last executing test programs: 6m21.519458892s ago: executing program 0 (id=296): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002600)=0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) close(0x3) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000080)={'dummy0\x00', 0x4af}) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, 0x0, &(0x7f0000002180)) syz_open_procfs$namespace(r1, 0x0) 6m21.058787903s ago: executing program 0 (id=299): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r3 = epoll_create(0x10000e9) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$HCIINQUIRY(r5, 0x400448e1, &(0x7f0000000000)={0x0, 0x0, "957008"}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x31, &(0x7f0000000000)={0x0, 0x0}, 0x10) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x10001, @empty, 0x3}, 0x1c) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="18e8001005594fbbc9f9c92afbb502f726d5f78b585131af77", @ANYRES16=r1, @ANYBLOB="00022bbd7000fbdbdf250200000008003c0005000000080032002e090000050030000100000005003300020000000500370000000000050038000000000005002a0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040010}, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r7, 0x1}, 0x1c}}, 0x0) 6m19.797099573s ago: executing program 0 (id=308): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100793f890aa72711fd95c618000000000000001c0000001c00000002000000000000000000ffffff7f00000000380000000000"], 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 6m19.075961717s ago: executing program 0 (id=313): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e24, @empty}, {0x20000010304, @random="1f7b6f407602"}, 0x4, {0x2, 0x4e20, @multicast1=0xe000cc02}}) socket$tipc(0x1e, 0x2, 0x0) 6m18.540016299s ago: executing program 0 (id=316): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1409, 0x10, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x44000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x3}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8}]}}}]}, 0x44}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000040)) 6m17.646659703s ago: executing program 0 (id=321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 6m2.418078981s ago: executing program 32 (id=321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 2m42.820109788s ago: executing program 3 (id=1565): socket$netlink(0x10, 0x3, 0x27) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) socket(0x10, 0x3, 0x0) unshare(0x20000400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x6}, [@RTA_GATEWAY={0x8, 0x5, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) unshare(0x40080) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={0x0}}, 0x14) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x89a3, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x410001, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x503, 0xfffffffc}, 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 2m42.596628294s ago: executing program 3 (id=1568): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010004b040000000000005f007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500001800028005002600020000000c002e"], 0x48}}, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) 2m42.272144987s ago: executing program 3 (id=1572): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e4, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1) 2m41.848103654s ago: executing program 3 (id=1579): r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r0, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x48, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0xc094) 2m41.725195203s ago: executing program 3 (id=1581): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x400, 0x4140}}}}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x400, 0x4140}}}}}}]}, 0x48}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000007240)=[{{&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000100)=""/215, 0xd7}, {&(0x7f00000002c0)=""/19, 0x13}, {&(0x7f0000000340)=""/188, 0xbc}, {&(0x7f00000004c0)=""/184, 0xb8}, {&(0x7f0000000400)=""/42, 0x2a}, {&(0x7f0000000640)=""/248, 0xf8}], 0x6, &(0x7f0000000800)=""/162, 0xa2}, 0x1800000}, {{&(0x7f00000008c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000940)=""/168, 0xa8}, {&(0x7f0000000a00)=""/137, 0x89}, {&(0x7f0000000440)=""/19, 0x13}, {&(0x7f0000000ac0)=""/174, 0xae}, {&(0x7f0000000b80)=""/124, 0x7c}], 0x5}, 0x2}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000580)=""/59, 0x3b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/35, 0x23}, {&(0x7f0000001cc0)=""/172, 0xac}, {&(0x7f0000001d80)=""/141, 0x8d}, {&(0x7f0000001e40)=""/68, 0x44}, {&(0x7f0000001ec0)=""/199, 0xc7}], 0x7, &(0x7f0000002040)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000003040), 0x80, &(0x7f0000003140)=[{&(0x7f00000030c0)=""/102, 0x66}], 0x1, &(0x7f0000003180)=""/94, 0x5e}, 0x2}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000003200)=""/69, 0x45}, {&(0x7f0000003280)=""/250, 0xfa}, {&(0x7f0000003380)=""/184, 0xb8}, {&(0x7f0000003440)=""/28, 0x1c}, {&(0x7f0000003480)}, {&(0x7f00000034c0)=""/44, 0x2c}, {&(0x7f0000003500)=""/235, 0xeb}], 0x7, &(0x7f0000003680)=""/112, 0x70}, 0x1ff}, {{&(0x7f0000003700)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000004a00)=[{&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/4, 0x4}, {&(0x7f00000047c0)=""/154, 0x9a}, {&(0x7f0000004880)=""/111, 0x6f}, {&(0x7f0000004900)}, {&(0x7f0000004940)=""/164, 0xa4}], 0x6, &(0x7f0000004a80)=""/4096, 0x1000}, 0x7f}, {{&(0x7f0000005a80)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000006e40)=[{&(0x7f0000005b00)=""/138, 0x8a}, {&(0x7f0000005bc0)=""/59, 0x3b}, {&(0x7f0000005c00)=""/116, 0x74}, {&(0x7f0000005c80)=""/108, 0x6c}, {&(0x7f0000005d00)=""/199, 0xc7}, {&(0x7f0000005e00)=""/6, 0x6}, {&(0x7f0000005e40)=""/4096, 0x1000}], 0x7}, 0x7}, {{&(0x7f0000006ec0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000007200)=[{&(0x7f0000006f40)=""/96, 0x60}, {&(0x7f0000006fc0)=""/92, 0x5c}, {&(0x7f0000007040)=""/234, 0xea}, {&(0x7f0000007140)=""/133, 0x85}], 0x4}, 0x148}], 0x8, 0x40010101, &(0x7f0000007440)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xb}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x0) r6 = accept(r0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r6) 2m40.756282482s ago: executing program 3 (id=1592): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070000000000000000000800000008000200000000000c0099000300000002"], 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x0, @local}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000d40)={r4, 0x1, 0x6}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x2}, 0x94) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4008, r1}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x39, 0x0, r6, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={0x0}}, 0x4044014) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x2, 0x300) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070000000000000000000800000008000200000000000c0099000300000002"], 0x28}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x0, @local}, 0x10) (async) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000d40)={r4, 0x1, 0x6}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x2}, 0x94) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4008, r1}, 0x18) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x39, 0x0, r6, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={0x0}}, 0x4044014) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) 2m29.711693393s ago: executing program 2 (id=1689): poll(0xfffffffffffffffc, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m29.643061649s ago: executing program 2 (id=1690): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r1}, 0xc) 2m29.495756104s ago: executing program 2 (id=1691): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/230, 0xe6}, {&(0x7f0000000940)=""/4114, 0x1012}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xb0}], 0x5, 0x20, 0x0) 2m29.275333809s ago: executing program 2 (id=1693): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0) 2m29.071967938s ago: executing program 2 (id=1694): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a90a28bd7000ffc4631c9800000008000300", @ANYRES32=r2, @ANYBLOB="0a001a0008021100000100000a0006"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, r1, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x9a}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0x21, 0x24, [{0x3, 0x1}, {0x4}, {0x6c}, {0xc, 0x1}, {0xc}, {0xb}, {0x18, 0x1}, {0xc}, {0x20f88885bb77356b, 0x1}, {0x6}, {0x4}, {0x60, 0x1}, {0x5}, {0x12}, {0x3, 0x1}, {0x2, 0x1}, {0xb}, {0x36}, {0x36, 0x1}, {0x6}, {0x9, 0x1}, {0x1a}, {0x4}, {0x18, 0x1}, {0x48}, {}, {0x18}, {0x24, 0x1}, {0x6c, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x88}}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a90a28bd7000ffc4631c9800000008000300", @ANYRES32=r2, @ANYBLOB="0a001a0008021100000100000a0006"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)) (async) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, r1, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x9a}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0x21, 0x24, [{0x3, 0x1}, {0x4}, {0x6c}, {0xc, 0x1}, {0xc}, {0xb}, {0x18, 0x1}, {0xc}, {0x20f88885bb77356b, 0x1}, {0x6}, {0x4}, {0x60, 0x1}, {0x5}, {0x12}, {0x3, 0x1}, {0x2, 0x1}, {0xb}, {0x36}, {0x36, 0x1}, {0x6}, {0x9, 0x1}, {0x1a}, {0x4}, {0x18, 0x1}, {0x48}, {}, {0x18}, {0x24, 0x1}, {0x6c, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x88}}, 0x14) (async) 2m28.974916354s ago: executing program 2 (id=1695): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3cfda5d4bf24bed2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082cbd7000fddbdf256f000000080027000300000008009f0005000000080022012e0100000800270003000000"], 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x840) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x337) 2m25.586760002s ago: executing program 33 (id=1592): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070000000000000000000800000008000200000000000c0099000300000002"], 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x0, @local}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000d40)={r4, 0x1, 0x6}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x2}, 0x94) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4008, r1}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x39, 0x0, r6, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={0x0}}, 0x4044014) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x2, 0x300) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070000000000000000000800000008000200000000000c0099000300000002"], 0x28}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x0, @local}, 0x10) (async) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000d40)={r4, 0x1, 0x6}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x2}, 0x94) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4008, r1}, 0x18) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x39, 0x0, r6, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={0x0}}, 0x4044014) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) 2m13.719271816s ago: executing program 34 (id=1695): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3cfda5d4bf24bed2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082cbd7000fddbdf256f000000080027000300000008009f0005000000080022012e0100000800270003000000"], 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x840) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x337) 1m9.724445111s ago: executing program 5 (id=1076): r0 = socket$igmp(0x2, 0x3, 0x2) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x12001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f0000000200)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 54.866239924s ago: executing program 5 (id=1076): r0 = socket$igmp(0x2, 0x3, 0x2) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x12001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f0000000200)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 42.657730467s ago: executing program 5 (id=1076): r0 = socket$igmp(0x2, 0x3, 0x2) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x12001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f0000000200)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 36.112007298s ago: executing program 7 (id=2573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30", @ANYRESOCT=r0, @ANYRES16=r0], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x7, 0x4, 0x7ff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r2, r1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1016, &(0x7f0000003080)=""/4118, 0x40f00}, 0x90) 35.903815747s ago: executing program 7 (id=2576): r0 = socket(0xa, 0x1, 0x0) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5452, &(0x7f0000000080)) sendmsg$kcm(r1, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x200000c1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7a, 0x0, &(0x7f0000000180)=0x57) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x18}}], 0x2, 0x4001) 35.758477622s ago: executing program 7 (id=2579): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x820c}, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000080)=0xb5e0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f00000000c0), 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000100)={0x7, [0x9, 0x40, 0x401, 0x0, 0x2, 0x1, 0x7]}, 0x12) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000140)={0x9, [0x7, 0x7, 0x9, 0xe79, 0x9, 0xdc5, 0x2, 0x8, 0x2]}, &(0x7f0000000180)=0x16) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r5, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x26, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @dsss={0x3, 0x1, 0x34}, @supported_rates={0x1, 0x1, [{0x30, 0x1}]}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x55, 0x21}}, @gcr_ga={0xbd, 0x6}, @mesh_chsw={0x76, 0x6, {0x7, 0xd6, 0x3e, 0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004044}, 0x85c) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000000380)={{0x2, @remote, 0x4e23, 0x3, 'lblc\x00', 0x0, 0x7d06, 0x4e}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x4e23, 0x0, 0x4, 0x4, 0x1dd3}}, 