last executing test programs: 3m52.789820556s ago: executing program 3 (id=4198): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b19ccccf84f531d9ec2135f5f8db4627", 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r2}]]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000881}, 0x4004044) 3m52.378553598s ago: executing program 3 (id=4203): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x56, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4bdf700202c00fe800000000000000000000000000082ac8ae00000000000000502000600000097f9ee430062000100000000008100907800000000"], 0x0) (async) syz_emit_ethernet(0x56, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4bdf700202c00fe800000000000000000000000000082ac8ae00000000000000502000600000097f9ee430062000100000000008100907800000000"], 0x0) socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000600)={{0x0, @private=0xa010101, 0x4e20, 0x4, 'dh\x00', 0x2d, 0x3, 0x21}, {@multicast1, 0x4e24, 0x1, 0x8, 0x401, 0x7f}}, 0x44) (async) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000600)={{0x0, @private=0xa010101, 0x4e20, 0x4, 'dh\x00', 0x2d, 0x3, 0x21}, {@multicast1, 0x4e24, 0x1, 0x8, 0x401, 0x7f}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) setsockopt(r0, 0x7, 0x7fff, &(0x7f0000000500)="ddd07baecf4cc426a32c6de69a11246662a90137f6e6c8be03de5898b49eeabe2d7e4358871818df3158713e59bf9ae478bde41d2abbd9b9aec58021a9d29539bb58905a53b682ee64c35789a514a0662c4347a976a826e0a05883a3f719b1e4557a8076609c5b8cd8fde6d15e7ccdfa72a60e7c4c59bbf283ef55e2d91e7cbc41bae64cc6d760b621f35ee31f2d6abee0c4eef9221b4fc7e0c9a107062975c55541601e41", 0xa5) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000000)=0x18, 0x4) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000000)=0x18, 0x4) bind$netlink(r8, &(0x7f00000002c0), 0xc) (async) bind$netlink(r8, &(0x7f00000002c0), 0xc) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="07000000880004000900000000000000", @ANYRES64=r4, @ANYRES64=r5/1000+60000, @ANYRES64=r6, @ANYRES64=r7/1000+60000, @ANYBLOB="000000a001000000040000000703000068e1143455b6fb0e"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x8005) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@getqdisc={0x28, 0x26, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0xe}, {0x0, 0xb}, {0xfff1, 0xd}}, [{0x4}]}, 0x28}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@getqdisc={0x28, 0x26, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0xe}, {0x0, 0xb}, {0xfff1, 0xd}}, [{0x4}]}, 0x28}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x62) (async) bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x62) recvmsg(r9, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40000151) r10 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r10, 0x1, 0x1e, 0x0, &(0x7f00000004c0)) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'caif0\x00'}) r11 = epoll_create1(0x0) r12 = socket(0x1, 0x80802, 0x0) r13 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r13, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r13, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r13) shutdown(r12, 0x0) 3m52.048251669s ago: executing program 3 (id=4207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)={0x40, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x23}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8fe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x8, 0x1, 0x10, @private2, @mcast2, 0x7800, 0x80, 0x1, 0x2}}) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000001) 3m51.952035796s ago: executing program 3 (id=4209): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000740)={&(0x7f0000000480)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xb}, 0x1c, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000029000000370000003c000000000000001400000000000000290000000b000000000000050000000018000000000000002900000004000000840000000000000024000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x000'], 0xa0}, 0x4000000) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="eb7a2bbd7000fcdbdf25210000000500200001000000058020000100000009001f00706879310000e30005002000010000000c0005000200aaaaaaaaaaaa0a0001007770616e9634953300000005002000000000000c0005000202aaaaaa"], 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000580)={r3, 0x7ff, 0x4, 0xfffffffd, 0x2, 0x5}, 0x14) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'dvmrp0\x00', 0xfffffffffffffff9, 0x7f}) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={r3, 0x1, 0x10, 0xc8, 0x8}, &(0x7f0000000040)=0x18) 3m51.754798614s ago: executing program 3 (id=4214): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0x143, 0x80, 0x88a8}}, {0x28, 0x1, {0x3912, 0xf31, 0x7f, 0x8100}}]}]}]}]}, 0x68}}, 0x24040800) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0x143, 0x80, 0x88a8}}, {0x28, 0x1, {0x3912, 0xf31, 0x7f, 0x8100}}]}]}]}]}, 0x68}}, 0x24040800) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv6_newroute={0x1050, 0x18, 0xa10, 0x70bd2d, 0x25dfdbfb, {0xa, 0x14, 0x90, 0x80, 0x73049d6abc45f9ed, 0x4, 0xfd, 0x9}, [@RTA_IIF={0x8, 0x3, r2}, @RTA_METRICS={0x1004, 0x8, 0x0, 0x1, "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"}, @RTA_UID={0x8, 0x19, r3}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private2}}, @RTA_IIF={0x8, 0x3, r6}]}, 0x1050}, 0x1, 0x0, 0x0, 0x10}, 0x480c4) 3m51.110493253s ago: executing program 3 (id=4225): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x2c, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xffe0, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x2}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x88c0) 3m50.626155246s ago: executing program 32 (id=4225): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x2c, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xffe0, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x2}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x88c0) 2m40.029678874s ago: executing program 5 (id=5108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x5, 0x0, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0x4b, 0x0, &(0x7f0000000040)) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r8, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4078, 0xfee}, {&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f0000000100)=""/120, 0x78}, {&(0x7f0000000180)=""/226, 0xe2}], 0x4}, 0x5}], 0x1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000062010b0000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 2m39.756636828s ago: executing program 5 (id=5113): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000008000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000100000000000000001000"/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', r0}, 0x18) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2b, 0x80801, 0x1) (async) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}}, 0x1c) getsockopt$inet6_int(r5, 0x29, 0x10, 0x0, &(0x7f0000000040)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r1, @ANYRES64=0x0, @ANYRESOCT=r2, @ANYRES8=r4, @ANYRES64=r3, @ANYBLOB="0000000000000400000000000000000000000000000000007489d4b2"], 0x50) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r7, 0x84, 0x84, 0x0, &(0x7f0000001080)) (async) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r3}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xd, 0xb, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, [@alu={0x4, 0x0, 0xd, 0x0, 0x9, 0xc, 0xfffffffffffffffc}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r9 = socket(0x10, 0x3, 0x0) (async) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xffffffffffffffcb, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r6], 0x28}, 0x1, 0x0, 0x0, 0x10040000}, 0x0) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) 2m39.569831542s ago: executing program 5 (id=5116): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000043c0)={@empty, 0xe, r3}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x0, 0x4e22, 0x200, 0xa, 0xa0, 0x20, 0x32, r3, r4}, {0xca0, 0x3ff, 0xb2b7, 0x4, 0xffffffffffffffff, 0x0, 0x6, 0x3ff}, {0xb261, 0x80000001, 0x1d4a, 0x3}, 0x8002, 0x6e6bb6, 0x0, 0x0, 0x2, 0x3}, {{@in6=@loopback, 0x4d5, 0xff}, 0x2, @in=@local, 0x3505, 0x4, 0x3, 0x0, 0xc77, 0x3, 0x40}}, 0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@private1}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x6, 0x8, 0x39e4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r5 = socket$kcm(0x21, 0x2, 0x2) pipe(&(0x7f00000007c0)={0xffffffffffffffff}) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000350000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdaebf39f5d5e2c5dec1e666c3a573"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000001f00)={0x121c, r9, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x5, 0x5}}}}, [@NL80211_ATTR_FRAME_MATCH={0x33, 0x5b, "e916f8de20fa672805afffde8782fa09427567e3e8f4faa9576465ba701791cf4c5af42bbf4a6c0b700bb6dc53e8ac"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_MATCH={0x86, 0x5b, "694ea6b713ce42a3d905b9df31966c4d3798db12018f710d60441a7d43530c8ebf81e20a88e70915aaec5273454eaf7b0512e9c74f9dc892e0ecfcdcd9d3dc16a80a731cb254b19250bc688b4f4b72b2a5af4ba48a2152cdbce28cebbd431f9b1f9163c29b7b2e3186c4cd62e28d51d565f5406c30018f1726cc7c53b1b9c80e6e36"}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_MATCH={0x9d, 0x5b, "0e654cdae4825d1d6be5dde1bf3e9a3fa4b6319123fb869607627e36adcd69555007cf7ad7f6e9f50ad6c164961b626695358c369540db366455c2a7ba5c5f75a808f7b0ad2bfe205033ad066bb31d98f3ecfef523b6576af18a1c2c1f8191aa96963f7d631a567666679024abc0d6c32cccc2f1acc0fbd8c50407ba19ae51012573d699d57bac7ee249b17877cd2fb01538acbb73521a0817"}, @NL80211_ATTR_FRAME_MATCH={0x8b, 0x5b, "52096b7a92fc48fa04290602468163dcdfc1eef3afe79e61e70d86c7836988350c27b6925a8a9dac77615f25e5624a582edc4823cd2897af8c038f8972df7f60934b72585e0ad27e127d995cf5598214a9269a5be97c75738f172cb643e6882f1d62c2f4a80d48497d71be843c351c9744f97a92da4a66a898d5ca6f7d30d76bc2c96a266e0ee7"}]}, 0x121c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000100), 0x8) sendmsg$inet_sctp(r8, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)="b7", 0x1}], 0x1, 0x0, 0x0, 0x280440c4}, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_IFALIAS={0x14, 0x14, 'pim6reg\x00'}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4686}}, @call={0x85, 0x0, 0x0, 0xc9}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x90) 2m38.557079347s ago: executing program 5 (id=5131): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x23c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000015b40)={0x0, 0x0, &(0x7f0000015b00)={&(0x7f0000015a40)={0x34, 0x13, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x34}}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010001280090001006c61737400000000080003400000011014"], 0xb4}}, 0x20050800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x1, 0x8, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x0, 0x4}}}}, 0x30}}, 0x2c040880) 2m38.236284561s ago: executing program 5 (id=5137): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x40}]}, 0x2c}}, 0x20044000) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x1e2600, 0x4) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x24, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40045) 2m38.063992504s ago: executing program 5 (id=5141): unshare(0x26020480) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 2m37.142691137s ago: executing program 1 (id=5150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000003b80)={0x1c, 0xc, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) close(0x3) 2m36.961849401s ago: executing program 1 (id=5153): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000611924000000000095000000000000000401a1aa2be96bb7a940267fb0e31a4fed479be0fd210d7c71e6c736494cd84d69020c373cd41a5d74601b62fc0c54b654dc32376badea6bf174"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000611924000000000095000000000000000401a1aa2be96bb7a940267fb0e31a4fed479be0fd210d7c71e6c736494cd84d69020c373cd41a5d74601b62fc0c54b654dc32376badea6bf174"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)={@map, r1, 0x24}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)={@map, r1, 0x24}, 0x20) r2 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet_sctp(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f00000003c0)={@val={0x1c}, @val={0x0, 0x5, 0x0, 0x300}, @ipv6=@udp={0x0, 0x6, '\'\vB', 0x18, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @local}, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}, 0x4e) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x44001}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300002a00028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}}, 0x8000) 2m36.630027109s ago: executing program 1 (id=5158): pwritev(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000200)="05c1624a9c94bbe85b5bd1d3f7642890f3dc406ff7269212fd1004faca96ac6f3d32eefd13c19c11b5959d6d67a3614de08eafeed3036f55777cd972628717135c5348f9f7562e2efc1d4ccd62243462b8c3a53e6fc2b5c18c93bc43fc00c00787040609aacdb5efd8017cc7641e2b8dcb6f8717337968861fc89406b837343aac3c8b734ca62950df6444f19a9ec80dd415baa4c07f6a6b7cb27b4e43e825673307375f0f2bc38ce6350ad09d1ca3804bb8b51205801d94745e56e0eeafd2558735f40204", 0xc5}, {&(0x7f0000000300)="a5039f84f1473782ab9caa047888dcc08b79df629964ec7620f3425e2fdb34a9949fc74a417147d7d2f5600c610a06a595b8eadf26c1f60957a55e52caa19b85600973f859bde7713531dd4699104133fe18eca465f8ac0caebf2a328258ec88972bf9afcfe91d9e92742f085056ab2025298ebe95d5506c81c900c15f06eb82cf9b5134f7547ffb699e248c0ca477e2a015ac0e625f194a8af7a14ecae6f117f75b1317599a578aee984186a0d396495e435772f019182355ce2ae96031fe44bd5c4cc3850925e742d07297086bb287f5", 0xd1}, {&(0x7f0000000400)="14bf22fa572cc17731ec736feabfe2c6cc2c581ad8db3a31dfdfb2c0849973d616a1d58803d1ae5fe931ce370f9d695de549b2d7d4f6fa771ff4ef01caa0fc42ec1c0371a4723395066c0c4c40577e53654809e77e0a4c35a5d212732ce08ac59a8d170aadea97efb111eeb09b215242b0f571c9284c4915b0d8577522db2f0801ea1f6105197d7648a21fe71643d5af5bec68666f150f3315495059ee3723eec114ce7d3a6ef94cd97e337216b8fbbb41716476a1b29158904e1c78f62a3d69ab671984bdcce9c120c88cd23d71e8a3738bf00d27ca6799745df9ee28fb55dead060a94bddc955448", 0xe9}, {&(0x7f0000000000)="defbb0be165167f8b205bcfdedcf8676c096cfaf4b9c1c813b8bca69ee3699afa54145cb0d4821dbbdfc6a303ae7aeff02a602dec78c34df1fdfe4e4fe95cf8bc10060d7f4412ea0f88be8", 0x4b}, {&(0x7f0000000500)="b7edffa3a421941a835f136069471e4945ce660e9197e1b52ad8875f17f41471d789ffbba5c23c8bb03cefb56a5c60685ef9a937b128e13d0d63c263fd9c6fcfa6620ff20140f2824af9ff1c4f4db0b0a9", 0x51}, {&(0x7f0000000580)="60204f386dcbfeb01ef5ff2563aa61f5a66e1448638859b1743f0e49f3e5f8b582656009eba1729b7a5a56e024c82a0197217c387bbc1b00055bf92cd37c826923972792d94fb69a1283d262fc8bea29164e9b1f979ecc51fceaf161e5901922ab24c8caa59c09ede4e5aaf35e0a756dba459466bee8c1b3c61b04d852551112cbc604cb9886205f17d70d651839c4514fa72b2792abd35f4a35172bfea55a16bd5c791e172278606585b795de2dce197351f10d65846e22754913d79575494c672a", 0xc2}, {&(0x7f0000000080)="c530", 0x2}, {&(0x7f0000000680)="b2d1d13b45cff7a55603af810448d649e187e0c148e18271ee94a5881829e7493c1328e3921c0dc7c9b6c6113571c2e6ce3d06b500794fe78aa5591feffa946f429fb2739c75044c3d53aa113e324524620b71a301e0490bb71d2fe192a6e7191121bd20c6837a1cf27813998c0a8b2c6c", 0x71}, {&(0x7f0000000700)="ea7d434717ee02a3096516b63350a1f657b172248247f4df6933115b26f14a13cfc0d9713b038507b4dc84113342bad3c83d106d399647df0a0239be64de6575c27128fcb7f9dc5f9b520b566a205148804f7c762e1e5055520a2138a09a3856abadf4c2321b34ba763af8bf92101a26a1b0f56a6383b3d4fe0db4adc39ce1bd297fd889a3580517892a2062199a4e560c19fcb2c7483b3d50faefe6a84b80767d8b9b04ed78de6c7e6e7910309087e3684bc049fe2274c467fc0ee6de0b9f", 0xbf}, {&(0x7f00000007c0)="f40208f756be9d1e539a38852b0659a59ae4010e046d7f5941b3b9886e18822d0ce501682c3270562659963a95715fa6a28696675a1f97fc024882701b665777ab5b5a00dbd5fc89a7fbfb12a7a0b2ebbd35ca61e702c059b2c666dd4d19b8b8d2c25def13f28f87291080899bab08752eedba9e8bdfb9281b935b2727b3884ba371762438ba7b855c8f9f88a790765a92a53432b5f860a0ae05823e9cd3b2a3e6a409086e06f0658df39a9c25237fc1fc90e2cab9010b7224e92077a134484cd5bd35081fbcc1e3f35fa121a6562ae4c56cf06140c7ca4f46243a6bef5f69d7e0017d5fce5b9c68d2fd4bc18545c8cc32c72c", 0xf3}], 0xa, 0xd, 0xb0) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x5, 0x0, 0x0) r2 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x10, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x7}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0x38}, r5}, 0x14) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'vlan0\x00', &(0x7f0000000980)=@ethtool_dump={0x3f, 0x9, 0x1ff, 0xb1, "c8d43047910dbaa2aa9436d6be5d7657e1562334f48525c769ecfee7d73901c0b4e4e4aff4e35933379467d16ede8f84582bdb4b697259b90e547de82abefba1573e069669c753e07c65cdc1dc1ad6a6b0448cb370afe54e0f1fcdb52066bea07297841730f3bd8f64e2613a9aecc48936a25655d692ef900bbc1aea43fad97b45625c7a63eddce1e83e148505ef01748000c024078e4f73970ed940252ee25d743e0401403f847ec0dbc71c689ff457cf"}}) 2m36.445328218s ago: executing program 1 (id=5161): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xe000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f00000001c0)) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x30, r4, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x770}]}, 0x30}}, 0x4000014) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x4000800) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r5, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x28}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200040c0}, 0x24008014) ioctl$PPPOEIOCSFWD(r0, 0x40047459, 0x0) 2m36.028181104s ago: executing program 1 (id=5165): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x7, 0x1, 0xc, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r6 = socket$inet(0x2, 0x801, 0x0) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000000080)={0x33, @multicast1, 0x4e24, 0x0, 'fo\x00', 0x3a, 0x93, 0x6f}, 0x2c) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r12 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x201}}, @init={0x18, 0x84, 0x0, {0x9, 0x7, 0xd, 0x434}}], 0x48}, 0x0) getsockopt$bt_hci(r11, 0x84, 0x84, &(0x7f0000000040)=""/4146, &(0x7f0000000000)=0x1032) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, 0x0, &(0x7f0000000800)) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f00000003c0)={r9, 0x68}, &(0x7f0000000400)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f00000000c0)={r9, @in={{0x2, 0x4e21, @loopback}}}, 0x84) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket(0x2, 0x80805, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000c000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) close(0x4) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x20, r1, 0x1, 0xfffffffd, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x44040) 2m35.656174193s ago: executing program 1 (id=5169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x100000c6}, 0x24000010) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x3, 0x2}}, 0x14}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @dev}], 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) 1m56.112627142s ago: executing program 33 (id=5141): unshare(0x26020480) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 1m56.11245832s ago: executing program 34 (id=5169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x100000c6}, 0x24000010) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x3, 0x2}}, 0x14}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @dev}], 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) 1m33.367701126s ago: executing program 7 (id=5532): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) bind$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x9, &(0x7f0000000140)=[{0x800, 0x10, 0x1, 0x2}, {0xdd, 0x3, 0x7, 0x8}, {0x1ffc, 0x9, 0x4, 0x10000}, {0xff, 0x40, 0x38, 0xd}, {0x8100, 0x1, 0x7, 0x2}, {0x8, 0x0, 0xd, 0x1}, {0x10, 0x3, 0x3, 0x7}, {0x6, 0x2, 0x39, 0x4}, {0x0, 0x8, 0x5, 0x40}]}, 0x10) (async, rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2f0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x2, 0x27, &(0x7f00000002c0)=""/39, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x3, 0x9, 0xe5, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000200)='ext4_writepages\x00', r1, 0x0, 0x7}, 0x18) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000480)={r0}) recvmmsg$unix(r2, &(0x7f0000000e80)=[{{&(0x7f00000004c0), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000540)=""/177, 0xb1}, {&(0x7f0000000600)=""/109, 0x6d}], 0x2, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)=""/4, 0x4}, {&(0x7f00000007c0)=""/135, 0x87}], 0x2, &(0x7f00000008c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000d80)=[{&(0x7f00000009c0)=""/113, 0x71}, {&(0x7f0000000a40)=""/109, 0x6d}, {&(0x7f0000000ac0)=""/5, 0x5}, {&(0x7f0000000b00)=""/237, 0xed}, {&(0x7f0000000c00)=""/96, 0x60}, {&(0x7f0000000c80)=""/203, 0xcb}], 0x6, &(0x7f0000000e00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}], 0x3, 0x40, &(0x7f0000000f40)={0x77359400}) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000fc0), r9) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x38, r12, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x38}}, 0x800) (async) pipe(&(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001100)={0x0, @rand_addr, @initdev}, &(0x7f0000001140)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r13, 0x89f0, &(0x7f0000001200)={'ip6_vti0\x00', &(0x7f0000001180)={'syztnl2\x00', r14, 0x29, 0x1, 0x3, 0x7, 0x28, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x1, 0x700, 0x3ff, 0x9}}) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r11, 0xf502, 0x0) (async, rerun: 64) sendmsg$IPVS_CMD_NEW_DEST(r8, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0xc0, r12, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x186f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x38}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async, rerun: 64) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001400), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r15, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x40, r16, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r17}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c9c1}, 0x4000) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r15, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x3c, r16, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xd}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r17}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x8001) (async) socket$netlink(0x10, 0x3, 0x9) (async) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000016c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, r18, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r19}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x8880) (async) sendmsg$NFT_MSG_GETRULE(r10, &(0x7f0000001980)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x40900002}, 0xc, &(0x7f0000001940)={&(0x7f0000001800)={0x12c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_USERDATA={0x6d, 0x7, 0x1, 0x0, "cc3a4d0c8e9e8c0ad3403689ffc52816d5c092aea0b08f70772aec7b34a2fdd851739ef069ca772abfec051511b6ee82e3d3b1acf4b65129ecdeeba28e849e365bd8c5adc96dd6a6c3d879873c01395b5f145ca527a7b3ee5d957b6a7cf4ea2a13f025d570d063c58a"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40005}, 0x801) (async) r20 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a00), r6) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x38, r20, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x34}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000005) (async) r21 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000001b00)={0x0}, &(0x7f0000001b40)=0x8) (rerun: 32) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r21, 0x84, 0x1b, &(0x7f0000001b80)={r22, 0xd2, "c78ea228f96388957c8cb9f34f2347e2cf64dc70bb4c6ac9e2e910f34d3a05b70a4140a9467fce099accb9a42e8f4f71868dfe6b2e35aed8637d5934e9459386551f5fa98d381b9e3ad7fd7cf2d0e22fed555dda39fc4820cfd1d5fb56dab6ce0601df013a1ad6e1c5ef085225a687b82a92fe3b59b1a48efb6d021d76532a1178d483406de7f1cb51fac854fe8a203a9bf48151d7449d5f43984e087f4e25c76aaba548d97829a7e6d534a4ad4a4a8a619b98bd5d50855aca80e9a46a1d5cc2bbfef97f74d9994a1a7274c5e465111af47c"}, &(0x7f0000001c80)=0xda) 1m33.247007792s ago: executing program 7 (id=5534): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040)) 1m32.962728829s ago: executing program 7 (id=5540): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x3, 0x0, 0x1, {0xa, 0x4e21, 0x480, @dev={0xfe, 0x80, '\x00', 0x40}, 0x1}}}, 0x32) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast2}}}}, 0x0) 1m32.618484753s ago: executing program 7 (id=5543): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000140)={'batadv0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) syz_emit_ethernet(0x62, &(0x7f0000003480)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x28, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @dev={0xfe, 0x80, '\x00', 0x3a}}}}}}}, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) 1m32.610996879s ago: executing program 7 (id=5545): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000171102a00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00000001000130728bd700000000000ac1e01010000000000000000f5ff0000ac1414aa0000000000000000000000004e23000100000000020000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb00000000320000002001000000000000000000000000000100000000000000000000000000000000080000000000000001000000010000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fcffffffffffffff0c000000000000000000000028bd7000000000000200"/168], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000000), 0x4) close(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$packet(r4, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b04697a4", 0xfffffffffffffe20, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)=@ethtool_channels={0x1, 0x4, 0x4, 0x1ff, 0x3, 0x7fffffff, 0x80, 0x101, 0x8}}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080)) 1m32.335582386s ago: executing program 7 (id=5548): unshare(0x26020480) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async, rerun: 32) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r1, 0x0, 0x3}, 0x18) (async, rerun: 32) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (rerun: 32) r3 = socket$inet6(0xa, 0x5, 0x0) listen(r3, 0x800803fc) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) shutdown(r3, 0x0) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, 0x0, 0x0, 0x2, 0x0, "4878a157a831be56c6bfc121a065a3df37d61cc1df06b264c1edb92faed348fc2b8755c2ec6e8048704b7d2bda66bbfddc944892e42b2fe3f5f7276fe29d93994f072e16529a908a7eae14072d638fd0"}, 0xd8) 1m17.263031417s ago: executing program 35 (id=5548): unshare(0x26020480) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async, rerun: 32) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r1, 0x0, 0x3}, 0x18) (async, rerun: 32) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (rerun: 32) r3 = socket$inet6(0xa, 0x5, 0x0) listen(r3, 0x800803fc) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) shutdown(r3, 0x0) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, 0x0, 0x0, 0x2, 0x0, "4878a157a831be56c6bfc121a065a3df37d61cc1df06b264c1edb92faed348fc2b8755c2ec6e8048704b7d2bda66bbfddc944892e42b2fe3f5f7276fe29d93994f072e16529a908a7eae14072d638fd0"}, 0xd8) 2.840777859s ago: executing program 2 (id=5956): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003b150c00000000000000000000006049d01fbb53dd12eeb34d10bd6e0fe25a82a3cc18dd9d97e7dcebda330f1ff22de229dc662d9d64d5fdc5f08c46594a23e4937c99ba17d15311dfb77983c25e86e7af1f6c", @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x40}}, 0x48010) close(r2) 2.827597973s ago: executing program 2 (id=5959): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) (async) setsockopt$inet6_int(r1, 0x29, 0xc8, 0x0, 0x0) (async) socket$inet6(0xa, 0x80000, 0x200) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x4, 0xfffff020}, {0x6}]}, 0x10) 2.825469273s ago: executing program 6 (id=5961): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_ts_info}) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8850}, 0x24000000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="070600000000000000c9000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="03000000030000000300"/28], 0x50) 2.819153005s ago: executing program 2 (id=5963): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4b}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000080)={r3}, &(0x7f00000001c0)=0x8) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000040)={0x0, 0x64ceef03d81ddb0f, 0x7, 0x0, 0x10001}, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="90000000040a03000000000000000000000000000a000700726f757465000000580008800c00014000000000000000000c00014000000000000007ff0c00014000000000000000000c00024000000000000000000c00014000000000000000060c00014000000000000000020c000240ffffffffffffffff0b00070066696c74657200000900030073797a3000000000c5a2c69b8ca61b5628cc1577f2f4f2640a0f99413c175d0ac99dbfa766acd91b48d43196310cc5cd80914d"], 0x90}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0x1, 0x0, 0xf, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@fallback=r0, r0, 0x3e, 0x4, 0x0, @void, @value=r0, @void, @void, r5}, 0x20) bind$rds(r4, &(0x7f0000000240)={0x2, 0x4e23, @multicast1}, 0x10) 2.627710788s ago: executing program 2 (id=5964): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711215000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000900)='ns/net\x00') r4 = socket$unix(0x1, 0x5, 0x0) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r6 = accept$ax25(r1, &(0x7f0000000940)={{0x3, @default}, [@rose, @rose, @bcast, @bcast, @null, @rose, @default, @netrom]}, &(0x7f00000009c0)=0x48) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000b40)={0x0, 0x0, 0x0}, &(0x7f0000001f00)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001f40)={0x0, 0x0}, &(0x7f0000001f80)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001fc0)={0x0, 0x0, 0x0}, &(0x7f0000002000)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002040)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000002140)=0xe8) sendmsg$netlink(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000bc0)={0x1318, 0x12, 0x100, 0x70bd25, 0x25dfdbfb, "", [@generic="cc3cb5112e8f2c446e34086bb446c99ce9d5cd913d53a580271a4b177662dfb407e75ba31a9ef39c199a9b63afd065ec268c79d8393b204a6a55699838e59b67953a205c71f6383d49a7005b6f115c503eeeed8a065fd54bae194ba243944f2026685d1560013ffca7fb8aac324637525615410d018d4ab66efe55e0135a8e883f6b09e7b1f7d24579d7192227eceb321de462408363baf7b2b72ca695b868309c759e29684f9a99d83f8b1ed6cee30aceb80238a331713d537b7a8da69419087888decc74ba1a0cca784970904f1ef9df2f83522121e36f631185604a12b87c7a8b2fc1eb4c88", @generic="abfa62bd5dd2e08eda8f89e25e7853bc8f0ada1884b5bd7403310813eccd605cf8579738ecb8fdc530764fcdb0a46e3c9cb0f4a3909df6b1d12d5b5920d318f878c5aafdb217a7496bc293393e0ab159b6c02f51e2ddc180f4f9454b16f5d075a3174ff53e78cb12e9ae2a6fe2ab3b8db5e2a7631b31edb99d5e63af7f9a8383c4f1b4d2d9aba792894bfc102909889b36bd", @nested={0x18b, 0xd3, 0x0, 0x1, [@generic="c9a97325fa577b7b709828f9c05a2d15fd9b9574cc0779e2e29ff440a8fc582cdee1d26a1d6e261cf9421180fc5d74bb25e911ecfa0085b76dbe69947825428da24a965878a515c69541a7807772456d7debc974446e62c83bb11a224fa92405557a0391a0344c4a1adb7719e06bb165c8ef2e123ac16963949b4f76f4f647b3549b7665d225110dad0ea20c5488191475859fa7effaeb9b3aa2818e129131eb34eba72895851216db946d44a8b427c81c1f8c989e93fd222d8cb802d1c19c97f0abb61752cafbee7dc6f5caf186a3b2b4e229d70bdc0ab48123173d56b351e044f96a2870000506bb4bdbb10830a6b5ce9a3a5494", @generic="0335a4eaf0ac42a324fee68d472765893cf890d52215e0405e61e259c162ecb69ccc0a1f31fea3d515580ba6d01d4567d06ca65316f4aa7177802567b93e948f7a0ea212bff8047045d21c57244d579bf87bc0f7df2f9341e2825df0e600e581d07df39f52bdeb1d869f13b660778c462b7b357ddd465cdc31fb10bcf9d1d1c1e94444c6b47943f1f0e7c5fcf545902166cc"]}, @generic="2de1410b7eda9d9aeb7a835c276053915ee515eec5e9d91a1f8dc4a37182f542709535b9e011009e459c80b9cd165bba7417824af671738cfcbd169a604a145827fb85cf9b088870f2afcf08b6bfe700ab0c7962c3c4dad0e5f773e4eefa228d7cf4ed0eb80ef6b6d7e9a635d2dc489f2d94453707ab2d29fdc5c9dd29fb5e9c59e42e377025e8e57e353ddceb18e556e375b1d797392dfea04bf77902dd39318bf8ff6fc2020bff052fcf55d3b0772e356935f74064e52718c50bb23bc9819fa602b45695201077f2927d8b6cc9245ceb56a75848627c561af877b3f980d2e8b91c13e0bed95a6ee61fbbde7935733abe04652e2b1fedcb04fac44023293469db01d3c0fd7bfcfddfd060b8a62abeec0dc43ab9b094a132dc93fafbce6cced07d28595a5d28b114cc39b0144c96874abd7426d5ee2d5c1b79bcb660257f7b24a9a229bd0c5fd508284c330a91a7fd68f49d6157f4ad15367f94bc2491d0d35c854ab3695caf5f1472668586761fe55778231c8293cb24d14b452e4ee9faa565beba2de4ca04ce5bb6b5c79b9ec5924f4710fb80026c1466ac74002f628ecb9a380d4cbdb4a2eeae22b7884d2d53bd7d2af520706fc708c64ae1e1d885796646c970bec97e20f6e85dbdb0fc5f7e6ca69e8c90fb7efbaa4c6f8367a0a04d0982becdaf68bb341918232417a9b19d56e841c5c3e4fd04402bda8c73d2d224a7ebbbe36c1e6cbfaf68daa60d84392899793bf759f70e5516f579a0c73fe73a6ba16f6bb521b9961671b0cf334db8ba8a557091deb9d1e96edc9001b68d5aa873b945cd3120a6bfee465fbe836ada69706c0b6f9f1f029c803cd467cd1b3bdb6b2b4a35a8e032924801b002f1e385e56232429b39795236c97ea23709f7086b6156ecaddcfd9493696a6ecbfefb6545b4197c400523553e91cb19cd5027e6b31eba4acce097898add06157c7db6ef498f76a6b26f10818e72d3a6959b76484fe039711803d97e657ee0b0f116b3b4cd1993db0fa7c675ac4af4ae279bd9f8be1ac68acdc4012166e02882ad5f52b985a3edf86fa447a2e833b9641a9e1986eacfe1e0403485e60803465aaae246834a53dc55f0dbac8251e7c82ee559484dbbc83f7cef4eef181ecc0888f72b34090b9657f816c4fd8336ec306a27832dcd8ba3447283719d922b5855fc4cdf30c2cee331bdaafc5c40948af24123fea7930ed24b6edf309d9aff9a600c351f7346fac879f084ef5974d3c42495abfdc05053b6df5a9bf597a1044b95b8524b568e8fb51ecb1383cb2af1aee327242b247ae1695dbca6fd11822b46b9174dd7e1cfe41c1257ab24d4459fc15c9bd1a00f87c2a514c1591bccbfe1a3e53a2b1c12952ea7595c8e9b97a4a237c925de40ffae5932d84e08f372cb430701aa75c23a9f8a0d62d7864dc66d35cd8d9c82ddc1e1841fdcfa452c59e990975571ec67cb6d4368fad701b0a34deece4d283b8367c0e9901d4c13b959cd793a4485dee2b9c6ba6167cc0debcceac26b3b8bef97cb81128d5524a87f7f319d4f0f5581d034ca2373e40935676ea1d35633e16f1eb2556ab99e152ac9681ceffc64994ea838d02c880e42c8d73ef2b0f51401d47507adb19c37e4a5a5a9f08b4574f4c8f8b57bdaa926703955c78110e1db976fdfa6ff0148fbecfc342a8a19370ea1aa8f058deb4e75cd5bc500ae03671b20e46813bd3a106648008b56668da1715e8db425f4e9f5e7affbd26d028960451c4422247df7849407398c302b0d0ca69523daa5456273af19532b49b15c0e21cefa9da9edbd45582fb71ed7514a3be2091939cc0a71fbc68e6a56ade75c643deb0d63af1b4d7dda12dada2f09cbce7e3f3eef3735d97c6c2cf4da2e05186de86c21b8da77e181ec34900f0c32cbebede9ea425051240086c4c9ef21686457b32af49b561f990554253eba4e76a41ab1ddc4b6a1fca8460e8ef0d64bba03b72b4af396f6f3986c05fe90b8f05cbeb87d0b2c087e124409954ea9a229dfdcbcaf9c77f5c5401f1f1ba9e1d6e8f3d965dd27769fa274e23206a6e85974bf150c78329f5122146036bd55fdf95f00486473504057ae0e85b400ea375a002a2bb2361d5b4d0479aac84f83a59273724d1f1897689ab1b4331650a88a04b721d9f033cac0485587aec02f551765ae74f715256ea6db6c8d0ad09c03538c637712a7d7b4aa29c08fb085bc1fa937158e8a419e69071ff9dec2a6d968ae727ed14195f45d7f3e9d9168b2cb742067a5720d19175d2e5b58658443587382577d420058886fc6ac24d47100fbcbf122d9b200bac8a091bf089a8794dc55d6e2073c45f242ec612b778a8dc69322484aa4c4f4483d092dad5db055003813ea5ca2b3c8fa446da2f88a91a0992d3dcd28d4c62eec11316cacc0e9b4042950115078bc4a0c464d4629f40c2d8148306f517564bc7aa6c6dad8224f9d6f79852d3beb10f55c6548c5470560abbc99a58fe14a8b6fa0a6ff1511c9df22d03989d96c13835329b687770e9ab2fd2f024ddcb58fd058e891de5ac6d540d5248d8b1b1713b2db133609d7b998a79d70189d8faaf3f01884056469cf1da9849835b7f1173a9feecf5ee28c2c9cf16257ae13f5de9d8cdee72a18372483000417cb1f9f691902812fe811fad84916aadc7310915aa8c87de362a2a893b695cf378f65219e0a35163ea5d50341da561761a6b72f05ecd30bc43181db98615007f9f288fc774fbd32dcb45ec207243e324234c922f78f6e9eb5e32fb0f24aae91265ef72def90381ee21605ccc3cb5aee0829670b5fc61dd6fbea0a04e7269d533b103807bb0b791be7c59a5dd0ccbabca36d093d1d98aac973689251445a4a69400b4247b8c027471f3c1ef5db52e8fe3e7a1b60c15fede931512d2719827de503d5eba65074a5ddd11a31307ddb3677927a8b847a185c174f63776186c81e5b9d5a50f890d41ea34ea161b26e49c872d41cdb49658988be0767c67d3de0d007b3ff3817acff777d12b2eb608cac32c1346de2844ede1018a69d8eed676554e647e0c69df4d1ba6f55970ccb6922671b8c57389d372d9477b4a7adf4fd1f9dfdf1ca5529aed72e68ff21b0bf792ac902d26d13f0a2ea5dd6493ae3ba1a6da9828bb5b720a0398fc72725aadbd4c7bbaf8cf24f1a07a190f3e682a8c5d55e52eecb5eff4a129c0c0f19e74b367b72b363e75e5982ac80ffc259f1f247ba8121baf5b65766e0d160a40de10a8adbd5fae3977dd86a1c7fef145950a9cab6c406ec288f8c6bd87ea9fa2f7e97561c26affe2d34443c1cb5301f8397f40952cc78a5f018a7c76f8b0eb97d9829bf67e773dbf442ea31421c44bf4a4eb6737b4e6c98ab5df5475de9dcb1758eded417efdeff0900dbeea77d585f0ff10cb136cd81574fbf88f99800b9234fb07548860e03c4ffe5707190e5e93f74b901dce812a7ff5143494fd7d61c64d59734da91ee82f4ab04bf33c63bb516931759d542792fe1cdf10d7d09a46b8cbf5b35bb04301786f59c4611c868b77229c9ce3d916a97f33ef214ee243cb7cf99bc86eaa02b75b495828e0536e6a7d0419ac3e498cc79ad56705ad0d269b2dc77b8b3fa6bf9b464efbed94ef64f7016883c91fdd48a6721428fabc8fb559dd22b5f1d6c9610b30f168f9aeb32f554a4e43a827f7cb97aeb0f663c004796d117e41ef5c5d50d891c12fa56c55f195481210fe96d19b151b3e6368aa3f26a6464fc684392c5634daa13c7bdb7a74ad20d02a2b5f75794d5e2d4f5a62c624c5a297940218a8d6c4414d1da430312f5170987c612fc11a46aa01f50dd0146af8838e1d66b6f25b0857b1b2c8daed85f9523cb9c1471ba62f635f3e41c6b333eb8c8c87e77e681753a634eb0765b5b1abd112a4d499d2158175e66bb393be283d70c0a36943760f986234a77904b1bb9b46c7646b1840a3e28667eeaac3cdc644ea7f2f2593d0f62cf4c1b6960fdbb2f40fc175b72ce67157b3f19a6de79888516973b331866c5903af41491a9b2698c488454d325f2cae8ff7e6d15d9ad883e056e8c3071fef1301d614968e9e88047592a08d765b047f7c77ed36a603797c0be61622c9ac4421395e931bfa1a722e27fbeb4a533f956cb5075399f3295355044028c9af9d21e079302161931c2e1926cdec16e4a74570612342d79a1b38e20af94a1b08579e484805ee30a82201d8a6ed2869849e6bd914930d81174eb98b5110ab1a9702b6199610035cfd2c4e88c9dc7b9d530aeb303cc8a23d6a90f5c153e0cc2a096cfac241d1643d72dc921cbc34cc50c127d4a07f8d76793c76722371d8903aa2143728d32d36b3d1e7378927ae2bf4cc79cb73e439d3e29e66aa126bbff584d1777ff7e9b70db60b7a7e23ff840600970a9d15c8378e6287fcdef205be141dbbec51e409d9400fb1b1093300f460850150aca6bde73d1a439bb513324d0e2bcd1d0a9fb5cb73cadb9568607d6469ef4296f4eaa35d778dc879dfcc0b4aa1ed112c90a0ada6605d48b658b8af5293d0f19768b98f2a26853197959b2aa50fcb6342081e022252e833e00cde2a1d1a48a1d9e2b363866956ead748a82ef6a3bca2a0e4a0b3c5df895c81b366bc313ad67a1c8c0367b36f5dcfb341043b51708db5fbd1af7189d6467d9bb04741ec5d2d49ca77416c53d6721d87378aa03a423317b382ecf821404f541a0c7b85ae926171cdca568c226b887a952b1305a436037324912f2a2914db48542845f38e64ca1ea38d016dd022c149c9a2bb94c0376f541d1a25780cdf077749b87a38dd228f25fc80346a71b7fad38f775e2d70239628d246c99b7fadd32a1f4ea922f3b2b558b38e5243b755d1b2741dc9d9e1179b65aee00889e4969218ff0294444097e43c4ddb20988487cdf8114a390f8825aaf0d0aa7a9fa3c0a513b99c0b2ddb32861667c18495ef58f8ebbd5c08b4404fd3e4f60b2c01f6a253715d0570a40a3106ec481da9a8076fc2a2bfd6c7a6e4fada639c0cf5339914f279fddc77c217685534fb7c32d2b4516051a67dbb408c076584e802cf475a947e941f6fee77c8a3c6c1739c977005b2578e0da55d8c30c9397437e750668f8f58a4b92de4ef8141991e5e54dde7cc568f7c3e157c26bfa86e371975dee2d21d959debd65ee06110f89728bd89b2fe760b7de97d3a42d907d4935d255361a12599d20b18af0c4974e00ff4563af36f523c49c431aa691878942cd8ab7819417d615c20981d5ddff1bea602b4b83018572e8ef7e11852685e43c08e21e4f9e894497ef1444b3d701d370b9d775851ccce1430d8dcce482c070f9320f7774009ba249e541dd97d2e3f827ae9e0ae8989847add411900cb45e752338ce8bb500854a888fb68762a4ac5ec71dc558c1f6a2e469a0f88f71cd1e2dba73d097e65259c95506e74a7d85ad4a94f779b6655a0a18f55ecc78ed52b854667b624406d5f8f1ee93164518ec7074355f04b4f03c5ed5f1be5cd5936601ef794f00dc657ce02c42b2c85576883dcf228ae5ad232b9442b2cc5667699229438bc1a05b5baf33dca257a54f2d8e53a89925da3b185dd29a02efd1e1e43324ce804a1137064183a9a80621a2528cde29737b9da19483c12c72afeec3cdd953f45cbc0382cb51f2fce68476219e584f7844050c29c56a1e367d8f65f61cb51064619425712d7ffafe8338f81ffc20ae15fb311834b3ea5eb6c98bc1de7ba84c995216ae26a93201bad69dfe56d51632a13900ead813fd7c64cc9c33477fe4ff5b6cd1c46e52fe01f420"]}, 0x1318}, {&(0x7f00000002c0)=ANY=[@ANYBLOB="380100002d0020022cbd7000fedbdf259d00fa8008006000", @ANYRES32=r1, @ANYBLOB="74ce86d9f70aeb543e30122d07ab93e647a98e7c5e36ff961ea3b6d9230000000000000000f3ce965ac58a185bb6d5abbcadad7e133a22eaec179ae1a411525de695ce1fdaf94cb6b36598f0b3cca97a6d8ae750d9f46508385ee40d4d13c1008bceb65dd01c3015dcc9dfe8dd67e7949eb2b3b2a9db7e571b4f2fd599ad165b4244d8c4bb562e", @ANYRES32, @ANYBLOB="0400a3000000005bfb6faa1c1e39779d421454e0e1e71e81b86f154447498b1ee04501aed0462d2d95efb2a4ae001a907e2bcec6085e457179aa9a38ff92d26e162d163f56c28a1706855fe7720afd4bc65ab3d373613560c76034744df04e9067f5266d5ef8a71538a6c80fc7f87f6175e9ed2ef40c020b81938d975a1c342ee467dc500500b80000000000000000"], 0x138}, {&(0x7f0000000440)={0x3b0, 0x10, 0x800, 0x70bd2b, 0x25dfdbfc, "", [@typed={0xc, 0x3e, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x18a, 0xd3, 0x0, 0x1, [@generic="540181ce85aaa2d76fbe8851749f1673c6ab2710fd88df81845b75defe162bcc4bc5bc69a52c8fad1d6d80267d1d8af732236796da70106f20f3fd002d831a2b8b6e20764edcccd33f75b645e4a495d3bfa3b9d7fd9c2fe519043ab574c9851d637df9cdcc67dc429021cbd861eb784747b68fa48407910bccc0485fa8c4d328edcb14962cd8bdb93f864abf860879", @generic="e61bf34635bb3332f8e2a0ee4f8487f98718cb1d9d95ccdc5429bdd4614afa14b5a1828d85f71b8837d231ebb570122d9127d948f3c4601b67b9cf0dbf77c4af3e64762e049a5d4d7748ba0daa885b12a21d626c713027f617e148a9017b4095bcb23e0b6ce23ad90359dbc929e17db8b29f7c723c897d3929209ea624904cd1aeffe1c0cc8dc3875969f586f2735a5c7a47ebf7d59535e9f46691cabfa63ad623a177f23f504728470cf5347aa5016239435fba59edd708879cb2e035c40609c53cc57db1658155d0f989bd68512aeebc0e92b0a04049c0fc0f5d976c44b82acf987e5010cd25150a65a22cabecc01ac32760ffcbc806"]}, @generic="bdd2427b981387d42d635ba58437234a8e0473d8ce3974fea4d0777a426dbfcf958535c9ce46f8b28c48708a55434e528c18c01d14e6f4072f915488c9a49f02e286528454b1f14e7924478e72b61ad41a2a97229f9ad7f565cfd19b68974a74a0aec9709ac477a418", @typed={0x4, 0x76}, @nested={0x179, 0x1c, 0x0, 0x1, [@generic="ced96a2f19ba719b3a43ba0ef24ee8cf1f947569646f24d6b353e587f76d37909dc6dccdc6e09c9ae82af2d326c3aad370b5f80ec30e749cc7e044c4592d898c63fab8b153ddcd8bde4b78eb98708ac687d74be7685421240aa74599a0302ffd52feba977132249cbe9efb258964b809759374c40dfe2d3ba63c88822c23de1028b09d98706febbb034b4ffda302f42cf3b8c975df5b13a21aa18a28ccf70a31bd4bd56a695917a80b2def0bf3dc32127f039635223b42ae1349ec40bc", @typed={0x8, 0x76, 0x0, 0x0, @u32=0x9}, @typed={0xae, 0x65, 0x0, 0x0, @binary="8eff6f07147a30ca671111b215e6cf922998c7b43b57e7cffc9936e13cb7610d71f44c607be5c2f419ff1e100c563a40a888a7a4650a427ac1bf4ff5b3b323de1a8d02f313c7ce6a12970d840ba36effcd714efc0ef2317fc94932ba28483ff60892b2c9739bd4a1033f9023f3047aa5494ea020bc0eed3bab413f02762aeedd5a07b4ffe91e1028bd5b7586b90bb3f518a87e739ccb8c148b8b7799e9b16d07670e90252fc5e52f9e8e"}]}, @typed={0x5, 0x98, 0x0, 0x0, @pid=r10}, @typed={0xb, 0x3a, 0x0, 0x0, @binary="4afbde3774cd03"}, @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x3b0}, {&(0x7f0000000080)={0x20, 0x37, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0x6c, 0x0, 0x0, @uid}, @typed={0x8, 0x4e, 0x0, 0x0, @u32=0x101}]}, 0x20}], 0x4, &(0x7f0000002180)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r0, r3, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x28, 0x1, 0x1, [r2, r1, r0, r2, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}, @rights={{0x38, 0x1, 0x1, [r0, 0xffffffffffffffff, r2, r4, r1, r0, r5, r2, r6, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, r11}}}, @rights={{0x18, 0x1, 0x1, [r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r12, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [r1, r2, r0, r1, 0xffffffffffffffff, r0, r0]}}], 0x160, 0x8081}, 0x20008000) r13 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r13, 0x7) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r14, 0x100) r15 = socket$inet(0xa, 0x801, 0x84) listen(r15, 0x1) r16 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r16, 0x7) r17 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r17, 0x100) r18 = socket$inet(0xa, 0x801, 0x84) listen(r18, 0x8) r19 = socket$netlink(0x10, 0x3, 0x4) writev(r19, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r19) r20 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_proto_private(r20, 0x89e8, &(0x7f0000000b80)="da745502116f7ffad3799cc22bbf26d5ad3fb0579fc54bd68266f6bf416c1ca6538e59ff49d662f639") 2.626867949s ago: executing program 6 (id=5965): syz_emit_ethernet(0x3a, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x41424344, @ANYRES32, @ANYBLOB="9078000004020000"], 0x0) 2.460026s ago: executing program 2 (id=5966): syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd30800180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYBLOB="722b8543d5"], 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x160, r1, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x38}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5f5a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf1c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x358a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf59f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x1}, 0x20004004) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x14c, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc13a}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3ff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x53bca4cd}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1142}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x417b}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xc0}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x3}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0xc}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20040850}, 0x0) (async) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x4) 2.459548279s ago: executing program 6 (id=5967): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) socketpair(0x22, 0x3, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r1, &(0x7f00000007c0)={&(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x4000}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000800)="d737e6e3ffe09323b00cc6987ddb5931356d7ed267e0f7b794ab01b7423ac20bfd8091285fe3ace90e806ca2a376dd8191a0acfc4b4c34007e1611b7ec152dee95e7f1f217b0b581a96d178a4d499449fef01f371711837862e6b759b7f0fd", 0x5f}, {&(0x7f0000000140)="713147feb28900e3c1d2624199d3d66e86e6058b55d7cf496527df1a5c2a84b437bcb065f14f95f3e76a7745f440d871ab52fef07c4a01f9cc8e524f2ab46de37f3fda9e587c63f26a95447e2fe9a9f28adbbd6edad157b46c36", 0x5a}], 0x2, &(0x7f0000000880)=[{0x108, 0x111, 0x6, "842bc9ab753d88ae6b295a43127cfb5a947353a1d1c1f140f7fb646d246e76f5646562ba160f0de5c4facbce8b07b2efe16e1206c21ce2f58a93d7f240baac1cdec90d977774ec7f0ebc3e3a5f1d7a94a5b8eccf913875d0b199ee92f9e1f44201c9ae7fade7f73cff7fe24d9ff7d618483328b4dc6b9e05470b6ebf1649e3f3c559099865417e3d2b032999379ad64c1595b18a7e0af644f2361120cfa15d6652e2a719b57f0843a8bded7925bcefdaf32c1b4aecb878c67a240ff949cf98319daa7c0bb3294ef90e6741e76f143a16e09333bdfbf3c824ba4081737df442fb7b041f9cdadfc1eeae2ab67a9d2a1641724e6b"}, {0x48, 0x119, 0x328c, "7f9ca9b82a8055e38b132c8d283b24110523cac5551e4a2c971128505072acdeb90135db997d8bed520622d7d71a8583eb5ffed460"}, {0x98, 0x117, 0x401, "f61631735299299fa81a097c58453632048178c1bc9ed4107d64faf607e2a06ce50d88ef4934bb340c6cb9004a0073260368d01636c80d54d397e75af871681901c5f01be713b9f7d3fdb873c6a38f07dc1b2d5237a5795fbfffefd6fcfe0703455826dee403e53a9a7649c8d899792cf84544fd671d1f18fc32510abcd757e6d6be21c599"}, {0x90, 0x117, 0x79f, "eb464dfe06d500bec2c84570835f669b9ef2aa5cd0bcf8c3ae4000407b0c2c7e7f46891b60df72b52d262bf90244b0acb5cc9921c40f100c464bf77a2a5c5fb605e3ae358c9f3b791ddcbe2f0c7b7d68be052d8ff67f9602a59b516b796d0b50609006610a2c2da47b543b0cef1830dd2ebd09898608fa6341eb7e"}, {0xc0, 0x10b, 0xffffffff, "fad43d6fdc71ffde79be017028c72e538fe0f6519b55f30db7ce792f41301fa130db30f6ae65d6e01a78defbfbc2d9235f9e9a4ad9df7a1fc4e2d21071a491ea14b7648fa46c9c9e548f19d14662b79a1f1d696ba2b7f3d2d7919bae969dd4cd94573d0bd96228aca52c3ced209d02669c2a2722040b7f9ab32ac0cae1dd00c1e4d5ff2eb5a746d8aaf80c38d0f08ba94e62f05d01c7f442e56eb52d6829a0a4f5dab7bee0ddd8424c4191b79999"}, {0xd0, 0x29, 0x2, "6a8378012f6e385999155a0635eae4a594379d92e2ddc8650ba753232226e2fe878a32d94d5997711c011e251d8f9d642d931346d40859dbdf7d9424a76812e053dcbd9dce86ab8d58f39ec33f39785b872ae7d077f214f7e796cd6f980ae630217eb58bc1a7cace9195ad5b5b3429a0e1fb329407f96e8b72b1b3f14e5e994b1da29e07a0460d23106281e294c9a3cedd4b9dc0d957a3e053a22f545729e9504b041d9336427908f5b5799ac5d4b47a0fda2737b6403d855bdfc95ed6"}, {0x108, 0x84, 0x4, "9010aac5d7701e17154cb8a557df1c9415244b0c0e9c005ac6dbd069caaa408694a23d7f0065907cbb630447bc71994ef722998b1e0d448acf11d384d9b1fe79041e2518c2a78d4945f50ffdd8c12f5d0e56981c5d4c8d10c389981cd72d5826913da5207f1c686adf66a5a94ad580aaa22df45804fcdcb062feff2615c1e2a7efd14fe619b12253582d52e2929d8c4974d2c976fe2adad76b06e3fba4c93ba155f82811d99b178a2cba3cdf94fe76d4f0f98a97f20b08eaf63903bf41a4143fb982ecdc105005637cfa532f3e431963eae13f6efc5ffc88a9fb6c421c57dbfc3e32be1c9d60a7897957ad0e49c1dbbdcd4302a5"}, {0x98, 0xff, 0x40, "2903cd917e3ff72e9ef3b0f8539149813200ec1bc4b6eadd1886747fd4aa6ffd8b66bfa1001c54cfd4f61c01896bda1bb78b50a355e17f085ab65ec621dfd038e841fb79053dd1265ce0837915c4c5b6de93c391b561fb1d63163c71b572e14cc77af84f102f231fac721f35f1a4c2b0639c1707482bc194a619cd43acb072abd2c5"}], 0x5a8}, 0x4000041) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) (async) r2 = socket(0x14, 0x2, 0x4) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0) 2.457596058s ago: executing program 4 (id=5968): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0xfffffffa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, @in6={0xa, 0x4e23, 0x7ff, @remote, 0xfffffffd}], 0x38) 2.358666724s ago: executing program 2 (id=5969): syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2a}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb00000000"}}}}}, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) (async) getsockname$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) 2.19173765s ago: executing program 4 (id=5970): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x90000005}) epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) writev(r1, &(0x7f0000000780)=[{&(0x7f00000001c0)="02a51c4fd963", 0x6}], 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r4) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r5, 0xadab2836b5a4ab95, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r7, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r8}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) setsockopt$inet_opts(r7, 