][T13563] RSP: 002b:00007f2f5286f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 372.106771][T13563] RAX: ffffffffffffffda RBX: 00007f2f51c25fa0 RCX: 00007f2f5199de59 [ 372.106785][T13563] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000006 [ 372.106796][T13563] RBP: 00007f2f5286f090 R08: 0000000000000000 R09: 0000000000000000 [ 372.106808][T13563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.106825][T13563] R13: 00007f2f51c26038 R14: 00007f2f51c25fa0 R15: 00007fff70a396a8 [ 372.106858][T13563] [ 372.758442][T13579] lo speed is unknown, defaulting to 1000 [ 372.960153][ T5805] net_ratelimit: 30 callbacks suppressed [ 372.960174][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 373.082124][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 373.241219][ T5898] bond1: (slave bridge2): failed to get link speed/duplex [ 373.370388][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 373.479919][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 373.585635][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 373.795316][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 373.915918][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 374.044832][ T5886] bond1: (slave bridge2): failed to get link speed/duplex [ 374.135836][ T5886] bond1: (slave bridge2): failed to get link speed/duplex [ 374.842452][T13616] lo speed is unknown, defaulting to 1000 [ 374.880158][T13631] x_tables: ip_tables: osf match: only valid for protocol 6 [ 375.332744][T13643] __nla_validate_parse: 3 callbacks suppressed [ 375.332763][T13643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2557'. [ 375.969597][T13663] SET target dimension over the limit! [ 376.217383][T13671] FAULT_INJECTION: forcing a failure. [ 376.217383][T13671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.246539][T13671] CPU: 1 UID: 0 PID: 13671 Comm: syz.0.2563 Not tainted syzkaller #0 PREEMPT(full) [ 376.246566][T13671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 376.246577][T13671] Call Trace: [ 376.246585][T13671] [ 376.246593][T13671] dump_stack_lvl+0xe8/0x150 [ 376.246626][T13671] should_fail_ex+0x40c/0x560 [ 376.246659][T13671] _copy_to_user+0x31/0xb0 [ 376.246685][T13671] bpf_test_finish+0x1db/0x6b0 [ 376.246719][T13671] ? __pfx_bpf_test_finish+0x10/0x10 [ 376.246755][T13671] bpf_prog_test_run_skb+0x11fe/0x2230 [ 376.246799][T13671] ? __fget_files+0x3a2/0x420 [ 376.246822][T13671] ? __fget_files+0x2a/0x420 [ 376.246850][T13671] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 376.246882][T13671] bpf_prog_test_run+0x2c5/0x340 [ 376.246911][T13671] __sys_bpf+0xa22/0xd90 [ 376.246943][T13671] ? __pfx___sys_bpf+0x10/0x10 [ 376.246977][T13671] ? __fget_files+0x2a/0x420 [ 376.247016][T13671] ? ksys_write+0x242/0x270 [ 376.247051][T13671] ? __pfx_ksys_write+0x10/0x10 [ 376.247083][T13671] __x64_sys_bpf+0xba/0xd0 [ 376.247104][T13671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.247125][T13671] do_syscall_64+0x174/0x580 [ 376.247146][T13671] ? trace_irq_disable+0x3b/0x140 [ 376.247169][T13671] ? clear_bhb_loop+0x40/0x90 [ 376.247193][T13671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.247210][T13671] RIP: 0033:0x7fb101b9de59 [ 376.247226][T13671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.247242][T13671] RSP: 002b:00007fb1029b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 376.247261][T13671] RAX: ffffffffffffffda RBX: 00007fb101e25fa0 RCX: 00007fb101b9de59 [ 376.247274][T13671] RDX: 000000000000004c RSI: 0000200000000540 RDI: 000000000000000a [ 376.247285][T13671] RBP: 00007fb1029b5090 R08: 0000000000000000 R09: 0000000000000000 [ 376.247295][T13671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.247305][T13671] R13: 00007fb101e26038 R14: 00007fb101e25fa0 R15: 00007ffc75f5dbf8 [ 376.247331][T13671] [ 376.582384][T13677] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2567'. [ 376.702377][T13681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2565'. [ 377.156547][T13700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2572'. [ 377.995442][ T5886] net_ratelimit: 24 callbacks suppressed [ 377.995463][ T5886] bond1: (slave bridge2): failed to get link speed/duplex [ 378.000260][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2577'. [ 378.117282][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 378.174551][T13732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2582'. [ 378.217005][ T5894] bond1: (slave bridge2): failed to get link speed/duplex [ 378.323807][ T5898] bond1: (slave bridge2): failed to get link speed/duplex [ 378.395301][T13741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2586'. [ 378.459745][T13741] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.480337][T13741] bond2: entered promiscuous mode [ 378.485434][T13741] bond2: entered allmulticast mode [ 378.492632][T13741] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.501328][T13741] team0: Port device bond2 added [ 378.518485][T13741] team0: Port device bond2 removed [ 378.525539][T13741] bond2 (unregistering): Released all slaves [ 378.656622][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.664017][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.821727][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 378.931903][ T5886] bond1: (slave bridge2): failed to get link speed/duplex [ 379.062795][ T5886] bond1: (slave bridge2): failed to get link speed/duplex [ 379.170504][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 379.182640][T13762] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 379.230055][T13767] lo speed is unknown, defaulting to 1000 [ 379.297624][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 379.355782][T13768] openvswitch: netlink: Missing key (keys=40, expected=100) [ 379.395207][T13771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2595'. [ 379.412405][T13777] FAULT_INJECTION: forcing a failure. [ 379.412405][T13777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.435889][T13777] CPU: 1 UID: 0 PID: 13777 Comm: syz.2.2597 Not tainted syzkaller #0 PREEMPT(full) [ 379.435917][T13777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 379.435928][T13777] Call Trace: [ 379.435937][T13777] [ 379.435945][T13777] dump_stack_lvl+0xe8/0x150 [ 379.435978][T13777] should_fail_ex+0x40c/0x560 [ 379.436012][T13777] _copy_to_user+0x31/0xb0 [ 379.436037][T13777] bpf_test_finish+0x1db/0x6b0 [ 379.436069][T13777] ? __pfx____migrate_enable+0x10/0x10 [ 379.436138][T13777] ? __pfx_bpf_test_finish+0x10/0x10 [ 379.436161][T13777] ? preempt_schedule_common+0x82/0xd0 [ 379.436182][T13777] ? preempt_schedule_thunk+0x16/0x40 [ 379.436205][T13777] ? bpf_test_timer_leave+0x20b/0x290 [ 379.436303][T13777] bpf_prog_test_run_flow_dissector+0x478/0x610 [ 379.436342][T13777] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 379.436371][T13777] ? __fget_files+0x2a/0x420 [ 379.436402][T13777] ? __fget_files+0x2a/0x420 [ 379.436430][T13777] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 379.436457][T13777] bpf_prog_test_run+0x2c5/0x340 [ 379.436488][T13777] __sys_bpf+0xa22/0xd90 [ 379.436519][T13777] ? __pfx___sys_bpf+0x10/0x10 [ 379.436555][T13777] ? __fget_files+0x2a/0x420 [ 379.436594][T13777] ? ksys_write+0x242/0x270 [ 379.436622][T13777] ? __pfx_ksys_write+0x10/0x10 [ 379.436665][T13777] __x64_sys_bpf+0xba/0xd0 [ 379.436687][T13777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.436708][T13777] do_syscall_64+0x174/0x580 [ 379.436728][T13777] ? trace_irq_disable+0x3b/0x140 [ 379.436752][T13777] ? clear_bhb_loop+0x40/0x90 [ 379.436775][T13777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.436794][T13777] RIP: 0033:0x7f512739de59 [ 379.436812][T13777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.436829][T13777] RSP: 002b:00007f512832d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 379.436849][T13777] RAX: ffffffffffffffda RBX: 00007f5127625fa0 RCX: 00007f512739de59 [ 379.436864][T13777] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 379.436876][T13777] RBP: 00007f512832d090 R08: 0000000000000000 R09: 0000000000000000 [ 379.436889][T13777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.436900][T13777] R13: 00007f5127626038 R14: 00007f5127625fa0 R15: 00007ffc4ca0ebd8 [ 379.436936][T13777] [ 379.721974][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2600'. [ 379.750206][T13774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2598'. [ 380.198043][T13801] netlink: 'syz.1.2606': attribute type 8 has an invalid length. [ 381.079584][T13812] __nla_validate_parse: 3 callbacks suppressed [ 381.079603][T13812] netlink: 996 