last executing test programs: 6m20.408932632s ago: executing program 2 (id=836): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000a1459bc6c197c796a37731e3f78f20ed3a8ca364c4ed1930458dea7d97c54870a93e8fbb95c21e", @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf251800000008000300", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4804) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000300)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r7, @ANYBLOB="15b356fa8060fb733f1d009fc58ae591724c05d006dca8dba850ad61ad976c676238"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40040) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r1, 0x100, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x38}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20003) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) 6m17.111537263s ago: executing program 2 (id=848): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000140), 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r2, 0x6ff, 0x0, 0x25dfdbfc, {0x52}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1b0, 0x194, 0x194, 0x1b0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0xffffff00, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x32, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x5, 0x2}, {0x0, 0x4, 0x3}}}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x0, 0x4], 0x0, 0x3}, {0x3, [0x7, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) unshare(0x5c021000) socket(0x2b, 0x80801, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r6) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r7, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6051}, 0x4000) write$cgroup_subtree(r3, 0x0, 0x32600) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) socket$unix(0x1, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x8919, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000000bc0)={0x2, [], 0xf7, "c8d0c8d74ae846"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000001bc0)) 6m16.788737395s ago: executing program 2 (id=855): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001000000000000000000ffec850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x640100fe, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}, @algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in=@rand_addr=0x64010100}}]}, 0x1a0}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x168, 0x15, 0x10, 0x70bd28, 0x25dfdbff, {0x22, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x58, 0x1, "172fe9a3c703a6655f40a5c4a8287079bc8ba3ae342d765dc25c7bbd6fe9a799c2d7f0c45f1693edede28fa07ab2b1ffb2aa934cdc315bc7e9dd33cd205c5c438d5fdc2934cd4d2a530b5e5aa6025ff048fcc0bf"}, @INET_DIAG_REQ_BYTECODE={0xfb, 0x1, "ecc350ed4f52cad6cef7ff9afb64066bf5c629d56b493d793ed04b9f302dff09b1e54ecca2849226962eec8b48b06ae3024e4c9c222f16497fddfd57599432ea3baf9bf53c0fa0b39795dc2dd53a144c3927d03714f3583b33338fa1779ba9505c2e3edcee751ac7a001062cc5b9807cef8003451bdda330763cf8d8db7043bc27875e2d20ae31e596d04c755a4226263feb2b35cff8c5ba8da2805b1e66baf62254659b1f738726d33846b8d6898dff35c9a9855e422738979dfe5dc984f572f5b420784637eb3e7da7b8c6a9c20d556891385c3f806ff6236d19e210bfa6afa9418ccb611dc464c114c1053c20a0f86fbb9041af0a69"}]}, 0x168}, 0x1, 0x0, 0x0, 0xc0}, 0x4000004) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000c80)={0x3, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="020300030200003bb8"], 0x10}, 0x17, 0x7}, 0x0) write(r2, &(0x7f0000000d40)="0a000300010000", 0x7) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000d80)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) sendmsg$nl_xfrm(r6, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000002680)=ANY=[@ANYBLOB="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"/265, @ANYBLOB="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", @ANYRES32=r5, @ANYRESHEX=r1, @ANYRESDEC=r6, @ANYRESHEX=r6, @ANYRES8=r3, @ANYRESDEC=r1, @ANYRES8=0x0, @ANYRES32=r5, @ANYRESDEC=r4, @ANYRES32=r1, @ANYRESOCT=r6, @ANYRESOCT=0x0, @ANYRES32=r1, @ANYBLOB="dbc7979b20478434b1bcd005cb6bab73dd77bfa4778d0fa0f18ebe429acde6bb7d58a9d1435b1a33319d7c4aeeb4aae318d63eedbfaddc6bfdfe30453dfea55153884455e1dfb04bd9cc9ba73fc8b00277d51d8f14e3df2863f23fca411e86820fe70f144fabe31b37a1699976e8d7243e331631264adf5dfdd98b88f34ad304ff4c55b9bfdc483e0858f9aaa8fc169d3edef5f32f7eb441182678272f06ae9b0a56cc33d76389a41e21df170df845a5699cbecdd3411cd78e03c181cf3906e7884b351615a7031a39631eeade68b7805751dc2c7ca19d75b3e7bec2b72f34910550c2e22aaed29e31f6e9c791bc70e83f933be25891e4f3"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x40080) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)={0x14, 0x3d, 0x301, 0x70bd2c, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x44950}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[], 0x28}}, 0x4008030) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=@newlink={0x50, 0x10, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xb00, 0x46951}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x2000000) syz_emit_ethernet(0x109, 0x0, &(0x7f0000001180)={0x0, 0x4, [0xc64, 0x6ec, 0xe68, 0x277]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=@newtfilter={0x17c, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x10, 0x3da48c8682330ab8}, {}, {0x7, 0xc7efcab3e2e58759}}, [@filter_kind_options=@f_basic={{0xa}, {0x14c, 0x2, [@TCA_BASIC_EMATCHES={0x138, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x12c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x114, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4d, 0x5, "766eaf514c885ac04115f55c7f908779dd777a98dbba0e19acde413d1634ebb4eb7439ad578f91735124d51eb576b32279a78772579995b8a0520a91b4a3c470debbcbbb00ed50f825"}, @TCA_EM_IPT_MATCH_DATA={0x91, 0x5, "137ddd4b892f5b297a6ab0f5241e943024fafa541ce889c757a7e88e62e0e4b976869d63f575b5632a17035fd0e67d1ce16bab475ad113a5f397a703973ec32b57f01f2e968819bfda95aab6401994c8903a7ff350f12969802794c126a9904c9f2b473ac667e6f71a553f71f0e3902361020aa25664745d371d0c3d269e12dead7b2ee2d5bc1a361681d68f7e"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xc50, 0x7, 0x2}, {{0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0xc}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0xc}}]}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x2400d081}, 0x4880) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="10000000000000000000000900f6", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m15.726894077s ago: executing program 2 (id=875): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001000000000000000000ffec850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x640100fe, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}, @algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in=@rand_addr=0x64010100}}]}, 0x1a0}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x168, 0x15, 0x10, 0x70bd28, 0x25dfdbff, {0x22, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x58, 0x1, "172fe9a3c703a6655f40a5c4a8287079bc8ba3ae342d765dc25c7bbd6fe9a799c2d7f0c45f1693edede28fa07ab2b1ffb2aa934cdc315bc7e9dd33cd205c5c438d5fdc2934cd4d2a530b5e5aa6025ff048fcc0bf"}, @INET_DIAG_REQ_BYTECODE={0xfb, 0x1, "ecc350ed4f52cad6cef7ff9afb64066bf5c629d56b493d793ed04b9f302dff09b1e54ecca2849226962eec8b48b06ae3024e4c9c222f16497fddfd57599432ea3baf9bf53c0fa0b39795dc2dd53a144c3927d03714f3583b33338fa1779ba9505c2e3edcee751ac7a001062cc5b9807cef8003451bdda330763cf8d8db7043bc27875e2d20ae31e596d04c755a4226263feb2b35cff8c5ba8da2805b1e66baf62254659b1f738726d33846b8d6898dff35c9a9855e422738979dfe5dc984f572f5b420784637eb3e7da7b8c6a9c20d556891385c3f806ff6236d19e210bfa6afa9418ccb611dc464c114c1053c20a0f86fbb9041af0a69"}]}, 0x168}, 0x1, 0x0, 0x0, 0xc0}, 0x4000004) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000c80)={0x3, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="020300030200003bb8"], 0x10}, 0x17, 0x7}, 0x0) write(r2, &(0x7f0000000d40)="0a000300010000", 0x7) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000d80)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) sendmsg$nl_xfrm(r6, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000002680)=ANY=[@ANYBLOB="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"/265, @ANYBLOB="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", @ANYRES32=r5, @ANYRESHEX=r1, @ANYRESDEC=r6, @ANYRESHEX=r6, @ANYRES8=r3, @ANYRESDEC=r1, @ANYRES8=0x0, @ANYRES32=r5, @ANYRESDEC=r4, @ANYRES32=r1, @ANYRESOCT=r6, @ANYRESOCT=0x0, @ANYRES32=r1, @ANYBLOB="dbc7979b20478434b1bcd005cb6bab73dd77bfa4778d0fa0f18ebe429acde6bb7d58a9d1435b1a33319d7c4aeeb4aae318d63eedbfaddc6bfdfe30453dfea55153884455e1dfb04bd9cc9ba73fc8b00277d51d8f14e3df2863f23fca411e86820fe70f144fabe31b37a1699976e8d7243e331631264adf5dfdd98b88f34ad304ff4c55b9bfdc483e0858f9aaa8fc169d3edef5f32f7eb441182678272f06ae9b0a56cc33d76389a41e21df170df845a5699cbecdd3411cd78e03c181cf3906e7884b351615a7031a39631eeade68b7805751dc2c7ca19d75b3e7bec2b72f34910550c2e22aaed29e31f6e9c791bc70e83f933be25891e4f3"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x40080) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)={0x14, 0x3d, 0x301, 0x70bd2c, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x44950}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[], 0x28}}, 0x4008030) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=@newlink={0x50, 0x10, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xb00, 0x46951}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x2000000) syz_emit_ethernet(0x109, 0x0, &(0x7f0000001180)={0x0, 0x4, [0xc64, 0x6ec, 0xe68, 0x277]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=@newtfilter={0x2c8, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x10, 0x3da48c8682330ab8}, {}, {0x7, 0xc7efcab3e2e58759}}, [@filter_kind_options=@f_basic={{0xa}, {0x298, 0x2, [@TCA_BASIC_EMATCHES={0x284, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x278, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x260, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4d, 0x5, "766eaf514c885ac04115f55c7f908779dd777a98dbba0e19acde413d1634ebb4eb7439ad578f91735124d51eb576b32279a78772579995b8a0520a91b4a3c470debbcbbb00ed50f825"}, @TCA_EM_IPT_MATCH_DATA={0x91, 0x5, "137ddd4b892f5b297a6ab0f5241e943024fafa541ce889c757a7e88e62e0e4b976869d63f575b5632a17035fd0e67d1ce16bab475ad113a5f397a703973ec32b57f01f2e968819bfda95aab6401994c8903a7ff350f12969802794c126a9904c9f2b473ac667e6f71a553f71f0e3902361020aa25664745d371d0c3d269e12dead7b2ee2d5bc1a361681d68f7e"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_MATCH_DATA={0xd4, 0x5, "e2560bf3693b5800009aa1a0df861ede910802c69004614e463696393e4b75e8b04284456a7ecb28c0748bc65cc66721f3ab82e8ad43111ab7d36510397f277c827f23db40741478370478edc33377594df62c27899870bcf15bf12f221abf70c1eb2ca1a9a142d445d13bbf940cc2e84651c2f2883ff259edd68830052769b9ac3aabeeeacea973f15300e823066a1a4e6572ab3a777479353bb47cc33b79a344a1c07fcf11ac47e54d5141c6551be0d323598e9362bd7ed20844b782ea55a05c06c3cd40b209c494c106d6f9b9821f"}, @TCA_EM_IPT_MATCH_DATA={0x73, 0x5, "f73fabd0a037e47af880b7282b3e5011a28f0b480bc269379734364d7059fd11dd6ef0814a759338078d7c978dbe0dd5867593730ad9a6b4ce63fc5affd82c48eaf26c95d01122747916d702f69a79153ee479b5ad43b51d1ca228f59b607052287f0d4d57f9ba1f033177dfffdcfc"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xc50, 0x7, 0x2}, {{0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0xc}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0xc}}]}}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x2400d081}, 0x4880) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="10000000000000000000000900f6", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m14.63099135s ago: executing program 2 (id=887): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)=@newtfilter={0x5c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0x9}, {0xffff, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1002}, {0x1004}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x4]}]}}]}]}]}}]}, 0x5c}}, 0x0) 6m14.173633688s ago: executing program 2 (id=892): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x100000, 0x0, r1}}, 0x40) 5m59.139660197s ago: executing program 32 (id=892): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x100000, 0x0, r1}}, 0x40) 12.001368948s ago: executing program 3 (id=4544): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000300)={0x18, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) 11.772730485s ago: executing program 3 (id=4546): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000740)={{0x84, @private=0xa010102, 0x4e61, 0x3, 'lc\x00', 0x8, 0x20000, 0x77}, {@remote, 0x4e20, 0xac91d2bf000ec5eb, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000c00)={&(0x7f0000000c40)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 11.641279785s ago: executing program 3 (id=4547): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000280)={0xa, 0x4e23, 0x16f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x536f}, 0x1c, 0x0}}], 0x2, 0x0) 11.608382461s ago: executing program 3 (id=4548): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c01000043000701fdfffffffcdbdf25037c000004004780740101"], 0x18c}, 0x1, 0x0, 0x0, 0xc800}, 0xc000) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xffee, 0xffe0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(0xffffffffffffffff) 11.490060091s ago: executing program 3 (id=4549): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x70bd25, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x2b001}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x8001}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x81}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x7f5b}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x890) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01070000000000000000450000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0) 10.890886313s ago: executing program 3 (id=4554): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000081d46037b323fc6300000008000300", @ANYRES32=r2], 0x2c}}, 0x0) 1.961326843s ago: executing program 1 (id=4632): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfffe, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@deltclass={0x0, 0x29, 0x2, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0xf}, {0x8, 0xfff1}, {0x6, 0x2}}, [@tclass_kind_options=@c_mqprio, @TCA_RATE={0x0, 0x5, {0x40, 0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)={0x1198, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x1162, 0x45, 0x0, 0x1, [@generic="f52fa47e9c9fc0f216fc6f2f386e8cedeb2112eb789214c0a82009f7a861e4ee396472381ea7485edc4ce54836ec1a09344117cd15f451c06ce73abbfd199a0fa33f90116716237c1cfdf6b6362a50c58b7e6cc98ed8bfdf65a307a0097f2c054b04b32c13535eedb4dfd2db8897fac84084a9439b2ba92654df8579ea4fab660cccbc4571301b054b1f5193719fbd4a51e1e02dbb7bb037df6097756d07643644a0c332f618ad5f5321c42320a3bda6ca7863e91bf9102ffb9dd21062cf", @nested={0x100c, 0xa7, 0x0, 0x1, [@nested={0x4, 0x8c}, @nested={0x4, 0x162}, @generic="e1777a1e6023acdb8ec2261c6da450d18e7f1f2659b257d0f58052e7e7fd3e02bd5fb2820933709b9392c8d9c54d217d0a93ffbdea023fe61db7f9c576285b6e91506aed42eae1ef20a417cb3db42cfde0b64bcfefa8a9e6c125cb272a3a7c9060a1f8fe473af0ba6e7bd3933d00dec176f6a7231af36097572a0aa641cd513ccce118a2c1b2d84a2e978e900de8b7d801d0e8f6e948d6a94f10e5795956cfc0d6f58c704f8ed2a04e3555ea1b2828d6f19dfe7f180bcbe4b0b9812eb028e5b92fc9db7e77e60ecc8dfad9ba1bdc237a33882611e91ace82d0752c7b8add60b66bc8a04269ec9fe18da29ae5923f7ef558635622674860b9f7172a9d51a404fd075f740891203942efa3d5983da0040d2c4100764087a5a4044cc5fd9dae4392eab51eec88ef4db772fc521318de7b55d34c1f353625afc4240d944f0971addb175ce942dca4e1bdadefe29087de1bfd7f7e13d3be6c1bf2373c20dcf154d7a6bfd990f4a01aa335c279af5f98f29bc8670bd5fb2b04b513ef8ed462e3fbf60d65f59247e40c0a5d06866278322fb8724fb85aaab7825bf953263ff074fb211c4a39ee903f4824238f9846d194638b11d7a30b81c10ffab9db09336e842bcb6767020515a39528c8db67f0ab7e76b46325f958b43d564bb2d42e0359e62027282d5f9c796fd6cfae54abfdc375531ee45faf63ccec90417f67068cea91f94c4bb29dd5863d6c93800a8a88ca5b9cf6e6de351aefb8c80099da6411ddfc73e5a5d15f371924a0dac668286c69bb4479bbf6d3d017fdb8eaea89835f21342239c26d310b2d3114994e303b3a4dd2a810bbb1d688da1c104cc769f4cf4346c184fc74fa9d73f66a47a9b55d588e8042256626df00e9a7f7eb99b51560975cd6f55827198dde2e9c9f48a6b8679aaf047800a164b37d4923f32714004cd9a18e9d4ac3baa59d9599717b9d6bf17da4a1f802d39608de38e82ee5495abf700c10f3ecb3cfa152bbb2ca6935af9d706f62ec425d0e252009032c80f3e50d3279d0b380453e9c1a6716a07a4963be10419ef829f8165686c146801ebe3a2557194513f4daec20b35abf308fb4bdf0a812b9d03de9b11ded92095144398cb839f2415526b0b9b491d6c7948e94b31f2dba20ed182ef7702034f322aa3b94a3f7461cfae58496163a049d99788c2368f161b2189126c453727591ce91655ad88cf2d7a6171a25de19fb56533c6a3f8c0ce34bcfb03d7571ddfb9c0e4cf57a5bf63dc4d5101b44cb88d9f4ae5d9507297875d72cc9a5464fc304de61c4553a07700b5ce0905c8aa790222be1a017f690d3b7bc8b1dc8d78d640ab08ba9b8be48e3d27c48b7dc638aa8f8db1ef15ff8b95863a7d85bf789cacd5671c6baf70a11816c65705237f055092d13613307565e3f6131420338a0e9549cc20ff4a08953330c63ba4362e7a696cee6690fb7050cb9baa557eb97e66de2c355790c99e82c75d3dd213740eec6c083bad22cac2a3836afa6a57b20086ef2e7227969bc980c064ee2481b77ca71dff603a176563957184a65015a94e86303ca461c017f190df9ebaefdca2ffb4a91de0911d91bed243428e8bd844d351597e1fbef2da07c1d897fc8f0a00f758f957dd562777462e3173ab680cbe3ec5cc940c4df38e0f4295d9bae9a9afab07380d89e2c91ff9088da191b189166e565c3a06ef24a94e63ad7943bb90018664a84ce525a4006114cc926f8e26e96dc4d31a0e374d307bf8f162e5800ff758567f969f6b96c725ea4c186e56612b7eb6d9f2d203a75335330ffcefe7b06bdde3e7eed0d3ead5f9206f8d404668dd96bc6de7efdccb269767518c9ae910aba393829948dbeaebb37589bd8c01f7e45660fcfc4b03bc511b95db1066327eab9bc22d508889cc3cc7aa94da4470b4131ce503325762260b17b90715d5d59db46b59bbdc2fbd6d1be70c120b3bbebe77c4ce9dd9a2f4e4b66d32617757e0f6d3d01c7eb5e768984e0c0a9d7a96de11e987f95c388a0809d0c17592a33359b0461fa266166da3c6c5c49e68b10b340c15e4d23e912a72f92ecd81c7ab1bf3233b645fe601af3aa5d8a21f31d2264ecf77589434620dd9e50bb61078a8dfb08fdb3626426264f4109db313805ed5b21a545c5486cd7cbba0fa67acfb01e6675c39d5e7c8fca0ec0526bc427e7bc591c44dd4b42482f79b7f76ca775d9741dbc42f16414beb99def2bab23ced9c0a109899485068f9a5a48b6b9cdb8c4004812576f9a703ce225e3421c6ff9bee249675f8ba210be98187c3c4c1fadb5b15f8a6e28d7641e198f85d965bd354a17b448f1c1b4975f133b0770b9eae595fdd4f22cd5420d6c986c5cfa769e0ad6be1af92f76acf3ae0dd8df451cecc6f7b9f18958e8095f8cc62916d7d66430a38f348f30ecc4fdf0a782dbbb856a43d1390e7e6fbda9df02f223814a80110c45636f438069ccdddf5b0a204bd9a7ab73e61204fb6c051ec11c825513b29e7941400dc6ebe9102ca5eb058722fe058ed4b388f51c56b945210a045cb99f2e54e8cb37f7dca802221cfebd595538a59cbc23755934aa28cf119a8ababd08b9709bd1578b531e3f96b5a22e70f6ea3b39fd32c0a17f0efc7f708554c6bb155e8f3ea9665bc943dc399d5d1d9b17964c6ec7bd5e4f243ec921feccd7c5dbcf531882b917ed64daefb6e31be542ef50dbd5fef8a9bf032afadd2cedd1eac2a71185bd551d533792e412d21cd3326db3d34f113ae505b3eb9981fb37aa9babbfc53a6a3ec533bb27383d8502e98ac75367d58e00e910d5e68882bfeb7e54992c478af68c25f5fabca6867932416fe71ea72881c372dc818130b83c56e58e010b837f55e0c7319c7b02c8a7619c20612b0bc9ac77dc1228e61071927f2771e36ce4919f87f44a546a79a357c93a974992bba906a8fe6bae22a6623c10a91ae3772cc3be200f6dcfbdee6ef0ee39da751f0f43fe97d9553fb68365bc04e4384c28234027585465e7445768563b3f636d35e40eada41f29f828bf6c04ac1e6f06dbbd342b21d9a22c708011517783ce3183442d8d9f765adfc9eead70800a10ed121fb496a002325389318978873588a48f5fd686066874c2d20221f5f700164edcad91315aa1459056fc571a13b4e7e8cb6d7aeccac9335b938c56571488c2ef8588b1ed4249dad28a7de795fbf2ee0d8411dd87ca7e52cb3dc9131ee58e3be585287ee79bbda2532d74dfc614352aabeed17b38466a2019a6da8e8fd17874f7c55bae58e1060dfeede30019155be3f74dafb6cbad066407fe497b967b4a85175a9e010c75eb7ed47aff86be4731f5f48b239faad1250bdad4dcaf8a72444c8d149851830b5dc53e4fe22850c18b063652b7f7f4b04e70bba08a79735b98f9039b8acddae59bfbd1fa4bdc6ac10573a8ac787a58a17b0e4d544091acdb3141d6eaf3e0fee42bc9781e5fa3509ef101fb284c1ce6564182404f08a10ecd4ef09d031e9e80ec6131b89e0c9f7e129317ac9b4b744f90aac6835978fa24f1d990b63ce4ef3404b72e0d4b496f723d567713ca5b87aa96024d05cc67aad467e6b5951f09cf32a41db6e4af509b30f218fbefb8d43ab8cda1718eecaf701670b0e1ea70283cb9fd79254851e45f91785b40c75e9be9af41f1dcf38670a3eb9869f5103ed7a542f0a30120ae84c2add7ea32a3bf8320c57f526dff04323cdca3d53200780a787f7202c186dd9d83112793a67798dd45c8601d86ab4fc174a878326e721be3567fe8faa3da3543e242adf2e28bbe459075d8504a1d785c88ed13dce9ebd470369a670e4acb3bc33080e6b6a760e52df278d7396a7ffc831ba834d63e291f6973753abc28c698b85fdd4e30bb268212cc429f16595a770b104c9c8299f36acf76952833d736036bc972a8bf0a13fb6a718faa5e97f7fcf9b9f07c4d448a327ef127adc856d63655e03109ef8a45f5f58fd59a19df89e6d14593310866d89c4a06945a1231c88a44c984ca5799ad57eb15068331d5b8d4a83b73193a4ac55010882cf91cc366716d059fde867779211b5f70c1436e3fe9c2a3a83b12d0b7cc3d6bbc8321a69a74e3f85112cd8021d2f343bee9931c68616b2c548a9b8b6cd3473526ce6d1c748f4fdb8a045c29bc22d1ae03854c01a123b0d95d8d320a3d2ac05206615624c41dfe1acf1e08d1740e731b08bf73e91fa8eb4da3c43243bbf936b1fdd59d78ba6224d4dc333a0d90e0165d23c3ab78c950112bba76473457b050ecb2de9ae854a55475d251102b466be427171136802b769518a5a4e996f507dc6855ba74d7b557a04957e17d496dd64e6547692f09a6ded864ad80fa8d8d6393767c36ccd27e958650572649b401241199973f20968b408568bb5d5a0ed691471f19beb13e2101441a78ca914e1420d7ba1f2f462190ce1c416d85931c9683f04e048e78271e8f85f295c03701888c06f6385df4af924ae5f96901f3b8f1490fad41380fdc6d4cc0fca4afca63e907bdf77717ab61a3e4333b73f4f96c6893c8139fa6876cb026e55eb048bfd6cac14b85d159ce5628f759dbbea551094a7e86f38e0b81fac6bc2bfd74366aaadc983eff121b5c48c77cd7cc4d0fa2ad28743695461d6785ad0d3253d9ad58d3f29c41c5c40228b861b02e4189af3afcffb7a27f8f265b02bbefa715fe5b4b4a7b23f954408f25f4d33972487d2e20a768d649c3a00491f5a15e3db6b2de3b20109f30d6159390274989a6d2ecdac03c1fd19aa7c1ca16579af60af8117b686e094002d6ca7755a93a1aba3496c60e1b809312fe68e8851d58e5ae4e4b5d0fd8118c12c6e91e6d010eefd418239d260f9dd2939b504b8ebc3ad61469c4c09ba010dc5f1630720ec7b016873416dffa90b4f990eaf193db11d310ead219f96b738e84f338d5e215c65672ca8e9ac31877a2072c0708f3ff68ca0bf0aaed8b2672dc3dc145dd2227ea5b32e9808710c1d67e23ce64cd8038d0d8165761d1aa395ed0f9233a1b931f08a85ee790e10cb895feb3ef48271b27edd560cbfd609280af0a73d3aa3f02107baaa73c4ada319f0644b2d5f72add07e056f70e4f7bb83bb0877f346d874b7c5b46b38af82cfa1293d1608ce3b5b07ce4cc9eff7824fd0507a804f8b2b8f84a42ce2f0fb09cfb115e75e5a958913f4f0a00da631216140f7bf1cef9596797f12bfc304a5bce45ea9d3ca5028ffdb5f0ec97943f2c3e6c522833ae6c2ada71e11afdc03fcfc71fce723157fc78d4e2b02fc8f43000ffa72d0fb18bb4b01938b56be0ef525758ad1602f67fd2f7c64d0a3355db645f4ed1c4a104a8fe6464fda391b3b00559ace04417bcebea027eecfe94361c2f8d305274abde3b1b467c79e2dbb40b52cb55ca17a2f2980dc2e1a200d02f8ebd97d8a1e282564938c1a2f5714fe52e3b89a2b29bca2d916762b6c1fcd638d6a4b18044dc7b9f83b1e7128626cf5c2dc45b5f1e666325be147a8befd12a68780664a585ce0530132650e5de68dd95fbe088285ff905bf4b8388d914fb063175450d0ce8458d826f39e9e7b63322447322e14036bb78523b92995ef98d938a3ae6fc3a0a66fb3d6d7c18228ddc3a763d672c06ffa971f9ce562df5f0c97c1107b8504b308dd8b3342ec7f02a8beb4a8329c7c60dc2ada2c38a1c989f550d518e3d9eb46886278e0945bb15344f182229f388fd75e1627497434fb0f3b9de68c719ca1a478154f41b011b758db4afaabe50456c2ae228a56f250cd9578bb5ec9ede6cc5c13da526e6d0e3a5f6685642"]}, @nested={0x83, 