last executing test programs: 2.985023779s ago: executing program 0 (id=584): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000004000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, r1, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x11dc0, &(0x7f0000000080)=ANY=[], 0x0) 2.83233454s ago: executing program 0 (id=586): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x10) 2.692635378s ago: executing program 0 (id=587): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x8000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000600)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r4, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r7, r5}) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1c010) socket$inet(0x2, 0x800, 0x0) r8 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f00000007c0)=[@iv={0xb0, 0x117, 0x2, 0x96, "5de0c23e9d25c3625e2e2f5b6a7e46fda98412be1d73f7b781647d894ab39b61c4dbfb7117e40dbd2cc19b8de0d57eed8f9672e0ec992fab40002cd7cd8030d48f9f041f2d5cb20dc0646447595d75953915caa1af253cb664272b677fce5df20f6d142e2475de23d11c8091d7d898a7d8e219f69ca6aaf65dc31f6c6e2781903285f393c9531e8d0f04daa9e8cc5ad4a5e03df8e1d3"}], 0xb0}], 0x1, 0x55) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.376373306s ago: executing program 4 (id=592): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x65, 0x0, &(0x7f00000001c0)) 2.357106217s ago: executing program 2 (id=593): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, 0x0, 0x0) 2.248053969s ago: executing program 4 (id=595): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000040000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x16, 0xc, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000540)="9691211b6ee60038231dbf646ea2e81e4d3c171bad0083f563e232f83987be5d292da31209981e340465865c5792a0dbe6afee050000006160e22f6de02d8e7508110000000080000000000100", &(0x7f0000000740)=""/161}, 0x20) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x7c, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x4}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}]}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x7, 0xf3, 0x3, 0x1, 0x2, 0xfffffff7, 0x3}}, {0xa, 0x2, [0xc, 0x6, 0x7b2]}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xfffffffd}]}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(r7, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r3}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) sendto$llc(0xffffffffffffffff, &(0x7f0000000200)="94d83559c8ff585693ca49746aadadaff17358422d9cfadeb3bad1cd87d62311bab8a6140fd6fe9e9dad39e0ee7f19015ba35c975d82865987876d74eb2d8add9abcc73fad34ef18d67a05aadd5e37b6682379fa2adf0717a9113d92e68efe3e9a3a77adfcb9fe6606446343c64270873bf78d7c8b9947f05daedf95595e8b36f2e2d14b2ecf061085e91e0a2ea1cc6fdd409f4ad10caa412aa641c890a6d8d577400dcc361ab62ff4f0095f8745318b7eb54f0e", 0xb4, 0x8004, &(0x7f0000000400)={0x1a, 0x323, 0x9, 0x29, 0x1, 0xe, @multicast}, 0x10) sendmsg$inet(r11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20000000) poll(&(0x7f00000022c0), 0x58, 0x8) r12 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) 2.188534245s ago: executing program 2 (id=596): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002f000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000fa000000f8ffffffb702000008000000b70300000000000085000000170000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x2f, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677f2d0b4992", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvmmsg(r2, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10001, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a3100000000050001"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300010029bd7000fedbdf2500000000", @ANYRES32, @ANYBLOB="d45006000200000024001a802000028014"], 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x20040000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x224e, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$nl_crypto(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@upd={0xf0, 0x12, 0x1, 0x70bd2b, 0x25dfdbfe, {{'lrw-camellia-asm\x00'}, '\x00', '\x00', 0x2000, 0x2400}, [{0x8, 0x1, 0x7}, {0x8, 0x1, 0x2}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.072346196s ago: executing program 3 (id=598): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '$([*\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048001}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbc, 0x0, 0x0, 0x0, 0x100}, 0x94) 1.963147602s ago: executing program 1 (id=599): socket$inet(0x2, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c000480280001800800"], 0xc8}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500"], 0x7c}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket(0x1f, 0xa, 0x9) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, 0x0, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 1.880293874s ago: executing program 3 (id=600): socket$inet(0x2, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c000480280001800800"], 0xc8}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket(0x1f, 0xa, 0x9) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 1.793843866s ago: executing program 0 (id=601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000001900)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @f={0xf1, 0x3, 0x2, 0x2, 0x6, 0xe, 0x3, {0x3, 0x2}, 0x40, 0x56, 0x3, 0x8, 0x2, '/*'}}, 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000021301000600000600000000000000000e0003006269746d61f03a6970000000050003"], 0x2c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000190001090000000000000000021800000000fd000000000008000100ac141400080005000a0101020c00168008000300e0000002060015200600000008000400", @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r14, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r12}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a300000000020000000060a0104006782c00d63c893c7be7e00000000000000010000000900010073797a3000000000140000001100010000000000000000000700000a"], 0x68}}, 0x0) 1.652717211s ago: executing program 1 (id=602): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe90, 0x30, 0x25, 0x0, 0x0, {}, [{0xe7c, 0x1, [@m_pedit={0xe78, 0x1, 0x0, 0x0, {{0xa}, {0xe4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {0x0, 0x8001}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x5, 0x80000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x800}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe90}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="12fc66a2e98a", @ANYRES32=0x0, @ANYBLOB="008000000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="080000d9b2dbe55b0d7059ac7a000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000000005b979e01d2038d84"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="a1e315f1e19605000000030400000046480000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009dfc47318ccc3455"], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000ff5b3b87675a"], 0x4c}}, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de32", 0x51) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) 1.499646697s ago: executing program 1 (id=603): sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x7}, "0e6e8dc3e0caa838", "7e552755d96ffc17d340cc9fac811b90", "8feabd26", "47c3dc916a84d320"}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000002b65894e0b68ad5530a1bba8c5bad97405bb91566e264ae8993680dfa7063c87c623a6fe2b3384", @ANYRES16=r2, @ANYBLOB="01002cbd7000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="08002600fd16000008002700030000000800a10000000000"], 0x34}, 0x1, 0x0, 0x0, 0x48010}, 0x40044) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x8092}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x0, 0x4, 0x75}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x4010) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000240)={0x5, 0x2, 0x5, 0x1b}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) recvmmsg(r3, &(0x7f0000003980)=[{{&(0x7f0000000340)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/160, 0xa0}, {&(0x7f0000000600)=""/74, 0x4a}, {&(0x7f0000000680)=""/111, 0x6f}, {&(0x7f0000000700)=""/211, 0xd3}, {&(0x7f0000000800)=""/109, 0x6d}, {&(0x7f0000000880)=""/108, 0x6c}, {&(0x7f0000000200)}], 0x7, &(0x7f00000003c0)=""/12, 0xc}, 0x1}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000580)=""/15, 0xf}, {&(0x7f0000000980)=""/195, 0xc3}, {&(0x7f0000000a80)=""/210, 0xd2}], 0x3, &(0x7f0000000bc0)=""/185, 0xb9}, 0x3}, {{&(0x7f0000000c80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000d00)}, {&(0x7f0000000d40)=""/70, 0x46}, {&(0x7f0000000dc0)=""/160, 0xa0}, {&(0x7f0000000e80)=""/194, 0xc2}], 0x4, &(0x7f0000001000)=""/83, 0x53}}, {{&(0x7f0000001080)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001100)=""/99, 0x63}, {&(0x7f0000001180)=""/6, 0x6}, {&(0x7f00000011c0)=""/178, 0xb2}, {&(0x7f0000001280)=""/184, 0xb8}, {&(0x7f0000001340)=""/233, 0xe9}, {&(0x7f0000001440)=""/49, 0x31}, {&(0x7f0000001480)=""/41, 0x29}, {&(0x7f00000014c0)=""/43, 0x2b}], 0x8}, 0x7f}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001580)=""/182, 0xb6}, {&(0x7f0000001640)=""/21, 0x15}], 0x2}}, {{&(0x7f00000016c0)=@nfc_llcp, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001740)=""/130, 0x82}, {&(0x7f0000001800)=""/130, 0x82}], 0x2, &(0x7f0000001900)=""/131, 0x83}, 0x720a}, {{&(0x7f00000019c0)=@nl=@unspec, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001a40)=""/66, 0x42}, {&(0x7f0000001ac0)=""/141, 0x8d}, {&(0x7f0000001b80)=""/102, 0x66}, {&(0x7f0000001c00)=""/220, 0xdc}, {&(0x7f0000001d00)=""/65, 0x41}, {&(0x7f0000001d80)=""/254, 0xfe}, {&(0x7f0000001e80)=""/73, 0x49}], 0x7, &(0x7f0000001f80)=""/108, 0x6c}, 0x80000000}, {{&(0x7f0000002000)=@xdp, 0x80, &(0x7f00000020c0)=[{&(0x7f0000002080)=""/1, 0x1}], 0x1, &(0x7f0000002100)=""/75, 0x4b}, 0x6}, {{&(0x7f0000002180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002200)=""/238, 0xee}, {&(0x7f0000002300)=""/151, 0x97}, {&(0x7f00000023c0)=""/3, 0x3}, {&(0x7f0000002400)=""/92, 0x5c}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f0000002480)=""/149, 0x95}], 0x6, &(0x7f00000025c0)=""/167, 0xa7}, 0xa}, {{&(0x7f00000036c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003740)=""/128, 0x80}, {&(0x7f00000037c0)=""/28, 0x1c}, {&(0x7f0000003800)=""/42, 0x2a}], 0x3, &(0x7f0000003880)=""/214, 0xd6}, 0xfffff942}], 0xa, 0x40000021, &(0x7f0000003c40)) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, r6, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1.421953401s ago: executing program 4 (id=604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r1, @ANYBLOB="05002cbd7000000000002e00000008000300", @ANYRES32=r2], 0x28}}, 0x8000) 1.32202005s ago: executing program 2 (id=605): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f0000000340)="1a000000", 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186e000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)={0x24, r2, 0x701, 0x70bd25, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44844}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000580)={0x0, @private, @empty}, &(0x7f0000000600)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000cff5000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="00000000000000001d00128008000100687372001400028008000200", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1445b44000947e8650c699d9be7c54ae18c44cfa8aa87ae4b5804eef8452448360942d2517b43344c9689ada7aa9154ce4d14063aedcb371e680fd3104a44e61a22f8d373cd547a52b41ebec6828c15dd43e73dd73e892729a20e1cef67e7e1acbe094ae109c03c4c3b62162f5ed4eea30"], 0x40}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x8000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000d1584500696a628031d7fce964d600000085000000870000008500"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000200)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_control(r7, &(0x7f0000000200)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x88081, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r9, 0x80047441, &(0x7f0000000180)) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 983.535577ms ago: executing program 3 (id=606): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f0000000340)="1a000000", 