0x44) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r9, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@null, @bcast, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f0000000600)={'filter\x00', 0x0, 0x0, 0x0, [0xd1, 0x1, 0x7, 0x1000, 0x6, 0xfffffffffffffffb], 0x7, &(0x7f00000005c0)=[{}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r4) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r10, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r11, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r9, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, ')\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x20, 0x4, 0x880, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000980], 0x0, &(0x7f0000000940), &(0x7f0000000980)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x5, 0x14, 0x6007, 'veth1\x00', 'veth1_to_hsr\x00', 'veth1_macvtap\x00', 'ip6gretap0\x00', @multicast, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @local, [0xff, 0x0, 0xff, 0xff, 0xff], 0xde, 0x12e, 0x166, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x4, 0x1, 0xf8, 0x6, 0x4e2567bc37aa5207}}}, @connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x5}, {0x50000}]}}}], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0xaf, {0x8b}}}}], @common=@mark={'mark\x00', 0x10, {{0x20, 0xfffffffffffffffd}}}}, {0x3, 0x28, 0x22eb, 'wg0\x00', 'ip6gre0\x00', 'vcan0\x00', 'erspan0\x00', @empty, [0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0xe6, 0x246, 0x296, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0x0, 0x0, 0x7f8000ff], 0xf, 0x87, 0x1, 0x58, 0x4e21, 0x4e21, 0x104a, 0x4e21}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xffffffff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x2}}}], @common=@log={'log\x00', 0x28, {{0x2, "6aba78a679e9dfa0688a9b78f93956e2b3cc188a69d7295ba9d48a3fd7be", 0x8}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x11, 0x8, 0xc, 'ip6gretap0\x00', 'veth0_to_hsr\x00', 'bond_slave_0\x00', 'vlan0\x00', @broadcast, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0xb6, 0x106, [], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x1, 0x6d, {0x315}}}}], @common=@log={'log\x00', 0x28, {{0xf7, "3f8c6373a45111e0a90aca476a1da232e126487c72d8485f9d80a7b83090"}}}}, {0x5, 0x1, 0x200, 'bridge_slave_0\x00', 'ip6erspan0\x00', 'veth1_to_bridge\x00', 'dvmrp0\x00', @empty, [0x0, 0x0, 0x0, 0x7f, 0xff], @random="511c70469924", [0xff], 0x2be, 0x2be, 0x2ee, [@comment={{'comment\x00', 0x0, 0x100}}, @comment={{'comment\x00', 0x0, 0x100}}], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x6}}}}]}]}, 0x8f8) getsockopt$IPT_SO_GET_REVISION_MATCH(r7, 0x0, 0x42, &(0x7f0000001280)={'icmp\x00'}, &(0x7f00000012c0)=0x1e) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r12, 0x3, 0xffffffffffffffff, &(0x7f0000001680)={0x90000000}) 35.5786755s ago: executing program 7 (id=2581): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r1, 0x20, &(0x7f0000000540)={&(0x7f0000000300)=""/229, 0xe5, 0x0, &(0x7f00000004c0)=""/10, 0xa}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x9}, [@RTA_MARK={0x8, 0x10, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000002c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0x1, 0x3, [@loopback, @broadcast, @loopback]}, 0x1c) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r12, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000001b000000bf0900000000000056090100000000002700000000000002180100002020782500000000002020207b1af8ff00000000bda100000000000037010000f8ffffffb702000008000000b70300000000000025000000060000009c2300a400000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 34.995672982s ago: executing program 7 (id=2589): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x29, &(0x7f0000000340)={0x1000, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$alg(0x26, 0x5, 0x0) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) sendmsg(r2, &(0x7f0000000200)={&(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e22, 0x1}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="99f62fb356be79516efd99c1583824ffa62fd7fc6717b94dd689c7bc8380b0c7ba8e7d7ff5e1fa1a4062ef2ba7f4ed93d1266ae552af3db02bb61153ffd278f4bffef552cbceb06dfa4c083ce5b7e567d38a00fade931de00ce5ca5347c68ce7322459c2f6949d05d883801778e3e3bb6911c8e6d98b298299747c7452486baafde8d48a59", 0x85}], 0x1, &(0x7f00000001c0)}, 0x40408d0) 34.339254002s ago: executing program 7 (id=2596): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x1a8, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000003b80)={0x1c, 0xc, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe05000300"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000180), 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r6, 0x0, 0xb9b}, 0x18) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000000)={0x80000001, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0xd}}}}, 0x108) getsockopt$inet6_buf(r7, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r9, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r10, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x43, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x24000044) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r4, @ANYBLOB="0100000000070000000009000000780003800800030004000000060007004e21000014000600fc010600000000010000000000000001060007004e20000008000100010000001400020076657468315f746f5f7465616d000000050008000100000008000500e0"], 0x8c}}, 0x0) r12 = socket(0x40000000015, 0x5, 0x0) getsockopt(r12, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) setsockopt$bt_hci_HCI_TIME_STAMP(r12, 0x0, 0x3, &(0x7f0000000340)=0x1ff, 0x4) getsockopt$PNPIPE_INITSTATE(r12, 0x113, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 28.883241915s ago: executing program 5 (id=1076): r0 = socket$igmp(0x2, 0x3, 0x2) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x12001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f0000000200)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 19.79012235s ago: executing program 1 (id=2717): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000091000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b37623e133c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000009604d7df3039bce4124a76e90300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c09000000de3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94) socket$inet6(0xa, 0x1, 0x0) (async) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x812, r1, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r2, 0x101, 0x0, &(0x7f0000000000)=0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x27, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x27, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 19.628169113s ago: executing program 1 (id=2719): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'veth1_macvtap\x00', 0x47}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8c76}, 0x1c) 19.26339467s ago: executing program 35 (id=2596): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x1a8, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000003b80)={0x1c, 0xc, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe05000300"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000180), 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r6, 0x0, 0xb9b}, 0x18) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000000)={0x80000001, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0xd}}}}, 0x108) getsockopt$inet6_buf(r7, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r9, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r10, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x43, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x24000044) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r4, @ANYBLOB="0100000000070000000009000000780003800800030004000000060007004e21000014000600fc010600000000010000000000000001060007004e20000008000100010000001400020076657468315f746f5f7465616d000000050008000100000008000500e0"], 0x8c}}, 0x0) r12 = socket(0x40000000015, 0x5, 0x0) getsockopt(r12, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) setsockopt$bt_hci_HCI_TIME_STAMP(r12, 0x0, 0x3, &(0x7f0000000340)=0x1ff, 0x4) getsockopt$PNPIPE_INITSTATE(r12, 0x113, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 19.200923586s ago: executing program 1 (id=2725): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$sock_int(r1, 0x1, 0x1, 0x0, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x40800) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, 0x0, 0x4000810) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000140)=0x8) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="3774dd1eb932576c6501c4ae2abe2b919f214390d9ee75ec7bbef0da73e0c647b7fa5ea1247d8a73fed833801d2b7642ad91a77e0940422fb4e42f96ac302a0dd79c88721d0588fb3a8613581c109d1afd492d7579621326507abcf3d2848509dc576dec229f9be81579c45542ae0505428be0ad9774b65c2cfeeaae628366078a0294f160141f558fe6840c07ae70b3ff298f35bfa2a1521fd2fd7390", 0x73220c8b}], 0x1, 0x0, 0xffffff9e}, 0x0) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) socket$inet6(0xa, 0x800, 0x1000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) setsockopt$sock_int(r1, 0x1, 0x1, 0x0, 0x0) (async) sendmmsg$alg(r0, 0x0, 0x0, 0x40800) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MON_PEER_GET(r0, 0x0, 0x4000810) (async) socket$packet(0x11, 0x3, 0x300) (async) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000140)=0x8) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="3774dd1eb932576c6501c4ae2abe2b919f214390d9ee75ec7bbef0da73e0c647b7fa5ea1247d8a73fed833801d2b7642ad91a77e0940422fb4e42f96ac302a0dd79c88721d0588fb3a8613581c109d1afd492d7579621326507abcf3d2848509dc576dec229f9be81579c45542ae0505428be0ad9774b65c2cfeeaae628366078a0294f160141f558fe6840c07ae70b3ff298f35bfa2a1521fd2fd7390", 0x73220c8b}], 0x1, 0x0, 0xffffff9e}, 0x0) (async) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) (async) socket$inet6(0xa, 0x800, 0x1000) (async) 18.932759357s ago: executing program 1 (id=2729): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) close(r3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030001020000000000000000010000090900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800b000100736f636b6574000014000280080001400000000120e709d7a5b0e7ca140000001100010000000000000000000000000a"], 0xd8}}, 0x4000040) 18.910212578s ago: executing program 5 (id=1076): r0 = socket$igmp(0x2, 0x3, 0x2) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x12001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f0000000200)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 16.798094784s ago: executing program 1 (id=2730): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0xd2, &(0x7f0000000140)={@remote, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fc1200", 0x9c, 0x11, 0x0, @remote, @empty, {[], {0x0, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "0742fe5687f86e5da80000000002058dc3b5714f7389ec494211ccec5704412c", "f2760709a418c2d54dfc3bcd6b0dc0f026e4dbbd0fc37c4cf9e05eebedd14ed77e5af90f021be4d1922cd527960053fa", "9cd204eeecae9a729ee1662af2f006faf435c215365df6e6c5db8235", {"aeb6eb691496126a2728d73f1a738b14", "fc81aa717bf9ce692ed96249827491df"}}}}}}}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0xffff}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e000058"}}}]}, 0x48}}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r10, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000200001002bbd700000ff00000a108000000000080400010014000200fc02000000000000000000000000000014000100200100"/67], 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYRESOCT=r0], 0x5c}}, 0x0) 16.451884671s ago: executing program 1 (id=2735): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) gettid() (async) r1 = gettid() r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="5ffcdc36af", 0x5}], 0x1}, 0x40001) accept4(r0, &(0x7f00000008c0)=@rc, &(0x7f0000000140)=0x80, 0x80800) (async) r5 = accept4(r0, &(0x7f00000008c0)=@rc, &(0x7f0000000140)=0x80, 0x80800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000940)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) r8 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_msfilter(r8, 0x0, 0x21, &(0x7f00000000c0)=ANY=[], 0x14) sendmsg$netlink(r0, &(0x7f0000000a80)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)=[{&(0x7f00000002c0)={0x1c4, 0x37, 0x800, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x13c, 0xa3, 0x0, 0x1, [@typed={0x8, 0x4c, 0x0, 0x0, @fd}, @typed={0x14, 0x9c, 0x0, 0x0, @ipv6=@remote}, @typed={0x5, 0xab, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x58}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x7}, @typed={0x100, 0x133, 0x0, 0x0, @binary="31d3a1cbfa2e9563600499455251ab500342672ffc840d24e833afc362428decff18bb0ac83bc83d8dc89918bf6ce9a3e646e472baf812a42c5e55e80ecd7fdf96cb75bdb75ca8a65df35f699d7dbbf383398f362498cd00c1235374e1e8cda828d1bf72d8e07f4d29528aa2ed9c35cf01d03fc128908bcc6523b1a22dc5d2ec8fa2380ac88e2752a2da2c18386cc1f23b1d72d1240b995b23ecde19bbedf55646d610f9fc68677a9481199445f1d7e5af47de111434d98b52bd8688061c40ba3445e2541503c312fca7e2e3e1ff179a6bf35dea7f95f1c7622b6cb9c8929f590fce157f66ab39cd369e61ef5e221fd0fe3db04dfcf1d50bf01df342"}, @typed={0x8, 0x3f, 0x0, 0x0, @pid=r1}]}, @typed={0x8, 0x8f, 0x0, 0x0, @ipv4=@local}, @generic="33665398e92911484d71d8efd3ed49e746652a4fd3bcf37ca37ab32ed186ecccf67d713939fccbbbeadb36c5730724b9ffe2a0d8729bb6353a75cc47a7e15550510de69bc7a474e1faef49378e53d7579577312a4685b4363ebd7e4bdf842ff01e1812530a9f89b488648742d8"]}, 0x1c4}, {&(0x7f00000004c0)={0x3c0, 0x13, 0x400, 0x70bd28, 0x25dfdbfb, "", [@generic="bd22e1c63a2d08afdaf042de5ac71962a8ebb2bbb98cff477d0366e1355264343e2c8a1010d05fa9577108c98a8676c47076d80fb271808fc20be1c7a1a200461bb1a0723efb4e90851bdf15f8acffd45b2de7ed668e64d8d37721dcd5170a2e35ce242385cc44c1f1e273333b67488a8e9e67dcc28a91a9cb17", @generic="2ed76dab0c4bcda840ad55a5a10f716fe3c37854d39e6a3516a5bdaecbfcd7917ece7b821af3366acf6d86e40acb28d30cbdff52334c2976dd1e6536f9da6b90140413b4507488c6bd2febc32a11751b1c706f55e31ace2ccb98a8f8b591f00be284d82ce69232a06bff723fc030e936a9aa50082350b8ddd7b494b5cbb13bdc7fe17a63", @generic="a17d16087fe818f0ce21bfbb685a58b1c70b6dc9d76b7c0e447d78bb906ebd9e4a5bc5090f0b2ab983107e7d6daaed7d4b2d4330ce630b64ed76658f805e6c2f5689817a8c2a735b5c23bb948b0c88862185d95fa4b9f56a67b63288db776da222ac70b8edd73b34d87dfaee1034e5bf8f78292e4187d33b9566d30252203dc1ec91a010107750a407228fc6cccd2c1ccbe5f1fb5197771b618dd60670f8846abf66d9c9af9a", @typed={0x4, 