0x13d, 0x0, 0x1, [@generic="d5d82815c8257708efd64484ddab580921572cc1421b5a9f6ee77f684b57fee5b48f9606997d365d48f9300eabf779884f09e8705e1acdb81f5c4d6c0ccb3d3d61f8401ba80e047992f5c38ae98fa6ae6dc01f3eabef8a40576663", @nested={0x4, 0xa2}, @typed={0xc, 0x134, 0x0, 0x0, @u64=0x67569d0}, @typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@loopback}]}, @typed={0xf, 0x15c, 0x0, 0x0, @str='./[&--{)&,\x00'}]}, @nested={0x1c, 0x0, 0x0, 0x1, [@typed={0x16, 0x1, 0x0, 0x0, @binary="985ba356d98f896d129c982b2b2f8a539a39"}]}]}, 0x1198}], 0x1}, 0x240400c0) (async, rerun: 64) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) (async, rerun: 32) shutdown(r4, 0x1) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000000c0)={0x2, 0x4}, 0x8) 1.707395302s ago: executing program 4 (id=4633): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000004800)={0xa, 0x4e1e, 0x80000, @remote}, 0x1c, 0x0}, 0x4040) 1.560047252s ago: executing program 4 (id=4634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1.501564224s ago: executing program 1 (id=4635): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000340)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000003c0)='P', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000480)='i', 0x1}], 0x1}}], 0x2, 0x8010) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0)={0x0, 0x4}, &(0x7f0000000500)=0x8) 1.401339066s ago: executing program 4 (id=4637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB="5c005a801400018005000720010000000500"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.310489013s ago: executing program 1 (id=4638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000001480)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r3, &(0x7f00000014c0)="0802110000010802110000000800", 0xe) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 1.254705613s ago: executing program 0 (id=4639): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac47037fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5ed838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e", 0xa1}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="32d33a47d96ceacc565129f837dfc4ec8df24612082800303fbc4c7dae05b96c2dc595b8", 0x24}, {&(0x7f0000000500)="9cf1495e028e22049259947af71c968820aac2153e36e05237044004130a31b25cd08e4a582dd094e3cd495eb7e28321e85d8e7da6651a68cb993498df2236fcab1ea0a1cc628ddbe16ac9191d6917ee7f319afaae6058b0a13fa0258fb74bf114e1a95c71a81b46d5d333aef5db36219c3bd7f905a25f5bb07bd3055d210022f04b5acf6a8e20086a71b6b5c7bb87d9c7a209b7f0e56dac72bf77c9773d1b702c45c9460829ffbf704fbbe1635b301183a8867463de2a0fae686630b7db109ed37404eadf", 0xc5}, {0x0}, {&(0x7f0000000640)="e705ba567be6127d85d39375b10960531cc5504726702fa92b283ee716613616ab01f6e820db6e5cfcb4d90015ea23", 0x2f}, {&(0x7f0000000680)="c05d0dc2fdda573c5872e33584e8735fd9f8a0151935edc78b9bbf6424e2b7f2e669ca0b5b0bd870399b4326", 0x2c}, {&(0x7f0000000780)="55bee026e579cd98c199b0adfda09fae5228b8f7b883add4099e88200a72dfc6782dc3af4564c1f19ae2f530ef2c3fc6fb946257c569c4d9f6e35f8e75b3d268400ad5a5cad70c1706b377aaaaf28c721f0446c5c73597b18a8fa3cca93bb82329b19a1402716827c227450da61339af5844af4b70dbeb85", 0x78}], 0x6}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)="3fa7ff9e6f", 0x5}], 0x1}}], 0x3, 0x2090) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="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", 0x215}], 0x1) 1.201371924s ago: executing program 5 (id=4640): r0 = socket(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f00000017c0)=@assoc_value, &(0x7f0000001800)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f00000018c0)) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001e00)=[{&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7}, 0x1c, &(0x7f0000001680)=[{&(0x7f0000000140)="28de2c704a6acd09960ba6073fca9bc52405813a12dd3a041e65f5ea3e22262a385ef19925079d20ce2b3e6321a28889fbe2f246ce60451c9e9d61b23fac031b92b8a2d9d7f5fdf222ac48d3f227b8699710ff1454faba1bcd88f18ef1b5cfff623820ae6366afe56b595bdc058b992c23cf4fc752b18984a3551cd40d", 0x7d}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x4000}], 0x1, 0x44001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="033f000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 1.100610049s ago: executing program 0 (id=4641): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @empty, 0x3}, 0x1c) sendto$inet6(r2, &(0x7f0000000400)="1a", 0x1, 0x0, &(0x7f0000000440)={0xa, 0x4e23, 0x10, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x84) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.01682079s ago: executing program 5 (id=4642): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38", 0xf4}, {&(0x7f0000000cc0)="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", 0x116}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c8442", 0x18}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="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", 0x124}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)='B', 0x1}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 958.341644ms ago: executing program 4 (id=4643): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4000045}, 0x22000800) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0xa1ffffff, 0x0, 0xa9e7d3e3779f8165}, 0x10) 944.716315ms ago: executing program 5 (id=4644): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001340), 0xfffffedf, 0x10, &(0x7f0000001380)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000013c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000001440)="ad5ce39667bde4014c9745573838", 0x0, 0xfffffffe, 0x0, 0x2f, 0x0, 0x0, 0x0}, 0x50) 682.991134ms ago: executing program 5 (id=4645): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000940)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r0) close(0xffffffffffffffff) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x60, 0x12, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "0710100002200000ffffffff00000000"}]}, 0x60}}, 0x0) 645.431109ms ago: executing program 1 (id=4646): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6100000000107afffe8000000000000000000000000000aaffff"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000010000104000000000000000012ccbf1495ceddde00000000c72ce0374d6bd8555c99923f49b4c4e0ee96491f5d93c6dbcd03c2000000000000000000", @ANYRES32=r1, @ANYRESHEX=r0], 0x40}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xf}, {0xffff, 0xfff2}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000080c) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r5], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @empty}, 0x10) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @broadcast}) ioctl$SIOCX25GCALLUSERDATA(r3, 0x89e4, &(0x7f0000001680)={0x76, "7718798d1e9752ba3ff9df6cc37c8e5b7948127538f6f103d4206ae3910aa1c6bae64e0de5291d2734d1ceeb91945289cd5e995c88bec08a160ec5ba64fb1eb9e7d3d597e1286d08c3ce8d0885856788854edbc5ff6e617640715b1c33fb08700d1005be56cf6a4d1643a5420ee768611c0b9bcac5e71927cb6499547108556a"}) write$tun(r2, &(0x7f0000000680)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0xfac, 0x0, @opaque="062eb58cc2bdf9b4ec5b3d17e07b8af2cdb9964232116beb07407cf21f53d376ad4cc39fbe7be34d784cccadac1ee513390e215f09cfb15e0bccabaa9eca1d44f4458a573bf6cb09e4a8d34317d45d9cc922105cedc0b4174fd47e062bc1316f81015a6d7b93630b72cbc0907dc9d1b32b41d8e5c43a05665a17b54325208ad2ecb666da67dbbd585490c76f02f6d766843999ccc87b26ecbdd8ecae1f89e25ca1cd950efd580e34e59b70b2ec14f4a1d030e0e94e8fd58b011f39d6611e54d7e198e0952700031fc91b9cd2da7ba20494ffaa1cd83102bd7efa6e9d54c0280bc263efed298ef08ab4c79514b56d53857e2bbb14f70466ba8f10f5d34b83922bfc4c60e1edf0748c1fbc0e56409e8a0c5e14168c66fde8f938b0b6a6d9aedb6bd25050a1d4432325fe7f264dfd6f836002e14c43bd8226f8bcfcf81f125403d62974a188c534547b69b874e9fd1b0b919820bcb615312aef7b1c5e957bcec685b4fb24cffaddb1afae4b5d56bce12aed015387e73e636fbeff8ec250419909dc4c8afcb3a52d2d37cc6ab7cd0dfec6b20ddf3f32711b50f4ec4149e22c5f6992da4185055a8170013a6ff5c5c404484a4559c7be4869e6419e7e9f9cb6f30b548bcc1ab37c3198b27f5c487e6bfe83a52673dce5bcc5f658c1869e82ed7c3566fd33739e90cd14d71de5c37918c3f14dce6e684b20ee78e7da5f3f642f0bb63d0d370ed1383b8c4b7a5c26bdc419e2f7b044924a65bf2151a48fc5bf49e2383ac98c7f58aa7e2870c5cc44cc5f3580c6c9aa70c9e1b6c07f1b1093c14976416f122df71fb19a0cbf958ddf868527e08ee333ef50c306764c5ffca57470942511bf4eac7f730ee6174ab8333e1106c0933f4a3e56e165c9b9ef2b3e7da98f57d739c5f3466322b0e70acc3b6f6e27ac43eb6ee90683568c3903781455972a43baf897377b283c25349cc08561b689fc33b5eb9d73c60f98bfd6b8752186f673c94ca0c74252ab74580d5e0f1c6587a6379664b1deee8198f3c935a06e9ff6d1705c8c4d43c17a1e4ae988f5a179c5e2ba9f97003c1ab6bad2af0a94e202fb20921b647d66a32e235e824b122c7823ad876eee215d600ec68e6ab33287db19f1c38f91daba4b69dfea6d40619f3bebe7cd3973a9578aad3ba66a3369998c8741422ab8979a58d2417446b025492e9cfbbf9ace42ef2318559cd08a612b0a1853dcdb4414dc41389295096d52e613faa08325d6db127c5c081ec7015e0ceded7193e38feb1399048bc83816783cec2def5ab88609b0c9891a6de403ec4ec372fed5b78df7af3bd7d1f5f278621171a3bcdcdbb44e4cac532ca050fa55012f7c0fb02fd9ba985077be470b340f3103b1e3751dd48706a6c16a74e7d0ae51b66f64f3c19317560c1bb8655d8102ad6c66a9de4f9bbfbf5f116e0a8c326b2200e258bdfc259d5abd8ab8f441a5cf59e74a4566ece223c5cf8970c1dc22e7c81f8477395388a19d8ef9c046eab3329e865fbe17366b77977f41c1a0700bc24f1c7152e500ad1239259e84588c2eac815c7dd510b19204b788d0b91bd486145455e5da08f7a8a07b2ab063cff8f7482644ec0f04216d8f7a9b628a3725ce2d9bc94b356910a52e8690a4cccdeb0ccebe426db33b3d5458cdca5983a6d9ccd7c2b22e9c0288b0a5ba4bd649affac4897275a301e208a6ddbbb5b22331f298edd3a596b57c2a8734c25a936a765883396607f0104ffb6d2f9bfd1a31ae724ab1b9c15b881d3b101bea2857a97441233f1d7962b25062aa999aad9854bcdd72d79ad7af20a1768617e8fb84460bca129422acfd160da89a98636a564a8facb6c7564f5a149206b424757143e27e1fec3f4d50c6bb0e9d05668f1f26ed8a7c8b21d19457cf1aa484ae38119e8cab2866ac3b15fe2cf27c00e92cf0df7034622111af7c7d10f0752ef8a7e6ac2e3c67e7b38d77026c48f619050189f13ece832a7e233f36af9f95fc27dae37a4df777876e6987b0186fddb9fcb833cb4b370055a55a4584b0def4d5eeb09f0bceca57fe15065eaded36d1ca9fc8d3a0721a3a5cef948ac980dc261d831ff348472c9e447e00ce461adb520699b01e62b23278b79027537984f4dee781c9a089e269c4eb879ee6b0b540a345c0e47442c48e772d71028f77386add5a59d5717e8e46354084483e948bfb56c4d3c43b272496051f14c39fbbad45e76332e9db289d56c3bbe8ca0733d031668ebacb37dbb8ca4ece3df5bcb5ba7da1b45b72aad78b4b0b7f388e383e361fb663430d4a80a818dd9488ad1e6ebb28171a5ba7b7a9d4b1da317af8f9c2e3fdd298f4c731576d0b5e4eafd311ef3bc0d097b694fb49382982b5c90582fd4de60a0d93a71ba51bbe033ad68adad995191ceff32257b724d866add602d81a946170f88c77815927a2506c526bec39b6e5df7145ca78366f6b11828333809acda249b6981f817d7f6dfbcce0474c03b02a80818c2a55ea2f9d3e4675d29507b5c24837b44b23242fbc369cad39cc82b33ef048000bbbbef2bf5201a0e7a691594111bb150f8795af80de221329dff310b6838a862d57a69e7d1a3f861cb4af0ba9b317ff30030cd710a17574a9268f500c418179e222e150f9ed8eebb6586f051c283a4e080bff9469bde219103e58dfaca6cd4c3f92908b722b72b634aa357b64c2b07dc5fd02398068a287ca530d55eab1f70e660b14d58df79e9c0099cdfdd8c53627d5bbe8d4b4b4a3875d5d5218f26ab946a545a8504324b076ec8807cc1219061ce402c8ec87f9775c5380e80b0990699f7323af958e8a03f9ca6e5881adfee573cfbcb605f29690a6c26a3039639f71917b99cf75f7f4693568f865728ee47d3abff6a12230f2e4a1bb5645e6a99737e85457f1ee86ba4ca30ce7bab984089011d3ac2ed92c1b41952bb0276d805f94da0858cfc24ec55d23e170f9ce62bc1d3ba49009d81735ab67da9538a3ea9034e09fb9e6769cfc28135b5adcd0f3510266ee25e66fc7275e907b2d91d9e2768210c0879a45c9aa412b57a4c954357179918767b72791923f3556f0587a63c7f59a59ee9b58fc3c516d8efd233fbb786bc24642c3de245b349459b5534b9f8d21a9d1ad4733df33ec32bf9c9371cf56aec79025eec02ed8ac5d955a442fe42c75add38dd67ac7b87470561663e6dda28530d1ca91bbf4dd3ad60bbaaa185245b4796e19f4df88a85f9528c0b71644703219ad21b58d7832cbf310428d7e8f7ed79f92771b7988dec9e679d6eba756a124af69ad7f943ef20db790459d9f99f64e5b890a1c99eaaf9f7516c57ecab736f7b35c86d73cbd1ba6a56fe421244ee44847908fbfa6175eab7efce24afbec21458003c3e8a2ac39a961dfde0e1ac03c510e21ac18a5c2c9c746370c87d2ea9d8c919755371b24ecbd6b0a4ab480d8c0f7a6e92d053541d0195bea06fb022d7ac6259d65c6abfa71b1fb931e4d30813df14ee52792bdcbb246ebecc8ba7073dadb2ab5d041b0f0c24dfd70187b3f179ca2ed5920b060eca08fe008cad6a9f294aa3aabd6c757e369403ec3646b4e97d5b0eb3ce5a01eb292793a70d9b882de896c8a3456eda9932b30bdf27bd9aa81fdb6d85f5571f8b228a8b87c170e9f98959abca25a63a273003b1d6662e1f538c04197d219430d1e42ecd825e8c74a9d7e691d17400f0f2f7b5561df46ffe16a29c8724d2bfccf3126510e9dd457af08cb1f083e31b1f099fbff66d442c8f492240a9ad7f5b26f5df8ddb6489a989322514d24ba4f8644c1035ef3f75f7a07317f7895ea661786e0810f9fdc0418173df5fb9c37f2061d6aed37f3f123aae592615b65de84dc62a822850c566fee418183a4df73cb975ae52a43c1197ea29de7f5ea9cb24f160a5a32eea5a13a6db1b1912e2a54104742f32bd6e5d061443970e72e0329462ec39335d6cf3be7a327c60298f72d00c3c579e727d2efc4245710ff323d377b89cddd805eef5985eca8012fc547fd4d159fd15e863e12c147f2cb0d436e4a79d52b5be7709133ca48bf97bdf1126264d437eb5819f793cf011a8f52f8d7360c2097b78e117e22975d43529d42759302b97401fd1a62502a53e62de06bb17f59ab3ace63e1793cc0ea1f95b7d37348568af0616baf6dfbe639318971acd72ed6e971f4607975b8752a313e2832d41cc2a3d4a187267f84fd2866fc863d8b2cf7991e7b156b34d63c1e9607d8e25f29c727889b518464ea6589af7dd292c68c8b705923ad707bcea0508d3b738781f1e96a3bf6189df8f056ba4572a83717585a4589130c87c0ebcb6372b3360dcc69eff22935443169ee88172565b7507d1fc0be8e77bfd3139baa359731ec29e70e782c7a902b7ece08d5c50445a31c1e67aead0240603f8f08e86a39877648ef4411d1b8949b2534f69f18e09448a92df8038287ca649389d14b52e0a3fbdc2d2e24b6b4c3e74b03f9fb42de410975a1ca05fb6c9da9b5977a5ecaeb7cc89c0d0ce3fb1e3a0a8048db1eb522dfd64ea58d8b64a8334e43d555c330d7b0f38ec3183ee518ec49c259bbb857945a069b7f001891d5fbf395c454dbad30321b8e7bbddde732197a7c40769f30b1ba1173b954db3685817808cdfe82f8ab00cbf74d1612d0325d82a067db48a8820cb30871e809704bbc06b779fd096ef73b6d456f095e77b0774a0079e495b1f6d40e9cec5145529a4bba5087d8dcc999a90a96c448b61ba3b9bb81ec923d481c8c1b88dc37248387ac7ed020087686769573cd712faff0a02d164610f14d22da21b679723573d564ed6b6b601c9ac7dee22c3fd72ebbc8fc6ff137834ef5a262dfd63914a8b8f1943522d7a589e5a4430d075072eee0a5cccb24e8c759c15095f8c037e687e20e5705ab9bb41224dd4de0d0e9b10a62c350014c46d7a557ddc029a8cbc5d039d69da6fdc7e5f018fcaa319d7b2f82b98d92d21655e5eea7c2db119dcd0dd56917b696fbf3b90060bec6688d85bb10decc98f031e504b338b4821caca32624ff83c492d6f759dc0579e6ab3f8724338bde12d2e3853b7725706a7d78f97166a37cf3c5e27fd7b6022cb8ceb66ec5b379cdedecd01f3bec628b476c3bd02250b9103f5029364f8ce2ca8390139d7ac5a15f7a9f4a77c176c2bbf81fcd8b25cb753903adb5d732dc54bfd6112e82e261289c0aa91ed459e934bf2c9633aa5f97ec4a40bc4205d22d838dd44e09bd478dd53281bfb3f0e07a4fe9e9e62a25b8209ce2e52d0ab4f0b0c3fbd70c41af7bf8589aa2f22adf92532b04729589fee2b58dea8eb594d61722f73780bc06d5f9e986ed9a85f201c0e033f73eb3a63e46357d252a3c87aed043b8933ea3adabdaf1d18752c01643cfd7b6839e9db73312477587ffe634063bc7e40f6475ab70bb640a176f0d552fb3113499d4ed46be873dc460da0567a8da172456a2860bf4b74f4dd6966e4222f576e6b3e7c9416fc2a1eafe4f66f49d1ebde40e8c126389e63520eb6dc1f09012983465d6369985858335ed1c8056c374cae4baf766653c95844325b04eae2ebbc88d4a94e5ad1ad427b3c2e8c5faa6ad36b2cd68372df8f216b38f03fc3d2f970f75a01aefd7e5f46c105cdf0090d3f95600c67f5db49b5567113d10fb731aa53ed29e1c8d85b3e4ef"}}}, 0xfce) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 608.891971ms ago: executing program 0 (id=4647): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f00000003c0)="2d000000010001", 0x7) 447.097946ms ago: executing program 4 (id=4648): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800f3ffffff00000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000340)='GPL\x00', 0x4, 0x2a, &(0x7f0000000e00)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 377.497359ms ago: executing program 0 (id=4649): syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x8) 363.35123ms ago: executing program 4 (id=4650): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000940)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 319.289728ms ago: executing program 1 (id=4651): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000201000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000045e4d344b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) 279.771433ms ago: executing program 5 (id=4652): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x4, "d30f388c52647600", 0x0, 0x5, 0x4000004, 0xffffffde}, 0x3c) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@remote, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x2000000, 0x7c, 0x8, 0x8}, 0x3c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) getpeername$packet(r3, 0x0, &(0x7f0000000080)) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000100)={@local, @multicast2, 0x1, "1215887e7ed31b5ada3ebfdf5b8bfe0c3b47ccb5331eee55df4f57cf11608e44", 0x6, 0x2bfd, 0x9, 0x7}, 0x3c) recvmsg(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xfd, 0x0, 0x0, @uid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001180), r6) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050027bd7400fedbdf250600000008000300", @ANYRES32=r8, @ANYBLOB="080005000e"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000001140)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001100)={&(0x7f0000000440)={0xc8c, r7, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xc000000, 0x1f}}}}, [@NL80211_ATTR_TID_CONFIG={0x27c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7d}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x41}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6e0e}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x110, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0xf11, 0x5, 0x8, 0x5, 0x12e, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x8000, 0x1, 0x1ff, 0xff, 0x7, 0x2, 0xff]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x3, 0x5}, {0x3, 0x2}, {0x7, 0x6}, {0x3, 0x1}, {0x7, 0x3}, {0x3, 0x8}, {0x4, 0x8}, {0x7}, {0x1, 0x4}, {}, {0x1, 0x8}, {0x6}, {0x7, 0x5}, {0x6, 0x9}, {0x2, 0x4}, {0x1, 0x3}]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0x4}, {0x1, 0x4}, {0x1, 0xa}, {0x0, 0x9}, {0x0, 0x9}, {0x1, 0x7}, {0x4, 0x1}, {0x4, 0xa}, {0x7, 0x1}, {0x1, 0x3}, {0x4, 0x5}, {0x7, 0x4}, {0x3, 0x7}, {0x1, 0x5}, {0x3, 0x3}, {0x6, 0x5}, {0x3, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x5, 0x5}, {0x5, 0x2}, {0x0, 0x6}, {0x4, 0x4}, {0x4, 0x2}, {0x4, 0x1}, {0x7, 0x7}, {0x5, 0x7}, {0x5, 0x6}, {0x6, 0x8}, {0x4}, {0x1, 0x6}, {0x6, 0x5}, {0x0, 0x5}, {0x2, 0x8}, {0x0, 0x1}, {0x7, 0x8}, {0x3, 0x4}, {0x1, 0x7}, {0x6, 0x5}, {0x1, 0x4}, {0x3, 0x4}, {0x2, 0x6}, {0x7, 0x7}, {0x1, 0x3}, {0x7}, {0x0, 0x1}, {0x5, 0x8}, {0x4, 0x3}, {0x1, 0x8}, {0x7, 0x2}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0x5, 0xc, 0x18, 0x18, 0x12, 0x36, 0x3, 0x9, 0x48, 0x1, 0x6c, 0x1b, 0x12, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x7, 0x8, 0x8f58, 0x7fff, 0xfab, 0xee]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x6, 0x2, 0x30, 0xc, 0x0, 0x1b, 0x3, 0xc, 0x1, 0x30, 0x18, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe0}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x80}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x69}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10000}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80000001}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x401}]}]}, @NL80211_ATTR_TID_CONFIG={0x670, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3b}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2d}]}, {0x288, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x3}, {0x4, 0x5}, {0x5, 0x4}, {0x3, 0x2}, {0x7, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x2, 0x2}, {0x6, 0x7}, {0x3, 0x4}, {0x0, 0xa}, {0x2, 0x2}, {0x0, 0x7}, {0x7, 0x9}, {0x2, 0x3}, {0x6}, {0x7, 0x4}, {0x7, 0x9}, {0x4, 0x1}, {0x7, 0x1}, {0x6, 0x9}, {0x1, 0x6}, {0x3, 0x1}, {0x7}, {0x7}, {0x0, 0x2}, {0x1, 0x8}, {0x4, 0x5}, {0x3, 0x4}, {0x4, 0x9}, {0x3, 0x8}, {0x2, 0x1}, {0x4, 0x6}, {0x4}, {0x2, 0x1}, {0x0, 0xa}, {0x0, 0x6}, {0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x0, 0x9, 0x6, 0x7, 0xcbeb, 0x3]}}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x24, 0x30, 0x16, 0x6, 0x0, 0x12, 0x36, 0x6, 0x24, 0xc, 0x60, 0x30, 0x30, 0x60, 0x6c, 0x12, 0x1, 0x3, 0xb, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1800, 0x9f, 0x2, 0x5, 0x5, 0x7, 0x543]}}]}, @NL80211_BAND_60GHZ={0xcc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0xa}, {0x2, 0x3}, {0x0, 0x9}, {0x6, 0x1}, {0x6, 0x6}, {0x7, 0x9}, {0x3}, {0x0, 0x4}, {0x7, 0x1}, {0x6, 0x7}, {0x5, 0x6}, {0x2, 0x4}, {0x0, 0x3}, {0x4, 0xa}, {0x0, 0x1}, {}, {0x3, 0x7}, {0x4, 0xa}, {0x3, 0x1}, {0x0, 0x4}, {0x1, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x1b, 0x6c, 0x48, 0x60, 0x48, 0x24, 0x6c, 0x3]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x5, 0x6}, {0x0, 0x5}, {0x3, 0x3}, {0x2, 0x5}, {0x1, 0x4}, {0x3, 0x8}, {0x0, 0x9}, {0x3}, {}, {0x0, 0x9}, {0x6, 0x6}, {0x7, 0x17}, {0x0, 0x5}, {0x4, 0x2}, {0x1, 0x2}, {0x7, 0xa}, {0x0, 0x8}, {0x4, 0x6}, {0x1, 0x3}, {0x3, 0x4}, {0x0, 0x4}, {}, {0x5, 0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x5}, {}, {0x0, 0x3}, {0x0, 0x3}, {0x5, 0x8}, {0x5, 0x2}, {0x7, 0x7}, {0x6, 0x7}, {0x7, 0x3}, {0x4, 0x1}, {0x1}, {0x6, 0xa}, {0x7, 0x4}, {0x7, 0x5}, {0x3, 0x3}, {0x2, 0x8}, {0x5, 0x8}, {0x2, 0x4}, {0x3, 0x3}, {0x7, 0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x0, 0x8}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x9}, {0x6, 0x1}, {0x2}, {0x7, 0x3}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x8}, {0x5, 0x4}, {0x1, 0x7}, {0x0, 0x9}, {0x7, 0xa}, {0x7, 0x9}, {0x1, 0x4}, {0x4, 0x6}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x3, 0x3, 0x24, 0x24, 0x5, 0x3, 0xb, 0x6c, 0x12, 0x30, 0x18, 0x30, 0x30, 0x24, 0x4, 0x1, 0x48, 0x18, 0x1b, 0x24, 0x12, 0x60, 0x60, 0x9, 0x1b, 0x60, 0x16, 0x4]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x4, 0x5a, 0x2, 0xb, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x16, 0x1b, 0x36, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8d, 0x0, 0x1eb, 0x3, 0x6, 0xa, 0x3, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x9, 0x3ff, 0x2, 0x8de7, 0x3, 0x8001, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xffff, 0x2, 0x1, 0x9, 0x8, 0xe9, 0x14a]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8c1, 0x8, 0x8, 0xfff3, 0xaf, 0x1, 0x80]}}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x30, 0x60, 0x16, 