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186e000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)={0x24, r2, 0x701, 0x70bd25, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44844}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000580)={0x0, @private, @empty}, &(0x7f0000000600)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000cff5000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="00000000000000001d00128008000100687372001400028008000200", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1445b44000947e8650c699d9be7c54ae18c44cfa8aa87ae4b5804eef8452448360942d2517b43344c9689ada7aa9154ce4d14063aedcb371e680fd3104a44e61a22f8d373cd547a52b41ebec6828c15dd43e73dd73e892729a20e1cef67e7e1acbe094ae109c03c4c3b62162f5ed4eea30"], 0x40}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x8000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000d1584500696a628031d7fce964d600000085000000870000008500"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000200)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_control(r7, &(0x7f0000000200)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x88081, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r9, 0x80047441, &(0x7f0000000180)) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 735.589793ms ago: executing program 4 (id=607): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, 0x0, 0x0) 713.1172ms ago: executing program 0 (id=608): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x5f00, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) 665.959149ms ago: executing program 2 (id=609): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @remote}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) unshare(0x2c020400) r4 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r4, 0x0, 0x2400) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0xaefc) socket$netlink(0x10, 0x3, 0x13) splice(r6, 0x0, r3, 0x0, 0x8, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'vxcan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000280000006000000000282b00fe88a43de1a400000000000000027d01ff020000000000000000000000000001"], 0xfdef) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000180)=0x404000) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x11, 0xa, 0x6, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000040)=0x1) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@gettfilter={0x34, 0x2e, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x0, 0x2}, {0x3, 0x16}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0xffffffff}]}, 0x34}}, 0x400800c) 625.994461ms ago: executing program 3 (id=610): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x0, 0x80, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r4, &(0x7f0000000540), 0x2, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff80, &(0x7f00000002c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="08010000", @ANYRES16=0x0, @ANYRESOCT=r3], 0x10c}, 0x1, 0x0, 0x0, 0x44844}, 0x44101) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000cff5000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="000000000007000000001267739300ecff01800500060200000000"], 0x38}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x8000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 560.236252ms ago: executing program 0 (id=611): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x8000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000600)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r4, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r7, r5}) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1c010) socket$inet(0x2, 0x800, 0x0) r8 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f00000007c0)=[@iv={0xb0, 0x117, 0x2, 0x96, "5de0c23e9d25c3625e2e2f5b6a7e46fda98412be1d73f7b781647d894ab39b61c4dbfb7117e40dbd2cc19b8de0d57eed8f9672e0ec992fab40002cd7cd8030d48f9f041f2d5cb20dc0646447595d75953915caa1af253cb664272b677fce5df20f6d142e2475de23d11c8091d7d898a7d8e219f69ca6aaf65dc31f6c6e2781903285f393c9531e8d0f04daa9e8cc5ad4a5e03df8e1d3"}], 0xb0}], 0x1, 0x55) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 534.126549ms ago: executing program 1 (id=612): socket$inet(0x2, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c000480280001800800"], 0xc8}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500"], 0x7c}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket(0x1f, 0xa, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, 0x0, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 526.059405ms ago: executing program 4 (id=613): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x50}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000000)) socket$inet_smc(0x2b, 0x1, 0x0) 388.842926ms ago: executing program 3 (id=614): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000004000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, r1, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x11dc0, &(0x7f0000000080)=ANY=[], 0x0) 335.937907ms ago: executing program 2 (id=615): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000fcffffff0000000002000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe40, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a061"], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc}, 0x10, 0x0, r9, 0x0, 0x0, 0x0, 0x10, 0x43e9}, 0x94) 272.673178ms ago: executing program 3 (id=616): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="05000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x48) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r6, 0x89ec, 0xfffffffffffffffd) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f0000000000)={{r7}, 0x2a, 0x80000007ff, 0x2}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES16=r0, @ANYRESDEC=r7, @ANYRES32=r3, @ANYRES8=r7, @ANYRESOCT=r4], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r9, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/89}, 0x20) sendmmsg$unix(r5, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18}}], 0x1, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) unshare(0x400) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r10, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000040900010073797a30000000000900020073797a3200000000400004"], 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x8, 0x6, 0x900, 0xffffffffffffffff, 0x18d1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0xa}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x7, 0x0, 0x50, @mcast2, @private1, 0x1, 0x40, 0x0, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000440)={'syztnl2\x00', r12, 0x7800, 0x40, 0x7, 0xfffffffd, {{0x14, 0x4, 0x1, 0x2, 0x50, 0x67, 0x0, 0x9, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0xf9, [@multicast1, @broadcast, @private=0xa010102]}, @timestamp_prespec={0x44, 0x14, 0xfa, 0x3, 0x4, [{@multicast2, 0xd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000000}]}, @rr={0x7, 0x13, 0xc8, [@private=0xa010100, @rand_addr=0x64010100, @broadcast, @loopback]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r7, 0x58, &(0x7f0000000180)}, 0x10) 232.980236ms ago: executing program 1 (id=617): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r1, @ANYBLOB="05002cbd7000000000002e00000008000300", @ANYRES32=r2], 0x28}}, 0x8000) 37.660942ms ago: executing program 1 (id=618): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x8000000, @remote}, 0x1b) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r2, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r6, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4840) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r4, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x200000c1}, 0x8000850) pipe(0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) ppoll(&(0x7f0000000400)=[{r1, 0x474}, {r5, 0x400}], 0x2, &(0x7f0000000500)={r10, r11+10000000}, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="01"], 0x304}}, 0x0) ioctl$sock_bt_hci(r9, 0x800448d2, &(0x7f0000000540)) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 35.793923ms ago: executing program 2 (id=619): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x6, 0x7f, 0x11}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000001c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x19, &(0x7f0000000a40)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000e5ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000c50a00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 0s ago: executing program 4 (id=620): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.31' (ED25519) to the list of known hosts. [ 86.301317][ T5850] cgroup: Unknown subsys name 'net' [ 86.411777][ T5850] cgroup: Unknown subsys name 'cpuset' [ 86.421136][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.347104][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.312255][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.320889][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.328910][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.337458][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.345532][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.472456][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.486234][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.494049][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.502419][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.511509][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.570460][ T5866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.578926][ T5866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.590049][ T5866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.602093][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.618737][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.627157][ T5872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.634811][ T5872] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.642217][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.663314][ T5183] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.672198][ T5183] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.734479][ T5183] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.749249][ T5183] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.758830][ T5183] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.776507][ T5183] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.785037][ T5183] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.329715][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 93.558947][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 93.692396][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 93.735902][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.743705][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.751461][ T5860] bridge_slave_0: entered allmulticast mode [ 93.759677][ T5860] bridge_slave_0: entered promiscuous mode [ 93.774692][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 93.807065][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.814848][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.822161][ T5860] bridge_slave_1: entered allmulticast mode [ 93.830190][ T5860] bridge_slave_1: entered promiscuous mode [ 93.930388][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.983460][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.990873][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.998223][ T5870] bridge_slave_0: entered allmulticast mode [ 94.005624][ T5870] bridge_slave_0: entered promiscuous mode [ 94.016188][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.042220][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 94.054173][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.061657][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.068942][ T5870] bridge_slave_1: entered allmulticast mode [ 94.076346][ T5870] bridge_slave_1: entered promiscuous mode [ 94.179452][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.190815][ T5860] team0: Port device team_slave_0 added [ 94.200363][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.245670][ T5860] team0: Port device team_slave_1 added [ 