last executing test programs: 42.625683425s ago: executing program 3 (id=471): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="020000"], 0x10) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000e40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x273fbfedd5ae5a8b, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x1d0, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xbf, 0x6, "9088b3d0ddcc99f3afe244fa76caf91f6ddc407dac9e2d8cd14eaf2e43044d94f19631d032edfcdd50b8e3d5c4f1da576299f029818305f9f35f84c3dbf3c56b7abb9ff4328371e8e2ee03183ca89644a4819573bd2156d441c6d04cf6b84be4dd81c1d6c76c949df9576dea58e630fda3e6b63cc95c36e9e26a41fd733e8173ba6792ff769cd36912e891027313c7f67cb28eb8a9c601b4253f59aad2f912fdaeefb5bac6d8d80d0efaca9b81baa5c4740c69d346badc0ab96348"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xac, 0x6, "440d24395686b7c105fdb5ff1eadd654a0105a295ce8e30d7201527154be1921ab83ef8e7f267d36432d241e463467390f54bca654317fcc4fd952b9f7aa898eb320eab00305081d6a35c1d52ce8ce1f8e8f41c8b6e1df2da6d4c12e443a4bc1240238ec8c90c1141595cda49afaa2b9282e9afef5beb4caa348da922941489c9cb15c7d316b2c6fcd41710a3c2cbdfd5079add3331c6507a314f20ef4e06fb0027d023cfb01559a"}]}, @NFT_MSG_NEWFLOWTABLE={0x144, 0x16, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xec, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x134, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x89, 0x6, "18ca9d5a13c0b96b6fc24be46b4404034e52048065abf2caa4618a59df9b2c2583d89faf72b8dbe939c1fbd78f2499cdfde693f1f410cb3daf18c39afb16a37c406c017ad1cedb8876269cffc86aab6b2b5b34084f566dc22e7148c124ab6ec609b55b14ea79a38c455f655d51c2e925a23c6e12ae29f757f40679e481bb6746d0713935c8"}, @NFTA_TABLE_USERDATA={0x67, 0x6, "16964fb48a1875cfee4c98cee60fadc105dbde8229694c0525e32f67e018827d9a023596e5e4233004bd59a631126d3124cf1834d043132e365877616f5c62678bd307fbc59495ff51d05be7ceff337f8e8217392b83c1b98785c6d594fa8f233271ae"}]}, @NFT_MSG_NEWCHAIN={0x154, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_USERDATA={0xba, 0xc, "6760b36c33816c223dc5cb82005e2f3fa9878bfd518cac2125e430f526c6afaae63e8cc963c3466c2bee3a986e6c540cb27da262f095d585e24d97a02e6d831d5213da4bc91f172c82d0ec0ead73850efa9986c6a049d2fc871072ce7027174437dc7231ef4afd20acc361bf34b46b0fd871c1b175ce572a8c4c46ab4e90dad49c6784495d0ef28a3db2f076014240051e8f3b2526a5f6aafa3f55f56e74cfc62223e6aa8f7278901b36a654715b67b4b5504bcbb0dd"}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc17b}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xacf}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELSET={0x148, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DESC={0x120, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4fe7a85a}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xd9}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff718}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_CONCAT={0xc4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdbf}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xddc7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb92e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffff}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x768}, 0x1, 0x0, 0x0, 0x880}, 0x400c0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r3, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) (async, rerun: 32) r4 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (rerun: 64) 42.291651006s ago: executing program 3 (id=476): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x800) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 41.815415033s ago: executing program 3 (id=480): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$xdp(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef729d308e08ed3e683813c1dcac50bf343bc65be49dbd852caf9a2d0656abc82adf0651c4ac76bf558a3179de6c947fb553be50db8ba2860b2483934d5d39cbcc8bc393eb926dbdb8de385f7d627982072679d9853515e79", 0xea}, {&(0x7f00000005c0)="63311794932b42fa800fe297013ca7feab7756ef7824de8a320ce51a7d2a8f9354bbec77c836bc975b39c022940880a890aff150d32e9641e2ec516273f54e5b972dfa3ba0ce3d330c754f50784dd3d120ebfa42481477f49fb6de051c98a3aff4f0cb9f1ea7841c11fe0f25b2dd3f90d203d9c390a2031dffeb947bd6", 0x7d}], 0x2, 0x0, 0x0, 0x20000080}, 0x440000d0) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000000300)="9552f8964b", 0x5, 0x801, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r2, 0x1) (async) syz_emit_ethernet(0x12, &(0x7f00000002c0)={@broadcast, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x7}}, {@generic={0x86dd}}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000000240)=0x18) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300686173683a6e657404706f72742c6e6574000000"], 0x64}}, 0x0) setsockopt$inet_int(r3, 0x0, 0x18, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=0x0, @ANYRES8=r5], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000733e00000000000000000000000a3800000016080000000000000000050000081c0003800800024000000007000000000000004a5e00014000000100d75207400f00000114000000cb4f7b7c0000000013000000000000160000ea1fa0cb1aff4f6d8b51585e9524dc1c6db7e9d89f0cd14068589e82be539cf2de031b7d93c330f331cf94eeb002a37cc9628aa4214e32a0e9ee4dd40a0174"], 0x60}}, 0x40) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x30, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40814}, 0x41) (async, rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_subtree(r8, &(0x7f0000000780)=ANY=[@ANYBLOB="da26f0d4a05a99872ec25a95f35c71a3943b1c4e1ad10ee2de50d73cb10cee52def86d2cf865c926f428b2849877b1f0fff1e4ca370c924651bf7a5e4093bbcfdec745aeafa3a2ffc46858d3c82edce703b8334547a7f30159de08be464e7145f78a3a466f7e6c4316a109b92edca8fb346fdbec0aeaaded6be1d2548075d5e16c3a1a8c244ca252961fb6f5d0a80140b12141", @ANYRESDEC=r6, @ANYRESHEX=r4], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r9, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x17, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x40}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 28.088626898s ago: executing program 3 (id=480): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$xdp(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef729d308e08ed3e683813c1dcac50bf343bc65be49dbd852caf9a2d0656abc82adf0651c4ac76bf558a3179de6c947fb553be50db8ba2860b2483934d5d39cbcc8bc393eb926dbdb8de385f7d627982072679d9853515e79", 0xea}, {&(0x7f00000005c0)="63311794932b42fa800fe297013ca7feab7756ef7824de8a320ce51a7d2a8f9354bbec77c836bc975b39c022940880a890aff150d32e9641e2ec516273f54e5b972dfa3ba0ce3d330c754f50784dd3d120ebfa42481477f49fb6de051c98a3aff4f0cb9f1ea7841c11fe0f25b2dd3f90d203d9c390a2031dffeb947bd6", 0x7d}], 0x2, 0x0, 0x0, 0x20000080}, 0x440000d0) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000000300)="9552f8964b", 0x5, 0x801, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r2, 0x1) (async) syz_emit_ethernet(0x12, &(0x7f00000002c0)={@broadcast, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x7}}, {@generic={0x86dd}}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000000240)=0x18) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300686173683a6e657404706f72742c6e6574000000"], 0x64}}, 0x0) setsockopt$inet_int(r3, 0x0, 0x18, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=0x0, @ANYRES8=r5], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000733e00000000000000000000000a3800000016080000000000000000050000081c0003800800024000000007000000000000004a5e00014000000100d75207400f00000114000000cb4f7b7c0000000013000000000000160000ea1fa0cb1aff4f6d8b51585e9524dc1c6db7e9d89f0cd14068589e82be539cf2de031b7d93c330f331cf94eeb002a37cc9628aa4214e32a0e9ee4dd40a0174"], 0x60}}, 0x40) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x30, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40814}, 0x41) (async, rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_subtree(r8, &(0x7f0000000780)=ANY=[@ANYBLOB="da26f0d4a05a99872ec25a95f35c71a3943b1c4e1ad10ee2de50d73cb10cee52def86d2cf865c926f428b2849877b1f0fff1e4ca370c924651bf7a5e4093bbcfdec745aeafa3a2ffc46858d3c82edce703b8334547a7f30159de08be464e7145f78a3a466f7e6c4316a109b92edca8fb346fdbec0aeaaded6be1d2548075d5e16c3a1a8c244ca252961fb6f5d0a80140b12141", @ANYRESDEC=r6, @ANYRESHEX=r4], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r9, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x17, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x40}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 15.274000669s ago: executing program 3 (id=480): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$xdp(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef729d308e08ed3e683813c1dcac50bf343bc65be49dbd852caf9a2d0656abc82adf0651c4ac76bf558a3179de6c947fb553be50db8ba2860b2483934d5d39cbcc8bc393eb926dbdb8de385f7d627982072679d9853515e79", 0xea}, {&(0x7f00000005c0)="63311794932b42fa800fe297013ca7feab7756ef7824de8a320ce51a7d2a8f9354bbec77c836bc975b39c022940880a890aff150d32e9641e2ec516273f54e5b972dfa3ba0ce3d330c754f50784dd3d120ebfa42481477f49fb6de051c98a3aff4f0cb9f1ea7841c11fe0f25b2dd3f90d203d9c390a2031dffeb947bd6", 0x7d}], 0x2, 0x0, 0x0, 0x20000080}, 0x440000d0) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000000300)="9552f8964b", 0x5, 0x801, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r2, 0x1) (async) syz_emit_ethernet(0x12, &(0x7f00000002c0)={@broadcast, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x7}}, {@generic={0x86dd}}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000000240)=0x18) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300686173683a6e657404706f72742c6e6574000000"], 0x64}}, 0x0) setsockopt$inet_int(r3, 0x0, 0x18, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=0x0, @ANYRES8=r5], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000733e00000000000000000000000a3800000016080000000000000000050000081c0003800800024000000007000000000000004a5e00014000000100d75207400f00000114000000cb4f7b7c0000000013000000000000160000ea1fa0cb1aff4f6d8b51585e9524dc1c6db7e9d89f0cd14068589e82be539cf2de031b7d93c330f331cf94eeb002a37cc9628aa4214e32a0e9ee4dd40a0174"], 0x60}}, 0x40) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x30, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40814}, 0x41) (async, rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_subtree(r8, &(0x7f0000000780)=ANY=[@ANYBLOB="da26f0d4a05a99872ec25a95f35c71a3943b1c4e1ad10ee2de50d73cb10cee52def86d2cf865c926f428b2849877b1f0fff1e4ca370c924651bf7a5e4093bbcfdec745aeafa3a2ffc46858d3c82edce703b8334547a7f30159de08be464e7145f78a3a466f7e6c4316a109b92edca8fb346fdbec0aeaaded6be1d2548075d5e16c3a1a8c244ca252961fb6f5d0a80140b12141", @ANYRESDEC=r6, @ANYRESHEX=r4], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r9, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x17, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x40}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 5.219000037s ago: executing program 0 (id=810): r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200440d4}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b0400000000000000000200000048000480440001800b0001006578746864720000340002800800034000000000080001400000000005000200000000000800064000000004080004400000000008000540002000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x2, 0x3, 0x4, 0x8, 0xf}, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062617461647600414e5f56"], 0xfd12}}, 0x0) bind$bt_hci(r2, &(0x7f0000000200)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="11ab0248a266df4642427d5a4361d7a75995094a3c64a63e4be65544e2e2c5ad19c3d1cded2ad0c97c155dff5723ce793068e1daf0600e901a0b422d8bbf4dc10c10078f346a3945bf4f5386fd7cb0ec7b88367886e3ec64babacbaa43ca358422b1aa1ec7d4b7de79ac61b4029e48f35b7703b04fda6e6bbbeb7adda75dd7492b28bb67e25ce605fc0a1d68de6e92f0817b71ce32dddb9e88d6", @ANYRES16=r7, @ANYBLOB="010027bd7000fedbdf255100000008000300", @ANYRES32=r6, @ANYBLOB="05008a00010000000a000600ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0xc000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800}}, &(0x7f0000000100)='GPL\x00', 0x5, 0x5a, &(0x7f0000000140)=""/90, 0x41000, 0x4, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xc, 0x60e1, 0xb045}, 0x10, 0x14942, 0xffffffffffffffff, 0x3, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000680)=[{0x3, 0x2, 0xd, 0x3}, {0x1, 0x4, 0x1, 0x3}, {0x1, 0x5, 0x4, 0x1}], 0x10, 0x4}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1e, 0x101, 0xd22, 0xb009, 0x2030, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) (async) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x7, 0x40, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x71, r11}, 0x38) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000000)={r11, &(0x7f0000000540), 0xffff800016adffff}, 0x20) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x50) (async) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffdd10, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x4, 0x12, &(0x7f00000005c0)=@raw=[@map_fd={0x18, 0x6}, @call={0x85, 0x0, 0x0, 0xb6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @map_fd={0x18, 0x2}], &(0x7f0000000680)='GPL\x00', 0x3, 0x9c, &(0x7f00000006c0)=""/156, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000b00)=[r8, r9, 0x1, r10, r11, r12, r13, r14, r15], &(0x7f0000000b40)=[{0x4, 0x1, 0xb, 0x3}, {0x3, 0x1, 0x10, 0x5}], 0x10, 0x5}, 0x94) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) (async) r16 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d00792984"], 0x4c}}, 0x0) 4.968348776s ago: executing program 0 (id=812): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000340)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/249, 0xf9}, {&(0x7f00000004c0)=""/198, 0xc6}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f00000005c0)=""/48, 0x30}], 0x4}, 0x2}, {{&(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000780)=""/164, 0xa4}], 0x1, &(0x7f0000000880)=""/112, 0x70}, 0x7}], 0x2, 0x60000100, &(0x7f0000000980)={0x77359400}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x3, 0x33) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a80000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) getsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) 4.827491782s ago: executing program 0 (id=815): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa000000}}, 0x1c}}, 0x0) 4.687290166s ago: executing program 0 (id=817): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1a, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff85000000b200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f00000003c0)=0xe8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000d485000000000000000000050000800000000000e93fdce83a7637e38a7d5673fc28ca44721e1aef6c83d1693d21dc6faa1f5d97e5747849be9776b2622152cf58c1bf39dc9bb57890086f26cf3b9595ce693eafc8229a0803a7150c6ebafbc0cf6354628b18b6d6a6328285b457a9e00ca654e3379a33e04ad8327256955c534f261ce11cebc33069c18625d3c6cb9fa6dd3466f3eabf6ee8e16c118e56ab6aa61736eb07af1ccf7c3c432e66857d330954c6"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600}, 0x80) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0900000001000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000000000000f1ff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r4}, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r5}, 0x10) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) close(r6) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) (async) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x60004095}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r7, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x90) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x12}]}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x6c, 0x2, 0x0, 0x1, [@nested={0x67, 0x72, 0x0, 0x1, [@generic="2c31499cd49dc8fae1d558d1d0b0703c48c83405556095219be8fa86f5708b001474157ca88c1bfa6becfc43d977316a46c71e500803f325609fa41646164f9798378e3007a8318655128be229b5693faf06f8be1a71442135b658", @typed={0x8, 0x8f, 0x0, 0x0, @uid=r2}]}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r0}]}, 0x98}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 4.391959037s ago: executing program 0 (id=821): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x5e, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x12, "54f1de04dfb7a75170b42ce075702f60"}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x12, "54f1de04dfb7a75170b42ce075702f60"}]}}}}}}}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0xfc, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x77}}}}, [@NL80211_ATTR_TX_RATES={0xd4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x5}, {0x5, 0x9}, {0x0, 0x9}, {0x6, 0x9}, {0x7, 0xa}, {0x6, 0x3}, {0x1, 0x3}, {0x1, 0xa}, {0x2, 0x6}, {0x0, 0x9}, {0x6, 0xa}, {0x5}, {0x0, 0x3}, {0x0, 0x6}, {0x4, 0x5}, {0x0, 0x8}, {0x2}, {0x4, 0x6}, {0x7, 0xa}, {0x7, 0x8}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x3, 0x7}, {0x4, 0x4}, {0x1, 0xa}, {0x2, 0x7}, {0x1, 0xa}, {0x0, 0x6}, {0x2, 0x3}, {0x6, 0x1}, {0x7, 0x4}, {0x5, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x2, 0x6}, {0x4, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x3, 0x6, 0x1, 0xe50, 0x8, 0x4b]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x3, 0x3}, {0x0, 0x1}, {0x3, 0x3}, {0x5}, {0x6, 0x7}, {0x6, 0x7}, {0x4}, {0x0, 0x9}, {0x5, 0x5}, {0x2, 0x1}, {0x4, 0x3}, {0x2, 0x2}, {0x0, 0x7}, {0x5}, {0x6, 0x1}, {0x6, 0x3}, {0x0, 0x7}, {0x4, 0x2}, {0x0, 0x1}, {0x1, 0x4}, {0x5, 0x7}, {0x1, 0x3}, {0x1, 0xa}, {0x5, 0x3}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x5, 0x9}, {0x5, 0x8}, {0x1, 0xa}, {0x2, 0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x7, 0xa}, {0x5, 0x5}, {0x5, 0x5}, {0x0, 0x8}, {0x6, 0xa}, {0x1, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x4, 0x9}, {0x5, 