0x24, 0x4, 0x16, 0x69, 0x18, 0x30, 0x9, 0x4, 0x2c, 0x45, 0x2c, 0x3, 0x4, 0x5, 0x12, 0xc, 0x5, 0x18, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xb9a, 0x6, 0x541, 0xb6, 0x1bf7, 0x8, 0x5c]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x1ff, 0x3, 0x8af1, 0x0, 0x1, 0x101, 0xf8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x1, 0x36, 0x3, 0xc, 0x800, 0x3ff, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x6, 0x4}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}, {0x354, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x310, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x22d, 0x8, 0xc83d, 0x0, 0x9, 0x9, 0x81]}}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfffd, 0x6, 0x1, 0x7, 0x3, 0x7063, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x1, 0xc297, 0xe597, 0xe, 0xf, 0xfff5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x7, 0x5, 0x1, 0x97e3, 0x68, 0xc3]}}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x9, 0x4, 0x5, 0x8, 0x401, 0xe, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0xffff, 0x1, 0x8, 0x1, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x2, 0xf, 0xc, 0x3, 0x2, 0x6, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0xb, 0x2, 0x1, 0x1325, 0x3d4, 0xc0, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x100, 0x9, 0x4, 0x100, 0x9, 0x4]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0x36, 0x9, 0x16, 0x6c, 0x2, 0x24, 0x0, 0x6, 0x16, 0x6c, 0x12, 0x2, 0x1b, 0x1, 0xc, 0x4]}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x4070, 0x400, 0x1, 0x7c6, 0x2, 0xd9]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0x9}, {0x5, 0xa}, {0x0, 0x2}, {0x2, 0x3}, {0x0, 0x5}, {0x0, 0x3}, {0x1, 0x4}, {0x2}, {0x0, 0x9}, {0x7, 0x1}, {0x4, 0x2}, {0x2, 0x5}, {0x5, 0x6}, {0x1, 0x4}, {0x3, 0x9}, {0x3, 0x4}, {0x2, 0x9}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x3}, {0x2, 0x6}, {0x1, 0x5}, {0x0, 0x4}, {0x1, 0x5}, {0x7, 0x1}, {0x3, 0x4}, {0x5, 0x1}, {0x0, 0x2}, {0x6, 0x6}, {0x4, 0x1}, {0x3, 0x8}, {0x0, 0x6}, {0x0, 0x2}, {0x5, 0x8}, {0x4, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x0, 0xa, 0xd422, 0x6, 0x4, 0x9, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x2, 0x1}, {0x7, 0x7}, {0x0, 0xa}, {0x2, 0x4}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x6}, {0x5, 0x4}, {0x0, 0x6}, {0x7, 0x5}, {0x5, 0x5}, {0x0, 0x5}, {0x3, 0x8}, {0x6, 0x5}, {0x7, 0x1}, {0x6, 0x7}, {0x7, 0x7}, {0x7, 0x3}, {0x4, 0x3}, {0x5, 0x7}, {0x4, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x15, 0x6, 0xff, 0x7, 0x9e34, 0x401, 0xd, 0xf]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x200, 0xa7d, 0x9, 0x8, 0x4, 0x6, 0x1777]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x30, 0x1, 0x6, 0x30, 0x6, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x0, 0x7, 0x4, 0x4, 0x1, 0x6, 0x6]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x12, 0x48, 0x1, 0x2, 0x48, 0xc, 0x3, 0x1, 0x30, 0x18, 0x9, 0x30, 0x1b, 0x1, 0x0, 0x48, 0x3, 0x1, 0x9, 0x36, 0x32, 0x48, 0x3, 0x4, 0x9, 0x3, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xbc3c, 0x1711, 0x3, 0x9, 0x7b0, 0x0, 0x189a, 0x8]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x6}, {0x4, 0x6}, {0x5, 0xa}, {0x5, 0x6}, {0x0, 0x9}, {0x3, 0x2}, {0x0, 0x4}, {0x3, 0x1}, {0x4}, {0x4, 0x3}, {0x2, 0x4}, {0x2, 0x8}, {0x6, 0x7}, {0x0, 0x4}, {0x1, 0x8}, {0x0, 0x2}, {0x6, 0x4}, {}, {0x7, 0x8}, {0x0, 0xa}, {0x7, 0x8}, {0x3, 0xa}, {0x5, 0xa}, {0x3, 0x6}, {0x7}, {0x6, 0x7}, {0x1}, {0x5, 0x8}, {0x1, 0x8}, {0x4}, {0x6, 0x6}, {0x0, 0x9}, {0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xc, 0x4, 0x0, 0x6, 0xf2f, 0xfb, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3f5, 0x401, 0x8, 0x2, 0x5, 0x3, 0x5, 0xfffd]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9e, 0x0, 0x9, 0x4, 0x1, 0x4, 0x6]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x80, 0x0, 0xfffd, 0xa28, 0xf000, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7f}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x38}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x224, 0x11d, 0x0, 0x1, [{0x1f4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x359d, 0xc, 0x8000, 0x9, 0x2, 0x6, 0xfffd, 0x2]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x6, 0x4, 0x7f, 0x1000, 0x7, 0x4, 0xb79]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x87, 0x63, 0xff52, 0x6, 0x9, 0x4, 0x8, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x3}, {0x4, 0x6}, {}, {0x7}, {0x5, 0x3}, {0x1, 0x7}, {0x4, 0x2}, {}, {0x2, 0x7}, {0x4, 0x5}, {0x3, 0x6}, {0x7, 0x6}, {0x5, 0x6}, {0x0, 0x6}, {}, {0x5, 0x3}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1}, {0x1, 0xa}, {0x0, 0xa}, {0x0, 0x7}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x5}, {0x2, 0x7}, {}, {0x0, 0x3}, {0x2}, {0x6, 0x6}, {0x2, 0x7}, {0x3, 0x6}, {0x6, 0x2}, {0x6, 0x5}, {0x4, 0xa}, {0x6, 0x3}, {0x5, 0x5}, {0x1}, {0x0, 0xa}, {0x1, 0x8}, {0x2, 0xa}, {0x4, 0x3}, {0x2, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0xfd, 0x5, 0x2, 0xb460, 0x6, 0x6, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x5, 0x895e, 0x1, 0x6297, 0x4, 0x7]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x3, 0x5, 0x200, 0x100, 0xab36, 0x3c, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6c, 0x18, 0xc, 0x16, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x1, 0x8, 0xda18, 0x7, 0x237, 0x2, 0x80]}}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x4, 0x8, 0x1b22, 0x81, 0x7]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x3}, {0x2, 0x9}, {0x2, 0x8}, {0x3, 0x8}, {0x2, 0x9}, {0x5, 0x3}, {0x1, 0x8}, {0x6, 0x4}, {0x7, 0x2}, {0x1, 0x2}, {0x3, 0x3}, {0x0, 0x9}, {0x1, 0x7}, {0x6, 0x5}, {0x6, 0x2}, {0x1, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x2, 0x5}, {0x4, 0x5}, {0x6, 0xa}, {0x0, 0x2}, {0x6, 0xa}, {0x4, 0x5}, {0x5, 0x3}, {0x3, 0x3}, {}, {0x7, 0x8}, {0x3, 0x1}, {0x2}, {0x7, 0x5}, {0x0, 0x8}, {0x0, 0x1}, {0x5, 0x6}, {0x5, 0x8}, {0x1, 0x2}, {0x0, 0x3}, {0x0, 0x7}, {0x2}, {0x4, 0x5}, {0x6, 0x4}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x2c, 0x1b, 0x60, 0x3, 0x30, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x2, 0x8001, 0x9, 0x8, 0x3, 0x4, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x7, 0x7, 0x80, 0x3, 0x9, 0x5]}}]}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x79}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000000000001}]}]}, @NL80211_ATTR_TID_CONFIG={0x130, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x34, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x4, 0x672, 0x3, 0x3, 0x3461, 0x10]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc6}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9c}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1f}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2e}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}]}, 0xc8c}, 0x1, 0x0, 0x0, 0x8018}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) 255.894573ms ago: executing program 0 (id=4653): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x3, 0x5, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0x8}, [@tmpl={0xc4, 0x5, [{{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x48, 0x4, 0x8000, 0x5}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x0, 0x3, 0x2, 0x3, 0x0, 0x2, 0x6}, {{@in=@multicast2, 0x4d4, 0x2b}, 0xa, @in=@rand_addr=0x64010100, 0x0, 0x1, 0x0, 0x3, 0xfffffff9, 0x103ff, 0xd9}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 93.158587ms ago: executing program 1 (id=4654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0xa2f01, 0x0) pipe(0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x3}, {0x0, 0x2, 0x8, 0x3, 0xfffd}, 0x2, 0x401, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xe, 0xb}, {0x7, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0xf}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x40680, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000009c0)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a00)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000a40), 0x56) sendmsg$kcm(r5, &(0x7f0000000a80)={&(0x7f0000000ac0)=@xdp={0x2c, 0x12, r7, 0x3e}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000b80)="27030200e61114120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000440)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) bind$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/17, 0x11}, 0x83c7}], 0x1, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x16, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x5, 0xc3, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) 49.043603ms ago: executing program 5 (id=4655): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000040000ed0000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@newsa={0x15c, 0x10, 0x1, 0x0, 0xfffffffd, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0xfffffffffffff801, 0x2, 0x0, 0x4000000, 0xffffffff}, {0x0, 0x0, 0x0, 0x2}, {0x4, 0x0, 0xfffffffe}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x8a}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x400004}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x15c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r4 = socket$inet6(0xa, 0x3, 0x3c) writev(r4, &(0x7f0000000d00)=[{&(0x7f0000000d40)="06c3", 0x2}, {&(0x7f0000000d80)="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", 0x600}, {&(0x7f0000001380)="4c7911315ed07e13be5391e38b57247dcbfa424aaec74724dd2da16f11eb", 0x1e}], 0x3) (async) writev(r4, &(0x7f0000000d00)=[{&(0x7f0000000d40)="06c3", 0x2}, {&(0x7f0000000d80)="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", 0x600}, {&(0x7f0000001380)="4c7911315ed07e13be5391e38b57247dcbfa424aaec74724dd2da16f11eb", 0x1e}], 0x3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket$inet(0x2, 0x2, 0x0) (async) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x3c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, &(0x7f00000005c0)={0x11, 0x300, r5, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r7, &(0x7f0000000600)="0802110000010802110000000800450000280000000040007ce70a00", 0x1c) (async) write(r7, &(0x7f0000000600)="0802110000010802110000000800450000280000000040007ce70a00", 0x1c) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 0s ago: executing program 0 (id=4656): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d83b4fe, 0xc574450d1af1b8ad}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4050) kernel console output (not intermixed with test programs): tes in process `syz.4.3405'. [ 446.720313][T16473] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 447.193169][T16492] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3410'. [ 447.376245][T16504] bridge0: port 4(bridge_slave_0) entered blocking state [ 447.378203][T16504] bridge0: port 4(bridge_slave_0) entered disabled state [ 447.412970][T16504] bridge0: port 4(bridge_slave_0) entered blocking state [ 447.413093][T16504] bridge0: port 4(bridge_slave_0) entered forwarding state [ 447.664062][T16515] netlink: 'syz.4.3415': attribute type 18 has an invalid length. [ 447.664087][T16515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3415'. [ 447.746818][T16515] netlink: 'syz.4.3415': attribute type 18 has an invalid length. [ 447.746844][T16515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3415'. [ 447.750544][T15032] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.750675][T15032] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.750771][T15032] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.750875][T15032] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.984415][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3420'. [ 448.027359][T16529] netlink: 'syz.5.3422': attribute type 10 has an invalid length. [ 448.071635][T16527] rxe_eth0 speed is unknown, defaulting to 1000 [ 448.304247][T16536] tipc: Enabled bearer , priority 0 [ 448.343945][T16533] tipc: Disabling bearer [ 448.367734][T16527] hsr0 speed is unknown, defaulting to 1000 [ 448.385611][T16527] wg0 speed is unknown, defaulting to 1000 [ 448.490732][T16543] syzkaller0: entered promiscuous mode [ 448.490758][T16543] syzkaller0: entered allmulticast mode [ 448.657472][T16546] ip6t_rt: unknown flags 1F [ 449.372997][T16567] syzkaller0: entered promiscuous mode [ 449.373072][T16567] syzkaller0: entered allmulticast mode [ 449.548996][ T3285] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.549049][ T3285] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.549088][ T3285] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.549126][ T3285] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.733995][T16577] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 449.814110][T16583] syzkaller0: entered promiscuous mode [ 449.814135][T16583] syzkaller0: entered allmulticast mode [ 450.090468][T16595] xt_CT: You must specify a L4 protocol and not use inversions on it [ 450.127746][T16598] Bluetooth: hci0: load_link_keys: too big key_count value 15616 [ 450.233932][T16600] ip_tables: iptables: counters copy to user failed while replacing table [ 450.463262][T16606] netlink: 'syz.5.3450': attribute type 30 has an invalid length. [ 450.494119][T16606] vxlan2: entered promiscuous mode [ 450.494144][T16606] vxlan2: entered allmulticast mode [ 450.529808][ T31] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.529888][ T31] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.529929][ T31] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.529967][ T31] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.008890][T16623] syzkaller0: entered promiscuous mode [ 451.008917][T16623] syzkaller0: entered allmulticast mode [ 451.073270][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.073742][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.325393][T16635] __nla_validate_parse: 6 callbacks suppressed [ 451.325413][T16635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3460'. [ 451.325441][T16635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3460'. [ 451.360295][T16634] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3461'. [ 451.499495][T16641] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3465'. [ 451.518307][T16641] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3465'. [ 451.646057][ T30] audit: type=1804 audit(1793830032.941:72): pid=16650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3466" name="/newroot/689/cgroup.controllers" dev="tmpfs" ino=3535 res=1 errno=0 [ 451.646200][ T30] audit: type=1800 audit(1793830032.941:73): pid=16650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3466" name="cgroup.controllers" dev="tmpfs" ino=3535 res=0 errno=-22 [ 451.711798][T15032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.729383][T16650] netlink: 'syz.0.3466': attribute type 10 has an invalid length. [ 451.729996][T16650] netlink: 'syz.0.3466': attribute type 10 has an invalid length. [ 451.830052][T16658] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3470'. [ 451.830096][T16658] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3470'. [ 451.940546][T16654] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3468'. [ 451.989411][T16667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3474'. [ 452.154839][T16673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3478'. [ 452.236186][T16678] netlink: 'syz.3.3479': attribute type 30 has an invalid length. [ 452.265584][T16678] vxlan0: entered promiscuous mode [ 452.265622][T16678] vxlan0: entered allmulticast mode [ 452.278661][T15032] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.278710][T15032] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.278747][T15032] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.278785][T15032] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.348812][T15032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.398397][ T31] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.398450][ T31] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.398487][ T31] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.398526][ T31] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.441979][T16684] Cannot find set identified by id 65534 to match [ 452.802257][T16703] sch_fq: defrate 4294967293 ignored. [ 453.061861][T16723] lo: entered allmulticast mode [ 453.186113][T16719] lo: left allmulticast mode [ 455.884059][T16709] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 456.190766][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.191503][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.370052][T16756] ip_tables: iptables: counters copy to user failed while replacing table [ 456.424886][T16760] xt_CT: You must specify a L4 protocol and not use inversions on it [ 456.479642][T16758] netlink: 'syz.3.3509': attribute type 8 has an invalid length. [ 456.488485][T16758] __nla_validate_parse: 6 callbacks suppressed [ 456.488505][T16758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3509'. [ 456.543885][T16758] veth7: entered allmulticast mode [ 456.731448][T16765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3511'. [ 457.062000][T16767] bridge0: port 2(syz_tun) entered disabled state [ 457.127676][T16767] bridge0: port 3(bond0) entered disabled state [ 457.216790][T16767] bridge0: port 1(veth0) entered disabled state [ 457.267402][T16767] bridge0: port 4(bridge_slave_0) entered disabled state [ 457.316767][T16767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.328147][T16767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.499892][T16782] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3511'. [ 457.532530][ T7002] wg0 speed is unknown, defaulting to 1000 [ 457.532576][ T7002] syz1: Port: 1 Link DOWN [ 457.532657][ T7002] wg0 speed is unknown, defaulting to 1000 [ 457.620011][T16790] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3514'. [ 457.663157][ T9978] hsr0 speed is unknown, defaulting to 1000 [ 457.663197][ T9978] syz2: Port: 1 Link DOWN [ 457.713588][T16790] lo: left promiscuous mode [ 457.726637][T16790] tunl0: left promiscuous mode [ 457.743660][T16790] gre0: left promiscuous mode [ 457.765482][T16790] 0ªî{X¹¦: left promiscuous mode [ 457.783394][T16790] erspan0: left promiscuous mode [ 457.799967][T16790] ip_vti0: left promiscuous mode [ 457.807591][T16790] ip6_vti0: left promiscuous mode [ 457.825511][T16790] sit0: left promiscuous mode [ 457.884669][T16790] ip6gre0: left promiscuous mode [ 457.909467][T16790] ip6gretap0: left promiscuous mode [ 457.929684][T16790] vcan0: left promiscuous mode [ 457.951150][T16790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.956868][T16790] team0: left promiscuous mode [ 457.972386][T16790] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.996954][T16790] nlmon0: left promiscuous mode [ 458.019900][T16790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.024641][T16790] vxcan0: left promiscuous mode [ 458.053893][T16790] vxcan1: left promiscuous mode [ 458.093202][T16790] veth1: left promiscuous mode [ 458.112485][T16790] wg0: left promiscuous mode [ 458.112882][ T3285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.113293][ T3285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.115824][T16790] wg1: left promiscuous mode [ 458.116093][T15031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.166609][T16790] wg2: left promiscuous mode [ 458.169027][ T3285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.195943][T16790] veth0_to_bridge: left promiscuous mode [ 458.235237][T16790] veth1_to_bridge: left promiscuous mode [ 458.260352][T16790] bridge_slave_1: left promiscuous mode [ 458.274871][T16790] veth0_to_bond: left promiscuous mode [ 458.289623][T16790] veth1_to_bond: left promiscuous mode [ 458.297645][T16790] veth0_to_team: left promiscuous mode [ 458.319166][T16790] team_slave_0: left promiscuous mode [ 458.322781][T16790] veth1_to_team: left promiscuous mode [ 458.326060][T16790] team_slave_1: left promiscuous mode [ 458.345687][T16790] veth0_to_batadv: left promiscuous mode [ 458.357237][T16790] batadv_slave_0: left promiscuous mode [ 458.366148][T16790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.374588][T16790] veth1_to_batadv: left promiscuous mode [ 458.383614][T16790] batadv_slave_1: left promiscuous mode [ 458.386157][T16790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.407563][T16790] xfrm0: left promiscuous mode [ 458.416726][T16790] veth0_to_hsr: left promiscuous mode [ 458.430111][T16790] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 458.430174][T16790] hsr0: left promiscuous mode [ 458.453557][T16790] veth1_virt_wifi: left promiscuous mode [ 458.457470][T16790] veth0_virt_wifi: left promiscuous mode [ 458.476989][T16790] virt_wifi0: left promiscuous mode [ 458.477013][T16790] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 458.602438][ T5832] wg0 speed is unknown, defaulting to 1000 [ 458.602487][ T5832] syz1: Port: 1 Link ACTIVE [ 458.602752][T16795] syzkaller1: entered promiscuous mode [ 458.602769][T16795] syzkaller1: entered allmulticast mode [ 458.610748][ T5832] wg0 speed is unknown, defaulting to 1000 [ 458.640820][ T6983] hsr0 speed is unknown, defaulting to 1000 [ 458.640858][ T6983] syz2: Port: 1 Link ACTIVE [ 458.798713][ T1161] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.798752][ T1161] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 458.798794][ T1161] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.798823][ T1161] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 458.798861][ T1161] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.798903][ T1161] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 458.798940][ T1161] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.798968][ T1161] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 459.182399][T16841] ebt_limit: overflow, try lower: 0/0 [ 459.797146][T16869] netlink: 'syz.3.3539': attribute type 4 has an invalid length. [ 459.797171][T16869] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3539'. [ 459.819273][T16867] tipc: Enabled bearer , priority 10 [ 459.929044][T16873] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3544'. [ 460.035315][T16881] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3542'. [ 460.088684][T16873] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3544'. [ 460.355183][T16896] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3551'. [ 460.380100][T16894] ip_tables: iptables: counters copy to user failed while replacing table [ 460.484052][T16896] syzkaller0: entered promiscuous mode [ 460.484079][T16896] syzkaller0: entered allmulticast mode [ 460.613854][T16906] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3556'. [ 460.693955][T16909] ip_tables: iptables: counters copy to user failed while replacing table [ 460.821152][T16915] tipc: Enabling of bearer rejected, failed to enable media [ 461.362995][T16944] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 461.460127][T16940] ip_tables: iptables: counters copy to user failed while replacing table [ 461.542631][T16949] bond5: entered promiscuous mode [ 461.543092][T16949] 8021q: adding VLAN 0 to HW filter on device bond5 [ 461.581790][ T31] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 461.604460][T16949] 8021q: adding VLAN 0 to HW filter on device bond5 [ 461.604736][T16949] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address [ 461.605175][T16949] bond5: (slave xfrm1): Error -95 calling set_mac_address [ 461.924081][T16975] __nla_validate_parse: 3 callbacks suppressed [ 461.924104][T16975] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3579'. [ 461.946780][T16975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.947004][T16975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.505117][T16975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.545829][T16975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.661174][ T993] wg0 speed is unknown, defaulting to 1000 [ 462.661216][ T993] syz1: Port: 1 Link DOWN [ 462.662770][ T6980] hsr0 speed is unknown, defaulting to 1000 [ 462.662810][ T6980] syz2: Port: 1 Link DOWN [ 462.664021][ T6985] wg0 speed is unknown, defaulting to 1000 [ 462.776403][T16980] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3581'. [ 462.873550][T16984] FAULT_INJECTION: forcing a failure. [ 462.873550][T16984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.873585][T16984] CPU: 1 UID: 0 PID: 16984 Comm: syz.1.3583 Not tainted syzkaller #0 PREEMPT(full) [ 462.873611][T16984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 462.873625][T16984] Call Trace: [ 462.873635][T16984] [ 462.873645][T16984] dump_stack_lvl+0xe8/0x150 [ 462.873687][T16984] should_fail_ex+0x3eb/0x540 [ 462.873725][T16984] _copy_from_iter+0x1d3/0x1680 [ 462.873748][T16984] ? lock_acquire+0x115/0x350 [ 462.873771][T16984] ? __lock_acquire+0x747/0x2de0 [ 462.873792][T16984] ? __pfx__copy_from_iter+0x10/0x10 [ 462.873823][T16984] tun_get_user+0x265/0x4470 [ 462.873855][T16984] ? aa_file_perm+0x18b/0x15f0 [ 462.873876][T16984] ? aa_file_perm+0x4ed/0x15f0 [ 462.873899][T16984] ? __pfx_tun_get_user+0x10/0x10 [ 462.873921][T16984] ? __lock_acquire+0x747/0x2de0 [ 462.873943][T16984] ? kstrtoull+0x137/0x1d0 [ 462.873976][T16984] ? ref_tracker_alloc+0x172/0x530 [ 462.873997][T16984] ? lock_acquire+0x115/0x350 [ 462.874018][T16984] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 462.874042][T16984] ? lock_acquire+0x115/0x350 [ 462.874062][T16984] ? tun_get+0x1c/0x2f0 [ 462.874085][T16984] ? tun_get+0x1c/0x2f0 [ 462.874104][T16984] ? tun_get+0x1c/0x2f0 [ 462.874127][T16984] tun_chr_write_iter+0x113/0x200 [ 462.874148][T16984] vfs_write+0x612/0xba0 [ 462.874178][T16984] ? __pfx_vfs_write+0x10/0x10 [ 462.874202][T16984] ? __fget_files+0x3a2/0x420 [ 462.874244][T16984] ? __fget_files+0x2a/0x420 [ 462.874283][T16984] ? fdget+0x1ac/0x250 [ 462.874308][T16984] ksys_write+0x150/0x270 [ 462.874332][T16984] ? __pfx_ksys_write+0x10/0x10 [ 462.874363][T16984] do_syscall_64+0x166/0x520 [ 462.874382][T16984] ? trace_irq_disable+0x3b/0x140 [ 462.874407][T16984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.874424][T16984] ? clear_bhb_loop+0x70/0xc0 [ 462.874444][T16984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.874461][T16984] RIP: 0033:0x7f548a59fb19 [ 462.874476][T16984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.874493][T16984] RSP: 002b:00007f548b4f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 462.874510][T16984] RAX: ffffffffffffffda RBX: 00007f548a825fa0 RCX: 00007f548a59fb19 [ 462.874523][T16984] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000004 [ 462.874533][T16984] RBP: 00007f548b4f9090 R08: 0000000000000000 R09: 0000000000000000 [ 462.874544][T16984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.874554][T16984] R13: 00007f548a826038 R14: 00007f548a825fa0 R15: 00007fffeb65e8b8 [ 462.874579][T16984] [ 464.381603][T16988] ip6t_rt: unknown flags 1F [ 464.421882][T16947] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 464.647706][T17000] xt_CT: You must specify a L4 protocol and not use inversions on it [ 465.729362][T15032] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.739177][T15032] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.739303][T15032] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.739419][T15032] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.921836][T17047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3604'. [ 466.078942][T17061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3604'. [ 466.244024][T17066] netlink: 'syz.5.3608': attribute type 1 has an invalid length. [ 466.274606][T17066] tun0: tun_chr_ioctl cmd 2148553947 [ 466.848257][T17092] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3620'. [ 466.940717][T17100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3622'. [ 467.116969][T17097] nbd: nbd1964 already in use [ 467.117165][T17097] nbd: nbd1964 already in use [ 467.117313][T17097] nbd: nbd1964 already in use [ 467.117465][T17097] nbd: nbd1964 already in use [ 467.117595][T17097] nbd: nbd1964 already in use [ 467.117727][T17097] nbd: nbd1964 already in use [ 467.144225][T17112] netlink: 'syz.3.3624': attribute type 1 has an invalid length. [ 467.159339][T17097] nbd: nbd1964 already in use [ 467.159516][T17097] nbd: nbd1964 already in use [ 467.159662][T17097] nbd: nbd1964 already in use [ 467.179659][T17097] nbd: nbd1964 already in use [ 467.179824][T17097] nbd: nbd1964 already in use [ 467.179977][T17097] nbd: nbd1964 already in use [ 467.180121][T17097] nbd: nbd1964 already in use [ 467.180306][T17097] nbd: nbd1964 already in use [ 467.180451][T17097] nbd: nbd1964 already in use [ 467.180599][T17097] nbd: nbd1964 already in use [ 467.180742][T17097] nbd: nbd1964 already in use [ 467.180888][T17097] nbd: nbd1964 already in use [ 467.181044][T17097] nbd: nbd1964 already in use [ 467.194464][T17097] nbd: nbd1964 already in use [ 467.194858][T17097] nbd: nbd1964 already in use [ 467.195233][T17097] nbd: nbd1964 already in use [ 467.195581][T17097] nbd: nbd1964 already in use [ 467.212400][T17097] nbd: nbd1964 already in use [ 467.212799][T17097] nbd: nbd1964 already in use [ 467.213155][T17097] nbd: nbd1964 already in use [ 467.213442][T17097] nbd: nbd1964 already in use [ 467.240812][T17097] nbd: nbd1964 already in use [ 467.241288][T17097] nbd: nbd1964 already in use [ 467.241639][T17097] nbd: nbd1964 already in use [ 467.242013][T17097] nbd: nbd1964 already in use [ 467.256684][T17097] nbd: nbd1964 already in use [ 467.257187][T17097] nbd: nbd1964 already in use [ 467.257588][T17097] nbd: nbd1964 already in use [ 467.296470][T17097] nbd: nbd1964 already in use [ 467.296849][T17097] nbd: nbd1964 already in use [ 467.310667][T17097] nbd: nbd1964 already in use [ 467.310990][T17097] nbd: nbd1964 already in use [ 467.311134][T17097] nbd: nbd1964 already in use [ 467.311272][T17097] nbd: nbd1964 already in use [ 467.311522][T17097] nbd: nbd1964 already in use [ 467.311917][T17097] nbd: nbd1964 already in use [ 467.360042][T17114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3622'. [ 467.387278][T17118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3624'. [ 467.411004][T17112] bond6: entered promiscuous mode [ 467.413960][T17112] 8021q: adding VLAN 0 to HW filter on device bond6 [ 467.428228][T17097] nbd: nbd1964 already in use [ 467.428697][T17097] nbd: nbd1964 already in use [ 467.429078][T17097] nbd: nbd1964 already in use [ 467.429468][T17097] nbd: nbd1964 already in use [ 467.449591][T17097] nbd: nbd1964 already in use [ 467.450036][T17097] nbd: nbd1964 already in use [ 467.450397][T17097] nbd: nbd1964 already in use [ 467.450542][T17097] nbd: nbd1964 already in use [ 467.450683][T17097] nbd: nbd1964 already in use [ 467.450822][T17097] nbd: nbd1964 already in use [ 467.450962][T17097] nbd: nbd1964 already in use [ 467.521185][T17116] 8021q: adding VLAN 0 to HW filter on device bond6 [ 467.521629][T17116] bond6: (slave gre1): The slave device specified does not support setting the MAC address [ 467.521652][T17116] bond6: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 467.559834][T17116] bond6: (slave gre1): making interface the new active one [ 467.559860][T17116] gre1: entered promiscuous mode [ 467.564186][T17116] bond6: (slave gre1): Enslaving as an active interface with an up link [ 467.606958][T17122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3626'. [ 467.606997][T17122] netlink: 'syz.4.3626': attribute type 30 has an invalid length. [ 467.647198][T17118] bond6 (unregistering): (slave gre1): Releasing backup interface [ 467.647230][T17118] gre1: left promiscuous mode [ 467.676601][T17118] bond6 (unregistering): Released all slaves [ 467.749481][T17122] vxlan1: entered promiscuous mode [ 467.749510][T17122] vxlan1: entered allmulticast mode [ 467.814426][T17125] xt_CT: You must specify a L4 protocol and not use inversions on it [ 467.849255][ T31] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.850389][ T31] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.850437][ T31] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.850476][ T31] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.889391][T17127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3628'. [ 468.127770][T17140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3633'. [ 468.152042][T17129] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3631'. [ 468.600515][T17155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3638'. [ 468.753636][T17156] ip_tables: iptables: counters copy to user failed while replacing table [ 468.775843][T17164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3638'. [ 469.033833][T17174] ip6t_rt: unknown flags 1F [ 469.292939][T17186] ip_tables: iptables: counters copy to user failed while replacing table [ 469.494603][T17195] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 469.509392][T17195] bond6 (unregistering): Released all slaves [ 469.516730][T17199] FAULT_INJECTION: forcing a failure. [ 469.516730][T17199] name failslab, interval 1, probability 0, space 0, times 0 [ 469.516762][T17199] CPU: 1 UID: 0 PID: 17199 Comm: syz.4.3652 Not tainted syzkaller #0 PREEMPT(full) [ 469.516787][T17199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 469.516802][T17199] Call Trace: [ 469.516811][T17199] [ 469.516822][T17199] dump_stack_lvl+0xe8/0x150 [ 469.516864][T17199] should_fail_ex+0x3eb/0x540 [ 469.516899][T17199] should_failslab+0xa8/0x100 [ 469.516936][T17199] __kmalloc_noprof+0xf9/0x710 [ 469.516965][T17199] ? sk_prot_alloc+0xe7/0x210 [ 469.516987][T17199] ? sk_prot_alloc+0xe7/0x210 [ 469.517022][T17199] sk_prot_alloc+0xe7/0x210 [ 469.517043][T17199] ? sk_alloc+0x27/0x390 [ 469.517069][T17199] sk_alloc+0x3a/0x390 [ 469.517096][T17199] bpf_prog_test_run_skb+0x3a6/0x22c0 [ 469.517129][T17199] ? lock_acquire+0x115/0x350 [ 469.517170][T17199] ? __fget_files+0x2a/0x420 [ 469.517202][T17199] ? __fget_files+0x2a/0x420 [ 469.517229][T17199] ? __fget_files+0x3a2/0x420 [ 469.517275][T17199] ? __fget_files+0x2a/0x420 [ 469.517326][T17199] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 469.517360][T17199] bpf_prog_test_run+0x2c5/0x340 [ 469.517390][T17199] __sys_bpf+0xb1e/0xe00 [ 469.517422][T17199] ? __pfx___sys_bpf+0x10/0x10 [ 469.517458][T17199] ? __fget_files+0x2a/0x420 [ 469.517506][T17199] ? ksys_write+0x242/0x270 [ 469.517539][T17199] ? __pfx_ksys_write+0x10/0x10 [ 469.517576][T17199] __x64_sys_bpf+0xba/0xd0 [ 469.517613][T17199] do_syscall_64+0x166/0x520 [ 469.517640][T17199] ? trace_irq_disable+0x3b/0x140 [ 469.517671][T17199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.517695][T17199] ? clear_bhb_loop+0x70/0xc0 [ 469.517725][T17199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.517747][T17199] RIP: 0033:0x7f75fc99fb19 [ 469.517770][T17199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.517791][T17199] RSP: 002b:00007f75fd7c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 469.517816][T17199] RAX: ffffffffffffffda RBX: 00007f75fcc25fa0 RCX: 00007f75fc99fb19 [ 469.517833][T17199] RDX: 0000000000000050 RSI: 00002000000013c0 RDI: 000000000000000a [ 469.517848][T17199] RBP: 00007f75fd7c9090 R08: 0000000000000000 R09: 0000000000000000 [ 469.517863][T17199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.517877][T17199] R13: 00007f75fcc26038 R14: 00007f75fcc25fa0 R15: 00007fff9077c768 [ 469.517925][T17199] [ 469.832215][T17205] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3653'. [ 470.089557][T17219] netlink: 'syz.4.3657': attribute type 30 has an invalid length. [ 470.115058][T17219] vxlan2: entered promiscuous mode [ 470.115083][T17219] vxlan2: entered allmulticast mode [ 470.508384][ T3285] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.508436][ T3285] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.508474][ T3285] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.508512][ T3285] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.924119][T17266] FAULT_INJECTION: forcing a failure. [ 470.924119][T17266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.924154][T17266] CPU: 1 UID: 0 PID: 17266 Comm: syz.3.3674 Not tainted syzkaller #0 PREEMPT(full) [ 470.924189][T17266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 470.924204][T17266] Call Trace: [ 470.924214][T17266] [ 470.924224][T17266] dump_stack_lvl+0xe8/0x150 [ 470.924267][T17266] should_fail_ex+0x3eb/0x540 [ 470.924301][T17266] _copy_from_user+0x2d/0xb0 [ 470.924332][T17266] copy_from_sockptr+0x5e/0x90 [ 470.924370][T17266] do_ipv6_setsockopt+0x18ae/0x2960 [ 470.924413][T17266] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 470.924446][T17266] ? aa_inet_opt_perm+0x94d/0xcd0 [ 470.924469][T17266] ? get_pid_task+0x20/0x1f0 [ 470.924506][T17266] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 470.924549][T17266] ? ksys_write+0x1e6/0x270 [ 470.924588][T17266] ? lock_acquire+0x115/0x350 [ 470.924656][T17266] ? aa_sock_opt_perm+0xe1/0x1e0 [ 470.924684][T17266] ipv6_setsockopt+0x59/0x170 [ 470.924717][T17266] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 470.924754][T17266] do_sock_setsockopt+0x17c/0x1b0 [ 470.924782][T17266] __x64_sys_setsockopt+0x13d/0x1b0 [ 470.924813][T17266] do_syscall_64+0x166/0x520 [ 470.924839][T17266] ? trace_irq_disable+0x3b/0x140 [ 470.924878][T17266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.924901][T17266] ? clear_bhb_loop+0x70/0xc0 [ 470.924928][T17266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.924951][T17266] RIP: 0033:0x7f471bf9fb19 [ 470.924972][T17266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.924993][T17266] RSP: 002b:00007f471a1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 470.925019][T17266] RAX: ffffffffffffffda RBX: 00007f471c225fa0 RCX: 00007f471bf9fb19 [ 470.925037][T17266] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003 [ 470.925051][T17266] RBP: 00007f471a1f6090 R08: 0000000000000014 R09: 0000000000000000 [ 470.925066][T17266] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 470.925082][T17266] R13: 00007f471c226038 R14: 00007f471c225fa0 R15: 00007ffed61987f8 [ 470.925121][T17266] [ 471.203507][T17273] ip6t_rt: unknown flags 1F [ 471.439880][T17286] xt_CT: You must specify a L4 protocol and not use inversions on it [ 471.532883][T17285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.546711][T17285] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.569000][T17285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.681910][T17285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.685115][T17285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.711286][T17285] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 471.787151][ T3285] bridge0: port 3(veth0) entered blocking state [ 471.787282][ T3285] bridge0: port 3(veth0) entered forwarding state [ 471.803169][ T3285] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.803482][ T3285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.829441][ T3285] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.829567][ T3285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.081948][T17299] syzkaller0: entered promiscuous mode [ 472.081976][T17299] syzkaller0: entered allmulticast mode [ 472.231429][T17308] __nla_validate_parse: 11 callbacks suppressed [ 472.231452][T17308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3686'. [ 472.231567][T17309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3686'. [ 472.317319][T17308] 8021q: adding VLAN 0 to HW filter on device bond6 [ 472.354606][T17312] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 472.369434][T15030] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.369534][T15030] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.369577][T15030] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.369618][T15030] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.384458][T17314] veth0: left promiscuous mode [ 472.385167][T17314] bridge0: port 1(veth0) entered disabled state [ 472.436538][T17314] batman_adv: batadv0: Adding interface: veth0 [ 472.436557][T17314] batman_adv: batadv0: The MTU of interface veth0 is too small (1282) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1314 would solve the problem. [ 472.436593][T17314] batman_adv: batadv0: Interface activated: veth0 [ 472.481642][T17318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.484835][T17318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.501851][T17318] batman_adv: batadv0: Interface deactivated: veth0 [ 472.502254][T17318] batman_adv: batadv0: Removing interface: veth0 [ 472.533285][T17318] bond1: (slave batadv0): Releasing active interface [ 472.533317][T17318] batadv0 (unregistering): left promiscuous mode [ 472.650292][T17317] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 472.652402][T17317] bond8 (unregistering): Released all slaves [ 472.780159][T17318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3687'. [ 473.555852][T17350] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3698'. [ 473.585848][T17349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3697'. [ 473.604411][T17346] bridge0: port 5(syz_tun) entered blocking state [ 473.604577][T17346] bridge0: port 5(syz_tun) entered listening state [ 473.634137][T17346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.636177][T17346] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.705135][T17352] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3697'. [ 473.773770][T17346] batadv_slave_0: left promiscuous mode [ 473.774394][T17356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3700'. [ 473.804142][T17346] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 473.804170][T17346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 473.832243][T17346] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 473.904364][T17364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3700'. [ 473.929507][ T3285] bridge0: port 3(veth0) entered blocking state [ 473.929640][ T3285] bridge0: port 3(veth0) entered listening state [ 473.943902][ T3285] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.944257][ T3285] bridge0: port 1(bridge_slave_0) entered listening state [ 473.972211][ T3285] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.972348][ T3285] bridge0: port 2(bridge_slave_1) entered listening state [ 474.046680][ T3285] bridge0: port 4(team0) entered blocking state [ 474.046828][ T3285] bridge0: port 4(team0) entered listening state [ 474.071623][T17358] bridge0: port 1(veth0) entered blocking state [ 474.071781][T17358] bridge0: port 1(veth0) entered disabled state [ 474.075559][T17358] veth0: entered promiscuous mode [ 474.253004][T17369] tipc: Started in network mode [ 474.253035][T17369] tipc: Node identity 4e332bc1b3ec, cluster identity 4711 [ 474.272231][T17369] tipc: Enabled bearer , priority 0 [ 474.576011][T17390] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3709'. [ 474.595789][T17395] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3711'. [ 474.654450][T17392] 8021q: adding VLAN 0 to HW filter on device bond6 [ 475.047811][T17420] Cannot find del_set index 1024 as target [ 475.278379][T17426] ip_tables: iptables: counters copy to user failed while replacing table [ 475.368351][ T6980] tipc: Node number set to 4259261377 [ 475.753427][T17452] xt_CT: You must specify a L4 protocol and not use inversions on it [ 475.826665][T17458] ip_tables: iptables: counters copy to user failed while replacing table [ 475.827034][T17458] ip_tables: iptables: counters copy to user failed while replacing table [ 475.842712][T17458] ip_tables: iptables: counters copy to user failed while replacing table [ 475.861426][T17458] ip_tables: iptables: counters copy to user failed while replacing table [ 475.861826][T17458] ip_tables: iptables: counters copy to user failed while replacing table [ 475.862280][T17458] ip_tables: iptables: counters copy to user failed while replacing table [ 475.862731][T17458] ip_tables: iptables: counters copy to user failed while replacing table [ 475.863702][T17458] ip_tables: iptables: counters copy to user failed while replacing table [ 476.608943][T17492] 0ªî{X¹¦: entered promiscuous mode [ 476.613851][T17492] debugfs: 'hsr1' already exists in 'hsr' [ 476.613878][T17492] Cannot create hsr debugfs directory [ 476.834084][T17503] syzkaller0: entered promiscuous mode [ 476.834107][T17503] syzkaller0: entered allmulticast mode [ 476.863040][T17503] netlink: 'syz.1.3744': attribute type 1 has an invalid length. [ 477.393600][T17525] lo: entered allmulticast mode [ 477.484366][T17528] __nla_validate_parse: 12 callbacks suppressed [ 477.484393][T17528] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3754'. [ 477.553469][T17521] lo: left allmulticast mode [ 477.563431][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3755'. [ 477.597317][T17531] bond8: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 477.611600][T17531] bond8 (unregistering): Released all slaves [ 477.628556][T17533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3755'. [ 477.848751][T17533] bond8: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 477.907663][T17533] bond8 (unregistering): Released all slaves [ 478.812490][T17561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3764'. [ 478.887761][T17563] ebt_limit: overflow, try lower: 0/0 [ 478.940988][T17565] Cannot find set identified by id 65534 to match [ 478.973297][T17567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3768'. [ 