0x135}, @typed={0x8, 0xea, 0x0, 0x0, @str='GPL\x00'}, @nested={0x118, 0x14b, 0x0, 0x1, [@typed={0x8, 0x27, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xdf}, @generic='Jf', @generic="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", @typed={0x8, 0xda, 0x0, 0x0, @u32=0x7}]}, @typed={0x8, 0xc2, 0x0, 0x0, @ipv4=@local}, @nested={0x14, 0xa1, 0x0, 0x1, [@typed={0x8, 0x1b, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x11f}, @nested={0x4, 0x112}]}, @generic="3c1a8aaeba834763eae262563e7542c4445be6d46d5b96302679949cf5af712c209d63503106d30f1d9acf21f30d1fccf6dccdaa3ca848312d7d82f32b04f9e70d3c8105ba1ee307189024d31eefe3acae3ed4279caba2e55a8679b4e7ad8c8f4d9a15029cf4b700f361f0f1791a300c9b1426fae93daaa1fa089869dc2c847d054f84b4b0dc681642e090eda415c510b1595ed9471c372327c250e6ca7f6a6152cc3eea9c37c0a3d0e5c7d043b647b9f086fbb988ebaf2ea3ce52c63016b811fa", @nested={0x8, 0xd5, 0x0, 0x1, [@nested={0x4, 0x8f}]}]}, 0x3c0}], 0x2, &(0x7f0000000a00)=[@rights={{0x34, 0x1, 0x1, [r2, r0, r0, r0, r4, r5, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, r7}}}, @rights={{0x20, 0x1, 0x1, [r0, r8, r0, r0]}}], 0x78, 0x4000010}, 0x810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r9, 0x0, 0xb9b}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r9, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 9.26937525s ago: executing program 6 (id=2766): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}}, 0x4000800) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r1, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r3, &(0x7f0000000380)="03", 0x0}, 0x20) 9.038563744s ago: executing program 6 (id=2769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x34, 0x0, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x40) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x8}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_OIF={0x8}}, @RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x30}}, 0x0) 8.924079644s ago: executing program 6 (id=2770): r0 = socket$caif_stream(0x25, 0x1, 0x4) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000040)=0x2c) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x2, 0x8000000000000001, 0x7}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'wg1\x00', @random="ccf2ff90c688"}) syz_extract_tcp_res(&(0x7f0000000100)={0x41424344}, 0x7f, 0x524a) syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r1, &(0x7f0000000180)={@val={0x0, 0x201}, @val={0x2, 0x0, 0x9, 0xae15, 0x3, 0x5}, @ipv4=@tcp={{0x12, 0x4, 0x0, 0x13, 0xc0, 0x65, 0x0, 0xf8, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x33, 0xffffffffffffffff, [{0x7, 0x6, "e3597bb9"}, {0x2, 0xb, "61941215294c0a66f0"}, {0x7, 0xa, "c99fb78ccd4c0972"}, {0x0, 0x4, "a5ea"}, {0x0, 0xe, "aa09e2bfe940f720a0c8b7e7"}]}]}}, {{0x4e21, 0x4e21, r3, r2, 0x1, 0x0, 0x7, 0x4, 0x100, 0x0, 0xff, {[@window={0x3, 0x3, 0x1}, @mss={0x2, 0x4, 0x6}, @nop]}}, {"9f2fc8b680c395cf1a18eef81b4f22e21ac8ddacc448d0d3e506d4580adebf2efaddd3763371da79b36fd51c6ce921c7f584ed0d3dea91766f08059beeb26787157b96ae4cd7d03461bd87abef03a3fab3275fbaba4f5c04833ba99e"}}}}, 0xce) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000002c0)={0x0, @broadcast, @empty}, &(0x7f0000000300)=0xc) sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x41001}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@delneigh={0x68, 0x1d, 0x800, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r4, 0x2, 0x6c, 0x3}, [@NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_LLADDR={0xa, 0x2, @random="1491f39dc858"}, @NDA_FLAGS_EXT={0x8}, @NDA_VNI={0x8, 0x7, 0x60000}, @NDA_FDB_EXT_ATTRS={0x10, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x6}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_SRC_VNI={0x8, 0xb, 0x2}, @NDA_SRC_VNI={0x8, 0xb, 0x7}, @NDA_PORT={0x6, 0x6, 0x4e24}]}, 0x68}, 0x1, 0x0, 0x0, 0x24004080}, 0x4080) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r1) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pB \x00'}, 0x20) syz_extract_tcp_res$synack(&(0x7f0000000540), 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000600)={'tunl0\x00', r4, 0x7800, 0x20, 0x6, 0x7fffffff, {{0x11, 0x4, 0x1, 0x3c, 0x44, 0x66, 0x0, 0x1, 0x29, 0x0, @multicast2, @loopback, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0xca, [@dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0x21}, @multicast1, @remote, @local]}, @noop, @end, @timestamp={0x44, 0x10, 0x61, 0x0, 0x5, [0x7, 0x7057448f, 0x6ce2]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xdc, r5, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x74, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2000000}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '%pB \x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4f0}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'V:}]\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '!--\',-$%\',#-}/*\x93{:$]\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0xdc}}, 0x20000000) write$tun(r1, &(0x7f0000000840)={@val={0x0, 0x3180053f8d730f0b}, @val={0x1, 0x3, 0x8, 0x1d93, 0x70, 0x4}, @ipv4=@dccp={{0x5, 0x4, 0x3, 0x31, 0xa2, 0x67, 0x0, 0x5, 0x21, 0x0, @loopback, @private=0xa010101}, {{0x4e23, 0x4e20, 0x4, 0x1, 0xb, 0x0, 0x0, 0x2, 0x3, "25aef4", 0x1, "bfa88a"}, "1ec25827592777d24001d73f612194eb0fc7ef4a36b724398b040390b8564b0f36652308c33871de2b9b5788f34a95577939a0cd0b783d555534d2e3e83d609b57b19eba4b75a1410dd4f970e90626a3cd8b639d3856cd1f3b7226812653931cacc6993ddefb1b3828e57dc264a7346903559ff6ed18e687d9f23cf1a841"}}}, 0xb0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xb8, r9, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e82ffb3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60d51a43}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x89f6}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x80, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2076dc64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa856876}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x609143d6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a09f8c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56d43e91}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74c67465}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x541e332a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x20008810) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c40)={r1, 0x0, 0x8, 0x1000, &(0x7f0000000ac0)="ceac4ef66f838657", &(0x7f0000000b00)=""/4096, 0x68ac, 0x0, 0xf8, 0x3c, &(0x7f0000001b00)="71d002e17eb1e78bd7da3edac6eb15895337884b3d434a91f49991339015b244d2f8b52e9c0ae83c2314baf0abb0607c26d5c3704cdb143c6bd86b3cccc56f32f7eea429e9c646aff6aa0ff3a0d01c7bb52e565f7403c0156c9af120a7ed47ad14a2f5d3a2e2d6052e72e7f993f97b8afa2ccfd716ac11e5faa561c2f73abca7c84e565b71e864176d7557abc59db97a4ba3554a7be54689e4c82c0373b676ea6193de44b7e2825d5de1afe7570db5371af4f2a939d555ca1f78f672de195b35b794501d7e46c09383f232ce1dd161e8e40f06194484dfb43a41dc877cc0a88b28650908555b618d134f33669854acc02baca69fee8e18e0", &(0x7f0000001c00)="37b0a49566709f3d6d69661c5fed2d7c5860723a6e379daffd225131ba9d80feb15f010c9207a0aa75860a7c5737ad0736ba89e5281f90c80d59726d", 0x1, 0x0, 0x3}, 0x50) syz_emit_ethernet(0x36, &(0x7f0000001cc0)={@multicast, @empty, @void, {@generic={0x886c, "2f6ad1396f05d895c94c18a23fb87dfc5d391cfc4bc3eb6c07d2a64210ee3b129f9eff15a9b4c90d"}}}, &(0x7f0000001d00)={0x0, 0x3, [0x7d3, 0xf77, 0xd62, 0x5ad]}) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x1, &(0x7f0000001d40)=""/123, &(0x7f0000001dc0)=0x7b) syz_extract_tcp_res(&(0x7f0000001e00), 0x8, 0x100) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000001e40)=0xff, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002040)={r1, &(0x7f0000001e80)="453391e7872200ecf2eb6fdbf8c6aa6741f6bbe09c2fba464174601cf31750b07937c84f5b1900d1311ff29c1b8e0bd4d30fd55ee466a16d70812e33f74ef11bceefba93b192f878f7819a94493dd596b2855671a97766c1df7580bde7b0613429346e16a536e205fc23790c1f40e7cbc0e5d002d916f5a814aee09e80dfd56bdac704ba", &(0x7f0000001f40)=""/202}, 0x20) syz_extract_tcp_res$synack(&(0x7f0000002080), 0x1, 0x0) ioctl(r1, 0x0, &(0x7f00000020c0)="bd9dd7c6389320a833ec33f5bdeb438c1a51aec6087c6835dcb5bf268cbf7036f99add3b80e9655bf86a53e5bac7f9c54aedc0668cd7730768706fdeb9417ee023c606abc1d3d4eab3fb6aed811235bd463b3740460eac4bcbb4ed7921cb5b5dabe8eb0f801ba6c5cfcf18eb4f7856188184064d") write$tun(r1, &(0x7f0000002140)={@val={0x0, 0x9300}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ca5446951cad", @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@arp={0x806, @generic={0x335, 0x88a2, 0x6, 0x5, 0x2, @remote, 'CY$D\x00', @local, "ad30617c16d1d466a1d87cc196d032"}}}}}, 0x3e) recvfrom$ax25(r1, &(0x7f0000002180)=""/40, 0x28, 0xa0, &(0x7f00000021c0)={{0x3, @default, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 8.723129189s ago: executing program 6 (id=2772): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8d}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16}, 0x90) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r1, &(0x7f0000000000)={0x2, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="02"], 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111ab00000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001800090400000000000000000a000000000000000000000008001e80"], 0x2c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000006c0)=@updsa={0x154, 0x1a, 0x1, 0x10000000, 0x0, {{@in6=@private1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@private2, {0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {}, 0x70bd2d, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x3, 0x4e20, 0x4e22, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x154}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) 8.631519931s ago: executing program 6 (id=2774): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000080)) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x68, 0x10, 0x20, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x8, 0x40440}, [@IFLA_VF_PORTS={0x24, 0x18, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x8001}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a5db84b33ac0d904048eeb1cab440afe"}]}]}, @IFLA_IFALIASn={0x4}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_PHYS_SWITCH_ID={0x15, 0x24, "dfabddfb23695d80aad48fc9791ba80fc6"}]}, 0x68}, 0x1, 0x0, 0x0, 0x77f70f17af4053bb}, 0x0) 8.25948485s ago: executing program 6 (id=2776): writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad", 0x27}], 0x1) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x7}}}}]}, 0x44}}, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={&(0x7f0000008540)=ANY=[@ANYBLOB="2400018f7aa2b916e421000000000000060800084000"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x10000000) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newtfilter={0x14cc, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x149c, 0x2, [@TCA_CGROUP_ACT={0x1498, 0x1, [@m_simple={0xf4, 0x1d, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xb5d, 0x6, 0x3, 0x1, 0x1}}, @TCA_DEF_DATA={0xd, 0x3, '!&[]!)(-\x00'}, @TCA_DEF_DATA={0x7, 0x3, 'rt\x00'}]}, {0x96, 0x6, "a7d14df33a4c5586e2cbbb9d0ad380f75393e0a377d48ebd8aac6eb8037f6766fbaf1c0e06fe29a167452e3b0f268ce5f5265b59707fc863b855408315b36ea22bb5b12a626158b7180202c98f1d73a912bed1b6fb2211322c4080d732c82c0f15ea402c591cf40cdfc7d047dfef4189c73bdb7488d1a459599101e04e4dda48d926510c9a450d43e64c87bd9b52af17ac79"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}, @m_simple={0xa0, 0x1a, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x625b5ed1, 0x2, 0x20000000, 0x9b, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x1d, 0x7, 0x6, 0x24ba60b6}}]}, {0x41, 0x6, "28b4c5d2294f6c37b50fee6e8d17c67ec3fba0d7b87d882e0977fcfa80940ecc4356f1a72197f63dcb9b607bfd6e77f87c424a62bfdecf814647b210f1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbedit={0x124, 0xa, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0x7}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0xffe0}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1, 0xe}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x908f}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xf}]}, {0xbd, 0x6, "d7f43c5372ee86d9ce035d2f2a5a849afe1f893eb2e1f4a49a06b064d561896ba55fdef3f579a47d2a72326cf5d4326067ea961d7290cd9eff5c3892befff0003d2dd7a88d4555067976056a96453a8f0d0a1f6b38b41eed66cfd638168c85be3d7b6c0a2f424bd1dc233c6c9320d7dbe4a97e7bf65c40c59975109e62b6869aac6dae0bb2aabe03663b63b5d8ef845ee5146936fc35653f8386719b06d470a520a6305ee5c3c4414ffd89fa497d6247c48a72353e627b3079"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ctinfo={0xd0, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xc74}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x80000000}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}]}, {0x79, 0x6, "add04489f4b4f9a44dc393e4fe7b69f2ec3965d3b24056e92dace38862a3cf5d878c6e0c00f2695f5b6505aec26239e3e15e84231f8e55703ac776e6d397d9c30a114cb64f0a3285ea7af1db6a3959dd07df99f1223d1efbcf5fb4acbb3b818a7462876c9f6a2cffbc7c41c97d0701f744fef75591"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0x1014, 0x12, 0x0, 0x0, {{0xa}, {0xf60, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x0, 0x3, 0x4, 0xfffffff9, 0x8}, 0x7, 0xf5, [{0xffffffff, 0xfffffffc, 0x4, 0x690, 0x4, 0xfffffffd}, {0x816, 0x8, 0x1, 0x0, 0x78e, 0x9}, {0x3, 0x5, 0x4, 0x2, 0x3, 0x81}, {0x10000, 0x3, 0x1ccc, 0x101, 0x6, 0x1}, {0x5, 0x2, 0x3, 0x1, 0x9433, 0x6}]}, [{0x4, 0x3, 0x0, 0x7fff, 0x7, 0x8}, {0x1, 0x401, 0x2, 0x80000000, 0x2, 0x6}, {0x1, 0x4, 0xf7d, 0x7fffffff, 0x7, 0x3}, {0x6, 0x6, 0x80000001, 0x0, 0x18000, 0x4}, {0x81, 0x1, 0x8, 0x0, 0x8, 0x7}, {0x9, 0x0, 0x0, 0x3, 0x7, 0x8}, {0x3, 0x1, 0x122ba0, 0x466, 0x3, 0x3}, {0xa16a, 0xfffffffb, 0x2, 0x1, 0x5}, {0x80000000, 0x0, 0x1, 0x7, 0x4, 0x1}, {0x5, 0x101, 0x5, 0xc, 0x1, 0x4}, {0x40, 0x6, 0x7, 0x1000, 0xa, 0x6}, {0x3, 0x3, 0x3, 0x10, 0x0, 0x3}, {0x40, 0x3ff, 0x78d, 0xfff, 0x7, 0xf79d}, {0x5, 0x0, 0xd, 0xa, 0x8, 0x4}, {0x1, 0x1, 0x5c6, 0x9069, 0x8, 0x7c1}, {0x9e, 0x8, 0xaed8, 0x5, 0x7ff, 0x9}, {0x5, 0x9, 0xff, 0x0, 0x9, 0x2}, {0x6, 0x9, 0x1, 0x3, 0x7, 0xbd28}, {0x6, 0x7, 0xfffffffa, 0x9, 0x8, 0xff}, {0x2, 0x0, 0x2, 0x3, 0x9, 0xffffff01}, {0x2000059d, 0x8, 0x80000000, 0x100, 0x101, 0x5}, {0x1, 0x8, 0x6, 0x401, 0x23, 0xa192}, {0x40, 0x3, 0x8, 0x8, 0x5, 0xfffffffe}, {0x8001, 0xd82b, 0x3, 0x6, 0x7, 0x36}, {0xc000, 0x9, 0x7ffc, 0x9d45, 0x2, 0x4e8b}, {0xc, 0x55f, 0x7, 0x2ed, 0x8}, {0x6, 0x7, 