0x6}, {0x0, 0x5}, {0x5, 0x2}, {0x0, 0x6}, {0x1, 0x5}, {0x5, 0x4}, {0x7, 0x6}, {0x2, 0x8}, {}, {0x5, 0x1}, {0x1}, {0x3, 0x6}, {0x5, 0x9}, {0x7, 0x6}, {0x3, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x48, 0x48, 0x6, 0x6, 0x0, 0x48, 0x3e, 0x30, 0x9, 0x4, 0x6, 0x16, 0x5, 0x2, 0xb, 0x48, 0x1, 0x36, 0x1, 0x11, 0x30, 0x2, 0xc, 0x3, 0x6, 0x48, 0xc, 0xb, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}]}]}, 0xfc}}, 0x0) 4.13170638s ago: executing program 0 (id=824): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "345f8cf949a01b515682f44cecac91ba"}, @md5sig={0x1d, 0x12, "d243471da14ff23d079da4ca814b7d7b"}]}}}}}}}}, 0x0) listen(r0, 0x7) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x380, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x43}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}], @beacon=[@NL80211_ATTR_BEACON_HEAD={0x2aa, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3c}, @device_b, @device_a, @initial, {0x9, 0x4}, @value=@ver_80211n={0x0, 0x7f, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x9, @random=0x12b6, 0x104, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0xc, 0x1}]}, @void, @val={0x4, 0x0, {0x5, 0x3, 0x6, 0x1}}, @val={0x6, 0x2, 0x6}, @val={0x5, 0x49, {0x2, 0x8c, 0x0, "3d7ac7da5f1755432953bad103b3865e911d38129e495dbd3f8d718b7694ff2128afaa8ab96b4373ea6eee7bc65bd1d083b0927240a5fea7b3a2febccf5732d373662c8015f1"}}, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x4, 0x1, 0x80}}, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x28}}, @void, [{0xdd, 0xe9, "51deb0bec9c3eb0478bdddb478ae07cc396c490a6c3642ce0d8c72c1dec45b9d1f2e477853f5b1c17f8633eb1f1a5d53cb482531873002fb0ed791fbaeefa5209b1f8203ad43e64e94450c345c971d0cdd3e0987e6008aa2edda77e63d7b6174834ffe20d1ae5ad1bfd9f5d7d1b976641b7930e9b108b135f323cec3356b2107db24544aa4e31a9dc331eb4d043e05c279011c36eb426da71ba68a6605b6dd4e5bdc644efa54b64e7cd7783ada81c0d133cfcd8ab75265b9c963ceb60feb079ec00ea2055fe87597411a7597a135df3288a9f71e618ea3dce51b74f9b2a8f4972072ca2955b8ec7e1a"}, {0xdd, 0xbc, "fa6056339c6a17d52aa8d0570944d14e470e2d9d75624dbe8bf5ce6a18c00b8a5887247d670617e475d02b0441a6ef257a2d4ac8e87419b5277dc9fe1625b310e93cc5888e0526f116de805e72dc9c55b01b504460a41d4a7f63731d5609e1450721cbe9de616c971bae273021578c3cffa6fa0d25f4886e9510eb4355be4530a968063313843e1c997419bf9b54a8dc70e79d8919bfa1a6fcfd876db4831f1e87d56a6b0e18841fb040ee17dd1b2028c8cc1864d9cf444689a51371"}, {0xdd, 0x67, "1b833ec97c98b89aa4dc6cdf2de27cf9a1ea840c793c7743b8f8a5cd2c159a335266a15d4744bfb556a75da445ee73ede9feceb5f524de938fa61dbbf14b14376d84b70d8685e4f321413b6e0af9f428b09e74b7b0c58b339c1d71ada40b7edf2dd2c2d06b4532"}]}}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0xfffffffffffffffb}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x40048c0) 3.48202418s ago: executing program 4 (id=830): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x3}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r2, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f27a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b7b8776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000580)="55bbeefbb9a13c80e6527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd230aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57712a9a4a6f8e948f5bbcbb8308ae67d57e70daa13148536e5cfe1eec171afbbf0a99f64a3b065896289be98f34a3ac141f9996f71a6c32cd9e930f86b9aa8d31e566b3e6f389abdb6943940ad3a772bf4639838127bd4775b1", 0x92}, {&(0x7f00000001c0)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbe123cb43ed522a35874f4503d56d44c71c7ab62adc0", 0x69}, {&(0x7f0000001880)="b732b06fd220a6dc6eed5ff60b0ebbf5380f98d4a1811f9a17f9b79521cb5554695fb065f2d1ed1bef7971962733ea71dd2bceb1cd2fe48164a445f3bb9289533f5ed32a8dc3a17c7f13e93222784f53df2d7e9f7bf3d47fa6440da1de8ac26628a8e1da8150f1a1d8f56351c6c37d7ad2279ad7d1043400e2281c863c243979070cd3920b5bee", 0x87}, {&(0x7f0000001940)="ac6aed94fbb8c7fecccf1fbe0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc0a3448434dca51f5bc1972720dc071c5c5e2358a62bb3d9ccb581431764476f92bc0dd581a715f7ff8cef23b35dceb96809ab4bfbc85cd9eed4820e2a821913e94ed62ce3b44103e31a82b7c14ea5dae6b42906b14cc21e24fcb7b255b5fd8b3d9eda621defc3f398cc545fb03d6549353921bb4a52b3230008f967ddc1ad8635d58667b82a58ec030a57d199f14b172133", 0xd2}, {&(0x7f0000002300)="0b41dae71fdbfbd927fcefd552617a67c06039347098f690358459d82800ee224faa7dcc81cff086255c05d8d5ee175f635bdb8853bf08b2605ada1c1cf8812456748282d57d86948df219e8422c2853df192f5fceb38fd57788af3fb5284e53393be844bac927edfb43d17da758dc2b9ad2fa87f8521a0f1889b362b32cef609d20392a2e680ae667158a9d831c6acd5854e2420a16ea245a7c26de40c041919f0de146884889aedac056c285012b270a78448caab41053c2017d15dafa284871f716173b8047f8b1ffdc5a8a", 0xcd}], 0x7}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000940)="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", 0x104}], 0x1}}], 0x3, 0x2000c044) sendto$inet(r2, &(0x7f00000004c0)="00031eed7121", 0x6, 0x16000000, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000d30fe7af00240012800b0001006d616373656300001400028005000c000b"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.434579131s ago: executing program 2 (id=831): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="abfebf", @ANYRES16=r2, @ANYBLOB="010027bd7800fbdbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000002f000b0005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) (async) r3 = accept$ax25(r0, &(0x7f0000000040)={{0x3, @null}, [@netrom, @netrom, @null, @remote, @remote, @null, @netrom, @bcast]}, &(0x7f00000000c0)=0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000012, 0x30, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001500000000000000000000000800120002000200000000000000000006000000000000000000000000000000ac1e0001000000000000000000000000ac14140000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000010006"], 0xa8}}, 0x0) (async) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x452b}, 0x0) (async) unshare(0x26020480) (async) connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x64, 0x1407, 0x10, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x64}}, 0xe771a03a0252bfc4) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x15, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r10, 0x800448f0, &(0x7f0000000400)={0x0, 0x2, "64da36", 0xb, 0x8b}) sendmmsg(r8, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) (async) setsockopt$rose(r6, 0x104, 0x4, &(0x7f0000000000)=0xffff7ffd, 0x4) 3.402284424s ago: executing program 3 (id=480): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$xdp(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef729d308e08ed3e683813c1dcac50bf343bc65be49dbd852caf9a2d0656abc82adf0651c4ac76bf558a3179de6c947fb553be50db8ba2860b2483934d5d39cbcc8bc393eb926dbdb8de385f7d627982072679d9853515e79", 0xea}, {&(0x7f00000005c0)="63311794932b42fa800fe297013ca7feab7756ef7824de8a320ce51a7d2a8f9354bbec77c836bc975b39c022940880a890aff150d32e9641e2ec516273f54e5b972dfa3ba0ce3d330c754f50784dd3d120ebfa42481477f49fb6de051c98a3aff4f0cb9f1ea7841c11fe0f25b2dd3f90d203d9c390a2031dffeb947bd6", 0x7d}], 0x2, 0x0, 0x0, 0x20000080}, 0x440000d0) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000000300)="9552f8964b", 0x5, 0x801, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r2, 0x1) (async) syz_emit_ethernet(0x12, &(0x7f00000002c0)={@broadcast, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x7}}, {@generic={0x86dd}}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000000240)=0x18) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300686173683a6e657404706f72742c6e6574000000"], 0x64}}, 0x0) setsockopt$inet_int(r3, 0x0, 0x18, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=0x0, @ANYRES8=r5], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000733e00000000000000000000000a3800000016080000000000000000050000081c0003800800024000000007000000000000004a5e00014000000100d75207400f00000114000000cb4f7b7c0000000013000000000000160000ea1fa0cb1aff4f6d8b51585e9524dc1c6db7e9d89f0cd14068589e82be539cf2de031b7d93c330f331cf94eeb002a37cc9628aa4214e32a0e9ee4dd40a0174"], 0x60}}, 0x40) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x30, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40814}, 0x41) (async, rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_subtree(r8, &(0x7f0000000780)=ANY=[@ANYBLOB="da26f0d4a05a99872ec25a95f35c71a3943b1c4e1ad10ee2de50d73cb10cee52def86d2cf865c926f428b2849877b1f0fff1e4ca370c924651bf7a5e4093bbcfdec745aeafa3a2ffc46858d3c82edce703b8334547a7f30159de08be464e7145f78a3a466f7e6c4316a109b92edca8fb346fdbec0aeaaded6be1d2548075d5e16c3a1a8c244ca252961fb6f5d0a80140b12141", @ANYRESDEC=r6, @ANYRESHEX=r4], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r9, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x17, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x40}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 2.542907818s ago: executing program 2 (id=834): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x16}}, 0x1c) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x91ee, 0x9, 0x10000000, 0x1, 0x7}, 0x9, 0x8}, [{0xd6c, 0x9, 0x8, 0xff, 0x10001, 0x9}, {0x7f, 0xffff, 0x6, 0x7fffffff, 0x1, 0x7}, {0x6, 0xb37b, 0x6, 0xb38, 0x0, 0xd0cb}, {0x4, 0x3, 0x2, 0xa318, 0x80000000, 0x1}, {0x9, 0xfffffff9, 0x2, 0x4, 0x6, 0x4}, {0x8000, 0x3, 0xe, 0x4, 0xcee8000, 0x1}, {0x9, 0x8, 0xfffffffa, 0x6, 0xa0fd, 0x8}, {0xffffffff, 0xe648, 0x7c0c3ffe, 0x8, 0x0, 0x5}, {0x3, 0x3, 0x9, 0xa}, {0x9, 0x6, 0xb6, 0x7fff, 0x5, 0x7}, {0x304, 0x66, 0x3, 0x101, 0x3, 0x9}, {0xff, 0x1, 0xe, 0x800, 0x3, 0x56}, {0xca, 0x4, 0x9, 0xfffffff8, 0x7, 0x7921bcf1}, {0x1, 0xff, 0x5, 0x80000000, 0xaae6, 0x9}, {0x4, 0x3, 0xa9, 0x8, 0x9, 0x4}, {0x5, 0x1000, 0x200, 0x2, 0x8, 0x6}, {0x3d648283, 0x2, 0x5, 0x9, 0x10000, 0x6}, {0x3, 0xa06, 0x1, 0x1, 0x9, 0x260ba674}, {0x6, 0xc5, 0x8d3, 0x9, 0x3, 0xffffffbc}, {0x3, 0x8, 0x3, 0x5, 0x0, 0xc80}, {0x3, 0xffffffff, 0xffff, 0x2, 0x9}, {0xfffffffa, 0x6, 0x77f, 0x160c, 0x3}, {0x1ff, 0x8, 0x0, 0x6, 0xb, 0x400}, {0x3ff, 0x9, 0xffff8001, 0x100, 0x3, 0x47}, {0x529, 0x4, 0x7, 0xffff, 0xc0a, 0xbad}, {0x8, 0x7, 0x884, 0x100, 0x9}, {0x8, 0x6, 0x6, 0xc, 0x3}, {0x4, 0x40, 0xcd6c, 0x721, 0x8000, 0x6}, {0x5, 0x30a3, 0xa, 0x200, 0xfff, 0x9}, {0x3, 0x1, 0x5, 0x408, 0x2, 0x81}, {0x81, 0x0, 0x0, 0x49f11005, 0x9, 0x7fffffff}, {0x9, 0x0, 0x5c, 0x3bad, 0x8, 0x480}, {0xe, 0x58000000, 0x9, 0x3, 0x1ff, 0xaa2}, {0x800, 0xd1, 0x0, 0x3e, 0x0, 0x5}, {0x8, 0x0, 0x200, 0xfffffc00, 0x100, 0x10001}, {0x6, 0x7, 0x0, 0x101, 0x6, 0x81}, {0x8, 0x2, 0x200, 0x3, 0x4, 0x101}, {0xad, 0xa, 0x401, 0x0, 0x9, 0xff000000}, {0x8, 0x5, 0xd, 0x24, 0xc, 0x1}, {0xfffffff8, 0x9, 0x1000, 0xc, 0xea, 0x4}, {0x3, 0x0, 0x8, 0x1, 0x1, 0xffffff32}, {0x6, 0x5, 0xd7c9, 0x0, 0x5, 0x2}, {0xffff, 0x1, 0x5, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x0, 0x401, 0x6, 0x1}, {0x3, 0x2, 0x4, 0x6, 0xfffffff8, 0x5}, {0x6, 0x0, 0x3, 0x5, 0x0, 0xffff8000}, {0x1, 0xfffffffe, 0x0, 0x9, 0x0, 0x4}, {0x2, 0x6, 0x2, 0x7, 0x9}, {0x0, 0xfffffffd, 0x756183d, 0xfffff801, 0x5, 0x8}, {0x7, 0xa, 0xfffffffc, 0x80000001, 0x407b, 0x2}, {0x7, 0x9, 0xee, 0x800, 0x1000}, {0x10, 0x5, 0x57a2a808, 0x80000000, 0x7fff, 0x5}, {0x729, 0x25, 0x6, 0x6, 0x8, 0x4}, {0x2, 0x406, 0xc209, 0x8, 0x0, 0xfffffffc}, {0x1, 0x7, 0x8, 0xfffffffb, 0x80000000, 0x4}, {0x1, 0x5, 0x8, 0x8000, 0x1, 0x7f}, {0x8001, 0xf42, 0x1, 0x3, 0x5, 0x430}, {0x2, 0xfffffff4, 0x5, 0xf, 0xc8, 0x7}, {0x6, 0x7, 0x9, 0x8, 0x5, 0x5}, {0x5, 0x8000000, 0x7, 0x5, 0x401, 0x9}, {0x1, 0x6, 0x1ff, 0xa8de, 0x0, 0x807b}, {0x0, 0x80000000, 0x7fff, 0x5, 0x2, 0x7}, {0xe, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0x1ff}, {0x81, 0xaa, 0x1e, 0x9, 0x14fc, 0x8}, {0x9, 0xffffffff, 0x40, 0x6, 0x13b, 0xeacd}, {0x100020, 0xff, 0x6, 0x81, 0x0, 0x6}, {0x2, 0xe, 0xb, 0x0, 0x6, 0x2}, {0x8, 0x3, 0x5, 0x4, 0x4, 0x2}, {0x84, 0x4003ff, 0x3d0c, 0x1, 0x8, 0x2}, {0x4, 0x4, 0xb85c, 0x1, 0x7, 0x6}, {0x3, 0xc6, 0x0, 0x1, 0x2, 0x3}, {0x7, 0x2, 0x8000, 0x2, 0x7fffffff, 0x79}, {0x6, 0x80000000, 0xfffffffe, 0x7, 0x3, 0x8}, {0xae, 0x3, 0x600, 0x9, 0xff, 0x3}, {0x1, 0xed5, 0x6de6, 0x10, 0x380000, 0x789}, {0x4, 0x7074, 0x32b, 0x3, 0xf}, {0x1ff, 0x7, 0x1, 0x96, 0x1, 0xc}, {0x9, 0x3, 0x0, 0xfff, 0x1ff, 0x8}, {0x1, 0x7d, 0x8, 0x7, 0x2, 0x3}, {0xfffff001, 0x9, 0x65d, 0x3c10, 0x7, 0x53}, {0x7, 0x0, 0x7, 0x101, 0x9, 0x1}, {0x7, 0x9, 0xd, 0x6, 0xfffffff7, 0x827}, {0x113, 0xfffffffe, 0x2, 0x400, 0x28, 0x81}, {0xfff, 0x6, 0x7, 0x40, 0x6, 0x10}, {0xc, 0x9, 0x8001, 0x0, 0x9, 0x6}, {0x5, 0x11b9, 0x401, 0x4, 0x2, 0x6}, {0x9, 0x100, 0x400, 0x9497, 0x101, 0x84b7}, {0xb4, 0xb85, 0x7, 0x3, 0x51, 0x5}, {0x2, 0x4, 0x5, 0xf, 0xf, 0x1283}, {0xfffffff8, 0x1c0000, 0x2, 0x10001, 0x1, 0x6}, {0x61, 0x80, 0xffffffff, 0x10000, 0x5, 0x8}, {0x8, 0x6, 0xc53, 0x80000000, 0x7, 0x5}, {0x0, 0x6, 0x5, 0x2, 0xdc, 0x6}, {0x0, 0xfffffffc, 0x101, 0x6cb685f2, 0x7, 0x1}, {0x0, 0xc3, 0x4, 0x5, 0x0, 0x9}, {0x8, 0xf7b5, 0x5, 0x5, 0x9, 0x7}, {0x1, 0x67f, 0x5689f935, 0x8, 0x6db, 0xff}, {0x1, 0x400, 0x3, 0x1e1, 0xa, 0x80000000}, {0xea, 0x5, 0x8, 0x5, 0x7fff, 0x1000}, {0x6, 0x5, 0x7, 0x3, 0x6, 0x80000000}, {0x9, 0x6, 0x7, 0x1, 0x9, 0x100}, {0x7202, 0x4, 0x5024, 0xf9, 0x6, 0x40}, {0x5, 0x10, 0x4, 0x5, 0xd, 0x8}, {0x1537, 0x101, 0x6, 0x1, 0x3, 0x6b}, {0x69, 0x400, 0x3, 0x81, 0xc6, 0x7fff}, {0x10001, 0x1, 0x3, 0x7fffffff, 0x7, 0x10001}, {0xcdc, 0x1, 0x7, 0x0, 0x8}, {0x1, 0x168dccf, 0x3, 0x3, 0x7fff, 0x6}, {0x3, 0x4, 0x7fff, 0x7, 0xaf68, 0x403}, {0x9, 0x0, 0x7, 0x6, 0x6, 0x80000001}, {0x5, 0x200, 0x800, 0xd00000, 0x3, 0x8}, {0x8001, 0x5d, 0xffffffff, 0x42e, 0x8, 0x55}, {0x1970, 0x89, 0x6d, 0x460ebb44, 0x2, 0x2}, {0x951, 0x9, 0x3, 0x8, 0x1, 0x2}, {0x3, 0x8, 0x627b, 0x5, 0x6, 0x5}, {0x6, 0x3, 0x9fbc, 0x4, 0x1, 0x2}, {0x401, 0x6, 0x32d84255, 0xfa, 0x27f, 0x8000}, {0x0, 0x6, 0x3, 0xc, 0x8000, 0x40}, {0x5, 0x4, 0x1, 0x3, 0x0, 0x5}, {0x7f, 0x4, 0x7f, 0x10001, 0xff, 0x8}, {0x7, 0x96a3, 0x2, 0xd7, 0x6, 0x200}, {0x1, 0x5, 0x5, 0x37a3, 0x7, 0x8}, {0x81, 0x4, 0xd, 0xffffffff, 0x200, 0x4}, {0x4, 0x3ff, 0x7, 0x4, 0x4, 0x4}, {0x1, 0xffffffa4, 0x9, 0x2, 0x3}, {0xd, 0x0, 0x3ff, 0x9, 0x8, 0x48}, {0x2, 0x10001, 0x9, 0x2, 0x8, 0x9}, {0xf, 0x1, 0x8, 0x101, 0xfffffffd, 0xc88}], [{}, {0x5}, {0x0, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x8cd778652b20be70, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x6}, {0x4}, {0x4, 0x1}, {0x4}, {0xa4f33433e7b7e23d, 0x1}, {0x4}, {0x0, 0x1}, {0x6}, {0x2, 0xa5b0c5c50171756a}, {0x5}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006911b8000000000005000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r4, 0x58}, 0x10) 2.540650574s ago: executing program 4 (id=835): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x21}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404}]}}]}, 0x45c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x20}}, 0x880) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x21}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404}]}}]}, 0x45c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x20}}, 0x880) (async) 2.38590617s ago: executing program 1 (id=836): socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x1000000000000000, 0x4000}, 0x0) 2.14732536s ago: executing program 1 (id=837): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000004e00010000006ed06dbb2f8b58e9"], 0x14}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x590, 0xd0, 0x1a0, 0x300, 0x3d0, 0x0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'veth1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x7c}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vxcan1\x00', 'ip6tnl0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00', @remote}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private, @ipv6=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000640)=@abs, &(0x7f00000006c0)=0x6e) connect$unix(r3, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xde52d7a9982eb8e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r1) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r4, 0x1) connect$vsock_stream(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a000020"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r5 = socket$inet6(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000040), &(0x7f00000000c0)=0x8) sendto$inet6(r5, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.551449284s ago: executing program 1 (id=838): r0 = socket(0x10, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x4000007, 0x4) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0xfd, 0x0, @remote}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000020000000000800040001000000", 0x24) 1.535201006s ago: executing program 4 (id=839): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.491016033s ago: executing program 2 (id=840): r0 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000110000000000006d9cd926a138b100"/32], &(0x7f0000000140)='GPL\x00', 0x8, 0x8c, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$can_bcm(r0, &(0x7f0000000400)={0x1d, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009050000000000000000021f0000", @ANYRES32=r3, @ANYBLOB="08000100e000000208000200ffffffff08000400ac1414aa080004009d1414aa08000a000100200008000200"], 0x48}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000000800006b21000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="0100000048000000feffffff00000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="020000400100000003178f8f3359d424cedbad64cf09007a"], 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x4) close(r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1ac}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000500), r5) sendmsg$NLBL_CALIPSO_C_LISTALL(r5, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r6, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0xe001) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000feffffff1c0000000a0004007770616e3000000008000100"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x20000000) r9 = accept4(r0, &(0x7f0000000040)=@qipcrtr, &(0x7f0000000280)=0xffffffffffffff9a, 0xc0000) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000002c0), 0x4) sendmsg$NL80211_CMD_DISASSOCIATE(r9, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x13c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="5c983d8fa87e"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x2c, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xf9, 0x20}}, @gcr_ga={0xbd, 0x6, @broadcast}, @challenge={0x10, 0x1, 0xb4}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x1, 0x0, 0x1, 0x6, 0x40}}, @supported_rates={0x1, 0x3, [{0xb}, {0xb, 0x1}, {0x704e029142bb0411}]}, @chsw_timing={0x68, 0x4, {0x8, 0xfff8}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_IE={0xbd, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_b}}, @ibss={0x6, 0x2, 0x200}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0x34, {0xcc, 0x2, 0x5, "e0039e3176c2f8858918dbcb6c2f831dda1bdf03d590bda6522ec3fd910a903cd434ff18ec8e270b4570aca81789f1890b"}}, @mesh_chsw={0x76, 0x6, {0x8, 0x9, 0x1a, 0x5}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x80, 0x3, 0x7}}, @mic={0x8c, 0x18, {0xaeb, "1c5ccd68361b", @long="0d4b49205747ab6ee80f6d3fb9a05d3a"}}, @ht={0x2d, 0x1a, {0x1000, 0x0, 0x7, 0x0, {0x2, 0x9, 0x0, 0x3d0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0xfedb, 0x10}}, @ht={0x2d, 0x1a, {0x2, 0x0, 0x6, 0x0, {0x3, 0x54, 0x0, 0x9}, 0x8, 0xde7, 0x7}}, @supported_rates={0x1, 0x1, [{0x3e, 0x1}]}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) 1.269611272s ago: executing program 4 (id=841): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00', 0x7, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r1, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000140)=@qipcrtr, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)=""/50, 0x32}], 0x1, &(0x7f0000000340)=""/155, 0x9b}, 0x20) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 1.237689283s ago: executing program 1 (id=842): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000001380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f000000850000000500000095"], &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) 1.163232988s ago: executing program 2 (id=843): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'wg1\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x90) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c00000010000100"/20, @ANYRES32=r3, @ANYBLOB="00410000000000000c002b8008000100", @ANYRES32=r6], 0x2c}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x25dfdbfb, {{@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x4, 0x4e22, 0x2, 0xa, 0x20, 0x0, 0x32}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0x0, 0x0, 0x20000000000003}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xb8}}, 0x4000000) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) recvmmsg(r9, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r9, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, &(0x7f0000000180)) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x10}]}, 0x18}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, r10, 0x4, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}}, 0x10) 1.048593239s ago: executing program 1 (id=844): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000005000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fcffffff00"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000010d10a53732ffee372620d000000000000000002000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffffffffef2, &(0x7f0000000280)=ANY=[@ANYRES8=r1, @ANYRESDEC=r3], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000080)=0xfffffffe, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x1100000000f336, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8010) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x42, 0x9, 0x70bd27, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44804}, 0x84) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000050000000090a010400000000000000000700000008000a40000000000900020000000031000000000900010073797a30000000000800054000000021"], 0x98}, 0x1, 0x0, 0x0, 0x24004855}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x20004804) 216.594584ms ago: executing program 4 (id=845): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="b260cf0abd64424d00000b000000"], 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x24008801) 147.579174ms ago: executing program 2 (id=846): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x38, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r4, {0xf}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 37.849856ms ago: executing program 1 (id=847): socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0xfffffe5a, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x80000000}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x1, 0x9, 0x10000000}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x74a0e5b6c0d3be57}]}}]}, 0x64}}, 0x44080) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)={0x44, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r7], 0x50}}, 0x0) 34.66297ms ago: executing program 4 (id=848): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0xc, 0x8, 0x3}, 0x48) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000200), &(0x7f00000002c0)=@udp6=r5}, 0x20) recvmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12123, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) socket(0x200000100000011, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa9}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000200)=ANY=[], 0x28) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="02002bbd7000fbdbdf250600000008001900640101020c001600040000000000000006001a004e20000014002000fc00"/62], 0x44}, 0x1, 0x0, 0x0, 0x40011}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r7 = socket$netlink(0x10, 0x3, 0x15) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xfffffffffffffc6a, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680), 0x0, 0x3, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x33, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f00000004c0)={'ip_vti0\x00', r8, 0x80, 0x1, 0x94e, 0x3, {{0x27, 0x4, 0x1, 0x1d, 0x9c, 0x64, 0x0, 0x2, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x2f, 0x2, [{0x6, 0x11, "d7e90216d3b6493144cc2fdb4703d4"}, {0x0, 0xc, "75a4b2e855ec6fe29f02"}, {0x6, 0x9, "5c89a4f11eaf21"}, {0x6, 0x3, '<'}]}, @cipso={0x86, 0x24, 0x0, [{0x7, 0xf, "53d20550c26b171e6ddd8ccab8"}, {0x1, 0xf, "1e65ad0c3ef149716631b171c7"}]}, @timestamp={0x44, 0xc, 0xda, 0x0, 0x6, [0x8, 0x5]}, @ra={0x94, 0x4}, @generic={0x83, 0x12, "1feb35c1b50be3bbf6eb1c74226ba0cc"}, @generic={0xe0acf5d8462ba2e, 0x11, "9a5df0de5d7d457e37fbafdb6b6f73"}, @end]}}}}}) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x200, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r9}]}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x1}]}, 0x44}}, 0x24000011) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 2 (id=849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xe0000000}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.104' (ED25519) to the list of known hosts. [ 82.885148][ T5819] cgroup: Unknown subsys name 'net' [ 82.993975][ T5819] cgroup: Unknown subsys name 'cpuset' [ 83.002873][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.659965][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.268013][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.278575][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.288183][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.296742][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.318673][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.326508][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.341336][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.352272][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.360379][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.367494][ T5152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.375980][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.384564][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.406878][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.414472][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.422905][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.433665][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.433974][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.448762][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.456424][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.464162][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.523136][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.533104][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.540592][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.548694][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.560572][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.085712][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 89.174333][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 89.292150][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 89.329654][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 89.384490][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 89.526843][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.535587][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.543140][ T5833] bridge_slave_0: entered allmulticast mode [ 89.550512][ T5833] bridge_slave_0: entered promiscuous mode [ 89.569792][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.577219][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.584604][ T5837] bridge_slave_0: entered allmulticast mode [ 89.592260][ T5837] bridge_slave_0: entered promiscuous mode [ 89.611901][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.619076][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.626514][ T5833] bridge_slave_1: entered allmulticast mode [ 89.633899][ T5833] bridge_slave_1: entered promiscuous mode [ 89.667010][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.674377][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.681794][ T5837] bridge_slave_1: entered allmulticast mode [ 89.689047][ T5837] bridge_slave_1: entered promiscuous mode [ 89.772382][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.798036][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.812618][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.848660][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.856416][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.864072][ T5845] bridge_slave_0: entered allmulticast mode [ 89.871999][ T5845] bridge_slave_0: entered promiscuous mode [ 89.882135][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.944776][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.952739][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.959881][ T5849] bridge_slave_0: entered allmulticast mode [ 89.968188][ T5849] bridge_slave_0: entered promiscuous mode [ 89.977872][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.985228][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.992954][ T5849] bridge_slave_1: entered allmulticast mode [ 90.000074][ T5849] bridge_slave_1: entered promiscuous mode [ 90.006785][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.013955][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.021320][ T5845] bridge_slave_1: entered allmulticast mode [ 90.028509][ T5845] bridge_slave_1: entered promiscuous mode [ 90.049686][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.056838][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.064151][ T5842] bridge_slave_0: entered allmulticast mode [ 90.072268][ T5842] bridge_slave_0: entered promiscuous mode [ 90.081909][ T5833] team0: Port device team_slave_0 added [ 90.088044][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.095692][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.103097][ T5842] bridge_slave_1: entered allmulticast mode [ 90.110158][ T5842] bridge_slave_1: entered promiscuous mode [ 90.169596][ T5837] team0: Port device team_slave_0 added [ 90.179325][ T5833] team0: Port device team_slave_1 added [ 90.212789][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.224786][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.237576][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.261656][ T5837] team0: Port device team_slave_1 added [ 90.270265][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.293656][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.300749][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.330392][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.344802][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.380794][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.390687][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.397667][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.424248][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.471163][ T5840] Bluetooth: hci0: command tx timeout [ 90.476978][ T5840] Bluetooth: hci1: command tx timeout [ 90.519175][ T5845] team0: Port device team_slave_0 added [ 90.539729][ T5849] team0: Port device team_slave_0 added [ 90.546612][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.553724][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.561177][ T5835] Bluetooth: hci2: command tx timeout [ 90.580198][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.585165][ T5840] Bluetooth: hci3: command tx timeout [ 90.618382][ T5845] team0: Port device team_slave_1 added [ 90.626764][ T5842] team0: Port device team_slave_0 added [ 90.634530][ T5849] team0: Port device team_slave_1 added [ 90.640860][ T5835] Bluetooth: hci4: command tx timeout [ 90.646917][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.654033][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.680004][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.709533][ T5833] hsr_slave_0: entered promiscuous mode [ 90.716080][ T5833] hsr_slave_1: entered promiscuous mode [ 90.736709][ T5842] team0: Port device team_slave_1 added [ 90.786077][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.793461][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.819846][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.876390][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.883416][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.909877][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.928203][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.935208][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.961829][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.973485][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.980840][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.006953][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.020215][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.027343][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.053493][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.077579][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.084806][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.111668][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.187093][ T5837] hsr_slave_0: entered promiscuous mode [ 91.194125][ T5837] hsr_slave_1: entered promiscuous mode [ 91.200241][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.208113][ T5837] Cannot create hsr debugfs directory [ 91.291358][ T5842] hsr_slave_0: entered promiscuous mode [ 91.297718][ T5842] hsr_slave_1: entered promiscuous mode [ 91.303937][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.311638][ T5842] Cannot create hsr debugfs directory [ 91.323937][ T5849] hsr_slave_0: entered promiscuous mode [ 91.330491][ T5849] hsr_slave_1: entered promiscuous mode [ 91.336810][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.344555][ T5849] Cannot create hsr debugfs directory [ 91.458761][ T5845] hsr_slave_0: entered promiscuous mode [ 91.465591][ T5845] hsr_slave_1: entered promiscuous mode [ 91.473314][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.480993][ T5845] Cannot create hsr debugfs directory [ 91.753266][ T9] cfg80211: failed to load regulatory.db [ 91.856042][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.868642][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.899655][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.911350][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.030610][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.049025][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.065092][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.090667][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.147534][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.159223][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.181171][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.192659][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.295574][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.307132][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.320267][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.358010][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.483027][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.495711][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.513881][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.534506][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.544731][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.552128][ T5840] Bluetooth: hci0: command tx timeout [ 92.557685][ T5835] Bluetooth: hci1: command tx timeout [ 92.566542][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.603807][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.630936][ T5835] Bluetooth: hci2: command tx timeout [ 92.631670][ T5840] Bluetooth: hci3: command tx timeout [ 92.642732][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.653310][ T2974] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.660652][ T2974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.673022][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.680165][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.693323][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.710857][ T5840] Bluetooth: hci4: command tx timeout [ 92.743587][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.750785][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.784475][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.791683][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.820284][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.870943][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.878135][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.919534][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.963235][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.970421][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.069180][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.117240][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.124490][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.168674][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.175912][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.274591][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.396964][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.459646][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.466882][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.486537][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.494182][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.534218][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.653270][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.693544][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.785044][ T5833] veth0_vlan: entered promiscuous mode [ 93.809442][ T5833] veth1_vlan: entered promiscuous mode [ 93.897117][ T5842] veth0_vlan: entered promiscuous mode [ 93.915129][ T5837] veth0_vlan: entered promiscuous mode [ 93.932132][ T5837] veth1_vlan: entered promiscuous mode [ 93.967871][ T5842] veth1_vlan: entered promiscuous mode [ 93.988851][ T5833] veth0_macvtap: entered promiscuous mode [ 94.007951][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.043542][ T5833] veth1_macvtap: entered promiscuous mode [ 94.133710][ T5842] veth0_macvtap: entered promiscuous mode [ 94.145131][ T5837] veth0_macvtap: entered promiscuous mode [ 94.156979][ T5837] veth1_macvtap: entered promiscuous mode [ 94.168261][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.182474][ T5842] veth1_macvtap: entered promiscuous mode [ 94.212805][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.225234][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.266630][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.279757][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.297383][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.311131][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.319885][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.331284][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.359580][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.382659][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.429830][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.439640][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.453144][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.462424][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.518185][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.529352][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.538883][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.547937][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.588400][ T5849] veth0_vlan: entered promiscuous mode [ 94.629986][ T5849] veth1_vlan: entered promiscuous mode [ 94.637389][ T5840] Bluetooth: hci1: command tx timeout [ 94.638196][ T5835] Bluetooth: hci0: command tx timeout [ 94.662858][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.677799][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.710760][ T5835] Bluetooth: hci3: command tx timeout [ 94.710887][ T5840] Bluetooth: hci2: command tx timeout [ 94.761089][ T5845] veth0_vlan: entered promiscuous mode [ 94.776652][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.791249][ T5840] Bluetooth: hci4: command tx timeout [ 94.797739][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.816100][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.837976][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.860254][ T5849] veth0_macvtap: entered promiscuous mode [ 94.894554][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.902959][ T5845] veth1_vlan: entered promiscuous mode [ 94.928288][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.943673][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.961955][ T5849] veth1_macvtap: entered promiscuous mode [ 95.064862][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.082788][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.100086][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.165638][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.213711][ T5849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.214407][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.224648][ T5849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.239725][ T5849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.244932][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.255079][ T5849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.273402][ T5845] veth0_macvtap: entered promiscuous mode [ 95.285293][ T5845] veth1_macvtap: entered promiscuous mode [ 95.423207][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.438868][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.450964][ T5954] netlink: 'syz.3.7': attribute type 2 has an invalid length. [ 95.505565][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.542170][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.571908][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.585895][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.708642][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.744421][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.871161][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.886864][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.984047][ T5965] Zero length message leads to an empty skb [ 96.005210][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.018318][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.106916][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.133601][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.232331][ T5974] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.481310][ T5980] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 96.496483][ T5983] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.539134][ T5983] x_tables: unsorted underflow at hook 3 [ 96.578101][ T5983] netlink: 'syz.3.17': attribute type 10 has an invalid length. [ 96.696222][ T5983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.711539][ T5840] Bluetooth: hci1: command tx timeout [ 96.715786][ T5835] Bluetooth: hci0: command tx timeout [ 96.734548][ T5983] team0: Port device bond0 added [ 96.743400][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20'. [ 96.794107][ T5835] Bluetooth: hci3: command tx timeout [ 96.804558][ T5835] Bluetooth: hci2: command tx timeout [ 96.869927][ T5983] syz.3.17 (5983) used greatest stack depth: 19400 bytes left [ 96.880648][ T5835] Bluetooth: hci4: command tx timeout [ 96.913432][ T5997] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 96.971458][ T5997] netlink: 116 bytes leftover after parsing attributes in process `syz.4.21'. [ 97.228078][ T6012] No such timeout policy "syz0" [ 97.231034][ T6008] team0: Device vxcan3 is of different type [ 97.860584][ T6034] veth0: entered promiscuous mode [ 97.918155][ T6032] netlink: 'syz.0.33': attribute type 1 has an invalid length. [ 97.947562][ T6032] netlink: 'syz.0.33': attribute type 4 has an invalid length. [ 97.975813][ T6032] netlink: 192 bytes leftover after parsing attributes in process `syz.0.33'. [ 98.016485][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.34'. [ 98.027988][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'. [ 98.214504][ T6052] netlink: 16 bytes leftover after parsing attributes in process `syz.3.40'. [ 98.239249][ T6052] netlink: 'syz.3.40': attribute type 4 has an invalid length. [ 98.268179][ T6052] netlink: 404 bytes leftover after parsing attributes in process `syz.3.40'. [ 98.679561][ T92] IPVS: starting estimator thread 0... [ 98.706032][ T6073] netlink: 92 bytes leftover after parsing attributes in process `syz.1.45'. [ 98.730427][ T6064] xt_CT: No such helper "snmp" [ 98.820479][ T6072] IPVS: using max 29 ests per chain, 69600 per kthread [ 98.978970][ T6085] xt_TCPMSS: Only works on TCP SYN packets [ 98.996691][ T6086] xt_TCPMSS: Only works on TCP SYN packets [ 99.143422][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'. [ 99.188247][ T6088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.51'. [ 99.220071][ T6088] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 99.260750][ T6091] netlink: 'syz.3.52': attribute type 1 has an invalid length. [ 99.345319][ T6100] TCP: TCP_TX_DELAY enabled [ 99.472727][ T6104] netlink: 'syz.1.55': attribute type 4 has an invalid length. [ 99.744751][ T6112] team0: Device vti0 is of different type [ 100.494068][ T6154] syz.1.72 uses obsolete (PF_INET,SOCK_PACKET) [ 100.594410][ T6160] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.618816][ T6160] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 101.591871][ T6193] netlink: 'syz.1.87': attribute type 1 has an invalid length. [ 101.705612][ T6205] sctp: [Deprecated]: syz.3.89 (pid 6205) Use of int in max_burst socket option. [ 101.705612][ T6205] Use struct sctp_assoc_value instead [ 101.879179][ T6213] __nla_validate_parse: 5 callbacks suppressed [ 101.879198][ T6213] netlink: 212296 bytes leftover after parsing attributes in process `syz.4.92'. [ 102.128507][ T6222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.249716][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.98'. [ 102.277139][ T6230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.457651][ T6238] lo: entered promiscuous mode [ 102.473241][ T6238] tunl0: entered promiscuous mode [ 102.496434][ T6238] gre0: entered promiscuous mode [ 102.528543][ T6238] gretap0: entered promiscuous mode [ 102.568063][ T6247] netlink: 'syz.1.103': attribute type 83 has an invalid length. [ 102.573654][ T6238] erspan0: entered promiscuous mode [ 102.617539][ T6238] ip_vti0: entered promiscuous mode [ 102.838733][ T6256] netlink: 24 bytes leftover after parsing attributes in process `syz.2.108'. [ 102.885346][ T6259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.108'. [ 103.003058][ T6269] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 103.292001][ T6287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.119'. [ 103.316430][ T6290] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.118'. [ 103.356706][ T6278] netlink: 81 bytes leftover after parsing attributes in process `syz.3.114'. [ 103.392435][ T6284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.116'. [ 103.416154][ T6284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.116'. [ 103.439773][ T6293] netlink: 48 bytes leftover after parsing attributes in process `syz.1.120'. [ 103.692693][ T6293] hsr_slave_1 (unregistering): left promiscuous mode [ 104.099917][ T6325] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 104.536982][ T6345] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 104.616982][ T6346] warning: `syz.1.133' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.180659][ T6368] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 106.678296][ T6417] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 107.015243][ T6442] __nla_validate_parse: 6 callbacks suppressed [ 107.015261][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'. [ 107.063941][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'. [ 107.089330][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'. [ 107.105027][ T6446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.158'. [ 107.109156][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'. [ 107.328121][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'. [ 107.328121][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'. [ 107.445793][ T6459] netlink: 'syz.2.163': attribute type 2 has an invalid length. [ 107.488276][ T6463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.165'. [ 107.511935][ T6462] netlink: 'syz.3.164': attribute type 280 has an invalid length. [ 107.804234][ T6480] netlink: 104 bytes leftover after parsing attributes in process `syz.4.172'. [ 107.827789][ T6481] lo: entered allmulticast mode [ 108.140848][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 108.162715][ T6499] tipc: Started in network mode [ 108.173839][ T6499] tipc: Node identity b26f34b01776, cluster identity 4711 [ 108.183052][ T6499] tipc: Enabled bearer , priority 0 [ 108.271905][ T6497] tipc: Disabling bearer [ 108.381427][ T6510] x_tables: unsorted underflow at hook 4 [ 108.406882][ T6509] gre0: Master is either lo or non-ether device [ 108.600677][ T6522] xt_recent: Unsupported userspace flags (00000061) [ 108.627165][ T6520] IPv6: NLM_F_REPLACE set, but no existing node found! [ 108.641018][ T6518] xt_hashlimit: size too large, truncated to 1048576 [ 108.822877][ T6531] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 111.574238][ T6662] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.609298][ T6662] SET target dimension over the limit! [ 111.981765][ T6678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.989250][ T6678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.016535][ T6678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.024203][ T6678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.034641][ T6685] __nla_validate_parse: 9 callbacks suppressed [ 112.034658][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'. [ 112.073345][ T6685] netlink: 80 bytes leftover after parsing attributes in process `syz.2.238'. [ 112.418762][ T6700] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.566016][ T6707] netlink: 24 bytes leftover after parsing attributes in process `syz.4.245'. [ 112.691648][ T6715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.773917][ T6712] netlink: 'syz.1.248': attribute type 2 has an invalid length. [ 112.972887][ T6724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.018379][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.254'. [ 113.028235][ T6724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.183399][ T6729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.223723][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'. [ 113.294256][ T6741] bond0: entered promiscuous mode [ 113.310442][ T6741] bond_slave_0: entered promiscuous mode [ 113.319863][ T6741] bond_slave_1: entered promiscuous mode [ 113.329019][ T6741] bond0: left promiscuous mode [ 113.368788][ T6741] bond_slave_0: left promiscuous mode [ 113.389261][ T6741] bond_slave_1: left promiscuous mode [ 113.662172][ T6762] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 114.226157][ T6796] netlink: 216 bytes leftover after parsing attributes in process `syz.1.272'. [ 115.596746][ T6858] !