bytes leftover after parsing attributes in process `syz.0.2610'. [ 381.980535][T13827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2613'. [ 382.457444][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2618'. [ 382.536044][T13843] netlink: 996 bytes leftover after parsing attributes in process `syz.0.2619'. [ 383.061371][ T78] net_ratelimit: 19 callbacks suppressed [ 383.061391][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 383.170659][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 383.277816][ T5886] bond1: (slave bridge2): failed to get link speed/duplex [ 383.384961][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 383.501512][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 383.603404][ T5886] bond1: (slave bridge2): failed to get link speed/duplex [ 383.907396][ T5898] bond1: (slave bridge2): failed to get link speed/duplex [ 384.019709][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2629'. [ 384.062923][ T5886] bond1: (slave bridge2): failed to get link speed/duplex [ 384.077390][T13873] IPVS: Unknown mcast interface: veth1_to_hsr [ 384.109615][T13873] lo speed is unknown, defaulting to 1000 [ 384.169992][ T5886] bond1: (slave bridge2): failed to get link speed/duplex [ 384.297778][ T5894] bond1: (slave bridge2): failed to get link speed/duplex [ 384.382729][T13880] netlink: 'syz.0.2631': attribute type 11 has an invalid length. [ 385.118083][T13900] SET target dimension over the limit! [ 385.326438][T13908] netlink: 996 bytes leftover after parsing attributes in process `syz.2.2639'. [ 386.404641][T13923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2642'. [ 386.417435][T13924] netlink: 'syz.3.2641': attribute type 28 has an invalid length. [ 386.442933][T13924] netlink: 'syz.3.2641': attribute type 3 has an invalid length. [ 386.478620][T13924] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2641'. [ 386.566620][T13915] geneve2: entered promiscuous mode [ 386.610212][T13932] FAULT_INJECTION: forcing a failure. [ 386.610212][T13932] name failslab, interval 1, probability 0, space 0, times 0 [ 386.622880][T13932] CPU: 0 UID: 0 PID: 13932 Comm: syz.4.2644 Not tainted syzkaller #0 PREEMPT(full) [ 386.622905][T13932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 386.622916][T13932] Call Trace: [ 386.622924][T13932] [ 386.622932][T13932] dump_stack_lvl+0xe8/0x150 [ 386.622968][T13932] should_fail_ex+0x40c/0x560 [ 386.623003][T13932] should_failslab+0xa8/0x100 [ 386.623033][T13932] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 386.623055][T13932] ? local_lock_release+0x9c/0x160 [ 386.623080][T13932] ? __alloc_skb+0x1d7/0x7a0 [ 386.623098][T13932] ? __alloc_skb+0x1d7/0x7a0 [ 386.623123][T13932] __alloc_skb+0x1d7/0x7a0 [ 386.623148][T13932] netlink_ack+0x136/0xb30 [ 386.623265][T13932] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 386.623353][T13932] ? ref_tracker_free+0x689/0x830 [ 386.623407][T13932] ? __pfx_ref_tracker_free+0x10/0x10 [ 386.623436][T13932] netlink_rcv_skb+0x2a4/0x4a0 [ 386.623461][T13932] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 386.623483][T13932] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 386.623519][T13932] ? netlink_deliver_tap+0x2e/0x1b0 [ 386.623542][T13932] ? netlink_deliver_tap+0x2e/0x1b0 [ 386.623570][T13932] netlink_unicast+0x7bb/0x940 [ 386.623602][T13932] netlink_sendmsg+0x813/0xb40 [ 386.623636][T13932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.623664][T13932] ? aa_sock_msg_perm+0xf1/0x1b0 [ 386.623697][T13932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.623719][T13932] sock_sendmsg_nosec+0x13a/0x180 [ 386.623751][T13932] ____sys_sendmsg+0x54e/0x850 [ 386.623780][T13932] ? __pfx_____sys_sendmsg+0x10/0x10 [ 386.623812][T13932] ? import_iovec+0x73/0xa0 [ 386.623838][T13932] ___sys_sendmsg+0x2a5/0x360 [ 386.623868][T13932] ? __lock_acquire+0x683/0x2cf0 [ 386.623898][T13932] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.623957][T13932] ? __fget_files+0x2a/0x420 [ 386.623980][T13932] ? __fget_files+0x3a2/0x420 [ 386.624014][T13932] __x64_sys_sendmsg+0x1b1/0x290 [ 386.624040][T13932] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 386.624081][T13932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.624103][T13932] do_syscall_64+0x174/0x580 [ 386.624124][T13932] ? trace_irq_disable+0x3b/0x140 [ 386.624148][T13932] ? clear_bhb_loop+0x40/0x90 [ 386.624171][T13932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.624190][T13932] RIP: 0033:0x7f2f5199de59 [ 386.624208][T13932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.624224][T13932] RSP: 002b:00007f2f5286f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.624244][T13932] RAX: ffffffffffffffda RBX: 00007f2f51c25fa0 RCX: 00007f2f5199de59 [ 386.624258][T13932] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 386.624270][T13932] RBP: 00007f2f5286f090 R08: 0000000000000000 R09: 0000000000000000 [ 386.624282][T13932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.624293][T13932] R13: 00007f2f51c26038 R14: 00007f2f51c25fa0 R15: 00007fff70a396a8 [ 386.624324][T13932] [ 387.265035][T13954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2647'. [ 387.273951][T13954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2647'. [ 387.283186][T13955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2647'. [ 387.292069][T13955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2647'. [ 387.699819][T13953] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2648'. [ 387.954565][T13972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2654'. [ 387.964387][T13972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2654'. [ 388.010225][ T5894] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.037268][ T57] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.046120][ T57] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.096538][T13974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2655'. [ 388.111245][ T5900] net_ratelimit: 19 callbacks suppressed [ 388.122194][ T5900] bond1: (slave bridge2): failed to get link speed/duplex [ 388.332479][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 388.504755][ T5890] bond1: (slave bridge2): failed to get link speed/duplex [ 388.660231][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 388.783855][ T5890] bond1: (slave bridge2): failed to get link speed/duplex [ 388.886274][ T5898] bond1: (slave bridge2): failed to get link speed/duplex [ 389.009135][ T57] bond1: (slave bridge2): failed to get link speed/duplex [ 389.042655][T14014] xt_TCPMSS: Only works on TCP SYN packets [ 389.102653][ T5900] bond1: (slave bridge2): failed to get link speed/duplex [ 389.219601][ T5894] bond1: (slave bridge2): failed to get link speed/duplex [ 389.323845][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 389.698093][T14040] FAULT_INJECTION: forcing a failure. [ 389.698093][T14040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.721714][T14040] CPU: 1 UID: 0 PID: 14040 Comm: syz.4.2676 Not tainted syzkaller #0 PREEMPT(full) [ 389.721754][T14040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 389.721765][T14040] Call Trace: [ 389.721773][T14040] [ 389.721782][T14040] dump_stack_lvl+0xe8/0x150 [ 389.721822][T14040] should_fail_ex+0x40c/0x560 [ 389.721857][T14040] _copy_from_user+0x2d/0xb0 [ 389.721882][T14040] ___sys_sendmsg+0x1c6/0x360 [ 389.721907][T14040] ? __lock_acquire+0x683/0x2cf0 [ 389.721938][T14040] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.721995][T14040] ? __fget_files+0x2a/0x420 [ 389.722019][T14040] ? __fget_files+0x3a2/0x420 [ 389.722053][T14040] __x64_sys_sendmsg+0x1b1/0x290 [ 389.722079][T14040] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 389.722120][T14040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.722141][T14040] do_syscall_64+0x174/0x580 [ 389.722162][T14040] ? trace_irq_disable+0x3b/0x140 [ 389.722187][T14040] ? clear_bhb_loop+0x40/0x90 [ 389.722210][T14040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.722229][T14040] RIP: 0033:0x7f2f5199de59 [ 389.722247][T14040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.722263][T14040] RSP: 002b:00007f2f5286f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.722284][T14040] RAX: ffffffffffffffda RBX: 00007f2f51c25fa0 RCX: 00007f2f5199de59 [ 389.722298][T14040] RDX: 0000000020008000 RSI: 0000200000000280 RDI: 0000000000000004 [ 389.722310][T14040] RBP: 00007f2f5286f090 R08: 0000000000000000 R09: 0000000000000000 [ 389.722322][T14040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.722333][T14040] R13: 00007f2f51c26038 R14: 00007f2f51c25fa0 R15: 