478.973352][T17567] netlink: 'syz.1.3768': attribute type 30 has an invalid length. [ 479.007151][T17567] vxlan1: entered promiscuous mode [ 479.007780][T17567] vxlan1: entered allmulticast mode [ 479.039564][ T3285] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.039632][ T3285] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.039671][ T3285] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.039709][ T3285] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.197755][ T30] audit: type=1804 audit(1793830060.491:74): pid=17577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3773" name="/newroot/571/cgroup.controllers" dev="tmpfs" ino=2948 res=1 errno=0 [ 479.197818][ T30] audit: type=1800 audit(1793830060.491:75): pid=17577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3773" name="cgroup.controllers" dev="tmpfs" ino=2948 res=0 errno=-22 [ 479.255452][T17577] netlink: 'syz.5.3773': attribute type 10 has an invalid length. [ 479.256128][T17577] netlink: 'syz.5.3773': attribute type 10 has an invalid length. [ 480.101412][T17593] xt_connbytes: Forcing CT accounting to be enabled [ 480.353020][T17609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3785'. [ 480.471652][T17617] ebt_limit: overflow, try lower: 0/0 [ 480.555940][T17622] Cannot find del_set index 1024 as target [ 480.592531][T17620] net_ratelimit: 25 callbacks suppressed [ 480.592554][T17620] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 480.857350][T17638] Cannot find set identified by id 65534 to match [ 480.908465][T17637] 8021q: adding VLAN 0 to HW filter on device bond7 [ 480.945287][T17637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3797'. [ 480.945313][T17637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3797'. [ 480.977450][T17641] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3799'. [ 480.977480][T17637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.001417][T17637] bond7: (slave bond0): making interface the new active one [ 481.017004][T17637] bond7: (slave bond0): Enslaving as an active interface with an up link [ 481.055614][T17646] syzkaller0: entered promiscuous mode [ 481.055640][T17646] syzkaller0: entered allmulticast mode [ 481.179217][T17655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3803'. [ 481.282283][T17657] ebt_limit: overflow, try lower: 0/0 [ 481.598583][T17668] Cannot find set identified by id 65534 to match [ 481.779299][T17674] Bluetooth: hci0: load_link_keys: too big key_count value 62464 [ 482.016132][T17691] xt_CT: You must specify a L4 protocol and not use inversions on it [ 482.027554][T17690] 8021q: adding VLAN 0 to HW filter on device bond7 [ 482.047024][T17690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.060283][T17690] bond7: (slave bond0): Enslaving as an active interface with a down link [ 482.354618][T17709] netlink: 'syz.5.3826': attribute type 30 has an invalid length. [ 482.359332][T17710] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 482.395840][T17710] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 482.501031][T17709] vxlan3: entered promiscuous mode [ 482.501100][T17709] vxlan3: entered allmulticast mode [ 482.721059][T17727] __nla_validate_parse: 7 callbacks suppressed [ 482.721081][T17727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3830'. [ 482.833673][T17737] netlink: 'syz.3.3833': attribute type 9 has an invalid length. [ 482.870834][T17735] xt_nat: multiple ranges no longer supported [ 482.944794][T17744] Cannot find del_set index 1024 as target [ 483.117623][T17753] ip_tables: iptables: counters copy to user failed while replacing table [ 483.162807][T17756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3839'. [ 483.279218][T17760] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3842'. [ 483.610356][T17773] x_tables: unsorted underflow at hook 3 [ 483.851354][ T30] audit: type=1804 audit(1793830065.151:76): pid=17782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3850" name="/newroot/589/cgroup.controllers" dev="tmpfs" ino=3041 res=1 errno=0 [ 483.852856][ T30] audit: type=1800 audit(1793830065.151:77): pid=17782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3850" name="cgroup.controllers" dev="tmpfs" ino=3041 res=0 errno=-22 [ 483.882952][T17782] netlink: 'syz.5.3850': attribute type 10 has an invalid length. [ 483.883922][T17782] netlink: 'syz.5.3850': attribute type 10 has an invalid length. [ 484.070915][T17792] FAULT_INJECTION: forcing a failure. [ 484.070915][T17792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.070949][T17792] CPU: 1 UID: 0 PID: 17792 Comm: syz.1.3853 Not tainted syzkaller #0 PREEMPT(full) [ 484.070975][T17792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 484.070989][T17792] Call Trace: [ 484.070998][T17792] [ 484.071009][T17792] dump_stack_lvl+0xe8/0x150 [ 484.071061][T17792] should_fail_ex+0x3eb/0x540 [ 484.071095][T17792] _copy_from_user+0x2d/0xb0 [ 484.071126][T17792] bpf_test_init+0xd8/0x150 [ 484.071163][T17792] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 484.071215][T17792] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 484.071261][T17792] ? __fget_files+0x2a/0x420 [ 484.071297][T17792] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 484.071332][T17792] bpf_prog_test_run+0x2c5/0x340 [ 484.071361][T17792] __sys_bpf+0xb1e/0xe00 [ 484.071393][T17792] ? __pfx___sys_bpf+0x10/0x10 [ 484.071429][T17792] ? __fget_files+0x2a/0x420 [ 484.071477][T17792] ? ksys_write+0x242/0x270 [ 484.071509][T17792] ? __pfx_ksys_write+0x10/0x10 [ 484.071545][T17792] __x64_sys_bpf+0xba/0xd0 [ 484.071582][T17792] do_syscall_64+0x166/0x520 [ 484.071609][T17792] ? trace_irq_disable+0x3b/0x140 [ 484.071640][T17792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.071663][T17792] ? clear_bhb_loop+0x70/0xc0 [ 484.071692][T17792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.071715][T17792] RIP: 0033:0x7f548a59fb19 [ 484.071736][T17792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.071756][T17792] RSP: 002b:00007f548b4f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 484.071781][T17792] RAX: ffffffffffffffda RBX: 00007f548a825fa0 RCX: 00007f548a59fb19 [ 484.071798][T17792] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 484.071813][T17792] RBP: 00007f548b4f9090 R08: 0000000000000000 R09: 0000000000000000 [ 484.071828][T17792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.071853][T17792] R13: 00007f548a826038 R14: 00007f548a825fa0 R15: 00007fffeb65e8b8 [ 484.071890][T17792] [ 484.288847][T17796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3855'. [ 484.363658][T17800] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3858'. [ 484.452008][T17806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3860'. [ 484.549530][T17802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3858'. [ 484.781201][T17821] ebt_limit: overflow, try lower: 0/0 [ 485.096724][T17833] tipc: Enabling of bearer rejected, already enabled [ 485.226941][T17843] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3874'. [ 485.344858][T17839] ip_tables: iptables: counters copy to user failed while replacing table [ 485.398962][T17851] ip6t_rt: unknown flags 1F [ 485.595285][T17857] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3880'. [ 485.642144][T17861] netlink: 'syz.3.3882': attribute type 15 has an invalid length. [ 486.592158][T17891] ip_tables: iptables: counters copy to user failed while replacing table [ 486.610544][T17891] ip_tables: iptables: counters copy to user failed while replacing table [ 486.611024][T17891] ip_tables: iptables: counters copy to user failed while replacing table [ 486.611402][T17891] ip_tables: iptables: counters copy to user failed while replacing table [ 486.611801][T17891] ip_tables: iptables: counters copy to user failed while replacing table [ 486.614507][T17891] ip_tables: iptables: counters copy to user failed while replacing table [ 486.614909][T17891] ip_tables: iptables: counters copy to user failed while replacing table [ 486.674839][T17891] ip_tables: iptables: counters copy to user failed while replacing table [ 486.675287][T17891] ip_tables: iptables: counters copy to user failed while replacing table [ 486.675662][T17891] ip_tables: iptables: counters copy to user failed while replacing table [ 486.819921][T17898] Cannot find set identified by id 65534 to match [ 486.917304][T17901] tipc: Enabled bearer , priority 0 [ 486.949517][T17899] tipc: Disabling bearer [ 487.022911][T17906] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3898'. [ 487.039406][T17906] netlink: 'syz.3.3898': attribute type 10 has an invalid length. [ 487.062638][T17906] bond7: (slave bond0): Releasing active interface [ 487.087138][T17906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.097793][T17906] bond0: entered promiscuous mode [ 487.114347][T17906] bond_slave_0: entered promiscuous mode [ 487.114655][T17906] bond_slave_1: entered promiscuous mode [ 487.115011][T17906] bond0: entered allmulticast mode [ 487.115039][T17906] bond_slave_0: entered allmulticast mode [ 487.115056][T17906] bond_slave_1: entered allmulticast mode [ 487.145327][T17906] team0: Port device bond0 added [ 487.679950][T17932] netlink: 'syz.5.3905': attribute type 8 has an invalid length. [ 487.845885][T17939] Cannot find del_set index 1024 as target [ 488.048927][T17946] netlink: 'syz.1.3912': attribute type 13 has an invalid length. [ 488.052215][T17946] __nla_validate_parse: 3 callbacks suppressed [ 488.052233][T17946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3912'. [ 488.145389][T17952] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3914'. [ 488.365837][T17965] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3920'. [ 488.519947][T17972] Cannot find del_set index 1024 as target [ 488.827471][T17990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.903408][T17990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.993404][T17997] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3933'. [ 489.061307][T17998] tipc: Enabling of bearer rejected, already enabled [ 489.092927][T18001] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3935'. [ 489.251094][T18007] Cannot find del_set index 1024 as target [ 489.714498][T18026] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3946'. [ 489.802981][T18031] xt_CT: You must specify a L4 protocol and not use inversions on it [ 489.983005][T18042] x_tables: unsorted underflow at hook 3 [ 490.539273][T18054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3956'. [ 490.677609][T18060] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3958'. [ 490.699917][T18057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3957'. [ 492.850283][T18033] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 493.057221][T18078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3965'. [ 493.058466][T18078] xt_hl: Unknown Hop Limit match mode: 4 [ 493.086483][T18082] FAULT_INJECTION: forcing a failure. [ 493.086483][T18082] name failslab, interval 1, probability 0, space 0, times 0 [ 493.086611][T18082] CPU: 0 UID: 0 PID: 18082 Comm: syz.4.3966 Not tainted syzkaller #0 PREEMPT(full) [ 493.086653][T18082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 493.086678][T18082] Call Trace: [ 493.086694][T18082] [ 493.086711][T18082] dump_stack_lvl+0xe8/0x150 [ 493.086756][T18082] should_fail_ex+0x3eb/0x540 [ 493.086788][T18082] ? __alloc_skb+0x1db/0x7a0 [ 493.086822][T18082] should_failslab+0xa8/0x100 [ 493.086858][T18082] ? __alloc_skb+0x1db/0x7a0 [ 493.086891][T18082] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 493.086918][T18082] ? __alloc_skb+0x18d/0x7a0 [ 493.086953][T18082] ? __alloc_skb+0x1db/0x7a0 [ 493.087005][T18082] __alloc_skb+0x1db/0x7a0 [ 493.087046][T18082] netlink_sendmsg+0x5cd/0xb20 [ 493.087089][T18082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.087127][T18082] ? aa_sock_msg_perm+0x144/0x210 [ 493.087157][T18082] ? apparmor_socket_sendmsg+0x98/0x360 [ 493.087193][T18082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.087226][T18082] sock_sendmsg_nosec+0x14e/0x190 [ 493.087262][T18082] ____sys_sendmsg+0x54e/0x850 [ 493.087295][T18082] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.087331][T18082] ? import_iovec+0x73/0xa0 [ 493.087365][T18082] ___sys_sendmsg+0x2a5/0x360 [ 493.087400][T18082] ? __lock_acquire+0x747/0x2de0 [ 493.087435][T18082] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.087501][T18082] ? __fget_files+0x3a2/0x420 [ 493.087527][T18082] ? __fget_files+0x2a/0x420 [ 493.087566][T18082] __x64_sys_sendmsg+0x1b1/0x290 [ 493.087595][T18082] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 493.087645][T18082] do_syscall_64+0x166/0x520 [ 493.087671][T18082] ? trace_irq_disable+0x3b/0x140 [ 493.087702][T18082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.087725][T18082] ? clear_bhb_loop+0x70/0xc0 [ 493.087754][T18082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.087776][T18082] RIP: 0033:0x7f75fc99fb19 [ 493.087796][T18082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.087816][T18082] RSP: 002b:00007f75fd7c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.087842][T18082] RAX: ffffffffffffffda RBX: 00007f75fcc25fa0 RCX: 00007f75fc99fb19 [ 493.087858][T18082] RDX: 000000000000c804 RSI: 0000200000000940 RDI: 0000000000000009 [ 493.087872][T18082] RBP: 00007f75fd7c9090 R08: 0000000000000000 R09: 0000000000000000 [ 493.087886][T18082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.087898][T18082] R13: 00007f75fcc26038 R14: 00007f75fcc25fa0 R15: 00007fff9077c768 [ 493.087934][T18082] [ 493.483735][T18092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3970'. [ 493.519612][T18091] netlink: 'syz.1.3974': attribute type 4 has an invalid length. [ 493.548922][T18095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3972'. [ 493.548949][T18095] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3972'. [ 493.683086][T18098] syzkaller0: left promiscuous mode [ 493.683149][T18098] syzkaller0: left allmulticast mode [ 493.718870][T18098] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3975'. [ 493.771584][T18102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3977'. [ 493.847142][T18091] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3974'. [ 493.847191][T18091] netlink: 'syz.1.3974': attribute type 8 has an invalid length. [ 493.885111][T18091] bridge23: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 493.885359][T18091] bridge23: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 494.060549][T18113] xt_CT: You must specify a L4 protocol and not use inversions on it [ 494.157375][T18123] FAULT_INJECTION: forcing a failure. [ 494.157375][T18123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.157409][T18123] CPU: 1 UID: 0 PID: 18123 Comm: syz.5.3983 Not tainted syzkaller #0 PREEMPT(full) [ 494.157445][T18123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 494.157459][T18123] Call Trace: [ 494.157469][T18123] [ 494.157479][T18123] dump_stack_lvl+0xe8/0x150 [ 494.157523][T18123] should_fail_ex+0x3eb/0x540 [ 494.157558][T18123] _copy_from_user+0x2d/0xb0 [ 494.157593][T18123] ___sys_sendmsg+0x1c6/0x360 [ 494.157617][T18123] ? __lock_acquire+0x747/0x2de0 [ 494.157663][T18123] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.157729][T18123] ? __fget_files+0x3a2/0x420 [ 494.157756][T18123] ? __fget_files+0x2a/0x420 [ 494.157811][T18123] __x64_sys_sendmsg+0x1b1/0x290 [ 494.157841][T18123] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 494.157889][T18123] do_syscall_64+0x166/0x520 [ 494.157917][T18123] ? trace_irq_disable+0x3b/0x140 [ 494.157948][T18123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.157973][T18123] ? clear_bhb_loop+0x70/0xc0 [ 494.158002][T18123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.158025][T18123] RIP: 0033:0x7f518659fb19 [ 494.158046][T18123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.158067][T18123] RSP: 002b:00007f5187475028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.158091][T18123] RAX: ffffffffffffffda RBX: 00007f5186825fa0 RCX: 00007f518659fb19 [ 494.158109][T18123] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 494.158123][T18123] RBP: 00007f5187475090 R08: 0000000000000000 R09: 0000000000000000 [ 494.158139][T18123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.158152][T18123] R13: 00007f5186826038 R14: 00007f5186825fa0 R15: 00007ffd09e03fa8 [ 494.158205][T18123] [ 494.672247][T18138] net_ratelimit: 58 callbacks suppressed [ 494.672271][T18138] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 494.714312][T18141] FAULT_INJECTION: forcing a failure. [ 494.714312][T18141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.714343][T18141] CPU: 1 UID: 0 PID: 18141 Comm: syz.1.3991 Not tainted syzkaller #0 PREEMPT(full) [ 494.714368][T18141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 494.714383][T18141] Call Trace: [ 494.714391][T18141] [ 494.714401][T18141] dump_stack_lvl+0xe8/0x150 [ 494.714442][T18141] should_fail_ex+0x3eb/0x540 [ 494.714490][T18141] _copy_from_user+0x2d/0xb0 [ 494.714520][T18141] ___sys_sendmsg+0x1c6/0x360 [ 494.714562][T18141] ? __lock_acquire+0x747/0x2de0 [ 494.714601][T18141] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.714668][T18141] ? __fget_files+0x3a2/0x420 [ 494.714695][T18141] ? __fget_files+0x2a/0x420 [ 494.714735][T18141] __x64_sys_sendmsg+0x1b1/0x290 [ 494.714763][T18141] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 494.714815][T18141] do_syscall_64+0x166/0x520 [ 494.714842][T18141] ? trace_irq_disable+0x3b/0x140 [ 494.714874][T18141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.714898][T18141] ? clear_bhb_loop+0x70/0xc0 [ 494.714928][T18141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.714951][T18141] RIP: 0033:0x7f548a59fb19 [ 494.714973][T18141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.714993][T18141] RSP: 002b:00007f548b4f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.715017][T18141] RAX: ffffffffffffffda RBX: 00007f548a825fa0 RCX: 00007f548a59fb19 [ 494.715035][T18141] RDX: 0000000000004050 RSI: 0000200000000140 RDI: 0000000000000003 [ 494.715050][T18141] RBP: 00007f548b4f9090 R08: 0000000000000000 R09: 0000000000000000 [ 494.715065][T18141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.715079][T18141] R13: 00007f548a826038 R14: 00007f548a825fa0 R15: 00007fffeb65e8b8 [ 494.715118][T18141] [ 494.938978][T18144] tipc: Enabling of bearer rejected, already enabled [ 495.144329][T18152] ip_tables: iptables: counters copy to user failed while replacing table [ 495.252854][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3997'. [ 495.252971][T18157] netlink: 'syz.1.3997': attribute type 30 has an invalid length. [ 495.289077][T18157] vxlan2: entered promiscuous mode [ 495.289103][T18157] vxlan2: entered allmulticast mode [ 495.441971][T18163] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4000'. [ 495.712506][T18171] IPVS: persistence engine module ip_vs_pe_À not found [ 495.787721][T18180] ip_tables: iptables: counters copy to user failed while replacing table [ 495.802545][T18178] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4005'. [ 495.802591][T18178] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4005'. [ 495.875682][T18184] xt_l2tp: missing protocol rule (udp|l2tpip) [ 495.907033][T18184] gtp3: entered promiscuous mode [ 495.909223][T18184] gtp3: entered allmulticast mode [ 495.930789][T18184] netlink: 'syz.1.4009': attribute type 11 has an invalid length. [ 495.978228][T18186] ip_tables: iptables: counters copy to user failed while replacing table [ 496.236737][T18199] IPVS: length: 77 != 24 [ 496.735477][T18228] IPVS: persistence engine module ip_vs_pe_À not found [ 496.880252][T18237] ip_tables: iptables: counters copy to user failed while replacing table [ 497.087269][T18250] netlink: 'syz.5.4030': attribute type 1 has an invalid length. [ 497.152753][T18250] 8021q: adding VLAN 0 to HW filter on device bond6 [ 497.169823][T18250] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 497.500425][T18277] ip_tables: iptables: counters copy to user failed while replacing table [ 497.601998][T18274] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.650168][T18278] IPVS: persistence engine module ip_vs_pe_À not found [ 498.056625][T18299] ip_tables: iptables: counters copy to user failed while replacing table [ 498.136924][T18307] ip_tables: iptables: counters copy to user failed while replacing table [ 498.475689][T18320] FAULT_INJECTION: forcing a failure. [ 498.475689][T18320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.475722][T18320] CPU: 0 UID: 0 PID: 18320 Comm: syz.1.4053 Not tainted syzkaller #0 PREEMPT(full) [ 498.475749][T18320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 498.475763][T18320] Call Trace: [ 498.475772][T18320] [ 498.475783][T18320] dump_stack_lvl+0xe8/0x150 [ 498.475835][T18320] should_fail_ex+0x3eb/0x540 [ 498.475871][T18320] _copy_to_user+0x31/0xb0 [ 498.475903][T18320] simple_read_from_buffer+0xe1/0x170 [ 498.475938][T18320] proc_fail_nth_read+0x1bb/0x230 [ 498.475979][T18320] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 498.476020][T18320] ? rw_verify_area+0x24a/0x4c0 [ 498.476065][T18320] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 498.476101][T18320] vfs_read+0x213/0xa80 [ 498.476137][T18320] ? __pfx___mutex_lock+0x10/0x10 [ 498.476167][T18320] ? __pfx_vfs_read+0x10/0x10 [ 498.476198][T18320] ? __fget_files+0x2a/0x420 [ 498.476225][T18320] ? __fget_files+0x3a2/0x420 [ 498.476252][T18320] ? __fget_files+0x2a/0x420 [ 498.476284][T18320] ? fdget+0x1ac/0x250 [ 498.476319][T18320] ksys_read+0x150/0x270 [ 498.476352][T18320] ? __pfx_ksys_read+0x10/0x10 [ 498.476397][T18320] do_syscall_64+0x166/0x520 [ 498.476424][T18320] ? trace_irq_disable+0x3b/0x140 [ 498.476456][T18320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.476481][T18320] ? clear_bhb_loop+0x70/0xc0 [ 498.476511][T18320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.476535][T18320] RIP: 0033:0x7f548a56034e [ 498.476557][T18320] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 498.476577][T18320] RSP: 002b:00007f548b4f8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 498.476601][T18320] RAX: ffffffffffffffda RBX: 00007f548b4f96c0 RCX: 00007f548a56034e [ 498.476626][T18320] RDX: 000000000000000f RSI: 00007f548b4f90a0 RDI: 0000000000000004 [ 498.476641][T18320] RBP: 00007f548b4f9090 R08: 0000000000000000 R09: 0000000000000000 [ 498.476656][T18320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.476670][T18320] R13: 00007f548a826038 R14: 00007f548a825fa0 R15: 00007fffeb65e8b8 [ 498.476710][T18320] [ 