0x0, 0x9, &(0x7f0000000140)="a2041faba7c22fe0c40a2c1b67520b3684affad181e80d3887d120e62b34f09030b4014a5afefb97b07921d41a0e67e6462f40346b8d833504034471d5cbf1bca8ac69dca99c04ac2f0ecb065fba0b14e2dbbd51d9c5974aef39904a86834ddc688709bdec764405367a718628cb8f2cd8b6ee86155a3bfaf8da30", 0x7b) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r10}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}}, 0x48010) close(r10) 1.636104624s ago: executing program 0 (id=5974): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r2, 0x89f2, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@mcast2}}, 0xe8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7}]}, 0x34}}, 0x8000) 1.635614873s ago: executing program 8 (id=5975): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500005c0000000000019078ac1e0001ac1414aa050090780000000040000000000000000002000000000000ac1414aa9404ffff8625000000000010f79eb4cf48b5a5788fc15a45b5b1000f749018c9a54b61394327f115350000008ab420e9a0c8c392d6b25aabdd0f9ff4d585920e32f2ac32551034e1bcaac5748318e7ac930f196c2cd6def394"], 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1401000026000100000000001a000000030100800c"], 0x114}], 0x1}, 0x4000040) 1.420804983s ago: executing program 8 (id=5976): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000500000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) r4 = socket$l2tp6(0xa, 0x2, 0x73) recvmmsg(r4, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}, 0xa6e6}], 0x1, 0x0, 0x0) bind$l2tp6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa1}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe2800000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0xcc}}, 0x0) recvmmsg(r1, &(0x7f0000001780)=[{{&(0x7f0000000380)=@alg, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000500)=""/208, 0xd0}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000840)=""/169, 0xa9}, {&(0x7f0000000900)=""/142, 0x8e}, {&(0x7f00000009c0)=""/163, 0xa3}, {&(0x7f0000000700)=""/82, 0x52}, {&(0x7f0000000a80)}], 0x8, &(0x7f0000000b40)=""/229, 0xe5}}, {{&(0x7f0000000c40)=@ieee802154, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000cc0)=""/61, 0x3d}], 0x1}, 0x1000}, {{&(0x7f0000000d40)=@nfc_llcp, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000dc0)=""/100, 0x64}, {&(0x7f0000000e40)=""/163, 0xa3}], 0x2}, 0x2}, {{&(0x7f0000000f40)=@vsock, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000fc0)=""/216, 0xd8}, {&(0x7f00000010c0)=""/197, 0xc5}], 0x2, &(0x7f0000001200)=""/253, 0xfd}, 0x6}, {{&(0x7f0000001300)=@sco={0x1f, @none}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001380)=""/219, 0xdb}, {&(0x7f0000001480)=""/215, 0xd7}, {&(0x7f0000001580)}, {&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/244, 0xf4}, {&(0x7f00000016c0)=""/54, 0x36}], 0x6}, 0x4}], 0x5, 0x0, &(0x7f00000018c0)={0x0, 0x989680}) 1.386527024s ago: executing program 0 (id=5977): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630121000000000095005c4f00000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 1.140405096s ago: executing program 0 (id=5978): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) listen(r0, 0xb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x1}}}}, 0x36) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, 0x0, 0x0) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000010000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r6 = epoll_create(0x7f) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r3) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc) syz_emit_ethernet(0x13e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd60122d9201083afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800000000fe8000000000000000001000000000bbfc020000000000000000000000000001191ca6f1f093da9bd664e93eee1e71e8f51102c0b8388720825a79846587675f540b840e15907d79d4229c28c34ca328a55ff4167ad3861f0708b57b32773ef87db8ee3f1d4a817f4989bc8eca5bec3065e712e55f0a7bbb19a9e7034f76929311978689b3ab7a7fa170ec964b6585b76ab4a0fb7685ed7d914daf2c1960b70643407afec15c00b52c6f61007d8df2290b22edca17ec94077d9d85106c66b02819a71c4aa4c04860ea8f46b1cef46117782c64fdb6fc9a4e0bb6d03fe15f57067d26f6bd85c3a2bfdd6422dc54a3476f71f1cf79bee681e404777b52de625fea"], 0x0) 1.139702676s ago: executing program 8 (id=5979): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x9c, 0x10, 0x503, 0x70bd26, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r3}, @IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000009, 0x81}}]}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80000001}}]}]}}}, @IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x9c}}, 0x0) (async, rerun: 32) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="f000000031490000046188af15d23a3b8d47ebd32ac33f8ab1d2ddbe36f513c4fb677489c47b94f11dfbb049fcb50dc9c8cfc47f3b61645225c0056c4c6c43b2de28b15d1f33ab04465f8028e448670ca8996caa44769f4d537b33221d3f3dfb042a2cce38c232771de88abe50d37800049e92e11486e05205095f4035c2961bcd99465c52d8edb85f6e176ee99ccaff17463bf3c5d5d91fd48a1917822bcaeeab2657e89f8dc61f23db89d20173722f2a41a529613bde6446f86b2bf236b3c4e542a76aa09498ee439e4430b163265d23a6d4e9b2e64404f5e04cfb78385f55509392e122b07e1646abd9427ad382d8214ad7a998cb92d0b91c154d99bbc273fef0a3"], 0x8) (async) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/time\x00') ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fedbdf2505000000080009000200000006000100051a000008000c00aa0a000008000b0004000000"], 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 1.138873974s ago: executing program 4 (id=5980): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="890c040000000000200012800800010067747000140002800500050001000000080004000100000038af393c04b8a1550c44466fd6676b9526f9"], 0x40}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) (async) r5 = socket(0x10, 0x3, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64) r7 = accept4(r6, 0x0, 0x0, 0x800) (rerun: 64) sendmsg$kcm(r7, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[{0x10, 0x117, 0x2}], 0x10}, 0x20000001) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) (async) recvfrom$packet(r1, &(0x7f00000001c0)=""/185, 0xb9, 0x0, &(0x7f0000000080)={0x11, 0x9, r4, 0x1, 0x3, 0x6, @remote}, 0x14) close(r0) (async, rerun: 64) r8 = socket(0x10, 0x80002, 0x0) (rerun: 64) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) 937.776554ms ago: executing program 6 (id=5981): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x101}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x17, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8b}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x6}, 0x94) 786.9996ms ago: executing program 6 (id=5982): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffeffffff}, {}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x7600) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r1, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xb}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd, 0x51}}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x4040000) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0) 596.008743ms ago: executing program 4 (id=5983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x9, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) 172.818654ms ago: executing program 8 (id=5984): r0 = socket$caif_seqpacket(0x25, 0x5, 0x4) connect$caif(r0, &(0x7f0000000000)=@rfm={0x25, 0x3, "4e68ed32fde9cc9b0ec2f3f447afe347"}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000003c0)=0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) r8 = getgid() r9 = socket(0x29, 0x2, 0x0) r10 = gettid() sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="3c000000100005ff28bd7000000000000000004aae9984e63383de2607dd41026112bd1299279cc0309fe38623373e5e2f29bc0731b17cacdecabc3283cc20ece805195a397165eca92a82ce4104316ccb4d63d25679c7ce9de6359d75d03ced71f9a0bc8bd7e70f9988a77e190a02e66efbab08896664f338820b2b7e0f12df98811720ed696bcaf6e739fea88965e8f59e90b552ceeb59206f181c5463fc24576316aa7cd2febbec7d4f1d587519c0b6a31ea1034d28940f09a8fd71264845fed985d3b8ff97e91a99479e0a176e8b01872d70c3ca27edd86d5ba45ba284f5163afec3c2", @ANYRES32=0x0, @ANYBLOB="c042000000000000140012800900010076657468000000000400028008001300", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000500)=0xe8) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, r0, 0x5, 0x4, 0x2}, 0x50) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c80)={0x0}, &(0x7f0000000cc0)=0xc) socket$phonet(0x23, 0x2, 0x1) r14 = socket$netlink(0x10, 0x3, 0xc) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x150, 0x10, 0x413, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x0, 0x7, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xfe}, {0x0, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6, 0x1, 0x1}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x80, "7a7721427b16add9e6b50c9917d0e0684cb2e6"}}]}, 0x150}}, 0x804) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0}, &(0x7f0000000e80)=0xfffffee9) sendmsg$netlink(r14, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000980)={0x10, 0x32, 0x4, 0x70bd25, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, r16}}}], 0x20, 0x50}, 0x40880) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000dc0)=[{{&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000240)="821548b54644e6d0f5a367c90d9d86f3393184957126a055269a7bcb2f517179f2564653e3502b5720c4b20c0becc0db9c8460a634a745580a1e91f46d9b56430e8920ad43c0bcc514ef3dfd50ab2c478d88887fc3", 0x55}, {&(0x7f00000002c0)="229a21357c9ccd6c88704a88b12be2f221ec831aea2271932729e57261853e3e0ccb1c8ef12b2548cbe25874d790cf6791a9a0b359cdcbfc4b14f4a44341ab8b3bc5f5fdf895bf7ae170f43c40a465017ac4b38ad0c601eb455a75d86d0995908414cdf4ae02f383d98f2e9558d1afdf0c", 0x71}, {&(0x7f0000000340)="da521c8dc0980297829e8034639b7809b0356fae50b626efaab73dc644fe67403f79d20380c13e8fb20e7ea9902c81757cd0dc554c49838dcc69100cd3280094fd76c3fdab42784b0588ea4e83afee9f79e4bc70c962319e7c2ff60b7d1f292e5402f1d6b316", 0x66}], 0x3, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11}}}, @rights={{0x20, 0x1, 0x1, [r12, r3, r0, r3]}}], 0x60}}, {{&(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000006c0)="15e1480a3eee2b170150379747c0b480372da1c4077d573fee9aff55aa119ab3ba6c5c7ffad4098e612b515962a4fb2e727d14aa100fa975e6ee90960fae6dae268934c39a408764e2747909d93182f6f9ba2fb3b814535b8c7cf6950c02904416f8cc390d08cf65a831f35aaf5ee0d4f3bfda4b963c9567c826757ea4dee24bd954fe4711179a31885b1edae1555582baecfa1ceb6549526374", 0x9a}, {&(0x7f0000000780)="e87abcf7713d31970478247543584b1e213124704293fa69ba885c78c5631b168b752d37fcfa896c936e8cc1124d00dd686199daaa3017500baa3d172ecdb9eb4ff75290a1a9c151300aca1f86213f9e2a0570819c76927d461aa1744c", 0x5d}, {&(0x7f0000000800)="c8e076b568d321e66d5c5cdeab71ec91126e4672e68f517eeba0d6811939cbe8c0b157f125c37031e40fa7bea795606bd05f58a7fffb1bfecc74e0ded774eef3bee950f52769886fd3744ee7822e592f394bceea5fd25e5e734292de46c96b1e472f078bdd8d5d1c6244e3825695460d957b90909d463b0acd30d3700f83381851231650a836f0c45fa03f22c3db4a490a3b9561c99b64b8735e8321da173c6279e7ad68cc303e002bb558a7b48effb334c87ed61f32cd0622e33637c635d74052315ef42fec95ff25e20cf794625601a7cfe93caf4ffa02793a46907548d4", 0xdf}, {&(0x7f0000000900)="062db8a64fc1c12a021539662ab353604d6f15ff4635df4788129ec66760d5c6789495d041465ea29361248008aa5d53b1e879d0dc321df71cfd24ce9fa32660039ed57774e7120cfa2a51b752ba2ed4fa4bf66974426786e8ac5ff575a4b974f76bf29658548d4a1bac4a8cc1bae0b2377423ba3fb13ea563", 0x79}, {&(0x7f0000000980)="fc04dfd461b03269114d8a8b43e315dd112bd3c867352da295db73a1327d81ab4057a84836fdec1d4110135b91fec168e5dc13809693655346ff6ed4872db259eaf8b6b9611e958d35a53fd841f89ae4f06ee570e067977fe953538641d49e499a024378df76a25840d6d5878c682b20e4352026241ecf7a82d1948caa336d130634e4f3a83d3bf661129dabc3a1af4f2a2a5de734f228d592b50a148e77350dc4122d0f58bfad47964bae03bdcb6beae48991f936ba288f3afbceba1a59c43f96941f8a8aade2023c6fa0a9b92f4a25ab0804c03baeceedc78091502328f70aa2a1b280659bf5b7ba", 0xe9}, {&(0x7f0000000a80)="a56ece9f949faa29f593e185139f6f2fbf68cba06c8a9a5667a04744a0ad0d9b840e81d17a0f732547484083e7fcee600d5c", 0x32}], 0x6, &(0x7f0000000b40)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x80}}, {{&(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000c00)="1c0d84f3396973af", 0x8}], 0x1, &(0x7f0000000d40)=[@cred={{0x1c, 0x1, 0x2, {r13, r16, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x20, 0x1, 0x1, [r2, r0, r0, r17]}}], 0x58}}], 0x3, 0x40000800) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000100)={0x2}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x20000004}) epoll_pwait(r3, &(0x7f0000000180)=[{}], 0x1, 0xc, 0x0, 0x0) 168.730087ms ago: executing program 0 (id=5985): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5, r2}, 0x38) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r6 = accept4(r3, 0x0, 0x0, 0x800) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="240000002e0001002aab70000000000008"], 0x24}], 0x1}, 0x0) (async) writev(r6, 0x0, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) getsockopt$netlink(r8, 0x10e, 0x8, &(0x7f0000000180)=""/129, &(0x7f0000000040)=0x81) (async, rerun: 64) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3e}}}}, [@NL80211_ATTR_SSID={0x12, 0x34, @random="14abf60a4b88f486329332a9cee3"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x81) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x7800, 0x40, 0x4, 0x9, {{0xe, 0x4, 0x3, 0xf, 0x38, 0x67, 0x0, 0x1, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x1d}, {[@generic={0x82, 0xa, "9cf8c1f870e9713e"}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0xe1, 0x1, 0x6, [{@local, 0x1f8}, {@loopback, 0x6}]}]}}}}}) 165.992574ms ago: executing program 4 (id=5986): r0 = socket(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x75}], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffead}, 0x94) (async) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}, @generic={0xfe, 0x8, "7701d734ec22"}]}}}}}}}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/32, 0x20, 0x1, &(0x7f00000004c0)=""/141, 0x8d}, &(0x7f0000000280)=0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r5}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)='%pi6 \x00'}, 0x20) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002640)=@delchain={0x1e70, 0x65, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xd}, {0x2, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_basic={{0xa}, {0x1e38, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x1, 0xd4, 0x2, 0xf, 0x195, 0x2, 0xec, 0x0, 0x3f9d, 0x6, 0x401, 0x3, 0x200, 0x3ff, 0x0, 0x40, 0xfffff29d, 0x9, 0x0, 0x6, 0x8, 0x7, 0x8, 0x3, 0x10001, 0x4, 0x7, 0xc0000, 0x4, 0x6, 0x5, 0x7fff, 0x8, 0xfff, 0x74b8, 0x4, 0x4, 0x2, 0x1ff, 0x0, 0x4, 0x7fff, 0x3, 0x7, 0x5, 0xa, 0x5, 0xffffffff, 0x1ff, 0x0, 0x7f, 0xa5, 0x5, 0x40, 0x7, 0x0, 0x9, 0x4, 0xffff6ea2, 0x4, 0x400, 0x100000, 0x2967, 0x8, 0x3, 0x62, 0x0, 0x6, 0x7be7, 0x0, 0x6, 0x2, 0xfffffffa, 0x1000, 0x6, 0xff, 0x6, 0xb0, 0x9, 0x4, 0x3, 0x100, 0x6, 0x3, 0x0, 0x6, 0x7, 0x30e, 0x10000, 0x1, 0x1, 0xfffffffe, 0x5, 0x8, 0x4, 0xffff, 0x6, 0x0, 0x718daf41, 0xe, 0x9, 0xa42, 0x7045, 0x0, 0x3, 0x6, 0x78, 0x2, 0x4, 0xa, 0x4, 0x5, 0x9, 0x200, 0x7, 0x9, 0x5, 0x8, 0x48000000, 0x76, 0xf19, 0x8, 0x80000001, 0x6, 0x101, 0x3, 0x6, 0x1, 0x7, 0x0, 0x6, 0x0, 0x1, 0x7, 0xf6, 0x5be, 0x0, 0x7f, 0xbe, 0x9, 0xfff, 0x3, 0x9, 0x2f2e, 0x1, 0x3ff, 0x0, 0x8, 0x7, 0x1, 0x73a, 0xfffffffa, 0x3, 0x2, 0x3, 0x6, 0x0, 0x5, 0xd89, 0xb, 0x7e7, 0x0, 0x101, 0x9, 0x7, 0xffffffff, 0x6, 0x8, 0x10000, 0xd25, 0x4, 0x45, 0x7, 0x80000001, 0x7, 0x7, 0x7, 0x0, 0x9, 0x9, 0xe20a, 0xa, 0xb, 0x4, 0x3, 0x6, 0xf, 0x81, 0x4, 0x3, 0x98d, 0xa6dd0d4a, 0x9, 0x1, 0x40, 0x50, 0xdb, 0xfffff001, 0x400, 0x7, 0x800, 0x7, 0x8, 0x7, 0x0, 0x10000, 0xb751, 0x3, 0x10, 0x6, 0xa00000, 0x6, 0x4, 0x6, 0x800, 0xac2, 0x8, 0x2, 0xa, 0x4, 0x5, 0x5, 0x7, 0xe6, 0xffffffc0, 0x1, 0x5, 0x6, 0x1ff, 0x6, 0x2, 0x8, 0x100, 0x9, 0x239cef81, 0x2, 0x6, 0x5, 0x100, 0x800, 0xe, 0x7fffffff, 0x8d, 0x7, 0x10001, 0x3, 0x4eed6c97, 0x2, 0x80, 0x9, 0xfffffffe, 0x7, 0x8, 0x80000001, 0x89e]}]}, @TCA_BASIC_EMATCHES={0x90, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x494}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x3, 0x2}, {0x6, 0x4, 0xd}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0x6}, {{0xae48, 0x1, 0x0, 0x1}, {0x4, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xaa, 0x1, 0x9}, {0x3, 0x4, 0x1, 0x3, 0xd, 0x0, 0x2}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0x30b7}, {0x6, 0xf, 0x1, 0x7}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xc, 0x1, 0x8}, {0x9ec3, 0x8, 0x4, 0x0, 0x9, 0x2, 0x2}}}]}]}, @TCA_BASIC_ACT={0x199c, 0x3, [@m_ct={0xc8, 0x7, 0x0, 0x0, {{0x7}, {0x7c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0xff, 0x1, 0xeddd, 0x6}}, @TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_LABELS={0x14, 0x7, "1f861f4ff25df73b899832d69991e7ac"}, @TCA_CT_LABELS={0x14, 0x7, "41f8ec6b992a8c0c698ebd000c533434"}, @TCA_CT_PARMS={0x18, 0x1, {0x1ff, 0x7f, 0x6, 0x1, 0x2302}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0x14}}]}, {0x28, 0x6, "961a4884ec1aa9dca364207b5c98199b3941a5251cd497580662e6703c688ab2b88fd706"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mpls={0x164, 0x7, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x13234}, @TCA_MPLS_PROTO={0x6, 0x4, 0x18}, @TCA_MPLS_TTL={0x5, 0x7, 0x7b}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x9, 0x1, 0xfffffffb, 0xf93}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x49b6f}]}, {0xfc, 0x6, "aed5b9ee8558ca0c4f7dc324d2b91f586c0514127604caecaf59103d168893123072c9775b34fd64713999f5aec4056ae3123711617aee5d838c917ec45c351098ec0067f4016e50a21813cd7a623ddb634ab306ee4ba04d249fedf4127365987c30a9f38b49459a265aac6f8b3712b086c4e6555b6eea94dcee3997d49071c5a5fd66c9bde318d50495e3ee694613b8eb54d4d2d2030407a8653684a0b583df5363980a753272875733d94735fcd616afb6adf92cf33155dcde5fd6e2d6b814e45ef2417cc5a5b943e641546da183c1a717e50003a93c7d99360294a859556540ff7a3b6144ed1f439a013254e5bb5deda569eb44b008c8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0x1088, 0x1f, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xe0}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6b8e}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x4, 0x8, 0x6}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x100}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x400}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2000}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_ife={0xa0, 0x8, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7}, @IFE_META_PRIO={0x8, 0x3, @val=0x7f}]}, @TCA_IFE_SMAC={0xa, 0x4, @random="422e2c8d94b2"}, @TCA_IFE_DMAC={0xa, 0x3, @random="d707b2c201af"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8ae6, 0x1, 0x6, 0x3, 0xcfad}, 0x1}}]}, {0x1d, 0x6, "02ce2449978f1e12b702af23ef88587740fb12899c4055afdf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x590, 0x3, 0x0, 0x0, {{0xb}, {0x4a0, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0xa, 0x6, 0x1, 0x1, 0xb, 0xffff, 0x5, 0x6, 0x10, 0x7, 0x4, 0x5, 0x8, 0xfa, 0x3ff, 0x5, 0x81, 0x8344, 0x2, 0x2, 0x1, 0x6, 0x3, 0x10001, 0x101, 0x1, 0x9, 0x5, 0x7fff, 0x7f, 0x0, 0xfffffff8, 0x3, 0x5, 0x5, 0x31, 0x8000, 0x633acd02, 0x7f800, 0x1, 0x2, 0x8000, 0x1, 0x800, 0x1, 0x26, 0x62a4, 0x0, 0x1, 0x7, 0x3, 0x6, 0x5, 0x4, 0x2f, 0x7, 0x6, 0xfffffffd, 0x2, 0x8, 0xeb, 0x1, 0x3372, 0x5, 0x5, 0x2c, 0x15, 0x6213, 0x7, 0x26fa800, 0x2, 0x380, 0x3, 0x200, 0x1, 0x1, 0x80000, 0x100, 0x0, 0x0, 0x58, 0x2, 0x3, 0xfffffffa, 0x9, 0x7, 0x1, 0x3, 0x7, 0x0, 0x1, 0x0, 0x4, 0xb, 0x81, 0xcb, 0x23, 0x6, 0x401, 0x1000, 0xffff8000, 0xffffffff, 0xfffffff9, 0x200, 0xfffffffb, 0x8000, 0xc265, 0x5, 0x9, 0x1ff, 0x7, 0x10, 0xffffffff, 0x2, 0x200, 0x727, 0x200, 0xeb7a, 0x8, 0x10, 0x0, 0x5, 0x3, 0x3, 0x7ff, 0x6, 0x66, 0xb5c6, 0x8, 0x7f, 0x0, 0x5, 0x5, 0x7b, 0x4, 0x6, 0x7, 0xffffcbf1, 0x800, 0x5, 0x0, 0x2, 0x27e8, 0x1, 0x6, 0x10001, 0x3, 0xffffff7f, 0xdf2, 0x7f, 0x3, 0xff, 0x1, 0x3, 0xf, 0x3, 0x7, 0x3, 0x7f, 0x8, 0x5ffd, 0x1, 0x17064000, 0x8, 0xa0000, 0x9, 0x8001, 0x1, 0x1, 0x5, 0xf, 0xc62d0000, 0x3, 0x1000, 0xb5d5, 0xc0000000, 0x101, 0x3f3a, 0x400, 0x4c, 0x80000001, 0x2, 0x1, 0x1833, 0x4, 0x9, 0x2, 0x8, 0x8, 0x707, 0xad5, 0x3, 0x5be, 0xb5a, 0x2, 0x3, 0x8, 0x3, 0x2, 0x3, 0x9, 0x2, 0xfffff537, 0x81, 0x7b, 0x3, 0x2, 0x60, 0x4, 0xd7, 0xfffffffe, 0x100, 0x7, 0x0, 0x3, 0xc6a2, 0x5b, 0x8, 0x0, 0x7, 0x3, 0x7f, 0x9, 0x3, 0x0, 0x7, 0x1, 0x8, 0x7, 0x200, 0x0, 0x9, 0x800000, 0x2, 0x4, 0x31c4a754, 0x8, 0x4, 0x5, 0xb9ad, 0x2, 0x9, 0x4, 0x6, 0x2, 0x9, 0x4, 0x7, 0xe7d, 0x4, 0x9, 0x0, 0x8, 0x5, 0xf4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x1, 0xf6, 0x1, 0x92f8, {0x7, 0x2, 0x7, 0xf, 0x8207, 0x9e50}, {0x7f, 0x2, 0x7, 0xa9, 0x3, 0x2}, 0x0, 0x4, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x400}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x7, 0x0, 0xd9, 0x5, {0x4, 0x0, 0xd, 0xd, 0x9, 0x4}, {0xf9, 0x0, 0x2, 0x8364, 0x3, 0xe2}, 0x8, 0x6, 0xfffffff7}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}]]}, {0xc8, 0x6, "775d247842b79ad7d35ecc2cd8ffaffc6b5a2ae660c6a8e675d6556f42f35bc5412d62fda4ceb009e42c6785772639e5275e71909a19609ee95170d6620a69cfd72f98824d8bedd2b9b2745bcc1f2d82526d37beedc73dbf060cee4f2a2baa669487d2a20ed92a1ce029171c87b22d82a5ead800480370c0d5739b50baca87455ffe79d7440cd9c90b7a123606a45d354b52591bbdd636df813e438632a91a49e99d92befd16884bb2aebc29cc7da6858c5a07333b4fd197aceff8055b73e1ee93afa763"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0xb4, 0x17, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0x4b, 0x6, "4aaf7f59bad0301dd0cf6abcb63e631fccb0a110ab0560a620a252a88a7ff9f8b721d8d5ccfd9b54b2451f1d975193444e1f4a41fe4b20917e281058379bd4b78f01c24251df63"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x1e70}}, 0x0) 165.531888ms ago: executing program 0 (id=5987): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000028000701000000080000090005"], 0x20}}, 0x40080c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d742dbd7000fddbdf250a00000008000300", @ANYRES32=r3, @ANYBLOB="1400508005000200010000000500090002000000ea"], 0x3c}, 0x1, 0x0, 0x0, 0x40006895}, 0x40010) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 165.014026ms ago: executing program 4 (id=5988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100240032000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30b5bc71ca9a4022c0f669c22ceaa4ea9df241b0c462c3681192"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x40044) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)="3c44e4a53a", 0x5}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @multicast1}}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100240032000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30b5bc71ca9a4022c0f669c22ceaa4ea9df241b0c462c3681192"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x40044) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)="3c44e4a53a", 0x5}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @multicast1}}) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) (async) 160.790479ms ago: executing program 8 (id=5989): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) (async) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x1, 0x2}]}}}}}}}}, 0x0) 120.018175ms ago: executing program 8 (id=5990): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000270000000000019078ac1e0001ac1414aa050090780300000045000000000000000000000000000000ffffffff540ad936a201ddb72240f45e9e6c39f6816ba751cdffeac5ba1249acbd120ef32f1bdbaa2c019c072013815d4bdaa62e5687852a1596866f58e095c1"], 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bind$l2tp6(r0, &(0x7f0000001200)={0xa, 0x0, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x5, 0x2}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f0000000040)) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0xfd45}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x3a, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00000015c0)=[@in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0xc92, @remote, 0x8}], 0x4c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000001640)={r8, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x6, 0x2, 0x614, 0x1, 0x15, 0x7, 0x4}, 0x9c) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r10 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000080)={"abc86d309e9c5d0952c471584180de27", 0x0, 0x0, {0xffffffffffffff92, 0x4}, {0x5, 0x8}, 0x80000001, [0x100, 0xffffffffffffffff, 0x79e, 0x6, 0x3, 0x2, 0x6, 0x10001, 0x3, 0xfffffffffffffc00, 0x6, 0x4, 0x0, 0x8000, 0x9, 0x7]}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r9, 0x50009418, &(0x7f0000000200)={{r10}, r11, 0x4, @inherit={0x50, &(0x7f0000000180)={0x1, 0x1, 0x6, 0xb5a, {0x14, 0xffff, 0xffffffffffffffa0, 0x3e, 0x7f}, [0x5]}}, @subvolid=0x7fffffffffffffff}) 75.184822ms ago: executing program 6 (id=5991): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000080)={0x629d, 0xd6, 0xd2, 0x4d9}, 0x10) r1 = socket$inet(0xa, 0x801, 0x84) accept4$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x80800) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 0s ago: executing program 0 (id=5992): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@fallback=r1, 0x10, 0x0, 0x80, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@ifindex, 0xffffffffffffffff, 0x13, 0x2030, 0x0, @void, @void, @value, @void, r2}, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x7, &(0x7f00000000c0)="f9ffffff", 