last executing test programs: 2.522829949s ago: executing program 4 (id=2674): socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd700000000000647262675f70725f686d61635f736861333834"], 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f40700090400", 0x10) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000004780)='rcu_utilization\x00'}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) 1.841919556s ago: executing program 3 (id=2689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e26, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000181000000000", @ANYRES32, @ANYBLOB="0000000000000000950000"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800020000143226e6004e9b0000fc131a0c77"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000bf000588000000070000000900010073797a34000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff050800034000000018"], 0xe0}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRES8, @ANYRES16, @ANYRESHEX=r1], 0x54}}, 0x20000004) close(0xffffffffffffffff) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x87786918ee1657a4, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x29, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000)=r8, 0x4) r9 = socket$netlink(0x10, 0x3, 0x4) write(r9, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0x10) 1.78529513s ago: executing program 0 (id=2691): socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd700000000000647262675f70725f686d61635f7368"], 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000010000d0400"/20, @ANYRES32, @ANYBLOB="01000000000002004c0012800b0001"], 0x6c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f40700090400", 0x10) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006b40)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = accept(r3, &(0x7f00000003c0)=@sco={0x1f, @none}, &(0x7f0000000180)=0x80) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000240)={@none, 0x4}) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000004780)='rcu_utilization\x00', r6}, 0x18) unshare(0x8040480) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x42c0ce61274eddda) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) 1.650244917s ago: executing program 2 (id=2693): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.582722093s ago: executing program 1 (id=2694): r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01170000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) close(0x3) 1.580860735s ago: executing program 4 (id=2695): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) write$nci(r0, &(0x7f0000000040)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x0, 0x3, 0x6, 0x3, {0xd3, 0x81}}, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000011c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001180)={&(0x7f0000000140)={0x1010, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x2cc, 0x8, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8}]}, {0x4}, {0x278, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3cfee9155f9130fee354e161278b996c40a305d52929ed03df82c3d8cfbe33e1"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3de3c39df0aa16624cc4524490eec97cf1390300debc12df835275da3d6a290d"}, @WGPEER_A_ALLOWEDIPS={0x208, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}]}, @WGDEVICE_A_PEERS={0x504, 0x8, 0x0, 0x1, [{0x500, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x10}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c696fd55f29b10564f35f325ecded2baa65cff07156bc6eb32e606709c8bc557"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010101}}, @WGPEER_A_ALLOWEDIPS={0x474, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e581381577cf5c063e857b6bffde0b54043817e7046460b6acd21a4153792b28"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PEERS={0x7e8, 0x8, 0x0, 0x1, [{0x4cc, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2569e59382b6be31e9af43ace383d9652c1ed0c7826dfd5ec6471c9f6fa3675c"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x49c, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}]}, {0x1c4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x17c, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}]}, {0x4}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9deea16e2b4bbc3db5672d9eec08f4e8111e3e4c340c386c43b5a5a3a3660083"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7f}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd7}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x148, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xfc, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c5a4af9771547f6b09dee19ddab5d33222174ae3ab644dbe67829c24fdd1f140"}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}]}, 0x1010}, 0x1, 0x0, 0x0, 0x8804}, 0x8840) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000012c0)={r0, 0x20, &(0x7f0000001280)={&(0x7f0000001200)=""/22, 0x16, 0x0, &(0x7f0000001240)=""/21, 0x15}}, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001340), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001480)={&(0x7f0000001380)={0xf0, r4, 0x8, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40005}, 0x400c0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000001680)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x58, r5, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2dd67fdc, 0x77}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x20040890) pipe(&(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000001700)={'bond_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$DEVLINK_CMD_TRAP_GET(r8, &(0x7f00000019c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001980)={&(0x7f0000001780)={0x1f0, r4, 0x20, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r9 = accept4$packet(r7, &(0x7f0000001a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001a40)=0x14, 0x800) getsockname$packet(r9, &(0x7f0000001a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001ac0)=0x14) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x3c, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x32}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3}]}, 0x3c}}, 0x0) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000001c00)=0x5, 0x4) close(r8) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001c40)={r1}) sendmmsg$alg(r0, &(0x7f00000026c0)=[{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001c80)="ff5f7dde1ba3d0937e62be38272bc26082ad7c8dfe4b7d53994ac5d9ea6ce0e391c1b5318bbbb03c9c0e795acc7ec7065644824f071318bb88f03f9212abedc0b7b3628086d1d5947c55d97299ef486f244d2242b9266e2cf64b1ac4035438ed32d564f0221f21c4209ecef3ca9073cecd45481a5e5258f261dc1ce64c20ef37da35ba0ad17e50d14919c51d8ae58e39b69a0806962724d25b11b8903ca76f1b2cf88944d013194d3d2b112c437130b208e27b7858f118130231a849d3ad31adc6b0acbe31f618c87a2530495ce376bf55445d4196176a97fd61bc6039e2", 0xde}, {&(0x7f0000001d80)="08276f0e3b3385acf411b72d98b2917c0001d2289a9f", 0x16}, {&(0x7f0000001dc0)="ce1790976ffb6cf5278288e999e0de491f3776a23618e8c7aa866fa324afa576639579570baa44ebe6b86779c818e8cc24bc3d1c6d172413b56b59e0fe9bcfe2a1c285bde6851e67902af7b171dd302767272bd4fcedd8afbbff2fc9d0c53e2f69774d28262372a728ae6d80944913", 0x6f}, {&(0x7f0000001e40)="c79efb4eaee87b46f7f7597c0dcd01699b17", 0x12}, {&(0x7f0000001e80)="1cb32fd4d5c797ef0ac6ea29754ba3db8d1568a5", 0x14}, {&(0x7f0000001ec0)="242b072aef4244695168b0be6bcccf2981eaa5111126924b0a7cf72a1ad9cebde00258424cfc768e2db4615ccb5a2e4437cc641bf1e6b9eaaa937ef163d0026d29c693ef2d7a84b67a9f35e381570ecc3c24525e8df78a7485145b34ec441761d7c3b9664b239d38ca3e9b4831f04a8b1c80277ba59b7a0ecbb1a1a4303cb12f2f09034ed758e09cd47b3f395c8d91512639a6d25787775af230b9456db175756e5c1cb48302ed8d02b47e2d83e733f45e634fc528", 0xb5}, {&(0x7f0000001f80)="dac6afc9aeb5cba6c81b7921a516b2fb4d558ed7a3ff5c4f28fd6790a31088a8d1ef3526f9ebd32e94d960557ea8818d0f641a0601a733f58b8628cee8621e5a91966cbb42ed9050872f9cd995163603573e0e9c397a23f60afd9ea01a37b169b773aa69e4daf8c6759bafa9654914c4216f6d194a3b9def5baef523d3bfca44d375cebfae234c8f21", 0x89}, {&(0x7f0000002040)="3ce01d931f649e4f6fb3a24c86eee31dd4bbb43a5083a6cb0ba52a6addf5b58e06fd13b66c0f592c470691558ce9f0fcd87bd5a51b46b6f43a49034cbcc5c9fb29d74840be776fd39a48042b555f525f324d1836e132bcd650c6248eb3e29ae0b459768e6319a0c881a137216a8014494c36946a8e0386a7c822eefc642d7adf5d9721f97e024938b24896a9efe853efc3db2e9bc2f7dcfd7ac7ae02c58c93e1e7aebbcd94b7a79da0c204bcfab8959d", 0xb0}, {&(0x7f0000002100)="a5a0c5cf74e7004203d82d49ad8bcfe73dc122c1646cb4cbc177ee56c7ad92040eb3133e3d650a4062267375ecc8405b2411e02118ea79240c4ddfad77476197c3ad9cb56410a3b8abbd5d18903ad70ddf6187a4a39576bb3b99e73edb268884f82035cd43dfea68c6788e19d25f192505a300411298dacfac558306c6b598491d32633a730515c37157e52c3cf94e0903597ca3824e688e3b1920e1bbe1e2c1f3d33d69d3a39db62df1e84f7fdab60492d517163e2e5f9260b3064127d73f", 0xbf}], 0x9, 0x0, 0x0, 0x4840}, {0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000002280)="a779746478c5b3f3372a48a47803160231388a0c19d53c6c5eea695e09adfd4d", 0x20}, {&(0x7f00000022c0)="16377218176c19a05e7ac15a1ff3525b1af4a16627f272d41858c20370eb701a385a94ddf10ffcde5f8d516441eae13cc259695f8e0418fc50e92c1346071b04bda7b8e5ad342c1fc8eea627c8a2", 0x4e}, {&(0x7f0000002340)="994331e52b00f359319e75cd42e79126c6426b36c0d4f25d8bdc372ed107be02e173c4172e340a1183dd784e6a26ec91a04548052d6c0fca5d6a8ca07d84afa3051e204d", 0x44}, {&(0x7f00000023c0)="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", 0xfc}], 0x4, &(0x7f0000002500)=[@assoc={0x18}, @iv={0xa8, 0x117, 0x2, 0x8e, "27674ec27c38de43d609a2f4641dcbd2c861d79197cfa8f8a620f7961725b56cc3ef0d63cb36a8653e61949455588e7bfbb4051ff45c2f4ae16e08289d4570f1ab561146752412190de346e80648e26cf090d7788cb10268b4b9b6eba2ceef97e078a681b675852e207cf3b0704c1107e291104ed2f9fe245211db8f2b152a2417b8951dc6d98bcea2bd93713312"}, @assoc={0x18, 0x117, 0x4, 0x3}, @iv={0x90, 0x117, 0x2, 0x77, "008128b0e3bef76cc61d023176953db35b2977501011527a79ca72c2c0008c54ddd94ad0651bcbe1cf32be157b92badd94ec0494a0c8ae5f4897a4acf0ad9964ed67cf289e9a63aca74ce7f6f0c52f41bddccdf448d081da56a8f96b68c596eb53ff485e9249dbc5b66b1247c9839a59239b3dbc4eb4d3"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x20, 0x117, 0x2, 0x7, "a818c1a7055cf9"}], 0x1b8, 0x2}], 0x2, 0x4000000) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x1, 0x693) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000002740)=0x1000400, 0x4) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002980)=@bpf_tracing={0x1a, 0xa, &(0x7f0000002780)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x4, 0x1, 0xa, 0x1, 0x9, 0x8, 0x1}], &(0x7f0000002800)='syzkaller\x00', 0x9, 0x49, &(0x7f0000002840)=""/73, 0x83c00, 0x0, '\x00', r3, 0x19, r8, 0x8, &(0x7f00000028c0)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x2521d, r0, 0x4, &(0x7f0000002900)=[r0, r7, r7, r7, r0, r0, r7, r0, r0, r7], &(0x7f0000002940)=[{0x3, 0x2, 0xd, 0x4}, {0x5, 0x2, 0xb, 0x8}, {0x0, 0x5, 0x7, 0x1}, {0x0, 0x4, 0x4, 0x1}], 0x10, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002d00)={r10, 0xe0, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000002a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000002a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x92, &(0x7f0000002b00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000002b40), &(0x7f0000002b80), 0x8, 0xa7, 0x8, 0x8, &(0x7f0000002bc0)}}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000002d40)={0x3, 'ip6erspan0\x00', {0x4}, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) 1.568380678s ago: executing program 2 (id=2696): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x23, 0x2, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r0, r2, 0x0, 0x970b) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0x8) socket$igmp(0x2, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) close(0x3) 1.471149283s ago: executing program 1 (id=2697): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_j1939(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r1, 0x3, {0x2, 0xff, 0x4}, 0xff}, 0x18, &(0x7f0000000200)={&(0x7f0000000100)="e80a16c606d2eab2065bd37b679877d828dea6923dad73bc36b06d70d86e255c4c7fbf520513e501b4d8f8ccc42d6ac53d9ebdd553b3a002970c3a5474c03e054b7b028c74496e4bebcae2a173f36ec46b41325e237dc92ffb0769b137bca8f80ca096f300f8ad6e6bfa71235564995a8adfc0a2f94142695005e1479ec6b564d560d7efe8890ae2c18d49760c301008f43e6fb2f1ce3d841b1a87bd0e75b6b82e3db7f1f9d0edbec03c3e5a75aca3a59be7711cbcf67f8088e457b692f5a2538e2efd80403e3f71cefde5a53e74a1d4f9a87b7f443bcbadd2ed73500cc556286735", 0xe2}, 0x1, 0x0, 0x0, 0x20}, 0x800) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000300)="165b26dc84559b00608dfdb0751906cfa0f812d2c1268d0bf772cbce357e0b03c91691d9d4a544fa18129564f8aeb6bb68af69b92185da3c5f25273dc4ab9267194005cb43aa826e36e4e60d2f3de482a123af1482b4c82355b50c6007a96c77744d897a2d1bc004a72bead17ba92d3f01e158a8dcc70aa32888a0abb930ddde19", 0x81) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x84f60062d5a4ba4c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80080}, 0x8800) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x44080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r2) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000a40)=0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r6, 0x110, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r8 = syz_genetlink_get_family_id$nl80211(0x0, r4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000bc0)={0xe08, r8, 0x326, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x57}}}}, [@NL80211_ATTR_TX_RATES={0x258, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6d, 0xffff, 0x36, 0x6, 0xd, 0x6, 0x0, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x101, 0xff, 0xd, 0xf1a3, 0x2, 0x0, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x5, 0x4, 0x5, 0x1c0, 0x334b, 0xfffb, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x47, 0x48, 0x24, 0x2, 0xfe94a257ff35f239, 0x36, 0x3, 0x12, 0x30, 0x1b, 0x12, 0x30, 0x60, 0x30, 0x18, 0x30, 0x24, 0x8, 0x6c, 0x5, 0x5, 0x60, 0x4, 0xb, 0x6c, 0x3, 0x1, 0x4, 0x1, 0x60]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x7, 0x2}, {0x1, 0x6}, {0x3, 0x9}, {0x1, 0x11}, {0x3, 0xa}, {0x1, 0x3}, {0x6, 0x2}, {0x3, 0x1}, {0x7, 0x6}, {0x3, 0x9}, {0x4, 0x1}, {0x4, 0x9}, {0x6, 0xa}, {0x7, 0x9}, {0x4, 0x7}, {0x3, 0xa}, {0x5, 0x4}, {0x7}, {0x1, 0x5}, {0x6, 0x1}, {0x5, 0x3}, {0x4}, {0x2, 0x6}, {0x4, 0x7}, {0x4, 0x4}, {0x7, 0x1}, {0x7, 0x1}, {0x7, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x4, 0x1}, {0x5, 0x4}, {0x1, 0x6}, {0x0, 0x5}, {0x7, 0x3}, {0x0, 0x6}, {0x3, 0x5}, {0x6, 0x3}, {0x1, 0x7}, {0x5, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x5}, {0x1, 0x3}, {0x4, 0x8}, {0x6, 0x4}, {0x2, 0x8}, {0x6, 0x4}, {0x0, 0x1}, {0x1, 0x7}, {0x0, 0x6}, {0x5, 0xa}, {0x7, 0x8}, {0x1, 0x5}, {0x1, 0x5}, {0x3, 0x3}, {0x0, 0xa}, {0x6, 0x3}, {0x2, 0x2}, {0x3, 0x5}, {0x1, 0x9}, {0x0, 0x6}, {0x2, 0x1}]}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xae, 0x1ff, 0x236, 0x3f78, 0x3e, 0x1, 0x6, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x8, 0xff01, 0xf6, 0x4, 0x1, 0xfe00]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x2, 0x2, 0x1b, 0x24, 0x12, 0x24, 0x5, 0x35, 0x36, 0x48, 0x6c, 0x12, 0x30, 0x3, 0x30, 0x36, 0x48, 0x9, 0xc, 0x21]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x1, 0x5}, {0x6, 0x1}, {0x3, 0x7}, {0x5, 0x8}, {0x5, 0x6}, {0x7, 0x4}, {0x1, 0x5}, {0x1, 0x1}, {0x4, 0xa}, {0x5, 0x4}, {0x1, 0x6}, {0x1, 0x5}, {0x1, 0x9}, {0x0, 0x9}, {0x4, 0x4}, {0x5, 0x2}, {0x2, 0x4}, {0x5, 0x9}, {0x6, 0x4}, {0x7, 0xa}, {0x6, 0x2}, {0x2, 0x8}, {0x5, 0xa}, {0x3, 0x6}, {0x4, 0xa}, {0x0, 0x8}, {0x5}, {0x5, 0x8}, {0x3, 0x6}, {0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0x24, 0xc, 0x18, 0x48, 0x18, 0x18, 0x18, 0x48, 0x30, 0x6c, 0x60, 0x6, 0x9, 0x24, 0x0, 0x60, 0x60, 0x4, 0x6]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x2, 0x7, 0x7, 0x507, 0x8, 0xff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x10, 0x3, 0x3, 0x1ff, 0x800, 0x1, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x90, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xf, 0x6, 0x0, 0x9bc5, 0x9, 0xe409, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9, 0x2, 0x5f, 0x400, 0x5, 0x8000, 0xb06d]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x4, 0x6, 0x8001, 0x1, 0xb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x1, 0xb, 0x16, 0x2, 0x16, 0x4, 0x3, 0x48, 0x48, 0x5, 0x2, 0x30, 0x60, 0x1b, 0x18, 0x4]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xd8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x3, 0x8}, {0x5, 0x9}, {0x7, 0x2}, {0x4, 0x5}, {0x0, 0x1}, {0x7, 0x6}, {0x4, 0x2}, {0x2}, {0x6, 0x9}, {0x5, 0x6}, {0x6, 0x9}, {0x7}, {0x1, 0x2}, {0x6, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x2, 0x5}, {0x5, 0x9}, {0x1, 0xa}, {0x3, 0x9}, {0x0, 0x8}, {0x1}, {0x1, 0x1}, {0x0, 0x9}, {0x3, 0xa}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x0, 0x7}, {0x7, 0x8}, {0x1, 0x2}, {0x5, 0x8}, {0x1, 0x2}, {0x6, 0x3}, {0x2, 0x9}, {0x7, 0x1}, {0x2}, {0x5, 0x1a}, {0x0, 0x1}, {0x0, 0x9}, {0x3, 0x8}, {0x2, 0xa}, {0x1, 0x9}, {0x6, 0x7}, {0x4, 0x7}, {0x6, 0x4}, {0x6, 0x8}, {0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x40, 0xfffb, 0x5, 0x3, 0xfff7, 0xffff, 0x8]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x5, 0xa}, {0x0, 0x9}, {0x5, 0x8}, {0x2, 0x5}, {0x6, 0x8}, {0x7, 0x1}, {0x4, 0x1}, {0x4, 0x3}, {0x5, 0xa}, {0x6, 0x7}, {0x0, 0x6}, {0x3, 0x7}, {0x6, 0xa}, {0x4, 0xa}, {0x0, 0x3}, {0x5}, {0x6, 0x3}, {0x3, 0x7}, {0x3}, {0x1, 0x8}, {0x5, 0x5}, {0x1, 0x3}, {0x6, 0x4}, {0x1, 0x9}, {0x4, 0x2}, {0x4}, {0x5, 0x7}, {0x1, 0x7}, {0x6, 0x5}, {0x5, 0x1}, {0x1, 0x6}, {0x4, 0x4}, {0x6, 0x4}, {0x2, 0xa}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x32, 0x1, 0x1b, 0x4a, 0x3, 0x5, 0x6c, 0x18, 0x60, 0x5, 0x0, 0x24, 0x16, 0x16, 0x18, 0xc, 0x1b, 0x28, 0x3, 0x5, 0x1b, 0x3d23fa02a39c07b9, 0x16, 0x6c, 0x36]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xc539, 0x1, 0xc, 0x6, 0x1, 0x2, 0x3, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x248, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x4, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x1}, {0x7, 0x5}, {0x1, 0x9}, {0x3, 0x7}, {0x0, 0x8}, {0x5, 0xa}, {0x3, 0x2}, {0x6, 0x6}, {0x4, 0x8}, {0x7, 0x3}, {0x2, 0x8}, {0x7}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0x4, 0x36, 0x16, 0x16, 0x48, 0x1, 0x9, 0x4be34da746979bdb, 0x1b, 0x48, 0x6c, 0x30, 0x4, 0xc, 0x48, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x68}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x12, 0x6, 0x6c, 0xc, 0xc, 0x30, 0x6c, 0x3, 0x3, 0x36, 0x24, 0x36, 0x24, 0x24, 0xc, 0x4, 0x6c, 0x1b, 0x1, 0x36, 0x6, 0x9, 0x5, 0x12]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xed0, 0xa8e5, 0x3, 0x6, 0x2, 0x8, 0x1]}}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0x8}, {0x0, 0x2}, {0x1, 0x3}, {0x2, 0x7}, {0x7, 0x4}, {0x7, 0x3}, {0x4, 0x9}, {0x4, 0x7}, {0x0, 0x9}, {0x5, 0x5}, {0x7, 0xa}, {0x7, 0x4}, {0x4, 0x5}, {0x0, 0x4}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xc, 0x0, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xfffa, 0x9, 0x1, 0x2, 0x6, 0x1, 0xb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe0, 0x2, 0x1, 0x3, 0x8, 0x5, 0x797, 0xfb5]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x3}, {0x0, 0x4}, {0x1, 0x8}, {0x5, 0x1}, {0x1, 0x17}, {0x2, 0x7}, {0x1, 0x6}, {0x0, 0x2}, {0x7, 0x2}, {0x3, 0xa}, {0x0, 0x4}, {0x3, 0x9}, {0x6, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0xa0, 0x40, 0x3e7, 0x7ff, 0x80, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x5, 0x1000, 0xfffa, 0x6, 0x6, 0x7, 0xa9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x2, 0x3}, {0x3, 0x8}, {}, {0x0, 0x9}, {0x1, 0xa}, {0x5, 0x6}, {0x4, 0xa}, {0x6, 0x9}, {}, {0x4}, {0x5, 0x5}, {0x2, 0xa}, {0x2, 0x9}, {0x6, 0x6}, {0x1, 0x1}, {0x2, 0x4}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x5, 0x1}, {0x7, 0x2}, {0x2, 0x5}, {0x2, 0xa}, {0x7, 0x6}, {0x2, 0x6}, {}, {0x2, 0x3}, {0x5}, {0x2, 0x9}, {0x2, 0x4}, {0x2, 0x1}, {0x3, 0x9}, {0x3, 0x4}, {0x1, 0x3}, {0x1, 0x4}, {0x6}, {0x1, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x95, 0x4, 0xfd01, 0x8, 0x2, 0x80]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x12, 0x5, 0x5, 0x16, 0x1b, 0x2, 0x49, 0x6c, 0x5, 0xc, 0x24, 0xc, 0x18, 0x30, 0xc, 0x16, 0x4, 0x60, 0x48, 0x1b, 0x6e, 0xb8456c7535571e9a, 0x12, 0x1, 0x6]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x7, 0x9}, {0x1, 0x3}, {0x7, 0x3}, {0x5, 0x9}, {0x2, 0xa}, {0x0, 0x4}, {0x6}, {0x3, 0xa}, {0x0, 0x1}, {0x6, 0x8}, {0x3, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x6, 0xff, 0x5116, 0x3, 0x8, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x4, 0x81, 0x7, 0x4, 0x5, 0x400]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x2, 0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0xa}, {0x5, 0x3}, {0x1, 0x2}, {0x2, 0x7}, {0x0, 0x7}, {0x0, 0x7}, {0x0, 0x1}, {0x7, 0x8}, {0x2, 0x7}, {0x1, 0x9}, {0x0, 0x2}, {0x3, 0x3}, {0x1, 0x6}, {0x1, 0x9}, {0x7, 0x2}, {0x5, 0x9}, {0x1, 0x6}, {0x7, 0x2}, {0x3}, {0x6, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x6, 0x0, 0x70, 0x9, 0x10, 0xe9f, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x200, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x6, 0x8}, {0x2, 0x5}, {0x3, 0x3}, {0x1, 0x5}, {0x3, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x7, 0x4}, {0x6}, {0x5, 0x4}, {0x3, 0x5}, {0x4, 0x3}, {0x1, 0x2}, {0x7, 0x3}, {0x0, 0xa}, {0x0, 0x8}, {0x4, 0x4}, {0x2, 0x4}, {0x4, 0x9}, {0x2, 0xa}, {0x3, 0x5}, {0x6, 0x5}, {0x1, 0xa}, {0x3, 0x4}, {0x2, 0x1}, {0x3, 0x8}, {0x5, 0x9}, {0x6, 0x5}, {0x0, 0x7}, {0x4, 0x2}, {0x3, 0xa}, {0x6, 0x6}, {0x3, 0x9}, {0x4, 0x8}, {0x5, 0xa}, {0x7, 0x2}, {0x1, 0x9}, {0x0, 0x9}, {0x5, 0x5}, {0x5}, {0x3, 0x2}, {0x2, 0xa}, {0x2, 0x9}, {0x1, 0x9}, {0x1}, {0x0, 0x2}, {0x6, 0x4}, {0x6, 0x3}, {0x7, 0x2}, {0x4, 0x1}, {0x2}, {0x0, 0xa}, {0x1, 0x8}, {0x5, 0x1}, {0x5, 0x5}, {0x2, 0x5}, {0x5, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd981, 0x0, 0x400, 0x1, 0x8, 0x1, 0x2, 0x2970]}}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x8, 0x7, 0x2, 0x7fff, 0xd742, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x5, 0x1, 0x18, 0x3, 0x12, 0x1, 0x60, 0x48, 0xb, 0x60, 0x6c, 0x6c]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x16, 0x12, 0x18, 0x36, 0x16, 0x2, 0x6c, 0x2, 0x60, 0x36, 0x2, 0x7, 0x24, 0x18, 0x9, 0x18, 0x18, 0xc, 0x12, 0xb, 0x3, 0x26]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4fea, 0x8001, 0x9, 0x2800, 0x2, 0x200, 