498.873861][T18324] netlink: 'syz.1.4055': attribute type 8 has an invalid length. [ 498.886674][T18326] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 499.011991][T18326] netlink: 'syz.0.4056': attribute type 1 has an invalid length. [ 499.105359][T18334] ebt_limit: overflow, try lower: 0/0 [ 499.141308][T18336] ip_tables: iptables: counters copy to user failed while replacing table [ 499.224717][T18340] __nla_validate_parse: 9 callbacks suppressed [ 499.224738][T18340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4063'. [ 499.224767][T18340] netlink: 'syz.0.4063': attribute type 30 has an invalid length. [ 499.257662][T18340] vxlan2: entered promiscuous mode [ 499.257688][T18340] vxlan2: entered allmulticast mode [ 499.352168][T18342] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4062'. [ 499.767566][T18363] netlink: 'syz.1.4071': attribute type 8 has an invalid length. [ 499.851015][T18367] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4073'. [ 499.851053][T18367] netlink: 'syz.4.4073': attribute type 8 has an invalid length. [ 499.885860][T18367] bridge20: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 499.885886][T18367] bridge20: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 500.043245][T18374] net_ratelimit: 1 callbacks suppressed [ 500.043268][T18374] ip_tables: iptables: counters copy to user failed while replacing table [ 500.101040][T18378] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4077'. [ 500.229440][T18386] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4079'. [ 500.292424][T18384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4077'. [ 500.544852][T18396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4083'. [ 500.863928][T18408] ip_tables: iptables: counters copy to user failed while replacing table [ 501.082389][T18416] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4091'. [ 501.138866][T18419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4092'. [ 501.337780][T18423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4092'. [ 501.697762][T18446] ip_tables: iptables: counters copy to user failed while replacing table [ 503.529055][T18464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.620441][T18469] Cannot find set identified by id 65534 to match [ 503.830351][T18478] ip_tables: iptables: counters copy to user failed while replacing table [ 504.006045][T18490] IPv6: Can't replace route, no match found [ 504.113267][T18493] tipc: Enabling of bearer rejected, already enabled [ 504.151145][T18497] ip_tables: iptables: counters copy to user failed while replacing table [ 504.191048][ C1] bridge0: port 4(team0) entered learning state [ 504.191758][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 504.191909][ C1] bridge0: port 5(syz_tun) entered learning state [ 504.192069][ C0] bridge0: port 3(veth0) entered learning state [ 504.395691][T18505] xt_hashlimit: size too large, truncated to 1048576 [ 504.525341][T18515] __nla_validate_parse: 8 callbacks suppressed [ 504.525364][T18515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4129'. [ 504.547581][T18512] bridge_slave_0 (unregistering): left allmulticast mode [ 504.551347][T18512] bridge_slave_0 (unregistering): left promiscuous mode [ 504.551693][T18512] bridge0: port 3(bridge_slave_0) entered disabled state [ 504.576522][T18517] FAULT_INJECTION: forcing a failure. [ 504.576522][T18517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.576553][T18517] CPU: 1 UID: 0 PID: 18517 Comm: syz.0.4128 Not tainted syzkaller #0 PREEMPT(full) [ 504.576580][T18517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 504.576593][T18517] Call Trace: [ 504.576602][T18517] [ 504.576613][T18517] dump_stack_lvl+0xe8/0x150 [ 504.576660][T18517] should_fail_ex+0x3eb/0x540 [ 504.576694][T18517] _copy_from_user+0x2d/0xb0 [ 504.576722][T18517] ___sys_sendmsg+0x1c6/0x360 [ 504.576746][T18517] ? __lock_acquire+0x747/0x2de0 [ 504.576782][T18517] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.576850][T18517] ? __fget_files+0x3a2/0x420 [ 504.576877][T18517] ? __fget_files+0x2a/0x420 [ 504.576917][T18517] __x64_sys_sendmsg+0x1b1/0x290 [ 504.576945][T18517] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 504.576996][T18517] do_syscall_64+0x166/0x520 [ 504.577022][T18517] ? trace_irq_disable+0x3b/0x140 [ 504.577054][T18517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.577078][T18517] ? clear_bhb_loop+0x70/0xc0 [ 504.577107][T18517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.577131][T18517] RIP: 0033:0x7f535739fb19 [ 504.577153][T18517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.577173][T18517] RSP: 002b:00007f53581ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.577205][T18517] RAX: ffffffffffffffda RBX: 00007f5357625fa0 RCX: 00007f535739fb19 [ 504.577233][T18517] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 504.577247][T18517] RBP: 00007f53581ae090 R08: 0000000000000000 R09: 0000000000000000 [ 504.577262][T18517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.577275][T18517] R13: 00007f5357626038 R14: 00007f5357625fa0 R15: 00007ffceab17f98 [ 504.577311][T18517] [ 504.827592][T18522] syzkaller0: entered promiscuous mode [ 504.827637][T18522] syzkaller0: entered allmulticast mode [ 505.550810][T18552] ip_tables: iptables: counters copy to user failed while replacing table [ 505.621915][T18556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4142'. [ 506.143601][T18579] bond8: option xmit_hash_policy: invalid value (10) [ 506.145661][T18579] bond8 (unregistering): Released all slaves [ 506.325468][T18588] tipc: Enabling of bearer rejected, already enabled [ 506.355051][T18590] tipc: Enabling of bearer rejected, already enabled [ 506.358086][T18590] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 506.485639][T18597] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4159'. [ 506.485685][T18597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4159'. [ 506.486448][T18597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4159'. [ 506.506363][T18599] xt_TCPMSS: Only works on TCP SYN packets [ 506.598758][T18604] ip_tables: iptables: counters copy to user failed while replacing table [ 506.718500][T18609] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4164'. [ 506.785155][T18611] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4166'. [ 506.805251][T18611] ip6tnl2: entered allmulticast mode [ 507.335483][T18638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4171'. [ 507.335522][T18638] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4171'. [ 507.429125][T15024] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 507.429406][T15024] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 507.459346][ T6980] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 507.563949][T18641] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.853256][T18659] tipc: Enabled bearer , priority 0 [ 507.895737][T18657] tipc: Disabling bearer [ 507.920432][T18665] ip6t_rt: unknown flags 1F [ 507.983386][T18675] Cannot find set identified by id 65534 to match [ 508.192230][ T6980] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 508.305501][T18701] xt_CT: You must specify a L4 protocol and not use inversions on it [ 508.350490][ T6980] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 508.379343][T18706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4192'. [ 509.787721][T18754] __nla_validate_parse: 6 callbacks suppressed [ 509.787741][T18754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4209'. [ 509.787793][T18754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4209'. [ 510.227690][T18773] tipc: Enabling of bearer rejected, already enabled [ 510.304742][T18782] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4221'. [ 510.402414][T18780] IPVS: persistence engine module ip_vs_pe_À not found [ 510.484077][T18788] xt_CT: You must specify a L4 protocol and not use inversions on it [ 510.735430][T18803] netlink: 'syz.3.4230': attribute type 5 has an invalid length. [ 510.840572][T18808] FAULT_INJECTION: forcing a failure. [ 510.840572][T18808] name failslab, interval 1, probability 0, space 0, times 0 [ 510.840603][T18808] CPU: 0 UID: 0 PID: 18808 Comm: syz.1.4232 Not tainted syzkaller #0 PREEMPT(full) [ 510.840626][T18808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 510.840639][T18808] Call Trace: [ 510.840647][T18808] [ 510.840657][T18808] dump_stack_lvl+0xe8/0x150 [ 510.840696][T18808] should_fail_ex+0x3eb/0x540 [ 510.840725][T18808] ? __alloc_skb+0x1db/0x7a0 [ 510.840766][T18808] should_failslab+0xa8/0x100 [ 510.840799][T18808] ? __alloc_skb+0x1db/0x7a0 [ 510.840847][T18808] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 510.840874][T18808] ? __alloc_skb+0x18d/0x7a0 [ 510.840912][T18808] ? __alloc_skb+0x1db/0x7a0 [ 510.840954][T18808] __alloc_skb+0x1db/0x7a0 [ 510.840994][T18808] netlink_ack+0x136/0xb30 [ 510.841022][T18808] ? __pfx_genl_rcv_msg+0x10/0x10 [ 510.841067][T18808] netlink_rcv_skb+0x2a4/0x4a0 [ 510.841115][T18808] ? __pfx_genl_rcv_msg+0x10/0x10 [ 510.841143][T18808] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 510.841202][T18808] ? down_read+0x2b9/0x320 [ 510.841235][T18808] genl_rcv+0x28/0x40 [ 510.841274][T18808] netlink_unicast+0x8ef/0xa80 [ 510.841324][T18808] netlink_sendmsg+0x7f0/0xb20 [ 510.841364][T18808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.841400][T18808] ? aa_sock_msg_perm+0x144/0x210 [ 510.841430][T18808] ? apparmor_socket_sendmsg+0x98/0x360 [ 510.841475][T18808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.841523][T18808] sock_sendmsg_nosec+0x14e/0x190 [ 510.841555][T18808] ____sys_sendmsg+0x54e/0x850 [ 510.841595][T18808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.841630][T18808] ? import_iovec+0x73/0xa0 [ 510.841663][T18808] ___sys_sendmsg+0x2a5/0x360 [ 510.841686][T18808] ? __lock_acquire+0x747/0x2de0 [ 510.841719][T18808] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.841793][T18808] ? __fget_files+0x3a2/0x420 [ 510.841821][T18808] ? __fget_files+0x2a/0x420 [ 510.841857][T18808] __x64_sys_sendmsg+0x1b1/0x290 [ 510.841886][T18808] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.841936][T18808] do_syscall_64+0x166/0x520 [ 510.841961][T18808] ? trace_irq_disable+0x3b/0x140 [ 510.841993][T18808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.842017][T18808] ? clear_bhb_loop+0x70/0xc0 [ 510.842045][T18808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.842069][T18808] RIP: 0033:0x7f548a59fb19 [ 510.842090][T18808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.842109][T18808] RSP: 002b:00007f548b4f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.842133][T18808] RAX: ffffffffffffffda RBX: 00007f548a825fa0 RCX: 00007f548a59fb19 [ 510.842150][T18808] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 510.842164][T18808] RBP: 00007f548b4f9090 R08: 0000000000000000 R09: 0000000000000000 [ 510.842178][T18808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.842190][T18808] R13: 00007f548a826038 R14: 00007f548a825fa0 R15: 00007fffeb65e8b8 [ 510.842227][T18808] [ 510.947424][T18810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4231'. [ 511.225244][T18810] syzkaller0: left promiscuous mode [ 511.225266][T18810] syzkaller0: left allmulticast mode [ 511.500297][T18823] ipvlan1: mtu less than device minimum [ 511.640201][T18834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4242'. [ 511.788147][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 511.997650][T18843] ebt_limit: overflow, try lower: 0/0 [ 512.160602][T18852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4250'. [ 512.213041][T18853] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4251'. [ 513.019293][T18863] FAULT_INJECTION: forcing a failure. [ 513.019293][T18863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.019327][T18863] CPU: 0 UID: 0 PID: 18863 Comm: syz.4.4255 Not tainted syzkaller #0 PREEMPT(full) [ 513.019351][T18863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 513.019363][T18863] Call Trace: [ 513.019373][T18863] [ 513.019383][T18863] dump_stack_lvl+0xe8/0x150 [ 513.019423][T18863] should_fail_ex+0x3eb/0x540 [ 513.019455][T18863] _copy_from_user+0x2d/0xb0 [ 513.019483][T18863] kstrtouint_from_user+0xd6/0x180 [ 513.019509][T18863] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 513.019549][T18863] ? lock_acquire+0x115/0x350 [ 513.019582][T18863] proc_fail_nth_write+0x8e/0x210 [ 513.019616][T18863] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 513.019658][T18863] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 513.019693][T18863] vfs_write+0x296/0xba0 [ 513.019733][T18863] ? __pfx_vfs_write+0x10/0x10 [ 513.019763][T18863] ? __fget_files+0x2a/0x420 [ 513.019788][T18863] ? __fget_files+0x3a2/0x420 [ 513.019812][T18863] ? __fget_files+0x2a/0x420 [ 513.019843][T18863] ? fdget+0x1ac/0x250 [ 513.019878][T18863] ksys_write+0x150/0x270 [ 513.019911][T18863] ? __pfx_ksys_write+0x10/0x10 [ 513.019953][T18863] do_syscall_64+0x166/0x520 [ 513.019978][T18863] ? trace_irq_disable+0x3b/0x140 [ 513.020008][T18863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.020031][T18863] ? clear_bhb_loop+0x70/0xc0 [ 513.020060][T18863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.020082][T18863] RIP: 0033:0x7f75fc96034e [ 513.020104][T18863] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 513.020124][T18863] RSP: 002b:00007f75fd7c8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 513.020148][T18863] RAX: ffffffffffffffda RBX: 00007f75fd7c96c0 RCX: 00007f75fc96034e [ 513.020165][T18863] RDX: 0000000000000001 RSI: 00007f75fd7c90a0 RDI: 0000000000000004 [ 513.020179][T18863] RBP: 00007f75fd7c9090 R08: 0000000000000000 R09: 0000000000000000 [ 513.020193][T18863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.020206][T18863] R13: 00007f75fcc26038 R14: 00007f75fcc25fa0 R15: 00007fff9077c768 [ 513.020245][T18863] [ 513.543010][T18870] ip_tables: iptables: counters copy to user failed while replacing table [ 513.657044][T18884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4261'. [ 513.845011][T18893] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4265'. [ 516.728434][T18886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 516.851567][T18926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4269'. [ 516.954156][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4272'. [ 517.223567][T18945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4277'. [ 517.223593][T18945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4277'. [ 517.223619][T18945] netlink: 'syz.1.4277': attribute type 12 has an invalid length. [ 517.223633][T18945] netlink: 'syz.1.4277': attribute type 14 has an invalid length. [ 517.277138][T18947] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4276'. [ 517.370948][T18945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4277'. [ 517.370970][T18945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4277'. [ 517.370994][T18945] netlink: 'syz.1.4277': attribute type 12 has an invalid length. [ 517.371008][T18945] netlink: 'syz.1.4277': attribute type 14 has an invalid length. [ 517.673206][T18957] IPVS: persistence engine module ip_vs_pe_À not found [ 518.109525][T18982] x_tables: unsorted underflow at hook 3 [ 518.305249][T18990] Cannot find set identified by id 65534 to match [ 518.626389][T19002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4295'. [ 518.626428][T19002] netlink: 'syz.0.4295': attribute type 30 has an invalid length. [ 518.661660][T19002] vxlan2: entered promiscuous mode [ 518.661686][T19002] vxlan2: entered allmulticast mode [ 518.662232][T19004] ip_tables: iptables: counters copy to user failed while replacing table [ 518.714783][T18999] IPVS: persistence engine module ip_vs_pe_À not found [ 518.889314][T19013] xt_CT: You must specify a L4 protocol and not use inversions on it [ 519.061473][T19026] FAULT_INJECTION: forcing a failure. [ 519.061473][T19026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.061503][T19026] CPU: 0 UID: 0 PID: 19026 Comm: syz.5.4305 Not tainted syzkaller #0 PREEMPT(full) [ 519.061526][T19026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 519.061540][T19026] Call Trace: [ 519.061549][T19026] [ 519.061558][T19026] dump_stack_lvl+0xe8/0x150 [ 519.061616][T19026] should_fail_ex+0x3eb/0x540 [ 519.061649][T19026] _copy_from_iter+0x1d3/0x1680 [ 519.061676][T19026] ? __alloc_skb+0x27a/0x7a0 [ 519.061710][T19026] ? __alloc_skb+0x27a/0x7a0 [ 519.061745][T19026] ? __alloc_skb+0x27a/0x7a0 [ 519.061779][T19026] ? __pfx__copy_from_iter+0x10/0x10 [ 519.061801][T19026] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 519.061826][T19026] ? __alloc_skb+0x27a/0x7a0 [ 519.061866][T19026] ? __alloc_skb+0x27a/0x7a0 [ 519.061903][T19026] ? netlink_sendmsg+0x64f/0xb20 [ 519.061932][T19026] ? skb_put+0x112/0x210 [ 519.061956][T19026] netlink_sendmsg+0x6bb/0xb20 [ 519.061992][T19026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.062026][T19026] ? aa_sock_msg_perm+0x144/0x210 [ 519.062053][T19026] ? apparmor_socket_sendmsg+0x98/0x360 [ 519.062085][T19026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.062114][T19026] sock_sendmsg_nosec+0x14e/0x190 [ 519.062163][T19026] ____sys_sendmsg+0x54e/0x850 [ 519.062193][T19026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 519.062227][T19026] ? import_iovec+0x73/0xa0 [ 519.062266][T19026] ___sys_sendmsg+0x2a5/0x360 [ 519.062288][T19026] ? __lock_acquire+0x747/0x2de0 [ 519.062322][T19026] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.062388][T19026] ? __fget_files+0x3a2/0x420 [ 519.062413][T19026] ? __fget_files+0x2a/0x420 [ 519.062451][T19026] __x64_sys_sendmsg+0x1b1/0x290 [ 519.062478][T19026] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 519.062530][T19026] do_syscall_64+0x166/0x520 [ 519.062555][T19026] ? trace_irq_disable+0x3b/0x140 [ 519.062596][T19026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.062617][T19026] ? clear_bhb_loop+0x70/0xc0 [ 519.062643][T19026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.062665][T19026] RIP: 0033:0x7f518659fb19 [ 519.062701][T19026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.062720][T19026] RSP: 002b:00007f5187475028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.062744][T19026] RAX: ffffffffffffffda RBX: 00007f5186825fa0 RCX: 00007f518659fb19 [ 519.062762][T19026] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 519.062776][T19026] RBP: 00007f5187475090 R08: 0000000000000000 R09: 0000000000000000 [ 519.062802][T19026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.062813][T19026] R13: 00007f5186826038 R14: 00007f5186825fa0 R15: 00007ffd09e03fa8 [ 519.062847][T19026] [ 519.533637][T19037] ip_tables: iptables: counters copy to user failed while replacing table [ 519.738979][ T31] IPVS: starting estimator thread 0... [ 519.828238][T19046] IPVS: using max 26 ests per chain, 62400 per kthread [ 520.375288][T19052] ip6gre1: entered promiscuous mode [ 520.375315][T19052] ip6gre1: entered allmulticast mode [ 520.636356][T19068] tipc: Enabled bearer , priority 0 [ 520.750492][T19067] tipc: Disabling bearer [ 521.017729][T19074] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 521.031596][T19074] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 521.032376][T19074] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 521.033601][T19074] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 521.034446][T19074] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 521.120077][T19077] Cannot find del_set index 1024 as target [ 521.468934][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 521.474097][T19096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4328'. [ 521.476857][T19096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4328'. [ 522.010163][T19072] rxe_eth0 speed is unknown, defaulting to 1000 [ 522.275718][T19072] hsr0 speed is unknown, defaulting to 1000 [ 522.276847][T19072] wg0 speed is unknown, defaulting to 1000 [ 522.620004][T19072] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.620081][T19072] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.620174][T19072] bridge_slave_0: entered allmulticast mode [ 522.621409][T19072] bridge_slave_0: entered promiscuous mode [ 522.629223][T19072] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.629382][T19072] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.629532][T19072] bridge_slave_1: entered allmulticast mode [ 522.637061][T19072] bridge_slave_1: entered promiscuous mode [ 522.691738][T19072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.694572][T19072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.732770][T19072] team0: Port device team_slave_0 added [ 522.734951][T19072] team0: Port device team_slave_1 added [ 522.766777][T19072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.766798][T19072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.766834][T19072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.772814][T19072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.772866][T19072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.772941][T19072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.875644][T19072] hsr_slave_0: entered promiscuous mode [ 522.876471][T19072] hsr_slave_1: entered promiscuous mode [ 522.877007][T19072] debugfs: 'hsr0' already exists in 'hsr' [ 522.877029][T19072] Cannot create hsr debugfs directory [ 523.015843][T19072] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.015876][T19072] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.085611][T19072] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.085641][T19072] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.149359][ T4953] Bluetooth: hci3: command tx timeout [ 523.199534][T19072] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.199571][T19072] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.203680][T19124] __nla_validate_parse: 63 callbacks suppressed [ 523.203700][T19124] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4333'. [ 523.206341][T19127] xt_CT: You must specify a L4 protocol and not use inversions on it [ 523.467778][T19072] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.474107][T19072] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.864792][T19072] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 523.878703][T19072] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 523.880297][T19072] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 523.886817][T19072] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 523.897706][T19072] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 