0x4) write(r1, &(0x7f0000000000)="0c000000010001", 0x7) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="39baaaf93a0ae8eb270dbe41331084ec", 0x10) sendmsg$key(r5, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x18, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@private1}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @private0}, @in6={0x2, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0xe0}}, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000003c0)={0x0, 0x2, 0x7, 0x1}) kernel console output (not intermixed with test programs): k: 16 bytes leftover after parsing attributes in process `syz.3.4129'. [ 495.685763][T20649] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4130'. [ 495.701023][T20647] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4129'. [ 495.948447][T20667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4134'. [ 496.058880][T20677] netlink: 'syz.1.4138': attribute type 1 has an invalid length. [ 496.083347][T20677] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4138'. [ 496.096238][T20677] netlink: 'syz.1.4138': attribute type 1 has an invalid length. [ 496.358369][T20690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4142'. [ 496.443119][T20703] netlink: 'syz.3.4146': attribute type 10 has an invalid length. [ 496.463440][T20703] bridge0: port 3(team0) entered blocking state [ 496.510452][T20703] bridge0: port 3(team0) entered disabled state [ 496.555938][T20703] team0: entered allmulticast mode [ 496.563755][T20703] team_slave_0: entered allmulticast mode [ 496.591037][T20703] team_slave_1: entered allmulticast mode [ 496.624791][T20703] team0: entered promiscuous mode [ 496.645719][T20703] team_slave_0: entered promiscuous mode [ 496.666343][T20703] team_slave_1: entered promiscuous mode [ 497.069731][T20737] netlink: 'syz.0.4155': attribute type 1 has an invalid length. [ 497.084448][T20737] netlink: 'syz.0.4155': attribute type 11 has an invalid length. [ 497.318878][T20749] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 497.330179][T20750] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 497.347154][T20749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.359653][T20750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.515419][T20732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.539661][T20732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.679826][T20732] bond1: left promiscuous mode [ 497.685128][T20732] bond1: left allmulticast mode [ 497.696850][T20732] vlan2: left allmulticast mode [ 497.704231][T20732] veth1: left allmulticast mode [ 497.710192][T20747] netlink: 'syz.0.4156': attribute type 13 has an invalid length. [ 497.819724][T20760] netlink: 'syz.1.4158': attribute type 13 has an invalid length. [ 497.832206][T20760] macvtap0: entered allmulticast mode [ 497.845997][T20760] macvtap0: refused to change device tx_queue_len [ 497.904599][ T9149] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.924418][ T9149] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.949376][ T9149] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.974614][ T9149] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.362726][T20792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.476144][T20797] netlink: 'syz.3.4170': attribute type 19 has an invalid length. [ 498.783140][T20801] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 498.939648][T20809] netlink: 'syz.1.4176': attribute type 24 has an invalid length. [ 499.187846][T20818] syzkaller0: entered promiscuous mode [ 499.193511][T20818] syzkaller0: entered allmulticast mode [ 499.239960][T20825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.112138][T20841] netlink: 'syz.3.4184': attribute type 21 has an invalid length. [ 501.276708][T20841] __nla_validate_parse: 12 callbacks suppressed [ 501.276730][T20841] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4184'. [ 501.433198][T20851] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4186'. [ 501.636643][T20867] tipc: Enabled bearer , priority 0 [ 501.662287][T20871] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 501.680157][T20871] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 501.709394][T20877] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4194'. [ 501.757844][T20880] netlink: 'syz.3.4193': attribute type 24 has an invalid length. [ 502.075609][T20896] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4199'. [ 502.078664][T20895] team0: Device vti0 is of different type [ 502.356324][T20908] netlink: 'syz.2.4200': attribute type 1 has an invalid length. [ 502.444330][T20908] 8021q: adding VLAN 0 to HW filter on device bond5 [ 502.445166][T20915] netlink: 'syz.0.4204': attribute type 1 has an invalid length. [ 502.621747][T20915] 8021q: adding VLAN 0 to HW filter on device bond3 [ 502.767443][T20916] 8021q: adding VLAN 0 to HW filter on device bond3 [ 502.785392][T20916] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 502.800230][T20916] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 502.894839][T20942] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4209'. [ 502.990236][T20948] : renamed from bridge_slave_0 (while UP) [ 503.063453][T20955] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 503.130161][T20956] ipvlan2: entered promiscuous mode [ 503.147816][T20956] bridge0: port 4(ipvlan2) entered blocking state [ 503.160462][T20956] bridge0: port 4(ipvlan2) entered disabled state [ 503.175933][T20956] ipvlan2: entered allmulticast mode [ 503.183118][T20956] bridge0: entered allmulticast mode [ 503.199316][T20956] ipvlan2: left allmulticast mode [ 503.210360][T20956] bridge0: left allmulticast mode [ 503.263102][T20957] ipvlan2: entered promiscuous mode [ 503.269798][T20957] bridge0: port 4(ipvlan2) entered blocking state [ 503.277368][T20957] bridge0: port 4(ipvlan2) entered disabled state [ 503.285784][T20957] ipvlan2: entered allmulticast mode [ 503.291695][T20957] bridge0: entered allmulticast mode [ 503.302160][T20957] ipvlan2: left allmulticast mode [ 503.307327][T20957] bridge0: left allmulticast mode [ 503.515306][T20978] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4221'. [ 503.816440][T20985] C speed is unknown, defaulting to 1000 [ 503.870918][ T5881] Bluetooth: hci4: command 0x0406 tx timeout [ 503.894700][T20985] lo speed is unknown, defaulting to 1000 [ 504.238889][T21000] netlink: 'syz.0.4227': attribute type 8 has an invalid length. [ 504.273377][T21000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4227'. [ 504.848448][T21015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4232'. [ 504.886650][ T73] team0: left allmulticast mode [ 504.911007][ T73] team_slave_0: left allmulticast mode [ 504.922461][ T5881] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 504.937319][ T5881] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 504.945963][ T73] team_slave_1: left allmulticast mode [ 504.951942][ T5881] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 504.962654][ T5881] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 504.970483][ T73] team0: left promiscuous mode [ 504.975997][ T73] team_slave_0: left promiscuous mode [ 504.981992][ T73] team_slave_1: left promiscuous mode [ 504.987583][ T5881] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 504.999212][ T73] bridge0: port 3(team0) entered disabled state [ 505.047264][ T73] bridge_slave_1: left allmulticast mode [ 505.053452][ T73] bridge_slave_1: left promiscuous mode [ 505.060596][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.080567][ T73] bridge_slave_0: left allmulticast mode [ 505.087174][ T73] bridge_slave_0: left promiscuous mode [ 505.094434][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.184795][T21030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4237'. [ 505.248896][T21031] netlink: 'syz.1.4237': attribute type 1 has an invalid length. [ 505.257155][T21031] netlink: 'syz.1.4237': attribute type 3 has an invalid length. [ 505.265232][T21031] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4237'. [ 505.645144][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.655366][ T73] bond0 (unregistering): Released all slaves [ 505.809315][ T73] bond1 (unregistering): Released all slaves [ 505.930985][ T73] tipc: Left network mode [ 506.166333][T21019] C speed is unknown, defaulting to 1000 [ 506.216151][T21019] lo speed is unknown, defaulting to 1000 [ 506.487732][T21049] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4244'. [ 506.542440][T21047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4243'. [ 506.605735][T21049] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.4244'. [ 506.651935][T21049] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.4244'. [ 506.817342][T21064] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4246'. [ 507.043411][T21074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4250'. [ 507.074876][ T5871] Bluetooth: hci0: command tx timeout [ 507.086383][T21070] netlink: 'syz.0.4248': attribute type 2 has an invalid length. [ 507.143230][T21074] dummy0: entered promiscuous mode [ 507.157405][T21074] batadv_slave_0: entered promiscuous mode [ 507.216040][T21074] debugfs: 'hsr1' already exists in 'hsr' [ 507.239271][T21078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4248'. [ 507.245703][T21074] Cannot create hsr debugfs directory [ 507.399918][T21086] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4253'. [ 507.489003][ T73] hsr_slave_0: left promiscuous mode [ 507.511547][ T73] hsr_slave_1: left promiscuous mode [ 507.528186][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.590572][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.119410][ T73] team0 (unregistering): Port device team_slave_1 removed [ 508.178392][ T73] team0 (unregistering): Port device team_slave_0 removed [ 508.612558][T21080] bond0: entered promiscuous mode [ 508.617906][T21080] bond_slave_0: entered promiscuous mode [ 508.624635][T21080] bond_slave_1: entered promiscuous mode [ 508.630435][T21080] bridge_slave_1: entered promiscuous mode [ 508.637009][T21080] bond2: entered promiscuous mode [ 508.884805][T21111] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4258'. [ 508.945617][T21122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4260'. [ 509.170826][ T5871] Bluetooth: hci0: command tx timeout [ 509.306038][T21019] chnl_net:caif_netlink_parms(): no params data found [ 509.554049][T21142] lo: left promiscuous mode [ 509.589612][T21142] 0ªî{X¹¦: left allmulticast mode [ 509.775162][T21142] caif0: left promiscuous mode [ 509.796161][T21142] caif0: left allmulticast mode [ 509.978817][T21142] bridge_slave_0: left promiscuous mode [ 510.308107][T21142] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 510.359630][T21142] mac80211_hwsim hwsim32 wlan1: left allmulticast mode [ 510.406808][T21142] veth3: left promiscuous mode [ 510.420532][T21142] veth5: left allmulticast mode [ 510.430584][T21142] bridge4: left promiscuous mode [ 510.439698][T21147] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 510.466428][T10742] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.484228][T10742] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.589125][T21174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.597559][T21174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.606847][T21174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.618924][T21174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.840362][T10742] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.865033][T10742] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.876691][T10742] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.889337][T10742] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.898764][T10742] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.908535][T10742] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.956102][ T73] IPVS: stop unused estimator thread 0... [ 510.956886][T21199] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 511.000905][T21019] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.008209][T21019] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.016855][T21019] bridge_slave_0: entered allmulticast mode [ 511.030387][T21019] bridge_slave_0: entered promiscuous mode [ 511.049565][T21019] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.058114][T21019] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.068781][T21019] bridge_slave_1: entered allmulticast mode [ 511.076662][T21019] bridge_slave_1: entered promiscuous mode [ 511.232593][ T5871] Bluetooth: hci0: command tx timeout [ 511.239758][T21019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.274031][T21019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.333064][T21210] team0: Device vti0 is up. Set it down before adding it as a team port [ 511.513649][T21228] Unsupported ieee802154 address type: 0 [ 511.539440][T21019] team0: Port device team_slave_0 added [ 511.559823][T21019] team0: Port device team_slave_1 added [ 511.660472][T21019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.672792][T21019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.718757][T21019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.742872][T21019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.776490][T21019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.808177][T21019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.972394][T21019] hsr_slave_0: entered promiscuous mode [ 511.979512][T21019] hsr_slave_1: entered promiscuous mode [ 511.998428][T21019] debugfs: 'hsr0' already exists in 'hsr' [ 512.010079][T21019] Cannot create hsr debugfs directory [ 512.157589][T21250] __nla_validate_parse: 3 callbacks suppressed [ 512.157611][T21250] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4292'. [ 512.303868][T21259] delete_channel: no stack [ 512.315720][T21245] tipc: Resetting bearer [ 512.674522][ T73] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 512.762286][T21019] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 512.826647][T21019] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 512.887507][T21019] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 512.916992][T21019] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 513.278164][T21019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.312589][ T5881] Bluetooth: hci0: command tx timeout [ 513.322984][T21019] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.337113][T10743] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.344366][T10743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.392530][T10743] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.399856][T10743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.690364][T21304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4306'. [ 513.729866][T21304] tipc: Enabling of bearer rejected, already enabled [ 513.866395][T21311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4307'. [ 513.878967][T21311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4307'. [ 513.902085][T21314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4308'. [ 513.938597][T21315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4307'. [ 514.114661][ T5881] Bluetooth: hci1: command 0x0406 tx timeout [ 514.326965][T21323] tipc: Enabling of bearer rejected, already enabled [ 514.374043][T21019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.470449][T21337] bond6: entered promiscuous mode [ 514.482224][T21337] bond6: entered allmulticast mode [ 514.488143][T21337] 8021q: adding VLAN 0 to HW filter on device bond6 [ 514.646615][T21351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4316'. [ 514.717969][T21337] bond6 (unregistering): Released all slaves [ 514.756310][T21347] netlink: 'syz.0.4316': attribute type 3 has an invalid length. [ 514.799670][T21347] netlink: 766 bytes leftover after parsing attributes in process `syz.0.4316'. [ 514.858775][T21350] : entered promiscuous mode [ 515.185044][T21379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4323'. [ 515.255575][T21379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4323'. [ 515.264360][T21377] can: request_module (can-proto-0) failed. [ 515.329906][T21019] veth0_vlan: entered promiscuous mode [ 515.359972][T21019] veth1_vlan: entered promiscuous mode [ 515.438745][T21019] veth0_macvtap: entered promiscuous mode [ 515.475579][T21019] veth1_macvtap: entered promiscuous mode [ 515.526533][T21392] netlink: 'syz.1.4329': attribute type 3 has an invalid length. [ 515.534947][T21019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.542978][T21392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.586196][T21019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.657006][T10745] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.681065][T10745] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.744863][T10745] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.756456][T10745] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.080931][T10750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.108271][T10750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.218303][T10750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.241911][T10750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.518701][T21437] netlink: 'syz.5.4226': attribute type 1 has an invalid length. [ 516.815461][T21450] bridge_slave_0: left allmulticast mode [ 516.827168][T21450] bridge_slave_0: left promiscuous mode [ 516.849307][T21450] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.863208][T21450] bridge_slave_1: left allmulticast mode [ 516.869264][T21450] bridge_slave_1: left promiscuous mode [ 516.875606][T21450] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.887804][T21450] bond0: (slave bond_slave_0): Releasing backup interface [ 516.902553][T21450] bond0: (slave bond_slave_1): Releasing backup interface [ 516.922066][T21450] team0: Port device team_slave_0 removed [ 516.935071][T21450] team0: Port device team_slave_1 removed [ 516.942225][T21450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.949890][T21450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.958831][T21450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.966715][T21450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.035254][T21452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.302895][T21469] netlink: 'syz.4.4350': attribute type 1 has an invalid length. [ 517.350835][T21469] netlink: 'syz.4.4350': attribute type 10 has an invalid length. [ 517.396337][T21469] __nla_validate_parse: 6 callbacks suppressed [ 517.396360][T21469] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4350'. [ 517.666426][T21486] netlink: 'syz.2.4353': attribute type 1 has an invalid length. [ 517.687832][T21486] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4353'. [ 517.786677][T21489] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4354'. [ 517.929003][T21468] veth5: entered allmulticast mode [ 517.992611][T10745] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.025451][T21490] wireguard: wg1: Could not create IPv4 socket [ 518.053749][ T73] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.079229][T21485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4353'. [ 518.178620][ T73] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.218304][ T73] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.229349][T21491] syzkaller1: entered promiscuous mode [ 518.238820][T21491] syzkaller1: entered allmulticast mode [ 518.259421][T21502] hsr0 speed is unknown, defaulting to 1000 [ 518.269956][T21502] hsr0 speed is unknown, defaulting to 1000 [ 518.323797][T21502] hsr0 speed is unknown, defaulting to 1000 [ 518.360550][T21509] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4360'. [ 518.379194][T21502] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 518.618877][T21519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4363'. [ 518.631514][T21519] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4363'. [ 518.646958][T21502] hsr0 speed is unknown, defaulting to 1000 [ 518.647027][T21514] netlink: 'syz.1.4362': attribute type 4 has an invalid length. [ 518.677468][T21519] geneve2: entered promiscuous mode [ 518.688467][T21519] geneve2: entered allmulticast mode [ 518.699680][T21502] hsr0 speed is unknown, defaulting to 1000 [ 518.706719][T10745] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.724741][T21502] hsr0 speed is unknown, defaulting to 1000 [ 518.731148][T10745] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.774166][T21502] hsr0 speed is unknown, defaulting to 1000 [ 518.780271][T10745] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.789700][T10745] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.820977][T21502] hsr0 speed is unknown, defaulting to 1000 [ 518.830224][T21502] hsr0 speed is unknown, defaulting to 1000 [ 518.856906][T21526] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4365'. [ 518.886387][T21502] hsr0 speed is unknown, defaulting to 1000 [ 518.896291][T21502] hsr0 speed is unknown, defaulting to 1000 [ 518.907326][T21502] hsr0 speed is unknown, defaulting to 1000 [ 519.230970][ T5870] Bluetooth: hci2: command 0x0406 tx timeout [ 519.420448][T21551] veth0: entered promiscuous mode [ 519.433835][T21550] veth0: left promiscuous mode [ 519.458866][T21555] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4375'. [ 519.478612][T21555] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4375'. [ 519.537241][T21559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.628449][T21559] tipc: Started in network mode [ 519.649594][T21559] tipc: Node identity de228008b727, cluster identity 4711 [ 519.660492][T21559] tipc: Enabled bearer , priority 0 [ 519.689676][T21570] syzkaller0: entered promiscuous mode [ 519.715131][T21570] syzkaller0: entered allmulticast mode [ 519.821264][T21557] tipc: Resetting bearer [ 519.897526][T21557] tipc: Disabling bearer [ 519.914848][T21577] netlink: 'syz.5.4384': attribute type 22 has an invalid length. [ 519.933901][T10745] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.952131][T21577] netlink: 'syz.5.4384': attribute type 22 has an invalid length. [ 519.964573][T10745] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.985249][T10745] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.013269][T10745] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.254181][T21602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.893984][T21615] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 521.062945][T21628] netlink: 'syz.0.4399': attribute type 4 has an invalid length. [ 521.097760][T21630] bridge_slave_0: entered promiscuous mode [ 521.577913][T21657] openvswitch: netlink: Key type 12304 is out of range max 32 [ 521.727763][T21662] hsr_slave_0: left promiscuous mode [ 521.738797][T21662] hsr_slave_1: left promiscuous mode [ 521.845026][T21663] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 521.850866][T21671] netlink: 'syz.4.4411': attribute type 24 has an invalid length. [ 521.855365][T21666] tipc: Enabling of bearer rejected, already enabled [ 521.865305][T21663] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 521.911264][T21674] netlink: 'syz.4.4411': attribute type 24 has an invalid length. [ 521.964282][T21663] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 522.466097][T21696] __nla_validate_parse: 8 callbacks suppressed [ 522.466116][T21696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4417'. [ 522.542806][T21697] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 522.691118][T21710] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4420'. [ 522.869661][T21716] netlink: 'syz.5.4424': attribute type 1 has an invalid length. [ 522.906788][T21716] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4424'. [ 522.940173][T21716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4424'. [ 522.993124][T21723] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4426'. [ 523.046262][T21728] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4426'. [ 523.108710][T21716] bond1: entered promiscuous mode [ 523.124561][T21716] bond1: entered allmulticast mode [ 523.134803][T21716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 523.201205][T21737] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4428'. [ 523.453158][T21752] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4433'. [ 523.626116][T21764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4437'. [ 523.630702][T21758] netlink: 288 bytes leftover after parsing attributes in process `syz.0.4434'. [ 523.690035][T21770] netem: incorrect gi model size [ 523.695781][T21770] netem: change failed [ 523.792770][ T5871] Bluetooth: hci2: command 0x0406 tx timeout [ 524.001591][T21788] netlink: 'syz.5.4440': attribute type 12 has an invalid length. [ 524.683605][T21818] netlink: 'syz.2.4453': attribute type 1 has an invalid length. [ 524.785797][T10742] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.802035][T10742] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.822918][T10742] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.844237][T10742] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.994794][T21833] netlink: 'syz.5.4460': attribute type 21 has an invalid length. [ 525.008267][T21833] netlink: 'syz.5.4460': attribute type 