94.326276][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.334351][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.360458][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.386081][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.393937][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.401555][ T5868] bridge_slave_0: entered allmulticast mode [ 94.409076][ T5868] bridge_slave_0: entered promiscuous mode [ 94.437530][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.438093][ T5866] Bluetooth: hci0: command tx timeout [ 94.444518][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.476119][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.490016][ T5870] team0: Port device team_slave_0 added [ 94.496258][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.503971][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.511297][ T5868] bridge_slave_1: entered allmulticast mode [ 94.519214][ T5868] bridge_slave_1: entered promiscuous mode [ 94.526177][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.533667][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.541232][ T5864] bridge_slave_0: entered allmulticast mode [ 94.548646][ T5864] bridge_slave_0: entered promiscuous mode [ 94.587657][ T5870] team0: Port device team_slave_1 added [ 94.597200][ T5866] Bluetooth: hci1: command tx timeout [ 94.626640][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.634079][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.641930][ T5864] bridge_slave_1: entered allmulticast mode [ 94.649369][ T5864] bridge_slave_1: entered promiscuous mode [ 94.677087][ T5866] Bluetooth: hci2: command tx timeout [ 94.735921][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.745885][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.754618][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.762625][ T5874] bridge_slave_0: entered allmulticast mode [ 94.768727][ T5866] Bluetooth: hci3: command tx timeout [ 94.772326][ T5874] bridge_slave_0: entered promiscuous mode [ 94.783122][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.790411][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.816658][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.830619][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.840105][ T5866] Bluetooth: hci4: command tx timeout [ 94.844181][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.870646][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.880334][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.887818][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.895098][ T5874] bridge_slave_1: entered allmulticast mode [ 94.902967][ T5874] bridge_slave_1: entered promiscuous mode [ 94.910413][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.917637][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.943711][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.034152][ T5860] hsr_slave_0: entered promiscuous mode [ 95.041232][ T5860] hsr_slave_1: entered promiscuous mode [ 95.083649][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.094860][ T5868] team0: Port device team_slave_0 added [ 95.104007][ T5868] team0: Port device team_slave_1 added [ 95.111837][ T5864] team0: Port device team_slave_0 added [ 95.120870][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.192786][ T5864] team0: Port device team_slave_1 added [ 95.285060][ T5870] hsr_slave_0: entered promiscuous mode [ 95.292214][ T5870] hsr_slave_1: entered promiscuous mode [ 95.299127][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 95.305022][ T5870] Cannot create hsr debugfs directory [ 95.325580][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.332988][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.359187][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.386440][ T5874] team0: Port device team_slave_0 added [ 95.395609][ T5874] team0: Port device team_slave_1 added [ 95.420804][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.428293][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.454301][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.465989][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.473862][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.499980][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.512744][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.519841][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.546283][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.680056][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.687330][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.713393][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.754761][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.761824][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.788242][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.877916][ T5864] hsr_slave_0: entered promiscuous mode [ 95.885853][ T5864] hsr_slave_1: entered promiscuous mode [ 95.892569][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 95.898628][ T5864] Cannot create hsr debugfs directory [ 95.949881][ T5868] hsr_slave_0: entered promiscuous mode [ 95.956574][ T5868] hsr_slave_1: entered promiscuous mode [ 95.964102][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 95.971173][ T5868] Cannot create hsr debugfs directory [ 96.107443][ T5874] hsr_slave_0: entered promiscuous mode [ 96.113915][ T5874] hsr_slave_1: entered promiscuous mode [ 96.120426][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 96.126169][ T5874] Cannot create hsr debugfs directory [ 96.305398][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.320118][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.369098][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.416574][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.517208][ T5866] Bluetooth: hci0: command tx timeout [ 96.566002][ T5870] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.611027][ T5870] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.625938][ T5870] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.637972][ T5870] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.676981][ T5866] Bluetooth: hci1: command tx timeout [ 96.760821][ T5868] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.769744][ T5866] Bluetooth: hci2: command tx timeout [ 96.783788][ T5868] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.812604][ T5868] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.826520][ T5868] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.837864][ T5866] Bluetooth: hci3: command tx timeout [ 96.917324][ T5866] Bluetooth: hci4: command tx timeout [ 96.932808][ T5874] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.944633][ T5874] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.957516][ T5874] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.972236][ T5874] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.108416][ T5864] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.129789][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.138199][ T5864] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.153143][ T5864] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.169404][ T5864] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.222788][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.240245][ T9] cfg80211: failed to load regulatory.db [ 97.279186][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.296447][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.331820][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.339122][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.370932][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.378152][ T3556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.387732][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.394882][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.430405][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.437694][ T3556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.511025][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.535466][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.633245][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.668238][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.684073][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.704312][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.711514][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.771752][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.779095][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.791421][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.798642][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.816956][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.824151][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.885596][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.941899][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.949125][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.993918][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.001170][ T3556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.161103][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.182147][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.390141][ T5860] veth0_vlan: entered promiscuous mode [ 98.428722][ T5870] veth0_vlan: entered promiscuous mode [ 98.455554][ T5860] veth1_vlan: entered promiscuous mode [ 98.475243][ T5870] veth1_vlan: entered promiscuous mode [ 98.600995][ T5866] Bluetooth: hci0: command tx timeout [ 98.644336][ T5860] veth0_macvtap: entered promiscuous mode [ 98.670406][ T5870] veth0_macvtap: entered promiscuous mode [ 98.690429][ T5860] veth1_macvtap: entered promiscuous mode [ 98.714770][ T5870] veth1_macvtap: entered promiscuous mode [ 98.738526][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.760366][ T5866] Bluetooth: hci1: command tx timeout [ 98.772409][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.796668][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.812138][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.828411][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.838918][ T5866] Bluetooth: hci2: command tx timeout [ 98.868553][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.915980][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.923505][ T5866] Bluetooth: hci3: command tx timeout [ 98.979131][ T1150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.998055][ T5866] Bluetooth: hci4: command tx timeout [ 99.023082][ T5868] veth0_vlan: entered promiscuous mode [ 99.033188][ T1150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.046643][ T1150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.084383][ T5868] veth1_vlan: entered promiscuous mode [ 99.110280][ T1150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.140133][ T1150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.149531][ T1150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.175649][ T1150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.185707][ T1150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.262000][ T5874] veth0_vlan: entered promiscuous mode [ 99.280736][ T5868] veth0_macvtap: entered promiscuous mode [ 99.303565][ T5868] veth1_macvtap: entered promiscuous mode [ 99.344543][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.355362][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.376628][ T5874] veth1_vlan: entered promiscuous mode [ 99.401129][ T5864] veth0_vlan: entered promiscuous mode [ 99.439740][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.447683][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.452603][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.519094][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.528737][ T5864] veth1_vlan: entered promiscuous mode [ 99.544739][ T3556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.552822][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.552888][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.577869][ T3556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.594181][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.603325][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.613765][ T5874] veth0_macvtap: entered promiscuous mode [ 