00007fff70a396a8 [ 389.722363][T14040] [ 390.857126][T14031] lo speed is unknown, defaulting to 1000 [ 391.009875][T14054] FAULT_INJECTION: forcing a failure. [ 391.009875][T14054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.024116][T14054] CPU: 0 UID: 0 PID: 14054 Comm: syz.4.2680 Not tainted syzkaller #0 PREEMPT(full) [ 391.024143][T14054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 391.024153][T14054] Call Trace: [ 391.024162][T14054] [ 391.024169][T14054] dump_stack_lvl+0xe8/0x150 [ 391.024206][T14054] should_fail_ex+0x40c/0x560 [ 391.024242][T14054] _copy_to_user+0x31/0xb0 [ 391.024266][T14054] bpf_test_finish+0x22c/0x6b0 [ 391.024295][T14054] ? __pfx_bpf_test_finish+0x10/0x10 [ 391.024330][T14054] bpf_prog_test_run_skb+0x11fe/0x2230 [ 391.024373][T14054] ? __fget_files+0x3a2/0x420 [ 391.024397][T14054] ? __fget_files+0x2a/0x420 [ 391.024425][T14054] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 391.024449][T14054] bpf_prog_test_run+0x2c5/0x340 [ 391.024479][T14054] __sys_bpf+0xa22/0xd90 [ 391.024509][T14054] ? __pfx___sys_bpf+0x10/0x10 [ 391.024544][T14054] ? __fget_files+0x2a/0x420 [ 391.024584][T14054] ? ksys_write+0x242/0x270 [ 391.024614][T14054] ? __pfx_ksys_write+0x10/0x10 [ 391.024646][T14054] __x64_sys_bpf+0xba/0xd0 [ 391.024668][T14054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.024689][T14054] do_syscall_64+0x174/0x580 [ 391.024710][T14054] ? trace_irq_disable+0x3b/0x140 [ 391.024732][T14054] ? clear_bhb_loop+0x40/0x90 [ 391.024756][T14054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.024775][T14054] RIP: 0033:0x7f2f5199de59 [ 391.024793][T14054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.024808][T14054] RSP: 002b:00007f2f5286f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 391.024828][T14054] RAX: ffffffffffffffda RBX: 00007f2f51c25fa0 RCX: 00007f2f5199de59 [ 391.024841][T14054] RDX: 000000000000004c RSI: 0000200000000540 RDI: 000000000000000a [ 391.024853][T14054] RBP: 00007f2f5286f090 R08: 0000000000000000 R09: 0000000000000000 [ 391.024872][T14054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.024883][T14054] R13: 00007f2f51c26038 R14: 00007f2f51c25fa0 R15: 00007fff70a396a8 [ 391.024914][T14054] [ 391.866819][T14073] __nla_validate_parse: 3 callbacks suppressed [ 391.866836][T14073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2685'. [ 391.914962][T14071] netlink: 'syz.1.2685': attribute type 1 has an invalid length. [ 391.923037][T14071] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2685'. [ 392.078632][T14079] netlink: 'syz.2.2687': attribute type 3 has an invalid length. [ 392.086727][T14079] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2687'. [ 392.308622][T14083] netlink: 'syz.4.2689': attribute type 3 has an invalid length. [ 392.316417][T14083] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2689'. [ 392.969258][T14093] syzkaller0: left allmulticast mode [ 393.189680][ T5894] net_ratelimit: 12 callbacks suppressed [ 393.189699][ T5894] bond1: (slave bridge2): failed to get link speed/duplex [ 393.332062][ T5898] bond1: (slave bridge2): failed to get link speed/duplex [ 393.462766][ T5886] bond1: (slave bridge2): failed to get link speed/duplex [ 393.566781][ T6985] udevd[6985]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 393.669628][ T5890] bond1: (slave bridge2): failed to get link speed/duplex [ 393.696121][T14119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2702'. [ 393.740628][T14119] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2702'. [ 393.784783][ T5890] bond1: (slave bridge2): failed to get link speed/duplex [ 394.359980][T14127] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2706'. [ 394.506295][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 394.613455][ T5886] bond1: (slave bridge2): failed to get link speed/duplex [ 394.673544][T14135] tipc: Enabling of bearer rejected, already enabled [ 394.724451][ T5900] bond1: (slave bridge2): failed to get link speed/duplex [ 394.851983][ T5886] bond1: (slave bridge2): failed to get link speed/duplex [ 394.976039][ T5886] bond1: (slave bridge2): failed to get link speed/duplex [ 395.125977][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2715'. [ 395.206423][T14147] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2715'. [ 395.540034][T14175] sctp: [Deprecated]: syz.0.2721 (pid 14175) Use of int in max_burst socket option. [ 395.540034][T14175] Use struct sctp_assoc_value instead [ 395.957458][T14190] netlink: 'syz.1.2724': attribute type 1 has an invalid length. [ 396.234349][T14190] 8021q: adding VLAN 0 to HW filter on device bond6 [ 396.278129][T14204] bond4: (slave dummy0): Releasing active interface [ 396.302584][T14204] bond6: (slave dummy0): making interface the new active one [ 396.311591][T14204] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 396.351988][T14210] netlink: 'syz.3.2728': attribute type 3 has an invalid length. [ 396.370235][T14210] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2728'. [ 396.905856][T14232] __nla_validate_parse: 2 callbacks suppressed [ 396.905875][T14232] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2735'. [ 397.476900][ T5641] block nbd4: Receive control failed (result -32) [ 397.493186][T14228] nbd4: detected capacity change from 0 to 63 [ 397.527079][ T664] block nbd4: Dead connection, failed to find a fallback [ 397.534577][ T664] block nbd4: shutting down sockets [ 397.540002][ T664] blk_print_req_error: 105 callbacks suppressed [ 397.540018][ T664] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 397.555330][ T664] buffer_io_error: 138 callbacks suppressed [ 397.555428][ T664] Buffer I/O error on dev nbd4, logical block 0, async page read [ 397.569214][ T664] Buffer I/O error on dev nbd4, logical block 1, async page read [ 397.577080][ T664] Buffer I/O error on dev nbd4, logical block 2, async page read [ 397.597094][ T664] Buffer I/O error on dev nbd4, logical block 3, async page read [ 397.607690][ T664] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 397.616819][ T664] Buffer I/O error on dev nbd4, logical block 0, async page read [ 397.624708][ T664] Buffer I/O error on dev nbd4, logical block 1, async page read [ 397.632504][ T664] Buffer I/O error on dev nbd4, logical block 2, async page read [ 397.640298][ T664] Buffer I/O error on dev nbd4, logical block 3, async page read [ 397.648345][ T664] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 397.657468][ T664] Buffer I/O error on dev nbd4, logical block 0, async page read [ 397.665267][ T664] Buffer I/O error on dev nbd4, logical block 1, async page read [ 397.673406][ T664] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 397.682893][ T664] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 397.692434][ T664] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 397.732750][ T664] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 397.742214][ T664] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 397.751471][ T6985] ldm_validate_partition_table(): Disk read failed. [ 397.758300][ T664] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 397.767825][ T664] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 397.777835][ T6985] Dev nbd4: unable to read RDB block 0 [ 397.785730][ T6985] nbd4: unable to read partition table [ 397.833519][ T6985] ldm_validate_partition_table(): Disk read failed. [ 397.842467][ T6985] Dev nbd4: unable to read RDB block 0 [ 397.850521][ T6985] nbd4: unable to read partition table [ 398.028007][T14274] 8021q: adding VLAN 0 to HW filter on device bond2 [ 398.123109][ T5890] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 398.131974][ T5890] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 398.140782][ T5890] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 398.206349][ T5890] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 398.277373][ T5896] net_ratelimit: 19 callbacks suppressed [ 398.277401][ T5896] bond1: (slave bridge2): failed to get link speed/duplex [ 398.474549][ T5890] bond1: (slave bridge2): failed to get link speed/duplex [ 398.606464][ T5898] bond1: (slave bridge2): failed to get link speed/duplex [ 398.723334][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 398.799232][T14297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2750'. [ 398.830354][ T5898] bond1: (slave bridge2): failed to get link speed/duplex [ 398.885853][T14293] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2750'. [ 398.953037][ T5900] bond1: (slave bridge2): failed to get link speed/duplex [ 399.098256][T14308] bridge0: port 3(syz_tun) entered blocking state [ 399.122037][T14308] bridge0: port 3(syz_tun) entered disabled state [ 399.162009][T14310] netdevsim netdevsim0: Direct firmware load for .