13 has an invalid length. [ 525.047786][T21835] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 525.214672][T21840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.377102][ T9172] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 525.397119][ T9172] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 525.406648][ T5943] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 525.673130][T21867] netlink: 'syz.4.4469': attribute type 4 has an invalid length. [ 525.706159][T21840] C speed is unknown, defaulting to 1000 [ 525.746646][T21840] lo speed is unknown, defaulting to 1000 [ 525.841440][ T5929] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 526.052980][T21840] hsr0 speed is unknown, defaulting to 1000 [ 526.056042][ T5929] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 526.275787][T21889] macvlan4: entered promiscuous mode [ 526.282488][T21889] macvlan4: entered allmulticast mode [ 526.289143][T21889] veth1_to_bond: entered promiscuous mode [ 526.295121][T21889] veth1_to_bond: entered allmulticast mode [ 526.305534][T21889] team0: Port device macvlan4 added [ 526.625254][T21909] netlink: 'syz.0.4480': attribute type 10 has an invalid length. [ 526.706007][T21909] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.215913][T21938] netlink: 'syz.5.4488': attribute type 58 has an invalid length. [ 527.672520][T21969] __nla_validate_parse: 22 callbacks suppressed [ 527.672542][T21969] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4498'. [ 527.853656][T21979] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4498'. [ 528.594434][T10750] bond0 (unregistering): Released all slaves [ 528.619228][T10750] bond1 (unregistering): Released all slaves [ 528.752435][T10750] bond2 (unregistering): Released all slaves [ 528.769834][T10750] bond3 (unregistering): Released all slaves [ 528.902212][T10750] bond4 (unregistering): Released all slaves [ 528.919703][T10750] bond5 (unregistering): Released all slaves [ 528.934769][T10750] bond6 (unregistering): Released all slaves [ 528.955658][T21957] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4494'. [ 528.968586][T21958] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4494'. [ 528.988087][T21963] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4494'. [ 529.136718][T21987] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4502'. [ 529.150914][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 529.200564][T21960] C speed is unknown, defaulting to 1000 [ 529.206382][T10750] tipc: Disabling bearer [ 529.256715][T10750] tipc: Left network mode [ 529.288680][T21960] lo speed is unknown, defaulting to 1000 [ 530.399370][T22033] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.4512'. [ 530.409260][T21960] hsr0 speed is unknown, defaulting to 1000 [ 530.668032][T10750] mac80211_hwsim hwsim8 wlan0 (unregistering): left promiscuous mode [ 531.243819][T22077] IPVS: Error connecting to the multicast addr [ 531.648479][T10750] veth1_macvtap: left promiscuous mode [ 531.660138][T22091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4530'. [ 531.680138][T10750] veth0_macvtap: left promiscuous mode [ 531.844269][T22104] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4530'. [ 532.607548][T22111] TCP: tcp_parse_options: Illegal window scaling value 64 > 14 received [ 532.670167][T22113] pim6reg1: entered promiscuous mode [ 532.696591][T22113] pim6reg1: entered allmulticast mode [ 532.737202][T22119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4535'. [ 532.879172][T22126] wg1: entered promiscuous mode [ 532.885942][T22126] wg1: entered allmulticast mode [ 532.934858][T22128] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4539'. [ 532.984873][T22132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4542'. [ 533.012852][T22126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4540'. [ 533.115575][T10750] IPVS: stop unused estimator thread 0... [ 533.601477][T22161] netlink: 'syz.1.4549': attribute type 4 has an invalid length. [ 533.623015][T22163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.739933][T22165] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4551'. [ 533.770980][T22167] tipc: Enabling of bearer rejected, already enabled [ 534.259153][T22194] tipc: Started in network mode [ 534.276164][T22194] tipc: Node identity 0e85058e3f2a, cluster identity 4711 [ 534.298019][T22194] tipc: Enabled bearer , priority 0 [ 534.412067][T22194] syzkaller0: entered promiscuous mode [ 534.432309][T22194] syzkaller0: entered allmulticast mode [ 534.438638][T22194] tipc: Resetting bearer [ 534.524324][T22190] tipc: Resetting bearer [ 535.363625][T22211] delete_channel: no stack [ 535.378058][ T9] tipc: Node number set to 833553806 [ 536.608410][T22190] tipc: Disabling bearer [ 536.950281][T22236] Bluetooth: MGMT ver 1.23 [ 536.989785][T22241] bridge: RTM_NEWNEIGH with invalid ether address [ 536.996758][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 537.079026][T22245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4580'. [ 537.082261][T22242] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4578'. [ 537.090895][T22245] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4580'. [ 537.119161][T22245] netlink: 'syz.5.4580': attribute type 18 has an invalid length. [ 537.239784][T22249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.293528][T22245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4580'. [ 537.320948][T22245] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4580'. [ 537.365854][T22245] netlink: 'syz.5.4580': attribute type 18 has an invalid length. [ 537.439241][T22262] netlink: 'syz.0.4583': attribute type 4 has an invalid length. [ 537.755454][T22277] tipc: Enabled bearer , priority 0 [ 537.762684][T22275] tipc: Enabling of bearer rejected, already enabled [ 537.777941][T22276] tipc: Trying to set illegal importance in message [ 537.826561][T22277] syzkaller0: entered promiscuous mode [ 537.843674][T22277] syzkaller0: entered allmulticast mode [ 537.874305][T22275] netlink: 'syz.5.4588': attribute type 1 has an invalid length. [ 537.883281][T22287] delete_channel: no stack [ 537.958636][T22275] __nla_validate_parse: 1 callbacks suppressed [ 537.958656][T22275] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4588'. [ 537.994677][T22275] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4588'. [ 538.009164][T22277] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4588'. [ 538.037313][T22277] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4588'. [ 538.048607][T22296] C speed is unknown, defaulting to 1000 [ 538.109221][T22298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4593'. [ 538.193464][T22305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4596'. [ 538.207101][T22307] netlink: 'syz.1.4593': attribute type 9 has an invalid length. [ 538.211299][T22306] openvswitch: netlink: Key type 29 is not supported [ 538.379704][T22274] tipc: Resetting bearer [ 538.497627][T22274] tipc: Disabling bearer [ 538.566250][T22324] 8021q: VLANs not supported on ip6tnl0 [ 538.589293][T22324] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20003 [ 539.010419][T22346] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4607'. [ 539.030439][T22348] syz_tun: entered allmulticast mode [ 539.132474][T22348] syz_tun: left allmulticast mode [ 539.480125][T22377] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4615'. [ 539.527740][T22379] netlink: 'syz.2.4616': attribute type 18 has an invalid length. [ 539.788168][T22390] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4618'. [ 540.157565][T22412] tipc: Enabled bearer , priority 0 [ 540.182724][T22412] syzkaller0: entered promiscuous mode [ 540.188407][T22412] syzkaller0: entered allmulticast mode [ 540.204633][T22417] tipc: New replicast peer: 255.255.255.255 [ 540.210040][T22421] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4628'. [ 540.214739][T22417] tipc: Enabled bearer , priority 10 [ 540.272495][T22412] tipc: Resetting bearer [ 540.316888][T22423] nft_compat: unsupported protocol 0 [ 540.323883][T22411] tipc: Resetting bearer [ 540.352224][T22411] tipc: Disabling bearer [ 540.545472][T22433] geneve2: entered promiscuous mode [ 540.556584][T22433] geneve2: entered allmulticast mode [ 540.584839][T10750] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 540.610780][T10750] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 540.730906][T22433] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.762109][T22433] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.802166][T22446] netlink: 'syz.0.4637': attribute type 49 has an invalid length. [ 540.814290][T10750] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 540.889009][T22441] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 541.317829][T22471] team0: Device vti0 is of different type [ 542.268655][T22433] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.279874][T22433] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.290561][T22433] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 542.314928][T22504] netlink: 'syz.0.4654': attribute type 1 has an invalid length. [ 542.408365][T22433] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.425771][T22433] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.437040][T22433] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 542.467860][T22503] bond5: (slave geneve3): making interface the new active one [ 542.477259][T22503] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 542.499823][T10750] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 542.510023][T10750] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 542.539415][T22433] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.550519][T22433] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.562167][T22433] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 542.590246][T10750] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 542.599906][T10750] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 542.804396][T10742] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.836600][T10742] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 542.845815][T10742] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 542.897282][T10742] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.919675][T10742] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 542.939601][T10742] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 542.988776][T22528] netlink: 'syz.2.4659': attribute type 1 has an invalid length. [ 543.092089][T10742] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.111867][T10742] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 543.151852][T10742] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 543.160562][T10742] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.179352][T10742] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 543.198843][T10742] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 543.252073][T22528] __nla_validate_parse: 9 callbacks suppressed [ 543.252094][T22528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4659'. [ 543.465425][T22533] gretap1: entered promiscuous mode [ 544.674000][T10743] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 546.003643][T22571] rdma_op ffff888051bfd9f0 conn xmit_rdma 0000000000000000 [ 546.162707][T22578] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4673'. [ 546.196376][T22584] tipc: Cannot configure node identity twice [ 546.232688][T22587] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 546.555460][T22603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4680'. [ 546.594934][T22611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4682'. [ 546.688740][T22621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4680'. [ 546.807772][T22630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4685'. [ 546.878390][T22632] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4685'. [ 547.205849][T22642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4688'. [ 547.250699][T22642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4688'. [ 547.528955][T22654] bridge1: entered allmulticast mode [ 547.586109][T22667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4694'. [ 547.840252][T22676] tipc: Enabled bearer , priority 0 [ 547.863577][T22676] syzkaller0: entered promiscuous mode [ 547.878598][T22676] syzkaller0: entered allmulticast mode [ 547.890119][T22676] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 548.003316][T22676] tipc: Resetting bearer [ 548.113401][T22689] tipc: Resetting bearer [ 548.214146][T22689] tipc: Disabling bearer [ 548.289703][T22707] __nla_validate_parse: 2 callbacks suppressed [ 548.289722][T22707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4702'. [ 548.391154][T22715] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4704'. [ 548.473464][T22719] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4707'. [ 548.511299][T22717] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4707'. [ 548.889902][T22732] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4711'. [ 548.904101][ T9] hid-generic 0005:046D:FFF9.0002: item fetching failed at offset 0/1 [ 548.918969][T22734] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4712'. [ 548.922753][ T9] hid-generic 0005:046D:FFF9.0002: probe with driver hid-generic failed with error -22 [ 549.519755][T22761] veth11: entered allmulticast mode [ 549.531972][T22765] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4719'. [ 549.551401][T22765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4719'. [ 549.760230][T22773] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4721'. [ 549.786736][T22776] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4721'. [ 549.809746][T22783] netlink: 'syz.4.4724': attribute type 2 has an invalid length. [ 549.882543][T22787] netlink: 'syz.5.4725': attribute type 1 has an invalid length. [ 549.904051][T22787] netlink: 'syz.5.4725': attribute type 3 has an invalid length. [ 549.926777][T22787] netlink: 'syz.5.4725': attribute type 235 has an invalid length. [ 550.207761][T22802] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 550.331373][T22813] macvlan0: entered allmulticast mode [ 550.407943][T22813] macvlan0 (unregistering): left allmulticast mode [ 550.528957][T22827] dvmrp0: entered allmulticast mode [ 550.557723][T22813] dvmrp0: left allmulticast mode [ 550.585393][T22813] dvmrp1: left allmulticast mode [ 551.424999][T22885] netlink: 'syz.4.4753': attribute type 39 has an invalid length. [ 551.487739][T22887] : entered promiscuous mode [ 551.574227][T22893] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 552.003982][T22919] netlink: 'syz.4.4766': attribute type 3 has an invalid length. [ 552.023967][T22921] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 552.350970][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 552.530283][T22955] netlink: 'syz.1.4777': attribute type 1 has an invalid length. [ 552.825196][T22968] netlink: 'syz.0.4781': attribute type 1 has an invalid length. [ 552.841394][ T5922] IPVS: starting estimator thread 0... [ 552.951794][T22974] IPVS: using max 22 ests per chain, 52800 per kthread [ 553.478592][T23004] __nla_validate_parse: 21 callbacks suppressed [ 553.478613][T23004] netlink: 164 bytes leftover after parsing attributes in process `syz.5.4794'. [ 553.494780][ T5980] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 553.923678][T23042] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4802'. [ 553.996492][T23045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4803'. [ 554.016144][T23045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4803'. [ 554.198523][T23057] netlink: 'syz.5.4808': attribute type 1 has an invalid length. [ 554.255886][T23057] bond2: entered promiscuous mode [ 554.256403][T23066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4810'. [ 554.263850][T23057] 8021q: adding VLAN 0 to HW filter on device bond2 [ 554.285394][T23064] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4809'. [ 554.373530][T23068] 8021q: adding VLAN 0 to HW filter on device bond3 [ 554.383520][T23068] bond2: (slave bond3): making interface the new active one [ 554.392197][T23068] bond3: entered promiscuous mode [ 554.399664][T23068] bond2: (slave bond3): Enslaving as an active interface with an up link [ 554.434860][T23080] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4813'. [ 554.510996][T23033] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 554.557843][T23084] netlink: 'syz.0.4815': attribute type 21 has an invalid length. [ 554.566584][T23084] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4815'. [ 554.576338][T23084] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4815'. [ 555.097465][T23119] bond0: (slave ip6tnl0): Error: Device type is different from other slaves [ 555.148841][T23118] C speed is unknown, defaulting to 1000 [ 555.212927][T23118] lo speed is unknown, defaulting to 1000 [ 555.641106][T23118] hsr0 speed is unknown, defaulting to 1000 [ 555.878040][T23144] tipc: Enabling of bearer rejected, failed to enable media [ 556.278549][T23160] validate_nla: 1 callbacks suppressed [ 556.278570][T23160] netlink: 'syz.5.4833': attribute type 11 has an invalid length. [ 556.325409][T23160] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4833'. [ 556.396440][T23176] tipc: Enabling of bearer rejected, already enabled [ 556.457594][T23173] netlink: 'syz.2.4836': attribute type 29 has an invalid length. [ 556.467572][T23173] netlink: 'syz.2.4836': attribute type 29 has an invalid length. [ 557.057854][T23208] gretap0: entered promiscuous mode [ 557.077752][T23208] gretap0: left promiscuous mode [ 557.950422][T23257] netlink: 'syz.1.4865': attribute type 21 has an invalid length. [ 557.964325][T23257] netlink: 'syz.1.4865': attribute type 5 has an invalid length. [ 558.016375][T23260] netlink: zone id is out of range [ 558.032163][T23260] netlink: zone id is out of range [ 558.056695][T23260] netlink: zone id is out of range [ 558.071343][T23260] netlink: zone id is out of range [ 558.076643][T23260] netlink: zone id is out of range [ 558.187464][T23269] tipc: Enabling of bearer rejected, failed to enable media [ 558.720216][T23305] __nla_validate_parse: 8 callbacks suppressed [ 558.720239][T23305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4876'. [ 558.805404][T23309] netlink: 'syz.4.4878': attribute type 23 has an invalid length. [ 559.195044][T23319] netlink: 'syz.0.4882': attribute type 1 has an invalid length. [ 559.302327][T23328] netlink: 'syz.0.4884': attribute type 1 has an invalid length. [ 559.497455][T23328] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 559.766301][T23351] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4888'. [ 559.924978][T23357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 560.025132][T23369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4894'. [ 560.044822][T23369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4894'. [ 560.054759][T23371] tc_dump_action: action bad kind [ 560.285862][T23390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4902'. [ 560.443152][T23401] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4904'. [ 560.669560][T23415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.133398][T23438] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4913'. [ 561.323152][T23447] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4915'. [ 561.561102][T23458] netlink: 'syz.0.4919': attribute type 10 has an invalid length. [ 561.588515][T23458] team0: Device ipvlan1 failed to register rx_handler [ 561.603022][T23465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4923'. [ 561.613693][T23463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4921'. [ 561.668456][T23463] dummy0: entered promiscuous mode [ 561.677277][T23463] batadv_slave_0: entered promiscuous mode [ 561.690468][T23463] debugfs: 'hsr1' already exists in 'hsr' [ 561.697394][T23463] Cannot create hsr debugfs directory [ 561.735829][T23458] ip6erspan0: entered promiscuous mode [ 561.748247][T23464] bridge_slave_0: entered promiscuous mode [ 561.800563][T23478] tipc: Enabling of bearer rejected, failed to enable media [ 562.078346][T23502] netlink: 'syz.4.4932': attribute type 10 has an invalid length. [ 562.355942][T23519] erspan0: entered promiscuous mode [ 562.390328][T23519] gretap0: entered promiscuous mode [ 562.702469][T23534] syzkaller1: entered promiscuous mode [ 562.718848][T23534] syzkaller1: entered allmulticast mode [ 562.942440][T23545] netlink: 'syz.0.4941': attribute type 2 has an invalid length. [ 562.967387][T23544] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 562.983007][T23545] nbd: must specify a device to reconfigure [ 563.069131][T23545] netlink: 'syz.0.4941': attribute type 10 has an invalid length. [ 563.084504][T23545] veth0_vlan: entered allmulticast mode [ 563.092256][T23545] veth0_vlan: left promiscuous mode [ 563.134307][T23545] veth0_vlan: entered promiscuous mode [ 563.145448][T23545] team0: Device veth0_vlan failed to register rx_handler [ 563.585987][T23563] rdma_rxe: rxe_newlink: failed to add lo [ 563.619091][T23560] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 563.639906][T23564] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 563.646948][T23563] erspan0: left promiscuous mode [ 563.728963][T23563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.745559][T23563] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.750483][T23578] __nla_validate_parse: 9 callbacks suppressed [ 563.750505][T23578] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4951'. [ 563.770443][T23563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 563.839087][T23575] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 564.097216][T23592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4954'. [ 564.114734][T23593] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4954'. [ 564.260510][T23593] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 564.439602][T23593] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 564.660293][T23593] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 564.834432][T23593] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 565.005974][T23641] netlink: 'syz.5.4967': attribute type 1 has an invalid length. [ 565.022284][T23643] netlink: 'syz.5.4967': attribute type 1 has an invalid length. [ 565.096145][T10744] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 565.134404][T10744] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 565.218675][T10742] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 565.313676][T23656] netlink: 'syz.2.4972': attribute type 23 has an invalid length. [ 565.334428][T23659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4971'. [ 565.350138][T23662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.366461][T23662] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.4973'. [ 565.381957][T23659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4971'. [ 565.411679][T23659] netlink: 'syz.4.4971': attribute type 1 has an invalid length. [ 565.446836][T23663] netlink: 'syz.4.4971': attribute type 2 has an invalid length. [ 565.508044][T23663] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4971'. [ 565.533979][T23663] nbd: must specify at least one socket [ 565.540474][T23668] pim6reg1: entered promiscuous mode [ 565.548937][T23668] pim6reg1: entered allmulticast mode [ 565.572310][T23671] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4975'. [ 565.631349][ T5871] Bluetooth: hci0: command 0x0401 tx timeout [ 565.929697][T23688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4981'. [ 566.188686][T23704] vlan2: entered allmulticast mode [ 566.194796][T23704] mac80211_hwsim hwsim31 wlan0: entered allmulticast mode [ 566.368296][T23710] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4989'. [ 566.596338][T23723] tipc: Enabling of bearer rejected, failed to enable media [ 566.769710][T23730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 566.807337][T23592] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 566.877945][T23737] syzkaller1: entered promiscuous mode [ 566.892685][T23737] syzkaller1: entered allmulticast mode [ 566.904465][T23592] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 567.003984][T23592] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 567.228088][T10742] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 567.298972][T10745] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 567.350236][T10745] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 567.383216][T10745] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 567.685160][T23777] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20002 [ 567.711361][ T5871] Bluetooth: hci0: command 0x0401 tx timeout [ 567.734015][T10750] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xfa [ 568.256413][T23799] netlink: 'syz.0.5016': attribute type 1 has an invalid length. [ 568.292865][T23799] 8021q: adding VLAN 0 to HW filter on device bond6 [ 568.368427][T23801] veth13: entered promiscuous mode [ 568.379406][T23801] bond6: (slave veth13): Enslaving as a backup interface with a down link [ 568.900402][T23826] __nla_validate_parse: 5 callbacks suppressed [ 568.900424][T23826] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5022'. [ 