99.637724][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.646521][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.669985][ T5874] veth1_macvtap: entered promiscuous mode [ 99.721117][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.745069][ T5864] veth0_macvtap: entered promiscuous mode [ 99.769857][ T5864] veth1_macvtap: entered promiscuous mode [ 99.828831][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.873766][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.968012][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.991318][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.020539][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.032615][ T1101] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.045955][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.054370][ T1101] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.085377][ T1101] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.095667][ T1101] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.148800][ T1101] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.158544][ T1101] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.180885][ T3556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.197225][ T5988] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.209718][ T1101] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.222559][ T3556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.231142][ T1101] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.291183][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 100.468091][ T5992] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.522169][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 100.563276][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.571962][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.588201][ T5992] veth0: entered promiscuous mode [ 100.598160][ T5992] veth0: left promiscuous mode [ 100.677540][ T5866] Bluetooth: hci0: command tx timeout [ 100.839125][ T5866] Bluetooth: hci1: command tx timeout [ 100.917851][ T5866] Bluetooth: hci2: command tx timeout [ 100.933369][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.988259][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.007930][ T5866] Bluetooth: hci3: command tx timeout [ 101.077441][ T5866] Bluetooth: hci4: command tx timeout [ 101.130933][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.143116][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.335887][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.370154][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.691246][ T6034] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 101.751899][ T6035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 102.045509][ T6044] netlink: 'syz.0.20': attribute type 3 has an invalid length. [ 102.267226][ T6049] Zero length message leads to an empty skb [ 102.385277][ T6052] Bluetooth: MGMT ver 1.23 [ 102.413022][ T6052] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 102.429682][ T6052] netlink: 14 bytes leftover after parsing attributes in process `syz.3.23'. [ 102.925908][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 102.956183][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 102.974105][ T6052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.994565][ T6065] netlink: 64 bytes leftover after parsing attributes in process `syz.1.26'. [ 103.009806][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 103.038188][ T6052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.091093][ T6052] bond0 (unregistering): Released all slaves [ 103.233964][ T6067] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 103.633070][ T6079] netdevsim netdevsim0: loading /lib/firmware// failed with error -22 [ 103.685093][ T6079] netdevsim netdevsim0: Direct firmware load for / failed with error -22 [ 103.736176][ T6079] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 103.815684][ T6084] netlink: 'syz.3.32': attribute type 1 has an invalid length. [ 103.843071][ T6084] netlink: 184 bytes leftover after parsing attributes in process `syz.3.32'. [ 103.870668][ T6084] netlink: 'syz.3.32': attribute type 1 has an invalid length. [ 104.355180][ T6110] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 104.542034][ T6107] can: request_module (can-proto-0) failed. [ 105.075007][ T6124] netlink: 'syz.4.47': attribute type 1 has an invalid length. [ 105.098170][ T6124] netlink: 144 bytes leftover after parsing attributes in process `syz.4.47'. [ 105.240042][ T6128] netlink: 'syz.0.48': attribute type 13 has an invalid length. [ 105.274614][ T6128] netlink: 'syz.0.48': attribute type 17 has an invalid length. [ 105.291451][ T6131] FAULT_INJECTION: forcing a failure. [ 105.291451][ T6131] name failslab, interval 1, probability 0, space 0, times 1 [ 105.335371][ T6131] CPU: 0 UID: 0 PID: 6131 Comm: syz.2.49 Not tainted syzkaller #0 PREEMPT(full) [ 105.335400][ T6131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 105.335420][ T6131] Call Trace: [ 105.335428][ T6131] [ 105.335437][ T6131] dump_stack_lvl+0x189/0x250 [ 105.335474][ T6131] ? __pfx____ratelimit+0x10/0x10 [ 105.335496][ T6131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.335526][ T6131] ? __pfx__printk+0x10/0x10 [ 105.335559][ T6131] ? __pfx___might_resched+0x10/0x10 [ 105.335579][ T6131] ? fs_reclaim_acquire+0x7d/0x100 [ 105.335618][ T6131] should_fail_ex+0x414/0x560 [ 105.335656][ T6131] should_failslab+0xa8/0x100 [ 105.335689][ T6131] __kmalloc_noprof+0xcb/0x4f0 [ 105.335716][ T6131] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 105.335756][ T6131] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 105.335797][ T6131] genl_family_rcv_msg_doit+0xb8/0x300 [ 105.335837][ T6131] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 105.335879][ T6131] ? apparmor_capable+0x137/0x1b0 [ 105.335908][ T6131] ? bpf_lsm_capable+0x9/0x20 [ 105.335936][ T6131] ? security_capable+0x7e/0x2e0 [ 105.335975][ T6131] genl_rcv_msg+0x60e/0x790 [ 105.336014][ T6131] ? __pfx_genl_rcv_msg+0x10/0x10 [ 105.336043][ T6131] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 105.336088][ T6131] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 105.336106][ T6131] ? __pfx_nl80211_post_doit+0x10/0x10 [ 105.336140][ T6131] ? __asan_memcpy+0x40/0x70 [ 105.336163][ T6131] ? __pfx_ref_tracker_free+0x10/0x10 [ 105.336199][ T6131] netlink_rcv_skb+0x205/0x470 [ 105.336223][ T6131] ? __lock_acquire+0xab9/0xd20 [ 105.336254][ T6131] ? __pfx_genl_rcv_msg+0x10/0x10 [ 105.336287][ T6131] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 105.336333][ T6131] ? down_read+0x1ad/0x2e0 [ 105.336365][ T6131] genl_rcv+0x28/0x40 [ 105.336393][ T6131] netlink_unicast+0x82c/0x9e0 [ 105.336426][ T6131] ? __pfx_netlink_unicast+0x10/0x10 [ 105.336450][ T6131] ? netlink_sendmsg+0x642/0xb30 [ 105.336473][ T6131] ? skb_put+0x11b/0x210 [ 105.336504][ T6131] netlink_sendmsg+0x805/0xb30 [ 105.336540][ T6131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.336570][ T6131] ? aa_sock_msg_perm+0xf1/0x1d0 [ 105.336594][ T6131] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 105.336617][ T6131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.336643][ T6131] __sock_sendmsg+0x21c/0x270 [ 105.336668][ T6131] ____sys_sendmsg+0x505/0x830 [ 105.336702][ T6131] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.336741][ T6131] ? import_iovec+0x74/0xa0 [ 105.336773][ T6131] ___sys_sendmsg+0x21f/0x2a0 [ 105.336805][ T6131] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.336878][ T6131] ? __fget_files+0x2a/0x420 [ 105.336896][ T6131] ? __fget_files+0x3a0/0x420 [ 105.336928][ T6131] __x64_sys_sendmsg+0x19b/0x260 [ 105.336961][ T6131] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 105.337003][ T6131] ? __pfx_ksys_write+0x10/0x10 [ 105.337030][ T6131] ? rcu_is_watching+0x15/0xb0 [ 105.337058][ T6131] ? do_syscall_64+0xbe/0x3b0 [ 105.337085][ T6131] do_syscall_64+0xfa/0x3b0 [ 105.337107][ T6131] ? lockdep_hardirqs_on+0x9c/0x150 [ 105.337128][ T6131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.337149][ T6131] ? clear_bhb_loop+0x60/0xb0 [ 105.337176][ T6131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.337205][ T6131] RIP: 0033:0x7f293278eba9 [ 105.337230][ T6131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.337248][ T6131] RSP: 002b:00007f29335c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.337271][ T6131] RAX: ffffffffffffffda RBX: 00007f29329d5fa0 RCX: 00007f293278eba9 [ 105.337287][ T6131] RDX: 0000000004040000 RSI: 0000200000000040 RDI: 0000000000000003 [ 105.337301][ T6131] RBP: 00007f29335c3090 R08: 0000000000000000 R09: 0000000000000000 [ 105.337314][ T6131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.337327][ T6131] R13: 00007f29329d6038 R14: 00007f29329d5fa0 R15: 00007ffd040cf518 [ 105.337363][ T6131] [ 105.784094][ T6139] __nla_validate_parse: 1 callbacks suppressed [ 105.784116][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 105.842867][ T6128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.895788][ T6135] gretap0: entered allmulticast mode [ 105.953557][ T6145] netlink: 'syz.4.52': attribute type 1 has an invalid length. [ 106.026627][ T6128] gretap0: left allmulticast mode [ 106.027997][ T6142] netlink: 'syz.4.52': attribute type 1 has an invalid length. [ 106.074681][ T6142] syz.4.52 uses obsolete (PF_INET,SOCK_PACKET) [ 106.101117][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.52'. [ 106.662734][ T6165] netlink: 20 bytes leftover after parsing attributes in process `syz.1.62'. [ 106.703414][ T6170] tipc: Started in network mode [ 106.708795][ T6170] tipc: Node identity a60171bb0bbb, cluster identity 4711 [ 106.717630][ T6170] tipc: Enabled bearer , priority 0 [ 106.729651][ T6170] syzkaller0: entered promiscuous mode [ 106.735310][ T6170] syzkaller0: entered allmulticast mode [ 106.744406][ T6169] netlink: 'syz.0.60': attribute type 29 has an invalid length. [ 106.756377][ T6165] netlink: 32 bytes leftover after parsing attributes in process `syz.1.62'. [ 106.789505][ T6165] netlink: 34 bytes leftover after parsing attributes in process `syz.1.62'. [ 106.842080][ T6170] tipc: Resetting bearer [ 107.261591][ T6184] netlink: 'syz.4.65': attribute type 1 has an invalid length. [ 107.301295][ T6184] netlink: 208 bytes leftover after parsing attributes in process `syz.4.65'. [ 107.616252][ T6194] netem: change failed [ 107.848053][ T5928] tipc: Node number set to 2914677179 [ 108.248032][ T6224] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 108.670258][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'. [ 108.754298][ T6244] IPVS: set_ctl: invalid protocol: 60 16.0.16.0:0 [ 110.764790][ T6269] warning: `syz.0.90' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.445883][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.106'. [ 112.511933][ T6331] lo speed is unknown, defaulting to 1000 [ 112.530052][ T6331] lo speed is unknown, defaulting to 1000 [ 112.563325][ T6331] lo speed is unknown, defaulting to 1000 [ 112.665032][ T6331] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 112.760363][ T6333] netlink: 40 bytes leftover after parsing attributes in process `syz.3.106'. [ 112.784187][ T6331] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 112.910076][ T6331] lo speed is unknown, defaulting to 1000 [ 112.934630][ T6331] lo speed is unknown, defaulting to 1000 [ 112.988559][ T6331] lo speed is unknown, defaulting to 1000 [ 113.036520][ T6331] lo speed is unknown, defaulting to 1000 [ 113.074373][ T6331] lo speed is unknown, defaulting to 1000 [ 113.123091][ T6350] netlink: 356 bytes leftover after parsing attributes in process `syz.0.111'. [ 113.654133][ T6369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.117'. [ 113.943653][ T6369] nbd: socks must be embedded in a SOCK_ITEM attr [ 113.956112][ T6379] netdevsim netdevsim4: loading /lib/firmware// failed with error -22 [ 113.966108][ T6379] netdevsim netdevsim4: Direct firmware load for / failed with error -22 [ 114.001976][ T6379] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 114.043083][ T6382] netlink: 'syz.1.119': attribute type 10 has an invalid length. [ 114.074654][ T6382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.089197][ T6382] team0: Port device bond0 added [ 114.362358][ T6396] netlink: 'syz.3.124': attribute type 29 has an invalid length. [ 114.371971][ T6396] netlink: 'syz.3.124': attribute type 29 has an invalid length. [ 114.628497][ T5921] IPVS: starting estimator thread 0... [ 114.723935][ T6405] IPVS: using max 35 ests per chain, 84000 per kthread [ 114.926695][ T6417] netlink: 40 bytes leftover after parsing attributes in process `syz.4.131'. [ 115.122094][ T6423] trusted_key: syz.4.132 sent an empty control message without MSG_MORE. [ 115.166679][ T6426] netlink: 'syz.1.133': attribute type 1 has an invalid length. [ 115.418805][ T6439] FAULT_INJECTION: forcing a failure. [ 115.418805][ T6439] name failslab, interval 1, probability 0, space 0, times 0 [ 115.462716][ T6439] CPU: 0 UID: 0 PID: 6439 Comm: syz.1.139 Not tainted syzkaller #0 PREEMPT(full) [ 115.462745][ T6439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 115.462757][ T6439] Call Trace: [ 115.462766][ T6439] [ 115.462776][ T6439] dump_stack_lvl+0x189/0x250 [ 115.462807][ T6439] ? __pfx____ratelimit+0x10/0x10 [ 115.462830][ T6439] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.462855][ T6439] ? __pfx__printk+0x10/0x10 [ 115.462890][ T6439] ? __pfx___might_resched+0x10/0x10 [ 115.462911][ T6439] ? fs_reclaim_acquire+0x7d/0x100 [ 115.462951][ T6439] should_fail_ex+0x414/0x560 [ 115.462990][ T6439] should_failslab+0xa8/0x100 [ 115.463024][ T6439] __kmalloc_noprof+0xcb/0x4f0 [ 115.463052][ T6439] ? tomoyo_encode+0x28b/0x550 [ 115.463080][ T6439] tomoyo_encode+0x28b/0x550 [ 115.463110][ T6439] tomoyo_realpath_from_path+0x58d/0x5d0 [ 115.463136][ T6439] ? tomoyo_domain+0xd9/0x130 [ 115.463165][ T6439] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 115.463197][ T6439] tomoyo_path_number_perm+0x1e8/0x5a0 [ 115.463232][ T6439] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 115.463290][ T6439] ? __lock_acquire+0xab9/0xd20 [ 115.463344][ T6439] ? __fget_files+0x2a/0x420 [ 115.463366][ T6439] ? __fget_files+0x2a/0x420 [ 115.463383][ T6439] ? __fget_files+0x3a0/0x420 [ 115.463400][ T6439] ? __fget_files+0x2a/0x420 [ 115.463424][ T6439] security_file_ioctl+0xcb/0x2d0 [ 115.463458][ T6439] __se_sys_ioctl+0x47/0x170 [ 115.463488][ T6439] do_syscall_64+0xfa/0x3b0 [ 115.463511][ T6439] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.463531][ T6439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.463552][ T6439] ? clear_bhb_loop+0x60/0xb0 [ 115.463579][ T6439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.463600][ T6439] RIP: 0033:0x7f507ed8eba9 [ 115.463619][ T6439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.463636][ T6439] RSP: 002b:00007f507fc84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.463658][ T6439] RAX: ffffffffffffffda RBX: 00007f507efd5fa0 RCX: 00007f507ed8eba9 [ 115.463673][ T6439] RDX: 0000000000000000 RSI: 0000000000008941 RDI: 0000000000000003 [ 115.463686][ T6439] RBP: 00007f507fc84090 R08: 0000000000000000 R09: 0000000000000000 [ 115.463699][ T6439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.463711][ T6439] R13: 00007f507efd6038 R14: 00007f507efd5fa0 R15: 00007ffd0632c388 [ 115.463749][ T6439] [ 115.466067][ T6439] ERROR: Out of memory at tomoyo_realpath_from_path. [ 115.580833][ T6445] netlink: 'syz.4.140': attribute type 4 has an invalid length. [ 116.375158][ T6473] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 116.396091][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.151'. [ 116.449752][ T6475] netlink: 'syz.4.151': attribute type 1 has an invalid length. [ 116.471779][ T6477] netlink: 'syz.3.152': attribute type 4 has an invalid length. [ 116.564328][ T6481] netlink: 'syz.4.153': attribute type 1 has an invalid length. [ 116.574357][ T6481] netlink: 'syz.4.153': attribute type 2 has an invalid length. [ 116.990170][ T6500] pimreg: entered allmulticast mode [ 117.018136][ T6500] dvmrp8: entered allmulticast mode [ 117.038239][ T6499] pimreg: entered allmulticast mode [ 117.058901][ T6499] dvmrp8: entered allmulticast mode [ 117.066279][ T6497] pimreg: left allmulticast mode [ 117.072797][ T6503] netlink: 'syz.4.163': attribute type 28 has an invalid length. [ 117.072930][ T6497] dvmrp8: left allmulticast mode [ 117.133287][ T6498] pimreg: left allmulticast mode [ 117.142383][ T6498] dvmrp8: left allmulticast mode [ 117.475323][ T6524] IPVS: set_ctl: invalid protocol: 60 172.30.1.5:19983 [ 117.720348][ T6534] netlink: 176 bytes leftover after parsing attributes in process `syz.3.179'. [ 117.807188][ T6540] netlink: 40 bytes leftover after parsing attributes in process `syz.1.180'. [ 117.903560][ T6544] netdevsim netdevsim0: loading /lib/firmware// failed with error -22 [ 117.938057][ T6544] netdevsim netdevsim0: Direct firmware load for / failed with error -22 [ 117.946668][ T6544] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 117.995784][ T6548] netlink: 56 bytes leftover after parsing attributes in process `syz.3.184'. [ 118.086627][ T6555] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 118.119402][ T6555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.185'. [ 118.195409][ T6555] bridge2: entered promiscuous mode [ 118.201707][ T6555] bridge2: entered allmulticast mode [ 118.223082][ T6555] team0: Port device bridge2 added [ 118.695152][ T6577] netlink: 176 bytes leftover after parsing attributes in process `syz.2.191'. [ 118.732805][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.192'. [ 118.769680][ T6578] syz_tun: entered promiscuous mode [ 118.778278][ T6578] macvtap1: entered promiscuous mode [ 118.798263][ T6578] macvtap1: entered allmulticast mode [ 118.803703][ T6578] syz_tun: entered allmulticast mode [ 119.417161][ T6610] pimreg: entered allmulticast mode [ 119.483888][ T6610] dvmrp8: entered allmulticast mode [ 120.137660][ T6600] pimreg: left allmulticast mode [ 120.143033][ T6600] dvmrp8: left allmulticast mode [ 120.771213][ T6638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.211'. [ 120.957594][ T6644] validate_nla: 4 callbacks suppressed [ 120.957616][ T6644] netlink: 'syz.1.212': attribute type 4 has an invalid length. [ 121.201401][ T6659] !: renamed from dummy0 (while UP) [ 121.460205][ T6673] netlink: 'syz.2.221': attribute type 13 has an invalid length. [ 121.475685][ T6673] netlink: 'syz.2.221': attribute type 17 has an invalid length. [ 121.657267][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 121.669798][ T6673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.876612][ T6673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.201535][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.640407][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 217.077395][ T5862] Bluetooth: hci1: command 0x0406 tx timeout [ 217.084972][ T5862] Bluetooth: hci3: command 0x0406 tx timeout [ 217.093318][ T5862] Bluetooth: hci2: command 0x0406 tx timeout [ 242.677660][ T5866] Bluetooth: hci4: command 0x0406 tx timeout [ 259.062378][ T6708] netlink: 'syz.4.229': attribute type 4 has an invalid length. [ 259.261348][ T6712] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.265895][ T6720] netlink: 'syz.1.226': attribute type 4 has an invalid length. [ 259.270023][ T6712] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.354015][ T6722] netlink: 'syz.4.232': attribute type 3 has an invalid length. [ 259.449120][ T6712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.466609][ T6712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.580076][ T6713] netlink: 'syz.1.226': attribute type 4 has an invalid length. [ 259.678578][ T6712] tipc: Resetting bearer [ 259.694615][ T6712] syzkaller0: left promiscuous mode [ 259.704235][ T6712] syzkaller0: left allmulticast mode [ 259.802422][ T6717] veth3: entered promiscuous mode [ 259.893400][ T3556] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.916067][ T3556] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.959613][ T3556] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.988150][ T3556] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.424033][ T6763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.242'. [ 260.681498][ T5921] IPVS: starting estimator thread 0... [ 260.786862][ T6777] IPVS: using max 25 ests per chain, 60000 per kthread [ 260.808453][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.249'. [ 260.960704][ T6794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.254'. [ 261.035530][ T6788] netlink: 'syz.1.251': attribute type 1 has an invalid length. [ 261.043529][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'. [ 261.093830][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.188658][ T6803] !: renamed from dummy0 (while UP) [ 261.262942][ T6805] netlink: 'syz.1.258': attribute type 1 has an invalid length. [ 261.291033][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.258'. [ 261.498195][ T6821] netlink: 24 bytes leftover after parsing attributes in process `syz.4.260'. [ 261.529130][ T6810] netlink: 'syz.2.259': attribute type 1 has an invalid length. [ 261.553227][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'. [ 261.569981][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 262.030668][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'. [ 262.256196][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.267'. [ 263.204422][ T6885] netlink: 'syz.1.269': attribute type 1 has an invalid length. [ 263.725456][ T6908] netlink: 'syz.4.277': attribute type 1 has an invalid length. [ 263.859017][ T6916] FAULT_INJECTION: forcing a failure. [ 263.859017][ T6916] name failslab, interval 1, probability 0, space 0, times 0 [ 263.896835][ T6916] CPU: 0 UID: 0 PID: 6916 Comm: syz.0.280 Not tainted syzkaller #0 PREEMPT(full) [ 263.896872][ T6916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 263.896893][ T6916] Call Trace: [ 263.896903][ T6916] [ 263.896915][ T6916] dump_stack_lvl+0x189/0x250 [ 263.896961][ T6916] ? __pfx____ratelimit+0x10/0x10 [ 263.896987][ T6916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.897018][ T6916] ? __pfx__printk+0x10/0x10 [ 263.897061][ T6916] ? __pfx___might_resched+0x10/0x10 [ 263.897092][ T6916] should_fail_ex+0x414/0x560 [ 263.897137][ T6916] should_failslab+0xa8/0x100 [ 263.897184][ T6916] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 263.897221][ T6916] ? __alloc_skb+0x112/0x2d0 [ 263.897257][ T6916] __alloc_skb+0x112/0x2d0 [ 263.897293][ T6916] netlink_sendmsg+0x5c6/0xb30 [ 263.897338][ T6916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.897373][ T6916] ? aa_sock_msg_perm+0xf1/0x1d0 [ 263.897402][ T6916] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 263.897430][ T6916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.897462][ T6916] __sock_sendmsg+0x21c/0x270 [ 263.897491][ T6916] ____sys_sendmsg+0x505/0x830 [ 263.897531][ T6916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.897573][ T6916] ? import_iovec+0x74/0xa0 [ 263.897611][ T6916] ___sys_sendmsg+0x21f/0x2a0 [ 263.897647][ T6916] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.897727][ T6916] ? __fget_files+0x2a/0x420 [ 263.897749][ T6916] ? __fget_files+0x3a0/0x420 [ 263.897785][ T6916] __x64_sys_sendmsg+0x19b/0x260 [ 263.897823][ T6916] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 263.897871][ T6916] ? __pfx_ksys_write+0x10/0x10 [ 263.897903][ T6916] ? rcu_is_watching+0x15/0xb0 [ 263.897935][ T6916] ? do_syscall_64+0xbe/0x3b0 [ 263.897966][ T6916] do_syscall_64+0xfa/0x3b0 [ 263.897992][ T6916] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.898017][ T6916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.898042][ T6916] ? clear_bhb_loop+0x60/0xb0 [ 263.898072][ T6916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.898097][ T6916] RIP: 0033:0x7fbe8b78eba9 [ 263.898132][ T6916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.898153][ T6916] RSP: 002b:00007fbe8c567038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.898191][ T6916] RAX: ffffffffffffffda RBX: 00007fbe8b9d5fa0 RCX: 00007fbe8b78eba9 [ 263.898211][ T6916] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 263.898227][ T6916] RBP: 00007fbe8c567090 R08: 0000000000000000 R09: 0000000000000000 [ 263.898242][ T6916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.898257][ T6916] R13: 00007fbe8b9d6038 R14: 00007fbe8b9d5fa0 R15: 00007ffd592c7ed8 [ 263.898298][ T6916] [ 264.014631][ T6921] vlan2: entered promiscuous mode [ 264.199631][ T6921] vlan2: entered allmulticast mode [ 264.205301][ T6921] hsr_slave_1: entered allmulticast mode [ 264.647320][ T6944] xt_policy: too many policy elements [ 264.681367][ T6941] vlan2: entered promiscuous mode [ 264.708275][ T6941] vlan2: entered allmulticast mode [ 264.721316][ T6941] hsr_slave_1: entered allmulticast mode [ 264.882620][ T6953] wg1: entered promiscuous mode [ 264.888994][ T6953] wg1: entered allmulticast mode [ 265.489578][ T6972] __nla_validate_parse: 7 callbacks suppressed [ 265.489598][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'. [ 265.710181][ T31] audit: type=1804 audit(1758178742.543:2): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.298" name="cgroup.controllers" dev="tmpfs" ino=262 res=1 errno=0 [ 265.801480][ T31] audit: type=1800 audit(1758178742.543:3): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.298" name="cgroup.controllers" dev="tmpfs" ino=262 res=0 errno=0 [ 266.375981][ T6995] vlan2: entered allmulticast mode [ 266.389326][ T6995] batadv0: entered allmulticast mode [ 267.174918][ T7023] netlink: 'syz.4.309': attribute type 4 has an invalid length. [ 267.742945][ T7042] netlink: 'syz.0.318': attribute type 4 has an invalid length. [ 267.913504][ T7048] netlink: 'syz.2.319': attribute type 1 has an invalid length. [ 267.936846][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'. [ 267.960774][ T7059] netlink: 'syz.0.323': attribute type 4 has an invalid length. [ 268.052758][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'. [ 268.229191][ T7068] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.325'. [ 268.562216][ T7082] netlink: 71 bytes leftover after parsing attributes in process `syz.0.328'. [ 268.650693][ T7086] netlink: 'syz.0.328': attribute type 39 has an invalid length. [ 269.628359][ T7108] netlink: 'syz.4.335': attribute type 1 has an invalid length. [ 269.647915][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'. [ 269.723337][ T7116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.921434][ T7128] netlink: 'syz.2.340': attribute type 4 has an invalid length. [ 269.943730][ T7128] netlink: 40 bytes leftover after parsing attributes in process `syz.2.340'. [ 270.108315][ T7124] netlink: 'syz.4.339': attribute type 1 has an invalid length. [ 270.133590][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.339'. [ 270.882290][ T7166] netlink: 'syz.3.351': attribute type 83 has an invalid length. [ 271.351447][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.354'. [ 272.666924][ T7212] netlink: 'syz.2.361': attribute type 5 has an invalid length. [ 272.969679][ T7221] netlink: 'syz.4.364': attribute type 1 has an invalid length. [ 273.000434][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.364'. [ 273.132894][ T7229] FAULT_INJECTION: forcing a failure. [ 273.132894][ T7229] name failslab, interval 1, probability 0, space 0, times 0 [ 273.170464][ T7229] CPU: 1 UID: 0 PID: 7229 Comm: syz.0.367 Not tainted syzkaller #0 PREEMPT(full) [ 273.170499][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 273.170513][ T7229] Call Trace: [ 273.170522][ T7229] [ 273.170533][ T7229] dump_stack_lvl+0x189/0x250 [ 273.170568][ T7229] ? __pfx____ratelimit+0x10/0x10 [ 273.170592][ T7229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.170621][ T7229] ? __pfx__printk+0x10/0x10 [ 273.170649][ T7229] ? genl_rcv+0x28/0x40 [ 273.170683][ T7229] ? ____sys_sendmsg+0x505/0x830 [ 273.170713][ T7229] ? __x64_sys_sendmsg+0x19b/0x260 [ 273.170758][ T7229] should_fail_ex+0x414/0x560 [ 273.170800][ T7229] should_failslab+0xa8/0x100 [ 273.170838][ T7229] kmem_cache_alloc_noprof+0x73/0x3c0 [ 273.170869][ T7229] ? skb_clone+0x212/0x3a0 [ 273.170908][ T7229] skb_clone+0x212/0x3a0 [ 273.170946][ T7229] __netlink_deliver_tap+0x404/0x850 [ 273.170991][ T7229] ? netlink_deliver_tap+0x2e/0x1b0 [ 273.171021][ T7229] netlink_deliver_tap+0x19c/0x1b0 [ 273.171051][ T7229] netlink_sendskb+0x68/0x140 [ 273.171086][ T7229] netlink_unicast+0x397/0x9e0 [ 273.171107][ T7229] ? __asan_memcpy+0x40/0x70 [ 273.171145][ T7229] ? __pfx_netlink_unicast+0x10/0x10 [ 273.171183][ T7229] netlink_rcv_skb+0x28c/0x470 [ 273.171208][ T7229] ? __lock_acquire+0xab9/0xd20 [ 273.171243][ T7229] ? __pfx_genl_rcv_msg+0x10/0x10 [ 273.171294][ T7229] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 273.171344][ T7229] ? down_read+0x1ad/0x2e0 [ 273.171374][ T7229] genl_rcv+0x28/0x40 [ 273.171405][ T7229] netlink_unicast+0x82c/0x9e0 [ 273.171440][ T7229] ? __pfx_netlink_unicast+0x10/0x10 [ 273.171470][ T7229] ? netlink_sendmsg+0x642/0xb30 [ 273.171495][ T7229] ? skb_put+0x11b/0x210 [ 273.171528][ T7229] netlink_sendmsg+0x805/0xb30 [ 273.171567][ T7229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.171599][ T7229] ? aa_sock_msg_perm+0xf1/0x1d0 [ 273.171643][ T7229] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 273.171668][ T7229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.171696][ T7229] __sock_sendmsg+0x21c/0x270 [ 273.171723][ T7229] ____sys_sendmsg+0x505/0x830 [ 273.171761][ T7229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.171804][ T7229] ? import_iovec+0x74/0xa0 [ 273.171839][ T7229] ___sys_sendmsg+0x21f/0x2a0 [ 273.171873][ T7229] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.171950][ T7229] ? __fget_files+0x2a/0x420 [ 273.171969][ T7229] ? __fget_files+0x3a0/0x420 [ 273.172002][ T7229] __x64_sys_sendmsg+0x19b/0x260 [ 273.172037][ T7229] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 273.172088][ T7229] ? __pfx_ksys_write+0x10/0x10 [ 273.172115][ T7229] ? rcu_is_watching+0x15/0xb0 [ 273.172145][ T7229] ? do_syscall_64+0xbe/0x3b0 [ 273.172174][ T7229] do_syscall_64+0xfa/0x3b0 [ 273.172196][ T7229] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.172218][ T7229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.172240][ T7229] ? clear_bhb_loop+0x60/0xb0 [ 273.172267][ T7229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.172289][ T7229] RIP: 0033:0x7fbe8b78eba9 [ 273.172309][ T7229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.172328][ T7229] RSP: 002b:00007fbe8c567038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.172352][ T7229] RAX: ffffffffffffffda RBX: 00007fbe8b9d5fa0 RCX: 00007fbe8b78eba9 [ 273.172369][ T7229] RDX: 0000000004040000 RSI: 0000200000000040 RDI: 0000000000000003 [ 273.172383][ T7229] RBP: 00007fbe8c567090 R08: 0000000000000000 R09: 0000000000000000 [ 273.172397][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.172410][ T7229] R13: 00007fbe8b9d6038 R14: 00007fbe8b9d5fa0 R15: 00007ffd592c7ed8 [ 273.172445][ T7229] [ 274.095840][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.373'. [ 274.110388][ T7247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.084302][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 275.701260][ T7312] netlink: 24 bytes leftover after parsing attributes in process `syz.4.391'. [ 275.789084][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'. [ 276.136015][ T7328] netlink: 'syz.4.392': attribute type 5 has an invalid length. [ 276.694461][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.396'. [ 276.770485][ T7349] netlink: 'syz.4.396': attribute type 5 has an invalid length. [ 276.822532][ T7349] netlink: 20 bytes leftover after parsing attributes in process `syz.4.396'. [ 277.375087][ T7338] netlink: 'syz.1.395': attribute type 1 has an invalid length. [ 277.387800][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 277.438381][ T7349] geneve2: entered promiscuous mode [ 277.469078][ T7349] geneve2: entered allmulticast mode [ 277.527770][ T6869] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 277.547542][ T6869] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 277.583804][ T6869] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 277.873717][ T7366] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.399'. [ 277.931096][ T6869] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 278.376474][ T7383] netlink: 56 bytes leftover after parsing attributes in process `syz.0.403'. [ 278.781027][ T7394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.408'. [ 278.828375][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 278.873635][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.407'. [ 279.171881][ T7404] netlink: 'syz.0.410': attribute type 32 has an invalid length. [ 279.295702][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.411'. [ 279.325802][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.411'. [ 279.488369][ T7385] syz.1.404 (7385) used greatest stack depth: 17960 bytes left [ 279.830749][ T7418] bridge_slave_1: left allmulticast mode [ 279.853043][ T7418] bridge_slave_1: left promiscuous mode [ 279.869753][ T7418] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.922564][ T7418] bridge_slave_0: left allmulticast mode [ 279.934465][ T7418] bridge_slave_0: left promiscuous mode [ 279.951266][ T7418] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.261627][ T7414] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.438191][ T7414] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.564025][ T7414] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.615770][ T7441] netlink: 'syz.4.420': attribute type 1 has an invalid length. [ 280.722588][ T7414] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.871115][ T6868] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.902356][ T6868] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.950778][ T6868] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.023194][ T6869] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.784269][ T7485] __nla_validate_parse: 4 callbacks suppressed [ 281.784291][ T7485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.434'. [ 281.838791][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.435'. [ 281.854278][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.435'. [ 281.957164][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.437'. [ 282.081034][ T7498] nbd: must specify at least one socket [ 282.342053][ T7502] netlink: 'syz.3.442': attribute type 1 has an invalid length. [ 282.353742][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.442'. [ 282.364763][ T7505] netlink: 'syz.2.441': attribute type 1 has an invalid length. [ 282.392582][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 282.505692][ T7515] FAULT_INJECTION: forcing a failure. [ 282.505692][ T7515] name failslab, interval 1, probability 0, space 0, times 0 [ 282.535165][ T7515] CPU: 0 UID: 0 PID: 7515 Comm: syz.1.444 Not tainted syzkaller #0 PREEMPT(full) [ 282.535197][ T7515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 282.535211][ T7515] Call Trace: [ 282.535220][ T7515] [ 282.535229][ T7515] dump_stack_lvl+0x189/0x250 [ 282.535262][ T7515] ? __pfx____ratelimit+0x10/0x10 [ 282.535285][ T7515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.535322][ T7515] ? __pfx__printk+0x10/0x10 [ 282.535350][ T7515] ? netlink_unicast+0x82c/0x9e0 [ 282.535375][ T7515] ? ___sys_sendmsg+0x21f/0x2a0 [ 282.535403][ T7515] ? do_syscall_64+0xfa/0x3b0 [ 282.535445][ T7515] should_fail_ex+0x414/0x560 [ 282.535505][ T7515] should_failslab+0xa8/0x100 [ 282.535543][ T7515] kmem_cache_alloc_noprof+0x73/0x3c0 [ 282.535577][ T7515] ? skb_clone+0x212/0x3a0 [ 282.535617][ T7515] skb_clone+0x212/0x3a0 [ 282.535656][ T7515] __netlink_deliver_tap+0x404/0x850 [ 282.535702][ T7515] ? netlink_deliver_tap+0x2e/0x1b0 [ 282.535733][ T7515] netlink_deliver_tap+0x19c/0x1b0 [ 282.535764][ T7515] netlink_sendskb+0x68/0x140 [ 282.535793][ T7515] netlink_unicast+0x397/0x9e0 [ 282.535816][ T7515] ? __asan_memcpy+0x40/0x70 [ 282.535854][ T7515] ? __pfx_netlink_unicast+0x10/0x10 [ 282.535910][ T7515] netlink_rcv_skb+0x28c/0x470 [ 282.535940][ T7515] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 282.535971][ T7515] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 282.536015][ T7515] ? netlink_deliver_tap+0x2e/0x1b0 [ 282.536055][ T7515] netlink_unicast+0x82c/0x9e0 [ 282.536091][ T7515] ? __pfx_netlink_unicast+0x10/0x10 [ 