523.927001][T19072] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 523.933509][T19072] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 523.949820][T19072] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 524.061769][T19072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.105069][T19072] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.122990][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.123155][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.156880][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.157023][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.751660][T19190] : renamed from bond_slave_0 (while UP) [ 524.774002][T19191] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4351'. [ 524.982775][T19072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.125543][T19204] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4355'. [ 525.146088][T19072] veth0_vlan: entered promiscuous mode [ 525.179617][T19072] veth1_vlan: entered promiscuous mode [ 525.228128][ T4953] Bluetooth: hci3: command tx timeout [ 525.295246][T19072] veth0_macvtap: entered promiscuous mode [ 525.336046][T19072] veth1_macvtap: entered promiscuous mode [ 525.363802][T19072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.390618][T19072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.479108][T19213] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4358'. [ 525.578441][T15032] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.578797][T15032] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.623417][T15024] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.623485][T15024] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.753316][T19224] Cannot find del_set index 1024 as target [ 525.849402][T15032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.849426][T15032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.980681][T15032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.980705][T15032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.100877][T19238] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4367'. [ 526.217021][T19241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4368'. [ 526.288944][T19244] syzkaller0: entered promiscuous mode [ 526.289004][T19244] syzkaller0: entered allmulticast mode [ 526.354399][T19246] syzkaller1: entered promiscuous mode [ 526.354424][T19246] syzkaller1: entered allmulticast mode [ 526.812821][T19074] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 526.818228][T19074] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 526.829460][T19074] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 526.846433][T19074] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 526.847284][T19074] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 527.025376][T19261] IPVS: persistence engine module ip_vs_pe_À not found [ 527.090050][ T9038] syz_tun (unregistering): left allmulticast mode [ 527.090079][ T9038] syz_tun (unregistering): left promiscuous mode [ 527.090255][ T9038] bridge0: port 4(syz_tun) entered disabled state [ 527.320303][ T4953] Bluetooth: hci3: command tx timeout [ 527.462272][T19279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4380'. [ 527.462296][T19279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4380'. [ 527.496071][T19279] bond0: left promiscuous mode [ 527.496095][T19279] : left promiscuous mode [ 527.497537][T19279] bond_slave_1: left promiscuous mode [ 527.519235][T19279] bond0: left allmulticast mode [ 527.519260][T19279] : left allmulticast mode [ 527.519279][T19279] bond_slave_1: left allmulticast mode [ 527.525810][T19279] team0: Port device bond0 removed [ 527.555475][T19279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.569283][T19279] bond7: (slave bond0): making interface the new active one [ 527.570598][T19279] bond7: (slave bond0): Enslaving as an active interface with an up link [ 527.814119][T19258] rxe_eth0 speed is unknown, defaulting to 1000 [ 528.132395][T19303] ip6erspan0: entered allmulticast mode [ 528.145872][T19311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4388'. [ 528.161913][T19303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4388'. [ 528.281822][T19258] hsr0 speed is unknown, defaulting to 1000 [ 528.283598][T19258] wg0 speed is unknown, defaulting to 1000 [ 528.728232][T19334] Cannot find del_set index 1024 as target [ 528.749856][T19336] Bluetooth: MGMT ver 1.23 [ 528.749889][T19336] Bluetooth: hci0: unsupported parameter 5135 [ 528.749921][T19336] Bluetooth: hci0: unsupported parameter 8192 [ 528.749934][T19336] Bluetooth: hci0: unsupported parameter 5135 [ 528.749947][T19336] Bluetooth: hci0: unsupported parameter 8192 [ 528.814829][T19336] bridge24: entered allmulticast mode [ 528.908760][ T4953] Bluetooth: hci0: command tx timeout [ 528.954810][T19330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4394'. [ 529.081019][T19348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4400'. [ 529.081055][T19348] netlink: 'syz.0.4400': attribute type 30 has an invalid length. [ 529.120476][T19345] netlink: 'syz.3.4399': attribute type 142 has an invalid length. [ 529.122459][T19345] sctp: [Deprecated]: syz.3.4399 (pid 19345) Use of int in maxseg socket option. [ 529.122459][T19345] Use struct sctp_assoc_value instead [ 529.126571][T19348] vxlan0: entered promiscuous mode [ 529.126594][T19348] vxlan0: entered allmulticast mode [ 529.238286][T15024] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.238337][T15024] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.238374][T15024] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.238425][T15024] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.388045][ T4953] Bluetooth: hci3: command tx timeout [ 529.485757][T19360] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4404'. [ 529.612648][T19374] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4408'. [ 529.612671][T19374] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4408'. [ 529.612721][T19374] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4408'. [ 529.677725][T19258] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.681056][T19258] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.681213][T19258] bridge_slave_0: entered allmulticast mode [ 529.686984][T19258] bridge_slave_0: entered promiscuous mode [ 529.722163][T19258] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.724464][T19258] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.724626][T19258] bridge_slave_1: entered allmulticast mode [ 529.735627][T19258] bridge_slave_1: entered promiscuous mode [ 529.810272][T19258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.832030][T19258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.896920][T19258] team0: Port device team_slave_0 added [ 529.906215][T19258] team0: Port device team_slave_1 added [ 529.944412][T19258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.944431][T19258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.944460][T19258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.993861][T19258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.993880][T19258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.993910][T19258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.090449][T19258] hsr_slave_0: entered promiscuous mode [ 530.091534][T19258] hsr_slave_1: entered promiscuous mode [ 530.092518][T19258] debugfs: 'hsr0' already exists in 'hsr' [ 530.092537][T19258] Cannot create hsr debugfs directory [ 530.330426][T19258] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.439362][T19258] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.547441][T19258] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.627374][T19258] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.794983][T19400] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4417'. [ 530.964063][T19258] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 530.981003][T19258] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 530.984856][T19258] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 530.990557][ T4953] Bluetooth: hci0: command tx timeout [ 531.010076][T19258] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 531.011434][T19258] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 531.016811][T19258] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 531.057131][T19258] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 531.076109][T19258] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 531.139931][T19419] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4421'. [ 531.187107][T19423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 531.251276][T19419] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4421'. [ 531.306655][T19258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.360119][T19258] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.385647][T15031] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.385768][T15031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.415674][T15032] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.415792][T15032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.572592][T19437] ip_tables: iptables: counters copy to user failed while replacing table [ 531.800941][T19445] syzkaller0: entered promiscuous mode [ 531.800968][T19445] syzkaller0: entered allmulticast mode [ 532.035922][T19456] IPVS: persistence engine module ip_vs_pe_À not found [ 532.102462][T19450] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.156918][T19460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4433'. [ 532.331515][T19450] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.414531][T19470] ip_tables: iptables: counters copy to user failed while replacing table [ 532.513983][T19450] team0: Port device netdevsim1 removed [ 532.514824][T19450] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.575863][T19258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.730424][T19450] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.030718][T19492] tap0: tun_chr_ioctl cmd 2152240185 [ 533.031007][T19492] tap0: tun_chr_ioctl cmd 1074025680 [ 533.070091][ T4953] Bluetooth: hci0: command tx timeout [ 533.172441][T15024] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.172563][T15024] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.172604][T15024] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.182475][ T1161] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.362487][T19505] Cannot find set identified by id 65534 to match [ 533.577722][T19258] veth0_vlan: entered promiscuous mode [ 533.608775][T19258] veth1_vlan: entered promiscuous mode [ 533.672127][T19258] veth0_macvtap: entered promiscuous mode [ 533.687273][T19258] veth1_macvtap: entered promiscuous mode [ 533.723373][T19258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.771181][T19258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.824841][T19515] ip_tables: iptables: counters copy to user failed while replacing table [ 533.827811][T19513] hsr0: entered promiscuous mode [ 533.841089][ T1161] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.841314][ T1161] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.841463][ T1161] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.841646][ T1161] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.859819][T19513] hsr0: entered allmulticast mode [ 533.859874][T19513] hsr_slave_0: entered allmulticast mode [ 533.859931][T19513] hsr_slave_1: entered allmulticast mode [ 533.989844][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.989869][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.135756][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.135782][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.267938][ C0] bridge0: port 3(veth0) entered forwarding state [ 534.267959][ C0] bridge0: topology change detected, propagating [ 534.268258][ C1] bridge0: port 5(syz_tun) entered forwarding state [ 534.268272][ C1] bridge0: topology change detected, propagating [ 534.268440][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.268454][ C0] bridge0: topology change detected, propagating [ 534.268631][ C1] bridge0: port 4(team0) entered forwarding state [ 534.268667][ C1] bridge0: topology change detected, propagating [ 534.415491][T19518] IPVS: persistence engine module ip_vs_pe_À not found [ 534.552874][T19527] __nla_validate_parse: 2 callbacks suppressed [ 534.552896][T19527] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4449'. [ 534.669857][T19513] hsr0: left promiscuous mode [ 534.730180][T19513] hsr0: left allmulticast mode [ 534.730204][T19513] hsr_slave_0: left allmulticast mode [ 534.730223][T19513] hsr_slave_1: left allmulticast mode [ 534.824814][T19532] tap0: tun_chr_ioctl cmd 1074025680 [ 534.851864][T19074] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 534.855757][T19074] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 534.856919][T19074] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 534.858991][T19074] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 534.889129][T19074] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 535.124588][T19541] tc_dump_action: action bad kind [ 535.150089][ T4953] Bluetooth: hci0: command tx timeout [ 535.871922][T19536] rxe_eth0 speed is unknown, defaulting to 1000 [ 536.204810][T19553] ip_tables: iptables: counters copy to user failed while replacing table [ 536.317305][ T5638] syz_tun (unregistering): left allmulticast mode [ 536.317335][ T5638] syz_tun (unregistering): left promiscuous mode [ 536.317430][ T5638] bridge0: port 2(syz_tun) entered disabled state [ 536.483062][T19562] ip_tables: iptables: counters copy to user failed while replacing table [ 536.989768][ T4953] Bluetooth: hci5: command tx timeout [ 537.391075][T19536] hsr0 speed is unknown, defaulting to 1000 [ 537.392297][T19560] tc_dump_action: action bad kind [ 537.442844][T19536] wg0 speed is unknown, defaulting to 1000 [ 537.680064][T15031] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.785773][T19576] netlink: 'syz.0.4460': attribute type 4 has an invalid length. [ 537.821576][T19576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4460'. [ 537.863196][T19576] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 537.926032][T15031] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.037427][T19578] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4462'. [ 538.049358][T15031] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.170011][T15031] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.234613][T19586] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4465'. [ 538.710056][T19593] ip_tables: iptables: counters copy to user failed while replacing table [ 538.825878][T15031] veth0: left promiscuous mode [ 538.826137][T15031] bridge0: port 1(veth0) entered disabled state [ 538.845630][T15031] bridge_slave_0: left promiscuous mode [ 538.845854][T15031] bridge0: port 4(bridge_slave_0) entered disabled state [ 538.866170][T15031] bond0: left promiscuous mode [ 538.866194][T15031] bond_slave_0: left promiscuous mode [ 538.866399][T15031] bond_slave_1: left promiscuous mode [ 538.886484][T15031] bridge0: port 3(bond0) entered disabled state [ 539.068821][ T4953] Bluetooth: hci5: command tx timeout [ 539.264861][T19608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4471'. [ 539.333784][T15031] 0ªî{X¹¦ (unregistering): left promiscuous mode [ 539.445598][T15031] bond9 (unregistering): (slave geneve2): Releasing active interface [ 539.567484][T19615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4472'. [ 539.640347][T15031] bond7 (unregistering): (slave bridge16): Releasing backup interface [ 539.640378][T15031] bridge16 (unregistering): left promiscuous mode [ 539.641481][T15031] bridge16 (unregistering): left allmulticast mode [ 539.734955][T15031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.736858][T15031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.749520][T15031] bond0 (unregistering): Released all slaves [ 539.767422][T15031] bond1 (unregistering): Released all slaves [ 539.789690][T15031] bond2 (unregistering): Released all slaves [ 539.817740][T15031] bond3 (unregistering): Released all slaves [ 539.846255][T15031] bond4 (unregistering): Released all slaves [ 539.870956][T15031] bond5 (unregistering): (slave veth7): Releasing active interface [ 539.878124][T15031] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 539.880101][T19619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4472'. [ 539.902459][T15031] bond5 (unregistering): Released all slaves [ 539.924780][T15031] bond6 (unregistering): Released all slaves [ 539.942185][T15031] bond7 (unregistering): Released all slaves [ 539.962239][T15031] bond8 (unregistering): Released all slaves [ 539.982230][T15031] bond9 (unregistering): Released all slaves [ 540.023098][T19601] lo speed is unknown, defaulting to 1000 [ 540.052420][T19601] lo speed is unknown, defaulting to 1000 [ 540.081262][T19617] bridge0: port 3(syz_tun) entered blocking state [ 540.081377][T19617] bridge0: port 3(syz_tun) entered disabled state [ 540.081510][T19617] syz_tun: entered allmulticast mode [ 540.084064][T19617] syz_tun: entered promiscuous mode [ 540.093900][T19617] bridge0: port 3(syz_tun) entered blocking state [ 540.094266][T19617] bridge0: port 3(syz_tun) entered forwarding state [ 540.165389][T19601] lo speed is unknown, defaulting to 1000 [ 540.225480][T19624] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4473'. [ 540.323907][T19628] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4474'. [ 540.333450][T19627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4474'. [ 540.382460][T15031] tipc: Left network mode [ 540.675051][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 540.711862][T19633] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4475'. [ 541.076042][T19650] ip_tables: iptables: counters copy to user failed while replacing table [ 541.093653][T19601] infiniband syz0: set active [ 541.095684][T19601] infiniband syz0: added lo [ 541.111690][T19601] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 541.128877][ T5823] lo speed is unknown, defaulting to 1000 [ 541.130315][T19601] infiniband syz0: Couldn't open port 1 [ 541.131197][T19601] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 541.131231][T19601] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 541.131272][T19601] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 541.148930][ T4953] Bluetooth: hci5: command tx timeout [ 541.270281][T19601] RDS/IB: syz0: added [ 541.270340][T19601] smc: adding ib device syz0 with port count 1 [ 541.270362][T19601] smc: ib device syz0 port 1 has no pnetid [ 541.312409][ T5823] lo speed is unknown, defaulting to 1000 [ 541.361655][T19601] lo speed is unknown, defaulting to 1000 [ 541.599389][T19536] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.601980][T19536] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.602138][T19536] bridge_slave_0: entered allmulticast mode [ 541.607543][T19536] bridge_slave_0: entered promiscuous mode [ 541.641061][T19536] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.642935][T19536] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.643140][T19536] bridge_slave_1: entered allmulticast mode [ 541.645897][T19536] bridge_slave_1: entered promiscuous mode [ 541.734949][T19536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.764461][T19536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.807145][ T30] audit: type=1804 audit(1793830123.101:78): pid=19676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4483" name="/newroot/970/cgroup.controllers" dev="tmpfs" ino=4961 res=1 errno=0 [ 541.831218][ T30] audit: type=1800 audit(1793830123.111:79): pid=19676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4483" name="cgroup.controllers" dev="tmpfs" ino=4961 res=0 errno=-22 [ 541.956667][T19681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4483'. [ 541.956908][T19681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4483'. [ 541.957124][T19681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4483'. [ 541.976841][T19681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4483'. [ 542.100961][T19536] team0: Port device team_slave_0 added [ 542.102992][T19601] lo speed is unknown, defaulting to 1000 [ 542.133711][T19536] team0: Port device team_slave_1 added [ 543.228704][ T4953] Bluetooth: hci5: command tx timeout [ 544.465749][T19536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.465770][T19536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.465801][T19536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.553281][ T5297] 8021q: adding VLAN 0 to HW filter on device eth6 [ 544.555115][T19601] lo speed is unknown, defaulting to 1000 [ 544.585851][T19536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.585874][T19536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.585905][T19536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.713797][T19691] __nla_validate_parse: 61 callbacks suppressed [ 544.713821][T19691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4485'. [ 544.713838][T19691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4485'. [ 544.883874][T19536] hsr_slave_0: entered promiscuous mode [ 544.890503][T19536] hsr_slave_1: entered promiscuous mode [ 544.906715][T19536] debugfs: 'hsr0' already exists in 'hsr' [ 544.906760][T19536] Cannot create hsr debugfs directory [ 544.942775][T19699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4488'. [ 544.952975][T19696] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4487'. [ 545.288767][ T1161] bond7: (slave bond0): link status definitely down, disabling slave [ 545.305712][ T1161] bond7: now running without any active interface! [ 545.389955][T19716] ip_tables: iptables: counters copy to user failed while replacing table [ 545.640857][T19601] lo speed is unknown, defaulting to 1000 [ 545.987717][T19741] syzkaller0: entered promiscuous mode [ 545.987744][T19741] syzkaller0: entered allmulticast mode [ 546.044612][ T5297] 8021q: adding VLAN 0 to HW filter on device eth7 [ 546.190332][T19601] lo speed is unknown, defaulting to 1000 [ 546.711939][T19536] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 546.733074][T19536] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 546.734118][T19536] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 546.763112][T19536] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 546.765647][T19536] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 546.790201][T19536] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 