569.155606][T23843] netlink: 'syz.4.5028': attribute type 1 has an invalid length. [ 569.179380][T23843] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5028'. [ 569.208601][T23841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5026'. [ 569.291113][T23845] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 569.934744][T23876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5035'. [ 569.943962][T23876] netlink: 'syz.1.5035': attribute type 9 has an invalid length. [ 569.954116][T23876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5035'. [ 570.007292][T23876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5035'. [ 570.039187][T23876] netlink: 'syz.1.5035': attribute type 9 has an invalid length. [ 570.063658][T23876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5035'. [ 570.268310][T23894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5038'. [ 570.346030][T23894] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5038'. [ 570.374325][T23892] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5038'. [ 571.404468][T23946] bond6 (unregistering): Released all slaves [ 572.314846][T23986] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 572.964275][T23030] hid (null): unknown global tag 0xe [ 572.985060][T23030] hid (null): nested delimiters [ 573.344698][T24053] 0ªî{X¹¦: entered promiscuous mode [ 573.558209][T24059] netlink: 'syz.5.5090': attribute type 1 has an invalid length. [ 573.667979][T24059] 8021q: adding VLAN 0 to HW filter on device bond4 [ 573.742673][T24071] pim6reg: entered allmulticast mode [ 573.779549][T24064] pim6reg: left allmulticast mode [ 573.981228][T24077] __nla_validate_parse: 10 callbacks suppressed [ 573.981253][T24077] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5094'. [ 574.039867][T24077] netlink: 'syz.5.5094': attribute type 7 has an invalid length. [ 574.061240][T24077] netlink: 'syz.5.5094': attribute type 8 has an invalid length. [ 574.069217][T24077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5094'. [ 574.185345][T24086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5097'. [ 574.251791][T24087] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5098'. [ 574.458216][T23030] hid-generic 0005:0D45:1012.0003: unknown global tag 0xe [ 574.487292][T23030] hid-generic 0005:0D45:1012.0003: item 0 2 1 14 parsing failed [ 574.507550][T23030] hid-generic 0005:0D45:1012.0003: probe with driver hid-generic failed with error -22 [ 574.596778][T24101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5102'. [ 574.662286][T24104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5106'. [ 574.954369][T24120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5111'. [ 575.080273][T24121] batadv1: entered allmulticast mode [ 575.141206][T24130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5114'. [ 575.227508][T24133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5114'. [ 575.319228][T24142] netlink: 'syz.4.5117': attribute type 83 has an invalid length. [ 575.363810][T24142] netlink: 'syz.4.5117': attribute type 1 has an invalid length. [ 575.872476][T24172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5124'. [ 576.672236][ T9149] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 576.795898][T24218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 576.813111][T24214] tipc: Enabled bearer , priority 0 [ 576.821060][T24214] syzkaller0: entered promiscuous mode [ 576.840247][T24214] syzkaller0: entered allmulticast mode [ 576.969921][T24214] tipc: Resetting bearer [ 577.254681][T24235] netlink: 'syz.1.5146': attribute type 9 has an invalid length. [ 577.545676][T24243] netlink: 'syz.4.5149': attribute type 2 has an invalid length. [ 578.586020][T24301] sctp: [Deprecated]: syz.4.5164 (pid 24301) Use of int in max_burst socket option deprecated. [ 578.586020][T24301] Use struct sctp_assoc_value instead [ 578.859772][T24311] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20004 [ 579.375754][T24333] tipc: Invalid UDP bearer configuration [ 579.375817][T24333] tipc: Enabling of bearer rejected, failed to enable media [ 579.809146][T24347] bond7: entered promiscuous mode [ 579.818307][T24347] bond7: entered allmulticast mode [ 579.828842][T24347] 8021q: adding VLAN 0 to HW filter on device bond7 [ 580.006956][T24347] bond7 (unregistering): Released all slaves [ 580.147561][T24360] syzkaller1: entered promiscuous mode [ 580.153279][T24360] syzkaller1: entered allmulticast mode [ 580.170745][T24360] sch_fq: defrate 6 ignored. [ 580.385908][T24377] gtp2: entered promiscuous mode [ 580.391603][T24377] gtp2: entered allmulticast mode [ 581.151130][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 581.213432][T24421] __nla_validate_parse: 11 callbacks suppressed [ 581.213454][T24421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5199'. [ 581.232858][T24421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5199'. [ 581.233782][T24424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5200'. [ 581.258877][T24426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5198'. [ 581.345625][T24431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5202'. [ 581.513031][T24443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5205'. [ 581.554000][T24443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5205'. [ 581.857707][T24459] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 581.879628][T24459] team0: Device macvtap1 is already an upper device of the team interface [ 582.112759][T24472] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5216'. [ 582.226631][T24480] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5217'. [ 582.238959][T24479] tipc: Can't bind to reserved service type 2 [ 582.240975][T24480] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5217'. [ 582.292701][T24482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 582.324989][T24485] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 582.362954][T24488] wg1: entered promiscuous mode [ 582.367968][T24488] wg1: entered allmulticast mode [ 583.095522][T24496] sctp: [Deprecated]: syz.2.5224 (pid 24496) Use of struct sctp_assoc_value in delayed_ack socket option. [ 583.095522][T24496] Use struct sctp_sack_info instead [ 583.396266][T24515] unknown channel width for channel at 909000KHz? [ 583.407760][T24515] netlink: 'syz.0.5228': attribute type 3 has an invalid length. [ 583.873791][T24532] netlink: 'syz.0.5234': attribute type 1 has an invalid length. [ 583.904600][T24532] 8021q: adding VLAN 0 to HW filter on device bond7 [ 583.928725][T24532] 8021q: adding VLAN 0 to HW filter on device bond7 [ 583.936309][T24532] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 583.948522][T24532] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 584.299186][T24544] openvswitch: netlink: Missing key (keys=40, expected=100) [ 584.776981][T24566] netlink: 'syz.4.5244': attribute type 1 has an invalid length. [ 585.209716][T24589] sch_fq: defrate 0 ignored. [ 585.966174][T24612] tipc: Enabled bearer , priority 0 [ 585.989939][T24608] tipc: Disabling bearer [ 586.468048][T24635] __nla_validate_parse: 7 callbacks suppressed [ 586.468071][T24635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5265'. [ 586.804573][T24648] netlink: 'syz.2.5270': attribute type 11 has an invalid length. [ 586.815443][T24648] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5270'. [ 586.927176][T24655] openvswitch: netlink: Multiple metadata blocks provided [ 587.011149][T24663] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5275'. [ 587.057657][T24666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5276'. [ 587.058200][T24668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5276'. [ 587.297185][T24677] bond1: (slave veth3): Releasing active interface [ 587.315315][T24677] bond5: (slave geneve3): Releasing active interface [ 587.346698][T24677] bond6: (slave veth13): Releasing backup interface [ 587.392588][T10745] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 587.425791][T10745] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 587.478797][T24683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 587.517078][T24684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 587.542242][T10745] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 587.561667][T10745] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 587.572813][T24689] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 587.582686][T24688] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 587.671104][T24699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5283'. [ 587.708065][T24701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5284'. [ 587.924954][T24713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5288'. [ 587.944699][T24718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5290'. [ 588.027598][T24721] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5291'. [ 589.340867][T24753] bond6: entered promiscuous mode [ 589.345992][T24753] bond6: entered allmulticast mode [ 589.351732][T24753] 8021q: adding VLAN 0 to HW filter on device bond6 [ 589.423860][T24757] sit0: entered promiscuous mode [ 589.473029][T24757] netlink: 'syz.0.5304': attribute type 1 has an invalid length. [ 608.671058][ T9172] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 619.360025][ T5870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 619.371878][ T5870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 619.388742][ T5870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 619.418420][ T5881] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 619.426621][ T5881] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 619.448903][ T5881] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 619.459817][ T5881] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 619.469779][ T5881] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 619.478408][ T5881] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 619.487075][ T5881] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 619.564694][T24794] C speed is unknown, defaulting to 1000 [ 619.574081][T24794] lo speed is unknown, defaulting to 1000 [ 619.602570][T24792] C speed is unknown, defaulting to 1000 [ 619.727375][T24805] C speed is unknown, defaulting to 1000 [ 619.902005][T24816] __nla_validate_parse: 5 callbacks suppressed [ 619.902027][T24816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5321'. [ 620.003835][T24794] hsr0 speed is unknown, defaulting to 1000 [ 620.010043][T24792] lo speed is unknown, defaulting to 1000 [ 620.518669][T24837] macvlan0: entered allmulticast mode [ 620.525009][T24837] veth1_vlan: entered allmulticast mode [ 620.598962][T24837] veth1_vlan: left allmulticast mode [ 620.648662][T24837] macvlan0 (unregistering): left allmulticast mode [ 620.668860][T24805] lo speed is unknown, defaulting to 1000 [ 620.668902][T24792] hsr0 speed is unknown, defaulting to 1000 [ 620.681356][T24794] chnl_net:caif_netlink_parms(): no params data found [ 620.729664][T24846] netlink: 'syz.0.5330': attribute type 12 has an invalid length. [ 621.065397][T24794] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.085691][T24794] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.105610][T24859] netlink: 'syz.0.5333': attribute type 2 has an invalid length. [ 621.107994][T24794] bridge_slave_0: entered allmulticast mode [ 621.121181][T24794] bridge_slave_0: entered promiscuous mode [ 621.130282][T24805] hsr0 speed is unknown, defaulting to 1000 [ 621.130986][T24794] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.144072][T24794] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.151512][T24794] bridge_slave_1: entered allmulticast mode [ 621.159178][T24794] bridge_slave_1: entered promiscuous mode [ 621.264066][T24794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.285868][T24794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.309264][T24862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5334'. [ 621.381063][T24794] team0: Port device team_slave_0 added [ 621.411934][T24794] team0: Port device team_slave_1 added [ 621.480807][ T5870] Bluetooth: hci5: command tx timeout [ 621.556055][ T5870] Bluetooth: hci6: command tx timeout [ 621.659597][T24794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.669733][T24794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.697157][T24794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.709268][T24849] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 621.720118][T24794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.734954][T24794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.762263][T24794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.786456][T24792] chnl_net:caif_netlink_parms(): no params data found [ 621.906933][T24794] hsr_slave_0: entered promiscuous mode [ 621.907867][T24868] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 621.914451][T24794] hsr_slave_1: entered promiscuous mode [ 621.928070][T24794] debugfs: 'hsr0' already exists in 'hsr' [ 621.934239][T24794] Cannot create hsr debugfs directory [ 622.018209][T24870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 622.105136][T24875] netlink: 'syz.4.5338': attribute type 1 has an invalid length. [ 622.125084][T24872] tipc: Enabled bearer , priority 10 [ 622.135721][ T5964] IPVS: starting estimator thread 0... [ 622.216366][T24876] bond0: entered promiscuous mode [ 622.231852][T24877] IPVS: using max 22 ests per chain, 52800 per kthread [ 622.252423][T24876] batadv0: entered promiscuous mode [ 622.260051][T24876] batadv0: left promiscuous mode [ 622.266045][T24876] bond0: left promiscuous mode [ 622.301333][T24872] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 622.319071][T24872] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 622.408497][T24875] gretap1: entered promiscuous mode [ 622.419592][T24875] bond5: (slave gretap1): making interface the new active one [ 622.428329][T24875] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 622.470107][T24884] macvlan0: entered promiscuous mode [ 622.476101][T24884] macvlan0: entered allmulticast mode [ 622.488294][T24884] bond5: entered promiscuous mode [ 622.496134][T24884] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 622.509276][T24884] bond5: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 622.522784][T24884] bond5: left promiscuous mode [ 622.590000][T24792] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.602425][T24792] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.609820][T24792] bridge_slave_0: entered allmulticast mode [ 622.632032][T24792] bridge_slave_0: entered promiscuous mode [ 622.672038][T24792] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.693376][T24792] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.700065][T24894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5342'. [ 622.701028][T24792] bridge_slave_1: entered allmulticast mode [ 622.717660][T24792] bridge_slave_1: entered promiscuous mode [ 622.921201][ T5870] Bluetooth: hci0: command 0x0401 tx timeout [ 622.950132][T24792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.992267][T24792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.107694][T24792] team0: Port device team_slave_0 added [ 623.140078][T24792] team0: Port device team_slave_1 added [ 623.241549][T23037] tipc: Node number set to 1761968136 [ 623.348142][T24792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.367414][T24792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.403772][T24792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.461857][T24792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.476117][T24792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.509349][T24792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.536249][T24794] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 623.551409][ T5870] Bluetooth: hci5: command tx timeout [ 623.590317][T24794] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 623.606419][T24794] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 623.632080][ T5870] Bluetooth: hci6: command tx timeout [ 623.653875][T24794] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 623.834104][T24792] hsr_slave_0: entered promiscuous mode [ 623.841356][T24792] hsr_slave_1: entered promiscuous mode [ 623.850516][T24792] debugfs: 'hsr0' already exists in 'hsr' [ 623.866005][T24792] Cannot create hsr debugfs directory [ 624.272583][T24948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5355'. [ 624.429099][T24794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.725266][T24954] team0 (unregistering): Port device team_slave_0 removed [ 624.736566][T24954] team0 (unregistering): Port device team_slave_1 removed [ 624.833708][T24794] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.849932][T24792] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 624.882970][T10750] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.890227][T10750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.909053][T24792] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 624.948850][ T9149] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.956115][ T9149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.972759][T24792] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 624.996026][T24792] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 625.259591][T24792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.313251][T24792] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.334555][T10750] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.341830][T10750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.387515][T10743] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.394882][T10743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.505588][T24794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.631588][ T5870] Bluetooth: hci5: command tx timeout [ 625.712286][ T5870] Bluetooth: hci6: command tx timeout [ 625.866327][T24792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.169368][T24794] veth0_vlan: entered promiscuous mode [ 626.172108][T25000] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5364'. [ 626.209962][T25000] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5364'. [ 626.215687][T24794] veth1_vlan: entered promiscuous mode [ 626.228106][T25000] netlink: 'syz.0.5364': attribute type 13 has an invalid length. [ 626.263521][T25000] netlink: 'syz.0.5364': attribute type 58 has an invalid length. [ 626.297500][T25000] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5364'. [ 626.303428][T24794] veth0_macvtap: entered promiscuous mode [ 626.391718][T24794] veth1_macvtap: entered promiscuous mode [ 626.478138][T24794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.525479][T24794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.567793][T10742] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.579467][T10742] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.589670][T10742] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.614188][T10742] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.715799][T24792] veth0_vlan: entered promiscuous mode [ 626.787520][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.805019][T25013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5367'. [ 626.811401][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.846765][T24792] veth1_vlan: entered promiscuous mode [ 626.923366][T10746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.954314][T10746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.995928][T24792] veth0_macvtap: entered promiscuous mode [ 627.039360][T24792] veth1_macvtap: entered promiscuous mode [ 627.125623][T24792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.159680][T24792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.228979][T10742] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.247897][T10742] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.286846][T10742] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.308107][T10742] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.529308][T25032] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.5372'. [ 627.546336][T25032] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.5372'. [ 627.587985][T25038] netlink: 'syz.6.5373': attribute type 4 has an invalid length. [ 627.597830][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.627111][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.629673][T25038] netlink: 'syz.6.5373': attribute type 4 has an invalid length. [ 627.684428][T25042] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5373'. [ 627.699609][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.711029][ T5870] Bluetooth: hci5: command tx timeout [ 627.723718][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.792286][ T5870] Bluetooth: hci6: command tx timeout [ 627.849644][T25050] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5307'. [ 628.287988][T25078] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.5382'. [ 628.299817][T25078] netlink: zone id is out of range [ 628.308724][T25078] netlink: zone id is out of range [ 628.314792][T25078] netlink: zone id is out of range [ 628.320634][T25078] netlink: get zone limit has 8 unknown bytes [ 628.544905][T25093] Bluetooth: MGMT ver 1.23 [ 628.553693][T25095] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5387'. [ 628.865051][T25105] Can't find ip_set type hashport [ 628.946620][T25116] netlink: 'syz.2.5392': attribute type 4 has an invalid length. [ 629.362157][T25137] tipc: Started in network mode [ 629.367379][T25137] tipc: Node identity c628d447cc3a, cluster identity 4711 [ 629.375247][T25137] tipc: Enabled bearer , priority 0 [ 629.383664][T25138] syzkaller0: entered promiscuous mode [ 629.411862][T25138] syzkaller0: entered allmulticast mode [ 629.596559][T25137] tipc: Resetting bearer [ 629.692576][T25137] tipc: Disabling bearer [ 629.733343][T25155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.250041][T25174] openvswitch: netlink: IPv4 tun info is not correct [ 630.605594][T25195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.621155][T25196] openvswitch: netlink: IPv6 tunnel dst address is zero [ 631.328530][T25221] __nla_validate_parse: 69 callbacks suppressed [ 631.328551][T25221] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5423'. [ 631.419566][T25223] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5425'. [ 631.449990][T25223] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5425'. [ 631.469818][T25223] 0ªî{X¹¦: renamed from gretap0 [ 631.494588][T25223] 0ªî{X¹¦: entered allmulticast mode [ 631.512625][T25223] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 631.570397][T25228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5428'. [ 632.151702][T25258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5437'. [ 632.171029][T25260] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5438'. [ 632.195684][T25260] netlink: 'syz.7.5438': attribute type 18 has an invalid length. [ 632.203832][T25258] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5437'. [ 632.289291][T10743] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.308901][T10743] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.415200][T10743] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.466292][T25258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5437'. [ 632.649822][T10743] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.683186][T25292] sctp: [Deprecated]: syz.6.5445 (pid 25292) Use of int in max_burst socket option deprecated. [ 632.683186][T25292] Use struct sctp_assoc_value instead [ 632.745436][T25287] erspan0: entered allmulticast mode [ 632.825380][T25295] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5443'. [ 635.447621][T25310] C speed is unknown, defaulting to 1000 [ 635.518553][T25310] lo speed is unknown, defaulting to 1000 [ 635.563967][T25319] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 635.600485][T25319] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 635.600852][T25324] netlink: 'syz.6.5451': attribute type 13 has an invalid length. [ 635.743591][T25324] veth0_macvtap: left promiscuous mode [ 635.751667][T25324] macvtap0: entered allmulticast mode [ 635.791547][T25324] macvtap0: refused to change device tx_queue_len [ 636.339651][T25310] hsr0 speed is unknown, defaulting to 1000 [ 636.725072][T25369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5465'. [ 636.757192][T25367] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 637.107645][T25372] sctp: [Deprecated]: syz.0.5466 (pid 25372) Use of int in maxseg socket option. [ 637.107645][T25372] Use struct sctp_assoc_value instead [ 637.642007][T25412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5479'. [ 637.704061][T25412] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 637.900492][T25424] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5481'. [ 637.925603][T25428] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5483'. [ 637.938840][T25428] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5483'. [ 637.972341][T25437] netlink: 'syz.2.5482': attribute type 12 has an invalid length. [ 638.387877][T25454] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5489'. [ 639.342106][T25487] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5496'. [ 