282.536119][ T7515] ? netlink_sendmsg+0x642/0xb30 [ 282.536146][ T7515] ? skb_put+0x11b/0x210 [ 282.536182][ T7515] netlink_sendmsg+0x805/0xb30 [ 282.536223][ T7515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.536272][ T7515] ? aa_sock_msg_perm+0xf1/0x1d0 [ 282.536307][ T7515] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 282.536335][ T7515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.536368][ T7515] __sock_sendmsg+0x21c/0x270 [ 282.536397][ T7515] ____sys_sendmsg+0x505/0x830 [ 282.536439][ T7515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.536505][ T7515] ? import_iovec+0x74/0xa0 [ 282.536544][ T7515] ___sys_sendmsg+0x21f/0x2a0 [ 282.536582][ T7515] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.536664][ T7515] ? __fget_files+0x2a/0x420 [ 282.536689][ T7515] ? __fget_files+0x3a0/0x420 [ 282.536724][ T7515] __x64_sys_sendmsg+0x19b/0x260 [ 282.536763][ T7515] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 282.536811][ T7515] ? __pfx_ksys_write+0x10/0x10 [ 282.536842][ T7515] ? rcu_is_watching+0x15/0xb0 [ 282.536875][ T7515] ? do_syscall_64+0xbe/0x3b0 [ 282.536907][ T7515] do_syscall_64+0xfa/0x3b0 [ 282.536932][ T7515] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.536956][ T7515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.536981][ T7515] ? clear_bhb_loop+0x60/0xb0 [ 282.537012][ T7515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.537036][ T7515] RIP: 0033:0x7f507ed8eba9 [ 282.537058][ T7515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.537079][ T7515] RSP: 002b:00007f507fc84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.537106][ T7515] RAX: ffffffffffffffda RBX: 00007f507efd5fa0 RCX: 00007f507ed8eba9 [ 282.537125][ T7515] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 282.537140][ T7515] RBP: 00007f507fc84090 R08: 0000000000000000 R09: 0000000000000000 [ 282.537156][ T7515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.537171][ T7515] R13: 00007f507efd6038 R14: 00007f507efd5fa0 R15: 00007ffd0632c388 [ 282.537211][ T7515] [ 282.538921][ T7518] netlink: 'syz.4.445': attribute type 14 has an invalid length. [ 282.597275][ T7519] netlink: 68 bytes leftover after parsing attributes in process `syz.3.446'. [ 282.860483][ T7530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.450'. [ 282.865094][ T5866] Bluetooth: hci4: command 0x0406 tx timeout [ 282.913096][ T7533] netlink: 'syz.3.446': attribute type 1 has an invalid length. [ 282.944309][ T7533] netlink: 224 bytes leftover after parsing attributes in process `syz.3.446'. [ 283.051293][ T7537] netlink: 36 bytes leftover after parsing attributes in process `syz.3.452'. [ 283.643755][ T7554] netlink: 'syz.4.458': attribute type 1 has an invalid length. [ 283.667048][ T7561] bridge_slave_1: left allmulticast mode [ 283.746869][ T7561] bridge_slave_1: left promiscuous mode [ 283.774739][ T7561] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.801591][ T7561] bridge_slave_0: left allmulticast mode [ 283.807432][ T7561] bridge_slave_0: left promiscuous mode [ 283.813382][ T7561] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.991312][ T7585] netlink: 'syz.1.465': attribute type 10 has an invalid length. [ 284.065557][ T7576] tipc: Enabling of bearer rejected, failed to enable media [ 284.142561][ T7585] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 286.062271][ T7615] netlink: 'syz.1.473': attribute type 2 has an invalid length. [ 286.118670][ T1150] wlan1: Trigger new scan to find an IBSS to join [ 286.328880][ T7663] bridge_slave_1: left allmulticast mode [ 286.351615][ T7663] bridge_slave_1: left promiscuous mode [ 286.374982][ T7663] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.394691][ T7663] bridge_slave_0: left allmulticast mode [ 286.401237][ T7663] bridge_slave_0: left promiscuous mode [ 286.407262][ T7663] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.423292][ T7715] __nla_validate_parse: 11 callbacks suppressed [ 287.423314][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 288.153143][ T7742] syzkaller1: entered promiscuous mode [ 288.153451][ T7744] netlink: 'syz.3.494': attribute type 5 has an invalid length. [ 288.187486][ T7742] syzkaller1: entered allmulticast mode [ 288.461657][ T7755] netlink: 'syz.0.496': attribute type 29 has an invalid length. [ 288.512086][ T7755] netlink: 'syz.0.496': attribute type 29 has an invalid length. [ 288.614270][ T7755] bond1: entered promiscuous mode [ 288.796181][ T7770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'. [ 289.162368][ T6878] wlan1: Trigger new scan to find an IBSS to join [ 289.410359][ T7801] netlink: 256 bytes leftover after parsing attributes in process `syz.1.511'. [ 289.478098][ T7805] netlink: 16 bytes leftover after parsing attributes in process `syz.4.512'. [ 289.484542][ T7804] netlink: 676 bytes leftover after parsing attributes in process `syz.2.513'. [ 289.512150][ T7804] netlink: 676 bytes leftover after parsing attributes in process `syz.2.513'. [ 289.900594][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.516'. [ 290.062003][ T7826] FAULT_INJECTION: forcing a failure. [ 290.062003][ T7826] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 290.104193][ T7826] CPU: 1 UID: 0 PID: 7826 Comm: syz.2.517 Not tainted syzkaller #0 PREEMPT(full) [ 290.104224][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 290.104237][ T7826] Call Trace: [ 290.104246][ T7826] [ 290.104254][ T7826] dump_stack_lvl+0x189/0x250 [ 290.104287][ T7826] ? __pfx____ratelimit+0x10/0x10 [ 290.104308][ T7826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.104340][ T7826] ? __pfx__printk+0x10/0x10 [ 290.104370][ T7826] ? __might_fault+0xb0/0x130 [ 290.104411][ T7826] should_fail_ex+0x414/0x560 [ 290.104445][ T7826] _copy_from_user+0x2d/0xb0 [ 290.104473][ T7826] __sys_bpf+0x1ed/0x870 [ 290.104503][ T7826] ? __pfx___sys_bpf+0x10/0x10 [ 290.104543][ T7826] ? ksys_write+0x22a/0x250 [ 290.104572][ T7826] ? __pfx_ksys_write+0x10/0x10 [ 290.104598][ T7826] ? rcu_is_watching+0x15/0xb0 [ 290.104642][ T7826] __x64_sys_bpf+0x7c/0x90 [ 290.104688][ T7826] do_syscall_64+0xfa/0x3b0 [ 290.104710][ T7826] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.104731][ T7826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.104753][ T7826] ? clear_bhb_loop+0x60/0xb0 [ 290.104779][ T7826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.104800][ T7826] RIP: 0033:0x7f293278eba9 [ 290.104819][ T7826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.104837][ T7826] RSP: 002b:00007f29335c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 290.104861][ T7826] RAX: ffffffffffffffda RBX: 00007f29329d5fa0 RCX: 00007f293278eba9 [ 290.104876][ T7826] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 290.104889][ T7826] RBP: 00007f29335c3090 R08: 0000000000000000 R09: 0000000000000000 [ 290.104902][ T7826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.104915][ T7826] R13: 00007f29329d6038 R14: 00007f29329d5fa0 R15: 00007ffd040cf518 [ 290.104950][ T7826] [ 290.313655][ T1101] wlan1: Creating new IBSS network, BSSID ba:4c:b9:50:8a:a8 [ 290.824999][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.521'. [ 291.077815][ T7845] netlink: 32 bytes leftover after parsing attributes in process `syz.2.520'. [ 291.087856][ T7845] tipc: Invalid UDP bearer configuration [ 291.087924][ T7845] tipc: Enabling of bearer rejected, failed to enable media [ 291.376158][ T7866] netlink: 24 bytes leftover after parsing attributes in process `syz.3.526'. [ 291.534803][ T7873] netlink: 'syz.0.529': attribute type 5 has an invalid length. [ 291.707895][ T7882] gretap1: entered promiscuous mode [ 291.771628][ T7886] gretap1: entered promiscuous mode [ 292.375168][ T7918] netlink: 'syz.2.546': attribute type 5 has an invalid length. [ 292.418562][ T7924] netlink: 'syz.0.545': attribute type 1 has an invalid length. [ 293.157051][ T12] wlan1: Trigger new scan to find an IBSS to join [ 293.251152][ T7959] __nla_validate_parse: 1 callbacks suppressed [ 293.251172][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.556'. [ 293.390634][ T7964] netlink: 136 bytes leftover after parsing attributes in process `syz.3.557'. [ 293.423723][ T7964] netlink: 180 bytes leftover after parsing attributes in process `syz.3.557'. [ 293.932277][ T7988] netlink: 'syz.0.568': attribute type 13 has an invalid length. [ 294.013189][ T7986] netlink: 24 bytes leftover after parsing attributes in process `syz.3.567'. [ 294.126452][ T7997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.146484][ T7995] FAULT_INJECTION: forcing a failure. [ 294.146484][ T7995] name failslab, interval 1, probability 0, space 0, times 0 [ 294.170865][ T7995] CPU: 0 UID: 0 PID: 7995 Comm: syz.1.569 Not tainted syzkaller #0 PREEMPT(full) [ 294.170897][ T7995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 294.170912][ T7995] Call Trace: [ 294.170922][ T7995] [ 294.170931][ T7995] dump_stack_lvl+0x189/0x250 [ 294.170967][ T7995] ? __pfx____ratelimit+0x10/0x10 [ 294.170992][ T7995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.171022][ T7995] ? __pfx__printk+0x10/0x10 [ 294.171084][ T7995] ? __lock_acquire+0xab9/0xd20 [ 294.171134][ T7995] should_fail_ex+0x414/0x560 [ 294.171178][ T7995] should_failslab+0xa8/0x100 [ 294.171217][ T7995] kmem_cache_alloc_noprof+0x73/0x3c0 [ 294.171249][ T7995] ? skb_clone+0x212/0x3a0 [ 294.171305][ T7995] skb_clone+0x212/0x3a0 [ 294.171344][ T7995] __netlink_deliver_tap+0x404/0x850 [ 294.171392][ T7995] ? netlink_deliver_tap+0x2e/0x1b0 [ 294.171424][ T7995] netlink_deliver_tap+0x19c/0x1b0 [ 294.171455][ T7995] netlink_unicast+0x7fa/0x9e0 [ 294.171493][ T7995] ? __pfx_netlink_unicast+0x10/0x10 [ 294.171522][ T7995] ? netlink_sendmsg+0x642/0xb30 [ 294.171549][ T7995] ? skb_put+0x11b/0x210 [ 294.171584][ T7995] netlink_sendmsg+0x805/0xb30 [ 294.171638][ T7995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.171670][ T7995] ? aa_sock_msg_perm+0xf1/0x1d0 [ 294.171697][ T7995] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 294.171723][ T7995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.171754][ T7995] __sock_sendmsg+0x21c/0x270 [ 294.171781][ T7995] ____sys_sendmsg+0x505/0x830 [ 294.171821][ T7995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.171865][ T7995] ? import_iovec+0x74/0xa0 [ 294.171900][ T7995] ___sys_sendmsg+0x21f/0x2a0 [ 294.171936][ T7995] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.172014][ T7995] ? __fget_files+0x2a/0x420 [ 294.172034][ T7995] ? __fget_files+0x3a0/0x420 [ 294.172069][ T7995] __x64_sys_sendmsg+0x19b/0x260 [ 294.172103][ T7995] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 294.172146][ T7995] ? __pfx_ksys_write+0x10/0x10 [ 294.172175][ T7995] ? rcu_is_watching+0x15/0xb0 [ 294.172205][ T7995] ? do_syscall_64+0xbe/0x3b0 [ 294.172233][ T7995] do_syscall_64+0xfa/0x3b0 [ 294.172254][ T7995] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.172274][ T7995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.172311][ T7995] ? clear_bhb_loop+0x60/0xb0 [ 294.172341][ T7995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.172363][ T7995] RIP: 0033:0x7f507ed8eba9 [ 294.172384][ T7995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.172402][ T7995] RSP: 002b:00007f507fc84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.172426][ T7995] RAX: ffffffffffffffda RBX: 00007f507efd5fa0 RCX: 00007f507ed8eba9 [ 294.172443][ T7995] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000003 [ 294.172458][ T7995] RBP: 00007f507fc84090 R08: 0000000000000000 R09: 0000000000000000 [ 294.172472][ T7995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.172486][ T7995] R13: 00007f507efd6038 R14: 00007f507efd5fa0 R15: 00007ffd0632c388 [ 294.172523][ T7995] [ 294.226496][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.570'. [ 295.057662][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 295.419699][ T8042] netlink: 'syz.4.585': attribute type 1 has an invalid length. [ 295.430565][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 296.552941][ T8098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.601'. [ 297.157883][ T64] wlan1: Trigger new scan to find an IBSS to join [ 297.854340][ T8147] tipc: Started