0x85ef, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0x3, 0x400, 0x3, 0xd98, 0xfffe, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0x36, 0x50, 0x3, 0x4, 0x6c, 0x12, 0xb, 0x66, 0x2, 0xb, 0x6c, 0x1, 0x6c, 0x60, 0x16, 0x12, 0xb, 0x4, 0x6c, 0x1, 0xb, 0xef52be77a0a16d37]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x3ff, 0x7, 0x1, 0xdf69, 0x8, 0x7, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x9, 0x401, 0x3, 0xb, 0x0, 0x7b]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0xc, 0x36, 0x24, 0x9, 0x9, 0x12, 0x1, 0x6, 0x30, 0x0, 0x48, 0x16, 0x6, 0x3, 0x4, 0x4, 0x48, 0x0, 0x6]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x4afe, 0x7, 0x8, 0x9, 0x7, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x12, 0x6, 0x24, 0x12, 0xc, 0x1, 0x48, 0xb, 0x6c, 0x12, 0x6, 0x37, 0x36, 0x6c, 0x18, 0xc, 0x1b, 0x5, 0x12]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8000, 0x8, 0x7, 0x0, 0x7, 0xf997, 0x1]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x36, 0x4, 0x18, 0x26, 0x60, 0x18, 0x16, 0x36, 0x3, 0x6c, 0x6c, 0x58e214dfcd073500, 0x30, 0x2, 0xc, 0x1, 0xb, 0x1, 0x5, 0xbbe6589c08520776]}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x9, 0x3, 0x5, 0x60, 0x6, 0xb, 0x5, 0x16, 0x5, 0xc, 0x0, 0x36, 0x6c, 0x9, 0x30, 0x30, 0x16, 0x5, 0xb]}]}]}, @NL80211_ATTR_TX_RATES={0x160, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x1, 0x3}, {0x5}, {0x0, 0x7}, {0x2, 0x3}, {0x0, 0x2}, {0x0, 0x8}, {0x0, 0x8}, {0x1, 0x4}, {0x7, 0x8}, {0x0, 0x2}, {0x3, 0x9}, {0x6, 0x9}, {0x1, 0x8}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x8}, {0x3, 0x6}, {0x6, 0x6}, {0x0, 0x8}, {0x5, 0x9}, {0x3, 0x1}, {0x6}, {0x1, 0x5}, {0x5, 0x7}, {0x5, 0x4}, {0x5}, {0x2, 0x8}, {0x7, 0x3}, {0x5, 0x1}, {0x6, 0x1c}, {0x7, 0x9}, {0x0, 0x1}, {0x6, 0x7}, {0x0, 0x3}, {0x5, 0x5}, {0x4}, {0x5}, {0x6, 0x8}, {}, {0x2, 0x2}, {0x1, 0x6}, {0x2, 0x2}, {}, {0x0, 0x7}, {0x3}, {0x6, 0x2}, {0x0, 0x2}, {0x4, 0x1}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x9, 0xb, 0x6]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x4, 0xb3, 0x2, 0x845a, 0x7, 0x40, 0x8]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x9, 0x3b, 0x4, 0x3, 0x12, 0x4, 0x6c, 0x16, 0x0, 0x30, 0x6c, 0x60, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x4, 0xfff, 0x7, 0x3, 0x8, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xe, 0x1, 0x6, 0x2, 0x1157, 0x3ff, 0x4]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4e82, 0x5, 0x4d2e, 0x4085, 0x2, 0x3, 0x2]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1b, 0x12, 0x6c, 0x4, 0x9a, 0x2, 0x60, 0x36, 0xb, 0x5, 0x1b, 0x30, 0x9, 0xc, 0x6, 0xb, 0x60, 0x36, 0x3, 0x1, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x40, 0x7, 0xe, 0x9, 0xa0d, 0x1, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x2f, 0x60, 0x30, 0x6, 0x16, 0x1b, 0x18, 0xa, 0x1, 0xc, 0x3, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x3, 0x8, 0xc, 0x2, 0x7, 0x800, 0x930]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x48, 0x6c, 0x0, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0xa8000b1e4e6ac39a}]}]}, @NL80211_ATTR_TX_RATES={0x338, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x1, 0x1b}, {0x0, 0x1}, {0x2, 0x4}, {0x2, 0x2}, {0x6, 0x9}, {0x6, 0x4}, {0x6, 0x7}, {0x6, 0x9}, {0x6, 0x5}, {0x7, 0x7}, {0x6, 0x4}, {0x3, 0x8}, {0x0, 0x5}, {0x2, 0x4}, {0x2, 0x8}, {0x1, 0x5}, {0x6, 0x2}, {0x6, 0x1}, {0x5, 0x3}, {0x7, 0x1}, {0x2, 0x7}, {0x6, 0x9}, {0x7, 0xa}, {0x0, 0x6}, {0x3, 0xa}, {0x7, 0x4}, {0x0, 0x8}, {0x1, 0x4}, {}, {0x6, 0x5}, {0x0, 0x2}, {0x4, 0x2}, {0x1, 0x3}, {0x2, 0xa}, {0x4, 0x1}, {0x5, 0x9}, {0x1, 0x6}, {0x1}, {0x1, 0x6}, {0x1, 0x3}, {0x7, 0x7}, {0x5, 0x7}, {0x3, 0x7}, {0x7, 0x1}, {0x7, 0x8}, {0x4}, {0x0, 0x7}, {0x4, 0x2}, {0x1}, {0x7, 0x6}, {0x5}, {0x7, 0x2}, {0x1, 0xa}, {0x0, 0x6}, {0x3, 0x2}, {0x7, 0x6}, {0x0, 0x9}, {0x3, 0x6}, {0x4, 0x9}, {0x3, 0x8}, {0x0, 0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x8}, {0x1, 0x1}, {0x0, 0x6}, {0x0, 0x8}, {0x4, 0x8}, {0x5, 0x2}, {0x6, 0x8}, {0x3, 0x6}, {0x5, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x1, 0x1, 0xa, 0x4, 0x9, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x50bd, 0x0, 0x7, 0x9, 0x6, 0x6, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x3, 0x800, 0x50, 0xa, 0x0, 0x6b68]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x1000, 0xd5, 0xbf93, 0x0, 0x72, 0xa5]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0x1, 0x5, 0x8, 0x8001, 0x3, 0xe32]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6c, 0xc]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x60, 0x60, 0x24, 0x1, 0x25, 0x60, 0x16, 0x1, 0x24, 0x16, 0x60, 0xb, 0x1, 0x30, 0x2, 0x0, 0x1, 0x48, 0x24, 0x60, 0x2, 0x0, 0x3, 0x30]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x3, 0x5, 0x3, 0x9, 0x36, 0x60, 0x24, 0x9, 0x36, 0xf, 0x16, 0x3, 0x6, 0xb, 0x3, 0x16, 0x36, 0x3e, 0x12, 0x17, 0x60, 0x4, 0x48, 0x9, 0x18, 0x16, 0x18, 0x60]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x817, 0xb1a4, 0x8000, 0x800, 0xfffa, 0x1, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3ff, 0x2, 0x428, 0x2ebd, 0x4, 0x6, 0x6a]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x2c3, 0x3ff, 0xe, 0x179d, 0x0, 0x9f28]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa3, 0x100, 0x9, 0x72e, 0x2, 0x8, 0x8, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2c00, 0xc03, 0x5b9f, 0x0, 0x4, 0x9, 0x8]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x24, 0x18, 0x4, 0x1d, 0x4f, 0x48, 0x18, 0x6c, 0x16, 0x18, 0x5, 0x4, 0x30, 0x1b, 0x0]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1c, 0x81, 0x8, 0x0, 0x10, 0x100, 0x3, 0x3]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x48, 0x6, 0x30, 0x1b, 0x6, 0x18, 0x2, 0x6c, 0x3, 0x6, 0x5, 0x1, 0xc, 0x48, 0xb, 0x48, 0x5, 0x6]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6c, 0x6, 0x6, 0x48, 0x2, 0x48, 0x30]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x2, 0x1, 0xb, 0x6, 0x16, 0x36, 0x3, 0x3, 0x24, 0xb, 0x0, 0x18, 0xb, 0x12, 0xb, 0xa, 0x4, 0x60, 0x0, 0x36, 0xc, 0x18, 0x12, 0x4, 0x9, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xa460, 0x6, 0x8, 0x0, 0x0, 0x5, 0xf7]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x9}, {0x7, 0x3}, {0x1, 0x5}, {0x2, 0x3}, {0x4, 0x4}, {0x5, 0x5}, {0x1, 0x2}, {0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x3, 0x2}, {0x5, 0x3}, {0x7, 0x3}, {0x3, 0x5}, {0x5}, {0x3, 0x1}, {0x6, 0xa}, {0x0, 0x2}, {0x6, 0x8}, {0x7, 0x3}, {0x4, 0x7}, {0x6, 0xa}, {0x1, 0x7}, {0x0, 0x7}, {0x0, 0x2}, {0x1, 0x2}, {0x0, 0x5}, {0x1}, {0x1, 0x5}, {0x7}, {0x1, 0x4}, {0x5, 0x6}, {0x4, 0x9}, {0x0, 0x9}, {0x2}, {0x3, 0x8}, {0x1, 0x4}, {0x2, 0x5}, {0x2, 0xa}, {0x7, 0xa}, {0x5, 0x5}, {0x2, 0x1}, {0x4, 0x6}, {0x2}, {0x3, 0x9}, {0x7, 0x1}, {0x0, 0x3}, {0x2}, {0x0, 0xa}, {0x2, 0x5}, {0x4, 0x6}, {0x1, 0x5}, {0x5, 0x5}, {0x1}, {0x1, 0x3}, {0x3, 0x8}, {0x2, 0x4}, {0x6, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7f, 0x7, 0xfeff, 0x8, 0x4, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x3, 0x3, 0x80a, 0x3, 0xa14, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0xfff, 0x5, 0x0, 0x6, 0xd0c, 0x5]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x6, 0x8}, {0x3}, {}, {0x4, 0x3}, {0x6, 0x9}, {0x1, 0x9}, {0x7, 0x6}, {0x1, 0x5}, {0x0, 0x2}, {0x5, 0x3}, {0x5, 0x5}, {0x1, 0x2}, {0x3, 0x5}, {0x5, 0x6}, {0x3, 0x1}, {0x5, 0x8}, {0x5, 0xa}, {0x3, 0x6}, {0x4, 0x2}, {0x0, 0x4}, {0x1, 0x8}, {0x5, 0xa}, {0x5, 0x2}, {0x0, 0x8}, {0x0, 0x2}, {0x1, 0x8}, {0x0, 0x8}, {0x4, 0x6}, {}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0xa4, 0x8001, 0xc, 0x100, 0x200, 0xe000, 0x57]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4d69, 0x2f55, 0x4, 0x6, 0x33e, 0x10, 0xab, 0x3]}}]}]}, @NL80211_ATTR_TX_RATES={0x140, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x5, 0x9, 0x23, 0x68]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8f, 0xf00d, 0x81, 0x361, 0x7, 0x7ff, 0xbcb]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x4, 0x8}, {0x1, 0x9}, {0x6}, {0x3, 0x7}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x1}, {0x1}, {0x7, 0x8}, {0x1, 0x4}, {0x5, 0x7}, {0x0, 0x7}, {0x7, 0x7}, {0x0, 0x5}, {0x5, 0x9}, {0x2, 0x4}, {0x1, 0x7}, {0x7, 0x6}, {0x0, 0x1}, {0x1, 0xa}, {0x0, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {0x3, 0x9}, {0x5, 0x2}, {0x2, 0x8}, {0x2, 0x8}, {0x1, 0x5}, {0x4, 0x3}, {0x2, 0x5}, {0x1, 0x2}, {0x4, 0x4}, {0x5, 0x6}, {0x0, 0x1f}, {0x4, 0x8}, {0x0, 0x3}, {0x0, 0x4}, {0x7, 0x6}, {0x6, 0x4}, {0x1, 0x2}, {0x6, 0x8}, {0x1, 0x2}, {0x4, 0x8}, {0x4, 0x1e}, {0x4, 0xa}, {0x0, 0x4}, {0x2, 0x2}, {0x2, 0x2}, {0x1, 0x1}, {0x4, 0x5}, {0x0, 0x3}, {0x4, 0x6}, {0x4, 0x5}, {0x2, 0x4}, {0x7, 0x5}, {0x1, 0x6}, {0x7}, {0x2, 0x3}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x18, 0x30, 0x0, 0x1b, 0x36, 0x24, 0x79, 0x36, 0x6c, 0x36, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1, 0x9, 0x7, 0xb0, 0x8, 0x800, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3c23, 0x3a83, 0xfff, 0xa396, 0xfec0, 0xe95, 0xfff6, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7a, 0x402d, 0x9, 0x298, 0x3ff, 0xec3d, 0xa4ff, 0xd9]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xb, 0x36, 0x9, 0x4a, 0xb, 0x2, 0x4, 0x36, 0xb, 0x30, 0x5, 0x1, 0x60, 0x9]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0xe08}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x54, 0x2, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3a4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000001cc0)="3789a6f21a9d0bce4155884c71df107a69d7491c413ff77b4f938d33089b9361266c9e7ae6840ae61d4e0b1c8f3e167c688fb5712435aea2d043e727bc6baebfa06bfab367e616363c83e83332562579427975b83f9612eb47d3b8b8a37c47d6232eb4a7809220e5693e238524b38f54ce4240fc3083b1c3c70a5aaddd10ecf2ff2e30497a16a1d56fd0f5f92ff7801cc69a3f", 0x93) r10 = socket$inet_tcp(0x2, 0x1, 0x0) syz_80211_inject_frame(&(0x7f0000001d80), &(0x7f0000001dc0)=@ctrl_frame=@cf_end_cf_ack={{}, {0x6b6}, @device_b}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000001e00)={'veth0_to_batadv\x00', 0x800}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000001e40)=0xad3, 0x12) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001e80), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r4) 1.414406168s ago: executing program 4 (id=2698): unshare(0x400) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="c87af9708c11d98d3e815b8a06f7c991f5060ab7d2c48940fff2a4f8a53ebc9c188fa62255d7c32c46ee60846cf1bf6165d9fe835bde8ed457cefa3aec0e7942c385e128585fb7f9837179a61d51b6e41cb087ca72f0217ee5931ef26f5227a43e219b8be929cc8e12f96399e93545cf0b2a7214609be316ff40fd3a05a4c550ab25534d8b7c3d3d7e65768d98d1bee74aad6f91f7fe6b5caaac42bb9e4b937bf0b7063fc3264c59413e1e8368e7f71442686d4fe4f9b96d89117fabb7fb21c810c634b7304b3aa9d6fa", 0xca}], 0x1, 0x0, 0x0, 0x40}], 0x1, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xa, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007b0140000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x86, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x0, &(0x7f0000000000)}) 1.370073747s ago: executing program 2 (id=2699): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x1, @mcast1}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x8000, @local, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000290097ff04000000d40000000000000018000000000000002900000002"], 0x30}}], 0x2, 0x0) 1.275851325s ago: executing program 4 (id=2700): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 1.137731205s ago: executing program 2 (id=2701): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={0xffffffffffffffff, 0x0, 0x68, 0x1000, &(0x7f0000000000)="d8b6a8119ff4ea2afced60b316b88164d225967ea6d8776b1118232e51a7c7e4e69e22ec3e8d423fc741c69e404aa0520d3bd56595c748ef9f36722c911ec8a71187fc570d2f799ecf351046651649d0930048bc7037b50b5e5a122842b6652dd1dcd92029ce0269", &(0x7f0000000080)=""/4096, 0x1, 0x0, 0x94, 0x5f, &(0x7f0000001080)="1b24ec7f90354f1c282d6586cf6e1a1feb86c44766913f327b577d4ecff715023b91d9194c430458606aa6e139c8eb7c595da5e569950c2f02eb9fe35e5cd48e7d974c0a300437e5ad6250b7d43fd39c1a4b3c71ccb837a3258a2f5c99f2344c03f67abc03ce530fc6b78cf956155550498ad0587b451314347eb5272c44e813487fab5ce33f9c8ed16fbdd999b82501aff672bc", &(0x7f0000001140)="0f2b33b789a0808a55ae046fa560c37c75c9cdc6945b9208fcd85fc01193a6cc454e714b67b8a1d6a81ad503feb6b846b15d7c203e612744e5f4cdb722fb8f003f4d7cef841484add1507821766b7daca6c19d65f18d4b494cb212c5e84651", 0x0, 0x0, 0x1}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x19, 0xa, &(0x7f0000001240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x23687d9e, 0x0, 0x0, 0x0, 0xfb}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x2}, @tail_call]}, &(0x7f00000012c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001340)={0x3, 0x1, 0x649fbca1, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000001380)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000013c0)=[{0x4, 0x5, 0x5, 0x8}, {0x5, 0x2, 0xd, 0x6}, {0x4, 0x3, 0xb}, {0x2, 0x5, 0x0, 0xb}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001680)={r0, 0x0, 0x55, 0x7c, &(0x7f00000014c0)="e7556070dfca59ea3c535869fcdac119f7ca70af61be5c23c1b4c69609ac1a6518bbafaa79db2b884bd16251a2d3d606ba49231239b2db50b142082f862f5b0c548219e016bcd8d1c0a43048f9de76a72071c69548", &(0x7f0000001540)=""/124, 0xffff0001, 0x0, 0x35, 0x41, &(0x7f00000015c0)="0a670271f8397ea5c1dcc899500b234064ce7657ad61c095c5a013ad09e747b0602cee9bae08a0f3781fef2ce2b8ca5b4ce395572d", &(0x7f0000001600)="4f1c25eed2da5510bd27c2d404e3b50c774b17f03266b42349298ff451e4310055e5a9a025c098eec4fb4ad019af3eb0c5cc528ebf7b11dda0a65a06c131438601", 0x0, 0x0, 0x8}, 0x50) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000001700)={0xe2, 0x5}, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000001740)="42ea5a5296cdcf1ddd34da206cb1795e5d493f8b6a7ee3209db86e2528d198a119ca37c15bda7afa77f386cc59c63f00959f46934e84dbd2a29f1ec25a1b3ff7f463b2d351bb2eefaef123944d9a9fcb66922881c018117ddcb86c0f5c3131b098b3df680a7bddaa2bb76e0ee09321d880fdc374dafc", 0x76, 0x4000, 0x0, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000017c0)={0x1f, 0x0, @none}, &(0x7f0000001800)=0xe, 0x800) connect$bt_l2cap(r2, &(0x7f0000001840)={0x1f, 0xf123, @none, 0x400, 0x1}, 0xe) r3 = socket$inet6(0xa, 0x8000a, 0x76) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000001880)={0x1, 'ip6erspan0\x00', {}, 0x2}) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x80000010}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@bloom_filter={0x1e, 0x0, 0x40000000, 0x8, 0x2004, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1, 0x2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a40)={0x1b, 0x0, 0x0, 0xbd, 0x0, r4, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x0) r5 = socket$inet(0x2, 0xa, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000001ac0)={0x0, 'team_slave_1\x00', 0x1}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r6, &(0x7f0000001b40)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x0, 0x3}}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000001b80)={0x7f91, 0x1, 0x3, 0x3, 0x0}, &(0x7f0000001bc0)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000001c00)={r7, 0xd, 0xfff8, 0x6, 0x5, 0x8}, &(0x7f0000001c40)=0x14) getsockopt(r1, 0xffffff81, 0x0, &(0x7f0000001c80)=""/107, &(0x7f0000001d00)=0x6b) r8 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000001d40), &(0x7f0000001dc0)=0x60, 0x80000) getsockopt$nfc_llcp(r8, 0x118, 0x1, &(0x7f0000001e00)=""/127, 0x7f) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000001e80)={r7, @in6={{0xa, 0x4e21, 0x4, @private2, 0x8}}}, &(0x7f0000001f40)=0x84) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001fc0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x1c, r10, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000020c0)=0x8) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002100), 0xffffffffffffffff) 1.022450813s ago: executing program 4 (id=2702): r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000140)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x800, 0x70bd2c, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0xa, 0x9}, {0x8, 0x7}, {0xe, 0xfff6}}}, 0x24}}, 0x24000040) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYRESDEC=r1], 0x3c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, 0x0, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000440)="580000001400192340834b80043f679a10ff3d425f0600ffa600000000becc4b381eaadc1af23457e792945f918be4f04247e374b97164009400050028925aaa160000c600ff5f442059e12817c009fb2366e6cfe1dae7d9", 0x58}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001200), r5) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000ffdbdf25150000000c00018008000100", @ANYRES32=r8, @ANYBLOB="0536609411dc9d6199d90b4faf409072d7552d3acc0f1f2bce74cbd0319805d63f8e9d369d680ec7209a27c21c374fb0723ba51611394e8569589dbbeeac7e4e973b11ec41528bafdf066f873ee7e89100adf24b58ea41c77a81981837ba53325f2000b4e6de46010e43b55a46c7f42ae6162cc7dfc7b5ec032c9acb898042e6975a7822584e1afbe5d954352aa08a9645c33a90e402249729b86295277a39e017bc09bdab87695ddd6fe176194e"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x2b, r8}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000014c0), r9) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010029bd7000fcdbdf251200000008000900ff0f0000180001801400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x8044844}, 0x800) sendmsg$inet(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x40080) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8169540}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x5, 0x1, 0x380, 0x0, 0x0, {0x5, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0xb2dd1dfc3770c91b) syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r11, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 926.439288ms ago: executing program 2 (id=2703): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) r1 = accept(r0, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000380)={0x0, 0xffffffffffffffff}) connect$inet(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5e8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x14c, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffe}, @mark={0xc, 0x15, {0x35075c, 0x6}}]}, 0x14c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00eb8530654e316056a3d6000065089a1012a5020010080001000100000022731d62997bb8c64460e702b7e2a14bac0c3c93becb6a6021a5ff43306d6da98c3bd4d9e4c3eef260d2b521f8431ee7ffcea2"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x50, r5, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x29, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_a, @initial, {0x2, 0x4}, @value=@ver_80211n={0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}}, @addba_resp={0x3, 0x1, {0x3, 0x26, {0x0, 0x0, 0xe, 0x4}, 0x2}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, 0x0, 0x4008000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x54, 0x9, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xbf}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4e}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x4051) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20044084}, 0x800) 793.113821ms ago: executing program 2 (id=2704): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x800, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r1) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000badc194ae974f83b259c052fcd65272281bf4cfead5ecc13bf90cc03547a5c8459", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000580)=""/4096}, 0x20) 731.6464ms ago: executing program 4 (id=2705): socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd700000000000647262675f70725f686d61635f736861333834"], 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f40700090400", 0x10) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000004780)='rcu_utilization\x00'}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) 730.092217ms ago: executing program 0 (id=2706): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe64, 0xffffff01, @loopback, 0xc3}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000881, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @loopback, 0x80000000}, 0x1c) 666.250559ms ago: executing program 3 (id=2707): r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01170000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) close(0x3) 621.135204ms ago: executing program 1 (id=2708): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x4}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) accept4$x25(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x12, 0x80800) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x3}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, 0x0, 0x4) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 587.055596ms ago: executing program 3 (id=2709): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000001c0)={r4, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002200)=[{&(0x7f0000000440)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001940)=[{&(0x7f0000000680)="a8e5c68ed2808235f733f5daeb16d12ca4cf13668ac403fec6a9ccf40e6ae891ec9ae662b91633f3cd2d31f056506c9bc81a8c17bbfedf9389a430c1ff7e00309be47b13795c29e6ebde51817da2600ce307ba589f15cacfc472f755b7041db0c1a39251115a2ea61931fb8824ae2fc9e86c20676713d129a5bd8b993b9815dba36648a189e7553cdbfc2fd2249c75074fbeb7ee34f6ee5a704ce6cb7501adecef2f30039ce2ec1a620ce322f629d52aeec4aff9df0100f44ca098ca856e63215a846897e4bf95019ec125b91ceff2874218da61be9a07fe301384bf21", 0xdd}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f00000005c0)="861ecbdc2505cd42312a785e7312d09c258d09069bff0c1aa52f6c9707cc42123184509b54c6992c06e942c8b3915f515436cd10c543b98ce08dd156780dfe2963f563d60e16c65fd089ceb7aa71f8b3f0086f3e51626e14048f675ed1d1864e20ca7f04ded16d", 0x67}, {&(0x7f0000001780)="26ce0f4658d1ae3483c9387b5dd986be06b523b59a5fbd651e4b5e2b727e96c4d97bf1cff925b727f285141ba3de667da4590cbb5c1b7a2b465f1914b6d878a2e7c8b78d08c032096e678975dc9b2c7726f7276dfc7bc1857fc217f4f70a82680f6527aeaf", 0x65}, {&(0x7f0000001800)="658fe4c445743c2f66042e75ea53f4c428d8384015954529ee6b9b3c10c2cad128dfb1c418501ee462e7ccb49e94850bd0e8b5be914efc8ba5bc18b80d98251bd15d8115f1be853a6dd2c5e8b2308eaafdeb7d25cb02fe4f10562d0d84ae53d81806f1aecd5d44eb0c8b7ce764bb4111ebd6b34d91affad7cccf5bfe34458608c9812d09f97ef4ae5db03d4a64a64bb02f6246d8be0212a1b13f3dbe3b6fe5c912f54555edb31e", 0xa7}, {&(0x7f00000018c0)="6a22edbfdc2fb2980a94d48e2f52988eb54042888f8db077626b08c03c0bc8f36e8b933c80b1f18daa30fa2a21b52c4178e7075d5a5c4b018f32c54a88ebcd1660f66fc4571d277caa8f64a7563c458b98b67b", 