® failed with error -2 [ 399.170818][T14310] netdevsim netdevsim0: Falling back to sysfs fallback for: .® [ 399.186337][T14308] syz_tun: entered allmulticast mode [ 399.203508][T14308] syz_tun: entered promiscuous mode [ 399.209499][T14308] bridge0: port 3(syz_tun) entered blocking state [ 399.216494][T14308] bridge0: port 3(syz_tun) entered forwarding state [ 399.267761][ T5898] bond1: (slave bridge2): failed to get link speed/duplex [ 399.395725][ T5890] bond1: (slave bridge2): failed to get link speed/duplex [ 399.504284][ T5898] bond1: (slave bridge2): failed to get link speed/duplex [ 399.634890][ T5898] bond1: (slave bridge2): failed to get link speed/duplex [ 400.410658][T14360] netlink: 'syz.1.2769': attribute type 3 has an invalid length. [ 400.450799][T14363] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2770'. [ 400.471733][T14363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2770'. [ 400.507050][T14366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2772'. [ 400.541424][T14366] ip6erspan0: entered promiscuous mode [ 400.792144][T14371] tipc: Enabled bearer , priority 0 [ 400.829269][T14377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2776'. [ 400.967711][T14381] tipc: Enabling of bearer rejected, already enabled [ 401.236882][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2776'. [ 402.192910][T14412] xt_connbytes: Forcing CT accounting to be enabled [ 402.500129][T14423] netlink: 996 bytes leftover after parsing attributes in process `syz.1.2790'. [ 402.602534][T14425] FAULT_INJECTION: forcing a failure. [ 402.602534][T14425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.643037][T14425] CPU: 1 UID: 0 PID: 14425 Comm: syz.4.2791 Not tainted syzkaller #0 PREEMPT(full) [ 402.643068][T14425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 402.643080][T14425] Call Trace: [ 402.643087][T14425] [ 402.643096][T14425] dump_stack_lvl+0xe8/0x150 [ 402.643129][T14425] should_fail_ex+0x40c/0x560 [ 402.643162][T14425] _copy_from_iter+0x1d3/0x1660 [ 402.643181][T14425] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 402.643206][T14425] ? rcu_is_watching+0x15/0xb0 [ 402.643234][T14425] ? trace_kmem_cache_alloc+0x29/0xe0 [ 402.643258][T14425] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 402.643280][T14425] ? __pfx__copy_from_iter+0x10/0x10 [ 402.643298][T14425] ? __alloc_skb+0x276/0x7a0 [ 402.643318][T14425] ? __alloc_skb+0x276/0x7a0 [ 402.643343][T14425] ? netlink_sendmsg+0x650/0xb40 [ 402.643367][T14425] ? skb_put+0x112/0x210 [ 402.643390][T14425] netlink_sendmsg+0x6c0/0xb40 [ 402.643424][T14425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.643451][T14425] ? aa_sock_msg_perm+0xf1/0x1b0 [ 402.643489][T14425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.643512][T14425] sock_sendmsg_nosec+0x13a/0x180 [ 402.643544][T14425] ____sys_sendmsg+0x54e/0x850 [ 402.643572][T14425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.643604][T14425] ? import_iovec+0x73/0xa0 [ 402.643630][T14425] ___sys_sendmsg+0x2a5/0x360 [ 402.643652][T14425] ? __lock_acquire+0x683/0x2cf0 [ 402.643681][T14425] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.643740][T14425] ? __fget_files+0x2a/0x420 [ 402.643763][T14425] ? __fget_files+0x3a2/0x420 [ 402.643797][T14425] __x64_sys_sendmsg+0x1b1/0x290 [ 402.643823][T14425] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 402.643864][T14425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.643885][T14425] do_syscall_64+0x174/0x580 [ 402.643905][T14425] ? trace_irq_disable+0x3b/0x140 [ 402.643928][T14425] ? clear_bhb_loop+0x40/0x90 [ 402.643952][T14425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.643971][T14425] RIP: 0033:0x7f2f5199de59 [ 402.643989][T14425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.644005][T14425] RSP: 002b:00007f2f5286f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.644025][T14425] RAX: ffffffffffffffda RBX: 00007f2f51c25fa0 RCX: 00007f2f5199de59 [ 402.644039][T14425] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 402.644051][T14425] RBP: 00007f2f5286f090 R08: 0000000000000000 R09: 0000000000000000 [ 402.644062][T14425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.644074][T14425] R13: 00007f2f51c26038 R14: 00007f2f51c25fa0 R15: 00007fff70a396a8 [ 402.644105][T14425] [ 403.397802][ T48] net_ratelimit: 29 callbacks suppressed [ 403.397821][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 403.528917][T14445] tipc: Enabling of bearer rejected, already enabled [ 403.612871][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 403.622476][T14443] xt_CT: No such helper "netbios-ns" [ 403.735564][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 403.772513][T14454] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2801'. [ 403.884748][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 403.979992][T14458] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2802'. [ 403.994356][T14458] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2802'. [ 404.071417][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 404.245159][T14464] lo speed is unknown, defaulting to 1000 [ 404.245469][T14467] openvswitch: netlink: Key type 132 is out of range max 32 [ 404.413013][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 404.531460][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 404.694437][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 404.817376][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 405.706498][T14496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2815'. [ 405.861254][T14501] syzkaller0: left promiscuous mode [ 405.992777][T14501] veth5: left promiscuous mode [ 406.145816][T14505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2817'. [ 406.682256][T14515] FAULT_INJECTION: forcing a failure. [ 406.682256][T14515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.696412][T14515] CPU: 1 UID: 0 PID: 14515 Comm: syz.3.2820 Not tainted syzkaller #0 PREEMPT(full) [ 406.696437][T14515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 406.696448][T14515] Call Trace: [ 406.696456][T14515] [ 406.696464][T14515] dump_stack_lvl+0xe8/0x150 [ 406.696496][T14515] should_fail_ex+0x40c/0x560 [ 406.696528][T14515] _copy_from_user+0x2d/0xb0 [ 406.696553][T14515] kstrtouint_from_user+0xd6/0x180 [ 406.696697][T14515] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 406.696743][T14515] proc_fail_nth_write+0x8e/0x210 [ 406.696785][T14515] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 406.696817][T14515] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 406.696841][T14515] vfs_write+0x296/0xba0 [ 406.696878][T14515] ? __pfx_vfs_write+0x10/0x10 [ 406.696908][T14515] ? __fget_files+0x2a/0x420 [ 406.696935][T14515] ? __fget_files+0x3a2/0x420 [ 406.696957][T14515] ? __fget_files+0x2a/0x420 [ 406.696989][T14515] ksys_write+0x150/0x270 [ 406.697019][T14515] ? __pfx_ksys_write+0x10/0x10 [ 406.697060][T14515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.697081][T14515] do_syscall_64+0x174/0x580 [ 406.697103][T14515] ? trace_irq_disable+0x3b/0x140 [ 406.697126][T14515] ? clear_bhb_loop+0x40/0x90 [ 406.697148][T14515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.697168][T14515] RIP: 0033:0x7f675a35e68e [ 406.697186][T14515] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 406.697202][T14515] RSP: 002b:00007f675b1f1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 406.697222][T14515] RAX: ffffffffffffffda RBX: 00007f675b1f26c0 RCX: 00007f675a35e68e [ 406.697237][T14515] RDX: 0000000000000001 RSI: 00007f675b1f20a0 RDI: 0000000000000004 [ 406.697249][T14515] RBP: 00007f675b1f2090 R08: 0000000000000000 R09: 0000000000000000 [ 406.697261][T14515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 406.697271][T14515] R13: 00007f675a626038 R14: 00007f675a625fa0 R15: 00007ffe634c2a88 [ 406.697303][T14515] [ 406.924239][T14519] digital: digital_start_poll: Unknown protocol [ 407.870165][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2831'. [ 407.947208][T14546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2832'. [ 408.018530][T14551] bridge0: entered promiscuous mode [ 408.039202][T14551] bridge0: entered allmulticast mode [ 408.187703][T14560] netlink: 'syz.0.2837': attribute type 1 has an invalid length. [ 408.516268][ T5890] net_ratelimit: 22 callbacks suppressed [ 408.516291][ T5890] bond1: (slave bridge2): failed to get link speed/duplex [ 