0x6, 0x99, 0x461, 0x6}, {0x6, 0x5, 0x6, 0x200, 0xe, 0x8b5f}, {0x10001, 0x10, 0x69c, 0x5, 0x5}, {0x8000, 0x69a0, 0x80, 0x4b4, 0x8, 0x80000000}, {0xb6, 0x0, 0x1, 0x7, 0x4c, 0x9}, {0xf8, 0x5, 0x5, 0x0, 0x101, 0x1}, {0x5, 0x3, 0x8000, 0x6, 0xa65d, 0x7f}, {0x6, 0x5, 0x80, 0x4, 0xf, 0xc}, {0x1, 0x5, 0x43, 0x6, 0x1, 0x3}, {0x3, 0x6, 0x6, 0x7fffffff, 0x1000, 0x6}, {0x0, 0xce, 0x1, 0x1, 0x80000001, 0x7}, {0x0, 0xbf60, 0x2000, 0x9, 0x7ff, 0x7}, {0x5, 0x2, 0xd, 0x4, 0x2d58, 0x3}, {0x3, 0xfffffffd, 0x3488, 0x3ff, 0x4, 0x9}, {0x48c3, 0x5, 0x6, 0x6, 0x4, 0x7ff}, {0xfffffffd, 0x80, 0x7e, 0x4, 0xfffffff1, 0x40000}, {0x6, 0x9, 0x5, 0x35f3, 0x5, 0x4}, {0x3, 0x0, 0x80000001, 0x8eb, 0x61, 0x6c61}, {0x272, 0x2, 0xff, 0x6, 0x9, 0x405}, {0x1ff, 0xda43, 0x80, 0x9d, 0x53}, {0xbb8, 0x2, 0x9, 0xcc4, 0x40, 0x8}, {0x7, 0x9, 0x0, 0x7, 0x6, 0x4}, {0x1, 0x7ff, 0x10000, 0xce, 0x0, 0x9}, {0x200, 0x1000, 0x3, 0x7, 0x9, 0x9}, {0x0, 0xfffffffe, 0x9, 0x3, 0x8, 0x9}, {0x10, 0x2, 0x7ff, 0x8, 0xe15, 0x8}, {0x10, 0x6, 0x8, 0x6, 0xfff, 0x5}, {0x2, 0x2, 0xb70, 0x8, 0xe3, 0x1}, {0xc8a6, 0x21f, 0x81, 0xe, 0x6, 0x8a}, {0x6, 0xc000, 0x9, 0x3, 0x50, 0x4}, {0x9, 0x0, 0x800, 0x6, 0x0, 0x4}, {0x0, 0x401, 0xe0, 0x5, 0x6, 0x2}, {0x6, 0x2, 0x81, 0x8, 0x7fffffff, 0x2}, {0x2, 0x3, 0x0, 0x3, 0x9, 0x3ff}, {0x2, 0x1, 0x8, 0x4, 0xfffffffb, 0x5}, {0xffffffff, 0x6, 0x0, 0x8, 0xc60b, 0x5}, {0xffffff8d, 0x4, 0xb, 0xffffffff, 0x7, 0x415}, {0x4, 0x4, 0x7, 0x3, 0x5}, {0x80, 0x9, 0x8, 0x4, 0x8001, 0x7}, {0xfffffff8, 0x6, 0xf, 0x7, 0x3f, 0x2}, {0x1, 0x401, 0xffffffff, 0x100, 0xdb7, 0x3}, {0x3, 0xb6, 0x2, 0x1, 0x1, 0xc8a}, {0x1, 0x6, 0x8, 0xc18, 0x6b3c, 0x1000}, {0xde, 0x6, 0x9, 0x8, 0x4, 0x7}, {0x5, 0xf0b, 0x6, 0x5, 0x5ccd57e7}, {0xa, 0x9, 0x9, 0x0, 0x8, 0x4}, {0x0, 0x0, 0x9, 0x3ff, 0x1}, {0x0, 0x6a, 0x1815, 0x3, 0xb, 0x8}, {0x401, 0x45d4, 0x180000, 0x3ff, 0x3, 0x7}, {0x4, 0xfc71, 0xfd, 0x2a72, 0xffff8000, 0x7}, {0x401, 0x5, 0x8, 0x4, 0x7f, 0x7}, {0x0, 0x1, 0xff, 0x1, 0x9, 0x7}, {0xc8, 0xfff, 0x368521e5, 0x3, 0x5, 0x6}, {0x5, 0x2, 0x89dc, 0x5, 0xdebd, 0x7}, {0x1c00000, 0xfffffff8, 0x0, 0x3, 0x7, 0x2}, {0x80, 0x0, 0x6, 0xb, 0x3, 0xffffffe9}, {0x5, 0x0, 0xffffffff, 0x3, 0x4, 0x9}, {0x3, 0x3, 0x10, 0x23000, 0x2, 0x83}, {0x3, 0x7, 0x7fffffff, 0xa11, 0x101, 0x9}, {0x3, 0x2, 0xffffff3a, 0xffff, 0x2, 0x8}, {0xb, 0xa, 0x8001, 0x9e, 0x5, 0x9}, {0x9, 0x4, 0xfffffff8, 0xc, 0x6, 0x2}, {0x8b91, 0x800, 0x517fa9e9, 0x1, 0x4}, {0x2e9, 0x2, 0x0, 0x4, 0x6, 0x81}, {0x9, 0x3, 0x1000, 0xa7, 0x8b4a, 0x76ab}, {0xada, 0x9, 0xa7, 0x10, 0xac96}, {0x1, 0x2, 0x3, 0xb1, 0x5, 0x52}, {0x7, 0x80, 0x7fff, 0x9, 0x0, 0xfff}, {0x93, 0x10001, 0x9, 0x80, 0x6, 0x8}, {0x7fffffff, 0x4, 0x7, 0x8, 0x91, 0x7793}, {0x1000, 0x8, 0x5, 0x0, 0x7ff, 0x200}, {0x6, 0x1, 0x0, 0x7, 0x0, 0x4}, {0x7, 0x1, 0x8, 0x1, 0x8, 0x1}, {0x5, 0xffffffff, 0xe, 0x3, 0xffffc7ef, 0x6}, {0xfe9, 0x6, 0x1ae6, 0x3, 0x80, 0x9}, {0x6, 0xf, 0x6, 0x8, 0xcd, 0x4}, {0x9af, 0x6, 0xff, 0x0, 0x791, 0xe}, {0x4, 0x31b, 0x8, 0x5, 0x6, 0x3ff}, {0x7, 0x2, 0x8, 0x7, 0xe, 0x2a}, {0x9, 0x1ff, 0x2489, 0x2, 0x8, 0x5}, {0x9, 0x1, 0x4, 0x1, 0x3, 0x3}, {0x7fffffff, 0x4, 0x6, 0x1, 0x6}, {0x5, 0x8, 0x7, 0x0, 0x2, 0x8000}, {0xfffffc01, 0xd, 0x3, 0x8000, 0x73, 0x7}, {0x1000, 0x60000, 0xff, 0x7fff, 0x2, 0x1}, {0x7, 0x9, 0x2, 0x7f, 0x0, 0x6}, {0x1, 0x80, 0x7, 0x100, 0x0, 0xfffffffd}, {0x6, 0x6, 0x8, 0x3, 0xfffffff8, 0xd}, {0x2, 0xff, 0x1, 0x67, 0x55e, 0x3}, {0xfffffff7, 0x0, 0x1, 0x7, 0x9, 0x6}, {0x5, 0x8000, 0x2f, 0x7, 0x500, 0xc7}, {0xc, 0x7f, 0xffffffff, 0x81, 0x8001, 0x7cd}, {0x5, 0xe6, 0xffffffc0, 0x4, 0x7ff, 0x6}, {0x6, 0x7, 0x7, 0x230, 0x80000001, 0x1}, {0x7, 0x1, 0xffff, 0x1, 0x5, 0x6}, {0xfffffbff, 0x0, 0xabc, 0x2, 0x3, 0x6}, {0x6fe, 0x1, 0xcb, 0x80000000, 0x74, 0x7ff}, {0x5, 0x8, 0x4, 0x401, 0x8, 0x6}, {0x1, 0x101, 0xb02, 0x8, 0x6, 0x7}, {0x9, 0x2, 0x152, 0x8001, 0x0, 0x5}, {0x46f6, 0x200, 0x85, 0xc69d, 0x4, 0x9}, {0x0, 0x1, 0x101, 0x5, 0x8001, 0x3d}], [{0x4, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {}, {0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x1}, {0x3}, {}, {0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x6, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x4}, {0x1daf67a0d35377b7}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {}, {0x4}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0xb, 0x1}, {0x5, 0x1}, {0x4, 0x3}, {0x1}, {0x5}, {0x4}, {0x0, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0xc4, 0x5, 0x0, 0x1, [{0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x8b, 0x6, "b2174a3ae5baea944da8a3c949d658d854728c988717a84d5c6ce1d43d457874bff8c5f2ab12832a827970af32c6fab23c0fe0d356a88e13a82f73e0cdd4b2c0a12d1808e82aff2316ee42d6f0a93f3c10d530a843a8007a0276b7896dbe92a7c5d0d3c8ad72f23bd1aa016cdc01b2a5da20db9cfd809acca8d443cbc40e677e235ad0d54c7fec"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0x88, 0x18, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0x9, 0xffffffffffffffff, 0x4, 0x9}, 0x6}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xf2ad, 0xfffffffb, 0x20000000, 0x7, 0x1633}}}]}, {0x12, 0x6, "f537d600feb3b349306cc9c44289"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0x70, 0x3, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0xfffffff7, 0xffffffffffffffff, 0x5, 0x3}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7206}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x80}]}, {0xa, 0x6, "d08a4ba74a0e"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x14cc}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01040000000000000000280000002800000005000000030000000000000e02000000000000000000000001000005000000000000000001000000000000000000025f00"], 0x0, 0x45, 0x0, 0x1}, 0x20) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000100000004000480080002000100000008000b"], 0x28}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r8, 0x8b24, &(0x7f0000000040)) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c9"}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 5.804773085s ago: executing program 5 (id=1076): r0 = socket$igmp(0x2, 0x3, 0x2) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x12001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f0000000200)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.471748547s ago: executing program 4 (id=2798): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffff1901863ffe000000000008004500439c000000000088901414aa0b0090783800c506b112c073f0aad04e5254f066c7e1000000009a1e4a5c15b2010292a6eb41713cb7"], 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000480)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00"/20, @ANYRES32=0x1], 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) socket(0x2, 0x1, 0x3) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) socket$can_raw(0x1d, 0x3, 0x1) 1.594737002s ago: executing program 4 (id=2801): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x1, 0x0) listen(r1, 0x0) recvmmsg(r1, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x2b, 0x1, 0x0) (async) listen(r1, 0x0) (async) recvmmsg(r1, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) 1.562325611s ago: executing program 8 (id=2802): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000800)="a6beee7d665bfbc85e14ce5088a82d3e86dd", 0x12, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) sendto$packet(r0, &(0x7f0000000280)="33c091441bd8dcb1fcc92c08e2725aec6130d9caa479f97c12988ef23baaf4d4b07897d4453a3f3b11c13c0da57e613f4b9c5eafb3ed8f9533b9225d96b9fade94d52aab41f2e4a60ece3bd8e6c59c00b668335eda3115550da7ebd9d611efe7fbe781c9185284f00880f54ae40334fda8a031e58e56410eed04c7dab18a2a9afc5ca14c167aad65ff61b52d23bedd0db9dcd6df23b979bbbb59de1848c83cda699c7813ef35187c5c96244c70a46241846fed8b29d0735abfdc970da3b68caa9cad6f7eb8668caeb7389004cc32d845", 0xd0, 0x40880, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x4}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000080)=0xf41, 0x4) socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000000c0)={r7, 0x1000, 0x3, 0xc, 0x8, 0x7}, 0x14) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe22, 0x5, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) r9 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x60, 0x13, 0x400, 0x70bd28, 0x25dfdbfe, {0x1a}, [@generic="8ad52987e21295d3de6e8a6e8fa693a3297b2ece5046fc44fc909b1846224e593dd3277d29aae1ad8876a166a47a", @typed={0x8, 0x8c, 0x0, 0x0, @fd=r9}, @typed={0x14, 0x87, 0x0, 0x0, @ipv6=@mcast2}]}, 0x60}}, 0x5) sendmsg$inet(r9, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 1.493404757s ago: executing program 4 (id=2803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003940)=[{{&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040), 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c720000000100000000000002000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) 1.43250039s ago: executing program 36 (id=2735): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) gettid() (async) r1 = gettid() r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="5ffcdc36af", 0x5}], 0x1}, 0x40001) accept4(r0, &(0x7f00000008c0)=@rc, &(0x7f0000000140)=0x80, 0x80800) (async) r5 = accept4(r0, &(0x7f00000008c0)=@rc, &(0x7f0000000140)=0x80, 0x80800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000940)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) r8 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_msfilter(r8, 0x0, 0x21, &(0x7f00000000c0)=ANY=[], 0x14) sendmsg$netlink(r0, &(0x7f0000000a80)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)=[{&(0x7f00000002c0)={0x1c4, 0x37, 0x800, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x13c, 0xa3, 0x0, 0x1, [@typed={0x8, 0x4c, 0x0, 0x0, @fd}, @typed={0x14, 0x9c, 0x0, 0x0, @ipv6=@remote}, @typed={0x5, 0xab, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x58}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x7}, @typed={0x100, 0x133, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x3f, 0x0, 0x0, @pid=r1}]}, @typed={0x8, 0x8f, 0x0, 0x0, @ipv4=@local}, @generic="33665398e92911484d71d8efd3ed49e746652a4fd3bcf37ca37ab32ed186ecccf67d713939fccbbbeadb36c5730724b9ffe2a0d8729bb6353a75cc47a7e15550510de69bc7a474e1faef49378e53d7579577312a4685b4363ebd7e4bdf842ff01e1812530a9f89b488648742d8"]}, 0x1c4}, {&(0x7f00000004c0)={0x3c0, 0x13, 0x400, 0x70bd28, 0x25dfdbfb, "", [@generic="bd22e1c63a2d08afdaf042de5ac71962a8ebb2bbb98cff477d0366e1355264343e2c8a1010d05fa9577108c98a8676c47076d80fb271808fc20be1c7a1a200461bb1a0723efb4e90851bdf15f8acffd45b2de7ed668e64d8d37721dcd5170a2e35ce242385cc44c1f1e273333b67488a8e9e67dcc28a91a9cb17", @generic="2ed76dab0c4bcda840ad55a5a10f716fe3c37854d39e6a3516a5bdaecbfcd7917ece7b821af3366acf6d86e40acb28d30cbdff52334c2976dd1e6536f9da6b90140413b4507488c6bd2febc32a11751b1c706f55e31ace2ccb98a8f8b591f00be284d82ce69232a06bff723fc030e936a9aa50082350b8ddd7b494b5cbb13bdc7fe17a63", @generic="a17d16087fe818f0ce21bfbb685a58b1c70b6dc9d76b7c0e447d78bb906ebd9e4a5bc5090f0b2ab983107e7d6daaed7d4b2d4330ce630b64ed76658f805e6c2f5689817a8c2a735b5c23bb948b0c88862185d95fa4b9f56a67b63288db776da222ac70b8edd73b34d87dfaee1034e5bf8f78292e4187d33b9566d30252203dc1ec91a010107750a407228fc6cccd2c1ccbe5f1fb5197771b618dd60670f8846abf66d9c9af9a", @typed={0x4, 0x135}, @typed={0x8, 0xea, 0x0, 0x0, @str='GPL\x00'}, @nested={0x118, 0x14b, 0x0, 0x1, [@typed={0x8, 0x27, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xdf}, @generic='Jf', @generic="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", @typed={0x8, 0xda, 0x0, 0x0, @u32=0x7}]}, @typed={0x8, 0xc2, 0x0, 0x0, @ipv4=@local}, @nested={0x14, 0xa1, 0x0, 0x1, [@typed={0x8, 0x1b, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x11f}, @nested={0x4, 0x112}]}, @generic="3c1a8aaeba834763eae262563e7542c4445be6d46d5b96302679949cf5af712c209d63503106d30f1d9acf21f30d1fccf6dccdaa3ca848312d7d82f32b04f9e70d3c8105ba1ee307189024d31eefe3acae3ed4279caba2e55a8679b4e7ad8c8f4d9a15029cf4b700f361f0f1791a300c9b1426fae93daaa1fa089869dc2c847d054f84b4b0dc681642e090eda415c510b1595ed9471c372327c250e6ca7f6a6152cc3eea9c37c0a3d0e5c7d043b647b9f086fbb988ebaf2ea3ce52c63016b811fa", @nested={0x8, 0xd5, 0x0, 0x1, [@nested={0x4, 0x8f}]}]}, 0x3c0}], 0x2, &(0x7f0000000a00)=[@rights={{0x34, 0x1, 0x1, [r2, r0, r0, r0, r4, r5, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, r7}}}, @rights={{0x20, 0x1, 0x1, [r0, r8, r0, r0]}}], 0x78, 0x4000010}, 0x810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r9, 0x0, 0xb9b}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r9, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.312274617s ago: executing program 8 (id=2805): sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x9, 0x7fff, @udp='udp:syz2\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3d, 0x9, 0xffffffff, 0x0, {0x1}, [@typed={0x4, 0x11f}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x22, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b18, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x60, r7, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @probe_request={{{}, {}, @device_b}, @val, @val, @void, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0x4, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x95ce, 0x9}}, @val={0x72, 0x6}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000", 0x17}], 0x1}, 0x0) r10 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_NO_ENOBUFS(r10, 0x10e, 0x5, &(0x7f0000000000)=0xffffffff, 0x4) r11 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x110, 0xd}}, @ip_ttl={{0x14}}], 0x30}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001200"/56, @ANYRES32=0x0, @ANYBLOB="00000000000020800700000000ebff00fea4dd95beff31fcd7c0a65b6c3cd838644b0aee62251bc5cc2917c4418e2f"], 0x4c}}, 0x0) 1.153491826s ago: executing program 4 (id=2806): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a0000000000006f0000000005001b003a00000008000300", @ANYRESOCT], 0x2c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=@gettaction={0x28, 0x30, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x0) 1.009819786s ago: executing program 8 (id=2807): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x488, 0x30, 0xffff, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4982, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a00000000000061109800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x20008844) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4c881}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000004) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000040)=0x8000, 