€ÿ: renamed from bond_slave_0 (while UP) [ 116.064807][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 116.121797][ T6876] dvmrp0: entered allmulticast mode [ 116.152986][ T6876] netlink: 'syz.2.294': attribute type 1 has an invalid length. [ 116.262935][ T6886] netlink: 'syz.4.297': attribute type 11 has an invalid length. [ 116.295054][ T6886] netlink: 'syz.4.297': attribute type 11 has an invalid length. [ 116.332042][ T6886] netlink: 224 bytes leftover after parsing attributes in process `syz.4.297'. [ 116.581098][ T6895] netlink: 'syz.3.300': attribute type 1 has an invalid length. [ 116.625369][ T6903] nbd: must specify a device to reconfigure [ 116.636916][ T6902] nbd: must specify a device to reconfigure [ 116.881973][ T30] audit: type=1107 audit(1751404384.882:2): pid=6909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 117.383781][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'. [ 117.629412][ T6961] netlink: 52 bytes leftover after parsing attributes in process `syz.0.319'. [ 117.644221][ T6966] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 118.107501][ T6979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.322'. [ 118.143370][ T6979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.322'. [ 118.167591][ T6985] veth1_macvtap: left promiscuous mode [ 118.618266][ T7011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.331'. [ 118.773693][ T6967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.819750][ T7001] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 119.834751][ T7001] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 120.089324][ T7037] gtp0: entered promiscuous mode [ 120.109923][ T7037] gtp0: entered allmulticast mode [ 120.157686][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.334'. [ 120.685666][ T7078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.340'. [ 121.090959][ T7085] lo: entered allmulticast mode [ 121.111038][ T7085] lo: left allmulticast mode [ 121.367582][ T7100] netlink: 'syz.3.352': attribute type 33 has an invalid length. [ 121.378237][ T7096] af_packet: tpacket_rcv: packet too big, clamped from 56412 to 4294967272. macoff=96 [ 121.393217][ T7100] netlink: 152 bytes leftover after parsing attributes in process `syz.3.352'. [ 121.450762][ T7102] netlink: 'syz.2.353': attribute type 10 has an invalid length. [ 121.597469][ T7102] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 121.615876][ T7106] netlink: 'syz.2.353': attribute type 12 has an invalid length. [ 121.665709][ T7107] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 121.715612][ T7107] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 121.935206][ T7124] netlink: 'syz.3.362': attribute type 10 has an invalid length. [ 121.966511][ T7124] netlink: 40 bytes leftover after parsing attributes in process `syz.3.362'. [ 121.999592][ T7124] dummy0: entered promiscuous mode [ 122.030144][ T7124] bridge0: port 3(dummy0) entered blocking state [ 122.044129][ T7124] bridge0: port 3(dummy0) entered disabled state [ 122.053530][ T7124] dummy0: entered allmulticast mode [ 122.377105][ T7140] x_tables: duplicate underflow at hook 3 [ 122.416127][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 122.593993][ T7154] : entered promiscuous mode [ 122.633929][ T7161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.371'. [ 123.038360][ T7183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.381'. [ 123.227924][ T7188] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 123.563589][ T7199] bridge_slave_0: invalid flags given to default FDB implementation [ 123.692318][ T7212] netlink: 52 bytes leftover after parsing attributes in process `syz.2.388'. [ 123.954879][ T7221] netlink: 'syz.4.392': attribute type 8 has an invalid length. [ 124.000624][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'. [ 124.379689][ T7221] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.388084][ T7221] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.406614][ T7221] bridge0: entered allmulticast mode [ 124.506155][ T7243] team0: Port device bond0 removed [ 124.546195][ T7243] dummy0: left allmulticast mode [ 124.556350][ T7243] bridge0: port 3(dummy0) entered disabled state [ 124.615736][ T7243] bridge_slave_0: left allmulticast mode [ 124.622515][ T7243] bridge_slave_0: left promiscuous mode [ 124.664220][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.713813][ T7243] bridge_slave_1: left allmulticast mode [ 124.735933][ T7243] bridge_slave_1: left promiscuous mode [ 124.770593][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.808614][ T7243] bond0: (slave bond_slave_0): Releasing backup interface [ 124.823851][ T7243] bond0: (slave bond_slave_1): Releasing backup interface [ 124.853540][ T7243] team0: Port device team_slave_0 removed [ 124.872313][ T7243] team0: Port device team_slave_1 removed [ 124.885323][ T7243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.895928][ T7243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.908047][ T7243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.917283][ T7243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.939653][ T7257] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 125.134757][ T7274] netlink: 'syz.4.405': attribute type 21 has an invalid length. [ 125.150032][ T7274] netlink: 132 bytes leftover after parsing attributes in process `syz.4.405'. [ 125.752810][ T7302] FAULT_INJECTION: forcing a failure. [ 125.752810][ T7302] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 125.772896][ T7301] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 125.801747][ T7301] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 125.812147][ T7302] CPU: 0 UID: 0 PID: 7302 Comm: syz.3.412 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 125.812171][ T7302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.812187][ T7302] Call Trace: [ 125.812194][ T7302] [ 125.812202][ T7302] dump_stack_lvl+0x189/0x250 [ 125.812241][ T7302] ? __pfx____ratelimit+0x10/0x10 [ 125.812267][ T7302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.812295][ T7302] ? __pfx__printk+0x10/0x10 [ 125.812314][ T7302] ? __might_fault+0xb0/0x130 [ 125.812341][ T7302] should_fail_ex+0x414/0x560 [ 125.812368][ T7302] _copy_from_user+0x2d/0xb0 [ 125.812387][ T7302] ___sys_sendmsg+0x158/0x2a0 [ 125.812413][ T7302] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.812470][ T7302] ? __fget_files+0x2a/0x420 [ 125.812488][ T7302] ? __fget_files+0x3a0/0x420 [ 125.812518][ T7302] __x64_sys_sendmsg+0x19b/0x260 [ 125.812542][ T7302] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 125.812574][ T7302] ? __pfx_ksys_write+0x10/0x10 [ 125.812588][ T7302] ? rcu_is_watching+0x15/0xb0 [ 125.812620][ T7302] ? do_syscall_64+0xbe/0x3b0 [ 125.812640][ T7302] do_syscall_64+0xfa/0x3b0 [ 125.812653][ T7302] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.812678][ T7302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.812696][ T7302] ? clear_bhb_loop+0x60/0xb0 [ 125.812717][ T7302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.812734][ T7302] RIP: 0033:0x7f120eb8e929 [ 125.812753][ T7302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.812771][ T7302] RSP: 002b:00007f120fa10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.812790][ T7302] RAX: ffffffffffffffda RBX: 00007f120edb5fa0 RCX: 00007f120eb8e929 [ 125.812802][ T7302] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 125.812813][ T7302] RBP: 00007f120fa10090 R08: 0000000000000000 R09: 0000000000000000 [ 125.812823][ T7302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.812833][ T7302] R13: 0000000000000000 R14: 00007f120edb5fa0 R15: 00007ffc31ecd928 [ 125.812861][ T7302] [ 126.492440][ T7326] netlink: 16 bytes leftover after parsing attributes in process `syz.4.419'. [ 126.864658][ T7342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.424'. [ 126.878345][ T7346] FAULT_INJECTION: forcing a failure. [ 126.878345][ T7346] name failslab, interval 1, probability 0, space 0, times 1 [ 126.918149][ T7346] CPU: 1 UID: 0 PID: 7346 Comm: syz.3.425 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 126.918178][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.918191][ T7346] Call Trace: [ 126.918199][ T7346] [ 126.918209][ T7346] dump_stack_lvl+0x189/0x250 [ 126.918247][ T7346] ? __pfx____ratelimit+0x10/0x10 [ 126.918278][ T7346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.918311][ T7346] ? __pfx__printk+0x10/0x10 [ 126.918341][ T7346] ? __pfx___might_resched+0x10/0x10 [ 126.918379][ T7346] should_fail_ex+0x414/0x560 [ 126.918410][ T7346] should_failslab+0xa8/0x100 [ 126.918436][ T7346] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 126.918457][ T7346] ? __alloc_skb+0x112/0x2d0 [ 126.918485][ T7346] __alloc_skb+0x112/0x2d0 [ 126.918512][ T7346] netlink_sendmsg+0x5c6/0xb30 [ 126.918559][ T7346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.918587][ T7346] ? aa_sock_msg_perm+0x94/0x160 [ 126.918615][ T7346] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 126.918641][ T7346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.918665][ T7346] __sock_sendmsg+0x21c/0x270 [ 126.918699][ T7346] ____sys_sendmsg+0x505/0x830 [ 126.918730][ T7346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.918774][ T7346] ? import_iovec+0x74/0xa0 [ 126.918798][ T7346] ___sys_sendmsg+0x21f/0x2a0 [ 126.918826][ T7346] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.918889][ T7346] ? __fget_files+0x2a/0x420 [ 126.918911][ T7346] ? __fget_files+0x3a0/0x420 [ 126.918956][ T7346] __x64_sys_sendmsg+0x19b/0x260 [ 126.918985][ T7346] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 126.919021][ T7346] ? __pfx_ksys_write+0x10/0x10 [ 126.919037][ T7346] ? rcu_is_watching+0x15/0xb0 [ 126.919074][ T7346] ? do_syscall_64+0xbe/0x3b0 [ 126.919097][ T7346] do_syscall_64+0xfa/0x3b0 [ 126.919113][ T7346] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.919142][ T7346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.919167][ T7346] ? clear_bhb_loop+0x60/0xb0 [ 126.919192][ T7346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.919212][ T7346] RIP: 0033:0x7f120eb8e929 [ 126.919230][ T7346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.919247][ T7346] RSP: 002b:00007f120fa10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.919269][ T7346] RAX: ffffffffffffffda RBX: 00007f120edb5fa0 RCX: 00007f120eb8e929 [ 126.919284][ T7346] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 126.919296][ T7346] RBP: 00007f120fa10090 R08: 0000000000000000 R09: 0000000000000000 [ 126.919320][ T7346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.919331][ T7346] R13: 0000000000000000 R14: 00007f120edb5fa0 R15: 00007ffc31ecd928 [ 126.919359][ T7346] [ 127.370723][ T7355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.412219][ T7355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.420945][ T7355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.429476][ T7355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.612678][ T7367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.429'. [ 127.743375][ T7365] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 127.977082][ T7381] bridge_slave_0: left allmulticast mode [ 127.991114][ T7385] netlink: 20 bytes leftover after parsing attributes in process `syz.4.434'. [ 128.026205][ T7381] bridge_slave_0: left promiscuous mode [ 128.050651][ T7381] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.119316][ T7381] bridge_slave_1: left promiscuous mode [ 128.169134][ T7381] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.338196][ T7381] bond0: (slave bond_slave_0): Releasing backup interface [ 128.406863][ T7381] bond0: (slave bond_slave_1): Releasing backup interface [ 128.445828][ T7409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.477073][ T7381] team0: Port device team_slave_0 removed [ 128.517504][ T7381] team0: Port device team_slave_1 removed [ 129.032885][ T7420] xt_CT: No such helper "snmp" [ 129.085251][ T7435] netlink: 80 bytes leftover after parsing attributes in process `syz.4.448'. [ 129.183257][ T7441] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 129.208330][ T7443] netlink: 416 bytes leftover after parsing attributes in process `syz.4.448'. [ 129.391107][ T7454] FAULT_INJECTION: forcing a failure. [ 129.391107][ T7454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.454752][ T7454] CPU: 0 UID: 0 PID: 7454 Comm: syz.3.451 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 129.454783][ T7454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.454796][ T7454] Call Trace: [ 129.454805][ T7454] [ 129.454814][ T7454] dump_stack_lvl+0x189/0x250 [ 129.454853][ T7454] ? __pfx____ratelimit+0x10/0x10 [ 129.454885][ T7454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.454916][ T7454] ? __pfx__printk+0x10/0x10 [ 129.454939][ T7454] ? __might_fault+0xb0/0x130 [ 129.454972][ T7454] should_fail_ex+0x414/0x560 [ 129.455012][ T7454] _copy_from_iter+0x1db/0x16f0 [ 129.455048][ T7454] ? rcu_is_watching+0x15/0xb0 [ 129.455082][ T7454] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 129.455104][ T7454] ? __pfx__copy_from_iter+0x10/0x10 [ 129.455135][ T7454] ? __build_skb_around+0x257/0x3e0 [ 129.455163][ T7454] ? netlink_sendmsg+0x642/0xb30 [ 129.455185][ T7454] ? skb_put+0x11b/0x210 [ 129.455213][ T7454] netlink_sendmsg+0x6b2/0xb30 [ 129.455247][ T7454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.455275][ T7454] ? aa_sock_msg_perm+0x94/0x160 [ 129.455304][ T7454] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 129.455330][ T7454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.455355][ T7454] __sock_sendmsg+0x21c/0x270 [ 129.455389][ T7454] ____sys_sendmsg+0x505/0x830 [ 129.455422][ T7454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.455458][ T7454] ? import_iovec+0x74/0xa0 [ 129.455483][ T7454] ___sys_sendmsg+0x21f/0x2a0 [ 129.455512][ T7454] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.455579][ T7454] ? __fget_files+0x2a/0x420 [ 129.455601][ T7454] ? __fget_files+0x3a0/0x420 [ 129.455636][ T7454] __x64_sys_sendmsg+0x19b/0x260 [ 129.455666][ T7454] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 129.455703][ T7454] ? __pfx_ksys_write+0x10/0x10 [ 129.455719][ T7454] ? rcu_is_watching+0x15/0xb0 [ 129.455755][ T7454] ? do_syscall_64+0xbe/0x3b0 [ 129.455777][ T7454] do_syscall_64+0xfa/0x3b0 [ 129.455806][ T7454] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.455845][ T7454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.455864][ T7454] ? clear_bhb_loop+0x60/0xb0 [ 129.455898][ T7454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.455915][ T7454] RIP: 0033:0x7f120eb8e929 [ 129.455931][ T7454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.455945][ T7454] RSP: 002b:00007f120fa10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.455965][ T7454] RAX: ffffffffffffffda RBX: 00007f120edb5fa0 RCX: 00007f120eb8e929 [ 129.455978][ T7454] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 129.455996][ T7454] RBP: 00007f120fa10090 R08: 0000000000000000 R09: 0000000000000000 [ 129.456007][ T7454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.456017][ T7454] R13: 0000000000000000 R14: 00007f120edb5fa0 R15: 00007ffc31ecd928 [ 129.456045][ T7454] [ 129.526322][ T7458] sch_tbf: burst 32855 is lower than device lo mtu (39799) ! [ 129.542872][ T7450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.450'. [ 130.072185][ T7474] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 130.402564][ T7489] Bluetooth: MGMT ver 1.23 [ 130.415079][ T7489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.460'. [ 130.576741][ T7494] sch_tbf: burst 32855 is lower than device lo mtu (39799) ! [ 130.752795][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.467'. [ 130.808413][ T7505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.467'. [ 132.023864][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.254357][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.478577][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.567725][ T7565] bond1: entered promiscuous mode [ 132.573117][ T7565] bond1: entered allmulticast mode [ 132.579053][ T7565] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.703157][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.725632][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.740600][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.752144][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.760203][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.762085][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.484'. [ 132.777154][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.786654][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 133.136258][ T7583] FAULT_INJECTION: forcing a failure. [ 133.136258][ T7583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.151374][ T7583] CPU: 0 UID: 0 PID: 7583 Comm: syz.4.487 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 133.151400][ T7583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.151411][ T7583] Call Trace: [ 133.151418][ T7583] [ 133.151426][ T7583] dump_stack_lvl+0x189/0x250 [ 133.151481][ T7583] ? __pfx____ratelimit+0x10/0x10 [ 133.151511][ T7583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.151542][ T7583] ? __pfx__printk+0x10/0x10 [ 133.151565][ T7583] ? __might_fault+0xb0/0x130 [ 133.151595][ T7583] should_fail_ex+0x414/0x560 [ 133.151625][ T7583] _copy_from_user+0x2d/0xb0 [ 133.151646][ T7583] ___sys_sendmsg+0x158/0x2a0 [ 133.151674][ T7583] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.151759][ T7583] ? __fget_files+0x2a/0x420 [ 133.151779][ T7583] ? __fget_files+0x3a0/0x420 [ 133.151810][ T7583] __x64_sys_sendmsg+0x19b/0x260 [ 133.151854][ T7583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 133.151890][ T7583] ? __pfx_ksys_write+0x10/0x10 [ 133.151906][ T7583] ? rcu_is_watching+0x15/0xb0 [ 133.151942][ T7583] ? do_syscall_64+0xbe/0x3b0 [ 133.151964][ T7583] do_syscall_64+0xfa/0x3b0 [ 133.151981][ T7583] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.152009][ T7583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.152040][ T7583] ? clear_bhb_loop+0x60/0xb0 [ 133.152063][ T7583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.152081][ T7583] RIP: 0033:0x7fa58bb8e929 [ 133.152098][ T7583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.152113][ T7583] RSP: 002b:00007fa58ca2a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.152132][ T7583] RAX: ffffffffffffffda RBX: 00007fa58bdb5fa0 RCX: 00007fa58bb8e929 [ 133.152146][ T7583] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 133.152157][ T7583] RBP: 00007fa58ca2a090 R08: 0000000000000000 R09: 0000000000000000 [ 133.152169][ T7583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.152179][ T7583] R13: 0000000000000000 R14: 00007fa58bdb5fa0 R15: 00007ffc7bbcb5d8 [ 133.152209][ T7583] [ 133.720941][ T36] bond0 (unregistering): Released all slaves [ 133.827268][ T36] : left promiscuous mode [ 133.836874][ T7593] netlink: 'syz.0.490': attribute type 6 has an invalid length. [ 