639.512258][T25493] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5498'. [ 640.040918][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 640.481256][T25551] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5515'. [ 640.681799][T10746] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 640.825644][T25563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5520'. [ 640.838051][T25567] netlink: 'syz.0.5521': attribute type 1 has an invalid length. [ 641.071673][T25567] veth17: entered promiscuous mode [ 641.391401][T25588] tipc: Enabled bearer , priority 0 [ 641.414102][T25588] syzkaller0: entered promiscuous mode [ 641.420483][T25588] syzkaller0: entered allmulticast mode [ 641.490156][T25588] tipc: Resetting bearer [ 641.548201][T25587] tipc: Resetting bearer [ 641.615210][T25587] tipc: Disabling bearer [ 641.679416][T25604] geneve2: entered promiscuous mode [ 641.685462][T25604] geneve2: entered allmulticast mode [ 641.747430][T10742] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 641.761170][T10742] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 641.777163][T10742] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 641.808398][T25616] __nla_validate_parse: 3 callbacks suppressed [ 641.808421][T25616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5538'. [ 641.817961][T10742] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 641.990473][T25629] netlink: 'syz.2.5541': attribute type 1 has an invalid length. [ 642.105838][T25645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5544'. [ 642.132285][T25645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5544'. [ 642.252466][T25652] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.5545'. [ 642.273792][T25650] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 642.286625][T25653] lo: entered promiscuous mode [ 642.321549][T25649] lo: left promiscuous mode [ 642.465720][T25658] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.5547'. [ 642.490051][T25658] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.5547'. [ 642.575811][T25664] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5550'. [ 642.654273][T25670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5552'. [ 642.665805][T25670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5552'. [ 642.699975][T25670] bridge0: port 1(vlan3) entered blocking state [ 642.715089][T25670] bridge0: port 1(vlan3) entered disabled state [ 642.724469][T25670] vlan3: entered allmulticast mode [ 642.739391][T25670] vlan3: left allmulticast mode [ 642.747104][T25677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5554'. [ 642.992068][T25689] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:21 [ 643.452729][T25712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 643.729307][T25715] team0: Port device vlan0 removed [ 643.888341][T25729] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 644.159149][T25744] netlink: 'syz.6.5572': attribute type 21 has an invalid length. [ 644.441672][T25758] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 644.441672][T25760] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 644.568881][T25760] netlink: 'syz.6.5577': attribute type 1 has an invalid length. [ 644.882022][T25789] macvlan2: entered promiscuous mode [ 644.887557][T25789] macvlan2: entered allmulticast mode [ 644.948525][T25790] gtp3: entered promiscuous mode [ 645.014120][T25787] C speed is unknown, defaulting to 1000 [ 645.059367][T25787] lo speed is unknown, defaulting to 1000 [ 645.100017][T25796] netlink: 'syz.6.5587': attribute type 39 has an invalid length. [ 645.497381][T25805] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20002 [ 645.789227][T25787] hsr0 speed is unknown, defaulting to 1000 [ 645.957555][T25813] team1: entered promiscuous mode [ 645.974322][T25813] team1: entered allmulticast mode [ 646.209413][T25824] netlink: 'syz.2.5597': attribute type 3 has an invalid length. [ 646.868759][T25860] netlink: 'syz.4.5605': attribute type 1 has an invalid length. [ 646.901422][T25860] __nla_validate_parse: 8 callbacks suppressed [ 646.901444][T25860] netlink: 204 bytes leftover after parsing attributes in process `syz.4.5605'. [ 646.978983][T25864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5606'. [ 647.013162][T25864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5606'. [ 647.064904][T25871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5606'. [ 647.114761][ T9149] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.126384][ T9149] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.174789][ T9149] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.211412][ T9149] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.325339][T25882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5611'. [ 647.411746][T25891] netlink: 'syz.6.5613': attribute type 4 has an invalid length. [ 647.429813][T25894] netlink: 'syz.6.5613': attribute type 4 has an invalid length. [ 648.282660][T25940] veth0: entered promiscuous mode [ 648.321835][T25951] netlink: 'syz.0.5627': attribute type 2 has an invalid length. [ 648.358224][T25951] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5627'. [ 648.426504][T25939] veth0: left promiscuous mode [ 648.627346][T25964] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 648.642029][T25964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5633'. [ 648.691687][T25964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5633'. [ 648.713831][T25969] netlink: 'syz.4.5635': attribute type 1 has an invalid length. [ 648.915307][T25984] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5637'. [ 649.167350][T26000] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5639'. [ 649.444674][T26014] netlink: zone id is out of range [ 649.455261][T26014] netlink: del zone limit has 4 unknown bytes [ 649.680822][T26024] netlink: 'syz.0.5648': attribute type 5 has an invalid length. [ 649.751245][T26028] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 649.821374][T26030] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 650.139873][T26051] syzkaller1: entered promiscuous mode [ 650.173312][T26051] syzkaller1: entered allmulticast mode [ 650.491010][T26067] netlink: 'syz.2.5658': attribute type 1 has an invalid length. [ 650.521079][T26067] netlink: 'syz.2.5658': attribute type 2 has an invalid length. [ 651.599988][T26102] syz.0.5666: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 651.647331][T26102] CPU: 1 UID: 0 PID: 26102 Comm: syz.0.5666 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 651.647362][T26102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 651.647374][T26102] Call Trace: [ 651.647382][T26102] [ 651.647391][T26102] dump_stack_lvl+0x189/0x250 [ 651.647426][T26102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 651.647449][T26102] ? __pfx__printk+0x10/0x10 [ 651.647477][T26102] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 651.647502][T26102] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 651.647528][T26102] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 651.647555][T26102] warn_alloc+0x214/0x310 [ 651.647586][T26102] ? stack_depot_save_flags+0x40/0x860 [ 651.647613][T26102] ? __pfx_warn_alloc+0x10/0x10 [ 651.647645][T26102] ? kasan_save_track+0x4f/0x80 [ 651.647670][T26102] ? xskq_create+0x56/0x170 [ 651.647691][T26102] ? xsk_init_queue+0xb0/0x110 [ 651.647709][T26102] ? xsk_setsockopt+0x4dc/0x8d0 [ 651.647727][T26102] ? do_sock_setsockopt+0x17c/0x1b0 [ 651.647752][T26102] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 651.647776][T26102] ? do_syscall_64+0xfa/0x3b0 [ 651.647799][T26102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.647828][T26102] __vmalloc_node_range_noprof+0x125/0x12f0 [ 651.647894][T26102] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 651.647930][T26102] ? __kasan_kmalloc+0x93/0xb0 [ 651.647960][T26102] vmalloc_user_noprof+0xad/0xf0 [ 651.647997][T26102] ? xskq_create+0xbf/0x170 [ 651.648020][T26102] xskq_create+0xbf/0x170 [ 651.648048][T26102] xsk_init_queue+0xb0/0x110 [ 651.648073][T26102] xsk_setsockopt+0x4dc/0x8d0 [ 651.648098][T26102] ? __pfx_xsk_setsockopt+0x10/0x10 [ 651.648119][T26102] ? __pfx_aa_sk_perm+0x10/0x10 [ 651.648149][T26102] ? aa_sock_opt_perm+0xff/0x1b0 [ 651.648181][T26102] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 651.648212][T26102] ? __pfx_xsk_setsockopt+0x10/0x10 [ 651.648236][T26102] do_sock_setsockopt+0x17c/0x1b0 [ 651.648269][T26102] __x64_sys_setsockopt+0x13f/0x1b0 [ 651.648304][T26102] do_syscall_64+0xfa/0x3b0 [ 651.648327][T26102] ? lockdep_hardirqs_on+0x9c/0x150 [ 651.648350][T26102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.648369][T26102] ? clear_bhb_loop+0x60/0xb0 [ 651.648400][T26102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.648419][T26102] RIP: 0033:0x7fb2d118ebe9 [ 651.648437][T26102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.648454][T26102] RSP: 002b:00007fb2d2062038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 651.648476][T26102] RAX: ffffffffffffffda RBX: 00007fb2d13b5fa0 RCX: 00007fb2d118ebe9 [ 651.648490][T26102] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000010 [ 651.648502][T26102] RBP: 00007fb2d1211e19 R08: 0000000000000004 R09: 0000000000000000 [ 651.648515][T26102] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.648528][T26102] R13: 00007fb2d13b6038 R14: 00007fb2d13b5fa0 R15: 00007ffd8f2c4478 [ 651.648564][T26102] [ 651.648656][T26102] Mem-Info: [ 651.681196][T26107] netlink: 'syz.6.5665': attribute type 2 has an invalid length. [ 651.683926][T26102] active_anon:5034 inactive_anon:0 isolated_anon:0 [ 651.683926][T26102] active_file:1418 inactive_file:40028 isolated_file:0 [ 651.683926][T26102] unevictable:768 dirty:71 writeback:0 [ 651.683926][T26102] slab_reclaimable:13494 slab_unreclaimable:138708 [ 651.683926][T26102] mapped:39295 shmem:1357 pagetables:1292 [ 651.683926][T26102] sec_pagetables:0 bounce:0 [ 651.683926][T26102] kernel_misc_reclaimable:0 [ 651.683926][T26102] free:1258156 free_pcp:13707 free_cma:0 [ 651.736116][T26098] bond1: entered promiscuous mode [ 651.741121][T26102] Node 0 active_anon:20136kB inactive_anon:0kB active_file:5672kB inactive_file:159908kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:157180kB dirty:284kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14916kB pagetables:5032kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 651.745923][T26098] bond1: entered allmulticast mode [ 651.746613][T26102] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 651.781245][T26098] 8021q: adding VLAN 0 to HW filter on device bond1 [ 651.790672][T26102] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 652.131416][T26102] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 652.137544][T26102] Node 0 DMA32 free:1121480kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20088kB inactive_anon:0kB active_file:5672kB inactive_file:158320kB unevictable:1536kB writepending:284kB present:3129332kB managed:2557520kB mlocked:0kB bounce:0kB free_pcp:39664kB local_pcp:20028kB free_cma:0kB [ 652.172296][T26102] lowmem_reserve[]: 0 0 1 1 1 [ 652.177454][T26102] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1588kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 652.209703][T26102] lowmem_reserve[]: 0 0 0 0 0 [ 652.214706][T26102] Node 1 Normal free:3895784kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14976kB local_pcp:3648kB free_cma:0kB [ 652.247406][T26102] lowmem_reserve[]: 0 0 0 0 0 [ 652.253403][T26102] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 652.266768][T26102] Node 0 DMA32: 316*4kB (UM) 133*8kB (UME) 433*16kB (UME) 309*32kB (UM) 51*64kB (UME) 47*128kB (UME) 28*256kB (ME) 13*512kB (ME) 8*1024kB (UM) 1*2048kB (U) 261*4096kB (M) = 1121544kB [ 652.292761][T26102] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 652.309799][T26102] Node 1 Normal: 220*4kB (UM) 41*8kB (UME) 51*16kB (UME) 178*32kB (UME) 63*64kB (UME) 12*128kB (UM) 2*256kB (M) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3895784kB [ 652.322838][T26121] __nla_validate_parse: 7 callbacks suppressed [ 652.322941][T26121] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5670'. [ 652.329247][T26102] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 652.355778][T26102] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 652.365600][T26102] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 652.375477][T26102] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 652.385078][T26102] 42799 total pagecache pages [ 652.389790][T26102] 0 pages in swap cache [ 652.394254][T26102] Free swap = 124996kB [ 652.398555][T26102] Total swap = 124996kB [ 652.402914][T26102] 2097051 pages RAM [ 652.406738][T26102] 0 pages HighMem/MovableOnly [ 652.411896][T26102] 425645 pages reserved [ 652.416350][T26102] 0 pages cma reserved [ 652.528149][T26098] bond1 (unregistering): Released all slaves [ 652.740897][T26131] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 652.792129][T26137] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5674'. [ 653.240223][T26160] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 653.248938][T26155] netlink: 'syz.4.5678': attribute type 5 has an invalid length. [ 653.479472][T26173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5682'. [ 653.619085][T23030] IPVS: starting estimator thread 0... [ 653.626770][T26182] netlink: 408 bytes leftover after parsing attributes in process `syz.0.5686'. [ 653.653818][T26184] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 653.725241][T26185] IPVS: using max 25 ests per chain, 60000 per kthread [ 654.098727][T26206] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5693'. [ 654.120437][T26206] netlink: 5 bytes leftover after parsing attributes in process `syz.6.5693'. [ 654.133471][T26206] netlink: 'syz.6.5693': attribute type 25 has an invalid length. [ 654.846421][T26244] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5704'. [ 654.886358][T26244] netlink: 'syz.6.5704': attribute type 12 has an invalid length. [ 654.905467][T26244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5704'. [ 654.948685][T10745] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.966745][T26244] netlink: 'syz.6.5704': attribute type 12 has an invalid length. [ 654.977809][T10745] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.004214][T10745] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.017738][T10745] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.027359][T26244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5704'. [ 655.051642][T26250] netlink: 'syz.2.5706': attribute type 30 has an invalid length. [ 655.113839][T26252] ip6gre1: entered allmulticast mode [ 655.286136][T26264] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5710'. [ 655.473801][T26279] netlink: 'syz.4.5713': attribute type 21 has an invalid length. [ 655.516151][T26279] netlink: 'syz.4.5713': attribute type 22 has an invalid length. [ 655.545291][T26279] netlink: 'syz.4.5713': attribute type 23 has an invalid length. [ 655.588360][T26288] netlink: 'syz.0.5716': attribute type 29 has an invalid length. [ 655.781545][T26304] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 656.041974][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.574468][T26336] bridge_slave_0: left allmulticast mode [ 656.593788][T23032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.606870][T26336] bridge_slave_0: left promiscuous mode [ 656.623963][T26336] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.698899][T26336] bridge_slave_1: left allmulticast mode [ 656.752317][T26336] bridge_slave_1: left promiscuous mode [ 656.758832][T26336] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.837744][T26336] bond0: (slave bond_slave_0): Releasing backup interface [ 656.924041][T26336] bond0: (slave bond_slave_1): Releasing backup interface [ 656.990482][T26336] team0: Port device team_slave_0 removed [ 657.009124][T26336] team0: Port device team_slave_1 removed [ 657.028435][T26336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.038344][T26336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.053505][T26336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.062409][T26336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.147091][T26350] team0: Mode changed to "loadbalance" [ 657.241396][T23032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.312787][ T5881] Bluetooth: hci6: command tx timeout [ 657.786289][T26382] __nla_validate_parse: 3 callbacks suppressed [ 657.786314][T26382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5742'. [ 658.025603][T26387] netlink: 240 bytes leftover after parsing attributes in process `syz.6.5743'. [ 658.378306][ T5870] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 658.389701][ T5870] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 658.403328][ T5870] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 658.422205][ T5870] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 658.432017][ T5870] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 658.559293][T26405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5749'. [ 658.602117][T26398] C speed is unknown, defaulting to 1000 [ 658.623131][T26398] lo speed is unknown, defaulting to 1000 [ 659.173138][T26435] 8021q: VLANs not supported on ip6tnl0 [ 659.344919][T26445] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5761'. [ 659.377665][T26445] netlink: 'syz.6.5761': attribute type 7 has an invalid length. [ 659.394281][T26398] hsr0 speed is unknown, defaulting to 1000 [ 659.411834][T26445] netlink: 'syz.6.5761': attribute type 8 has an invalid length. [ 659.457084][T26445] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5761'. [ 659.471659][T26449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5763'. [ 659.819097][T26461] netlink: 'syz.2.5765': attribute type 11 has an invalid length. [ 659.977042][T26398] chnl_net:caif_netlink_parms(): no params data found [ 660.151058][ T30] audit: type=1800 audit(1754953245.493:5): pid=26455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5763" name="memory.events" dev="tmpfs" ino=3040 res=0 errno=0 [ 660.329468][T26478] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 660.513669][ T5870] Bluetooth: hci7: command tx timeout [ 660.700158][T26486] tipc: Enabled bearer , priority 0 [ 660.801291][T26487] syzkaller0: entered promiscuous mode [ 660.806989][T26487] syzkaller0: entered allmulticast mode [ 660.813836][T26487] tipc: Resetting bearer [ 660.820273][T26398] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.839887][T26398] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.854470][T26398] bridge_slave_0: entered allmulticast mode [ 660.871967][T26398] bridge_slave_0: entered promiscuous mode [ 660.879445][T26496] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5772'. [ 660.886823][T26398] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.896028][T26398] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.912374][T26398] bridge_slave_1: entered allmulticast mode [ 660.930379][T26398] bridge_slave_1: entered promiscuous mode [ 660.962285][T26485] tipc: Resetting bearer [ 661.826879][T23038] tipc: Node number set to 169006151 [ 662.365990][ T5870] Bluetooth: hci1: command 0x0406 tx timeout [ 662.602854][ T5870] Bluetooth: hci7: command tx timeout [ 663.579166][T26485] tipc: Disabling bearer [ 663.736517][T26398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.791491][T26398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.833960][T26511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5779'. [ 663.964439][T26398] team0: Port device team_slave_0 added [ 663.985096][T26398] team0: Port device team_slave_1 added [ 664.134068][T26398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.159357][T26398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.193098][T26398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.207472][T26398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.216161][T26398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.252647][T26398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.496886][T26398] hsr_slave_0: entered promiscuous mode [ 664.517972][T26398] hsr_slave_1: entered promiscuous mode [ 664.530313][T26398] debugfs: 'hsr0' already exists in 'hsr' [ 664.552385][T26398] Cannot create hsr debugfs directory [ 664.562089][T26544] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5786'. [ 664.676361][ T5870] Bluetooth: hci7: command tx timeout [ 665.016101][T26568] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5793'. [ 665.388071][T26581] netlink: 'syz.6.5797': attribute type 3 has an invalid length. [ 665.557733][T26398] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 665.596294][T26398] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 665.618344][T26398] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 665.648554][T26398] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 665.677594][T26597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 666.276020][T26607] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5805'. [ 666.688379][T26398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.734865][T26624] bond0: (slave ip6tnl0): Error: Device type is different from other slaves [ 666.750885][ T5870] Bluetooth: hci7: command tx timeout [ 666.777581][T26398] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.803169][T26624] bond0: (slave ip6tnl0): Error: Device type is different from other slaves [ 666.852509][T10744] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.859973][T10744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.910034][T10744] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.917421][T10744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.885762][T26398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.216497][T26689] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5824'. [ 668.287611][T26692] syzkaller1: entered promiscuous mode [ 668.297207][T26692] syzkaller1: entered allmulticast mode [ 668.319314][T26694] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 668.485417][T26698] smc: net device bond0 erased user defined pnetid SYZ2 [ 668.905602][T26398] veth0_vlan: entered promiscuous mode [ 668.953529][T26398] veth1_vlan: entered promiscuous mode [ 669.016527][T26716] netlink: 'syz.0.5832': attribute type 1 has an invalid length. [ 669.078910][T26398] veth0_macvtap: entered promiscuous mode [ 669.093994][T26721] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5834'. [ 669.125671][T26398] veth1_macvtap: entered promiscuous mode [ 669.216896][T26398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.271389][T26398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.320799][T10750] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.330010][T10750] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.387162][T10750] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.398727][T10750] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.458241][T26735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5839'. [ 669.759088][T10750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.792484][T10750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.799964][T26745] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5843'. [ 669.833394][T10744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.842290][T26745] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5843'. [ 669.842536][T10744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.997462][T26749] netlink: 'syz.8.5738': attribute type 10 has an invalid length. [ 670.027492][T26749] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 672.674575][T10742] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 680.994512][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.871285][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.671126][T10750] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 718.070333][T26761] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5846'. [ 718.245672][T26768] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5849'. [ 718.441976][T26771] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.473737][T26771] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.665558][T26776] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5851'. [ 718.686443][T26776] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 718.728175][T26776] tipc: Enabled bearer , priority 10 [ 718.872201][ T5881] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 718.884045][ T5881] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 718.892791][ T5881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 718.909824][ T5881] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 718.919861][ T5881] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 719.084373][T26795] netlink: 'syz.6.5854': attribute type 19 has an invalid length. [ 719.128551][T26795] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5854'. [ 719.378873][T26787] C speed is unknown, defaulting to 1000 [ 719.423148][T26794] C speed is unknown, defaulting to 1000 [ 719.539072][T26787] lo speed is unknown, defaulting to 1000 [ 719.611241][T26817] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5861'. [ 720.993623][ T5881] Bluetooth: hci1: command tx timeout [ 