408.644459][T14560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2837'. [ 408.703837][ T30] audit: type=1800 audit(1783059413.126:2): pid=14587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2843" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=2970 res=0 errno=0 [ 408.769607][ T5890] bond1: (slave bridge2): failed to get link speed/duplex [ 408.898055][ T5890] bond1: (slave bridge2): failed to get link speed/duplex [ 409.001714][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 409.104402][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 409.208068][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 409.332520][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 409.441709][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 409.553322][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 409.661460][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 411.180761][T14561] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 411.217555][T14600] netlink: 'syz.2.2844': attribute type 1 has an invalid length. [ 411.235352][T14600] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2844'. [ 411.639808][T14615] netlink: 'syz.4.2849': attribute type 83 has an invalid length. [ 411.929157][T14625] FAULT_INJECTION: forcing a failure. [ 411.929157][T14625] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 411.942418][T14625] CPU: 0 UID: 0 PID: 14625 Comm: syz.2.2852 Not tainted syzkaller #0 PREEMPT(full) [ 411.942446][T14625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 411.942456][T14625] Call Trace: [ 411.942468][T14625] [ 411.942478][T14625] dump_stack_lvl+0xe8/0x150 [ 411.942512][T14625] should_fail_ex+0x40c/0x560 [ 411.942543][T14625] prepare_alloc_pages+0x230/0x650 [ 411.942575][T14625] __alloc_frozen_pages_noprof+0x12f/0x380 [ 411.942600][T14625] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 411.942627][T14625] ? __pfx_policy_nodemask+0x10/0x10 [ 411.942658][T14625] ? __folio_batch_add_and_move+0x11a/0xc50 [ 411.942681][T14625] ? lock_acquire+0x106/0x350 [ 411.942713][T14625] alloc_pages_mpol+0x212/0x380 [ 411.942745][T14625] folio_alloc_mpol_noprof+0x39/0x160 [ 411.942775][T14625] vma_alloc_folio_noprof+0xe1/0x1e0 [ 411.942803][T14625] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 411.942840][T14625] do_wp_page+0x1163/0x4c70 [ 411.942874][T14625] ? __pfx_do_wp_page+0x10/0x10 [ 411.942886][T14625] ? do_raw_spin_lock+0x12b/0x2f0 [ 411.942910][T14625] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 411.942939][T14625] handle_mm_fault+0x1490/0x3080 [ 411.942974][T14625] ? handle_mm_fault+0xec/0x3080 [ 411.943002][T14625] ? __pfx_handle_mm_fault+0x10/0x10 [ 411.943021][T14625] ? follow_page_pte+0xbd0/0xe70 [ 411.943051][T14625] ? __pfx_follow_page_pte+0x10/0x10 [ 411.943083][T14625] __get_user_pages+0x1678/0x2720 [ 411.943147][T14625] __gup_longterm_locked+0xd52/0x15c0 [ 411.943170][T14625] ? lock_acquire+0x106/0x350 [ 411.943201][T14625] ? sanity_check_pinned_pages+0x810/0x8d0 [ 411.943236][T14625] gup_fast_fallback+0x1d8c/0x20e0 [ 411.943288][T14625] ? __pfx_gup_fast_fallback+0x10/0x10 [ 411.943305][T14625] ? __kmalloc_noprof+0x1ad/0x720 [ 411.943329][T14625] ? kasan_save_track+0x4f/0x80 [ 411.943357][T14625] ? pin_user_pages_fast+0x4d/0xb0 [ 411.943379][T14625] iov_iter_extract_pages+0x369/0x5f0 [ 411.943414][T14625] extract_iter_to_sg+0xee0/0x25f0 [ 411.943450][T14625] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 411.943477][T14625] ? rcu_is_watching+0x15/0xb0 [ 411.943507][T14625] ? trace_kmalloc+0x2a/0xf0 [ 411.943531][T14625] ? __asan_memset+0x22/0x50 [ 411.943552][T14625] af_alg_get_rsgl+0x493/0x8d0 [ 411.943587][T14625] ? af_alg_alloc_areq+0xac/0x200 [ 411.943612][T14625] skcipher_recvmsg+0x39d/0xe10 [ 411.943659][T14625] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 411.943676][T14625] ? __lock_acquire+0x683/0x2cf0 [ 411.943700][T14625] ? aa_sock_msg_perm+0xf1/0x1b0 [ 411.943728][T14625] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 411.943747][T14625] ? security_socket_recvmsg+0x7e/0x2c0 [ 411.943767][T14625] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 411.943785][T14625] sock_recvmsg+0x196/0x1e0 [ 411.943817][T14625] ____sys_recvmsg+0x1e6/0x4a0 [ 411.943849][T14625] ? __pfx_____sys_recvmsg+0x10/0x10 [ 411.943886][T14625] ? import_iovec+0x73/0xa0 [ 411.943910][T14625] ___sys_recvmsg+0x213/0x5a0 [ 411.943937][T14625] ? __pfx____sys_recvmsg+0x10/0x10 [ 411.943964][T14625] ? __fget_files+0x2a/0x420 [ 411.944002][T14625] ? __fget_files+0x3a2/0x420 [ 411.944035][T14625] __x64_sys_recvmsg+0x1ae/0x290 [ 411.944061][T14625] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 411.944098][T14625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.944120][T14625] do_syscall_64+0x174/0x580 [ 411.944141][T14625] ? trace_irq_disable+0x3b/0x140 [ 411.944164][T14625] ? clear_bhb_loop+0x40/0x90 [ 411.944188][T14625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.944207][T14625] RIP: 0033:0x7f512739de59 [ 411.944227][T14625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.944244][T14625] RSP: 002b:00007f512832d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 411.944266][T14625] RAX: ffffffffffffffda RBX: 00007f5127625fa0 RCX: 00007f512739de59 [ 411.944279][T14625] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 411.944291][T14625] RBP: 00007f512832d090 R08: 0000000000000000 R09: 0000000000000000 [ 411.944302][T14625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 411.944312][T14625] R13: 00007f5127626038 R14: 00007f5127625fa0 R15: 00007ffc4ca0ebd8 [ 411.944342][T14625] [ 411.950959][T14623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2851'. [ 412.131038][T14628] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2854'. [ 412.356763][T14633] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2855'. [ 412.883057][T14651] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.2860'. [ 413.216673][T14674] Bluetooth: MGMT ver 1.23 [ 413.480526][T14682] syzkaller0: entered allmulticast mode [ 413.511661][ T48] net_ratelimit: 28 callbacks suppressed [ 413.511683][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 413.638806][T14689] netlink: 'syz.3.2873': attribute type 3 has an invalid length. [ 413.646789][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 413.751519][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 413.871649][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 414.096550][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 414.203328][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 414.233250][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 414.248279][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 414.270689][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 414.283754][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 414.310477][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 414.319180][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 414.439672][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 414.541794][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 414.635106][T14718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2883'. [ 414.802030][T14718] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2883'. [ 414.839898][T14728] netlink: 'syz.3.2886': attribute type 3 has an invalid length. [ 414.852633][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 414.865289][T14728] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2886'. [ 415.307750][T14746] FAULT_INJECTION: forcing a failure. [ 415.307750][T14746] name failslab, interval 1, probability 0, space 0, times 0 [ 415.320411][T14746] CPU: 0 UID: 0 PID: 14746 Comm: syz.3.2889 Not tainted syzkaller #0 PREEMPT(full) [ 415.320437][T14746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 415.320448][T14746] Call Trace: [ 415.320456][T14746] [ 415.320464][T14746] dump_stack_lvl+0xe8/0x150 [ 415.320502][T14746] should_fail_ex+0x40c/0x560 [ 415.320538][T14746] should_failslab+0xa8/0x100 [ 415.320568][T14746] __kmalloc_noprof+0xfe/0x720 [ 415.320593][T14746] ? tomoyo_encode+0x2ad/0x570 [ 415.320713][T14746] ? tomoyo_encode+0x2ad/0x570 [ 415.320744][T14746] tomoyo_encode+0x2ad/0x570 [ 415.320774][T14746] tomoyo_realpath_from_path+0x5fa/0x640 [ 415.320811][T14746] ? tomoyo_path_number_perm+0x219/0x5f0 [ 415.320831][T14746] tomoyo_path_number_perm+0x246/0x5f0 [ 415.320856][T14746] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 415.320876][T14746] ? __lock_acquire+0x683/0x2cf0 [ 415.320916][T14746] ? hook_file_ioctl+0x1f0/0x5f0 [ 415.320992][T14746] ? __fget_files+0x2a/0x420 [ 415.321016][T14746] ? __fget_files+0x2a/0x420 [ 415.321036][T14746] ? __fget_files+0x3a2/0x420 [ 415.321056][T14746] ? __fget_files+0x2a/0x420 [ 415.321081][T14746] security_file_ioctl+0xc3/0x2a0 [ 415.321132][T14746] __se_sys_ioctl+0x47/0x170 [ 415.321149][T14746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.321171][T14746] do_syscall_64+0x174/0x580 [ 415.321193][T14746] ? trace_irq_disable+0x3b/0x140 [ 415.321216][T14746] ? clear_bhb_loop+0x40/0x90 [ 415.321239][T14746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.321257][T14746] RIP: 0033:0x7f675a39de59 [ 415.321274][T14746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.321289][T14746] RSP: 002b:00007f675b1b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 415.321308][T14746] RAX: ffffffffffffffda RBX: 00007f675a626180 RCX: 00007f675a39de59 [ 415.321321][T14746] RDX: 0000200000000540 RSI: 000000000000891c RDI: 0000000000000006 [ 415.321332][T14746] RBP: 00007f675b1b0090 R08: 0000000000000000 R09: 0000000000000000 [ 415.321343][T14746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.321355][T14746] R13: 00007f675a626218 R14: 00007f675a626180 R15: 00007ffe634c2a88 [ 415.321384][T14746] [ 415.321404][T14746] ERROR: Out of memory at tomoyo_realpath_from_path. [ 415.759216][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.769738][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.820048][T14697] lo speed is unknown, defaulting to 1000 [ 416.333652][ T50] Bluetooth: hci5: command tx timeout [ 416.362741][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.381600][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.544184][ T13] bridge0: port 3(netdevsim1) entered disabled state [ 416.656024][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): left allmulticast mode [ 416.667513][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode [ 416.677540][ T13] bridge0: port 3(netdevsim1) entered disabled state [ 416.697714][T14789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2901'. [ 416.760275][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.770598][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.809846][T14809] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2907'. [ 418.020435][T14813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2908'. [ 418.367436][T14821] syzkaller0: entered promiscuous mode [ 418.389766][T14821] syzkaller0: entered allmulticast mode [ 418.442881][ T50] Bluetooth: hci5: command tx timeout [ 418.461493][T14697] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.468683][T14697] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.475922][T14697] bridge_slave_0: entered allmulticast mode [ 418.548440][T14697] bridge_slave_0: entered promiscuous mode [ 418.557807][T14697] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.565033][T14697] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.581217][T14697] bridge_slave_1: entered allmulticast mode [ 418.636945][T14697] bridge_slave_1: entered promiscuous mode [ 418.733261][T14834] netlink: 'syz.2.2914': attribute type 3 has an invalid length. [ 418.757452][T14697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.770391][T14697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.871374][T14834] 8021q: VLANs not supported on sit0 [ 418.911870][T14697] team0: Port device team_slave_0 added [ 418.921169][T14697] team0: Port device team_slave_1 added [ 418.995888][T14697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.002873][T14697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.028842][T14697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.059811][T14697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.082808][T14697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.147890][T14697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.438430][ T13] bridge_slave_1: left allmulticast mode [ 419.445322][ T13] bridge_slave_1: left promiscuous mode [ 419.452047][T14846] xt_TCPMSS: Only works on TCP SYN packets [ 419.460489][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.472456][ T13] bridge_slave_0: left allmulticast mode [ 419.480264][ T13] bridge_slave_0: left promiscuous mode [ 419.489330][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.549957][ T13] tipc: Resetting bearer [ 420.256729][T14874] SET target dimension over the limit! [ 420.357654][T14876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2921'. [ 420.502484][ T50] Bluetooth: hci5: command tx timeout [ 420.863672][T14878] FAULT_INJECTION: forcing a failure. [ 420.863672][T14878] name failslab, interval 1, probability 0, space 0, times 0 [ 420.876347][T14878] CPU: 0 UID: 0 PID: 14878 Comm: syz.3.2922 Not tainted syzkaller #0 PREEMPT(full) [ 420.876373][T14878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 420.876384][T14878] Call Trace: [ 420.876394][T14878] [ 420.876403][T14878] dump_stack_lvl+0xe8/0x150 [ 420.876438][T14878] should_fail_ex+0x40c/0x560 [ 420.876473][T14878] should_failslab+0xa8/0x100 [ 420.876503][T14878] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 420.876527][T14878] ? skb_clone+0x212/0x3a0 [ 420.876550][T14878] ? skb_clone+0x212/0x3a0 [ 420.876580][T14878] skb_clone+0x212/0x3a0 [ 420.876613][T14878] __netlink_deliver_tap+0x413/0x860 [ 420.876651][T14878] ? netlink_deliver_tap+0x2e/0x1b0 [ 420.876678][T14878] netlink_deliver_tap+0x19c/0x1b0 [ 420.876703][T14878] netlink_unicast+0x77f/0x940 [ 420.876736][T14878] netlink_sendmsg+0x813/0xb40 [ 420.876770][T14878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.876799][T14878] ? aa_sock_msg_perm+0xf1/0x1b0 [ 420.876831][T14878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.876853][T14878] sock_sendmsg_nosec+0x13a/0x180 [ 420.876885][T14878] ____sys_sendmsg+0x54e/0x850 [ 420.876914][T14878] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.876946][T14878] ? import_iovec+0x73/0xa0 [ 420.876974][T14878] ___sys_sendmsg+0x2a5/0x360 [ 420.876996][T14878] ? __lock_acquire+0x683/0x2cf0 [ 420.877026][T14878] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.877090][T14878] ? __fget_files+0x2a/0x420 [ 420.877113][T14878] ? __fget_files+0x3a2/0x420 [ 420.877147][T14878] __x64_sys_sendmsg+0x1b1/0x290 [ 420.877173][T14878] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 420.877215][T14878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.877237][T14878] do_syscall_64+0x174/0x580 [ 420.877257][T14878] ? trace_irq_disable+0x3b/0x140 [ 420.877281][T14878] ? clear_bhb_loop+0x40/0x90 [ 420.877305][T14878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.877324][T14878] RIP: 0033:0x7f675a39de59 [ 420.877343][T14878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.877359][T14878] RSP: 002b:00007f675b1f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.877379][T14878] RAX: ffffffffffffffda RBX: 00007f675a625fa0 RCX: 00007f675a39de59 [ 420.877393][T14878] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 420.877405][T14878] RBP: 00007f675b1f2090 R08: 0000000000000000 R09: 0000000000000000 [ 420.877416][T14878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.877427][T14878] R13: 00007f675a626038 R14: 00007f675a625fa0 R15: 00007ffe634c2a88 [ 420.877458][T14878] [ 420.877540][T14878] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2922'. [ 421.224509][ T13] tipc: Disabling bearer [ 421.324310][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.340571][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.351391][ T13] bond0 (unregistering): Released all slaves [ 421.407304][ T5805] net_ratelimit: 11 callbacks suppressed [ 421.407325][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 421.444481][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 421.584787][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 421.649639][T14697] hsr_slave_0: entered promiscuous mode [ 421.661968][T14697] hsr_slave_1: entered promiscuous mode [ 421.816807][ T13] tipc: Disabling bearer [ 421.875223][T14888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2925'. [ 421.891596][ T13] tipc: Left network mode [ 421.961233][ T5896] bond1: (slave bridge2): failed to get link speed/duplex [ 422.176067][T14895] Set syz1 is full, maxelem 65536 reached [ 422.605431][ T50] Bluetooth: hci5: command tx timeout [ 422.618566][ T5805] bond1: (slave bridge2): failed to get link speed/duplex [ 422.692272][T14905] nbd: socks must be embedded in a SOCK_ITEM attr [ 422.979910][T14915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2931'. [ 423.009968][T14905] nbd: couldn't find a device at index 0 [ 423.026849][T14912] batadv_slave_1: entered promiscuous