0x4) (async) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 64) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) read(r4, &(0x7f0000000340)=""/231, 0xe7) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) r6 = epoll_create(0x8) (rerun: 64) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r5) 974.651356ms ago: executing program 4 (id=2808): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0xff05, 0x0) recvmsg$unix(r0, &(0x7f0000000100)={&(0x7f0000000200), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000040)=""/38, 0x26}, {&(0x7f0000000300)=""/227, 0xe3}, {&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000500)=""/141, 0x8d}, {&(0x7f00000005c0)=""/173, 0xad}], 0x6}, 0x10120) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c00)={0x28, r5, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20008040) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x40, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x24000044) sendto$inet6(r3, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a001200eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 667.780639ms ago: executing program 8 (id=2809): r0 = socket(0x10, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000880)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd601e1907000c2f00fe8000000000000000000000000000bbff0200000001000022ebff0090780100000000000000000000000000d53bdee7e0e2ec14bf04715e83e21585ab4916e0fad9681d145b1e053d38edfceb2726dce665"], 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x70, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, r2, 0x100, 0x306c}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x1}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x100}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x70}}, 0xeb64d656001f6f32) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000c17df12b00dd0aaf4c66a9000073013a00000000009500000000000000be2c3dfc91"], &(0x7f0000000040)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x1000, 0x27, &(0x7f0000001240)="560c204e914f403103e9a73cd9ee17911874cd98cf9aa7b5c53d015c052867811ea614559848eea65c8083bed78f02a2b2c98339d6f902b0c0e232119cfa2947f9217ec0490c004f095b4ad7659b5c0ea8bcdc110d4bdef258a0fb67022a6087da61fd2cd02f8eb0539755e0bdb61da0da3f4ce887e0b0004f82c60a1dea41346e93d6e02f6422f627221e250ab53873344b2abaef1e75607549490c7af9072c08330f2bdc8af5b40f2b20b54c441ca30958fce13f7f7eff2c0ccc123be89037aae5e14b6afca5deaa7e6b2e2ee7235e9499992b4ca49d5036fea66ec2f4388ab6182f62884e2595f24868197742db7b3923ea7fc4d7b96142ab539965ff46da02c5f9455489dc16e66b87fa17778268e789670d85493f527e8a1f83d867fa5b53925002d86a403b2b2b118e8153f5d47ed4a4b603c282d9a82f5afc8250a3bbd36787fbc6789c64eec6f96e87382db5b3bd130d2e2935d6b80ea627cf7871d1a4d6741cd449df611905e91b573e7d43c3c5692d85f60dc5709c9544cfcb5579d92b0c59be14d5150b6c05341351abf4c9cb356bff05adb405b649b1e47c6288dc9bd2ae1cc009fb8c57cac25552c894ad5a616b0a6696f4f070a525384d0ddf53190a9a1484e78e626c05b9bd49e9bf31226ff8cc7d04f38c55b3be7458f700ef84323ac39d78662be7c41a7713c534bc4da3084055bb0ed409201179174f2eaec616abdc7de9adffd37bb04dec4c0a9bb349460168221dc4f8f3cfff9785314af23bcea2ff0e651548b5538aa1327c397c14d4ca858644b5961f62dea39c0faa2b7a1e7223f9199a28501c2355ea8c71711532b69579c53dbb556b0b2d9983c2d30ca45c6f5b38bf604b8015e70a8a45726e44b77cfea59e1a61ef43bfc09ce9d71a0175749d6946f35b6cd4d26e07425d65e352c0c496f83d7da12f3c98a416488b7e780054b70f508eae4c408a0b45b8acdff9fab3629c88beccedb6d9a2f5ab86319a9817ea8c455062dc56eee81fa002927ac5853611287622a4ff7d575308039f5dee742c15ab7abe73adcc2b4b193e215939feedaf75f43e147f3fce67cb798093360aca3af4be6c5696ba5886aaa8562b5b7d16bacce6b799dd23f6f07dffb343a747cd9c302721b623f519cbe31e88733f4f4564bcb77748c22ce89468df9d22f01a788c1eb096a4ba1ed53294ab3ef52b843cc4edc2b51b6a2fec526ab76abc93ac6030c4b66ce28d95800c29e191ed9cc1d9c3dfe323e70f435d1c957447aef7b82ad1b0a8e34238933f708e8e1ec4f84e4599a0efdebc778d426fca592c5cef25b35cf1ab05d95cf24b622a55baa8add70dc6b6775d27be112fe1bad58129d95ccc6886a3160b6bfa9d685fd80c28a85e87872189202e31d0c8142bf9c1a650db90a2165d89734ff44623887403a50aa279e35e5c5f3ad635a8c71dc75be263358b4479384991dc13ed28c83783e62a2afa3ae019f7ba63750e719144bcda12eadf82bf86a401829d55186075cb31489ad42350ee9c7aae23e59dfe1ee125eba57b2c28d72e8a0df7e836387120f3ddffef81ac2f2aaef3e8cc9c494087bbdfd9840f409e10a26774caa09bb1b8d2dfb170592494b50467bfdf7348f88390fc02d72278326dc4198b7cd9316a3fcc353c6dc0f1128786de483d6aeaac0142bd11e86ee9bc1333a704ffb485fc0fc1d5b4636fb15db73273e0b41f6ecfb12a04e6966d11368d44314957a150fe8cfe277ffae6c975e7d5cb07e47583604e80c511a57ae28e5ef29d3912257a0f4c826be6d3cd20b78cc60cf30a8eaf06ec03fac2b2ca710da99fc5e17b6074fdc05696c5d113034525006a7f0998aefad21cfe15b73f8b43f54ea84c95ae7423bf825f48fb08f9e22aa37edaf05d1cffd2baa575b07f9e0e624946da6efedc20771a23d954f02067ebaecadb5fb4afb80456fda73ae3401986c0694b6e77449f6be238f59350f5f838eec55e6548a04ef5601aac4da080464bd8f9818bc391d06bc3e0416694d9ef7b30f00120e5b9ce8c30e7adc88c7188b741a5b47ad21629a22cc7f9d6d5319fd87d629356696befb8a36d35e527261e3f45c7f3ecdd00ffbd4decdda97650341e9c888f65ed1697ad84b65150aa8fadb820680b777203a22546ce0baa456ac04bd580dfa8dc7ea66b3ba71f42c5792591e9b9585635e36aae99da07896942ce3468b1f4c33636f6269ab2622e57b6195090fa08e86871bb237a7b859cd9c9ac71271f7160c0a835ca0f5df0eb116583567a97c5fe78d11fa4dd5d1f580edcfd49397feea18cc53802da50ae1ecd2869f8c8c1b70328ec329f2e81f7e21afd38d3e93677bd00bc017a7dcc177853d699f9bb8c1a77c5bd6b7f3dfbeed09d8f1cc0f9fcde1f89e173f557685b6d8f6b087a8827d9375956d9c16a2fd62f75bc9b36ab297251c4129de482064b091774424140f22d34f11b24c29754de8e09bcdb22a704a66735d68490ba4fc30021a9bef93728046897575664e2c1241242bd16349768a676621f04e4e358b67a94027df3f2d97f942ed98e6841ef0a8ff422305804c96e77c4049594b28071749aa0cf1366b108961434c3f44e19ad49f8cd9eee1c98df7d6bc9c03be98b20007e67279f0f613196dad0f4b836f531bd0cc9f24a626ea254ae7fbd229ea00fe9c91c859d0e1afb4f158a868f98a021c221134e6a6347cb50b222be4e9d4338366e5df3877c36cb2632247b83dac5c81f7235013d77957d7893c5902625b2ab6d6eacf26606d36bddfca9598e1931bd4c8ef756b64464878ee6125b2fbf1169ba708f425b9ff798ea95647d801d779a9bff0fac31079e5775d4401084dc44a17f0f5007b41c28906af905424770fcb657da1124eeea3949e92266e4864c8f8ab083ca7457d94ce3788c8cc131abdc2e8cac33dbfa568630e9ff1d9231d576d532b51261751ff8b64c77c4c2e3809029e7c5cfbe6c9bf517f6acace148aaa06a58d8a585be57270f51800dee0609f436666a3eb3fd1fef0a0e15803b305f5538f637325bdb04bbc4d738182e57fda629782b9851ee4e03de31850bb12041fbce79793b64df656b2f34c26d4638c923e011001acf1aa6ed968ccf68ee8be1cab1da85f68c7bd43d94f649b26a6e83440aba496cf52be5f475f7a234ac34dec74f8b75f8f01e78fc67af7a19b189b0b6f484b7a8632c9217b599a697defa4d34f0ed72990867bd22161d3340c04d7fca143e0e2c1000b1fb481a4b6cfa99afcc6a46c3e28cad16c370a340fb284eb623be006c1f001f814c9da78a29704437f7e64501ee741bec83ba210423df2986b305dfee9134097ac660eb22fb547c3344914b9183c9f594a05eaf4d0310c309ceb3ac15efd91d26fd9d727085f2d15ec06fca68e732a5d79f8338e8a4e87d206ae52d18688a60a5723288dccdade1d76f1bc418faabb7a05799f26548ffff3aef45c646172a807744e89bfd82a92fc3ea235e7927b9de7bd884705cc42025801288bea47741efe97692427507d5090f932dd4d6cf090446e0438b8228c345d5ff8a719ec3625366444d1ad238684fcde9ed62e1ab30e0625d3de7bd221ab8c01654632373d680fd3b9aa9e2c466e5002b3883ea009216d41cd844c4a5fa13cb6d19f83e1999d0119d5257b59b2be75f20de2e8fae7aa0161a36330b07aa8ebbd292e555ad1f7cba43f98e6215a8bc6e2733142ff54650320b3059f06443c578e99c6b5cb572b32fde89801531895d53937f36778a47b369097629fe32b79dae8d4c1bfd43e2882b078982557ad6bef3f59c9a407adeaa595bbea94c9eb12e720157e094d76747acb74d469e4791aaa0a4471e6cccd581a7879669a9ec89b224fa508d9d2c24d9cd85e79af198f47f7ab908bff0ff5245aaad4eca5aa45ed3af390c586c27be58082412c99633490541a47903ac03a3c7bf95780f8718703272aefbed7cb0c6d7cef8e90d4fabadfb8271f0d959afeeabbe9131e45c4d33ea290be682efe02c780b4a147a7971dad8db1bf88ef02e3812cd784dcc716725dc9d53a496d7f2db0db7ccb3dccae902f8c3acbf057f5d15dd9ed0612dcf22632886826641403ff6f74b7a257cc5ebfef391e3305f4de8628876a081ca7c3d7f40811193eb5678a9c9ff06b000536f76ef9595d34d09725fce0ce6298ea635a45c72f8d48b2c75845970b947e0a5a11be472034ce8645dcdfbe70a679b49af0b9a7953515c0d46eafb7f45f906ef9bbee77393c4b975d0d2fb7950becf3eda1514ea60e721287b60f7b7dc362a9808853642cafd255318df5eafa1177812963383f4866bc01ad7831a0ca73076923047341c960c7414368e42af526946d170d02e0d0a2f94519a9fd82250d4a7eb3256427e56dfbc52f8e572594fd596a33cb6afd8658c975252819e561b921f05d9b6f3c58ab6854108d23d6af5b370ffe4a2c20e170fe27955de1318397a44f235076353bf065142d256cb1424bfea22bffec960abdb6e79e7b97326c8f73765a724df605f40239ad118c0e33539bc08fefd32c1277b28fb29ef191206758ba34ef11283a50c048173c5b664a0123745e96694ce0f6ea99dd610fcda718b7ccdd30d5e2ef88ac8e655f95304f66ef839a6396d75bfafc2fd5759fe0202d3144a1499080a87fb279c0625b953758683c94936f7379aab91fcba5f8b16fde8b5bfa341d3283ba4d78cf0582ba1a211da631be36c2f6c23aaa139105cc897ec5bdec5f04be816ca2094a4df4985701b2f4b4906057b8aaf4ce41050ed966b186ccaed42f8545169399af51a4034ce2b1a37750b29a1c077333607dfa0355403031cace02434fef1699267019ca54a1dd7912520316f3a41f5326e4a6116289e385bfc98dae45939cb9db1fa87ec7395699e8a83c23305f5171575ded08c961204a60af6c0df802dfa8611078ee9743444ad06777895e9e74d43786a11318a1dd82243dcf877fe6fbc92005f879c5c3b07ba4c138e70c1e4e040901ef95ab5f6c268af95ce03480db9355c2666e42b907a49ee700b01de12279c205f95739a562c24e52ea9fa84820fefc9b646967d993265ca3eba267998b21e76ebd8709ba9017521035600f426997a743489ad86672b35f3dadaaccf37f29bf49c9726bc9bb437d08049d079b00364c36e008faee32a03fd71377ebf1284101e1026e86544bd4b7faa27bfae358c69c4498ff39f9ad473eddbee2f64934203324023ec79f10809e8689e884ef694ee17e0a3b0ebbf427511ac714071f08c1e1f4f50a37f939a42557d494de98a3620e8b348c6400711e848cd05d8ee63a650642420c764b8267ab56acb389b3b2a1f99447e35f0743f97210d3ca4536de8a34b7385509493a0aede2c74edb0e47fb15951022f9472ffc066e256f67e7009e32475386c5ab734c83b00f4b10ee3949a62d6c33685d29c158b79fcb8682d20e5ffc691b821fa660572296cb3b0427f0718caf0cedf94e2a7af8f7816afb723f0d472378b809ab13fcefce461a7f7d4f8c0aeef0dac3f64fe6dc8b8e37b0bacbec34f85fe7864a2ce44d1997223979e746949b1c9fa3fa7d82eebd994e358d6c57a211127e0fa799a6339c404f98527e6e37bc69307a83d5210eee429389bdba43e05770fc858892fb70900c3a9aa8b81385f831fce9aca104d7f1e09c51dc03eff89e99dc94323bec96d0104ca58f60e5200c96be53b4a4b9be7da057a906d986afb5aa7d428cf3b30fbf296dd1f0b999ed360f9e5fd312b31a15f79e2c8faf58f29de98429819", &(0x7f00000003c0)=""/39, 0x2, 0x0, 0xea, 0x69, &(0x7f0000000500)="b35faca09e653a40b495de985b260c0574074d535df4e0f184f1fb2725bf20448662edf328b4b31901992e9790820f261124a6c5a2fc923d7e92c02368ec7f163a57631cfae3a0afdafec374ce93f45856218a64d864492c17c23c658afa76750ae60297aac96d0cfff7130bd5b5155f41ba4d72fbb4c9db85ebceba7cd34bfa03ce988e0b306d753de5933cec201c827aa2822ebbe00dd359be5dd93cff9f133f9426f2f35b87a0ee88bfd52dbba9925f48e8648be54abb753ecc3e518685878f7c88389eb7119ab79d66970c5b284e75ec435ced4532b3396f29fc0e7f84790eab4566169de0e8a23b", &(0x7f0000000440)="3d2ae9ee76df8c804087a87aee490419e8e2a8d8f01ea0538161d7bcffb03bcaca5a3e0b7ac465c6191ba50bec3119c27bc05184aaf8c193f516ee2e28446810c80b94cad6f78094d793df8eee49131742dc612841b819c4626275947411312c4b11f54fa7b11a50c3", 0x2, 0x0, 0x1}, 0x50) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0102000900010073797a3000000000140002006e696376663000"/46], 0x34}, 0x1, 0x40030000000000}, 0x0) r6 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x800) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r7, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xe}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xd1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1700}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xbed3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x100}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000680), r8) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00012bbd7000fedbdf25030000001400020070696d367265673100000000000000000900010500797a3073797a30000000000500040001000000140002007668315f746f5f7465616d00000005000400020000000900030073797a3200000000050004000200"/114], 0x78}, 0x1, 0x0, 0x0, 0x4000094}, 0x841) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "dd174bf3e03c117d", "0a4d13d143982179798540eaab37d86b", "21f54442", "e0ff84a478e86c9d"}, 0x28) setsockopt$inet6_tcp_int(r10, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x300}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x48}}, 0x20008090) connect$packet(r6, &(0x7f0000000140)={0x11, 0x1, r13, 0x1, 0x9, 0x6, @local}, 0x14) 419.260149ms ago: executing program 8 (id=2810): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x100000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=@newtclass={0x24, 0x28, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0xd, 0xb}, {0x7, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x54}, 0xc880) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="03540000c68a5db7139042594e37e9538919fde8bbdeed259b2a1df88cd559cef9e278a882b72dcff1dfda802b2ebe7b4b837589c09823029af64f9b648be7d56c83f7f60c5cb1620788f3e7bc034e8e7b75cfd8b0eb72bfdc0cd54c24a7523d50f8f5", @ANYRES16=r2, @ANYBLOB="00082cbd7000ffdbdf25210000000c0099000000000011000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2, &(0x7f0000000300)=@raw=[@exit, @exit], &(0x7f0000000100)='GPL\x00', 0x8, 0xf6, &(0x7f0000000180)=""/246}, 0x90) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x38, r5, 0x1, 0x70bd24, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x20048010}, 0x140000c1) 46.402069ms ago: executing program 4 (id=2811): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, 0x13, 0x1, 0x70bd28, 0x25dfdbfd, {0x2, 0xb, 0x8a, 0x80, {0x4e20, 0x4e20, [0x3, 0x2, 0x3, 0x9], [0x40, 0x1ff, 0x3, 0x4], 0x0, [0x0, 0xf1]}, 0xdb, 0x2}}, 0x4c}}, 0x20040840) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0xeffff034}, {0x16}]}, 0x10) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r7, 0x5000940b, &(0x7f0000000a00)={{r7}, "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"}) sendmsg$inet(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="ed8769cb", 0x4}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x46, 0x0, 0x100], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0xc}]}}]}, 0x98}}, 0x10) 0s ago: executing program 8 (id=2812): r0 = socket(0x1e, 