721.277825][T10750] bond0 (unregistering): Released all slaves [ 721.518721][T10750] bond1 (unregistering): Released all slaves [ 721.532918][T10750] bond2 (unregistering): Released all slaves [ 721.696204][T10750] bond3 (unregistering): Released all slaves [ 721.714848][T10750] bond4 (unregistering): Released all slaves [ 721.733885][T10750] bond5 (unregistering): Released all slaves [ 721.793293][ T5964] page_pool_release_retry() stalled pool shutdown: id 161, 1 inflight 60 sec [ 721.911951][T10750] bond6 (unregistering): Released all slaves [ 722.070475][T10750] bond7 (unregistering): Released all slaves [ 722.089699][T10750] bond8 (unregistering): Released all slaves [ 722.122734][T26800] C speed is unknown, defaulting to 1000 [ 722.128125][T26787] hsr0 speed is unknown, defaulting to 1000 [ 722.134850][T26794] lo speed is unknown, defaulting to 1000 [ 722.356452][T10750] : left promiscuous mode [ 722.387021][T26855] openvswitch: netlink: IP tunnel dst address not specified [ 722.631205][T10750] tipc: Left network mode [ 722.843048][T26800] lo speed is unknown, defaulting to 1000 [ 722.852490][T26794] hsr0 speed is unknown, defaulting to 1000 [ 723.071561][ T5881] Bluetooth: hci1: command tx timeout [ 723.228210][T26787] chnl_net:caif_netlink_parms(): no params data found [ 723.235423][T26878] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5879'. [ 723.406945][T26887] IPVS: persistence engine module ip_vs_pe_À not found [ 723.477322][T26893] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5882'. [ 723.509096][T26891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 723.924293][T26800] hsr0 speed is unknown, defaulting to 1000 [ 723.987310][T26902] mac80211_hwsim hwsim54 wlan1: entered allmulticast mode [ 724.098830][T26902] netlink: 'syz.6.5885': attribute type 10 has an invalid length. [ 724.164716][T26913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5885'. [ 724.399733][T10750] pimreg3 (unregistering): left allmulticast mode [ 725.154850][ T5881] Bluetooth: hci1: command tx timeout [ 725.633733][T10750] lo (unregistering): left allmulticast mode [ 725.645536][T26902] mac80211_hwsim hwsim54 wlan1: left allmulticast mode [ 725.658782][T26902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.677091][T26902] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 725.816528][T26922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5888'. [ 725.889802][T26787] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.909311][T26787] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.918926][T26787] bridge_slave_0: entered allmulticast mode [ 725.927457][T26787] bridge_slave_0: entered promiscuous mode [ 725.949304][T26787] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.959969][T26787] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.987014][T26787] bridge_slave_1: entered allmulticast mode [ 725.999187][T26787] bridge_slave_1: entered promiscuous mode [ 726.114397][T26787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.138659][T26787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.246577][T26938] netlink: 808 bytes leftover after parsing attributes in process `syz.4.5893'. [ 726.344174][T26787] team0: Port device team_slave_0 added [ 726.394261][T26787] team0: Port device team_slave_1 added [ 726.441925][T10750] IPVS: stop unused estimator thread 0... [ 726.462651][T26943] netlink: 'syz.8.5895': attribute type 1 has an invalid length. [ 726.859882][T26959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.875942][T26954] bond1 (unregistering): Released all slaves [ 726.878328][T26961] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5899'. [ 726.968013][T26787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.975505][T26787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 727.005426][T26787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.035791][T26943] ip6tnl1: entered promiscuous mode [ 727.048368][T26943] ip6tnl1: entered allmulticast mode [ 727.099741][T26961] chnl_net:caif_netlink_parms(): no params data found [ 727.159817][T26787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.168259][T26787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 727.206104][T26787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.229735][T26964] pim6reg1: entered promiscuous mode [ 727.239016][ T5881] Bluetooth: hci1: command tx timeout [ 727.247260][T26964] pim6reg1: entered allmulticast mode [ 727.469365][T26787] hsr_slave_0: entered promiscuous mode [ 727.509410][T26787] hsr_slave_1: entered promiscuous mode [ 727.524973][T26787] debugfs: 'hsr0' already exists in 'hsr' [ 727.540291][T26787] Cannot create hsr debugfs directory [ 727.723341][T26989] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 728.099576][T27003] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5911'. [ 728.434824][T27023] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5916'. [ 728.447151][T27023] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5916'. [ 728.457644][T27023] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5916'. [ 728.768754][T27034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5918'. [ 728.841171][T27036] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 728.942736][T27038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5918'. [ 729.017420][T27042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5918'. [ 729.050965][T27042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5918'. [ 729.079469][T27041] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5920'. [ 729.088003][T27046] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5921'. [ 729.115273][T26787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 729.118613][T27046] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5921'. [ 729.219454][T26787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 729.240203][T26787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 729.268434][T26787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 729.415064][T27067] C speed is unknown, defaulting to 1000 [ 729.717547][T26787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.898491][T26787] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.948797][T10742] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.956099][T10742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.016866][T27097] netdevsim netdevsim8: Firmware load for './file0/../file0' refused, path contains '..' component [ 730.024560][T27099] tipc: Enabling of bearer rejected, failed to enable media [ 730.072610][T10742] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.079933][T10742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.116929][T27100] netdevsim netdevsim8: Firmware load for './file0/../file0' refused, path contains '..' component [ 730.124411][T27106] tipc: Enabling of bearer rejected, failed to enable media [ 730.184627][T27104] sctp: [Deprecated]: syz.4.5935 (pid 27104) Use of struct sctp_assoc_value in delayed_ack socket option. [ 730.184627][T27104] Use struct sctp_sack_info instead [ 730.287204][T27111] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 730.315332][T26787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 731.104344][T26787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.349726][T26787] veth0_vlan: entered promiscuous mode [ 731.469622][T26787] veth1_vlan: entered promiscuous mode [ 731.579517][T27171] openvswitch: netlink: IP tunnel dst address not specified [ 731.608294][T26787] veth0_macvtap: entered promiscuous mode [ 731.641253][T26787] veth1_macvtap: entered promiscuous mode [ 731.689916][T26787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.745319][T26787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.787287][T10742] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.829809][T10742] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.868180][T10742] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.888636][T10742] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.087772][T10745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.114448][T10745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.286725][T10745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.303968][T10745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.549575][T27214] veth0: entered promiscuous mode [ 732.564438][T27210] veth0: left promiscuous mode [ 733.497632][T27233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 733.757709][T27240] syzkaller1: entered promiscuous mode [ 733.791014][T27240] syzkaller1: entered allmulticast mode [ 733.802845][ T5870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 733.818620][ T5870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 733.828979][ T5870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 733.839425][ T5870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 733.854745][ T5870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 733.893997][T27240] __nla_validate_parse: 12 callbacks suppressed [ 733.894019][T27240] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5978'. [ 733.933254][ T9171] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.945754][ T9171] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.268818][ T9171] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.295057][ T9171] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.344553][ T9149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.368109][T27246] C speed is unknown, defaulting to 1000 [ 734.373484][ T9149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.462389][T27273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5987'. [ 734.498446][ T9171] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.522529][T27273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5987'. [ 734.543353][ T9171] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.578021][T27246] lo speed is unknown, defaulting to 1000 [ 734.735189][ T9171] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.756621][ T31] INFO: task syz.1.5169:24323 blocked for more than 143 seconds. [ 734.775762][ T9171] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.799754][ T31] Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 [ 734.807935][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 734.844526][ T31] task:syz.1.5169 state:D stack:26712 pid:24323 tgid:24322 ppid:16230 task_flags:0x400140 flags:0x00004004 [ 734.858388][ T31] Call Trace: [ 734.861943][ T31] [ 734.865011][ T31] __schedule+0x1798/0x4cc0 [ 734.869739][ T31] ? __lock_acquire+0xab9/0xd20 [ 734.874869][ T31] ? __lock_acquire+0xab9/0xd20 [ 734.880241][ T31] ? __pfx___schedule+0x10/0x10 [ 734.887061][ T31] ? schedule+0x91/0x360 [ 734.893576][ T31] schedule+0x165/0x360 [ 734.897898][ T31] schedule_preempt_disabled+0x13/0x30 [ 734.904889][ T31] __mutex_lock+0x7e6/0x1360 [ 734.909631][ T31] ? __mutex_lock+0x5b6/0x1360 [ 734.915199][ T31] ? nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 734.921252][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 734.926521][ T31] ? __nlmsg_put+0xef/0x1b0 [ 734.931880][ T31] ? genlmsg_put+0x137/0x2e0 [ 734.936741][ T31] nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 734.942583][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 734.948945][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 734.954998][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 734.960922][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 734.967224][ T31] ? stack_trace_save+0x9c/0xe0 [ 734.972376][ T31] genl_rcv_msg+0x60e/0x790 [ 734.977015][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 734.982212][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 734.988603][ T31] netlink_rcv_skb+0x205/0x470 [ 734.999768][ T31] ? __lock_acquire+0xab9/0xd20 [ 735.009066][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 735.016794][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 735.022471][ T31] ? down_read+0x1ad/0x2e0 [ 735.027137][ T31] genl_rcv+0x28/0x40 [ 735.031434][ T31] netlink_unicast+0x82c/0x9e0 [ 735.036444][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 735.042384][ T31] ? netlink_sendmsg+0x642/0xb30 [ 735.048295][ T31] ? skb_put+0x11b/0x210 [ 735.052917][ T31] netlink_sendmsg+0x805/0xb30 [ 735.057838][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.063587][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 735.068655][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 735.077223][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.087136][ T31] __sock_sendmsg+0x219/0x270 [ 735.097544][ T31] ____sys_sendmsg+0x505/0x830 [ 735.118832][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 735.134624][ T31] ? import_iovec+0x74/0xa0 [ 735.148382][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 735.181006][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 735.186781][ T31] ? __fget_files+0x2a/0x420 [ 735.200329][ T31] ? __fget_files+0x3a0/0x420 [ 735.205779][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 735.218573][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 735.224850][ T31] ? rcu_is_watching+0x15/0xb0 [ 735.229859][ T31] ? do_syscall_64+0xbe/0x3b0 [ 735.237743][ T31] do_syscall_64+0xfa/0x3b0 [ 735.242769][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 735.248171][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.254674][ T31] ? clear_bhb_loop+0x60/0xb0 [ 735.259451][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.265755][ T31] RIP: 0033:0x7f4986b8ebe9 [ 735.270250][ T31] RSP: 002b:00007f4987966038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 735.278769][ T31] RAX: ffffffffffffffda RBX: 00007f4986db5fa0 RCX: 00007f4986b8ebe9 [ 735.287193][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 735.295486][ T31] RBP: 00007f4986c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 735.305316][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.314116][ T31] R13: 00007f4986db6038 R14: 00007f4986db5fa0 R15: 00007ffdd2987408 [ 735.322441][ T31] [ 735.325560][ T31] [ 735.325560][ T31] Showing all locks held in the system: [ 735.333394][ T31] 1 lock held by khungtaskd/31: [ 735.338279][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 735.348338][ T31] 2 locks held by getty/5625: [ 735.353580][ T31] #0: ffff88814dcbe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 735.364035][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 735.374933][ T31] 7 locks held by kworker/u8:25/9171: [ 735.380429][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 735.392066][ T31] #1: ffffc9001acffbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 735.404288][ T31] #2: ffffffff8f527a90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 735.413887][ T31] #3: ffff88806c1ec0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 735.424120][ T31] #4: ffff88806c1ed250 (&devlink->lock_key#7){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 735.435291][ T31] #5: ffffffff8f534908 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xe5/0x670 [ 735.444666][ T31] #6: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 735.455894][ T31] 3 locks held by kworker/u8:28/10743: [ 735.461439][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 735.474176][ T31] #1: ffffc9001a88fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 735.485557][ T31] #2: ffffffff8f534908 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 735.494883][ T31] 3 locks held by kworker/u8:29/10744: [ 735.500404][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 735.512363][ T31] #1: ffffc9001a7dfbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 735.527432][ T31] #2: ffff8880661d8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 735.537950][ T31] 3 locks held by kworker/u8:30/10745: [ 735.543513][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 735.555288][ T31] #1: ffff8880b8724008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 735.564318][ T31] #2: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: rds_queue_reconnect+0x20d/0x870 [ 735.583681][ T31] 2 locks held by syz.5.5141/24214: [ 735.589333][ T31] #0: ffffffff8f599f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 735.599810][ T31] #1: ffffffff8e415868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 735.612089][ T31] 2 locks held by syz.1.5169/24323: [ 735.617464][ T31] #0: ffffffff8f599f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 735.626007][ T31] #1: ffffffff8e415868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 735.636143][ T31] 2 locks held by syz.7.5548/25657: [ 735.641416][ T31] #0: ffffffff8f599f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 735.649671][ T31] #1: ffffffff8e415868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 735.660044][ T31] 5 locks held by syz-executor/27246: [ 735.665519][ T31] #0: ffffffff8f527a90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 735.675329][ T31] #1: ffffffff8f287b50 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 735.685155][ T31] #2: ffffffff8f287d10 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 735.695273][ T31] #3: ffff888048318f98 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0 [ 735.706461][ T31] #4: ffffffff8f534908 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x151/0x7b0 [ 735.717461][ T31] 4 locks held by syz.4.5988/27269: [ 735.723249][ T31] #0: ffff888076cf4a08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 735.735358][ T31] #1: ffffffff8f5983b0 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 735.747176][ T31] #2: ffff8880519bd0d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x116/0x640 [ 735.758386][ T31] #3: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 735.769419][ T31] 1 lock held by syz.8.5990/27282: [ 735.774720][ T31] #0: ffff888076cf0208 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 735.785004][ T31] 2 locks held by syz.6.5991/27289: [ 735.790219][ T31] #0: ffffffff8fa4e630 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 735.800724][ T31] #1: ffffffff8f534908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 735.811241][ T31] 1 lock held by syz.0.5992/27288: [ 735.816595][ T31] #0: ffff888076d05008 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 735.827077][ T31] 2 locks held by syz.0.5992/27290: [ 735.832536][ T31] #0: ffffffff8fa52828 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 735.842465][ T31] #1: ffffffff8f534908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 735.851934][ T31] [ 735.854445][ T31] ============================================= [ 735.854445][ T31] [ 735.863149][ T31] NMI backtrace for cpu 0 [ 735.863170][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 735.863194][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 735.863206][ T31] Call Trace: [ 735.863214][ T31] [ 735.863223][ T31] dump_stack_lvl+0x189/0x250 [ 735.863256][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 735.863280][ T31] ? __pfx__printk+0x10/0x10 [ 735.863323][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 735.863346][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 735.863370][ T31] ? __pfx__printk+0x10/0x10 [ 735.863401][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 735.863434][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 735.863458][ T31] watchdog+0xf93/0xfe0 [ 735.863490][ T31] ? watchdog+0x1de/0xfe0 [ 735.863523][ T31] kthread+0x70e/0x8a0 [ 735.863552][ T31] ? __pfx_watchdog+0x10/0x10 [ 735.863576][ T31] ? __pfx_kthread+0x10/0x10 [ 735.863603][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 735.863624][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 735.863646][ T31] ? __pfx_kthread+0x10/0x10 [ 735.863671][ T31] ret_from_fork+0x3fc/0x770 [ 735.863705][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 735.863732][ T31] ? __switch_to_asm+0x39/0x70 [ 735.863756][ T31] ? __switch_to_asm+0x33/0x70 [ 735.863779][ T31] ? __pfx_kthread+0x10/0x10 [ 735.863805][ T31] ret_from_fork_asm+0x1a/0x30 [ 735.863848][ T31] [ 735.863856][ T31] Sending NMI from CPU 0 to CPUs 1: [ 735.951718][ T5870] Bluetooth: hci4: command tx timeout [ 735.953050][ C1] NMI backtrace for cpu 1 [ 735.953070][ C1] CPU: 1 UID: 0 PID: 5870 Comm: kworker/u9:4 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 735.953089][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 735.953100][ C1] Workqueue: hci4 hci_cmd_timeout [ 735.953122][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 735.953146][ C1] Code: e8 5e 3a 71 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 df a4 d4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 5a 2a 2d 06 cc 44 89 f9 80 e1 07 [ 735.953160][ C1] RSP: 0018:ffffc9000408f2b0 EFLAGS: 00000002 [ 735.953173][ C1] RAX: 1ffffffff33bd200 RBX: 00000000000003fd RCX: 0000000000000000 [ 735.953184][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 735.953193][ C1] RBP: ffffffff99de9770 R08: ffff888141f38237 R09: 1ffff110283e7046 [ 735.953204][ C1] R10: dffffc0000000000 R11: ffffffff854e7100 R12: dffffc0000000000 [ 735.953216][ C1] R13: 0000000000000000 R14: ffffffff99de94e0 R15: 0000000000000000 [ 735.953226][ C1] FS: 0000000000000000(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000 [ 735.953239][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 735.953251][ C1] CR2: 000000110c2d60d8 CR3: 00000000778cc000 CR4: 00000000003526f0 [ 735.953267][ C1] Call Trace: [ 735.953274][ C1] [ 735.953283][ C1] wait_for_lsr+0x1a1/0x2f0 [ 735.953303][ C1] serial8250_console_write+0x134c/0x1ba0 [ 735.953331][ C1] ? __lock_acquire+0xab9/0xd20 [ 735.953353][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 735.953375][ C1] ? console_flush_all+0x13a/0xc40 [ 735.953394][ C1] ? console_flush_all+0x13a/0xc40 [ 735.953413][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 735.953431][ C1] ? console_flush_all+0x13a/0xc40 [ 735.953447][ C1] ? console_flush_all+0x13a/0xc40 [ 735.953465][ C1] console_flush_all+0x728/0xc40 [ 735.953483][ C1] ? console_flush_all+0x13a/0xc40 [ 735.953504][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 735.953526][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 735.953547][ C1] console_unlock+0xc4/0x270 [ 735.953564][ C1] ? __pfx_console_unlock+0x10/0x10 [ 735.953582][ C1] ? vprintk_emit+0x444/0x7a0 [ 735.953596][ C1] ? vprintk_emit+0x444/0x7a0 [ 735.953612][ C1] vprintk_emit+0x5b7/0x7a0 [ 735.953626][ C1] ? vprintk_emit+0x444/0x7a0 [ 735.953643][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 735.953657][ C1] ? stack_trace_save+0x9c/0xe0 [ 735.953674][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 735.953692][ C1] ? check_path+0x21/0x40 [ 735.953724][ C1] _printk+0xcf/0x120 [ 735.953746][ C1] ? __pfx__printk+0x10/0x10 [ 735.953772][ C1] bt_err+0x10b/0x160 [ 735.953787][ C1] ? __lock_acquire+0xab9/0xd20 [ 735.953810][ C1] ? __pfx_bt_err+0x10/0x10 [ 735.953831][ C1] hci_cmd_timeout+0xff/0x1e0 [ 735.953845][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 735.953861][ C1] process_scheduled_works+0xade/0x17b0 [ 735.953889][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 735.953912][ C1] worker_thread+0x8a0/0xda0 [ 735.953940][ C1] kthread+0x70e/0x8a0 [ 735.953960][ C1] ? __pfx_worker_thread+0x10/0x10 [ 735.953974][ C1] ? __pfx_kthread+0x10/0x10 [ 735.953994][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 735.954011][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 735.954028][ C1] ? __pfx_kthread+0x10/0x10 [ 735.954046][ C1] ret_from_fork+0x3fc/0x770 [ 735.954063][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 735.954081][ C1] ? __switch_to_asm+0x39/0x70 [ 735.954099][ C1] ? __switch_to_asm+0x33/0x70 [ 735.954117][ C1] ? __pfx_kthread+0x10/0x10 [ 735.954135][ C1] ret_from_fork_asm+0x1a/0x30 [ 735.954161][ C1] [ 736.066999][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 736.067020][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 736.067044][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 736.067056][ T31] Call Trace: [ 736.067064][ T31] [ 736.067073][ T31] dump_stack_lvl+0x99/0x250 [ 736.067100][ T31] ? __asan_memcpy+0x40/0x70 [ 736.067123][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 736.067145][ T31] ? __pfx__printk+0x10/0x10 [ 736.067182][ T31] vpanic+0x281/0x750 [ 736.067206][ T31] ? __pfx_vpanic+0x10/0x10 [ 736.067227][ T31] ? preempt_schedule+0xae/0xc0 [ 736.067251][ T31] ? preempt_schedule_common+0x83/0xd0 [ 736.067278][ T31] panic+0xb9/0xc0 [ 736.067298][ T31] ? __pfx_panic+0x10/0x10 [ 736.067321][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 736.067353][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 736.067376][ T31] watchdog+0xfd2/0xfe0 [ 736.067407][ T31] ? watchdog+0x1de/0xfe0 [ 736.067438][ T31] kthread+0x70e/0x8a0 [ 736.067464][ T31] ? __pfx_watchdog+0x10/0x10 [ 736.067488][ T31] ? __pfx_kthread+0x10/0x10 [ 736.067512][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 736.067532][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 736.067552][ T31] ? __pfx_kthread+0x10/0x10 [ 736.067575][ T31] ret_from_fork+0x3fc/0x770 [ 736.067598][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 736.067631][ T31] ? __switch_to_asm+0x39/0x70 [ 736.067654][ T31] ? __switch_to_asm+0x33/0x70 [ 736.067676][ T31] ? __pfx_kthread+0x10/0x10 [ 736.067699][ T31] ret_from_fork_asm+0x1a/0x30 [ 736.067738][ T31] [ 736.068939][ T31] Kernel Offset: disabled