in network mode [ 297.888019][ T8147] tipc: Node identity 46e39916db1d, cluster identity 4711 [ 297.914818][ T8147] tipc: Enabled bearer , priority 0 [ 297.925563][ T8151] syzkaller0: entered promiscuous mode [ 297.948021][ T8151] syzkaller0: entered allmulticast mode [ 297.975666][ T8147] tipc: Resetting bearer [ 298.081122][ T3556] wlan1: Creating new IBSS network, BSSID 7a:e4:e4:e0:01:c0 [ 298.127135][ T9] ------------[ cut here ]------------ [ 298.133008][ T9] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 298.144412][ T9] WARNING: CPU: 0 PID: 9 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820 [ 298.154268][ T9] Modules linked in: [ 298.158499][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 298.167717][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 298.177867][ T9] Workqueue: mld mld_ifc_work [ 298.182625][ T9] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 298.188983][ T9] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 e0 8b b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 62 0f 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 298.208657][ T9] RSP: 0018:ffffc900000e6478 EFLAGS: 00010246 [ 298.212182][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'. [ 298.214751][ T9] RAX: fdfadb5ca10fbc00 RBX: 000000000000000c RCX: ffff88801ce90000 [ 298.231742][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 298.239800][ T9] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 298.247855][ T9] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: ffff888079f767a8 [ 298.255873][ T9] R13: 0000000000000000 R14: ffff8880797e0e40 R15: ffff8880797e30d8 [ 298.263957][ T9] FS: 0000000000000000(0000) GS:ffff888125c16000(0000) knlGS:0000000000000000 [ 298.273007][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.279673][ T9] CR2: 00007fba32125eb8 CR3: 000000000df36000 CR4: 00000000003526f0 [ 298.287753][ T9] Call Trace: [ 298.291078][ T9] [ 298.294073][ T9] rate_control_send_low+0x194/0x7a0 [ 298.299474][ T9] rate_control_get_rate+0x20b/0x5d0 [ 298.304822][ T9] ieee80211_tx_h_rate_ctrl+0xb32/0x1780 [ 298.310576][ T9] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 298.316734][ T9] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 298.323032][ T9] invoke_tx_handlers_late+0xba/0x18a0 [ 298.328621][ T9] ? ieee80211_tx_h_select_key+0x1090/0x19f0 [ 298.334685][ T9] ieee80211_tx_dequeue+0x308e/0x4360 [ 298.340303][ T9] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 298.346111][ T9] ? __local_bh_enable_ip+0x12d/0x1c0 [ 298.351609][ T9] ieee80211_handle_wake_tx_queue+0x125/0x2a0 [ 298.357788][ T9] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 298.364453][ T9] ? __local_bh_enable_ip+0x12d/0x1c0 [ 298.369982][ T9] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 298.375758][ T9] ? do_raw_spin_unlock+0x122/0x240 [ 298.381065][ T9] ieee80211_queue_skb+0x1a31/0x21c0 [ 298.386455][ T9] ieee80211_tx+0x297/0x460 [ 298.391066][ T9] ? __pfx_ieee80211_tx+0x10/0x10 [ 298.396181][ T9] ? ieee80211_xmit+0x315/0x400 [ 298.401140][ T9] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 298.407203][ T9] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 298.413414][ T9] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 298.419964][ T9] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 298.426272][ T9] ieee80211_subif_start_xmit+0xe0/0x510 [ 298.432008][ T9] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 298.438364][ T9] ? __pfx_netif_skb_features+0x10/0x10 [ 298.443985][ T9] ? call_rcu+0x6ff/0x9c0 [ 298.448408][ T9] ? __lock_acquire+0xab9/0xd20 [ 298.453332][ T9] dev_hard_start_xmit+0x2d7/0x830 [ 298.459138][ T9] __dev_queue_xmit+0x1b8d/0x3b50 [ 298.464321][ T9] ? register_lock_class+0x51/0x320 [ 298.469622][ T9] ? __dev_queue_xmit+0x27b/0x3b50 [ 298.474815][ T9] ? __pfx___dev_queue_xmit+0x10/0x10 [ 298.480294][ T9] ? read_seqbegin+0x122/0x250 [ 298.485188][ T9] ? neigh_resolve_output+0x438/0x750 [ 298.490638][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.495915][ T9] ? read_seqbegin+0x1ac/0x250 [ 298.500775][ T9] ? __pfx_read_seqbegin+0x10/0x10 [ 298.505936][ T9] ? __local_bh_enable_ip+0x12d/0x1c0 [ 298.511401][ T9] ? eth_header+0x11b/0x200 [ 298.515952][ T9] ? __asan_memcpy+0x40/0x70 [ 298.520755][ T9] ip6_finish_output2+0xfb3/0x1480 [ 298.525917][ T9] ? __pfx_ip6_finish_output2+0x10/0x10 [ 298.531523][ T9] ? ip6_mtu+0x7d/0x490 [ 298.535755][ T9] ? ip6_mtu+0x38c/0x490 [ 298.540116][ T9] ? ip6_finish_output+0x2ef/0x4e0 [ 298.545817][ T9] ? ip6_output+0x126/0x550 [ 298.550446][ T9] ip6_output+0x340/0x550 [ 298.554844][ T9] NF_HOOK+0x9e/0x380 [ 298.558947][ T9] ? NF_HOOK+0x101/0x380 [ 298.563240][ T9] ? __pfx_NF_HOOK+0x10/0x10 [ 298.567901][ T9] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 298.573757][ T9] ? do_raw_spin_unlock+0x122/0x240 [ 298.579053][ T9] ? icmp6_dst_alloc+0x3a5/0x420 [ 298.584077][ T9] ? icmp6_dst_alloc+0x3a5/0x420 [ 298.589120][ T9] mld_sendpack+0x8d4/0xe60 [ 298.593698][ T9] ? mld_sendpack+0x1e7/0xe60 [ 298.598512][ T9] ? __pfx_mld_sendpack+0x10/0x10 [ 298.603604][ T9] mld_ifc_work+0x83e/0xd60 [ 298.608198][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.613487][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 298.619287][ T9] process_scheduled_works+0xae1/0x17b0 [ 298.624911][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 298.630976][ T9] worker_thread+0x8a0/0xda0 [ 298.635833][ T9] kthread+0x70e/0x8a0 [ 298.640042][ T9] ? __pfx_worker_thread+0x10/0x10 [ 298.645238][ T9] ? __pfx_kthread+0x10/0x10 [ 298.649904][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.655149][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.660419][ T9] ? __pfx_kthread+0x10/0x10 [ 298.665096][ T9] ret_from_fork+0x436/0x7d0 [ 298.669776][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 298.674961][ T9] ? __switch_to_asm+0x39/0x70 [ 298.679815][ T9] ? __switch_to_asm+0x33/0x70 [ 298.684646][ T9] ? __pfx_kthread+0x10/0x10 [ 298.689309][ T9] ret_from_fork_asm+0x1a/0x30 [ 298.694115][ T9] [ 298.697229][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 298.704541][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 298.713656][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 298.723722][ T9] Workqueue: mld mld_ifc_work [ 298.728417][ T9] Call Trace: [ 298.731709][ T9] [ 298.734655][ T9] dump_stack_lvl+0x99/0x250 [ 298.739280][ T9] ? __asan_memcpy+0x40/0x70 [ 298.743910][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.749154][ T9] ? __pfx__printk+0x10/0x10 [ 298.753777][ T9] vpanic+0x281/0x750 [ 298.757790][ T9] ? __pfx__printk+0x10/0x10 [ 298.762446][ T9] ? __pfx_vpanic+0x10/0x10 [ 298.766989][ T9] ? is_bpf_text_address+0x292/0x2b0 [ 298.772341][ T9] panic+0xb9/0xc0 [ 298.776090][ T9] ? __pfx_panic+0x10/0x10 [ 298.780546][ T9] __warn+0x31b/0x4b0 [ 298.784599][ T9] ? __rate_control_send_low+0x5df/0x820 [ 298.790294][ T9] ? __rate_control_send_low+0x5df/0x820 [ 298.795955][ T9] report_bug+0x2be/0x4f0 [ 298.800325][ T9] ? __rate_control_send_low+0x5df/0x820 [ 298.806001][ T9] ? __rate_control_send_low+0x5df/0x820 [ 298.811680][ T9] ? __rate_control_send_low+0x5e1/0x820 [ 298.817341][ T9] handle_bug+0x84/0x160 [ 298.821620][ T9] exc_invalid_op+0x1a/0x50 [ 298.826166][ T9] asm_exc_invalid_op+0x1a/0x20 [ 298.831028][ T9] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 298.837310][ T9] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 e0 8b b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 62 0f 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 298.856959][ T9] RSP: 0018:ffffc900000e6478 EFLAGS: 00010246 [ 298.863065][ T9] RAX: fdfadb5ca10fbc00 RBX: 000000000000000c RCX: ffff88801ce90000 [ 298.871076][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 298.879160][ T9] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 298.887240][ T9] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: ffff888079f767a8 [ 298.895247][ T9] R13: 0000000000000000 R14: ffff8880797e0e40 R15: ffff8880797e30d8 [ 298.903263][ T9] ? __rate_control_send_low+0x5de/0x820 [ 298.908949][ T9] rate_control_send_low+0x194/0x7a0 [ 298.914251][ T9] rate_control_get_rate+0x20b/0x5d0 [ 298.919657][ T9] ieee80211_tx_h_rate_ctrl+0xb32/0x1780 [ 298.925343][ T9] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 298.931441][ T9] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 298.937721][ T9] invoke_tx_handlers_late+0xba/0x18a0 [ 298.943248][ T9] ? ieee80211_tx_h_select_key+0x1090/0x19f0 [ 298.949267][ T9] ieee80211_tx_dequeue+0x308e/0x4360 [ 298.954795][ T9] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 298.960541][ T9] ? __local_bh_enable_ip+0x12d/0x1c0 [ 298.965984][ T9] ieee80211_handle_wake_tx_queue+0x125/0x2a0 [ 298.972118][ T9] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 298.978756][ T9] ? __local_bh_enable_ip+0x12d/0x1c0 [ 298.984245][ T9] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 298.989986][ T9] ? do_raw_spin_unlock+0x122/0x240 [ 298.995219][ T9] ieee80211_queue_skb+0x1a31/0x21c0 [ 299.000563][ T9] ieee80211_tx+0x297/0x460 [ 299.005107][ T9] ? __pfx_ieee80211_tx+0x10/0x10 [ 299.010194][ T9] ? ieee80211_xmit+0x315/0x400 [ 299.015160][ T9] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 299.021167][ T9] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 299.027368][ T9] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 299.033856][ T9] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 299.040159][ T9] ieee80211_subif_start_xmit+0xe0/0x510 [ 299.045824][ T9] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 299.052099][ T9] ? __pfx_netif_skb_features+0x10/0x10 [ 299.057699][ T9] ? call_rcu+0x6ff/0x9c0 [ 299.062064][ T9] ? __lock_acquire+0xab9/0xd20 [ 299.066976][ T9] dev_hard_start_xmit+0x2d7/0x830 [ 299.072168][ T9] __dev_queue_xmit+0x1b8d/0x3b50 [ 299.077235][ T9] ? register_lock_class+0x51/0x320 [ 299.082512][ T9] ? __dev_queue_xmit+0x27b/0x3b50 [ 299.087706][ T9] ? __pfx___dev_queue_xmit+0x10/0x10 [ 299.093115][ T9] ? read_seqbegin+0x122/0x250 [ 299.097896][ T9] ? neigh_resolve_output+0x438/0x750 [ 299.103291][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.108505][ T9] ? read_seqbegin+0x1ac/0x250 [ 299.113281][ T9] ? __pfx_read_seqbegin+0x10/0x10 [ 299.118401][ T9] ? __local_bh_enable_ip+0x12d/0x1c0 [ 299.123790][ T9] ? eth_header+0x11b/0x200 [ 299.128334][ T9] ? __asan_memcpy+0x40/0x70 [ 299.132989][ T9] ip6_finish_output2+0xfb3/0x1480 [ 299.138198][ T9] ? __pfx_ip6_finish_output2+0x10/0x10 [ 299.143799][ T9] ? ip6_mtu+0x7d/0x490 [ 299.147976][ T9] ? ip6_mtu+0x38c/0x490 [ 299.152240][ T9] ? ip6_finish_output+0x2ef/0x4e0 [ 299.157387][ T9] ? ip6_output+0x126/0x550 [ 299.161955][ T9] ip6_output+0x340/0x550 [ 299.166358][ T9] NF_HOOK+0x9e/0x380 [ 299.170363][ T9] ? NF_HOOK+0x101/0x380 [ 299.174628][ T9] ? __pfx_NF_HOOK+0x10/0x10 [ 299.179275][ T9] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 299.185108][ T9] ? do_raw_spin_unlock+0x122/0x240 [ 299.190333][ T9] ? icmp6_dst_alloc+0x3a5/0x420 [ 299.195293][ T9] ? icmp6_dst_alloc+0x3a5/0x420 [ 299.200260][ T9] mld_sendpack+0x8d4/0xe60 [ 299.204804][ T9] ? mld_sendpack+0x1e7/0xe60 [ 299.209494][ T9] ? __pfx_mld_sendpack+0x10/0x10 [ 299.214552][ T9] mld_ifc_work+0x83e/0xd60 [ 299.219074][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 299.224296][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 299.230041][ T9] process_scheduled_works+0xae1/0x17b0 [ 299.235648][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 299.241679][ T9] worker_thread+0x8a0/0xda0 [ 299.246321][ T9] kthread+0x70e/0x8a0 [ 299.250414][ T9] ? __pfx_worker_thread+0x10/0x10 [ 299.255555][ T9] ? __pfx_kthread+0x10/0x10 [ 299.260190][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 299.265426][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.270647][ T9] ? __pfx_kthread+0x10/0x10 [ 299.275265][ T9] ret_from_fork+0x436/0x7d0 [ 299.279908][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 299.285054][ T9] ? __switch_to_asm+0x39/0x70 [ 299.289854][ T9] ? __switch_to_asm+0x33/0x70 [ 299.294645][ T9] ? __pfx_kthread+0x10/0x10 [ 299.299279][ T9] ret_from_fork_asm+0x1a/0x30 [ 299.304089][ T9] [ 299.307484][ T9] Kernel Offset: disabled [ 299.311827][ T9] Rebooting in 86400 seconds..