546.791173][T19536] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 546.797282][T19536] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 546.872260][T19601] lo speed is unknown, defaulting to 1000 [ 546.935292][T19768] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4501'. [ 546.955493][T19770] netlink: 'syz.3.4500': attribute type 10 has an invalid length. [ 546.976860][T19770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 546.986153][T19770] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 546.986608][T19770] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 547.005232][T19770] team0: Port device netdevsim1 added [ 547.088208][T19536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.095455][T19770] netlink: 'syz.3.4500': attribute type 10 has an invalid length. [ 547.095916][T19770] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 547.096491][T19770] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 547.159525][T19770] team0: Port device netdevsim1 removed [ 547.206550][T19770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 547.328261][T19536] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.359394][ T3285] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.359510][ T3285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.396496][T15032] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.396639][T15032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.557437][T19601] lo speed is unknown, defaulting to 1000 [ 548.010100][T19794] Bluetooth: MGMT ver 1.23 [ 548.211673][T19601] lo speed is unknown, defaulting to 1000 [ 548.880774][T19536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.084116][T19536] veth0_vlan: entered promiscuous mode [ 549.105601][T19841] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 549.151875][T19536] veth1_vlan: entered promiscuous mode [ 549.382198][T19536] veth0_macvtap: entered promiscuous mode [ 549.423699][T19536] veth1_macvtap: entered promiscuous mode [ 549.488591][T19536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.496078][T19849] ip_tables: iptables: counters copy to user failed while replacing table [ 549.541431][T19536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.678190][ T3285] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.679042][ T3285] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.679084][ T3285] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.679120][ T3285] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.995589][T19859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4529'. [ 550.028690][ T4953] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 550.030174][ T4953] Bluetooth: hci3: command 0x1407 tx timeout [ 550.171563][T15024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.171588][T15024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.429915][T15031] hsr_slave_0: left promiscuous mode [ 551.029077][T19905] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 551.140471][T15031] team0 (unregistering): Port device team_slave_1 removed [ 551.172370][T15031] team0 (unregistering): Port device team_slave_0 removed [ 551.174041][T15032] smbdirect: ib_dev[syz2] removed [ 551.368885][T15032] smc: removing ib device syz1 [ 551.401200][T19916] netlink: get zone limit has 8 unknown bytes [ 551.450654][T15032] smbdirect: ib_dev[syz1] removed [ 551.820790][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.820816][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.833992][T19921] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4549'. [ 551.915054][T19926] openvswitch: netlink: IPv4 tunnel dst address is zero [ 552.254877][T19933] netlink: get zone limit has 8 unknown bytes [ 552.324642][T19936] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4554'. [ 552.656661][T19946] netlink: 'syz.1.4452': attribute type 1 has an invalid length. [ 552.656686][T19946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4452'. [ 552.692125][T19946] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4452'. [ 552.707437][T19946] netlink: 64587 bytes leftover after parsing attributes in process `syz.1.4452'. [ 553.233906][ T4953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 553.245563][ T4953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 553.247311][ T4953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 553.265446][ T4953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 553.266158][ T4953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 553.385945][T19955] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4562'. [ 553.550427][ T5643] bridge0: port 5(syz_tun) entered disabled state [ 553.666522][ T5643] syz_tun (unregistering): left allmulticast mode [ 553.666551][ T5643] syz_tun (unregistering): left promiscuous mode [ 553.666657][ T5643] bridge0: port 5(syz_tun) entered disabled state [ 553.799997][T19974] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4569'. [ 553.800036][T19974] netlink: 'syz.5.4569': attribute type 8 has an invalid length. [ 553.800051][T19974] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4569'. [ 554.756779][T20003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4577'. [ 554.822325][T19959] rxe_eth0 speed is unknown, defaulting to 1000 [ 554.843261][T20009] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 554.991061][T20018] syzkaller0: entered promiscuous mode [ 554.991087][T20018] syzkaller0: entered allmulticast mode [ 555.405431][T19074] Bluetooth: hci1: command tx timeout [ 555.571045][T20037] tipc: Enabled bearer , priority 0 [ 555.672121][T20037] syzkaller0: entered promiscuous mode [ 555.672151][T20037] syzkaller0: entered allmulticast mode [ 555.672689][T20037] tipc: Resetting bearer [ 555.713451][T20034] tipc: Resetting bearer [ 557.468183][T19074] Bluetooth: hci1: command tx timeout [ 557.535785][T20034] tipc: Disabling bearer [ 557.555012][T19959] lo speed is unknown, defaulting to 1000 [ 558.006078][T20062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4597'. [ 558.032526][T15031] IPVS: stop unused estimator thread 0... [ 558.639578][T19959] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.639760][T19959] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.639904][T19959] bridge_slave_0: entered allmulticast mode [ 558.641763][T19959] bridge_slave_0: entered promiscuous mode [ 558.676865][T19959] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.676961][T19959] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.677096][T19959] bridge_slave_1: entered allmulticast mode [ 558.691071][T19959] bridge_slave_1: entered promiscuous mode [ 558.801817][T20085] veth0: left allmulticast mode [ 558.801847][T20085] veth0: left promiscuous mode [ 558.802181][T20085] bridge0: port 2(veth0) entered disabled state [ 558.841029][T20085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4608'. [ 558.841418][T19959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.846026][T20085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4608'. [ 558.876808][T19959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.985230][T19959] team0: Port device team_slave_0 added [ 559.004302][T19959] team0: Port device team_slave_1 added [ 559.122920][T19959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.122941][T19959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.122970][T19959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.129724][T19959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.129775][T19959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.129865][T19959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.351301][T19959] hsr_slave_0: entered promiscuous mode [ 559.361872][T19959] hsr_slave_1: entered promiscuous mode [ 559.548498][T19074] Bluetooth: hci1: command tx timeout [ 560.085039][T20129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4617'. [ 560.114436][T15030] IPVS: starting estimator thread 0... [ 560.198005][T20132] IPVS: using max 26 ests per chain, 62400 per kthread [ 560.334339][T19959] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.773399][T20151] netlink: get zone limit has 8 unknown bytes [ 560.775585][T19959] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.824170][T20153] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4627'. [ 560.929626][T19959] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.023856][T19959] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.045085][T20164] netlink: 4468 bytes leftover after parsing attributes in process `syz.1.4632'. [ 561.047033][T20161] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4630'. [ 561.059679][T20164] netlink: 4468 bytes leftover after parsing attributes in process `syz.1.4632'. [ 561.060216][T20164] netlink: 4468 bytes leftover after parsing attributes in process `syz.1.4632'. [ 561.067014][T20164] netlink: 4468 bytes leftover after parsing attributes in process `syz.1.4632'. [ 561.116128][T20162] ip_tables: iptables: counters copy to user failed while replacing table [ 561.269593][T19959] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 561.295627][T19959] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 561.307244][T19959] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 561.337542][T19959] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 561.347037][T19959] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 561.374934][T19959] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 561.375892][T19959] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 561.396906][T19959] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 561.628235][T19074] Bluetooth: hci1: command tx timeout [ 561.636362][T19959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.691912][T19959] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.736245][T15028] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.736361][T15028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.789711][T15026] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.789813][T15026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.845801][T20196] netlink: 'syz.5.4640': attribute type 30 has an invalid length. [ 561.897312][T20196] vxlan0: entered promiscuous mode [ 561.897339][T20196] vxlan0: entered allmulticast mode [ 562.169670][T15030] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.268721][T15028] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.269299][T15028] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.269948][T15024] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.421408][T20213] syzkaller1: entered promiscuous mode [ 562.421439][T20213] syzkaller1: entered allmulticast mode [ 562.788319][T20232] netlink: set zone limit has 8 unknown bytes [ 562.914612][T20235] syzkaller0: entered promiscuous mode [ 562.914638][T20235] syzkaller0: entered allmulticast mode [ 563.098961][T20243] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.101724][T20239] ------------[ cut here ]------------ [ 563.101737][T20239] sp->magic != HWSIM_STA_MAGIC [ 563.101753][T20239] WARNING: drivers/net/wireless/virtual/mac80211_hwsim_main.c:258 at mac80211_hwsim_tx+0x1d04/0x25b0, CPU#0: syz.5.4655/20239 [ 563.132343][T20239] Modules linked in: [ 563.136325][T20239] CPU: 0 UID: 0 PID: 20239 Comm: syz.5.4655 Not tainted syzkaller #0 PREEMPT(full) [ 563.145792][T20239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 563.155948][T20239] RIP: 0010:mac80211_hwsim_tx+0x1d04/0x25b0 [ 563.161952][T20239] Code: e8 03 42 0f b6 04 20 84 c0 0f 85 0b 08 00 00 45 0f b6 8d 71 08 00 00 4c 89 ee 67 48 0f b9 3a e9 c4 f4 ff ff e8 8d 05 7a fa 90 <0f> 0b 90 e9 27 f5 ff ff e8 7f 05 7a fa 90 0f 0b 90 48 8b 7c 24 20 [ 563.181645][T20239] RSP: 0018:ffffc9000403eb60 EFLAGS: 00010293 [ 563.187835][T20239] RAX: ffffffff874f1043 RBX: 0000000000000000 RCX: ffff888033710000 [ 563.195870][T20239] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006d537749 [ 563.203918][T20239] RBP: ffffc9000403ecf0 R08: ffff8880456573cf R09: 0000000000000000 [ 563.211980][T20239] R10: ffff8880456573c0 R11: ffffffff874ef340 R12: dffffc0000000000 [ 563.220026][T20239] R13: 00000000ffffffff R14: 0000000000000000 R15: 1ffff92000807db8 [ 563.228166][T20239] FS: 00007f0ce72ea6c0(0000) GS:ffff88812361f000(0000) knlGS:0000000000000000 [ 563.237245][T20239] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 563.243913][T20239] CR2: 00007f3f5b14fe9c CR3: 0000000028000000 CR4: 00000000003526f0 [ 563.251957][T20239] Call Trace: [ 563.255297][T20239] [ 563.258333][T20239] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 563.263865][T20239] ieee80211_tx_frags+0x3df/0x890 [ 563.269004][T20239] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 563.274617][T20239] __ieee80211_xmit_fast+0xabf/0x2160 [ 563.280118][T20239] ? __flow_hash_from_keys+0x431/0x6c0 [ 563.285642][T20239] ? cfg80211_classify8021d+0x67e/0x1220 [ 563.291366][T20239] ? arch_stack_walk+0xfb/0x150 [ 563.296278][T20239] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 563.302221][T20239] ? ieee80211_downgrade_queue+0x432/0x5b0 [ 563.308121][T20239] ? ieee80211_mesh_xmit_fast+0x902/0xe20 [ 563.313910][T20239] ieee80211_mesh_xmit_fast+0xa6d/0xe20 [ 563.319615][T20239] ? lock_acquire+0x115/0x350 [ 563.324357][T20239] ? __pfx_ieee80211_mesh_xmit_fast+0x10/0x10 [ 563.330522][T20239] ? __ieee80211_subif_start_xmit+0x2c5/0x1840 [ 563.336741][T20239] __ieee80211_subif_start_xmit+0x663/0x1840 [ 563.342860][T20239] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 563.349361][T20239] ? sock_def_readable+0xae/0x550 [ 563.354461][T20239] ieee80211_subif_start_xmit+0xee/0x560 [ 563.360193][T20239] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 563.366476][T20239] ? dev_queue_xmit_nit+0x2d/0xac0 [ 563.371682][T20239] ? dev_queue_xmit_nit+0x95c/0xac0 [ 563.376951][T20239] ? dev_queue_xmit_nit+0x2d/0xac0 [ 563.382171][T20239] dev_hard_start_xmit+0x2cd/0x830 [ 563.387350][T20239] __dev_queue_xmit+0x14d1/0x3920 [ 563.392486][T20239] ? __dev_queue_xmit+0x29b/0x3920 [ 563.397657][T20239] ? __might_fault+0xaf/0x130 [ 563.402427][T20239] ? _copy_from_iter+0x21b/0x1680 [ 563.407494][T20239] ? __pfx___dev_queue_xmit+0x10/0x10 [ 563.412956][T20239] ? __pfx__copy_from_iter+0x10/0x10 [ 563.418374][T20239] ? __pfx_packet_parse_headers+0x10/0x10 [ 563.424152][T20239] ? packet_xmit+0x68/0x330 [ 563.428750][T20239] ? skb_put+0x112/0x210 [ 563.433041][T20239] packet_sendmsg+0x406f/0x5330 [ 563.438025][T20239] ? lock_acquire+0x115/0x350 [ 563.442876][T20239] ? aa_file_perm+0x18b/0x15f0 [ 563.447687][T20239] ? __pfx_packet_sendmsg+0x10/0x10 [ 563.452962][T20239] ? aa_sk_perm+0x6ff/0x8f0 [ 563.457525][T20239] ? __pfx_aa_sk_perm+0x10/0x10 [ 563.462473][T20239] ? aa_sock_msg_perm+0x144/0x210 [ 563.467563][T20239] ? apparmor_socket_sendmsg+0x98/0x360 [ 563.473230][T20239] ? __pfx_packet_sendmsg+0x10/0x10 [ 563.478507][T20239] sock_sendmsg_nosec+0x14e/0x190 [ 563.483594][T20239] sock_write_iter+0x2de/0x3e0 [ 563.488468][T20239] ? __pfx_sock_write_iter+0x10/0x10 [ 563.493813][T20239] ? bpf_lsm_file_permission+0x9/0x20 [ 563.499279][T20239] ? security_file_permission+0x75/0x260 [ 563.504981][T20239] vfs_write+0x612/0xba0 [ 563.509330][T20239] ? __pfx_vfs_write+0x10/0x10 [ 563.514149][T20239] ? __fget_files+0x3a2/0x420 [ 563.518901][T20239] ? __fget_files+0x2a/0x420 [ 563.523543][T20239] ? fdget+0x1ac/0x250 [ 563.527669][T20239] ksys_write+0x150/0x270 [ 563.532099][T20239] ? __pfx_ksys_write+0x10/0x10 [ 563.537013][T20239] do_syscall_64+0x166/0x520 [ 563.541691][T20239] ? trace_irq_disable+0x3b/0x140 [ 563.546760][T20239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.552898][T20239] ? clear_bhb_loop+0x70/0xc0 [ 563.557619][T20239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.563641][T20239] RIP: 0033:0x7f0ce639fb19 [ 563.568119][T20239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.587830][T20239] RSP: 002b:00007f0ce72ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 563.596283][T20239] RAX: ffffffffffffffda RBX: 00007f0ce6626090 RCX: 00007f0ce639fb19 [ 563.604352][T20239] RDX: 000000000000001c RSI: 0000200000000600 RDI: 0000000000000009 [ 563.612482][T20239] RBP: 00007f0ce6437b70 R08: 0000000000000000 R09: 0000000000000000 [ 563.620582][T20239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.628626][T20239] R13: 00007f0ce6626128 R14: 00007f0ce6626090 R15: 00007fffcafbaf78 [ 563.636660][T20239] [ 563.639791][T20239] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 563.647096][T20239] CPU: 0 UID: 0 PID: 20239 Comm: syz.5.4655 Not tainted syzkaller #0 PREEMPT(full) [ 563.656499][T20239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 563.666594][T20239] Call Trace: [ 563.669906][T20239] [ 563.672871][T20239] vpanic+0x26f/0x710 [ 563.676896][T20239] panic+0xc5/0xd0 [ 563.680685][T20239] ? __pfx_panic+0x10/0x10 [ 563.685158][T20239] __warn+0x315/0x4c0 [ 563.689175][T20239] ? mac80211_hwsim_tx+0x1d04/0x25b0 [ 563.694543][T20239] ? mac80211_hwsim_tx+0x1d04/0x25b0 [ 563.699877][T20239] __report_bug+0x276/0x570 [ 563.704511][T20239] ? lock_acquire+0x115/0x350 [ 563.709256][T20239] ? mac80211_hwsim_tx+0x1d04/0x25b0 [ 563.714587][T20239] ? __pfx___report_bug+0x10/0x10 [ 563.719659][T20239] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 563.725512][T20239] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 563.731383][T20239] ? stack_depot_save_flags+0x404/0x810 [ 563.736975][T20239] ? ieee80211_encrypt_tx_skb+0x2fc/0x3f0 [ 563.742740][T20239] ? mac80211_hwsim_tx+0x1d04/0x25b0 [ 563.748075][T20239] report_bug+0x16b/0x220 [ 563.752452][T20239] ? mac80211_hwsim_tx+0x1d04/0x25b0 [ 563.757785][T20239] ? mac80211_hwsim_tx+0x1d06/0x25b0 [ 563.763114][T20239] handle_bug+0x9c/0x200 [ 563.767409][T20239] exc_invalid_op+0x1a/0x50 [ 563.771963][T20239] asm_exc_invalid_op+0x1a/0x20 [ 563.776841][T20239] RIP: 0010:mac80211_hwsim_tx+0x1d04/0x25b0 [ 563.782782][T20239] Code: e8 03 42 0f b6 04 20 84 c0 0f 85 0b 08 00 00 45 0f b6 8d 71 08 00 00 4c 89 ee 67 48 0f b9 3a e9 c4 f4 ff ff e8 8d 05 7a fa 90 <0f> 0b 90 e9 27 f5 ff ff e8 7f 05 7a fa 90 0f 0b 90 48 8b 7c 24 20 [ 563.802423][T20239] RSP: 0018:ffffc9000403eb60 EFLAGS: 00010293 [ 563.808532][T20239] RAX: ffffffff874f1043 RBX: 0000000000000000 RCX: ffff888033710000 [ 563.816544][T20239] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006d537749 [ 563.824552][T20239] RBP: ffffc9000403ecf0 R08: ffff8880456573cf R09: 0000000000000000 [ 563.832562][T20239] R10: ffff8880456573c0 R11: ffffffff874ef340 R12: dffffc0000000000 [ 563.840596][T20239] R13: 00000000ffffffff R14: 0000000000000000 R15: 1ffff92000807db8 [ 563.848612][T20239] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 563.854110][T20239] ? mac80211_hwsim_tx+0x1d03/0x25b0 [ 563.859482][T20239] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 563.865080][T20239] ieee80211_tx_frags+0x3df/0x890 [ 563.870164][T20239] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 563.875753][T20239] __ieee80211_xmit_fast+0xabf/0x2160 [ 563.881278][T20239] ? __flow_hash_from_keys+0x431/0x6c0 [ 563.886762][T20239] ? cfg80211_classify8021d+0x67e/0x1220 [ 563.892421][T20239] ? arch_stack_walk+0xfb/0x150 [ 563.897310][T20239] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 563.903203][T20239] ? ieee80211_downgrade_queue+0x432/0x5b0 [ 563.909040][T20239] ? ieee80211_mesh_xmit_fast+0x902/0xe20 [ 563.914795][T20239] ieee80211_mesh_xmit_fast+0xa6d/0xe20 [ 563.920377][T20239] ? lock_acquire+0x115/0x350 [ 563.925084][T20239] ? __pfx_ieee80211_mesh_xmit_fast+0x10/0x10 [ 563.931184][T20239] ? __ieee80211_subif_start_xmit+0x2c5/0x1840 [ 563.937360][T20239] __ieee80211_subif_start_xmit+0x663/0x1840 [ 563.943403][T20239] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 563.949847][T20239] ? sock_def_readable+0xae/0x550 [ 563.954942][T20239] ieee80211_subif_start_xmit+0xee/0x560 [ 563.960594][T20239] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 563.966853][T20239] ? dev_queue_xmit_nit+0x2d/0xac0 [ 563.972011][T20239] ? dev_queue_xmit_nit+0x95c/0xac0 [ 563.977231][T20239] ? dev_queue_xmit_nit+0x2d/0xac0 [ 563.982368][T20239] dev_hard_start_xmit+0x2cd/0x830 [ 563.987517][T20239] __dev_queue_xmit+0x14d1/0x3920 [ 563.992561][T20239] ? __dev_queue_xmit+0x29b/0x3920 [ 563.997705][T20239] ? __might_fault+0xaf/0x130 [ 564.002410][T20239] ? _copy_from_iter+0x21b/0x1680 [ 564.007479][T20239] ? __pfx___dev_queue_xmit+0x10/0x10 [ 564.012901][T20239] ? __pfx__copy_from_iter+0x10/0x10 [ 564.018221][T20239] ? __pfx_packet_parse_headers+0x10/0x10 [ 564.023991][T20239] ? packet_xmit+0x68/0x330 [ 564.028515][T20239] ? skb_put+0x112/0x210 [ 564.032785][T20239] packet_sendmsg+0x406f/0x5330 [ 564.037688][T20239] ? lock_acquire+0x115/0x350 [ 564.042400][T20239] ? aa_file_perm+0x18b/0x15f0 [ 564.047190][T20239] ? __pfx_packet_sendmsg+0x10/0x10 [ 564.052421][T20239] ? aa_sk_perm+0x6ff/0x8f0 [ 564.056965][T20239] ? __pfx_aa_sk_perm+0x10/0x10 [ 564.061845][T20239] ? aa_sock_msg_perm+0x144/0x210 [ 564.066911][T20239] ? apparmor_socket_sendmsg+0x98/0x360 [ 564.072488][T20239] ? __pfx_packet_sendmsg+0x10/0x10 [ 564.077715][T20239] sock_sendmsg_nosec+0x14e/0x190 [ 564.082782][T20239] sock_write_iter+0x2de/0x3e0 [ 564.087576][T20239] ? __pfx_sock_write_iter+0x10/0x10 [ 564.092894][T20239] ? bpf_lsm_file_permission+0x9/0x20 [ 564.098295][T20239] ? security_file_permission+0x75/0x260 [ 564.103965][T20239] vfs_write+0x612/0xba0 [ 564.108240][T20239] ? __pfx_vfs_write+0x10/0x10 [ 564.113033][T20239] ? __fget_files+0x3a2/0x420 [ 564.117752][T20239] ? __fget_files+0x2a/0x420 [ 564.122370][T20239] ? fdget+0x1ac/0x250 [ 564.126467][T20239] ksys_write+0x150/0x270 [ 564.130844][T20239] ? __pfx_ksys_write+0x10/0x10 [ 564.135732][T20239] do_syscall_64+0x166/0x520 [ 564.140347][T20239] ? trace_irq_disable+0x3b/0x140 [ 564.145398][T20239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.151484][T20239] ? clear_bhb_loop+0x70/0xc0 [ 564.156205][T20239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.162133][T20239] RIP: 0033:0x7f0ce639fb19 [ 564.166584][T20239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.186230][T20239] RSP: 002b:00007f0ce72ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 564.194680][T20239] RAX: ffffffffffffffda RBX: 00007f0ce6626090 RCX: 00007f0ce639fb19 [ 564.202672][T20239] RDX: 000000000000001c RSI: 0000200000000600 RDI: 0000000000000009 [ 564.210663][T20239] RBP: 00007f0ce6437b70 R08: 0000000000000000 R09: 0000000000000000 [ 564.218674][T20239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.226679][T20239] R13: 00007f0ce6626128 R14: 00007f0ce6626090 R15: 00007fffcafbaf78 [ 564.234686][T20239] [ 564.238321][T20239] Kernel Offset: disabled [ 564.242673][T20239] Rebooting in 86400 seconds..