0x53}], 0x6, &(0x7f0000001a40)=ANY=[@ANYBLOB="300000003687d4622b06b82e881e1dd0ec130000840000000100000003000900020000073300000006000000", @ANYRES32=0x0, @ANYBLOB="20000000000000008400000008000000fc01000000000000000000000000000020000000000000008400000002000000800009800900000007000000", @ANYRES32=0x0], 0x70, 0x2d3b291759d619b7}, {&(0x7f0000001ac0)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000001b00)="b88e5bf26370b195cf3828189d34b140a4196bf16f9853542ec0cc5948cc9aeacaf71e7faa8127f0439edae97c42d9472fc58bbb1dbb9922ee287af77a34d10eec1a25a5ac9e1f3f3deff57de8db5f3bd4600220dce68e60ea78699d425e74fe6679f2b33591234574dd518ab812b8289fda8916da03d06d2905ef5af9749999506884f09e95ec616b032ba320e4e8efd46f294e0bd78f2aedd19bfe8df73baed1438d907c5dc097d9e7a5659fb630f73e22da66c604fa8e6e2359f06fbd9051b511ae53541e5781606cde9581cfeff092d912cdf8fa2c944b67da9c0e29658ecb4a40552676b1d4a81a4e", 0xeb}, {&(0x7f0000001c00)="ca0935a06692d069209b030c1ae7f0d56539069e01664c2126c4fc6ee6b28b7a85a65e5f2a09af831377239fb2637f880045456f1d0c7e7d7587d20aa6a15a39524e9aa5ab7fce96019d90fb9f4ae08863181b1eb4bf17fe2e354f593afa03df05b3c3f1e082c7d4d5e44b5e88082cd7c5f9ac27a989", 0x76}, {&(0x7f0000001c80)="7c857e9632cb088c3d8348", 0xb}, {&(0x7f0000001cc0)="2633110921e4ccf5f76732795abfb784fc842263e4d00b31abc6b375c3bd4a66317d788bb4968423c6c386045179c70c8bd2d8d561b057514e46f05cf9d7d3e6e3d6ecc4bd3259974083cd4f6324f2ed45cf9cc84395e4351251ca2d78bc2ee9a42934b95356af6ff99c5eb9", 0x6c}], 0x4, &(0x7f0000001d80)=[@dstaddrv6={0x20, 0x84, 0x8, @private1}], 0x20, 0x4000001}, {&(0x7f0000001dc0)=@in6={0xa, 0x4e22, 0x8, @loopback}, 0x1c, &(0x7f0000002040)=[{&(0x7f0000001e00)="30cdccee5af270b324bceb78d296ccb4b17cc3e3fae6e2efdcfd9affd5b6a645ead32cf910eaac4e97440ca98be59c1c4162aa7f", 0x34}, {&(0x7f0000001e40)="38bb18020692b4670a539b6c9de2174547fdfdc23695875c1bcbbe411fe443f3796aa51d7377263ddd1769131819192237f3393c51d7dfff66f35735a2c80790931676b0e40b610ece3f97f80515dc731e1f724adddb4b3f02bab3ce9b696ae98571ba6881327f5f820298e6077255ae9becbc503ffef3b5c54cad694fac0d650a294bca1647eb6c506822a7d87afff6bdb2f9a1b79d8f58ceaba233b2685bc3d6069438e5f7779357e971cee39cfff6b6e9afe042a96af9", 0xb8}, {&(0x7f0000001f00)="bfdbdd68ef0510862e8cc3de2c7a979f416149e02ccf6538d900acbbe82786e6df7b42ae11c7348528ca0d5365bba44355d6b1f2e00f832864749ce3e00bd4b51d6d4f37605d22405f5b26055c662676031111bfbed9d3be241dee8389cd445a3a6d042f396c0bfa6ba9", 0x6a}, {0x0}, {&(0x7f0000001fc0)="2893c706f08d44cfd6f6af3e235dd93024989797bfc644e2f3311951b48dfce022979d9231a772502eece972e65bb5adc42ddba2536fcb85d7df2a45b67da4ae1e303ebe69bc19f1895e56247caebf909056f4b918713be771cafc4203d0f6c65e1933981c336caee23ce2d3", 0x6c}], 0x5, &(0x7f00000020c0)=[@authinfo={0x18, 0x84, 0x6, {0xed28}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @sndrcv={0x30, 0x84, 0x1, {0x200, 0x8001, 0x8002, 0x81, 0xd77, 0xc, 0x4, 0x1}}, @sndrcv={0x30, 0x84, 0x1, {0x9a4, 0x0, 0x8206, 0x3, 0x2, 0xfffffffd, 0x6, 0x2}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x200, 0x3, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x5617, 0x6, 0x8, 0x1, 0x4, 0x723, 0x3ff}}, @sndrcv={0x30, 0x84, 0x1, {0x3f74, 0x4, 0x208, 0x3, 0x0, 0x2, 0x5, 0x1, r4}}], 0x110, 0x11}], 0x3, 0x4000) close(r1) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x300000000000000}, 0x0) 515.305198ms ago: executing program 1 (id=2710): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1b1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)={0x30, 0x5e, 0xe25, 0x0, 0x3, "", [@generic="5cc64a2c382eb587c71e47e831136b2fdf460be04c347b96194fa88329"]}, 0x30}], 0x1}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 514.659802ms ago: executing program 0 (id=2711): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x70bd24, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x26a7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8084}, 0x80) 351.352971ms ago: executing program 3 (id=2712): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x1, @mcast1}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x8000, @local, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x30}}], 0x2, 0x0) 350.247994ms ago: executing program 0 (id=2713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x600, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 302.672834ms ago: executing program 1 (id=2714): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x100, r2, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffd5e, 0x76}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}], @NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_b, @broadcast, @random="28bc0f62bd14", {0xd, 0x7}}, 0x3, @void}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xefe}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x73, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9}, @broadcast, @device_a, @random="1b1bc1c213a7", {0x9, 0x6}, @value=@ver_80211n={0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x200, 0x57, @random=0x6, @void, @void, [{0xdd, 0x4b, "8c14346063c8e3a13fd3466283507c6868acb707a5010bfce94d2a628eeee16738655874b7c6cddb3afabafe36b9dfff087f8979963118c85117ec2142880411b917dedd562e4d187134ff"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x111b}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x9, 0xfffd, 0x9, 0x7ff, 0x91, 0x5, 0x7f]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x8080}, 0x800) 192.803133ms ago: executing program 3 (id=2715): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x4, 0xfff, 0x5}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x19, &(0x7f0000000040)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf1b6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0xff2, &(0x7f0000002e00)=""/4082, 0x0, 0xb}, 0x94) 90.035339ms ago: executing program 0 (id=2716): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) 89.413174ms ago: executing program 1 (id=2717): socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd700000000000647262675f70725f686d61635f73686133"], 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000010000d0400"/20, @ANYRES32, @ANYBLOB="01000000000002004c0012800b0001"], 0x6c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f40700090400", 0x10) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006b40)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000f30000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000010aa0c000280050001000000000008000740000000000000569f4b176d475bab10d7def078e526dfe01454afae46285bbbe9282eb48137ff06feec633668a089a05020bec31f6faf3f94c7da8a4b178c1a7f95cd653efa4376580f2c30200dad09a8fc7fc8ab5d701dce63bc899a0b5e7d3589e91598ac02de46102339c4e6bad68aa03ebb9d29fd9a77d393e3b6e98ad609dc85430d273d9aa3d39cc68a2ca539b6967ba7061d34428680ab90d32a7b3ff23a5055"], 0x94}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = accept(r3, &(0x7f00000003c0)=@sco={0x1f, @none}, &(0x7f0000000180)=0x80) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000240)={@none, 0x4}) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000004780)='rcu_utilization\x00', r6}, 0x18) unshare(0x8040480) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x42c0ce61274eddda) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) 77.758625ms ago: executing program 3 (id=2718): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x80000001}}, 0xb8}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, @in6={0xa, 0x4e20, 0xd45a, @empty, 0x7}], 0x54) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e8, 0x200, 0x2a0, 0x98, 0x130, 0x130, 0x350, 0x350, 0x350, 0x350, 0x350, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x48}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @private=0xa010101, 0xffffffff, 0x0, 'lo\x00', 'lo\x00', {}, {}, 0x0, 0x1}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xffffffff, 0x8000, 0x8d84, 0xcafc, 0xbfffff8e, 0x70, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x80, 0x3}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x84, 0x0, 0x3}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xffffffff, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21}}}, {{@ip={@empty, @multicast2, 0xff, 0xffffff00, 'vlan1\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x33, 0x2}, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x600000000000000}}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @multicast}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb4, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb4}, 0x1, 0x0, 0x0, 0x810}, 0x0) gettid() r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum64={0x9, 0x0, 0x0, 0x13, 0x0, 0x1}]}}, &(0x7f0000000100)=""/141, 0x26, 0x8d, 0x1, 0x7}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x58}}, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000040)="a08eae73f2270ee252afceaf1897fae1d59563032b4960885423fced175a385d9b6761709ff2ed2c981ffe1fb7f85a971f7308350382fe45701f738788360c38e8ea02c9bc") r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000020900020073797a32000000000900010073797a3000000000080005400000001f5c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe0}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="8d0be2a38c5b080db187dd50a968b22a3bb1365277a2b5f5caaaf7fbfa479a0b0000a87a5de7e4398e8131c5939784"], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x0) 0s ago: executing program 0 (id=2719): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1b1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)={0x30, 0x5e, 0xe25, 0x0, 0x3, "", [@generic="5cc64a2c382eb587c71e47e831136b2fdf460be04c347b96194fa88329"]}, 0x30}], 0x1}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) kernel console output (not intermixed with test programs): ibutes in process `syz.0.1275'. [ 235.301083][T10211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1276'. [ 235.319622][T10209] tipc: Started in network mode [ 235.324818][T10209] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 235.341895][T10209] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 235.354836][T10209] tipc: Enabled bearer , priority 10 [ 235.631813][T10221] syz_tun: entered allmulticast mode [ 235.650246][T10221] syz_tun: left allmulticast mode [ 235.818745][T10229] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1283'. [ 235.841926][T10233] xt_TPROXY: Can be used only with -p tcp or -p udp [ 235.960669][T10237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1287'. [ 236.060358][T10237] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 236.422814][T10269] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1299'. [ 236.479391][ T7799] tipc: Node number set to 1 [ 236.588929][T10276] IPv4: Oversized IP packet from 127.202.26.0 [ 236.803202][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1308'. [ 236.822035][T10291] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1310'. [ 237.045911][T10298] lo: entered allmulticast mode [ 238.115641][T10322] lo: entered allmulticast mode [ 238.160028][T10322] lo: left allmulticast mode [ 239.053647][T10353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.094617][T10355] syz_tun: entered allmulticast mode [ 239.142402][T10355] syz_tun: left allmulticast mode [ 239.343877][T10368] netlink: 'syz.3.1342': attribute type 3 has an invalid length. [ 239.640607][T10381] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1347'. [ 239.827829][T10389] syz_tun: entered allmulticast mode [ 239.845283][T10389] syz_tun: left allmulticast mode [ 240.487901][T10419] lo: entered allmulticast mode [ 240.506561][T10419] lo: left allmulticast mode [ 240.516718][T10422] xt_hashlimit: Unknown mode mask FFFFFF90, kernel too old? [ 240.525315][T10423] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1362'. [ 240.550094][T10423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1362'. [ 240.559132][T10423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1362'. [ 240.851119][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1370'. [ 240.961135][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1373'. [ 241.055343][T10450] netlink: 'syz.2.1374': attribute type 3 has an invalid length. [ 241.097564][T10456] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1377'. [ 241.500557][T10481] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1387'. [ 241.520530][T10482] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1387'. [ 241.922784][T10501] Bluetooth: MGMT ver 1.23 [ 241.933106][T10501] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1390'. [ 242.042545][T10507] rdma_rxe: rxe_newlink: failed to add bond0 [ 242.084387][T10509] sctp: [Deprecated]: syz.0.1394 (pid 10509) Use of int in max_burst socket option. [ 242.084387][T10509] Use struct sctp_assoc_value instead [ 242.214788][T10514] syz_tun: entered allmulticast mode [ 242.231512][T10514] syz_tun: left allmulticast mode [ 242.376891][T10522] xt_hashlimit: Unknown mode mask FFFFFFFF, kernel too old? [ 242.385521][T10518] netlink: 'syz.4.1398': attribute type 5 has an invalid length. [ 242.746887][T10539] FAULT_INJECTION: forcing a failure. [ 242.746887][T10539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.779494][T10539] CPU: 0 UID: 0 PID: 10539 Comm: syz.3.1405 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 242.779526][T10539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 242.779549][T10539] Call Trace: [ 242.779557][T10539] [ 242.779567][T10539] dump_stack_lvl+0x189/0x250 [ 242.779598][T10539] ? __pfx____ratelimit+0x10/0x10 [ 242.779626][T10539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.779651][T10539] ? __pfx__printk+0x10/0x10 [ 242.779679][T10539] ? __might_fault+0xb0/0x130 [ 242.779716][T10539] should_fail_ex+0x414/0x560 [ 242.779750][T10539] _copy_from_user+0x2d/0xb0 [ 242.779775][T10539] ___sys_sendmsg+0x158/0x2a0 [ 242.779799][T10539] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.779860][T10539] ? __fget_files+0x2a/0x420 [ 242.779886][T10539] ? __fget_files+0x3a0/0x420 [ 242.779925][T10539] __x64_sys_sendmsg+0x19b/0x260 [ 242.779949][T10539] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 242.779979][T10539] ? __pfx_ksys_write+0x10/0x10 [ 242.780000][T10539] ? rcu_is_watching+0x15/0xb0 [ 242.780030][T10539] ? do_syscall_64+0xbe/0x3b0 [ 242.780063][T10539] do_syscall_64+0xfa/0x3b0 [ 242.780089][T10539] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.780116][T10539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.780137][T10539] ? clear_bhb_loop+0x60/0xb0 [ 242.780168][T10539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.780189][T10539] RIP: 0033:0x7f341af8e929 [ 242.780207][T10539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.780225][T10539] RSP: 002b:00007f341be19038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.780247][T10539] RAX: ffffffffffffffda RBX: 00007f341b1b5fa0 RCX: 00007f341af8e929 [ 242.780262][T10539] RDX: e821651e0a1b45fc RSI: 0000200000000800 RDI: 0000000000000005 [ 242.780276][T10539] RBP: 00007f341be19090 R08: 0000000000000000 R09: 0000000000000000 [ 242.780289][T10539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.780301][T10539] R13: 0000000000000000 R14: 00007f341b1b5fa0 R15: 00007ffc93573068 [ 242.780333][T10539] [ 243.127631][T10548] Cannot find map_set index 0 as target [ 243.158972][T10551] lo: entered allmulticast mode [ 243.167661][T10551] lo: left allmulticast mode [ 243.258091][T10555] syzkaller1: entered promiscuous mode [ 243.266781][T10555] syzkaller1: entered allmulticast mode [ 244.420204][T10602] syzkaller0: entered promiscuous mode [ 244.448466][T10602] syzkaller0: entered allmulticast mode [ 244.660117][T10610] __nla_validate_parse: 5 callbacks suppressed [ 244.660135][T10610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1431'. [ 244.832355][T10614] syz_tun: entered allmulticast mode [ 244.854908][T10614] syz_tun: left allmulticast mode [ 245.070142][T10622] syz_tun: entered allmulticast mode [ 245.128959][T10622] syz_tun: left allmulticast mode [ 245.185877][T10626] FAULT_INJECTION: forcing a failure. [ 245.185877][T10626] name failslab, interval 1, probability 0, space 0, times 0 [ 245.216689][T10626] CPU: 1 UID: 0 PID: 10626 Comm: syz.0.1439 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 245.216718][T10626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 245.216728][T10626] Call Trace: [ 245.216737][T10626] [ 245.216745][T10626] dump_stack_lvl+0x189/0x250 [ 245.216772][T10626] ? __pfx____ratelimit+0x10/0x10 [ 245.216798][T10626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.216820][T10626] ? __pfx__printk+0x10/0x10 [ 245.216862][T10626] should_fail_ex+0x414/0x560 [ 245.216894][T10626] should_failslab+0xa8/0x100 [ 245.216920][T10626] __kmalloc_cache_noprof+0x70/0x3d0 [ 245.216942][T10626] ? sctp_add_bind_addr+0x8c/0x370 [ 245.216980][T10626] sctp_add_bind_addr+0x8c/0x370 [ 245.217009][T10626] sctp_copy_local_addr_list+0x30b/0x4e0 [ 245.217037][T10626] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 245.217060][T10626] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 245.217086][T10626] ? sctp_v6_is_any+0x64/0x80 [ 245.217113][T10626] ? sctp_copy_one_addr+0x93/0x360 [ 245.217140][T10626] sctp_bind_addr_copy+0xb3/0x3c0 [ 245.217165][T10626] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 245.217190][T10626] sctp_connect_new_asoc+0x2e0/0x690 [ 245.217223][T10626] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 245.217249][T10626] ? __local_bh_enable_ip+0x12d/0x1c0 [ 245.217279][T10626] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 245.217297][T10626] ? security_sctp_bind_connect+0x7e/0x2e0 [ 245.217324][T10626] sctp_sendmsg+0x155c/0x2810 [ 245.217366][T10626] ? __pfx_sctp_sendmsg+0x10/0x10 [ 245.217397][T10626] ? aa_sk_perm+0x81e/0x950 [ 245.217427][T10626] ? __pfx_aa_sk_perm+0x10/0x10 [ 245.217454][T10626] ? sock_rps_record_flow+0x19/0x410 [ 245.217479][T10626] ? inet_sendmsg+0x2f4/0x370 [ 245.217504][T10626] __sock_sendmsg+0x19c/0x270 [ 245.217529][T10626] ____sys_sendmsg+0x52d/0x830 [ 245.217565][T10626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.217604][T10626] ? import_iovec+0x74/0xa0 [ 245.217631][T10626] ___sys_sendmsg+0x21f/0x2a0 [ 245.217651][T10626] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.217709][T10626] ? __fget_files+0x2a/0x420 [ 245.217753][T10626] ? __fget_files+0x3a0/0x420 [ 245.217792][T10626] __sys_sendmmsg+0x227/0x430 [ 245.217818][T10626] ? __pfx___sys_sendmmsg+0x10/0x10 [ 245.217834][T10626] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 245.217893][T10626] ? ksys_write+0x22a/0x250 [ 245.217918][T10626] ? __pfx_ksys_write+0x10/0x10 [ 245.217937][T10626] ? rcu_is_watching+0x15/0xb0 [ 245.217975][T10626] __x64_sys_sendmmsg+0xa0/0xc0 [ 245.217997][T10626] do_syscall_64+0xfa/0x3b0 [ 245.218024][T10626] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.218049][T10626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.218068][T10626] ? clear_bhb_loop+0x60/0xb0 [ 245.218093][T10626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.218123][T10626] RIP: 0033:0x7f670ef8e929 [ 245.218141][T10626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.218157][T10626] RSP: 002b:00007f670fdb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 245.218177][T10626] RAX: ffffffffffffffda RBX: 00007f670f1b5fa0 RCX: 00007f670ef8e929 [ 245.218191][T10626] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 245.218202][T10626] RBP: 00007f670fdb6090 R08: 0000000000000000 R09: 0000000000000000 [ 245.218214][T10626] R10: 00000000200100c0 R11: 0000000000000246 R12: 0000000000000002 [ 245.218225][T10626] R13: 0000000000000000 R14: 00007f670f1b5fa0 R15: 00007ffd303b5f98 [ 245.218256][T10626] [ 245.843868][T10638] netlink: 'syz.1.1445': attribute type 4 has an invalid length. [ 245.959668][T10647] netlink: 'syz.1.1445': attribute type 4 has an invalid length. [ 245.992223][T10640] tipc: Enabled bearer , priority 0 [ 246.034026][T10639] tipc: Resetting bearer [ 246.081372][T10639] tipc: Disabling bearer [ 246.106273][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1447'. [ 246.276505][T10658] lo: entered allmulticast mode [ 246.329002][T10658] lo: left allmulticast mode [ 246.548345][T10670] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 246.976014][T10690] vlan0: entered promiscuous mode [ 247.021984][T10690] vlan0: entered allmulticast mode [ 247.032615][T10690] veth0_vlan: entered allmulticast mode [ 247.039888][T10690] team0: Port device vlan0 added [ 248.474364][T10724] netlink: 'syz.2.1477': attribute type 1 has an invalid length. [ 248.688100][T10728] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.718809][T10728] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.765121][T10739] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1483'. [ 248.797182][T10739] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1483'. [ 248.942571][T10728] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.960440][T10728] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.152488][T10728] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.176051][T10728] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.226978][T10761] tipc: Enabling of bearer rejected, already enabled [ 249.369828][T10772] IPv4: Oversized IP packet from 127.202.26.0 [ 249.378496][T10728] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.432439][T10728] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.457081][T10770] netlink: 'syz.1.1495': attribute type 1 has an invalid length. [ 249.607334][ T6260] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.625060][ T6260] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.675580][ T6260] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.704493][ T6260] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.758503][ T6263] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.768958][ T6263] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.786041][T10787] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1502'. [ 249.821270][ T6263] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.845547][ T6263] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.057155][T10796] tipc: Enabled bearer , priority 0 [ 250.066915][T10796] syzkaller0: entered promiscuous mode [ 250.076059][T10796] syzkaller0: entered allmulticast mode [ 250.164939][T10796] tipc: Resetting bearer [ 250.219480][T10795] tipc: Resetting bearer [ 250.258362][T10803] netlink: 