134.006468][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880358d0000: rx timeout, send abort [ 134.015944][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880358d1000: rx timeout, send abort [ 134.490786][ T7626] netlink: 16 bytes leftover after parsing attributes in process `syz.0.493'. [ 134.515274][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880358d0000: abort rx timeout. Force session deactivation [ 134.525767][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880358d1000: abort rx timeout. Force session deactivation [ 134.725947][ T7637] netlink: 224 bytes leftover after parsing attributes in process `syz.1.497'. [ 134.734943][ T36] hsr_slave_0: left promiscuous mode [ 134.752778][ T36] hsr_slave_1: left promiscuous mode [ 134.822416][ T7637] x_tables: duplicate underflow at hook 2 [ 134.849306][ T36] veth0_macvtap: left promiscuous mode [ 134.861025][ T36] veth1_vlan: left promiscuous mode [ 134.869938][ T36] veth0_vlan: left promiscuous mode [ 134.876040][ T5835] Bluetooth: hci0: command tx timeout [ 135.030087][ T7647] FAULT_INJECTION: forcing a failure. [ 135.030087][ T7647] name failslab, interval 1, probability 0, space 0, times 0 [ 135.034415][ T7645] netlink: 9 bytes leftover after parsing attributes in process `syz.1.497'. [ 135.047569][ T7647] CPU: 1 UID: 0 PID: 7647 Comm: syz.2.498 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 135.047604][ T7647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 135.047619][ T7647] Call Trace: [ 135.047629][ T7647] [ 135.047641][ T7647] dump_stack_lvl+0x189/0x250 [ 135.047688][ T7647] ? __pfx____ratelimit+0x10/0x10 [ 135.047724][ T7647] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.047761][ T7647] ? __pfx__printk+0x10/0x10 [ 135.047794][ T7647] ? __pfx___might_resched+0x10/0x10 [ 135.047837][ T7647] should_fail_ex+0x414/0x560 [ 135.047874][ T7647] should_failslab+0xa8/0x100 [ 135.047902][ T7647] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 135.047927][ T7647] ? __alloc_skb+0x112/0x2d0 [ 135.047960][ T7647] __alloc_skb+0x112/0x2d0 [ 135.047990][ T7647] netlink_sendmsg+0x5c6/0xb30 [ 135.048029][ T7647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.048062][ T7647] ? aa_sock_msg_perm+0x94/0x160 [ 135.048096][ T7647] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 135.048125][ T7647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.048154][ T7647] __sock_sendmsg+0x21c/0x270 [ 135.048193][ T7647] ____sys_sendmsg+0x505/0x830 [ 135.048230][ T7647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.048272][ T7647] ? import_iovec+0x74/0xa0 [ 135.048307][ T7647] ___sys_sendmsg+0x21f/0x2a0 [ 135.048341][ T7647] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.048415][ T7647] ? __fget_files+0x2a/0x420 [ 135.048446][ T7647] ? __fget_files+0x3a0/0x420 [ 135.048494][ T7647] __x64_sys_sendmsg+0x19b/0x260 [ 135.048524][ T7647] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 135.048561][ T7647] ? __pfx_ksys_write+0x10/0x10 [ 135.048578][ T7647] ? rcu_is_watching+0x15/0xb0 [ 135.048618][ T7647] ? do_syscall_64+0xbe/0x3b0 [ 135.048642][ T7647] do_syscall_64+0xfa/0x3b0 [ 135.048659][ T7647] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.048688][ T7647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.048728][ T7647] ? clear_bhb_loop+0x60/0xb0 [ 135.048756][ T7647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.048778][ T7647] RIP: 0033:0x7fa020d8e929 [ 135.048799][ T7647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.048819][ T7647] RSP: 002b:00007fa021ba4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.048843][ T7647] RAX: ffffffffffffffda RBX: 00007fa020fb5fa0 RCX: 00007fa020d8e929 [ 135.048860][ T7647] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 135.048873][ T7647] RBP: 00007fa021ba4090 R08: 0000000000000000 R09: 0000000000000000 [ 135.048888][ T7647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.048900][ T7647] R13: 0000000000000000 R14: 00007fa020fb5fa0 R15: 00007fff28577be8 [ 135.048935][ T7647] [ 135.147919][ T7648] netlink: 5 bytes leftover after parsing attributes in process `syz.1.497'. [ 135.584036][ T7663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.501'. [ 136.763907][ T9] infiniband syz1: ib_query_port failed (-19) [ 136.829891][ T7645] gretap0: entered promiscuous mode [ 136.856268][ T7648] 0ªX¹¦D: renamed from gretap0 [ 136.873802][ T7648] 0ªX¹¦D: left promiscuous mode [ 136.878707][ T7648] 0ªX¹¦D: entered allmulticast mode [ 136.880565][ T7668] tipc: Can't bind to reserved service type 0 [ 136.896396][ T7668] netlink: 'syz.4.503': attribute type 2 has an invalid length. [ 136.903199][ T7648] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 136.950588][ T5835] Bluetooth: hci0: command tx timeout [ 136.964702][ T7572] chnl_net:caif_netlink_parms(): no params data found [ 137.144976][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 137.168049][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.506'. [ 137.178833][ T7674] netlink: 'syz.2.506': attribute type 15 has an invalid length. [ 137.191983][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'. [ 137.412854][ T7689] trusted_key: syz.0.508 sent an empty control message without MSG_MORE. [ 137.590063][ T7572] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.622143][ T7572] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.642543][ T7572] bridge_slave_0: entered allmulticast mode [ 137.656959][ T7697] netlink: 40 bytes leftover after parsing attributes in process `syz.2.513'. [ 137.669893][ T7572] bridge_slave_0: entered promiscuous mode [ 137.692642][ T7572] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.701141][ T36] IPVS: stop unused estimator thread 0... [ 137.736126][ T7572] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.754427][ T7572] bridge_slave_1: entered allmulticast mode [ 137.775162][ T7572] bridge_slave_1: entered promiscuous mode [ 137.808661][ T7702] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 137.894793][ T7709] netlink: 'syz.2.516': attribute type 2 has an invalid length. [ 137.905004][ T7709] netlink: 'syz.2.516': attribute type 8 has an invalid length. [ 137.919907][ T7709] netlink: 132 bytes leftover after parsing attributes in process `syz.2.516'. [ 137.982292][ T7705] netlink: 108 bytes leftover after parsing attributes in process `syz.1.515'. [ 138.039027][ T7572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.086237][ T7572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.235588][ T7722] FAULT_INJECTION: forcing a failure. [ 138.235588][ T7722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.291260][ T7722] CPU: 1 UID: 0 PID: 7722 Comm: syz.1.520 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 138.291297][ T7722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.291308][ T7722] Call Trace: [ 138.291315][ T7722] [ 138.291324][ T7722] dump_stack_lvl+0x189/0x250 [ 138.291359][ T7722] ? __pfx____ratelimit+0x10/0x10 [ 138.291388][ T7722] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.291418][ T7722] ? __pfx__printk+0x10/0x10 [ 138.291439][ T7722] ? __might_fault+0xb0/0x130 [ 138.291468][ T7722] should_fail_ex+0x414/0x560 [ 138.291496][ T7722] _copy_from_iter+0x1db/0x16f0 [ 138.291529][ T7722] ? rcu_is_watching+0x15/0xb0 [ 138.291560][ T7722] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 138.291580][ T7722] ? __pfx__copy_from_iter+0x10/0x10 [ 138.291609][ T7722] ? __build_skb_around+0x257/0x3e0 [ 138.291634][ T7722] ? netlink_sendmsg+0x642/0xb30 [ 138.291654][ T7722] ? skb_put+0x11b/0x210 [ 138.291679][ T7722] netlink_sendmsg+0x6b2/0xb30 [ 138.291710][ T7722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.291747][ T7722] ? aa_sock_msg_perm+0x94/0x160 [ 138.291771][ T7722] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 138.291793][ T7722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.291815][ T7722] __sock_sendmsg+0x21c/0x270 [ 138.291844][ T7722] ____sys_sendmsg+0x505/0x830 [ 138.291871][ T7722] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.291901][ T7722] ? import_iovec+0x74/0xa0 [ 138.291920][ T7722] ___sys_sendmsg+0x21f/0x2a0 [ 138.291945][ T7722] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.292018][ T7722] ? __fget_files+0x2a/0x420 [ 138.292041][ T7722] ? __fget_files+0x3a0/0x420 [ 138.292072][ T7722] __x64_sys_sendmsg+0x19b/0x260 [ 138.292108][ T7722] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 138.292139][ T7722] ? __pfx_ksys_write+0x10/0x10 [ 138.292153][ T7722] ? rcu_is_watching+0x15/0xb0 [ 138.292185][ T7722] ? do_syscall_64+0xbe/0x3b0 [ 138.292204][ T7722] do_syscall_64+0xfa/0x3b0 [ 138.292219][ T7722] ? lockdep_hardirqs_on+0x9c/0x150 [ 138.292244][ T7722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.292262][ T7722] ? clear_bhb_loop+0x60/0xb0 [ 138.292291][ T7722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.292308][ T7722] RIP: 0033:0x7f9c1ed8e929 [ 138.292324][ T7722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.292339][ T7722] RSP: 002b:00007f9c1fb4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.292357][ T7722] RAX: ffffffffffffffda RBX: 00007f9c1efb5fa0 RCX: 00007f9c1ed8e929 [ 138.292370][ T7722] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 138.292381][ T7722] RBP: 00007f9c1fb4a090 R08: 0000000000000000 R09: 0000000000000000 [ 138.292392][ T7722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.292419][ T7722] R13: 0000000000000000 R14: 00007f9c1efb5fa0 R15: 00007ffecb30f9d8 [ 138.292464][ T7722] [ 138.625900][ T7572] team0: Port device team_slave_0 added [ 138.671583][ T7572] team0: Port device team_slave_1 added [ 139.031658][ T5835] Bluetooth: hci0: command tx timeout [ 139.128561][ T7742] netlink: 88 bytes leftover after parsing attributes in process `syz.0.525'. [ 139.152703][ T7742] netem: invalid attributes len -24 [ 139.161339][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.528'. [ 139.164774][ T7742] netem: change failed [ 139.180239][ T7751] netlink: 16 bytes leftover after parsing attributes in process `syz.2.529'. [ 139.184661][ T7753] netlink: 40 bytes leftover after parsing attributes in process `syz.1.527'. [ 139.274089][ T7572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.287496][ T7572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.337537][ T7572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.416747][ T7572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.428824][ T7572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.458728][ T7572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.598665][ T7768] netlink: 'syz.2.533': attribute type 21 has an invalid length. [ 139.614866][ T7768] IPv6: NLM_F_CREATE should be specified when creating new route [ 139.652111][ T7572] hsr_slave_0: entered promiscuous mode [ 139.666611][ T7572] hsr_slave_1: entered promiscuous mode [ 140.076221][ T7789] netlink: 'syz.1.540': attribute type 10 has an invalid length. [ 140.202833][ T7790] lo speed is unknown, defaulting to 1000 [ 140.263002][ T7789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.292741][ T7789] team0: Port device bond0 added [ 140.317161][ T7795] ip6tnl1: entered promiscuous mode [ 140.326263][ T7795] ip6tnl1: entered allmulticast mode [ 140.354031][ T7796] netlink: 56 bytes leftover after parsing attributes in process `syz.4.541'. [ 140.364934][ T7796] netlink: 56 bytes leftover after parsing attributes in process `syz.4.541'. [ 140.398416][ T7790] lo speed is unknown, defaulting to 1000 [ 140.410217][ T7790] lo speed is unknown, defaulting to 1000 [ 140.483059][ T7790] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 140.597328][ T7790] lo speed is unknown, defaulting to 1000 [ 140.659343][ T7813] netlink: 2 bytes leftover after parsing attributes in process `syz.4.547'. [ 140.701157][ T7790] lo speed is unknown, defaulting to 1000 [ 140.724645][ T7790] lo speed is unknown, defaulting to 1000 [ 140.970930][ T7790] lo speed is unknown, defaulting to 1000 [ 141.110421][ T5835] Bluetooth: hci0: command tx timeout [ 141.131300][ T7790] lo speed is unknown, defaulting to 1000 [ 141.178107][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.552'. [ 141.403896][ T7572] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 141.444244][ T7572] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 141.489483][ T7572] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 141.539285][ T7572] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 141.785687][ T7572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.829823][ T7572] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.867667][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.874945][ T2907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.962877][ T2907] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.970057][ T2907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.984390][ T7866] netlink: 'syz.2.561': attribute type 21 has an invalid length. [ 142.006793][ T7867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.054355][ T7867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.846933][ T7572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.938187][ T7912] __nla_validate_parse: 6 callbacks suppressed [ 142.938209][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'. [ 143.008336][ T7572] veth0_vlan: entered promiscuous mode [ 143.049673][ T7572] veth1_vlan: entered promiscuous mode [ 143.169246][ T7572] veth0_macvtap: entered promiscuous mode [ 143.178500][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 143.198821][ T7572] veth1_macvtap: entered promiscuous mode [ 143.253314][ T7572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.294239][ T7572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.334125][ T7572] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.360516][ T7572] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.390154][ T7572] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.414079][ T7572] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.723610][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.753320][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.809426][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.852919][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.937573][ T7939] : renamed from veth0_vlan (while UP) [ 144.146443][ T7950] FAULT_INJECTION: forcing a failure. [ 144.146443][ T7950] name failslab, interval 1, probability 0, space 0, times 0 [ 144.169710][ T7950] CPU: 0 UID: 0 PID: 7950 Comm: syz.0.581 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 144.169736][ T7950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.169747][ T7950] Call Trace: [ 144.169754][ T7950] [ 144.169761][ T7950] dump_stack_lvl+0x189/0x250 [ 144.169795][ T7950] ? __pfx____ratelimit+0x10/0x10 [ 144.169823][ T7950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.169851][ T7950] ? __pfx__printk+0x10/0x10 [ 144.169875][ T7950] ? __pfx___might_resched+0x10/0x10 [ 144.169902][ T7950] ? fs_reclaim_acquire+0x7d/0x100 [ 144.169928][ T7950] should_fail_ex+0x414/0x560 [ 144.169955][ T7950] should_failslab+0xa8/0x100 [ 144.169974][ T7950] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 144.169991][ T7950] ? __alloc_skb+0x112/0x2d0 [ 144.170014][ T7950] __alloc_skb+0x112/0x2d0 [ 144.170036][ T7950] netlink_ack+0x146/0xa50 [ 144.170054][ T7950] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 144.170070][ T7950] ? ref_tracker_free+0x63a/0x7d0 [ 144.170093][ T7950] ? __copy_skb_header+0xa7/0x550 [ 144.170117][ T7950] ? __pfx_ref_tracker_free+0x10/0x10 [ 144.170151][ T7950] netlink_rcv_skb+0x28c/0x470 [ 144.170172][ T7950] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 144.170191][ T7950] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 144.170224][ T7950] ? netlink_deliver_tap+0x2e/0x1b0 [ 144.170243][ T7950] ? netlink_deliver_tap+0x2e/0x1b0 [ 144.170269][ T7950] netlink_unicast+0x75b/0x8d0 [ 144.170298][ T7950] netlink_sendmsg+0x805/0xb30 [ 144.170327][ T7950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.170350][ T7950] ? aa_sock_msg_perm+0x94/0x160 [ 144.170375][ T7950] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 144.170397][ T7950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.170419][ T7950] __sock_sendmsg+0x21c/0x270 [ 144.170449][ T7950] ____sys_sendmsg+0x505/0x830 [ 144.170476][ T7950] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.170507][ T7950] ? import_iovec+0x74/0xa0 [ 144.170528][ T7950] ___sys_sendmsg+0x21f/0x2a0 [ 144.170559][ T7950] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.170616][ T7950] ? __fget_files+0x2a/0x420 [ 144.170635][ T7950] ? __fget_files+0x3a0/0x420 [ 144.170665][ T7950] __x64_sys_sendmsg+0x19b/0x260 [ 144.170690][ T7950] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 144.170721][ T7950] ? __pfx_ksys_write+0x10/0x10 [ 144.170735][ T7950] ? rcu_is_watching+0x15/0xb0 [ 144.170785][ T7950] ? do_syscall_64+0xbe/0x3b0 [ 144.170806][ T7950] do_syscall_64+0xfa/0x3b0 [ 144.170822][ T7950] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.170860][ T7950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.170878][ T7950] ? clear_bhb_loop+0x60/0xb0 [ 144.170900][ T7950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.170917][ T7950] RIP: 0033:0x7efce0f8e929 [ 144.170934][ T7950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.170948][ T7950] RSP: 002b:00007efce1d98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.170967][ T7950] RAX: ffffffffffffffda RBX: 00007efce11b5fa0 RCX: 00007efce0f8e929 [ 144.170980][ T7950] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 144.170990][ T7950] RBP: 00007efce1d98090 R08: 0000000000000000 