mode [ 423.366063][T14916] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2931'. [ 423.399165][ T5898] bond1: (slave bridge2): failed to get link speed/duplex [ 423.614579][T14902] lo speed is unknown, defaulting to 1000 [ 423.632114][T14905] batadv_slave_1: left promiscuous mode [ 423.713545][T14929] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2934'. [ 425.004544][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 425.052386][ T5890] bond1: (slave bridge2): failed to get link speed/duplex [ 425.079489][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2940'. [ 425.722292][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 425.870304][ T5894] bond1: (slave bridge2): failed to get link speed/duplex [ 426.047885][ T5896] bond1: (slave bridge2): failed to get link speed/duplex [ 426.509578][ T57] net_ratelimit: 2 callbacks suppressed [ 426.509598][ T57] bond1: (slave bridge2): failed to get link speed/duplex [ 426.951939][T14995] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2946'. [ 427.053891][ T5894] bond1: (slave bridge2): failed to get link speed/duplex [ 427.561108][T15001] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2947'. [ 427.610303][ T5900] bond1: (slave bridge2): failed to get link speed/duplex [ 427.724745][ T5890] bond1: (slave bridge2): failed to get link speed/duplex [ 428.406987][T15011] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 428.421047][T15011] bond3 (unregistering): Released all slaves [ 428.479653][ T13] hsr_slave_0: left promiscuous mode [ 428.554810][ T13] hsr_slave_1: left promiscuous mode [ 428.561000][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.568458][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.613064][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.620520][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.628603][ T13] batman_adv: batadv0: Interface deactivated: vlan2 [ 428.635230][ T13] batman_adv: batadv0: Removing interface: vlan2 [ 428.780944][ T13] veth0_macvtap: left promiscuous mode [ 428.786883][ T13] veth1_vlan: left promiscuous mode [ 428.792167][ T13] veth0_vlan: left promiscuous mode [ 429.672605][ T13] team0 (unregistering): Port device team_slave_1 removed [ 429.688647][ T13] team0 (unregistering): Port device team_slave_0 removed [ 429.871504][T15033] syzkaller0: entered promiscuous mode [ 429.877046][T15033] syzkaller0: entered allmulticast mode [ 429.884583][T15037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2955'. [ 430.069657][ T5890] bond1: (slave bridge2): failed to get link speed/duplex [ 430.226135][T14697] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 430.236631][T14697] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 430.306437][T14697] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 430.335209][T14697] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 430.352680][T14697] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 430.483184][T14697] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 430.493637][T14697] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 430.545962][T14697] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 430.746436][T15065] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20002 [ 431.009755][T15058] xt_CT: You must specify a L4 protocol and not use inversions on it [ 431.269091][T14697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.403606][T14697] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.451094][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.460830][ T5805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.496071][ T5894] bond1: (slave bridge2): failed to get link speed/duplex [ 431.507942][T15082] syzkaller1: entered promiscuous mode [ 431.513485][T15082] syzkaller1: entered allmulticast mode [ 431.577608][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.586798][ T5805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.975135][T14697] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 431.985535][T14697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 432.053504][ T33] bond1: (slave bridge2): failed to get link speed/duplex [ 432.190201][ T5890] bond1: (slave bridge2): failed to get link speed/duplex [ 432.320362][ T5890] bond1: (slave bridge2): failed to get link speed/duplex [ 432.466959][ T5886] bond1: (slave bridge2): failed to get link speed/duplex [ 432.618117][ T33] bond1: (slave bridge2): failed to get link speed/duplex [ 432.814125][ T148] bond1: (slave bridge2): failed to get link speed/duplex [ 433.060360][T15130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2965'. [ 433.262140][T15125] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2965'. [ 433.631467][ T33] bond1: (slave bridge2): failed to get link speed/duplex [ 433.841078][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 433.936627][ T5886] bond1: (slave bridge2): failed to get link speed/duplex [ 434.070532][T15154] lo speed is unknown, defaulting to 1000 [ 434.084701][ T5886] bond1: (slave bridge2): failed to get link speed/duplex [ 434.120094][T14697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.259678][T15153] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2971'. [ 434.322779][T14697] veth0_vlan: entered promiscuous mode [ 434.371468][T14697] veth1_vlan: entered promiscuous mode [ 434.462368][T14697] veth0_macvtap: entered promiscuous mode [ 434.532775][T14697] veth1_macvtap: entered promiscuous mode [ 434.645581][T14697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.691153][T14697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.728492][ T5894] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.738208][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2973'. [ 434.747180][ T5894] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.852124][ T5894] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.860921][ T5894] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.057474][T15167] xt_hashlimit: size too large, truncated to 1048576 [ 435.310789][T15186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2975'. [ 435.741915][T15177] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2975'. [ 436.113194][T15199] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 436.259279][T15205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2978'. [ 436.376793][T15206] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2978'. [ 436.543980][T15199] bond6: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 436.620688][T15199] bond6 (unregistering): Released all slaves [ 437.054613][ T5886] [ 437.057013][ T5886] ============================================ [ 437.063255][ T5886] WARNING: possible recursive locking detected [ 437.069563][ T5886] syzkaller #0 Not tainted [ 437.073987][ T5886] -------------------------------------------- [ 437.080211][ T5886] kworker/u8:10/5886 is trying to acquire lock: [ 437.086453][ T5886] ffff88807a31bd58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 437.096485][ T5886] [ 437.096485][ T5886] but task is already holding lock: [ 437.103863][ T5886] ffff8880322f0158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 437.113816][ T5886] [ 437.113816][ T5886] other info that might help us debug this: [ 437.121885][ T5886] Possible unsafe locking scenario: [ 437.121885][ T5886] [ 437.129370][ T5886] CPU0 [ 437.132651][ T5886] ---- [ 437.135970][ T5886] lock(&qdisc_xmit_lock_key#4); [ 437.141046][ T5886] lock(&qdisc_xmit_lock_key#4); [ 437.146087][ T5886] [ 437.146087][ T5886] *** DEADLOCK *** [ 437.146087][ T5886] [ 437.154236][ T5886] May be due to missing lock nesting notation [ 437.154236][ T5886] [ 437.162648][ T5886] 11 locks held by kworker/u8:10/5886: [ 437.168122][ T5886] #0: ffff8880551ec940 ((wq_completion)bond2#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 437.179220][ T5886] #1: ffffc90005087c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 437.192124][ T5886] #2: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf3/0x17c0 [ 437.201856][ T5886] #3: ffffffff8eb59c80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0 [ 437.211916][ T5886] #4: ffff888078572228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x112b/0x37f0 [ 437.224568][ T5886] #5: ffff8880322f0158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 437.234884][ T5886] #6: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 437.243889][ T5886] #7: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 437.253662][ T5886] #8: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 437.262652][ T5886] #9: ffffffff8eb59c80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0 [ 437.272619][ T5886] #10: ffff888077c3a228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x112b/0x37f0 [ 437.285370][ T5886] [ 437.285370][ T5886] stack backtrace: [ 437.291267][ T5886] CPU: 0 UID: 0 PID: 5886 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 437.291293][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 437.291306][ T5886] Workqueue: bond2 bond_alb_monitor [ 437.291330][ T5886] Call Trace: [ 437.291337][ T5886] [ 437.291345][ T5886] dump_stack_lvl+0xe8/0x150 [ 437.291373][ T5886] print_deadlock_bug+0x279/0x290 [ 437.291402][ T5886] __lock_acquire+0x24df/0x2cf0 [ 437.291427][ T5886] ? __pfx_netif_skb_features+0x10/0x10 [ 437.291452][ T5886] ? ret_from_fork_asm+0x1a/0x30 [ 437.291470][ T5886] ? __lock_acquire+0x683/0x2cf0 [ 437.291495][ T5886] ? sch_direct_xmit+0x15f/0x4c0 [ 437.291513][ T5886] lock_acquire+0x106/0x350 [ 437.291536][ T5886] ? sch_direct_xmit+0x15f/0x4c0 [ 437.291560][ T5886] _raw_spin_lock+0x2e/0x40 [ 437.291677][ T5886] ? sch_direct_xmit+0x15f/0x4c0 [ 437.291696][ T5886] sch_direct_xmit+0x15f/0x4c0 [ 437.291719][ T5886] ? __pfx_sch_direct_xmit+0x10/0x10 [ 437.291739][ T5886] ? arp_solicit+0xbb0/0xe40 [ 437.291761][ T5886] __dev_queue_xmit+0x1754/0x37f0 [ 437.291791][ T5886] ? __dev_queue_xmit+0x29b/0x37f0 [ 437.291815][ T5886] ? __lock_acquire+0x683/0x2cf0 [ 437.291839][ T5886] ? arpt_do_table+0x25b/0x1f90 [ 437.291941][ T5886] ? __pfx___dev_queue_xmit+0x10/0x10 [ 437.291968][ T5886] ? __pfx_arpt_do_table+0x10/0x10 [ 437.292001][ T5886] ? NF_HOOK+0xa2/0x3c0 [ 437.292018][ T5886] NF_HOOK+0x33a/0x3c0 [ 437.292035][ T5886] ? __pfx_arp_xmit_finish+0x10/0x10 [ 437.292051][ T5886] ? NF_HOOK+0xa2/0x3c0 [ 437.292065][ T5886] ? __pfx_NF_HOOK+0x10/0x10 [ 437.292080][ T5886] ? lock_acquire+0x106/0x350 [ 437.292102][ T5886] ? __pfx_arp_xmit_finish+0x10/0x10 [ 437.292120][ T5886] ? inet_addr_type_dev_table+0x25/0x190 [ 437.292179][ T5886] arp_xmit+0x16c/0x270 [ 437.292195][ T5886] ? arp_xmit+0x23/0x270 [ 437.292212][ T5886] arp_solicit+0xbdc/0xe40 [ 437.292234][ T5886] ? __pfx_arp_solicit+0x10/0x10 [ 437.292253][ T5886] ? __neigh_event_send+0xea4/0x1510 [ 437.292273][ T5886] ? __pfx_arp_solicit+0x10/0x10 [ 437.292290][ T5886] __neigh_event_send+0xf0c/0x1510 [ 437.292312][ T5886] neigh_resolve_output+0x1a1/0x720 [ 437.292331][ T5886] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 437.292355][ T5886] ? ip_finish_output2+0x3de/0x10b0 [ 437.292374][ T5886] ip_finish_output2+0xc4b/0x10b0 [ 437.292393][ T5886] ? ip_skb_dst_mtu+0x811/0xa50 [ 437.292410][ T5886] ? ip_finish_output2+0x3de/0x10b0 [ 437.292431][ T5886] ? ip_finish_output+0x40b/0x530 [ 437.292450][ T5886] ip_output+0x29f/0x450 [ 437.292466][ T5886] ? ip_output+0x5a/0x450 [ 437.292484][ T5886] iptunnel_xmit+0x626/0xd10 [ 437.292537][ T5886] ip_tunnel_xmit+0x195b/0x2040 [ 437.292588][ T5886] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 437.292608][ T5886] ? __pfx_gre_build_header+0x10/0x10 [ 437.292660][ T5886] ? kfree+0x1c5/0x640 [ 437.292685][ T5886] ? pskb_expand_head+0x469/0x13a0 [ 437.292710][ T5886] __gre_xmit+0x19e/0x240 [ 437.292734][ T5886] ? __pfx___gre_xmit+0x10/0x10 [ 437.292761][ T5886] erspan_xmit+0xad5/0x1590 [ 437.292791][ T5886] ? __pfx_erspan_xmit+0x10/0x10 [ 437.292817][ T5886] ? __lock_acquire+0x683/0x2cf0 [ 437.292843][ T5886] dev_hard_start_xmit+0x2cd/0x830 [ 437.292873][ T5886] sch_direct_xmit+0x257/0x4c0 [ 437.292894][ T5886] ? __pfx_sch_direct_xmit+0x10/0x10 [ 437.292913][ T5886] ? __switch_to_asm+0x70/0x70 [ 437.292933][ T5886] __dev_queue_xmit+0x1754/0x37f0 [ 437.292962][ T5886] ? __dev_queue_xmit+0x29b/0x37f0 [ 437.292990][ T5886] ? __pfx___dev_queue_xmit+0x10/0x10 [ 437.293013][ T5886] ? rcu_is_watching+0x15/0xb0 [ 437.293039][ T5886] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 437.293061][ T5886] ? trace_kmem_cache_alloc+0x29/0xe0 [ 437.293080][ T5886] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 437.293100][ T5886] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 437.293120][ T5886] ? local_lock_release+0x9c/0x160 [ 437.293137][ T5886] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 437.293161][ T5886] ? __alloc_skb+0x4cc/0x7a0 [ 437.293181][ T5886] ? alb_send_lp_vid+0x14e/0x550 [ 437.293203][ T5886] alb_send_lp_vid+0x348/0x550 [ 437.293225][ T5886] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 437.293250][ T5886] alb_send_learning_packets+0x12c/0x300 [ 437.293270][ T5886] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 437.293289][ T5886] ? bond_alb_monitor+0xf3/0x17c0 [ 437.293309][ T5886] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 437.293330][ T5886] bond_alb_monitor+0x3d0/0x17c0 [ 437.293352][ T5886] ? bond_alb_monitor+0xf3/0x17c0 [ 437.293370][ T5886] ? __pfx_bond_alb_monitor+0x10/0x10 [ 437.293389][ T5886] ? rcu_is_watching+0x15/0xb0 [ 437.293417][ T5886] ? process_scheduled_works+0xa20/0x14e0 [ 437.293437][ T5886] process_scheduled_works+0xa8e/0x14e0 [ 437.293469][ T5886] ? __pfx_process_scheduled_works+0x10/0x10 [ 437.293492][ T5886] ? assign_work+0x3cf/0x5d0 [ 437.293514][ T5886] worker_thread+0xa47/0xfb0 [ 437.293545][ T5886] kthread+0x388/0x470 [ 437.293569][ T5886] ? __pfx_worker_thread+0x10/0x10 [ 437.293589][ T5886] ? __pfx_kthread+0x10/0x10 [ 437.293613][ T5886] ret_from_fork+0x514/0xb70 [ 437.293655][ T5886] ? __pfx_ret_from_fork+0x10/0x10 [ 437.293686][ T5886] ? __switch_to+0xc89/0x1420 [ 437.293709][ T5886] ? __pfx_kthread+0x10/0x10 [ 437.293732][ T5886] ret_from_fork_asm+0x1a/0x30 [ 437.293756][ T5886] [ 438.149039][T15205] bridge0: port 3(syz_tun) entered disabled state [ 438.232537][T15205] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.240857][T15205] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.599213][T15205] batman_adv: batadv0: Interface deactivated: dummy0 [ 439.034126][T15205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.105013][T15205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.567183][T15205] batman_adv: batadv0: Interface deactivated: vlan2 [ 439.583825][T15205] tipc: Resetting bearer [ 439.726170][T15208] syzkaller0: entered promiscuous mode [ 439.750003][ T5886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.761580][ T114] net_ratelimit: 4 callbacks suppressed [ 439.761626][ T114] bond1: (slave bridge2): failed to get link speed/duplex [ 439.791364][ T5886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.840939][ T5900] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.855086][ T5900] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.903942][T14697] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 439.944187][ T5900] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.955826][ T5900] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.986329][ T5900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.999463][ T5900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.007933][ T114] bond1: (slave bridge2): failed to get link speed/duplex [ 440.035907][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.044535][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.163839][ T5900] bond1: (slave bridge2): failed to get link speed/duplex [ 440.294760][ T5890] bond1: (slave bridge2): failed to get link speed/duplex [ 440.421403][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 440.531637][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 440.641867][ T114] bond1: (slave bridge2): failed to get link speed/duplex [ 440.751421][ T5890] bond1: (slave bridge2): failed to get link speed/duplex [ 440.864153][ T114] bond1: (slave bridge2): failed to get link speed/duplex [ 440.981425][ T114] bond1: (slave bridge2): failed to get link speed/duplex [ 443.957958][ T5287] veth0_vlan: left promiscuous mode [ 443.968618][T15231] veth0_vlan: entered promiscuous mode [ 444.791647][ T114] net_ratelimit: 33 callbacks suppressed [ 444.791685][ T114] bond1: (slave bridge2): failed to get link speed/duplex [ 444.921800][ T114] bond1: (slave bridge2): failed to get link speed/duplex [ 445.031448][ T114] bond1: (slave bridge2): failed to get link speed/duplex [ 445.141443][ T114] bond1: (slave bridge2): failed to get link speed/duplex [ 445.261383][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 445.372439][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 445.491525][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 445.601403][ T78] bond1: (slave bridge2): failed to get link speed/duplex [ 445.741452][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 445.859162][ T5900] bond1: (slave bridge2): failed to get link speed/duplex