'syz.0.1507': attribute type 1 has an invalid length. [ 250.259116][T10795] tipc: Disabling bearer [ 250.392162][T10806] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1508'. [ 250.401443][T10806] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1508'. [ 250.547787][T10814] netlink: 'syz.2.1512': attribute type 1 has an invalid length. [ 250.948948][T10829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1518'. [ 251.028168][T10831] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1519'. [ 251.596438][T10856] xt_TPROXY: Can be used only with -p tcp or -p udp [ 251.721295][T10861] netlink: 'syz.3.1531': attribute type 1 has an invalid length. [ 251.733925][T10861] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1531'. [ 251.744552][T10861] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1531'. [ 251.746235][T10863] IPv4: Oversized IP packet from 127.202.26.0 [ 251.857287][T10866] tipc: Enabling of bearer rejected, already enabled [ 252.056184][T10876] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1537'. [ 252.319092][T10881] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1540'. [ 253.142239][T10911] netlink: 'syz.0.1549': attribute type 21 has an invalid length. [ 253.164465][T10911] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1549'. [ 253.220082][T10909] macvlan5: entered promiscuous mode [ 253.437176][T10911] netlink: 'syz.0.1549': attribute type 4 has an invalid length. [ 253.497246][T10911] netlink: 'syz.0.1549': attribute type 5 has an invalid length. [ 254.117255][T10934] 0·: renamed from hsr_slave_1 (while UP) [ 254.137686][T10934] 0·: entered allmulticast mode [ 254.145992][T10934] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 254.406340][T10940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.510554][T10945] lo: entered allmulticast mode [ 254.518547][T10945] lo: left allmulticast mode [ 254.781472][T10956] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 254.799478][T10956] openvswitch: netlink: Message has 8454 unknown bytes. [ 254.817337][T10956] netlink: 'syz.0.1563': attribute type 28 has an invalid length. [ 255.202063][T10973] IPv4: Oversized IP packet from 127.202.26.0 [ 255.275914][T10976] batadv0: left allmulticast mode [ 255.285393][T10976] batadv0: left promiscuous mode [ 255.336172][T10976] bridge0: port 3(batadv0) entered disabled state [ 255.386936][T10976] bridge_slave_0: left allmulticast mode [ 255.403159][T10976] bridge_slave_0: left promiscuous mode [ 255.419815][T10976] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.450081][T10976] bridge_slave_1: left allmulticast mode [ 255.464577][T10976] bridge_slave_1: left promiscuous mode [ 255.480711][T10976] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.527508][T10976] bond0: (slave bond_slave_0): Releasing backup interface [ 255.555617][T10976] bond0: (slave bond_slave_1): Releasing backup interface [ 255.592234][T10976] team0: Port device team_slave_0 removed [ 255.634326][T10976] team0: Port device team_slave_1 removed [ 255.661128][T10976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.668565][T10976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.684830][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.722520][T10976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.794335][T10991] __nla_validate_parse: 4 callbacks suppressed [ 255.794357][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1575'. [ 255.860071][T10991] macsec1: entered allmulticast mode [ 255.875261][T10991] bond0: entered allmulticast mode [ 255.881172][T10991] bond_slave_0: entered allmulticast mode [ 255.887422][T10991] bond_slave_1: entered allmulticast mode [ 255.899954][T10991] bond0: left allmulticast mode [ 255.905010][T10991] bond_slave_0: left allmulticast mode [ 255.911403][T10991] bond_slave_1: left allmulticast mode [ 255.976159][T10995] netlink: 'syz.0.1577': attribute type 1 has an invalid length. [ 256.238822][T11013] delete_channel: no stack [ 256.307740][T11013] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1582'. [ 256.343822][T11019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1584'. [ 256.510842][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1587'. [ 256.535327][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1587'. [ 256.548517][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1587'. [ 256.811333][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1590'. [ 256.847685][T11036] lo: entered allmulticast mode [ 256.867920][T11036] lo: left allmulticast mode [ 256.940005][ T6263] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 256.956283][ T6263] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 256.969599][ T7800] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 257.154230][T11050] xt_TPROXY: Can be used only with -p tcp or -p udp [ 257.293775][T11057] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1600'. [ 257.318165][T11054] wg1 speed is unknown, defaulting to 1000 [ 257.340476][T11054] wg1 speed is unknown, defaulting to 1000 [ 257.348160][T11054] wg1 speed is unknown, defaulting to 1000 [ 257.374657][T11054] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 257.440152][T11062] xt_hashlimit: max too large, truncated to 1048576 [ 257.464049][T11054] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 257.496634][T11054] wg1 speed is unknown, defaulting to 1000 [ 257.504892][T11054] wg1 speed is unknown, defaulting to 1000 [ 257.513298][T11054] wg1 speed is unknown, defaulting to 1000 [ 257.522295][T11054] wg1 speed is unknown, defaulting to 1000 [ 257.530550][T11054] wg1 speed is unknown, defaulting to 1000 [ 257.681078][T11072] netlink: 'syz.2.1608': attribute type 21 has an invalid length. [ 257.699314][T11072] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1608'. [ 257.725410][T11072] netlink: 'syz.2.1608': attribute type 4 has an invalid length. [ 257.739901][T11072] netlink: 'syz.2.1608': attribute type 5 has an invalid length. [ 257.779513][T11072] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1608'. [ 257.829723][ T7800] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 257.993197][ T7800] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 258.271538][T11102] team0: Device vlan0 failed to register rx_handler [ 258.471763][T11122] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 258.528662][T11124] lo: entered allmulticast mode [ 258.574054][T11124] lo: left allmulticast mode [ 258.874978][T11134] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 259.238846][T11147] netlink: 'syz.3.1631': attribute type 21 has an invalid length. [ 259.254583][T11147] netlink: 'syz.3.1631': attribute type 4 has an invalid length. [ 259.278746][T11147] netlink: 'syz.3.1631': attribute type 5 has an invalid length. [ 259.582419][T11122] wg1 speed is unknown, defaulting to 1000 [ 259.595262][T11135] rdma_rxe: rxe_newlink: failed to add bond0 [ 259.874921][T11159] macsec1: entered allmulticast mode [ 259.908454][T11159] bond0: entered allmulticast mode [ 259.928918][T11159] bond0: left allmulticast mode [ 260.494791][T11191] netlink: 'syz.0.1642': attribute type 1 has an invalid length. [ 260.740731][T11206] lo: entered allmulticast mode [ 260.969956][T11219] __nla_validate_parse: 9 callbacks suppressed [ 260.969979][T11219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1647'. [ 261.005529][T11220] tipc: Enabling of bearer rejected, already enabled [ 261.294318][T11235] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1655'. [ 261.308643][T11236] IPv4: Oversized IP packet from 127.202.26.0 [ 261.350222][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 261.431325][T11243] lo: entered allmulticast mode [ 261.553627][T11249] FAULT_INJECTION: forcing a failure. [ 261.553627][T11249] name failslab, interval 1, probability 0, space 0, times 0 [ 261.574165][T11249] CPU: 1 UID: 0 PID: 11249 Comm: syz.1.1660 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 261.574195][T11249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.574207][T11249] Call Trace: [ 261.574215][T11249] [ 261.574224][T11249] dump_stack_lvl+0x189/0x250 [ 261.574254][T11249] ? __pfx____ratelimit+0x10/0x10 [ 261.574281][T11249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.574305][T11249] ? __pfx__printk+0x10/0x10 [ 261.574340][T11249] ? ref_tracker_alloc+0x318/0x460 [ 261.574376][T11249] should_fail_ex+0x414/0x560 [ 261.574409][T11249] should_failslab+0xa8/0x100 [ 261.574429][T11249] kmem_cache_alloc_noprof+0x73/0x3c0 [ 261.574445][T11249] ? skb_clone+0x212/0x3a0 [ 261.574463][T11249] skb_clone+0x212/0x3a0 [ 261.574479][T11249] __netlink_deliver_tap+0x404/0x850 [ 261.574509][T11249] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.574534][T11249] netlink_deliver_tap+0x19c/0x1b0 [ 261.574554][T11249] netlink_unicast+0x730/0x8e0 [ 261.574589][T11249] netlink_sendmsg+0x805/0xb30 [ 261.574624][T11249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.574656][T11249] ? aa_sock_msg_perm+0x94/0x160 [ 261.574687][T11249] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 261.574717][T11249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.574744][T11249] __sock_sendmsg+0x21c/0x270 [ 261.574764][T11249] ____sys_sendmsg+0x505/0x830 [ 261.574792][T11249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.574821][T11249] ? import_iovec+0x74/0xa0 [ 261.574841][T11249] ___sys_sendmsg+0x21f/0x2a0 [ 261.574857][T11249] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.574898][T11249] ? __fget_files+0x2a/0x420 [ 261.574916][T11249] ? __fget_files+0x3a0/0x420 [ 261.574942][T11249] __x64_sys_sendmsg+0x19b/0x260 [ 261.574958][T11249] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 261.574979][T11249] ? __pfx_ksys_write+0x10/0x10 [ 261.574993][T11249] ? rcu_is_watching+0x15/0xb0 [ 261.575021][T11249] ? do_syscall_64+0xbe/0x3b0 [ 261.575052][T11249] do_syscall_64+0xfa/0x3b0 [ 261.575077][T11249] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.575103][T11249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.575122][T11249] ? clear_bhb_loop+0x60/0xb0 [ 261.575144][T11249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.575162][T11249] RIP: 0033:0x7f7e8138e929 [ 261.575179][T11249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.575197][T11249] RSP: 002b:00007f7e821b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.575217][T11249] RAX: ffffffffffffffda RBX: 00007f7e815b6080 RCX: 00007f7e8138e929 [ 261.575232][T11249] RDX: 0000000000040040 RSI: 0000200000000300 RDI: 0000000000000006 [ 261.575244][T11249] RBP: 00007f7e821b2090 R08: 0000000000000000 R09: 0000000000000000 [ 261.575256][T11249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.575267][T11249] R13: 0000000000000000 R14: 00007f7e815b6080 R15: 00007ffd43031418 [ 261.575299][T11249] [ 261.970715][T11254] openvswitch: netlink: Missing key (keys=40, expected=80) [ 262.133798][T11260] FAULT_INJECTION: forcing a failure. [ 262.133798][T11260] name failslab, interval 1, probability 0, space 0, times 0 [ 262.155672][T11260] CPU: 1 UID: 0 PID: 11260 Comm: syz.0.1665 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 262.155701][T11260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 262.155713][T11260] Call Trace: [ 262.155721][T11260] [ 262.155730][T11260] dump_stack_lvl+0x189/0x250 [ 262.155761][T11260] ? __pfx____ratelimit+0x10/0x10 [ 262.155788][T11260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.155824][T11260] ? __pfx__printk+0x10/0x10 [ 262.155882][T11260] should_fail_ex+0x414/0x560 [ 262.155916][T11260] should_failslab+0xa8/0x100 [ 262.155944][T11260] __kmalloc_cache_noprof+0x70/0x3d0 [ 262.155968][T11260] ? sctp_add_bind_addr+0x8c/0x370 [ 262.155999][T11260] sctp_add_bind_addr+0x8c/0x370 [ 262.156024][T11260] sctp_copy_local_addr_list+0x30b/0x4e0 [ 262.156057][T11260] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 262.156074][T11260] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 262.156092][T11260] ? sctp_v6_is_any+0x64/0x80 [ 262.156112][T11260] ? sctp_copy_one_addr+0x93/0x360 [ 262.156132][T11260] sctp_bind_addr_copy+0xb3/0x3c0 [ 262.156150][T11260] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 262.156168][T11260] sctp_connect_new_asoc+0x2e0/0x690 [ 262.156191][T11260] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 262.156212][T11260] ? __local_bh_enable_ip+0x12d/0x1c0 [ 262.156243][T11260] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 262.156280][T11260] ? security_sctp_bind_connect+0x7e/0x2e0 [ 262.156310][T11260] sctp_sendmsg+0x155c/0x2810 [ 262.156354][T11260] ? __pfx_sctp_sendmsg+0x10/0x10 [ 262.156388][T11260] ? aa_sk_perm+0x81e/0x950 [ 262.156411][T11260] ? __pfx_aa_sk_perm+0x10/0x10 [ 262.156439][T11260] ? sock_rps_record_flow+0x19/0x410 [ 262.156458][T11260] ? inet_sendmsg+0x2f4/0x370 [ 262.156477][T11260] __sock_sendmsg+0x19c/0x270 [ 262.156497][T11260] ____sys_sendmsg+0x52d/0x830 [ 262.156525][T11260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.156555][T11260] ? import_iovec+0x74/0xa0 [ 262.156575][T11260] ___sys_sendmsg+0x21f/0x2a0 [ 262.156590][T11260] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.156633][T11260] ? __fget_files+0x2a/0x420 [ 262.156651][T11260] ? __fget_files+0x3a0/0x420 [ 262.156679][T11260] __sys_sendmmsg+0x227/0x430 [ 262.156698][T11260] ? __pfx___sys_sendmmsg+0x10/0x10 [ 262.156710][T11260] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 262.156751][T11260] ? ksys_write+0x22a/0x250 [ 262.156769][T11260] ? __pfx_ksys_write+0x10/0x10 [ 262.156790][T11260] __x64_sys_sendmmsg+0xa0/0xc0 [ 262.156806][T11260] do_syscall_64+0xfa/0x3b0 [ 262.156825][T11260] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.156843][T11260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.156857][T11260] ? clear_bhb_loop+0x60/0xb0 [ 262.156875][T11260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.156889][T11260] RIP: 0033:0x7f670ef8e929 [ 262.156903][T11260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.156915][T11260] RSP: 002b:00007f670fdb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 262.156930][T11260] RAX: ffffffffffffffda RBX: 00007f670f1b5fa0 RCX: 00007f670ef8e929 [ 262.156941][T11260] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 262.156950][T11260] RBP: 00007f670fdb6090 R08: 0000000000000000 R09: 0000000000000000 [ 262.156958][T11260] R10: 00000000200100c0 R11: 0000000000000246 R12: 0000000000000002 [ 262.156967][T11260] R13: 0000000000000000 R14: 00007f670f1b5fa0 R15: 00007ffd303b5f98 [ 262.156990][T11260] [ 262.729036][T11271] netlink: 'syz.1.1669': attribute type 1 has an invalid length. [ 262.816155][T11271] 8021q: adding VLAN 0 to HW filter on device bond2 [ 262.825862][T11281] syz_tun: entered allmulticast mode [ 262.850177][T11276] syz_tun: left allmulticast mode [ 262.983589][T11288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1677'. [ 262.984323][T11290] xt_TPROXY: Can be used only with -p tcp or -p udp [ 263.064402][T11292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1678'. [ 263.109590][T11292] macsec1: entered allmulticast mode [ 263.137215][T11292] team0: entered allmulticast mode [ 263.150421][T11297] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1681'. [ 263.160896][T11292] vlan0: entered allmulticast mode [ 263.179733][T11292] veth0_vlan: entered allmulticast mode [ 263.195189][T11292] team0: left allmulticast mode [ 263.206879][T11292] vlan0: left allmulticast mode [ 263.216703][T11292] veth0_vlan: left allmulticast mode [ 263.405707][T11310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1685'. [ 263.436993][T11310] openvswitch: netlink: Flow key attr not present in new flow. [ 263.467467][T11312] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1686'. [ 263.858293][T11339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1696'. [ 263.889151][T11339] tipc: Started in network mode [ 263.899040][T11339] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 263.934066][T11343] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1697'. [ 263.943582][T11339] tipc: Enabling of bearer rejected, failed to enable media [ 263.980573][T11343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1697'. [ 264.563607][T11376] netlink: 'syz.4.1711': attribute type 21 has an invalid length. [ 264.646435][T11376] netlink: 'syz.4.1711': attribute type 4 has an invalid length. [ 264.677841][T11376] netlink: 'syz.4.1711': attribute type 5 has an invalid length. [ 264.871424][T11387] tipc: Enabled bearer , priority 0 [ 264.927380][T11377] tipc: Resetting bearer [ 265.931202][ T7807] tipc: Node number set to 1 [ 266.495119][T11377] tipc: Disabling bearer [ 266.525393][T11399] xfrm2: entered promiscuous mode [ 266.535230][T11399] xfrm2: entered allmulticast mode [ 267.187195][T11432] __nla_validate_parse: 6 callbacks suppressed [ 267.187212][T11432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1730'. [ 267.227737][ T5868] Bluetooth: hci4: link tx timeout [ 267.236191][ T5868] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 267.368882][T11436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1732'. [ 267.572438][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1735'. [ 268.190457][T11481] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1743'. [ 268.312057][T11484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1745'. [ 268.344500][T11484] bridge0: entered promiscuous mode [ 268.366962][T11484] macvtap1: entered promiscuous mode [ 268.375462][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1745'. [ 268.392397][T11484] macvtap1: entered allmulticast mode [ 268.466723][T11484] bridge0: entered allmulticast mode [ 268.514702][T11476] bridge0: left allmulticast mode [ 268.534251][T11491] netlink: 'syz.2.1748': attribute type 21 has an invalid length. [ 268.553235][T11491] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1748'. [ 268.564508][T11476] bridge0: left promiscuous mode [ 268.583389][T11491] netlink: 'syz.2.1748': attribute type 4 has an invalid length. [ 268.599298][T11491] netlink: 'syz.2.1748': attribute type 5 has an invalid length. [ 268.624256][T11498] FAULT_INJECTION: forcing a failure. [ 268.624256][T11498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.639154][T11491] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1748'. [ 268.657286][T11498] CPU: 0 UID: 0 PID: 11498 Comm: syz.3.1750 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 268.657315][T11498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.657328][T11498] Call Trace: [ 268.657336][T11498] [ 268.657345][T11498] dump_stack_lvl+0x189/0x250 [ 268.657376][T11498] ? __pfx____ratelimit+0x10/0x10 [ 268.657405][T11498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.657430][T11498] ? __pfx__printk+0x10/0x10 [ 268.657473][T11498] should_fail_ex+0x414/0x560 [ 268.657509][T11498] _copy_to_user+0x31/0xb0 [ 268.657537][T11498] simple_read_from_buffer+0xe1/0x170 [ 268.657569][T11498] proc_fail_nth_read+0x1df/0x250 [ 268.657602][T11498] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 268.657635][T11498] ? rw_verify_area+0x258/0x650 [ 268.657657][T11498] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 268.657688][T11498] vfs_read+0x200/0x980 [ 268.657716][T11498] ? __pfx___mutex_lock+0x10/0x10 [ 268.657746][T11498] ? __pfx_vfs_read+0x10/0x10 [ 268.657770][T11498] ? __fget_files+0x2a/0x420 [ 268.657803][T11498] ? __fget_files+0x3a0/0x420 [ 268.657828][T11498] ? __fget_files+0x2a/0x420 [ 268.657865][T11498] ksys_read+0x145/0x250 [ 268.657891][T11498] ? __pfx_ksys_read+0x10/0x10 [ 268.657910][T11498] ? rcu_is_watching+0x15/0xb0 [ 268.657942][T11498] ? do_syscall_64+0xbe/0x3b0 [ 268.657975][T11498] do_syscall_64+0xfa/0x3b0 [ 268.658002][T11498] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.658028][T11498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.658048][T11498] ? clear_bhb_loop+0x60/0xb0 [ 268.658074][T11498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.658104][T11498] RIP: 0033:0x7f341af8d33c [ 268.658123][T11498] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 268.658140][T11498] RSP: 002b:00007f341bdf8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 268.658159][T11498] RAX: ffffffffffffffda RBX: 00007f341b1b6080 RCX: 00007f341af8d33c [ 268.658172][T11498] RDX: 000000000000000f RSI: 00007f341bdf80a0 RDI: 0000000000000007 [ 268.658183][T11498] RBP: 00007f341bdf8090 R08: 0000000000000000 R09: 0000000000000000 [ 268.658195][T11498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.658218][T11498] R13: 0000000000000000 R14: 00007f341b1b6080 R15: 00007ffc93573068 [ 268.658250][T11498] [ 268.847724][T11482] wg1 speed is unknown, defaulting to 1000 [ 268.998979][T11504] netlink: 'syz.1.1753': attribute type 1 has an invalid length. [ 269.091772][T11508] FAULT_INJECTION: forcing a failure. [ 269.091772][T11508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.139519][T11508] CPU: 1 UID: 0 PID: 11508 Comm: syz.3.1756 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 269.139548][T11508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 269.139577][T11508] Call Trace: [ 269.139585][T11508] [ 269.139593][T11508] dump_stack_lvl+0x189/0x250 [ 269.139624][T11508] ? __pfx____ratelimit+0x10/0x10 [ 269.139652][T11508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.139676][T11508] ? __pfx__printk+0x10/0x10 [ 269.139705][T11508] ? __might_fault+0xb0/0x130 [ 269.139741][T11508] should_fail_ex+0x414/0x560 [ 269.139776][T11508] _copy_from_user+0x2d/0xb0 [ 269.139801][T11508] do_tcp_getsockopt+0x1cf/0x2610 [ 269.139843][T11508] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 269.139871][T11508] ? sock_recv_errqueue+0x4e0/0x510 [ 269.139896][T11508] ? __might_fault+0xb0/0x130 [ 269.139929][T11508] ? _parse_integer_limit+0x1ae/0x1f0 [ 269.139966][T11508] ? aa_label_sk_perm+0x413/0x560 [ 269.140000][T11508] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 269.140059][T11508] ? __lock_acquire+0xab9/0xd20 [ 269.140093][T11508] ? __might_fault+0xb0/0x130 [ 269.140129][T11508] tcp_getsockopt+0x89/0x130 [ 269.140158][T11508] ? sock_recv_errqueue+0x4e0/0x510 [ 269.140183][T11508] ? sock_recv_errqueue+0x4e0/0x510 [ 269.140211][T11508] do_sock_getsockopt+0x360/0x650 [ 269.140246][T11508] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 269.140276][T11508] ? do_syscall_64+0x40/0x3b0 [ 269.140303][T11508] ? __fget_files+0x3a0/0x420 [ 269.140329][T11508] ? __fget_files+0x2a/0x420 [ 269.140363][T11508] __x64_sys_getsockopt+0x1a5/0x250 [ 269.140393][T11508] ? do_syscall_64+0x40/0x3b0 [ 269.140423][T11508] ? do_syscall_64+0x40/0x3b0 [ 269.140455][T11508] do_syscall_64+0xfa/0x3b0 [ 269.140482][T11508] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.140508][T11508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.140529][T11508] ? clear_bhb_loop+0x60/0xb0 [ 269.140553][T11508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.140572][T11508] RIP: 0033:0x7f341af8e929 [ 269.140591][T11508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.140608][T11508] RSP: 002b:00007f341be19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 269.140630][T11508] RAX: ffffffffffffffda RBX: 00007f341b1b5fa0 RCX: 00007f341af8e929 [ 269.140645][T11508] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 269.140657][T11508] RBP: 00007f341be19090 R08: 0000200000000200 R09: 0000000000000000 [ 269.140670][T11508] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 269.140683][T11508] R13: 0000000000000000 R14: 00007f341b1b5fa0 R15: 00007ffc93573068 [ 269.140715][T11508] [ 269.450782][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 269.691106][T11515] tipc: Enabled bearer , priority 0 [ 269.737253][T11510] tipc: Resetting bearer [ 269.752691][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 269.773144][T11522] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1759'. [ 271.373811][T11510] tipc: Disabling bearer [ 271.665293][T11530] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1762'. [ 272.076510][T11553] netlink: 'syz.4.1769': attribute type 1 has an invalid length. [ 272.479607][T11577] __nla_validate_parse: 4 callbacks suppressed [ 272.479627][T11577] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1779'. [ 272.653100][T11585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1783'. [ 272.825000][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1787'. [ 272.958382][T11597] netlink: 'syz.3.1789': attribute type 1 has an invalid length. [ 274.119966][T11660] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1814'. [ 274.136999][T11660] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1814'. [ 274.172755][T11660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1814'. [ 274.195586][T11660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1814'. [ 274.206035][T11665] FAULT_INJECTION: forcing a failure. [ 274.206035][T11665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.215139][T11660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1814'. [ 274.243007][T11665] CPU: 0 UID: 0 PID: 11665 Comm: syz.2.1815 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 274.243035][T11665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 274.243046][T11665] Call Trace: [ 274.243054][T11665] [ 274.243061][T11665] dump_stack_lvl+0x189/0x250 [ 274.243090][T11665] ? __pfx____ratelimit+0x10/0x10 [ 274.243115][T11665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.243136][T11665] ? __pfx__printk+0x10/0x10 [ 274.243165][T11665] ? __might_fault+0xb0/0x130 [ 274.243194][T11665] should_fail_ex+0x414/0x560 [ 274.243226][T11665] _copy_from_user+0x2d/0xb0 [ 274.243249][T11665] copy_from_sockptr+0x5e/0xa0 [ 274.243282][T11665] do_tcp_getsockopt+0x1ad7/0x2610 [ 274.243319][T11665] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 274.243344][T11665] ? sock_recv_errqueue+0x4e0/0x510 [ 274.243367][T11665] ? __might_fault+0xb0/0x130 [ 274.243390][T11665] ? _parse_integer_limit+0x1ae/0x1f0 [ 274.243422][T11665] ? aa_label_sk_perm+0x413/0x560 [ 274.243451][T11665] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 274.243498][T11665] ? __lock_acquire+0xab9/0xd20 [ 274.243542][T11665] tcp_getsockopt+0x89/0x130 [ 274.243569][T11665] ? sock_recv_errqueue+0x4e0/0x510 [ 274.243591][T11665] ? sock_recv_errqueue+0x4e0/0x510 [ 274.243618][T11665] do_sock_getsockopt+0x360/0x650 [ 274.243649][T11665] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 274.243676][T11665] ? do_syscall_64+0x40/0x3b0 [ 274.243701][T11665] ? __fget_files+0x3a0/0x420 [ 274.243725][T11665] ? __fget_files+0x2a/0x420 [ 274.243756][T11665] __x64_sys_getsockopt+0x1a5/0x250 [ 274.243794][T11665] ? do_syscall_64+0x40/0x3b0 [ 274.243822][T11665] ? do_syscall_64+0x40/0x3b0 [ 274.243850][T11665] do_syscall_64+0xfa/0x3b0 [ 274.243873][T11665] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.243896][T11665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.243915][T11665] ? clear_bhb_loop+0x60/0xb0 [ 274.243937][T11665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.243954][T11665] RIP: 0033:0x7f5d2ad8e929 [ 274.243970][T11665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.243985][T11665] RSP: 002b:00007f5d2bbfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 274.244005][T11665] RAX: ffffffffffffffda RBX: 00007f5d2afb5fa0 RCX: 00007f5d2ad8e929 [ 274.244018][T11665] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 274.244029][T11665] RBP: 00007f5d2bbfa090 R08: 0000200000000200 R09: 0000000000000000 [ 274.244040][T11665] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 274.244052][T11665] R13: 0000000000000000 R14: 00007f5d2afb5fa0 R15: 00007ffc13da8f68 [ 274.244083][T11665] [ 274.263974][T11660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1814'. [ 274.553468][T11660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1814'. [ 274.683858][T11675] IPv4: Oversized IP packet from 127.202.26.0 [ 274.835998][T11687] netlink: 'syz.3.1825': attribute type 12 has an invalid length. [ 274.871815][T11687] batman_adv: batadv0: Adding interface: gretap2 [ 274.878187][T11687] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.930101][T11687] batman_adv: batadv0: Interface activated: gretap2 [ 275.004237][T11697] syz_tun: entered allmulticast mode [ 275.047543][T11697] syz_tun: left allmulticast mode [ 275.412523][T11718] netlink: 'syz.2.1837': attribute type 1 has an invalid length. [ 275.705575][T11705] wg1 speed is unknown, defaulting to 1000 [ 275.800966][T11732] netlink: 'syz.3.1841': attribute type 21 has an invalid length. [ 275.845172][T11732] netlink: 'syz.3.1841': attribute type 4 has an invalid length. [ 275.889517][T11732] netlink: 'syz.3.1841': attribute type 5 has an invalid length. [ 276.101843][T11747] netlink: 'syz.1.1847': attribute type 49 has an invalid length. [ 276.789673][T11783] netlink: 'syz.3.1862': attribute type 21 has an invalid length. [ 276.826027][T11783] netlink: 'syz.3.1862': attribute type 4 has an invalid length. [ 276.850893][T11783] netlink: 'syz.3.1862': attribute type 5 has an invalid length. [ 277.637001][T11817] netlink: 'syz.0.1875': attribute type 1 has an invalid length. [ 277.843635][T11824] sctp: [Deprecated]: syz.4.1878 (pid 11824) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.843635][T11824] Use struct sctp_sack_info instead [ 278.204784][T11836] syz_tun: entered allmulticast mode [ 278.215031][T11808] wg1 speed is unknown, defaulting to 1000 [ 278.225722][T11836] syz_tun: left allmulticast mode [ 278.703806][T11857] __nla_validate_parse: 41 callbacks suppressed [ 278.703826][T11857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1891'. [ 278.777631][T11857] macsec1: entered allmulticast mode [ 278.783303][T11857] bond0: entered allmulticast mode [ 278.788471][T11857] bond_slave_0: entered allmulticast mode [ 278.797200][T11857] bond_slave_1: entered allmulticast mode [ 278.830263][T11857] bond0: left allmulticast mode [ 278.838140][T11857] bond_slave_0: left allmulticast mode [ 278.844683][T11857] bond_slave_1: left allmulticast mode [ 279.029211][T11869] syz_tun: entered allmulticast mode [ 279.071835][T11869] syz_tun: left allmulticast mode [ 279.538435][T11893] netlink: 592 bytes leftover after parsing attributes in process `syz.0.1906'. [ 279.541706][T11891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.575469][T11891] bond0: (slave rose0): Enslaving as an active interface with an up link [ 279.743969][T11904] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1908'. [ 279.758435][T11905] erspan0: entered promiscuous mode [ 279.835313][T11905] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.864893][T11905] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 280.110712][T11920] validate_nla: 5 callbacks suppressed [ 280.110731][T11920] netlink: 'syz.2.1913': attribute type 62 has an invalid length. [ 280.381962][T11933] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1918'. [ 280.400041][T11932] netlink: 'syz.0.1917': attribute type 7 has an invalid length. [ 280.441115][T11932] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1917'. [ 280.554948][T11939] FAULT_INJECTION: forcing a failure. [ 280.554948][T11939] name failslab, interval 1, probability 0, space 0, times 0 [ 280.583527][T11939] CPU: 1 UID: 0 PID: 11939 Comm: syz.3.1920 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 280.583558][T11939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 280.583571][T11939] Call Trace: [ 280.583579][T11939] [ 280.583588][T11939] dump_stack_lvl+0x189/0x250 [ 280.583619][T11939] ? __pfx____ratelimit+0x10/0x10 [ 280.583646][T11939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.583687][T11939] ? __pfx__printk+0x10/0x10 [ 280.583719][T11939] ? __pfx___might_resched+0x10/0x10 [ 280.583744][T11939] ? fs_reclaim_acquire+0x7d/0x100 [ 280.583778][T11939] should_fail_ex+0x414/0x560 [ 280.583814][T11939] should_failslab+0xa8/0x100 [ 280.583842][T11939] __kmalloc_noprof+0xcb/0x4f0 [ 280.583865][T11939] ? tomoyo_encode+0x28b/0x550 [ 280.583890][T11939] tomoyo_encode+0x28b/0x550 [ 280.583916][T11939] tomoyo_realpath_from_path+0x58d/0x5d0 [ 280.583938][T11939] ? tomoyo_domain+0xd9/0x130 [ 280.583965][T11939] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 280.583993][T11939] tomoyo_path_number_perm+0x1e8/0x5a0 [ 280.584037][T11939] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 280.584082][T11939] ? __lock_acquire+0xab9/0xd20 [ 280.584127][T11939] ? __fget_files+0x2a/0x420 [ 280.584156][T11939] ? __fget_files+0x2a/0x420 [ 280.584180][T11939] ? __fget_files+0x3a0/0x420 [ 280.584204][T11939] ? __fget_files+0x2a/0x420 [ 280.584234][T11939] security_file_ioctl+0xcb/0x2d0 [ 280.584262][T11939] __se_sys_ioctl+0x47/0x170 [ 280.584286][T11939] do_syscall_64+0xfa/0x3b0 [ 280.584318][T11939] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.584344][T11939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.584362][T11939] ? clear_bhb_loop+0x60/0xb0 [ 280.584387][T11939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.584406][T11939] RIP: 0033:0x7f341af8e929 [ 280.584424][T11939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.584441][T11939] RSP: 002b:00007f341be19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.584462][T11939] RAX: ffffffffffffffda RBX: 00007f341b1b5fa0 RCX: 00007f341af8e929 [ 280.584477][T11939] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 280.584489][T11939] RBP: 00007f341be19090 R08: 0000000000000000 R09: 0000000000000000 [ 280.584501][T11939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.584513][T11939] R13: 0000000000000000 R14: 00007f341b1b5fa0 R15: 00007ffc93573068 [ 280.584545][T11939] [ 280.584566][T11939] ERROR: Out of memory at tomoyo_realpath_from_path. [ 281.093510][T11961] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1931'. [ 281.294186][T11970] FAULT_INJECTION: forcing a failure. [ 281.294186][T11970] name failslab, interval 1, probability 0, space 0, times 0 [ 281.311773][T11970] CPU: 1 UID: 0 PID: 11970 Comm: syz.0.1934 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 281.311803][T11970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.311815][T11970] Call Trace: [ 281.311823][T11970] [ 281.311832][T11970] dump_stack_lvl+0x189/0x250 [ 281.311863][T11970] ? __pfx____ratelimit+0x10/0x10 [ 281.311891][T11970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.311916][T11970] ? __pfx__printk+0x10/0x10 [ 281.311952][T11970] ? __pfx___might_resched+0x10/0x10 [ 281.311976][T11970] ? fs_reclaim_acquire+0x7d/0x100 [ 281.312011][T11970] should_fail_ex+0x414/0x560 [ 281.312056][T11970] should_failslab+0xa8/0x100 [ 281.312084][T11970] __kmalloc_noprof+0xcb/0x4f0 [ 281.312107][T11970] ? kfree+0x4d/0x440 [ 281.312125][T11970] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 281.312153][T11970] tomoyo_realpath_from_path+0xe3/0x5d0 [ 281.312176][T11970] ? tomoyo_domain+0xd9/0x130 [ 281.312203][T11970] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 281.312231][T11970] tomoyo_path_number_perm+0x1e8/0x5a0 [ 281.312263][T11970] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 281.312311][T11970] ? __lock_acquire+0xab9/0xd20 [ 281.312361][T11970] ? __fget_files+0x2a/0x420 [ 281.312392][T11970] ? __fget_files+0x2a/0x420 [ 281.312417][T11970] ? __fget_files+0x3a0/0x420 [ 281.312443][T11970] ? __fget_files+0x2a/0x420 [ 281.312475][T11970] security_file_ioctl+0xcb/0x2d0 [ 281.312503][T11970] __se_sys_ioctl+0x47/0x170 [ 281.312528][T11970] do_syscall_64+0xfa/0x3b0 [ 281.312556][T11970] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.312584][T11970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.312604][T11970] ? clear_bhb_loop+0x60/0xb0 [ 281.312628][T11970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.312648][T11970] RIP: 0033:0x7f670ef8e929 [ 281.312666][T11970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.312683][T11970] RSP: 002b:00007f670fdb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.312706][T11970] RAX: ffffffffffffffda RBX: 00007f670f1b5fa0 RCX: 00007f670ef8e929 [ 281.312721][T11970] RDX: 0000200000000440 RSI: 000000000000890b RDI: 0000000000000004 [ 281.312734][T11970] RBP: 00007f670fdb6090 R08: 0000000000000000 R09: 0000000000000000 [ 281.312747][T11970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.312758][T11970] R13: 0000000000000000 R14: 00007f670f1b5fa0 R15: 00007ffd303b5f98 [ 281.312793][T11970] [ 281.312870][T11970] ERROR: Out of memory at tomoyo_realpath_from_path. [ 281.633155][T11975] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1936'. [ 281.692975][T11978] netlink: 'syz.3.1937': attribute type 21 has an invalid length. [ 281.709504][T11978] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1937'. [ 281.718796][T11978] netlink: 'syz.3.1937': attribute type 4 has an invalid length. [ 281.775788][T11978] netlink: 'syz.3.1937': attribute type 5 has an invalid length. [ 281.841715][T11978] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1937'. [ 281.946730][T11989] syz_tun: entered allmulticast mode [ 281.996054][T11989] syz_tun: left allmulticast mode [ 282.066562][T11992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1942'. [ 282.174199][T11992] macsec1: entered allmulticast mode [ 282.205278][T12004] netlink: 'syz.4.1946': attribute type 21 has an invalid length. [ 282.219400][T11992] bond0: entered allmulticast mode [ 282.235239][T11992] bond_slave_0: entered allmulticast mode [ 282.265219][T11992] bond_slave_1: entered allmulticast mode [ 282.292444][T11992] bond0: left allmulticast mode [ 282.300661][T11992] bond_slave_0: left allmulticast mode [ 282.314450][T11992] bond_slave_1: left allmulticast mode [ 282.375439][T12004] netlink: 'syz.4.1946': attribute type 4 has an invalid length. [ 282.406369][T12004] netlink: 'syz.4.1946': attribute type 5 has an invalid length. [ 282.631152][T12028] syz_tun: entered allmulticast mode [ 282.657233][T12028] syz_tun: left allmulticast mode [ 282.727325][T12032] IPv4: Oversized IP packet from 127.202.26.0 [ 282.797462][T12037] netlink: 'syz.1.1958': attribute type 21 has an invalid length. [ 282.818135][T12037] netlink: 'syz.1.1958': attribute type 4 has an invalid length. [ 282.830067][T12039] xt_TPROXY: Can be used only with -p tcp or -p udp [ 283.337063][T12070] syz_tun: entered allmulticast mode [ 283.363609][T12070] syz_tun: left allmulticast mode [ 284.002710][T12101] __nla_validate_parse: 9 callbacks suppressed [ 284.002733][T12101] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1983'. [ 284.046921][T12103] syz_tun: entered allmulticast mode [ 284.056421][T12103] syz_tun: left allmulticast mode [ 284.066395][T12101] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1983'. [ 284.342116][T12113] vxcan2: entered promiscuous mode [ 284.574612][T12130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1994'. [ 284.744541][T12134] gretap1: entered promiscuous mode [ 284.802169][T12140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1996'. [ 284.826356][T12140] macsec1: entered allmulticast mode [ 284.836527][T12140] team0: entered allmulticast mode [ 284.842033][T12140] vlan0: entered allmulticast mode [ 284.847303][T12140] veth0_vlan: entered allmulticast mode [ 284.858129][T12140] team0: left allmulticast mode [ 284.865464][T12140] vlan0: left allmulticast mode [ 284.870718][T12140] veth0_vlan: left allmulticast mode [ 284.894928][T12130] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1994'. [ 284.998435][T12150] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2000'. [ 285.020250][T12150] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2000'. [ 285.372823][T12169] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2005'. [ 285.718067][T12187] validate_nla: 14 callbacks suppressed [ 285.718090][T12187] netlink: 'syz.4.2015': attribute type 21 has an invalid length. [ 285.739789][T12187] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2015'. [ 285.759397][T12187] netlink: 'syz.4.2015': attribute type 4 has an invalid length. [ 285.767194][T12187] netlink: 'syz.4.2015': attribute type 5 has an invalid length. [ 285.790041][T12187] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2015'. [ 285.884695][T12192] tipc: Enabled bearer , priority 0 [ 285.919585][T12192] tipc: Resetting bearer [ 286.025737][T12190] tipc: Disabling bearer [ 286.321655][T12216] FAULT_INJECTION: forcing a failure. [ 286.321655][T12216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.367359][T12216] CPU: 1 UID: 0 PID: 12216 Comm: syz.2.2027 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 286.367390][T12216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.367404][T12216] Call Trace: [ 286.367412][T12216] [ 286.367421][T12216] dump_stack_lvl+0x189/0x250 [ 286.367452][T12216] ? __pfx____ratelimit+0x10/0x10 [ 286.367479][T12216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.367504][T12216] ? __pfx__printk+0x10/0x10 [ 286.367533][T12216] ? __might_fault+0xb0/0x130 [ 286.367570][T12216] should_fail_ex+0x414/0x560 [ 286.367606][T12216] _copy_from_user+0x2d/0xb0 [ 286.367631][T12216] nr_rt_ioctl+0x74f/0xd50 [ 286.367658][T12216] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 286.367699][T12216] ? kasan_quarantine_put+0xdd/0x220 [ 286.367722][T12216] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 286.367760][T12216] ? apparmor_capable+0x137/0x1b0 [ 286.367791][T12216] ? capable+0x89/0xe0 [ 286.367815][T12216] ? nr_ioctl+0x1b1/0x3b0 [ 286.367838][T12216] sock_do_ioctl+0xdc/0x300 [ 286.367865][T12216] ? __pfx_sock_do_ioctl+0x10/0x10 [ 286.367886][T12216] ? __lock_acquire+0xab9/0xd20 [ 286.367925][T12216] sock_ioctl+0x576/0x790 [ 286.367951][T12216] ? __pfx_sock_ioctl+0x10/0x10 [ 286.367975][T12216] ? __fget_files+0x2a/0x420 [ 286.368000][T12216] ? __fget_files+0x3a0/0x420 [ 286.368025][T12216] ? __fget_files+0x2a/0x420 [ 286.368056][T12216] ? bpf_lsm_file_ioctl+0x9/0x20 [ 286.368076][T12216] ? __pfx_sock_ioctl+0x10/0x10 [ 286.368098][T12216] __se_sys_ioctl+0xfc/0x170 [ 286.368122][T12216] do_syscall_64+0xfa/0x3b0 [ 286.368148][T12216] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.368175][T12216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.368200][T12216] ? clear_bhb_loop+0x60/0xb0 [ 286.368226][T12216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.368246][T12216] RIP: 0033:0x7f5d2ad8e929 [ 286.368264][T12216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.368282][T12216] RSP: 002b:00007f5d2bbfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.368304][T12216] RAX: ffffffffffffffda RBX: 00007f5d2afb5fa0 RCX: 00007f5d2ad8e929 [ 286.368320][T12216] RDX: 0000200000000440 RSI: 000000000000890b RDI: 0000000000000004 [ 286.368333][T12216] RBP: 00007f5d2bbfa090 R08: 0000000000000000 R09: 0000000000000000 [ 286.368346][T12216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.368358][T12216] R13: 0000000000000000 R14: 00007f5d2afb5fa0 R15: 00007ffc13da8f68 [ 286.368392][T12216] [ 286.638064][T12222] FAULT_INJECTION: forcing a failure. [ 286.638064][T12222] name failslab, interval 1, probability 0, space 0, times 0 [ 286.654903][T12222] CPU: 0 UID: 0 PID: 12222 Comm: syz.3.2029 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 286.654934][T12222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.654948][T12222] Call Trace: [ 286.654956][T12222] [ 286.654965][T12222] dump_stack_lvl+0x189/0x250 [ 286.654996][T12222] ? __pfx____ratelimit+0x10/0x10 [ 286.655024][T12222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.655049][T12222] ? __pfx__printk+0x10/0x10 [ 286.655085][T12222] ? __local_bh_enable_ip+0x12d/0x1c0 [ 286.655113][T12222] should_fail_ex+0x414/0x560 [ 286.655148][T12222] should_failslab+0xa8/0x100 [ 286.655176][T12222] __kmalloc_cache_noprof+0x70/0x3d0 [ 286.655200][T12222] ? nr_add_node+0x7f8/0x2570 [ 286.655230][T12222] nr_add_node+0x7f8/0x2570 [ 286.655260][T12222] ? dev_get_by_name+0x21/0x200 [ 286.655283][T12222] ? dev_get_by_name+0x21/0x200 [ 286.655302][T12222] ? dev_get_by_name+0x21/0x200 [ 286.655322][T12222] ? nr_call_to_digi+0x136/0x1b0 [ 286.655350][T12222] nr_rt_ioctl+0xc12/0xd50 [ 286.655375][T12222] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 286.655404][T12222] ? kasan_quarantine_put+0xdd/0x220 [ 286.655426][T12222] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 286.655484][T12222] ? apparmor_capable+0x137/0x1b0 [ 286.655518][T12222] ? capable+0x89/0xe0 [ 286.655542][T12222] ? nr_ioctl+0x1b1/0x3b0 [ 286.655565][T12222] sock_do_ioctl+0xdc/0x300 [ 286.655592][T12222] ? __pfx_sock_do_ioctl+0x10/0x10 [ 286.655613][T12222] ? __lock_acquire+0xab9/0xd20 [ 286.655654][T12222] sock_ioctl+0x576/0x790 [ 286.655680][T12222] ? __pfx_sock_ioctl+0x10/0x10 [ 286.655702][T12222] ? __fget_files+0x2a/0x420 [ 286.655727][T12222] ? __fget_files+0x3a0/0x420 [ 286.655753][T12222] ? __fget_files+0x2a/0x420 [ 286.655783][T12222] ? bpf_lsm_file_ioctl+0x9/0x20 [ 286.655804][T12222] ? __pfx_sock_ioctl+0x10/0x10 [ 286.655827][T12222] __se_sys_ioctl+0xfc/0x170 [ 286.655856][T12222] do_syscall_64+0xfa/0x3b0 [ 286.655884][T12222] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.655916][T12222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.655936][T12222] ? clear_bhb_loop+0x60/0xb0 [ 286.655962][T12222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.655982][T12222] RIP: 0033:0x7f341af8e929 [ 286.656000][T12222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.656018][T12222] RSP: 002b:00007f341be19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.656039][T12222] RAX: ffffffffffffffda RBX: 00007f341b1b5fa0 RCX: 00007f341af8e929 [ 286.656055][T12222] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 286.656068][T12222] RBP: 00007f341be19090 R08: 0000000000000000 R09: 0000000000000000 [ 286.656081][T12222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.656093][T12222] R13: 0000000000000000 R14: 00007f341b1b5fa0 R15: 00007ffc93573068 [ 286.656126][T12222] [ 287.029557][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 287.395825][T12246] netlink: 'syz.4.2038': attribute type 1 has an invalid length. [ 287.706425][T12263] netlink: 'syz.4.2047': attribute type 7 has an invalid length. [ 288.265601][T12280] IPv4: Oversized IP packet from 127.202.26.0 [ 288.535586][T12285] netdevsim netdevsim0: Direct firmware load for . [ 288.535586][T12285] failed with error -2 [ 288.581390][T12285] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 288.581390][T12285] [ 288.680656][T12293] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20003 [ 288.912680][T12301] netlink: 'syz.3.2063': attribute type 21 has an invalid length. [ 288.927217][T12301] netlink: 'syz.3.2063': attribute type 4 has an invalid length. [ 289.011544][T12301] netlink: 'syz.3.2063': attribute type 5 has an invalid length. [ 289.040945][T12301] __nla_validate_parse: 5 callbacks suppressed [ 289.040964][T12301] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2063'. [ 289.054190][T12309] netlink: 'syz.1.2065': attribute type 1 has an invalid length. [ 289.077127][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2065'. [ 289.365170][T12318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2068'. [ 289.494973][T12278] wg1 speed is unknown, defaulting to 1000 [ 289.783585][T12332] FAULT_INJECTION: forcing a failure. [ 289.783585][T12332] name failslab, interval 1, probability 0, space 0, times 0 [ 289.849294][T12332] CPU: 1 UID: 0 PID: 12332 Comm: syz.0.2072 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 289.849324][T12332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 289.849337][T12332] Call Trace: [ 289.849346][T12332] [ 289.849355][T12332] dump_stack_lvl+0x189/0x250 [ 289.849384][T12332] ? __pfx____ratelimit+0x10/0x10 [ 289.849420][T12332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.849445][T12332] ? __pfx__printk+0x10/0x10 [ 289.849485][T12332] ? __local_bh_enable_ip+0x12d/0x1c0 [ 289.849514][T12332] should_fail_ex+0x414/0x560 [ 289.849549][T12332] should_failslab+0xa8/0x100 [ 289.849577][T12332] __kmalloc_cache_noprof+0x70/0x3d0 [ 289.849601][T12332] ? nr_add_node+0x7f8/0x2570 [ 289.849631][T12332] nr_add_node+0x7f8/0x2570 [ 289.849661][T12332] ? dev_get_by_name+0x21/0x200 [ 289.849684][T12332] ? dev_get_by_name+0x21/0x200 [ 289.849704][T12332] ? dev_get_by_name+0x21/0x200 [ 289.849722][T12332] ? nr_call_to_digi+0x136/0x1b0 [ 289.849750][T12332] nr_rt_ioctl+0xc12/0xd50 [ 289.849775][T12332] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 289.849804][T12332] ? kasan_quarantine_put+0xdd/0x220 [ 289.849826][T12332] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 289.849864][T12332] ? apparmor_capable+0x137/0x1b0 [ 289.849896][T12332] ? capable+0x89/0xe0 [ 289.849920][T12332] ? nr_ioctl+0x1b1/0x3b0 [ 289.849943][T12332] sock_do_ioctl+0xdc/0x300 [ 289.849970][T12332] ? __pfx_sock_do_ioctl+0x10/0x10 [ 289.849991][T12332] ? __lock_acquire+0xab9/0xd20 [ 289.850031][T12332] sock_ioctl+0x576/0x790 [ 289.850057][T12332] ? __pfx_sock_ioctl+0x10/0x10 [ 289.850080][T12332] ? __fget_files+0x2a/0x420 [ 289.850107][T12332] ? __fget_files+0x3a0/0x420 [ 289.850131][T12332] ? __fget_files+0x2a/0x420 [ 289.850161][T12332] ? bpf_lsm_file_ioctl+0x9/0x20 [ 289.850182][T12332] ? __pfx_sock_ioctl+0x10/0x10 [ 289.850203][T12332] __se_sys_ioctl+0xfc/0x170 [ 289.850226][T12332] do_syscall_64+0xfa/0x3b0 [ 289.850253][T12332] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.850278][T12332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.850298][T12332] ? clear_bhb_loop+0x60/0xb0 [ 289.850322][T12332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.850341][T12332] RIP: 0033:0x7f670ef8e929 [ 289.850360][T12332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.850377][T12332] RSP: 002b:00007f670fdb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.850406][T12332] RAX: ffffffffffffffda RBX: 00007f670f1b5fa0 RCX: 00007f670ef8e929 [ 289.850422][T12332] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 289.850435][T12332] RBP: 00007f670fdb6090 R08: 0000000000000000 R09: 0000000000000000 [ 289.850447][T12332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.850458][T12332] R13: 0000000000000000 R14: 00007f670f1b5fa0 R15: 00007ffd303b5f98 [ 289.850491][T12332] [ 289.858035][T12336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2074'. [ 290.101803][T12339] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2075'. [ 290.179545][T12336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2074'. [ 290.181724][T12342] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2076'. [ 290.314340][T12347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.331793][T12300] wg1 speed is unknown, defaulting to 1000 [ 290.495607][T12355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2080'. [ 290.747670][T12360] IPv4: Oversized IP packet from 127.202.26.0 [ 291.018882][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 291.064476][T12367] netlink: 'syz.2.2085': attribute type 30 has an invalid length. [ 291.666714][T12378] IPv4: Oversized IP packet from 127.202.26.0 [ 291.921885][T12384] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 292.059689][T12389] netlink: 'syz.3.2089': attribute type 16 has an invalid length. [ 292.067558][T12389] netlink: 'syz.3.2089': attribute type 17 has an invalid length. [ 292.090286][T12389] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 292.227137][T12374] wg1 speed is unknown, defaulting to 1000 [ 292.375014][T12398] FAULT_INJECTION: forcing a failure. [ 292.375014][T12398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.394156][T12398] CPU: 1 UID: 0 PID: 12398 Comm: syz.1.2096 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 292.394185][T12398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.394197][T12398] Call Trace: [ 292.394205][T12398] [ 292.394214][T12398] dump_stack_lvl+0x189/0x250 [ 292.394243][T12398] ? __pfx____ratelimit+0x10/0x10 [ 292.394270][T12398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.394310][T12398] ? __pfx__printk+0x10/0x10 [ 292.394338][T12398] ? __might_fault+0xb0/0x130 [ 292.394375][T12398] should_fail_ex+0x414/0x560 [ 292.394419][T12398] _copy_from_iter+0x1db/0x16f0 [ 292.394445][T12398] ? rcu_is_watching+0x15/0xb0 [ 292.394471][T12398] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 292.394498][T12398] ? __pfx__copy_from_iter+0x10/0x10 [ 292.394521][T12398] ? __build_skb_around+0x257/0x3e0 [ 292.394554][T12398] ? netlink_sendmsg+0x642/0xb30 [ 292.394580][T12398] ? skb_put+0x11b/0x210 [ 292.394612][T12398] netlink_sendmsg+0x6b2/0xb30 [ 292.394649][T12398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.394680][T12398] ? aa_sock_msg_perm+0x94/0x160 [ 292.394713][T12398] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 292.394743][T12398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.394772][T12398] __sock_sendmsg+0x21c/0x270 [ 292.394801][T12398] sock_write_iter+0x258/0x330 [ 292.394827][T12398] ? __pfx_sock_write_iter+0x10/0x10 [ 292.394864][T12398] ? __pfx_aa_file_perm+0x10/0x10 [ 292.394891][T12398] do_iter_readv_writev+0x56b/0x7f0 [ 292.394921][T12398] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 292.394952][T12398] ? bpf_lsm_file_permission+0x9/0x20 [ 292.394971][T12398] ? security_file_permission+0x75/0x290 [ 292.395002][T12398] ? rw_verify_area+0x258/0x650 [ 292.395047][T12398] vfs_writev+0x31a/0x960 [ 292.395081][T12398] ? __lock_acquire+0xab9/0xd20 [ 292.395103][T12398] ? __pfx_vfs_writev+0x10/0x10 [ 292.395148][T12398] ? __fget_files+0x2a/0x420 [ 292.395179][T12398] ? __fget_files+0x3a0/0x420 [ 292.395204][T12398] ? __fget_files+0x2a/0x420 [ 292.395241][T12398] do_writev+0x14d/0x2d0 [ 292.395272][T12398] ? __pfx_do_writev+0x10/0x10 [ 292.395298][T12398] ? rcu_is_watching+0x15/0xb0 [ 292.395327][T12398] ? do_syscall_64+0xbe/0x3b0 [ 292.395360][T12398] do_syscall_64+0xfa/0x3b0 [ 292.395387][T12398] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.395426][T12398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.395447][T12398] ? clear_bhb_loop+0x60/0xb0 [ 292.395472][T12398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.395491][T12398] RIP: 0033:0x7f7e8138e929 [ 292.395510][T12398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.395529][T12398] RSP: 002b:00007f7e821d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 292.395551][T12398] RAX: ffffffffffffffda RBX: 00007f7e815b5fa0 RCX: 00007f7e8138e929 [ 292.395566][T12398] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 292.395580][T12398] RBP: 00007f7e821d3090 R08: 0000000000000000 R09: 0000000000000000 [ 292.395593][T12398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.395605][T12398] R13: 0000000000000000 R14: 00007f7e815b5fa0 R15: 00007ffd43031418 [ 292.395638][T12398] [ 292.809027][T12407] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2100'. [ 292.993529][T12414] tipc: Started in network mode [ 292.998452][T12414] tipc: Node identity , cluster identity 4711 [ 293.014852][T12414] tipc: Failed to obtain node identity [ 293.022301][T12414] tipc: Enabling of bearer rejected, failed to enable media [ 293.199678][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 293.363278][T12407] wg1 speed is unknown, defaulting to 1000 [ 293.780430][T12441] macsec1: entered allmulticast mode [ 293.785861][T12441] team0: entered allmulticast mode [ 293.793806][T12441] vlan0: entered allmulticast mode [ 293.799729][T12441] veth0_vlan: entered allmulticast mode [ 293.823556][T12441] team0: left allmulticast mode [ 293.828955][T12441] vlan0: left allmulticast mode [ 293.834454][T12441] veth0_vlan: left allmulticast mode [ 294.123651][T12454] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 294.290116][T12458] netlink: 'syz.0.2112': attribute type 16 has an invalid length. [ 294.297999][T12458] netlink: 'syz.0.2112': attribute type 17 has an invalid length. [ 294.348002][T12458] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.795671][T12438] wg1 speed is unknown, defaulting to 1000 [ 295.320994][T12500] netlink: 'syz.0.2127': attribute type 21 has an invalid length. [ 295.350555][T12501] netlink: 'syz.2.2126': attribute type 10 has an invalid length. [ 295.355645][T12500] __nla_validate_parse: 3 callbacks suppressed [ 295.355667][T12500] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2127'. [ 295.373214][T12501] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2126'. [ 295.438213][T12501] batman_adv: batadv0: Adding interface: virt_wifi0 [ 295.445613][T12501] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.472259][T12501] batman_adv: batadv0: Interface activated: virt_wifi0 [ 295.483420][T12500] netlink: 'syz.0.2127': attribute type 4 has an invalid length. [ 295.492971][T12500] netlink: 'syz.0.2127': attribute type 5 has an invalid length. [ 295.501656][T12500] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2127'. [ 295.713214][T12510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2129'. [ 295.882693][T12517] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 295.945549][T12520] 8021q: VLANs not supported on bond0 [ 295.961405][T12520] tipc: Enabling of bearer rejected, failed to enable media [ 296.045937][T12522] tipc: Enabled bearer , priority 0 [ 296.060670][T12521] tipc: Resetting bearer [ 296.175979][T12521] tipc: Disabling bearer [ 296.265036][T12529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2136'. [ 297.259843][T12548] syz_tun: entered allmulticast mode [ 297.281681][T12548] syz_tun: left allmulticast mode [ 297.428993][T12552] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2147'. [ 298.157820][T12582] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 298.320837][T12588] netlink: 'syz.2.2160': attribute type 11 has an invalid length. [ 298.340333][T12588] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2160'. [ 298.352712][T12586] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 298.430714][T12574] wg1 speed is unknown, defaulting to 1000 [ 298.755304][T12602] netlink: 'syz.1.2166': attribute type 21 has an invalid length. [ 298.763339][T12602] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2166'. [ 299.068644][T12597] team0: Port device vlan0 removed [ 299.118819][T12602] netlink: 'syz.1.2166': attribute type 4 has an invalid length. [ 299.127338][T12602] netlink: 'syz.1.2166': attribute type 5 has an invalid length. [ 299.136915][T12602] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2166'. [ 299.149551][T12571] wg1 speed is unknown, defaulting to 1000 [ 300.053347][T12638] team0: Device vlan0 failed to register rx_handler [ 300.200048][T12642] netlink: 'syz.0.2180': attribute type 21 has an invalid length. [ 300.213934][T12644] netlink: 'syz.1.2181': attribute type 2 has an invalid length. [ 300.224591][T12645] netlink: 'syz.1.2181': attribute type 2 has an invalid length. [ 300.245947][T12642] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2180'. [ 300.268722][T12645] netlink: 'syz.1.2181': attribute type 4 has an invalid length. [ 300.280168][T12644] netlink: 'syz.1.2181': attribute type 4 has an invalid length. [ 300.313687][T12642] netlink: 'syz.0.2180': attribute type 4 has an invalid length. [ 300.323450][T12649] syz_tun: entered allmulticast mode [ 300.357857][T12649] syz_tun: left allmulticast mode [ 300.399834][ T5868] Bluetooth: hci0: command tx timeout [ 300.666100][T12665] __nla_validate_parse: 5 callbacks suppressed [ 300.666139][T12665] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2189'. [ 300.886613][T12676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2193'. [ 301.009019][T12680] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2194'. [ 301.021082][T12680] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2194'. [ 301.050140][T12682] syz_tun: entered allmulticast mode [ 301.063956][T12682] syz_tun: left allmulticast mode [ 301.137302][T12684] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2197'. [ 301.190758][T12684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2197'. [ 301.248947][T12690] syz_tun: entered allmulticast mode [ 301.460545][T12689] syz_tun: left allmulticast mode [ 301.566816][ T3013] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.593032][ T3013] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.615335][ T3013] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.657597][ T3013] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.857579][T12725] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2212'. [ 301.878372][T12725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2212'. [ 301.919020][T12725] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2212'. [ 301.977192][T12729] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 302.050287][T12729] vlan0: left promiscuous mode [ 302.107445][T12729] batman_adv: batadv0: Interface deactivated: macvlan4 [ 302.138053][ T6260] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.157721][ T6260] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.182468][ T6260] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.247168][ T6260] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.360639][T12744] tipc: Enabled bearer , priority 0 [ 302.612789][T12743] tipc: Resetting bearer [ 302.645192][T12743] tipc: Disabling bearer [ 303.060452][T12774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2231'. [ 303.089019][T12777] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 303.104616][T12776] IPVS: stopping backup sync thread 12777 ... [ 303.915416][T12809] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 304.061967][T12817] validate_nla: 5 callbacks suppressed [ 304.061989][T12817] netlink: 'syz.0.2245': attribute type 16 has an invalid length. [ 304.092482][T12817] netlink: 'syz.0.2245': attribute type 17 has an invalid length. [ 304.113255][T12817] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.554415][T12844] netlink: 'syz.1.2258': attribute type 12 has an invalid length. [ 305.929524][T12884] __nla_validate_parse: 3 callbacks suppressed [ 305.929544][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2275'. [ 305.975601][T12884] macsec1: entered allmulticast mode [ 306.020060][T12884] bond0: entered allmulticast mode [ 306.028060][T12884] bond_slave_0: entered allmulticast mode [ 306.040153][T12884] bond_slave_1: entered allmulticast mode [ 306.057270][T12884] bond0: left allmulticast mode [ 306.062796][T12884] bond_slave_0: left allmulticast mode [ 306.076861][T12884] bond_slave_1: left allmulticast mode [ 306.306462][T12898] netlink: 'syz.0.2282': attribute type 21 has an invalid length. [ 306.334431][T12898] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2282'. [ 306.373053][T12898] netlink: 'syz.0.2282': attribute type 4 has an invalid length. [ 306.403961][T12898] netlink: 'syz.0.2282': attribute type 5 has an invalid length. [ 306.430631][T12898] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2282'. [ 306.449367][T12909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.746411][T12926] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2291'. [ 306.937851][T12940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2298'. [ 306.947447][T12941] netlink: 'syz.2.2297': attribute type 21 has an invalid length. [ 306.957119][T12943] tipc: Can't bind to reserved service type 1 [ 306.984768][T12941] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2297'. [ 307.097888][T12950] netlink: 'syz.0.2300': attribute type 21 has an invalid length. [ 307.137216][T12950] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2300'. [ 307.171723][T12950] netlink: 'syz.0.2300': attribute type 4 has an invalid length. [ 307.191327][T12950] netlink: 'syz.0.2300': attribute type 5 has an invalid length. [ 307.221542][T12950] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2300'. [ 307.413098][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2306'. [ 307.584409][T12970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2307'. [ 307.625259][T12974] FAULT_INJECTION: forcing a failure. [ 307.625259][T12974] name failslab, interval 1, probability 0, space 0, times 0 [ 307.664711][T12974] CPU: 0 UID: 0 PID: 12974 Comm: syz.0.2309 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 307.664742][T12974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 307.664755][T12974] Call Trace: [ 307.664764][T12974] [ 307.664772][T12974] dump_stack_lvl+0x189/0x250 [ 307.664804][T12974] ? __pfx____ratelimit+0x10/0x10 [ 307.664832][T12974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.664858][T12974] ? __pfx__printk+0x10/0x10 [ 307.664894][T12974] ? ref_tracker_alloc+0x318/0x460 [ 307.664931][T12974] should_fail_ex+0x414/0x560 [ 307.664965][T12974] should_failslab+0xa8/0x100 [ 307.664993][T12974] kmem_cache_alloc_noprof+0x73/0x3c0 [ 307.665016][T12974] ? skb_clone+0x212/0x3a0 [ 307.665050][T12974] skb_clone+0x212/0x3a0 [ 307.665076][T12974] __netlink_deliver_tap+0x404/0x850 [ 307.665121][T12974] ? netlink_deliver_tap+0x2e/0x1b0 [ 307.665153][T12974] netlink_deliver_tap+0x19c/0x1b0 [ 307.665184][T12974] __netlink_sendskb+0x47/0x90 [ 307.665209][T12974] netlink_dump+0xa62/0xe60 [ 307.665252][T12974] ? __pfx_netlink_dump+0x10/0x10 [ 307.665293][T12974] ? netlink_lookup+0x30/0x200 [ 307.665320][T12974] ? netlink_lookup+0x30/0x200 [ 307.665343][T12974] ? netlink_lookup+0x30/0x200 [ 307.665376][T12974] __netlink_dump_start+0x5cb/0x7e0 [ 307.665413][T12974] netlink_diag_handler_dump+0x181/0x220 [ 307.665441][T12974] ? __pfx_netlink_diag_handler_dump+0x10/0x10 [ 307.665465][T12974] ? __pfx_netlink_diag_dump+0x10/0x10 [ 307.665485][T12974] ? __pfx_netlink_diag_dump_done+0x10/0x10 [ 307.665511][T12974] ? sock_diag_lock_handler+0x19/0x290 [ 307.665537][T12974] ? sock_diag_lock_handler+0x19/0x290 [ 307.665569][T12974] sock_diag_rcv_msg+0x4cc/0x600 [ 307.665602][T12974] netlink_rcv_skb+0x205/0x470 [ 307.665628][T12974] ? rcu_is_watching+0x15/0xb0 [ 307.665654][T12974] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 307.665682][T12974] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 307.665726][T12974] ? netlink_deliver_tap+0x2e/0x1b0 [ 307.665764][T12974] netlink_unicast+0x759/0x8e0 [ 307.665802][T12974] netlink_sendmsg+0x805/0xb30 [ 307.665843][T12974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.665875][T12974] ? aa_sock_msg_perm+0x94/0x160 [ 307.665907][T12974] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 307.665936][T12974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.665966][T12974] __sock_sendmsg+0x21c/0x270 [ 307.665994][T12974] sock_write_iter+0x258/0x330 [ 307.666024][T12974] ? __pfx_sock_write_iter+0x10/0x10 [ 307.666084][T12974] ? __pfx_aa_file_perm+0x10/0x10 [ 307.666112][T12974] do_iter_readv_writev+0x56b/0x7f0 [ 307.666141][T12974] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 307.666172][T12974] ? bpf_lsm_file_permission+0x9/0x20 [ 307.666191][T12974] ? security_file_permission+0x75/0x290 [ 307.666218][T12974] ? rw_verify_area+0x258/0x650 [ 307.666245][T12974] vfs_writev+0x31a/0x960 [ 307.666279][T12974] ? __lock_acquire+0xab9/0xd20 [ 307.666319][T12974] ? __pfx_vfs_writev+0x10/0x10 [ 307.666367][T12974] ? __fget_files+0x2a/0x420 [ 