R09: 0000000000000000 [ 144.171001][ T7950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.171011][ T7950] R13: 0000000000000000 R14: 00007efce11b5fa0 R15: 00007ffd8f072d28 [ 144.171039][ T7950] [ 144.636523][ T7952] netlink: 24 bytes leftover after parsing attributes in process `syz.4.582'. [ 144.778957][ T7963] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.584'. [ 144.815229][ T7963] netlink: 'syz.0.584': attribute type 1 has an invalid length. [ 144.823252][ T7963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.584'. [ 144.838673][ T7964] netlink: 'syz.0.584': attribute type 1 has an invalid length. [ 144.849347][ T7964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.584'. [ 144.897382][ T92] IPVS: starting estimator thread 0... [ 144.903544][ T7967] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 145.002059][ T7973] IPVS: using max 29 ests per chain, 69600 per kthread [ 145.438071][ T7997] netlink: 808 bytes leftover after parsing attributes in process `syz.2.590'. [ 145.583932][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.101833][ T8018] openvswitch: netlink: Unknown key attributes 2 [ 146.133779][ T8018] netlink: 'syz.4.592': attribute type 21 has an invalid length. [ 146.236285][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.548302][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.610241][ T8036] netlink: 24 bytes leftover after parsing attributes in process `syz.0.597'. [ 146.660220][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.673054][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.682634][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.693268][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.705146][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.812324][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.957206][ T8040] lo speed is unknown, defaulting to 1000 [ 147.046516][ T8054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.601'. [ 147.297643][ T8063] netlink: 'syz.1.604': attribute type 13 has an invalid length. [ 147.382773][ T12] bridge_slave_1: left allmulticast mode [ 147.405410][ T12] bridge_slave_1: left promiscuous mode [ 147.437628][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.504337][ T12] bridge_slave_0: left allmulticast mode [ 147.533725][ T12] bridge_slave_0: left promiscuous mode [ 147.557741][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.962884][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.975092][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.988185][ T12] bond0 (unregistering): Released all slaves [ 148.039003][ T8063] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.124107][ T8085] FAULT_INJECTION: forcing a failure. [ 148.124107][ T8085] name failslab, interval 1, probability 0, space 0, times 0 [ 148.190792][ T8085] CPU: 0 UID: 0 PID: 8085 Comm: syz.0.608 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 148.190822][ T8085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.190835][ T8085] Call Trace: [ 148.190843][ T8085] [ 148.190852][ T8085] dump_stack_lvl+0x189/0x250 [ 148.190889][ T8085] ? __pfx____ratelimit+0x10/0x10 [ 148.190920][ T8085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.190951][ T8085] ? __pfx__printk+0x10/0x10 [ 148.190990][ T8085] should_fail_ex+0x414/0x560 [ 148.191021][ T8085] should_failslab+0xa8/0x100 [ 148.191045][ T8085] kmem_cache_alloc_noprof+0x73/0x3c0 [ 148.191076][ T8085] ? skb_clone+0x212/0x3a0 [ 148.191108][ T8085] skb_clone+0x212/0x3a0 [ 148.191138][ T8085] __netlink_deliver_tap+0x404/0x850 [ 148.191176][ T8085] ? netlink_deliver_tap+0x2e/0x1b0 [ 148.191200][ T8085] netlink_deliver_tap+0x19c/0x1b0 [ 148.191224][ T8085] netlink_sendskb+0x68/0x140 [ 148.191244][ T8085] netlink_rcv_skb+0x28c/0x470 [ 148.191268][ T8085] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 148.191291][ T8085] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 148.191329][ T8085] ? netlink_deliver_tap+0x2e/0x1b0 [ 148.191351][ T8085] ? netlink_deliver_tap+0x2e/0x1b0 [ 148.191380][ T8085] netlink_unicast+0x75b/0x8d0 [ 148.191413][ T8085] netlink_sendmsg+0x805/0xb30 [ 148.191447][ T8085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.191542][ T8085] ? aa_sock_msg_perm+0x94/0x160 [ 148.191577][ T8085] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 148.191603][ T8085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.191628][ T8085] __sock_sendmsg+0x21c/0x270 [ 148.191664][ T8085] ____sys_sendmsg+0x505/0x830 [ 148.191696][ T8085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.191731][ T8085] ? import_iovec+0x74/0xa0 [ 148.191756][ T8085] ___sys_sendmsg+0x21f/0x2a0 [ 148.191788][ T8085] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.191855][ T8085] ? __fget_files+0x2a/0x420 [ 148.191876][ T8085] ? __fget_files+0x3a0/0x420 [ 148.191909][ T8085] __x64_sys_sendmsg+0x19b/0x260 [ 148.191938][ T8085] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 148.191973][ T8085] ? __pfx_ksys_write+0x10/0x10 [ 148.191989][ T8085] ? rcu_is_watching+0x15/0xb0 [ 148.192026][ T8085] ? do_syscall_64+0xbe/0x3b0 [ 148.192049][ T8085] do_syscall_64+0xfa/0x3b0 [ 148.192065][ T8085] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.192094][ T8085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.192113][ T8085] ? clear_bhb_loop+0x60/0xb0 [ 148.192138][ T8085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.192157][ T8085] RIP: 0033:0x7efce0f8e929 [ 148.192176][ T8085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.192193][ T8085] RSP: 002b:00007efce1d98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.192213][ T8085] RAX: ffffffffffffffda RBX: 00007efce11b5fa0 RCX: 00007efce0f8e929 [ 148.192228][ T8085] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 148.192240][ T8085] RBP: 00007efce1d98090 R08: 0000000000000000 R09: 0000000000000000 [ 148.192252][ T8085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.192262][ T8085] R13: 0000000000000000 R14: 00007efce11b5fa0 R15: 00007ffd8f072d28 [ 148.192293][ T8085] [ 148.806618][ T5835] Bluetooth: hci0: command tx timeout [ 148.894294][ T8040] chnl_net:caif_netlink_parms(): no params data found [ 149.419917][ T8040] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.449507][ T8040] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.473542][ T8040] bridge_slave_0: entered allmulticast mode [ 149.493298][ T8040] bridge_slave_0: entered promiscuous mode [ 149.494846][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.617'. [ 149.517156][ T8040] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.545033][ T8040] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.569092][ T8040] bridge_slave_1: entered allmulticast mode [ 149.580187][ T8127] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 149.587744][ T8040] bridge_slave_1: entered promiscuous mode [ 149.722663][ T12] hsr_slave_0: left promiscuous mode [ 149.746986][ T12] hsr_slave_1: left promiscuous mode [ 149.755320][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.764260][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.782315][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.790395][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.850126][ T12] veth1_macvtap: left promiscuous mode [ 149.858124][ T12] veth0_macvtap: left promiscuous mode [ 149.870796][ T12] veth1_vlan: left promiscuous mode [ 149.878042][ T12] veth0_vlan: left promiscuous mode [ 150.250199][ T8156] netlink: 24 bytes leftover after parsing attributes in process `syz.2.623'. [ 150.463689][ T12] team0 (unregistering): Port device team_slave_1 removed [ 150.502990][ T12] team0 (unregistering): Port device team_slave_0 removed [ 150.870553][ T5835] Bluetooth: hci0: command tx timeout [ 150.872769][ T8149] tap0: tun_chr_ioctl cmd 1074025676 [ 150.940763][ T8160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.627'. [ 150.956876][ T8149] tap0: owner set to 0 [ 150.997508][ T8164] x_tables: unsorted underflow at hook 3 [ 151.016671][ T8160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.627'. [ 151.053947][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'. [ 151.089135][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 151.104088][ T8040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.241715][ T8040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.248967][ T8173] netlink: 20 bytes leftover after parsing attributes in process `syz.1.628'. [ 151.269861][ T8177] x_tables: unsorted underflow at hook 4 [ 151.537164][ T8040] team0: Port device team_slave_0 added [ 151.568587][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'. [ 151.592760][ T8040] team0: Port device team_slave_1 added [ 151.598975][ T8192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.633'. [ 151.640861][ T8184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.631'. [ 151.685790][ T8184] netlink: 'syz.2.631': attribute type 7 has an invalid length. [ 151.833600][ T8040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.870003][ T8040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.908523][ T8040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.924477][ T8040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.935645][ T8040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.010359][ T8040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.147590][ T8221] delete_channel: no stack [ 152.239242][ T8040] hsr_slave_0: entered promiscuous mode [ 152.277120][ T8040] hsr_slave_1: entered promiscuous mode [ 152.298479][ T8228] bridge_slave_1: left allmulticast mode [ 152.305930][ T8228] bridge_slave_1: left promiscuous mode [ 152.316227][ T8228] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.356728][ T8228] bridge_slave_0: left allmulticast mode [ 152.369128][ T8228] bridge_slave_0: left promiscuous mode [ 152.379922][ T8228] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.842387][ T8248] unsupported nlmsg_type 40 [ 152.950421][ T5835] Bluetooth: hci0: command tx timeout [ 153.433540][ T8288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.032737][ T8317] Bluetooth: MGMT ver 1.23 [ 154.181643][ T8317] bond2: entered promiscuous mode [ 154.203213][ T8317] bond2: entered allmulticast mode [ 154.214776][ T8317] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.367698][ T8317] bond2 (unregistering): Released all slaves [ 154.505283][ T8040] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 154.591345][ T8040] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 154.604545][ T8344] __nla_validate_parse: 4 callbacks suppressed [ 154.604561][ T8344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.668'. [ 154.658565][ T8040] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 154.692821][ T8342] netlink: 40 bytes leftover after parsing attributes in process `syz.1.668'. [ 154.703453][ T8349] sock: sock_set_timeout: `syz.4.669' (pid 8349) tries to set negative timeout [ 154.721110][ T8040] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 155.031342][ T5840] Bluetooth: hci0: command tx timeout [ 155.068745][ T8040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.108868][ T8372] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 155.213492][ T8040] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.257313][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.264548][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.353620][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.360921][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.030135][ T8404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.686'. [ 156.070847][ T5835] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 156.078911][ T5835] Bluetooth: hci2: command 0x0401 tx timeout [ 156.110789][ T8411] veth1_to_bond: entered promiscuous mode [ 156.184456][ T8411] veth1_to_bond: entered allmulticast mode [ 156.373408][ T8040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.516458][ T8040] veth0_vlan: entered promiscuous mode [ 156.585823][ T8040] veth1_vlan: entered promiscuous mode [ 156.679354][ T8040] veth0_macvtap: entered promiscuous mode [ 156.720122][ T8040] veth1_macvtap: entered promiscuous mode [ 156.823734][ T8040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.868108][ T8040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.916213][ T8040] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.947656][ T8040] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.975145][ T8040] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.994217][ T8040] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.395042][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.460387][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.524197][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.553339][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.229329][ T8492] netlink: 20 bytes leftover after parsing attributes in process `syz.2.708'. [ 158.544492][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.692177][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.893677][ T8520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.715'. [ 159.042950][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.094602][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.717'. [ 159.352741][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.473604][ T8540] veth1_macvtap: left promiscuous mode [ 159.692393][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.729275][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.737478][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.748702][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.764040][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 159.988069][ T8550] lo speed is unknown, defaulting to 1000 [ 159.994509][ T12] bridge_slave_1: left allmulticast mode [ 160.009295][ T12] bridge_slave_1: left promiscuous mode [ 160.044131][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.095036][ T12] bridge_slave_0: left allmulticast mode [ 160.111434][ T12] bridge_slave_0: left promiscuous mode [ 160.118766][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.676298][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.689908][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.703259][ T12] bond0 (unregistering): Released all slaves [ 160.966137][ T8594] netlink: 'syz.0.730': attribute type 18 has an invalid length. [ 161.114106][ T8602] netlink: 'syz.4.732': attribute type 2 has an invalid length. [ 161.128257][ T8603] netlink: 'syz.1.733': attribute type 1 has an invalid length. [ 161.154077][ T8603] netlink: 15 bytes leftover after parsing attributes in process `syz.1.733'. [ 161.185098][ T8594] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.194200][ T8594] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.203797][ T8594] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.213450][ T8594] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.239913][ T8597] netlink: 132 bytes leftover after parsing attributes in process `syz.4.732'. [ 161.267132][ T8608] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 161.408698][ T8611] netlink: 36 bytes leftover after parsing attributes in process `syz.0.735'. [ 161.684679][ T12] hsr_slave_0: left promiscuous mode [ 161.698945][ T12] hsr_slave_1: left promiscuous mode [ 161.706111][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.716741][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.724940][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.737530][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.794003][ T12] veth1_macvtap: left promiscuous mode [ 161.800196][ T12] veth0_macvtap: left promiscuous mode [ 161.810974][ T12] veth1_vlan: left promiscuous mode [ 161.816457][ T12] veth0_vlan: left promiscuous mode [ 161.840452][ T5840] Bluetooth: hci0: command tx timeout [ 162.336416][ T12] team0 (unregistering): Port device team_slave_1 removed [ 162.372177][ T12] team0 (unregistering): Port device team_slave_0 removed [ 162.730474][ T8550] chnl_net:caif_netlink_parms(): no params data found [ 163.310620][ T8550] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.335411][ T8550] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.359019][ T8550] bridge_slave_0: entered allmulticast mode [ 163.384344][ T8550] bridge_slave_0: entered promiscuous mode [ 163.464175][ T8682] macvtap1: entered promiscuous mode [ 163.480742][ T8682] vlan0: entered promiscuous mode [ 163.490869][ T8682] macvtap1: entered allmulticast mode [ 163.503558][ T8682] vlan0: entered allmulticast mode [ 163.511440][ T8682] veth0_vlan: entered allmulticast mode [ 163.535836][ T8550] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.556823][ T8550] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.568855][ T8693] netlink: 32 bytes leftover after parsing attributes in process `syz.0.753'. [ 163.607617][ T8550] bridge_slave_1: entered allmulticast mode [ 163.635886][ T8550] bridge_slave_1: entered promiscuous mode [ 163.720812][ T8550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.764943][ T8700] netlink: 36 bytes leftover after parsing attributes in process `syz.1.755'. [ 163.779463][ T8550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.910596][ T5840] Bluetooth: hci0: command tx timeout [ 163.943019][ T8702] netlink: 23 bytes leftover after parsing attributes in process `syz.1.755'. [ 164.004455][ T8550] team0: Port device team_slave_0 added [ 164.029029][ T8550] team0: Port device team_slave_1 added [ 164.098251][ T5497] veth1_macvtap: entered promiscuous mode [ 164.295369][ T8550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.305436][ T8550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.334697][ T8550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.359501][ T8550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.366893][ T8550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.395647][ T8550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.497576][ T8729] netlink: 20 bytes leftover after parsing attributes in process `syz.4.764'. [ 164.516729][ T8731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.763'. [ 164.610605][ T8729] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 164.830007][ T8550] hsr_slave_0: entered promiscuous mode [ 164.851717][ T8550] hsr_slave_1: entered promiscuous mode [ 165.057143][ T8748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.770'. [ 165.385446][ T8755] xt_CT: No such helper "syz0" [ 165.391997][ T8764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.776'. [ 165.992437][ T5840] Bluetooth: hci0: command tx timeout [ 166.415913][ T8550] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 166.447551][ T8550] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 166.468606][ T8550] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 166.496884][ T8550] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 166.753288][ T8550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.808793][ T8550] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.851453][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.858686][ T2907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.912013][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.919201][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.088991][ T8837] __nla_validate_parse: 1 callbacks suppressed [ 167.089010][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.794'. [ 167.178641][ T8837] netlink: 24 bytes leftover after parsing attributes in process `syz.1.794'. [ 167.463964][ T8854] nftables ruleset with unbound chain [ 167.495884][ T8854] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 167.537655][ T8854] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.798'. [ 167.677041][ T8550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.821976][ T8868] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 167.947190][ T8550] veth0_vlan: entered promiscuous mode [ 168.027716][ T8550] veth1_vlan: entered promiscuous mode [ 168.072464][ T5840] Bluetooth: hci0: command tx timeout [ 168.114992][ T8550] veth0_macvtap: entered promiscuous mode [ 168.149437][ T8847] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 168.260404][ T8550] veth1_macvtap: entered promiscuous mode [ 168.393931][ T8888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.458510][ T8893] netlink: 20 bytes leftover after parsing attributes in process `syz.0.810'. [ 168.520156][ T8550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.574754][ T8550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.673018][ T8550] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.712877][ T8550] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.730905][ T8550] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.739639][ T8550] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.869300][ T8918] netlink: 100 bytes leftover after parsing attributes in process `syz.1.816'. [ 169.090809][ T8922] netlink: 'syz.0.817': attribute type 2 has an invalid length. [ 169.105465][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.142099][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.212516][ T8932] ieee802154 phy1 wpan1: encryption failed: -22 [ 169.226730][ T8927] netlink: 'syz.1.819': attribute type 11 has an invalid length. [ 169.256711][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.273733][ T8927] netlink: 224 bytes leftover after parsing attributes in process `syz.1.819'. [ 169.304528][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.003956][ T8947] infiniband syz!: set down [ 170.013831][ T8947] infiniband syz!: added team_slave_0 [ 170.063209][ T8969] dvmrp0: entered allmulticast mode [ 170.192582][ T8947] RDS/IB: syz!: added [ 170.236330][ T8947] smc: adding ib device syz! with port count 1 [ 170.279466][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.830'. [ 170.279544][ T8947] smc: ib device syz! port 1 has pnetid [ 170.383952][ T2907] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.632915][ T2907] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.736759][ T2907] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.830037][ T2907] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.071319][ T2907] bridge_slave_1: left allmulticast mode [ 171.077039][ T2907] bridge_slave_1: left promiscuous mode [ 171.120851][ T2907] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.188886][ T2907] bridge_slave_0: left allmulticast mode [ 171.213954][ T2907] bridge_slave_0: left promiscuous mode [ 171.219864][ T2907] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.568615][ T9018] netlink: 18 bytes leftover after parsing attributes in process `syz.1.837'. [ 171.712908][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 171.728873][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 171.744065][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 171.754077][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 171.763328][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 171.900577][ T2907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.911751][ T2907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.923779][ T2907] bond0 (unregistering): Released all slaves [ 171.938505][ T8999] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.835'. [ 172.141801][ T9019] lo speed is unknown, defaulting to 1000 [ 172.268083][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'. [ 172.320051][ T9026] netlink: 'syz.2.840': attribute type 4 has an invalid length. [ 172.328256][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'. [ 172.593938][ T9039] wg1: entered promiscuous mode [ 172.989587][ T9057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.844'. [ 173.304431][ T9019] chnl_net:caif_netlink_parms(): no params data found [ 173.633299][ T9074] netlink: 52 bytes leftover after parsing attributes in process `syz.1.847'. [ 173.671656][ T9074] ------------[ cut here ]------------ [ 173.677872][ T9074] WARNING: CPU: 0 PID: 9074 at ./include/net/mac80211.h:7748 _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 173.689690][ T9074] Modules linked in: [ 173.694424][ T9074] CPU: 0 UID: 0 PID: 9074 Comm: syz.1.847 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 173.706767][ T9074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.717249][ T9074] RIP: 0010:_ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 173.723791][ T9074] Code: 00 00 00 eb 49 41 83 fd 05 74 30 41 83 fd 0d 75 13 e8 b0 50 e5 f6 b8 04 00 00 00 eb 31 e8 a4 50 e5 f6 eb 28 e8 9d 50 e5 f6 90 <0f> 0b 90 eb 1d e8 92 50 e5 f6 b8 02 00 00 00 eb 13 e8 86 50 e5 f6 [ 173.743540][ T9074] RSP: 0018:ffffc9000f3bef48 EFLAGS: 00010283 [ 173.749856][ T9074] RAX: ffffffff8adafdd3 RBX: ffff88807c514000 RCX: 0000000000080000 [ 173.758104][ T9074] RDX: ffffc9000c139000 RSI: 0000000000000360 RDI: 0000000000000361 [ 173.766766][ T9074] RBP: 0000000000000000 R08: ffff88802b968000 R09: 0000000000000007 [ 173.775378][ T9074] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000000 [ 173.783953][ T9074] R13: 0000000000000006 R14: ffff88807c514180 R15: 1ffff1100f8a2830 [ 173.793589][ T9074] FS: 00007f9c1fb4a6c0(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 173.803489][ T9074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.810119][ T9074] CR2: 0000200000001080 CR3: 0000000076a52000 CR4: 00000000003526f0 [ 173.818829][ T9074] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 173.827460][ T9074] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 173.835763][ T9074] Call Trace: [ 173.839077][ T9074] [ 173.842262][ T9074] __ieee80211_vht_handle_opmode+0x3c0/0x850 [ 173.848333][ T9074] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 173.854072][ T9074] ? __pfx___ieee80211_vht_handle_opmode+0x10/0x10 [ 173.860683][ T9074] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 173.866354][ T9074] ? ieee80211_sta_init_nss+0x8dd/0xbe0 [ 173.871977][ T9074] ? ieee80211_get_link_sband+0x335/0x3e0 [ 173.877759][ T9074] sta_link_apply_parameters+0xbb8/0xec0 [ 173.881038][ T5840] Bluetooth: hci0: command tx timeout [ 173.883896][ T9074] sta_apply_parameters+0x944/0x15b0 [ 173.894620][ T9074] ieee80211_add_station+0x424/0x6a0 [ 173.899950][ T9074] rdev_add_station+0x105/0x290 [ 173.905058][ T9074] nl80211_new_station+0x1723/0x1b40 [ 173.910474][ T9074] ? __pfx_nl80211_new_station+0x10/0x10 [ 173.916165][ T9074] ? netdev_run_todo+0xe1d/0xea0 [ 173.921307][ T9074] ? nl80211_pre_doit+0x4f1/0x930 [ 173.926404][ T9074] genl_family_rcv_msg_doit+0x212/0x300 [ 173.932052][ T9074] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 173.938197][ T9074] ? bpf_lsm_capable+0x9/0x20 [ 173.942939][ T9074] ? security_capable+0x7e/0x2e0 [ 173.947937][ T9074] genl_rcv_msg+0x60e/0x790 [ 173.952552][ T9074] ? __pfx_genl_rcv_msg+0x10/0x10 [ 173.957616][ T9074] ? ref_tracker_free+0x63a/0x7d0 [ 173.962728][ T9074] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 173.968147][ T9074] ? __pfx_nl80211_new_station+0x10/0x10 [ 173.973870][ T9074] ? __pfx_nl80211_post_doit+0x10/0x10 [ 173.979412][ T9074] ? __pfx_ref_tracker_free+0x10/0x10 [ 173.984912][ T9074] netlink_rcv_skb+0x208/0x470 [ 173.989718][ T9074] ? __pfx_genl_rcv_msg+0x10/0x10 [ 173.994907][ T9074] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 174.000819][ T9074] ? down_read+0x1ad/0x2e0 [ 174.005284][ T9074] genl_rcv+0x28/0x40 [ 174.009305][ T9074] netlink_unicast+0x75b/0x8d0 [ 174.014201][ T9074] netlink_sendmsg+0x805/0xb30 [ 174.019037][ T9074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.024412][ T9074] ? aa_sock_msg_perm+0x94/0x160 [ 174.029399][ T9074] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.034802][ T9074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.040157][ T9074] __sock_sendmsg+0x21c/0x270 [ 174.044949][ T9074] ____sys_sendmsg+0x505/0x830 [ 174.049773][ T9074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.055173][ T9074] ? import_iovec+0x74/0xa0 [ 174.059720][ T9074] ___sys_sendmsg+0x21f/0x2a0 [ 174.064518][ T9074] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.069825][ T9074] ? __fget_files+0x2a/0x420 [ 174.074679][ T9074] ? __fget_files+0x3a0/0x420 [ 174.079418][ T9074] __x64_sys_sendmsg+0x19b/0x260 [ 174.084446][ T9074] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.089961][ T9074] ? rcu_is_watching+0x15/0xb0 [ 174.094823][ T9074] ? do_syscall_64+0xbe/0x3b0 [ 174.099829][ T9074] do_syscall_64+0xfa/0x3b0 [ 174.104705][ T9074] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.109948][ T9074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.116096][ T9074] ? clear_bhb_loop+0x60/0xb0 [ 174.120878][ T9074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.126820][ T9074] RIP: 0033:0x7f9c1ed8e929 [ 174.131372][ T9074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.151108][ T9074] RSP: 002b:00007f9c1fb4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.159669][ T9074] RAX: ffffffffffffffda RBX: 00007f9c1efb5fa0 RCX: 00007f9c1ed8e929 [ 174.167734][ T9074] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000007 [ 174.175778][ T9074] RBP: 00007f9c1ee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 174.183823][ T9074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.191903][ T9074] R13: 0000000000000000 R14: 00007f9c1efb5fa0 R15: 00007ffecb30f9d8 [ 174.203214][ T9074] [ 174.206459][ T9074] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 174.213768][ T9074] CPU: 0 UID: 0 PID: 9074 Comm: syz.1.847 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 174.225768][ T9074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.235845][ T9074] Call Trace: [ 174.239137][ T9074] [ 174.242082][ T9074] dump_stack_lvl+0x99/0x250 [ 174.246710][ T9074] ? __asan_memcpy+0x40/0x70 [ 174.251338][ T9074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.256655][ T9074] ? __pfx__printk+0x10/0x10 [ 174.261286][ T9074] panic+0x2db/0x790 [ 174.265211][ T9074] ? __pfx_panic+0x10/0x10 [ 174.269677][ T9074] ? show_trace_log_lvl+0x4fb/0x550 [ 174.274928][ T9074] __warn+0x31b/0x4b0 [ 174.278925][ T9074] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 174.284746][ T9074] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 174.290580][ T9074] report_bug+0x2be/0x4f0 [ 174.294924][ T9074] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 174.300754][ T9074] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 174.306593][ T9074] ? _ieee80211_sta_cur_vht_bw+0x526/0x6e0 [ 174.312431][ T9074] handle_bug+0x84/0x160 [ 174.316681][ T9074] exc_invalid_op+0x1a/0x50 [ 174.321192][ T9074] asm_exc_invalid_op+0x1a/0x20 [ 174.326045][ T9074] RIP: 0010:_ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 174.332490][ T9074] Code: 00 00 00 eb 49 41 83 fd 05 74 30 41 83 fd 0d 75 13 e8 b0 50 e5 f6 b8 04 00 00 00 eb 31 e8 a4 50 e5 f6 eb 28 e8 9d 50 e5 f6 90 <0f> 0b 90 eb 1d e8 92 50 e5 f6 b8 02 00 00 00 eb 13 e8 86 50 e5 f6 [ 174.352104][ T9074] RSP: 0018:ffffc9000f3bef48 EFLAGS: 00010283 [ 174.358209][ T9074] RAX: ffffffff8adafdd3 RBX: ffff88807c514000 RCX: 0000000000080000 [ 174.366189][ T9074] RDX: ffffc9000c139000 RSI: 0000000000000360 RDI: 0000000000000361 [ 174.374252][ T9074] RBP: 0000000000000000 R08: ffff88802b968000 R09: 0000000000000007 [ 174.382236][ T9074] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000000 [ 174.390211][ T9074] R13: 0000000000000006 R14: ffff88807c514180 R15: 1ffff1100f8a2830 [ 174.398205][ T9074] ? _ieee80211_sta_cur_vht_bw+0x523/0x6e0 [ 174.404056][ T9074] ? _ieee80211_sta_cur_vht_bw+0x523/0x6e0 [ 174.409933][ T9074] __ieee80211_vht_handle_opmode+0x3c0/0x850 [ 174.415942][ T9074] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 174.421604][ T9074] ? __pfx___ieee80211_vht_handle_opmode+0x10/0x10 [ 174.428131][ T9074] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 174.433798][ T9074] ? ieee80211_sta_init_nss+0x8dd/0xbe0 [ 174.439376][ T9074] ? ieee80211_get_link_sband+0x335/0x3e0 [ 174.445119][ T9074] sta_link_apply_parameters+0xbb8/0xec0 [ 174.450785][ T9074] sta_apply_parameters+0x944/0x15b0 [ 174.456120][ T9074] ieee80211_add_station+0x424/0x6a0 [ 174.461444][ T9074] rdev_add_station+0x105/0x290 [ 174.466401][ T9074] nl80211_new_station+0x1723/0x1b40 [ 174.471731][ T9074] ? __pfx_nl80211_new_station+0x10/0x10 [ 174.477397][ T9074] ? netdev_run_todo+0xe1d/0xea0 [ 174.482397][ T9074] ? nl80211_pre_doit+0x4f1/0x930 [ 174.487447][ T9074] genl_family_rcv_msg_doit+0x212/0x300 [ 174.493027][ T9074] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 174.499120][ T9074] ? bpf_lsm_capable+0x9/0x20 [ 174.503895][ T9074] ? security_capable+0x7e/0x2e0 [ 174.508850][ T9074] genl_rcv_msg+0x60e/0x790 [ 174.513382][ T9074] ? __pfx_genl_rcv_msg+0x10/0x10 [ 174.518424][ T9074] ? ref_tracker_free+0x63a/0x7d0 [ 174.523483][ T9074] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 174.528869][ T9074] ? __pfx_nl80211_new_station+0x10/0x10 [ 174.534533][ T9074] ? __pfx_nl80211_post_doit+0x10/0x10 [ 174.540010][ T9074] ? __pfx_ref_tracker_free+0x10/0x10 [ 174.545408][ T9074] netlink_rcv_skb+0x208/0x470 [ 174.550180][ T9074] ? __pfx_genl_rcv_msg+0x10/0x10 [ 174.555216][ T9074] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 174.560556][ T9074] ? down_read+0x1ad/0x2e0 [ 174.564984][ T9074] genl_rcv+0x28/0x40 [ 174.568984][ T9074] netlink_unicast+0x75b/0x8d0 [ 174.573768][ T9074] netlink_sendmsg+0x805/0xb30 [ 174.578561][ T9074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.583859][ T9074] ? aa_sock_msg_perm+0x94/0x160 [ 174.588807][ T9074] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.594123][ T9074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.599434][ T9074] __sock_sendmsg+0x21c/0x270 [ 174.604129][ T9074] ____sys_sendmsg+0x505/0x830 [ 174.608905][ T9074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.614218][ T9074] ? import_iovec+0x74/0xa0 [ 174.618752][ T9074] ___sys_sendmsg+0x21f/0x2a0 [ 174.623445][ T9074] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.628699][ T9074] ? __fget_files+0x2a/0x420 [ 174.633299][ T9074] ? __fget_files+0x3a0/0x420 [ 174.637994][ T9074] __x64_sys_sendmsg+0x19b/0x260 [ 174.642950][ T9074] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.648442][ T9074] ? rcu_is_watching+0x15/0xb0 [ 174.653246][ T9074] ? do_syscall_64+0xbe/0x3b0 [ 174.657934][ T9074] do_syscall_64+0xfa/0x3b0 [ 174.662446][ T9074] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.667667][ T9074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.673744][ T9074] ? clear_bhb_loop+0x60/0xb0 [ 174.678451][ T9074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.684361][ T9074] RIP: 0033:0x7f9c1ed8e929 [ 174.688783][ T9074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.708412][ T9074] RSP: 002b:00007f9c1fb4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.716842][ T9074] RAX: ffffffffffffffda RBX: 00007f9c1efb5fa0 RCX: 00007f9c1ed8e929 [ 174.724837][ T9074] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000007 [ 174.732813][ T9074] RBP: 00007f9c1ee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 174.740790][ T9074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.748763][ T9074] R13: 0000000000000000 R14: 00007f9c1efb5fa0 R15: 00007ffecb30f9d8 [ 174.756770][ T9074] [ 174.760123][ T9074] Kernel Offset: disabled [ 174.764456][ T9074] Rebooting in 86400 seconds..