307.666399][T12974] ? __fget_files+0x3a0/0x420 [ 307.666424][T12974] ? __fget_files+0x2a/0x420 [ 307.666461][T12974] do_writev+0x14d/0x2d0 [ 307.666493][T12974] ? __pfx_do_writev+0x10/0x10 [ 307.666518][T12974] ? rcu_is_watching+0x15/0xb0 [ 307.666547][T12974] ? do_syscall_64+0xbe/0x3b0 [ 307.666581][T12974] do_syscall_64+0xfa/0x3b0 [ 307.666606][T12974] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.666633][T12974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.666654][T12974] ? clear_bhb_loop+0x60/0xb0 [ 307.666679][T12974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.666699][T12974] RIP: 0033:0x7f670ef8e929 [ 307.666719][T12974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.666736][T12974] RSP: 002b:00007f670fdb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 307.666759][T12974] RAX: ffffffffffffffda RBX: 00007f670f1b5fa0 RCX: 00007f670ef8e929 [ 307.666775][T12974] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 307.666788][T12974] RBP: 00007f670fdb6090 R08: 0000000000000000 R09: 0000000000000000 [ 307.666800][T12974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.666811][T12974] R13: 0000000000000000 R14: 00007f670f1b5fa0 R15: 00007ffd303b5f98 [ 307.666857][T12974] [ 308.197524][T12981] xt_CT: You must specify a L4 protocol and not use inversions on it [ 308.463834][T12993] syz_tun: entered allmulticast mode [ 308.496321][T12993] syz_tun: left allmulticast mode [ 308.611088][T12995] macsec1: entered allmulticast mode [ 308.623853][T12995] team0: entered allmulticast mode [ 308.634941][T12995] team0: left allmulticast mode [ 308.694934][T13004] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.799469][T13011] xt_TPROXY: Can be used only with -p tcp or -p udp [ 309.246126][T13027] validate_nla: 4 callbacks suppressed [ 309.246144][T13027] netlink: 'syz.3.2331': attribute type 12 has an invalid length. [ 309.289677][T13027] netlink: 'syz.3.2331': attribute type 11 has an invalid length. [ 309.506323][T13007] wg1 speed is unknown, defaulting to 1000 [ 309.888271][ T30] audit: type=1107 audit(1752605007.770:4): pid=13044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 309.979632][T13055] IPv4: Oversized IP packet from 127.202.26.0 [ 310.692027][T13067] wg1 speed is unknown, defaulting to 1000 [ 311.046908][T13099] netlink: 'syz.0.2358': attribute type 1 has an invalid length. [ 311.060556][T13099] __nla_validate_parse: 9 callbacks suppressed [ 311.060576][T13099] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2358'. [ 311.104283][T13099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2358'. [ 311.533364][T13119] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2366'. [ 311.619742][T13119] netem: unknown loss type 13 [ 311.629482][T13119] netem: change failed [ 311.822832][T13128] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.926101][T13130] IPVS: Scheduler module ip_vs_sip not found [ 312.104028][T13136] netlink: 'syz.4.2370': attribute type 1 has an invalid length. [ 312.134615][T13139] netlink: 'syz.3.2371': attribute type 7 has an invalid length. [ 312.521526][T13156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2378'. [ 312.561292][T13156] macvtap2: entered promiscuous mode [ 312.566702][T13156] team0: entered promiscuous mode [ 312.576801][T13156] macvtap2: entered allmulticast mode [ 312.583484][T13156] team0: entered allmulticast mode [ 312.588769][T13156] vlan0: entered allmulticast mode [ 312.599712][T13156] veth0_vlan: entered allmulticast mode [ 312.607840][T13156] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 312.624057][T13163] team0: Device vlan0 failed to register rx_handler [ 312.646816][T13164] team0: left allmulticast mode [ 312.657146][T13164] vlan0: left allmulticast mode [ 312.674057][T13164] veth0_vlan: left allmulticast mode [ 312.683860][T13164] team0: left promiscuous mode [ 312.703550][T13162] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 313.169760][T13189] IPv4: Oversized IP packet from 127.202.26.0 [ 313.675151][T13202] FAULT_INJECTION: forcing a failure. [ 313.675151][T13202] name failslab, interval 1, probability 0, space 0, times 0 [ 313.696094][T13202] CPU: 0 UID: 0 PID: 13202 Comm: syz.4.2398 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 313.696125][T13202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 313.696137][T13202] Call Trace: [ 313.696145][T13202] [ 313.696155][T13202] dump_stack_lvl+0x189/0x250 [ 313.696185][T13202] ? __pfx____ratelimit+0x10/0x10 [ 313.696212][T13202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.696236][T13202] ? __pfx__printk+0x10/0x10 [ 313.696270][T13202] ? __pfx___might_resched+0x10/0x10 [ 313.696294][T13202] ? fs_reclaim_acquire+0x7d/0x100 [ 313.696328][T13202] should_fail_ex+0x414/0x560 [ 313.696362][T13202] should_failslab+0xa8/0x100 [ 313.696390][T13202] __kmalloc_noprof+0xcb/0x4f0 [ 313.696412][T13202] ? kfree+0x4d/0x440 [ 313.696430][T13202] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 313.696457][T13202] tomoyo_realpath_from_path+0xe3/0x5d0 [ 313.696486][T13202] ? tomoyo_domain+0xd9/0x130 [ 313.696512][T13202] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 313.696540][T13202] tomoyo_path_number_perm+0x1e8/0x5a0 [ 313.696577][T13202] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 313.696625][T13202] ? __lock_acquire+0xab9/0xd20 [ 313.696670][T13202] ? __fget_files+0x2a/0x420 [ 313.696699][T13202] ? __fget_files+0x2a/0x420 [ 313.696722][T13202] ? __fget_files+0x3a0/0x420 [ 313.696747][T13202] ? __fget_files+0x2a/0x420 [ 313.696777][T13202] security_file_ioctl+0xcb/0x2d0 [ 313.696805][T13202] __se_sys_ioctl+0x47/0x170 [ 313.696830][T13202] do_syscall_64+0xfa/0x3b0 [ 313.696861][T13202] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.696887][T13202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.696907][T13202] ? clear_bhb_loop+0x60/0xb0 [ 313.696949][T13202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.696969][T13202] RIP: 0033:0x7fe7c2f8e929 [ 313.696987][T13202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.697005][T13202] RSP: 002b:00007fe7c3ed9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.697027][T13202] RAX: ffffffffffffffda RBX: 00007fe7c31b5fa0 RCX: 00007fe7c2f8e929 [ 313.697042][T13202] RDX: 0000200000000280 RSI: 00000000000089f1 RDI: 0000000000000003 [ 313.697056][T13202] RBP: 00007fe7c3ed9090 R08: 0000000000000000 R09: 0000000000000000 [ 313.697069][T13202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.697081][T13202] R13: 0000000000000000 R14: 00007fe7c31b5fa0 R15: 00007fff48171c28 [ 313.697116][T13202] [ 313.697585][T13202] ERROR: Out of memory at tomoyo_realpath_from_path. [ 314.014419][T13193] wg1 speed is unknown, defaulting to 1000 [ 314.125548][T13208] FAULT_INJECTION: forcing a failure. [ 314.125548][T13208] name failslab, interval 1, probability 0, space 0, times 0 [ 314.144301][T13208] CPU: 1 UID: 0 PID: 13208 Comm: syz.1.2401 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 314.144332][T13208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 314.144344][T13208] Call Trace: [ 314.144352][T13208] [ 314.144360][T13208] dump_stack_lvl+0x189/0x250 [ 314.144385][T13208] ? __pfx____ratelimit+0x10/0x10 [ 314.144411][T13208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.144434][T13208] ? __pfx__printk+0x10/0x10 [ 314.144477][T13208] should_fail_ex+0x414/0x560 [ 314.144523][T13208] should_failslab+0xa8/0x100 [ 314.144559][T13208] kmem_cache_alloc_noprof+0x73/0x3c0 [ 314.144581][T13208] ? skb_clone+0x212/0x3a0 [ 314.144607][T13208] skb_clone+0x212/0x3a0 [ 314.144630][T13208] __netlink_deliver_tap+0x404/0x850 [ 314.144671][T13208] ? netlink_deliver_tap+0x2e/0x1b0 [ 314.144700][T13208] netlink_deliver_tap+0x19c/0x1b0 [ 314.144728][T13208] netlink_sendskb+0x68/0x140 [ 314.144755][T13208] netlink_rcv_skb+0x28c/0x470 [ 314.144782][T13208] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 314.144811][T13208] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 314.144851][T13208] ? netlink_deliver_tap+0x2e/0x1b0 [ 314.144877][T13208] ? netlink_deliver_tap+0x2e/0x1b0 [ 314.144909][T13208] netlink_unicast+0x759/0x8e0 [ 314.144946][T13208] netlink_sendmsg+0x805/0xb30 [ 314.144985][T13208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.145016][T13208] ? aa_sock_msg_perm+0x94/0x160 [ 314.145047][T13208] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 314.145077][T13208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.145105][T13208] __sock_sendmsg+0x21c/0x270 [ 314.145133][T13208] ____sys_sendmsg+0x52d/0x830 [ 314.145170][T13208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.145211][T13208] ? import_iovec+0x74/0xa0 [ 314.145237][T13208] ___sys_sendmsg+0x21f/0x2a0 [ 314.145259][T13208] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.145319][T13208] ? __fget_files+0x2a/0x420 [ 314.145343][T13208] ? __fget_files+0x3a0/0x420 [ 314.145381][T13208] __sys_sendmmsg+0x227/0x430 [ 314.145405][T13208] ? __pfx___sys_sendmmsg+0x10/0x10 [ 314.145421][T13208] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 314.145473][T13208] ? ksys_write+0x22a/0x250 [ 314.145498][T13208] ? __pfx_ksys_write+0x10/0x10 [ 314.145524][T13208] ? rcu_is_watching+0x15/0xb0 [ 314.145555][T13208] __x64_sys_sendmmsg+0xa0/0xc0 [ 314.145577][T13208] do_syscall_64+0xfa/0x3b0 [ 314.145602][T13208] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.145628][T13208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.145647][T13208] ? clear_bhb_loop+0x60/0xb0 [ 314.145672][T13208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.145691][T13208] RIP: 0033:0x7f7e8138e929 [ 314.145710][T13208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.145726][T13208] RSP: 002b:00007f7e821d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 314.145748][T13208] RAX: ffffffffffffffda RBX: 00007f7e815b5fa0 RCX: 00007f7e8138e929 [ 314.145762][T13208] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000004 [ 314.145776][T13208] RBP: 00007f7e821d3090 R08: 0000000000000000 R09: 0000000000000000 [ 314.145788][T13208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.145800][T13208] R13: 0000000000000000 R14: 00007f7e815b5fa0 R15: 00007ffd43031418 [ 314.145832][T13208] [ 314.726828][T13221] FAULT_INJECTION: forcing a failure. [ 314.726828][T13221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.740031][T13221] CPU: 1 UID: 0 PID: 13221 Comm: syz.3.2407 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 314.740060][T13221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 314.740073][T13221] Call Trace: [ 314.740081][T13221] [ 314.740089][T13221] dump_stack_lvl+0x189/0x250 [ 314.740119][T13221] ? __pfx____ratelimit+0x10/0x10 [ 314.740147][T13221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.740172][T13221] ? __pfx__printk+0x10/0x10 [ 314.740200][T13221] ? __might_fault+0xb0/0x130 [ 314.740238][T13221] should_fail_ex+0x414/0x560 [ 314.740272][T13221] _copy_from_user+0x2d/0xb0 [ 314.740297][T13221] __sys_bpf+0x1ed/0x860 [ 314.740331][T13221] ? __pfx___sys_bpf+0x10/0x10 [ 314.740377][T13221] ? ksys_write+0x22a/0x250 [ 314.740403][T13221] ? __pfx_ksys_write+0x10/0x10 [ 314.740435][T13221] __x64_sys_bpf+0x7c/0x90 [ 314.740465][T13221] do_syscall_64+0xfa/0x3b0 [ 314.740500][T13221] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.740526][T13221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.740547][T13221] ? clear_bhb_loop+0x60/0xb0 [ 314.740572][T13221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.740591][T13221] RIP: 0033:0x7f341af8e929 [ 314.740610][T13221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.740627][T13221] RSP: 002b:00007f341be19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 314.740648][T13221] RAX: ffffffffffffffda RBX: 00007f341b1b5fa0 RCX: 00007f341af8e929 [ 314.740663][T13221] RDX: 0000000000000048 RSI: 00002000000000c0 RDI: 0000000000000000 [ 314.740676][T13221] RBP: 00007f341be19090 R08: 0000000000000000 R09: 0000000000000000 [ 314.740688][T13221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.740700][T13221] R13: 0000000000000001 R14: 00007f341b1b5fa0 R15: 00007ffc93573068 [ 314.740732][T13221] [ 314.952024][T13224] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 315.204843][T13229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2408'. [ 315.347565][T13232] batman_adv: batadv0: Adding interface: ipvlan2 [ 315.354140][T13232] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.380852][T13232] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 315.392773][T13211] wg1 speed is unknown, defaulting to 1000 [ 315.761767][T13251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2415'. [ 316.412686][T13270] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 316.579939][T13276] netlink: 'syz.1.2422': attribute type 16 has an invalid length. [ 316.588347][T13276] netlink: 'syz.1.2422': attribute type 17 has an invalid length. [ 316.625779][T13276] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.708424][T13279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.119040][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.342532][T13297] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.730937][T13316] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2439'. [ 317.910163][T13324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2443'. [ 318.007596][T13327] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 318.048741][T13327] team0: Port device dummy0 removed [ 318.062552][T13327] bond0: (slave bond_slave_0): Releasing backup interface [ 318.084043][T13327] bond0: (slave bond_slave_1): Releasing backup interface [ 318.097872][T13330] netlink: 'syz.2.2444': attribute type 10 has an invalid length. [ 318.110337][T13327] team0: Port device team_slave_0 removed [ 318.128661][T13327] team0: Port device team_slave_1 removed [ 318.153149][T13327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.196287][T13327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.224091][T13327] batman_adv: batadv0: Removing interface: virt_wifi0 [ 318.247932][T13327] team0: Port device vlan0 removed [ 318.267690][T13327] team0: Port device geneve0 removed [ 318.276946][T13327] batman_adv: batadv0: Removing interface: macvlan4 [ 318.302407][T13330] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 318.384823][T13330] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 318.394430][T13344] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2448'. [ 318.431557][T13333] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 318.451440][T13333] netlink: 'syz.3.2446': attribute type 16 has an invalid length. [ 318.479461][T13333] netlink: 'syz.3.2446': attribute type 17 has an invalid length. [ 318.487591][T13344] batadv1: entered promiscuous mode [ 318.494041][T13344] batadv1: entered allmulticast mode [ 318.533077][T13333] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 318.744854][T13347] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2448'. [ 319.084939][T13362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2453'. [ 319.236346][T13369] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2456'. [ 319.317507][T13377] netlink: 'syz.3.2460': attribute type 7 has an invalid length. [ 319.636625][T13394] IPv4: Oversized IP packet from 127.202.26.0 [ 319.804242][T13385] team0: Port device vlan0 removed [ 319.848922][T13392] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 319.858554][T13401] syz_tun: entered allmulticast mode [ 319.882892][T13392] netlink: 'syz.1.2466': attribute type 16 has an invalid length. [ 319.891266][T13392] netlink: 'syz.1.2466': attribute type 17 has an invalid length. [ 319.919346][T13392] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 319.957112][T13406] FAULT_INJECTION: forcing a failure. [ 319.957112][T13406] name failslab, interval 1, probability 0, space 0, times 0 [ 319.982487][T13399] syz_tun: left allmulticast mode [ 319.989461][T13406] CPU: 0 UID: 0 PID: 13406 Comm: syz.2.2471 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 319.989491][T13406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 319.989503][T13406] Call Trace: [ 319.989511][T13406] [ 319.989520][T13406] dump_stack_lvl+0x189/0x250 [ 319.989568][T13406] ? __pfx____ratelimit+0x10/0x10 [ 319.989596][T13406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.989620][T13406] ? __pfx__printk+0x10/0x10 [ 319.989652][T13406] ? __pfx___might_resched+0x10/0x10 [ 319.989676][T13406] ? fs_reclaim_acquire+0x7d/0x100 [ 319.989710][T13406] should_fail_ex+0x414/0x560 [ 319.989745][T13406] should_failslab+0xa8/0x100 [ 319.989773][T13406] __kmalloc_noprof+0xcb/0x4f0 [ 319.989796][T13406] ? tomoyo_encode+0x28b/0x550 [ 319.989822][T13406] tomoyo_encode+0x28b/0x550 [ 319.989848][T13406] tomoyo_realpath_from_path+0x58d/0x5d0 [ 319.989871][T13406] ? tomoyo_domain+0xd9/0x130 [ 319.989898][T13406] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 319.989926][T13406] tomoyo_path_number_perm+0x1e8/0x5a0 [ 319.989958][T13406] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 319.990007][T13406] ? __lock_acquire+0xab9/0xd20 [ 319.990053][T13406] ? __fget_files+0x2a/0x420 [ 319.990084][T13406] ? __fget_files+0x2a/0x420 [ 319.990107][T13406] ? __fget_files+0x3a0/0x420 [ 319.990129][T13406] ? __fget_files+0x2a/0x420 [ 319.990161][T13406] security_file_ioctl+0xcb/0x2d0 [ 319.990190][T13406] __se_sys_ioctl+0x47/0x170 [ 319.990216][T13406] do_syscall_64+0xfa/0x3b0 [ 319.990243][T13406] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.990269][T13406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.990290][T13406] ? clear_bhb_loop+0x60/0xb0 [ 319.990316][T13406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.990336][T13406] RIP: 0033:0x7f5d2ad8e929 [ 319.990362][T13406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.990379][T13406] RSP: 002b:00007f5d2bbfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.990401][T13406] RAX: ffffffffffffffda RBX: 00007f5d2afb5fa0 RCX: 00007f5d2ad8e929 [ 319.990416][T13406] RDX: 0000200000000280 RSI: 00000000000089f1 RDI: 0000000000000003 [ 319.990429][T13406] RBP: 00007f5d2bbfa090 R08: 0000000000000000 R09: 0000000000000000 [ 319.990441][T13406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.990453][T13406] R13: 0000000000000000 R14: 00007f5d2afb5fa0 R15: 00007ffc13da8f68 [ 319.990487][T13406] [ 319.990510][T13406] ERROR: Out of memory at tomoyo_realpath_from_path. [ 320.249906][T13411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2472'. [ 320.350341][T13415] netlink: 'syz.2.2475': attribute type 7 has an invalid length. [ 320.470618][T13422] x_tables: duplicate entry at hook 1 [ 320.517951][T13422] syzkaller1: entered promiscuous mode [ 320.528176][T13422] syzkaller1: entered allmulticast mode [ 320.615739][T13429] netlink: 'syz.2.2481': attribute type 7 has an invalid length. [ 320.651703][T13425] IPv6: Can't replace route, no match found [ 320.725561][T13430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2480'. [ 320.751832][T13430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2480'. [ 320.806169][T13436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2485'. [ 320.841653][T13430] syzkaller0: entered promiscuous mode [ 320.847183][T13430] syzkaller0: entered allmulticast mode [ 321.025501][T13447] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 321.236503][T13456] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 321.630277][T13475] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 321.801624][T13479] FAULT_INJECTION: forcing a failure. [ 321.801624][T13479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.816419][T13479] CPU: 0 UID: 0 PID: 13479 Comm: syz.3.2500 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 321.816449][T13479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.816461][T13479] Call Trace: [ 321.816469][T13479] [ 321.816477][T13479] dump_stack_lvl+0x189/0x250 [ 321.816506][T13479] ? __pfx____ratelimit+0x10/0x10 [ 321.816533][T13479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.816557][T13479] ? __pfx__printk+0x10/0x10 [ 321.816583][T13479] ? __might_fault+0xb0/0x130 [ 321.816619][T13479] should_fail_ex+0x414/0x560 [ 321.816653][T13479] _copy_from_user+0x2d/0xb0 [ 321.816676][T13479] ___sys_sendmsg+0x158/0x2a0 [ 321.816698][T13479] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.816756][T13479] ? __fget_files+0x2a/0x420 [ 321.816782][T13479] ? __fget_files+0x3a0/0x420 [ 321.816821][T13479] __x64_sys_sendmsg+0x19b/0x260 [ 321.816843][T13479] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 321.816873][T13479] ? __pfx_ksys_write+0x10/0x10 [ 321.816893][T13479] ? rcu_is_watching+0x15/0xb0 [ 321.816933][T13479] ? do_syscall_64+0xbe/0x3b0 [ 321.816969][T13479] do_syscall_64+0xfa/0x3b0 [ 321.816994][T13479] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.817018][T13479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.817038][T13479] ? clear_bhb_loop+0x60/0xb0 [ 321.817061][T13479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.817079][T13479] RIP: 0033:0x7f341af8e929 [ 321.817096][T13479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.817112][T13479] RSP: 002b:00007f341be19038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.817130][T13479] RAX: ffffffffffffffda RBX: 00007f341b1b5fa0 RCX: 00007f341af8e929 [ 321.817144][T13479] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 321.817156][T13479] RBP: 00007f341be19090 R08: 0000000000000000 R09: 0000000000000000 [ 321.817167][T13479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.817177][T13479] R13: 0000000000000000 R14: 00007f341b1b5fa0 R15: 00007ffc93573068 [ 321.817207][T13479] [ 322.185796][T13485] validate_nla: 3 callbacks suppressed [ 322.185815][T13485] netlink: 'syz.0.2502': attribute type 7 has an invalid length. [ 322.229755][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.571496][T13500] IPv4: Oversized IP packet from 127.202.26.0 [ 322.649786][T13503] siw: device registration error -23 [ 323.129921][T13515] netlink: 'syz.0.2512': attribute type 21 has an invalid length. [ 323.305017][T13524] netlink: 'syz.3.2514': attribute type 3 has an invalid length. [ 323.459661][T13530] netlink: 'syz.3.2516': attribute type 7 has an invalid length. [ 323.803627][T13535] batman_adv: batadv0: Interface deactivated: macvlan4 [ 323.835606][T13535] batman_adv: batadv0: Interface deactivated: gretap2 [ 323.877568][ T6260] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.887235][ T6260] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.902189][ T6260] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.913450][T13543] x_tables: duplicate entry at hook 1 [ 323.921103][ T6260] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.245073][T13558] __nla_validate_parse: 3 callbacks suppressed [ 324.245092][T13558] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2526'. [ 324.344109][T13560] netlink: 'syz.1.2527': attribute type 7 has an invalid length. [ 324.812276][T13570] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2532'. [ 324.975109][T13586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2537'. [ 325.166144][T13596] netlink: 'syz.3.2542': attribute type 7 has an invalid length. [ 325.703625][T13619] netlink: 'syz.1.2551': attribute type 1 has an invalid length. [ 325.833945][T13626] netlink: 'syz.0.2554': attribute type 7 has an invalid length. [ 326.086267][T13637] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2557'. [ 326.126587][T13637] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2557'. [ 326.175417][T13642] syz_tun: entered allmulticast mode [ 326.594533][T13642] bridge0: port 3(team0) entered disabled state [ 326.601167][T13642] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.854088][T13642] batadv_slave_0: left promiscuous mode [ 326.867371][T13642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.281197][T13642] macvtap1: left promiscuous mode [ 327.327890][T13636] wg1 speed is unknown, defaulting to 1000 [ 327.334137][T13651] bridge: RTM_NEWNEIGH with invalid ether address [ 327.342979][ T6251] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.354837][ T7796] wg1 speed is unknown, defaulting to 1000 [ 327.364589][ T7796] syz0: Port: 1 Link DOWN [ 327.379101][ T6251] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.398871][ T6251] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.429811][ T6251] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.438365][ T6251] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.463373][ T6251] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.506271][T13640] syz_tun: left allmulticast mode [ 327.522178][ T3013] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.527161][T13658] netlink: 'syz.3.2567': attribute type 7 has an invalid length. [ 327.546012][ T3013] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.710110][T13629] syz.2.2556: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 327.734930][T13629] CPU: 1 UID: 0 PID: 13629 Comm: syz.2.2556 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 327.734961][T13629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 327.734975][T13629] Call Trace: [ 327.734983][T13629] [ 327.734992][T13629] dump_stack_lvl+0x189/0x250 [ 327.735024][T13629] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 327.735058][T13629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.735082][T13629] ? __pfx__printk+0x10/0x10 [ 327.735111][T13629] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 327.735139][T13629] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 327.735174][T13629] warn_alloc+0x214/0x310 [ 327.735208][T13629] ? __pfx_warn_alloc+0x10/0x10 [ 327.735246][T13629] ? __get_vm_area_node+0x28f/0x300 [ 327.735290][T13629] ? translate_table+0x19b/0x2040 [ 327.735326][T13629] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 327.735387][T13629] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 327.735420][T13629] ? rcu_is_watching+0x15/0xb0 [ 327.735447][T13629] ? translate_table+0x19b/0x2040 [ 327.735477][T13629] ? translate_table+0x19b/0x2040 [ 327.735507][T13629] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 327.735533][T13629] ? translate_table+0x19b/0x2040 [ 327.735561][T13629] ? xt_alloc_table_info+0x3b/0xa0 [ 327.735598][T13629] translate_table+0x19b/0x2040 [ 327.735646][T13629] ? __lock_acquire+0xab9/0xd20 [ 327.735673][T13629] ? __pfx_translate_table+0x10/0x10 [ 327.735708][T13629] ? __might_fault+0xb0/0x130 [ 327.735754][T13629] ? _copy_from_user+0x94/0xb0 [ 327.735785][T13629] do_ip6t_set_ctl+0x970/0xce0 [ 327.735826][T13629] ? rcu_is_watching+0x15/0xb0 [ 327.735850][T13629] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 327.735915][T13629] ? __pfx___mutex_lock+0x10/0x10 [ 327.735944][T13629] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 327.735980][T13629] ? __pfx_futex_wait+0x10/0x10 [ 327.736009][T13629] nf_setsockopt+0x26f/0x290 [ 327.736036][T13629] rawv6_setsockopt+0x23b/0x5b0 [ 327.736055][T13629] ? __lock_acquire+0xab9/0xd20 [ 327.736077][T13629] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 327.736099][T13629] ? aa_sock_opt_perm+0x74/0x110 [ 327.736129][T13629] ? sock_common_setsockopt+0x36/0xc0 [ 327.736155][T13629] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 327.736184][T13629] do_sock_setsockopt+0x25a/0x3e0 [ 327.736219][T13629] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 327.736254][T13629] ? __fget_files+0x2a/0x420 [ 327.736291][T13629] __x64_sys_setsockopt+0x18b/0x220 [ 327.736328][T13629] do_syscall_64+0xfa/0x3b0 [ 327.736356][T13629] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.736381][T13629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.736401][T13629] ? clear_bhb_loop+0x60/0xb0 [ 327.736426][T13629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.736445][T13629] RIP: 0033:0x7f5d2ad8e929 [ 327.736464][T13629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.736481][T13629] RSP: 002b:00007f5d2bbfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 327.736503][T13629] RAX: ffffffffffffffda RBX: 00007f5d2afb5fa0 RCX: 00007f5d2ad8e929 [ 327.736518][T13629] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 327.736530][T13629] RBP: 00007f5d2ae10b39 R08: 00000000000004b0 R09: 0000000000000000 [ 327.736543][T13629] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.736556][T13629] R13: 0000000000000000 R14: 00007f5d2afb5fa0 R15: 00007ffc13da8f68 [ 327.736599][T13629] [ 327.736620][T13629] Mem-Info: [ 328.052389][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2569'. [ 328.075008][T13629] active_anon:4557 inactive_anon:0 isolated_anon:0 [ 328.075008][T13629] active_file:1967 inactive_file:39929 isolated_file:0 [ 328.075008][T13629] unevictable:768 dirty:302 writeback:0 [ 328.075008][T13629] slab_reclaimable:12962 slab_unreclaimable:129477 [ 328.075008][T13629] mapped:29560 shmem:1455 pagetables:954 [ 328.075008][T13629] sec_pagetables:0 bounce:0 [ 328.075008][T13629] kernel_misc_reclaimable:0 [ 328.075008][T13629] free:1286347 free_pcp:17099 free_cma:0 [ 328.075073][T13629] Node 0 active_anon:18228kB inactive_anon:0kB active_file:7868kB inactive_file:159520kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118240kB dirty:1204kB writeback:0kB shmem:4284kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12828kB pagetables:3648kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 328.075130][T13629] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 328.086601][T13667] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 328.136065][T13629] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 328.136133][T13629] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 328.136184][T13629] Node 0 DMA32 free:1228164kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18184kB inactive_anon:0kB active_file:7868kB inactive_file:157948kB unevictable:1536kB writepending:1204kB present:3129332kB managed:2558260kB mlocked:0kB bounce:0kB free_pcp:50684kB local_pcp:15628kB free_cma:0kB [ 328.136246][T13629] lowmem_reserve[]: 0 0 1 1 1 [ 328.136289][T13629] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 328.136350][T13629] lowmem_reserve[]: 0 0 0 0 0 [ 328.136397][T13629] Node 1 Normal free:3901852kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17696kB local_pcp:8000kB free_cma:0kB [ 328.136456][T13629] lowmem_reserve[]: 0 0 0 0 0 [ 328.136515][T13629] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 328.382462][T13629] Node 0 DMA32: 1763*4kB (UME) 393*8kB (UME) 470*16kB (UME) 534*32kB (UME) 317*64kB (UME) 153*128kB (UME) 108*256kB (UM) 69*512kB (UM) 51*1024kB (UME) 19*2048kB (UME) 244*4096kB (UM) = 1228212kB [ 328.409682][T13629] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 328.422310][T13629] Node 1 Normal: 193*4kB (UME) 61*8kB (UME) 39*16kB (UME) 152*32kB (UME) 45*64kB (UME) 6*128kB (UME) 5*256kB (UME) 4*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 948*4096kB (M) = 3901852kB [ 328.527896][T13629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 328.558209][T13629] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 328.599279][T13629] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 328.617921][T13629] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 328.676819][T13629] 43348 total pagecache pages [ 328.681868][T13629] 0 pages in swap cache [ 328.686601][T13629] Free swap = 124996kB [ 328.699636][T13629] Total swap = 124996kB [ 328.703857][T13629] 2097051 pages RAM [ 328.712401][T13629] 0 pages HighMem/MovableOnly [ 328.717131][T13629] 425444 pages reserved [ 328.729457][T13629] 0 pages cma reserved [ 328.992501][T13685] pim6reg: entered allmulticast mode [ 329.110935][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2579'. [ 329.140970][T13689] syz_tun: entered allmulticast mode [ 329.191535][T13694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2581'. [ 329.234057][T13689] syz_tun: left allmulticast mode [ 329.448377][T13704] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 329.582878][T13714] netlink: 'syz.0.2585': attribute type 16 has an invalid length. [ 329.607713][T13714] netlink: 'syz.0.2585': attribute type 17 has an invalid length. [ 329.659568][T13714] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 329.662718][T13717] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2591'. [ 329.735817][T13717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2591'. [ 329.765975][T13723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.898622][T13717] vlan0 (unregistering): left promiscuous mode [ 329.929393][T13717] vlan0 (unregistering): left allmulticast mode [ 329.935712][T13717] veth0_vlan (unregistering): left allmulticast mode [ 329.949267][T13717] team0: Port device vlan0 removed [ 330.326016][T13735] netlink: 'syz.0.2596': attribute type 2 has an invalid length. [ 330.345931][T13735] : entered promiscuous mode [ 330.485989][T13740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2599'. [ 330.507913][T13740] macsec1: entered allmulticast mode [ 330.513795][T13740] bond0: entered allmulticast mode [ 330.524328][T13740] bond0: left allmulticast mode [ 330.588158][T13743] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2600'. [ 330.981966][T13761] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 331.102310][T13770] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2611'. [ 331.130071][T13771] netlink: 'syz.2.2606': attribute type 16 has an invalid length. [ 331.138104][T13771] netlink: 'syz.2.2606': attribute type 17 has an invalid length. [ 331.206511][T13771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.216451][T13771] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.236726][T13771] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 331.280785][T13776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2613'. [ 331.339465][T13779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.385183][T13782] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2616'. [ 331.857740][T13805] netlink: 'syz.1.2623': attribute type 42 has an invalid length. [ 331.999736][T13808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2627'. [ 332.238333][T13798] wg1 speed is unknown, defaulting to 1000 [ 332.494976][T13826] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2634'. [ 332.573341][T13828] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2633'. [ 332.865579][T13845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.090110][T13853] IPv6: addrconf: prefix option has invalid lifetime [ 333.109399][T13853] netlink: 'syz.0.2641': attribute type 2 has an invalid length. [ 333.350563][T13864] tc_dump_action: action bad kind [ 333.588047][T13873] batadv1: entered promiscuous mode [ 333.608846][T13873] batadv1: entered allmulticast mode [ 333.795377][T13888] IPv4: Oversized IP packet from 127.202.26.0 [ 333.810783][T13882] : entered promiscuous mode [ 333.851652][T13882] openvswitch: : Dropping previously announced user features [ 334.176168][T13906] netlink: 'syz.0.2663': attribute type 4 has an invalid length. [ 334.303953][T13920] netlink: 'syz.1.2670': attribute type 1 has an invalid length. [ 334.315783][T13917] netlink: 'syz.4.2669': attribute type 10 has an invalid length. [ 334.318406][T13920] netlink: 'syz.1.2670': attribute type 2 has an invalid length. [ 334.850053][T13952] __nla_validate_parse: 8 callbacks suppressed [ 334.850074][T13952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2683'. [ 334.887712][T13957] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2684'. [ 334.946345][T13961] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2685'. [ 335.000538][T13961] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2685'. [ 335.035016][ T7796] IPVS: starting estimator thread 0... [ 335.041162][T13965] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 335.059228][T13961] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2685'. [ 335.129391][T13967] IPVS: using max 27 ests per chain, 64800 per kthread [ 335.637886][T13996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.857248][T13972] wg1 speed is unknown, defaulting to 1000 [ 336.098761][T14013] netlink: 'syz.4.2702': attribute type 3 has an invalid length. [ 336.542243][T14032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2710'. [ 336.936970][T14047] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2718'. [ 336.994795][T14050] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2719'. [ 337.032164][T14050] [ 337.034549][T14050] ====================================================== [ 337.041585][T14050] WARNING: possible circular locking dependency detected [ 337.048639][T14050] 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 Not tainted [ 337.055767][T14050] ------------------------------------------------------ [ 337.062808][T14050] syz.0.2719/14050 is trying to acquire lock: [ 337.068935][T14050] ffffffff8f678fb8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 337.078300][T14050] [ 337.078300][T14050] but task is already holding lock: [ 337.085679][T14050] ffff888059428570 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 337.095044][T14050] [ 337.095044][T14050] which lock already depends on the new lock. [ 337.095044][T14050] [ 337.105466][T14050] [ 337.105466][T14050] the existing dependency chain (in reverse order) is: [ 337.114485][T14050] [ 337.114485][T14050] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 337.122496][T14050] lock_acquire+0x120/0x360 [ 337.127529][T14050] _raw_spin_lock_bh+0x36/0x50 [ 337.132825][T14050] nr_rt_device_down+0x12a/0x720 [ 337.138290][T14050] nr_device_event+0x137/0x150 [ 337.143574][T14050] notifier_call_chain+0x1b3/0x3e0 [ 337.149222][T14050] dev_close_many+0x29c/0x410 [ 337.154426][T14050] netif_close+0x158/0x210 [ 337.159365][T14050] dev_close+0x10a/0x220 [ 337.164137][T14050] bpq_device_event+0x2f4/0x600 [ 337.169538][T14050] notifier_call_chain+0x1b3/0x3e0 [ 337.175199][T14050] dev_close_many+0x29c/0x410 [ 337.180400][T14050] netif_close+0x158/0x210 [ 337.185352][T14050] dev_close+0x10a/0x220 [ 337.190126][T14050] bond_setup_by_slave+0x5f/0x3f0 [ 337.195776][T14050] bond_enslave+0x7a0/0x3a20 [ 337.200900][T14050] bond_do_ioctl+0x635/0x9b0 [ 337.206053][T14050] dev_ifsioc+0x908/0xf00 [ 337.210907][T14050] dev_ioctl+0x7b4/0x1150 [ 337.215762][T14050] sock_do_ioctl+0x22c/0x300 [ 337.220880][T14050] sock_ioctl+0x576/0x790 [ 337.225752][T14050] __se_sys_ioctl+0xfc/0x170 [ 337.230886][T14050] do_syscall_64+0xfa/0x3b0 [ 337.235921][T14050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.242334][T14050] [ 337.242334][T14050] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 337.250162][T14050] lock_acquire+0x120/0x360 [ 337.255203][T14050] _raw_spin_lock_bh+0x36/0x50 [ 337.260498][T14050] nr_rt_device_down+0xa9/0x720 [ 337.265873][T14050] nr_device_event+0x137/0x150 [ 337.271154][T14050] notifier_call_chain+0x1b3/0x3e0 [ 337.276789][T14050] dev_close_many+0x29c/0x410 [ 337.281995][T14050] netif_close+0x158/0x210 [ 337.286940][T14050] dev_close+0x10a/0x220 [ 337.291737][T14050] bpq_device_event+0x2f4/0x600 [ 337.297128][T14050] notifier_call_chain+0x1b3/0x3e0 [ 337.302765][T14050] dev_close_many+0x29c/0x410 [ 337.307981][T14050] netif_close+0x158/0x210 [ 337.312922][T14050] dev_close+0x10a/0x220 [ 337.317737][T14050] bond_setup_by_slave+0x5f/0x3f0 [ 337.323460][T14050] bond_enslave+0x7a0/0x3a20 [ 337.328578][T14050] bond_do_ioctl+0x635/0x9b0 [ 337.333687][T14050] dev_ifsioc+0x908/0xf00 [ 337.338543][T14050] dev_ioctl+0x7b4/0x1150 [ 337.343481][T14050] sock_do_ioctl+0x22c/0x300 [ 337.348593][T14050] sock_ioctl+0x576/0x790 [ 337.353443][T14050] __se_sys_ioctl+0xfc/0x170 [ 337.358728][T14050] do_syscall_64+0xfa/0x3b0 [ 337.363769][T14050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.370182][T14050] [ 337.370182][T14050] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 337.378091][T14050] validate_chain+0xb9b/0x2140 [ 337.383387][T14050] __lock_acquire+0xab9/0xd20 [ 337.388580][T14050] lock_acquire+0x120/0x360 [ 337.393602][T14050] _raw_spin_lock_bh+0x36/0x50 [ 337.398893][T14050] nr_remove_neigh+0x25/0xe0 [ 337.404010][T14050] nr_add_node+0x1d9f/0x2570 [ 337.409129][T14050] nr_rt_ioctl+0xc12/0xd50 [ 337.414073][T14050] sock_do_ioctl+0xdc/0x300 [ 337.419112][T14050] sock_ioctl+0x576/0x790 [ 337.424062][T14050] __se_sys_ioctl+0xfc/0x170 [ 337.429184][T14050] do_syscall_64+0xfa/0x3b0 [ 337.434208][T14050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.440627][T14050] [ 337.440627][T14050] other info that might help us debug this: [ 337.440627][T14050] [ 337.450852][T14050] Chain exists of: [ 337.450852][T14050] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 337.450852][T14050] [ 337.464847][T14050] Possible unsafe locking scenario: [ 337.464847][T14050] [ 337.472291][T14050] CPU0 CPU1 [ 337.477662][T14050] ---- ---- [ 337.483026][T14050] lock(&nr_node->node_lock); [ 337.487797][T14050] lock(nr_node_list_lock); [ 337.494908][T14050] lock(&nr_node->node_lock); [ 337.502192][T14050] lock(nr_neigh_list_lock); [ 337.506868][T14050] [ 337.506868][T14050] *** DEADLOCK *** [ 337.506868][T14050] [ 337.515012][T14050] 1 lock held by syz.0.2719/14050: [ 337.520119][T14050] #0: ffff888059428570 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 337.529881][T14050] [ 337.529881][T14050] stack backtrace: [ 337.535767][T14050] CPU: 0 UID: 0 PID: 14050 Comm: syz.0.2719 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 337.535788][T14050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 337.535799][T14050] Call Trace: [ 337.535807][T14050] [ 337.535816][T14050] dump_stack_lvl+0x189/0x250 [ 337.535840][T14050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.535859][T14050] ? __pfx__printk+0x10/0x10 [ 337.535879][T14050] ? stack_trace_save+0x9c/0xe0 [ 337.535907][T14050] print_circular_bug+0x2ee/0x310 [ 337.535931][T14050] check_noncircular+0x134/0x160 [ 337.535954][T14050] validate_chain+0xb9b/0x2140 [ 337.535975][T14050] ? kernel_text_address+0xa5/0xe0 [ 337.535990][T14050] ? __kernel_text_address+0xd/0x40 [ 337.536009][T14050] ? unwind_get_return_address+0x4d/0x90 [ 337.536028][T14050] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 337.536051][T14050] ? arch_stack_walk+0xfc/0x150 [ 337.536075][T14050] __lock_acquire+0xab9/0xd20 [ 337.536094][T14050] ? nr_remove_neigh+0x25/0xe0 [ 337.536114][T14050] lock_acquire+0x120/0x360 [ 337.536129][T14050] ? nr_remove_neigh+0x25/0xe0 [ 337.536152][T14050] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 337.536173][T14050] ? do_raw_spin_unlock+0x122/0x240 [ 337.536196][T14050] ? nr_remove_neigh+0x25/0xe0 [ 337.536217][T14050] _raw_spin_lock_bh+0x36/0x50 [ 337.536247][T14050] ? nr_remove_neigh+0x25/0xe0 [ 337.536266][T14050] nr_remove_neigh+0x25/0xe0 [ 337.536286][T14050] nr_add_node+0x1d9f/0x2570 [ 337.536307][T14050] ? nr_call_to_digi+0x126/0x1b0 [ 337.536325][T14050] nr_rt_ioctl+0xc12/0xd50 [ 337.536343][T14050] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 337.536362][T14050] ? kasan_quarantine_put+0xdd/0x220 [ 337.536378][T14050] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 337.536400][T14050] ? apparmor_capable+0x137/0x1b0 [ 337.536420][T14050] ? capable+0x89/0xe0 [ 337.536437][T14050] ? nr_ioctl+0x1b1/0x3b0 [ 337.536452][T14050] sock_do_ioctl+0xdc/0x300 [ 337.536472][T14050] ? __pfx_sock_do_ioctl+0x10/0x10 [ 337.536487][T14050] ? __lock_acquire+0xab9/0xd20 [ 337.536508][T14050] sock_ioctl+0x576/0x790 [ 337.536525][T14050] ? __pfx_sock_ioctl+0x10/0x10 [ 337.536541][T14050] ? __fget_files+0x2a/0x420 [ 337.536560][T14050] ? __fget_files+0x3a0/0x420 [ 337.536579][T14050] ? __fget_files+0x2a/0x420 [ 337.536599][T14050] ? bpf_lsm_file_ioctl+0x9/0x20 [ 337.536614][T14050] ? __pfx_sock_ioctl+0x10/0x10 [ 337.536630][T14050] __se_sys_ioctl+0xfc/0x170 [ 337.536646][T14050] do_syscall_64+0xfa/0x3b0 [ 337.536667][T14050] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.536686][T14050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.536701][T14050] ? clear_bhb_loop+0x60/0xb0 [ 337.536718][T14050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.536733][T14050] RIP: 0033:0x7f670ef8e929 [ 337.536748][T14050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.536764][T14050] RSP: 002b:00007f670fdb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 337.536779][T14050] RAX: ffffffffffffffda RBX: 00007f670f1b5fa0 RCX: 00007f670ef8e929 [ 337.536791][T14050] RDX: 0000200000000280 RSI: 000000000000890b RDI: 0000000000000006 [ 337.536801][T14050] RBP: 00007f670f010b39 R08: 0000000000000000 R09: 0000000000000000 [ 337.536810][T14050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.536818][T14050] R13: 0000000000000000 R14: 00007f670f1b5fa0 R15: 00007ffd303b5f98 [ 337.536835][T14050]