0x805, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x71, "3bb23753aead39660c5640d87661ee178b1c0f7e30ec549c7a25f3e17e47f480151ac81d5100450f816de78bcc4947ef209b16a7b4ab239fa918e04476aae6b8532e473e7502d103968d2548c1810ce9913126362d87149b8507b2e356905e2a10a9c7a9c274de03549b2dd361a4a19726"}, &(0x7f00000000c0)=0x79) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x0, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0x0, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}]}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x1c, r3, 0x400, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) getpeername$inet6(r8, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1, 0x7142}, &(0x7f0000000140)=0x8) r9 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x8051}, 0x8000) connect$tipc(r0, &(0x7f0000000000)=@id, 0x10) kernel console output (not intermixed with test programs): filter on device batadv0 [ 389.946602][T13257] netlink: 'syz.6.1856': attribute type 18 has an invalid length. [ 390.013698][T13257] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.022602][T13257] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.031599][T13257] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.040317][T13257] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.329364][T13271] netlink: 'syz.6.1859': attribute type 10 has an invalid length. [ 390.439500][T13277] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 390.463339][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1860'. [ 390.625546][T13280] x_tables: duplicate underflow at hook 3 [ 390.804346][T12942] veth0_vlan: entered promiscuous mode [ 390.933182][T12942] veth1_vlan: entered promiscuous mode [ 390.967871][T13044] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 390.977190][T13299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1866'. [ 390.989000][T13301] netlink: 19 bytes leftover after parsing attributes in process `syz.6.1865'. [ 391.037619][T13044] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 391.095384][T13299] netlink: 'syz.1.1866': attribute type 2 has an invalid length. [ 391.121456][T13044] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 391.203344][T13044] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 391.318653][T12942] veth0_macvtap: entered promiscuous mode [ 391.338213][T12942] veth1_macvtap: entered promiscuous mode [ 391.387280][T12942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.457263][T12942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.472472][ T5155] Bluetooth: hci5: command tx timeout [ 391.488473][T12942] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.498633][T12942] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.508820][T12942] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.516886][T13323] netlink: 'syz.6.1870': attribute type 13 has an invalid length. [ 391.519387][T12942] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.549632][T13044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.610020][T13323] veth0_macvtap: left promiscuous mode [ 391.617448][T13323] macvtap0: entered allmulticast mode [ 391.636089][T13323] macvtap0: refused to change device tx_queue_len [ 391.666969][T13044] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.704588][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.711820][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.832242][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.839460][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.915235][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.927914][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.030066][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.075280][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.539042][T13358] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1878'. [ 392.853840][T13044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.108169][T13378] vlan1: entered promiscuous mode [ 393.129543][T13378] bond0: entered promiscuous mode [ 393.152813][T13378] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 393.167929][T13387] netlink: 'syz.7.1885': attribute type 1 has an invalid length. [ 393.177086][T13378] team0: entered promiscuous mode [ 393.183001][T13387] netlink: 'syz.7.1885': attribute type 1 has an invalid length. [ 393.197478][T13378] geneve0: entered promiscuous mode [ 393.203714][T13378] bond4: entered promiscuous mode [ 393.732731][T13400] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1890'. [ 393.761098][T13400] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1890'. [ 393.872340][T13416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1895'. [ 393.928923][T13417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1895'. [ 394.016421][T13044] veth0_vlan: entered promiscuous mode [ 394.077078][T13044] veth1_vlan: entered promiscuous mode [ 394.179051][T13427] pimreg6: entered allmulticast mode [ 394.284142][T13044] veth0_macvtap: entered promiscuous mode [ 394.344628][T13044] veth1_macvtap: entered promiscuous mode [ 394.479260][T13435] syz.6.1899: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 394.510441][T13441] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1901'. [ 394.531025][T13441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.541967][T13435] CPU: 1 UID: 0 PID: 13435 Comm: syz.6.1899 Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) [ 394.541991][T13435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 394.542010][T13435] Call Trace: [ 394.542021][T13435] [ 394.542029][T13435] dump_stack_lvl+0x189/0x250 [ 394.542067][T13435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.542096][T13435] ? __pfx__printk+0x10/0x10 [ 394.542116][T13435] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 394.542138][T13435] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 394.542160][T13435] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 394.542183][T13435] warn_alloc+0x214/0x310 [ 394.542212][T13435] ? __pfx_warn_alloc+0x10/0x10 [ 394.542243][T13435] ? __get_vm_area_node+0x28f/0x300 [ 394.542263][T13435] ? fq_pie_init+0x430/0x840 [ 394.542285][T13435] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 394.542330][T13435] ? up_write+0x1c4/0x420 [ 394.542348][T13435] ? tcf_block_get_ext+0x8d4/0x17d0 [ 394.542372][T13435] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 394.542399][T13435] ? rcu_is_watching+0x15/0xb0 [ 394.542428][T13435] ? fq_pie_init+0x430/0x840 [ 394.542443][T13435] ? fq_pie_init+0x430/0x840 [ 394.542458][T13435] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 394.542477][T13435] ? fq_pie_init+0x430/0x840 [ 394.542494][T13435] ? tcf_block_get+0x67/0xa0 [ 394.542512][T13435] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 394.542539][T13435] fq_pie_init+0x430/0x840 [ 394.542568][T13435] ? __pfx_fq_pie_init+0x10/0x10 [ 394.542585][T13435] qdisc_create+0x7a9/0xea0 [ 394.542613][T13435] tc_modify_qdisc+0x1426/0x2010 [ 394.542656][T13435] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 394.542717][T13435] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 394.542745][T13435] rtnetlink_rcv_msg+0x77c/0xb70 [ 394.542769][T13435] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 394.542787][T13435] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 394.542804][T13435] ? ref_tracker_free+0x63a/0x7d0 [ 394.542828][T13435] ? __copy_skb_header+0xa7/0x550 [ 394.542853][T13435] ? __pfx_ref_tracker_free+0x10/0x10 [ 394.542877][T13435] ? __skb_clone+0x63/0x7a0 [ 394.542909][T13435] netlink_rcv_skb+0x205/0x470 [ 394.542932][T13435] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 394.542953][T13435] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 394.542989][T13435] ? netlink_deliver_tap+0x2e/0x1b0 [ 394.543010][T13435] ? netlink_deliver_tap+0x2e/0x1b0 [ 394.543048][T13435] netlink_unicast+0x758/0x8d0 [ 394.543077][T13435] netlink_sendmsg+0x805/0xb30 [ 394.543139][T13435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.543163][T13435] ? aa_sock_msg_perm+0x94/0x160 [ 394.543204][T13435] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 394.543227][T13435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.543250][T13435] __sock_sendmsg+0x219/0x270 [ 394.543283][T13435] ____sys_sendmsg+0x505/0x830 [ 394.543313][T13435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.543346][T13435] ? import_iovec+0x74/0xa0 [ 394.543368][T13435] ___sys_sendmsg+0x21f/0x2a0 [ 394.543394][T13435] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.543457][T13435] ? __fget_files+0x2a/0x420 [ 394.543476][T13435] ? __fget_files+0x3a0/0x420 [ 394.543507][T13435] __x64_sys_sendmsg+0x19b/0x260 [ 394.543534][T13435] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 394.543574][T13435] ? rcu_is_watching+0x15/0xb0 [ 394.543607][T13435] ? do_syscall_64+0xbe/0x3b0 [ 394.543629][T13435] do_syscall_64+0xfa/0x3b0 [ 394.543644][T13435] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.543670][T13435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.543688][T13435] ? clear_bhb_loop+0x60/0xb0 [ 394.543711][T13435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.543729][T13435] RIP: 0033:0x7fe4a178e929 [ 394.543745][T13435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.543761][T13435] RSP: 002b:00007fe4a2692038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.543780][T13435] RAX: ffffffffffffffda RBX: 00007fe4a19b5fa0 RCX: 00007fe4a178e929 [ 394.543793][T13435] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000005 [ 394.543806][T13435] RBP: 00007fe4a1810b39 R08: 0000000000000000 R09: 0000000000000000 [ 394.543818][T13435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.543828][T13435] R13: 0000000000000000 R14: 00007fe4a19b5fa0 R15: 00007ffc145e0328 [ 394.543858][T13435] [ 394.543870][T13435] Mem-Info: [ 395.004223][T13435] active_anon:5157 inactive_anon:0 isolated_anon:0 [ 395.004223][T13435] active_file:1408 inactive_file:39967 isolated_file:0 [ 395.004223][T13435] unevictable:768 dirty:93 writeback:0 [ 395.004223][T13435] slab_reclaimable:11108 slab_unreclaimable:112012 [ 395.004223][T13435] mapped:43585 shmem:1384 pagetables:1173 [ 395.004223][T13435] sec_pagetables:0 bounce:0 [ 395.004223][T13435] kernel_misc_reclaimable:0 [ 395.004223][T13435] free:1293084 free_pcp:14228 free_cma:0 [ 395.071839][T13435] Node 0 active_anon:20628kB inactive_anon:0kB active_file:5632kB inactive_file:159668kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:178440kB dirty:372kB writeback:0kB shmem:4000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13244kB pagetables:4536kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 395.120953][T13435] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 395.171205][T13435] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 395.230912][T13435] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 395.236785][T13435] Node 0 DMA32 free:1256176kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20584kB inactive_anon:0kB active_file:5632kB inactive_file:157836kB unevictable:1536kB writepending:372kB present:3129332kB managed:2561020kB mlocked:0kB bounce:0kB free_pcp:36504kB local_pcp:21148kB free_cma:0kB [ 395.271465][T13435] lowmem_reserve[]: 0 0 1 1 1 [ 395.276393][T13435] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 395.311792][T13435] lowmem_reserve[]: 0 0 0 0 0 [ 395.319537][T13435] Node 1 Normal free:3900568kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20288kB local_pcp:9280kB free_cma:0kB [ 395.352848][T13435] lowmem_reserve[]: 0 0 0 0 0 [ 395.357637][T13435] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 395.370957][T13435] Node 0 DMA32: 6*4kB (UM) 55*8kB (UM) 18*16kB (UME) 128*32kB (UME) 44*64kB (M) 22*128kB (UM) 12*256kB (UME) 5*512kB (ME) 5*1024kB (UM) 3*2048kB (UME) 300*4096kB (M) = 1256176kB [ 395.389192][T13435] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 395.406407][T13435] Node 1 Normal: 206*4kB (U) 52*8kB (UME) 46*16kB (UME) 91*32kB (UME) 26*64kB (UME) 4*128kB (UME) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3900568kB [ 395.426129][T13435] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 395.435933][T13435] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 395.445538][T13435] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 395.455416][T13435] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 395.465753][T13435] 42756 total pagecache pages [ 395.470453][T13435] 0 pages in swap cache [ 395.474975][T13435] Free swap = 124996kB [ 395.479317][T13435] Total swap = 124996kB [ 395.483760][T13435] 2097051 pages RAM [ 395.487599][T13435] 0 pages HighMem/MovableOnly [ 395.492676][T13435] 424690 pages reserved [ 395.496858][T13435] 0 pages cma reserved [ 395.581519][T13457] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1903'. [ 395.600915][T13451] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1902'. [ 395.621222][T13453] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1902'. [ 395.675781][T13044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.736062][T13044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.804031][T13044] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.839466][T13462] netlink: 'syz.1.1904': attribute type 21 has an invalid length. [ 395.852711][T13044] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.877788][T13044] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.903117][T13044] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.917651][T13462] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1904'. [ 396.176001][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.217165][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.368136][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.373275][T13486] netlink: 'syz.1.1911': attribute type 4 has an invalid length. [ 396.404055][T13488] netlink: 'syz.4.1913': attribute type 1 has an invalid length. [ 396.411545][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.509704][T13484] netlink: 'syz.1.1911': attribute type 23 has an invalid length. [ 396.599153][T13488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.675302][T13498] xt_HMARK: spi-set and port-set can't be combined [ 397.019741][T13516] team0: Device gtp1 is of different type [ 397.189698][T13522] No such timeout policy "syz0" [ 397.346646][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.586451][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.698387][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.812299][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.976429][ T36] bridge_slave_1: left allmulticast mode [ 397.983630][ T36] bridge_slave_1: left promiscuous mode [ 397.989449][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.998976][ T36] bridge_slave_0: left allmulticast mode [ 398.005139][ T36] bridge_slave_0: left promiscuous mode [ 398.011543][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.354025][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.366493][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.376985][ T36] bond0 (unregistering): Released all slaves [ 398.507844][T13535] __nla_validate_parse: 3 callbacks suppressed [ 398.507861][T13535] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1927'. [ 398.573406][T13536] netlink: 'syz.7.1925': attribute type 10 has an invalid length. [ 398.585671][T13541] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1924'. [ 398.629475][T13536] batman_adv: batadv0: Adding interface: team0 [ 398.663683][T13536] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 398.752393][T13536] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 398.953600][T13552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1930'. [ 399.030363][T13552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1930'. [ 399.068689][T13554] batadv1: entered allmulticast mode [ 399.164317][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 399.182272][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 399.193327][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 399.203695][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 399.222439][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 399.228261][T13562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1933'. [ 399.623962][T13558] lo speed is unknown, defaulting to 1000 [ 399.770116][T13579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1938'. [ 399.942356][T13579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1938'. [ 400.081855][T13594] netlink: 'syz.7.1942': attribute type 29 has an invalid length. [ 400.089755][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1942'. [ 400.114089][T13594] netlink: 'syz.7.1942': attribute type 29 has an invalid length. [ 400.140950][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1942'. [ 400.424941][T13605] IPv4: Oversized IP packet from 127.202.26.0 [ 400.739091][T13627] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1950'. [ 400.793079][T13621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.950623][T13634] netlink: 'syz.7.1952': attribute type 2 has an invalid length. [ 400.993812][ T5894] lo speed is unknown, defaulting to 1000 [ 401.272187][ T36] hsr_slave_0: left promiscuous mode [ 401.286261][ T36] hsr_slave_1: left promiscuous mode [ 401.308247][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.321290][ T5155] Bluetooth: hci5: command tx timeout [ 401.338022][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.348929][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.367591][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.473333][ T36] veth1_macvtap: left promiscuous mode [ 401.479020][ T36] veth0_macvtap: left promiscuous mode [ 401.518012][ T36] veth1_vlan: left promiscuous mode [ 401.547803][ T36] veth0_vlan: left promiscuous mode [ 401.625790][T13663] netlink: 'syz.1.1960': attribute type 1 has an invalid length. [ 401.656227][T13663] netlink: 'syz.1.1960': attribute type 1 has an invalid length. [ 402.223127][T13687] netlink: 'syz.1.1967': attribute type 10 has an invalid length. [ 402.620186][ T36] team0 (unregistering): Port device team_slave_1 removed [ 402.677244][ T36] team0 (unregistering): Port device team_slave_0 removed [ 403.260412][T13699] xt_nfacct: accounting object `syz1' does not exists [ 403.285169][T13687] bond0: left allmulticast mode [ 403.290110][T13687] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 403.317340][T13687] team0: left allmulticast mode [ 403.330221][T13687] geneve0: left allmulticast mode [ 403.357260][T13687] bond4: left allmulticast mode [ 403.394696][ T5155] Bluetooth: hci5: command tx timeout [ 403.402540][T13687] team0: Device bond0 is already an upper device of the team interface [ 403.465135][T13690] ip6tnl2: entered promiscuous mode [ 403.475581][T13690] ip6tnl2: entered allmulticast mode [ 404.024535][T13558] chnl_net:caif_netlink_parms(): no params data found [ 404.251994][T13734] __nla_validate_parse: 4 callbacks suppressed [ 404.252013][T13734] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1976'. [ 404.324949][T13737] netlink: 'syz.7.1977': attribute type 7 has an invalid length. [ 404.374767][T13735] lo speed is unknown, defaulting to 1000 [ 404.539851][T13558] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.559460][T13558] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.573022][T13558] bridge_slave_0: entered allmulticast mode [ 404.600464][T13558] bridge_slave_0: entered promiscuous mode [ 404.614690][T13558] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.649764][T13558] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.667998][T13558] bridge_slave_1: entered allmulticast mode [ 404.683309][T13558] bridge_slave_1: entered promiscuous mode [ 404.714584][T13755] netlink: 'syz.6.1980': attribute type 10 has an invalid length. [ 404.727641][T13754] netlink: 'syz.6.1980': attribute type 10 has an invalid length. [ 404.776505][T13753] ip6tnl1: entered promiscuous mode [ 404.785490][T13753] ip6tnl1: entered allmulticast mode [ 404.820154][T13754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.837869][T13754] team0: Port device bond0 added [ 404.864602][T13558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.879362][T13558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.979832][T13758] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1981'. [ 405.085782][T13558] team0: Port device team_slave_0 added [ 405.107683][T13558] team0: Port device team_slave_1 added [ 405.125540][T13763] netlink: 'syz.6.1981': attribute type 24 has an invalid length. [ 405.265769][T13764] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1982'. [ 405.326553][T13558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.345852][T13558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.441647][T13558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.469572][T13558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.478634][ T5155] Bluetooth: hci5: command tx timeout [ 405.494219][T13774] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1984'. [ 405.498022][T13558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.533671][T13558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.079012][T13558] hsr_slave_0: entered promiscuous mode [ 406.093097][T13558] hsr_slave_1: entered promiscuous mode [ 406.503950][T13800] dvmrp0: entered allmulticast mode [ 406.709407][T13811] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1990'. [ 406.798905][T13812] tipc: Enabling of bearer rejected, failed to enable media [ 407.041787][T13822] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 407.197862][T13832] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1995'. [ 407.287884][T13832] SET target dimension over the limit! [ 407.551539][ T5155] Bluetooth: hci5: command tx timeout [ 407.737269][T13851] tipc: Enabling of bearer rejected, failed to enable media [ 407.984809][T13558] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 408.029231][T13558] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 408.060229][T13558] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 408.087929][T13867] lo: entered allmulticast mode [ 408.097772][T13558] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 408.110441][T13867] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2001'. [ 408.256675][T13875] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2003'. [ 408.359836][T13558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.387408][T13558] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.414398][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.421603][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.489531][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.496748][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.545172][T13882] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 409.130166][T13904] netlink: 'syz.4.2011': attribute type 2 has an invalid length. [ 409.344773][T13558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.390093][T13911] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2015'. [ 409.418438][T13911] netlink: 'syz.7.2015': attribute type 11 has an invalid length. [ 409.434706][T13911] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2015'. [ 409.748311][T13925] lo speed is unknown, defaulting to 1000 [ 409.887901][T13933] GUP no longer grows the stack in syz.4.2021 (13933): 200000003000-200000005000 (200000001000) [ 409.923770][T13933] CPU: 1 UID: 0 PID: 13933 Comm: syz.4.2021 Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) [ 409.923799][T13933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 409.923812][T13933] Call Trace: [ 409.923819][T13933] [ 409.923828][T13933] dump_stack_lvl+0x189/0x250 [ 409.923866][T13933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.923897][T13933] ? __pfx__printk+0x10/0x10 [ 409.923914][T13933] ? find_vma+0xe7/0x160 [ 409.923947][T13933] __get_user_pages+0x2a60/0x30b0 [ 409.924012][T13933] ? __pfx___get_user_pages+0x10/0x10 [ 409.924040][T13933] ? __gup_longterm_locked+0xbf7/0x15b0 [ 409.924067][T13933] ? down_read_killable+0x1d1/0x350 [ 409.924087][T13933] ? try_get_folio+0x633/0x660 [ 409.924108][T13933] __gup_longterm_locked+0xd66/0x15b0 [ 409.924143][T13933] ? try_grab_folio_fast+0x1be/0x4f0 [ 409.924172][T13933] ? gup_fast_fallback+0x1afc/0x2260 [ 409.924204][T13933] gup_fast_fallback+0x1cd4/0x2260 [ 409.924290][T13933] ? __pfx_gup_fast_fallback+0x10/0x10 [ 409.924328][T13933] ? __pfx_get_page_from_freelist+0x10/0x10 [ 409.924354][T13933] ? is_valid_gup_args+0x11f/0x200 [ 409.924494][T13933] ? get_user_pages_fast+0x4d/0xb0 [ 409.924541][T13933] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 409.924567][T13933] ? vfs_writev+0x31a/0x960 [ 409.924594][T13933] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 409.924626][T13933] iov_iter_get_pages2+0x5e/0xa0 [ 409.924652][T13933] sk_msg_zerocopy_from_iter+0x1f6/0x830 [ 409.924696][T13933] ? __pfx_sk_msg_zerocopy_from_iter+0x10/0x10 [ 409.924764][T13933] tls_sw_sendmsg+0x989/0x23d0 [ 409.924824][T13933] ? __schedule+0x1713/0x4d00 [ 409.924864][T13933] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 409.924899][T13933] ? __pfx_aa_sk_perm+0x10/0x10 [ 409.924922][T13933] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 409.924950][T13933] ? sock_rps_record_flow+0x19/0x410 [ 409.924974][T13933] ? inet_getname+0x527/0x530 [ 409.924997][T13933] ? inet6_sendmsg+0x101/0x120 [ 409.925021][T13933] __sock_sendmsg+0xe5/0x270 [ 409.925057][T13933] sock_write_iter+0x258/0x330 [ 409.925090][T13933] ? __pfx_sock_write_iter+0x10/0x10 [ 409.925132][T13933] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 409.925163][T13933] ? __pfx_aa_file_perm+0x10/0x10 [ 409.925200][T13933] do_iter_readv_writev+0x56e/0x7f0 [ 409.925226][T13933] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 409.925252][T13933] ? bpf_lsm_file_permission+0x9/0x20 [ 409.925280][T13933] ? security_file_permission+0x75/0x290 [ 409.925304][T13933] ? rw_verify_area+0x258/0x650 [ 409.925340][T13933] vfs_writev+0x31a/0x960 [ 409.925369][T13933] ? __lock_acquire+0xab9/0xd20 [ 409.925422][T13933] ? __pfx_vfs_writev+0x10/0x10 [ 409.925462][T13933] ? __fget_files+0x2a/0x420 [ 409.925489][T13933] ? __fget_files+0x3a0/0x420 [ 409.925508][T13933] ? __fget_files+0x2a/0x420 [ 409.925539][T13933] do_writev+0x14d/0x2d0 [ 409.925565][T13933] ? __pfx_do_writev+0x10/0x10 [ 409.925585][T13933] ? rcu_is_watching+0x15/0xb0 [ 409.925620][T13933] ? do_syscall_64+0xbe/0x3b0 [ 409.925643][T13933] do_syscall_64+0xfa/0x3b0 [ 409.925659][T13933] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.925688][T13933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.925706][T13933] ? clear_bhb_loop+0x60/0xb0 [ 409.925730][T13933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.925749][T13933] RIP: 0033:0x7f02e158e929 [ 409.925766][T13933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.925783][T13933] RSP: 002b:00007f02e23e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 409.925804][T13933] RAX: ffffffffffffffda RBX: 00007f02e17b5fa0 RCX: 00007f02e158e929 [ 409.925818][T13933] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 409.925830][T13933] RBP: 00007f02e1610b39 R08: 0000000000000000 R09: 0000000000000000 [ 409.925842][T13933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.925853][T13933] R13: 0000000000000000 R14: 00007f02e17b5fa0 R15: 00007ffc9a030588 [ 409.925885][T13933] [ 410.431926][T13558] veth0_vlan: entered promiscuous mode [ 410.515624][T13558] veth1_vlan: entered promiscuous mode [ 410.578416][T13941] sit0: left promiscuous mode [ 410.616257][T13930] netlink: 'syz.7.2018': attribute type 2 has an invalid length. [ 410.683656][T13941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.712854][T13941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 410.846879][T13558] veth0_macvtap: entered promiscuous mode [ 410.887962][T13558] veth1_macvtap: entered promiscuous mode [ 410.951297][T13938] lo speed is unknown, defaulting to 1000 [ 410.988082][T13558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.048215][T13558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.136861][T13558] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.204374][T13558] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.245304][T13558] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.260892][T13558] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.278575][T13958] netlink: 'syz.4.2028': attribute type 7 has an invalid length. [ 411.315925][T13958] : entered promiscuous mode [ 412.007643][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.019157][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.139417][ T6226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.168993][ T6226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.928117][ T6227] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.139588][ T6227] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.217030][ T6227] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.288108][ T6227] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.425921][ T6227] bridge_slave_1: left allmulticast mode [ 413.436715][ T6227] bridge_slave_1: left promiscuous mode [ 413.444603][ T6227] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.458057][ T6227] bridge_slave_0: left allmulticast mode [ 413.464227][ T6227] bridge_slave_0: left promiscuous mode [ 413.469952][ T6227] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.798746][ T6227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.811703][ T6227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.823031][ T6227] bond0 (unregistering): Released all slaves [ 414.224900][T14006] netlink: 388 bytes leftover after parsing attributes in process `syz.7.2044'. [ 414.473650][ T6227] hsr_slave_0: left promiscuous mode [ 414.517304][T14008] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20003 [ 414.529000][ T6227] hsr_slave_1: left promiscuous mode [ 414.544517][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.559840][ T6227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.588870][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.607006][ T6227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.697711][ T6227] veth1_macvtap: left promiscuous mode [ 414.712097][ T6227] veth0_macvtap: left promiscuous mode [ 414.718084][ T6227] veth1_vlan: left promiscuous mode [ 414.736566][ T6227] veth0_vlan: left promiscuous mode [ 414.743281][T14026] x_tables: duplicate underflow at hook 1 [ 414.938088][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 414.955868][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 414.972400][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 414.996462][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 415.006278][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 415.384025][ T6227] team0 (unregistering): Port device team_slave_1 removed [ 415.427617][ T6227] team0 (unregistering): Port device team_slave_0 removed [ 416.001436][T14028] lo speed is unknown, defaulting to 1000 [ 416.061533][T14034] openvswitch: netlink: Flow actions attr not present in new flow. [ 416.076575][T14037] netlink: 'syz.1.2054': attribute type 10 has an invalid length. [ 416.094753][T14037] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2054'. [ 416.172633][T14034] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2052'. [ 416.352525][T14046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2057'. [ 416.925312][T14051] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2059'. [ 416.968708][T14054] netlink: 'syz.1.2060': attribute type 1 has an invalid length. [ 417.064562][T14054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2060'. [ 417.082156][ T51] Bluetooth: hci5: command tx timeout [ 417.245664][T14069] netlink: 'syz.7.2062': attribute type 27 has an invalid length. [ 417.310085][T14069] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.2062'. [ 417.388491][T14028] chnl_net:caif_netlink_parms(): no params data found [ 417.898567][T14099] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 417.936736][T14099] macsec1: entered allmulticast mode [ 417.952371][T14099] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode [ 417.984870][T14099] mac80211_hwsim hwsim41 wlan0: left allmulticast mode [ 418.008035][T14099] mac80211_hwsim hwsim41 wlan0: left promiscuous mode [ 418.145027][T14028] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.158550][T14028] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.178679][T14028] bridge_slave_0: entered allmulticast mode [ 418.203954][T14113] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2075'. [ 418.217211][T14028] bridge_slave_0: entered promiscuous mode [ 418.249705][T14028] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.282607][T14028] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.290285][T14028] bridge_slave_1: entered allmulticast mode [ 418.309720][T14028] bridge_slave_1: entered promiscuous mode [ 418.478505][T14121] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.487865][T14121] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.497378][T14121] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.508005][T14121] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.623643][T14028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.644776][T14028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.794735][T14028] team0: Port device team_slave_0 added [ 418.803514][T14135] syz.7.2084 uses old SIOCAX25GETINFO [ 418.814676][T14133] team0: Cannot enslave team device to itself [ 418.837799][T14028] team0: Port device team_slave_1 added [ 418.842916][T14136] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2083'. [ 418.932497][T14028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.949698][T14028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.985348][T14028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.023070][T14028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.030068][T14028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.087322][T14028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.152095][ T51] Bluetooth: hci5: command tx timeout [ 419.298499][T14148] vxcan1: tx address claim with dlc 0 [ 419.307117][T14149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2089'. [ 419.310364][T14150] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2088'. [ 419.338647][T14028] hsr_slave_0: entered promiscuous mode [ 419.346107][T14028] hsr_slave_1: entered promiscuous mode [ 420.273705][T14182] netlink: 'syz.6.2098': attribute type 3 has an invalid length. [ 421.231741][ T51] Bluetooth: hci5: command tx timeout [ 422.028167][T14193] veth0: entered promiscuous mode [ 422.036873][T14196] veth0: left promiscuous mode [ 422.218815][T14205] __nla_validate_parse: 2 callbacks suppressed [ 422.218837][T14205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2104'. [ 422.287891][T14211] netlink: 'syz.6.2107': attribute type 29 has an invalid length. [ 422.303785][T14211] netlink: 'syz.6.2107': attribute type 29 has an invalid length. [ 422.321100][T14028] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 422.464349][T14217] netlink: 'syz.4.2109': attribute type 11 has an invalid length. [ 422.919316][T14211] netlink: 'syz.6.2107': attribute type 29 has an invalid length. [ 422.946451][T14028] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 423.105560][T14028] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 423.119666][T14224] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20003 [ 423.178471][T14028] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 423.179456][T14225] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20003 [ 423.311088][ T51] Bluetooth: hci5: command tx timeout [ 423.373862][T14236] netlink: 'syz.1.2115': attribute type 29 has an invalid length. [ 423.403397][T14236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2115'. [ 423.413105][T14246] netlink: 'syz.1.2115': attribute type 29 has an invalid length. [ 423.421176][T14246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2115'. [ 423.448374][T14236] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 423.739777][T14028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.837920][T14261] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2122'. [ 423.859338][T14028] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.898115][ T6226] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.905380][ T6226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.966331][ T6227] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.973605][ T6227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.083834][T14268] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2123'. [ 424.473984][T14293] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2127'. [ 424.982311][T14028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.358280][T14332] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2139'. [ 425.396135][T14333] bridge: RTM_NEWNEIGH with invalid ether address [ 425.595654][T14339] bridge0: port 3(gretap0) entered blocking state [ 425.614500][T14339] bridge0: port 3(gretap0) entered disabled state [ 425.636705][T14339] gretap0: entered allmulticast mode [ 425.677587][T14339] gretap0: left allmulticast mode [ 425.917724][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2146'. [ 425.945590][T14362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2146'. [ 426.103989][T14028] veth0_vlan: entered promiscuous mode [ 426.136605][T14367] netlink: 'syz.6.2147': attribute type 1 has an invalid length. [ 426.159439][T14028] veth1_vlan: entered promiscuous mode [ 426.208773][T14367] 8021q: adding VLAN 0 to HW filter on device bond3 [ 426.230602][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2148'. [ 426.277849][T14367] bond3: (slave veth3): Enslaving as an active interface with a down link [ 426.310849][T14373] vlan2: entered allmulticast mode [ 426.316342][T14373] veth1: entered allmulticast mode [ 426.328442][T14373] veth1: entered promiscuous mode [ 426.335410][T14373] veth1: left promiscuous mode [ 426.343286][T14373] bond3: (slave vlan2): making interface the new active one [ 426.354489][T14373] veth1: entered promiscuous mode [ 426.360353][T14373] vlan2: entered promiscuous mode [ 426.366992][T14373] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 426.428804][T14028] veth0_macvtap: entered promiscuous mode [ 426.478742][T14028] veth1_macvtap: entered promiscuous mode [ 426.532263][T14028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.570640][T14028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.610402][T14028] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.627194][T14028] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.636643][T14028] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.639045][T14377] nft_compat: unsupported protocol 0 [ 426.659442][T14028] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.946532][T14390] Unknown options in mask 1f4 [ 426.949746][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.975312][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.133014][T13653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.155960][T13653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.261581][ T5827] IPVS: starting estimator thread 0... [ 427.378756][T14403] netlink: 'syz.7.2158': attribute type 1 has an invalid length. [ 427.408640][T14404] IPVS: using max 28 ests per chain, 67200 per kthread [ 427.579344][T14414] __nla_validate_parse: 2 callbacks suppressed [ 427.579363][T14414] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.2163'. [ 427.611638][T14414] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 427.672951][T13653] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.901826][T13653] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.001678][T13653] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.089215][T13653] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.316023][T13653] bridge_slave_1: left allmulticast mode [ 428.323746][T13653] bridge_slave_1: left promiscuous mode [ 428.329498][T13653] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.339954][T13653] bridge_slave_0: left allmulticast mode [ 428.346403][T13653] bridge_slave_0: left promiscuous mode [ 428.352908][T13653] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.716375][T13653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.731271][T13653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.742770][T13653] bond0 (unregistering): Released all slaves [ 429.142405][T13653] hsr_slave_0: left promiscuous mode [ 429.174916][T13653] hsr_slave_1: left promiscuous mode [ 429.185129][T13653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.201663][T13653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.225960][T13653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.242524][T14432] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2166'. [ 429.250403][T13653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.319062][T13653] veth1_macvtap: left promiscuous mode [ 429.325755][T13653] veth0_macvtap: left promiscuous mode [ 429.338695][T13653] veth1_vlan: left promiscuous mode [ 429.348985][T13653] veth0_vlan: left promiscuous mode [ 429.796385][ T5155] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 429.805957][ T5155] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 429.814887][ T5155] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 429.823952][ T5155] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 429.833048][ T5155] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 430.137981][T13653] team0 (unregistering): Port device team_slave_1 removed [ 430.180034][T13653] team0 (unregistering): Port device team_slave_0 removed [ 430.601542][T14432] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 430.717638][T14435] lo speed is unknown, defaulting to 1000 [ 430.782593][T14443] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2171'. [ 431.059972][T14453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2173'. [ 431.070310][T14454] sock: sock_set_timeout: `syz.7.2174' (pid 14454) tries to set negative timeout [ 431.650141][T14436] lo speed is unknown, defaulting to 1000 [ 431.871583][ T5155] Bluetooth: hci5: command tx timeout [ 432.496221][T14438] lo speed is unknown, defaulting to 1000 [ 432.811042][T14511] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2189'. [ 433.952455][ T5155] Bluetooth: hci5: command tx timeout [ 435.506592][T14553] netlink: 51 bytes leftover after parsing attributes in process `syz.6.2202'. [ 435.518732][T14553] netlink: 348 bytes leftover after parsing attributes in process `syz.6.2202'. [ 435.658034][T14438] chnl_net:caif_netlink_parms(): no params data found [ 435.817253][T14564] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2206'. [ 436.006894][T14568] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.031827][ T5155] Bluetooth: hci5: command tx timeout [ 436.033588][T14568] batman_adv: batadv0: Interface activated: team0 [ 436.063507][T14568] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 436.082028][T14572] 8021q: VLANs not supported on ip6_vti0 [ 436.157880][T14582] netlink: 146840 bytes leftover after parsing attributes in process `syz.1.2210'. [ 436.177457][T14438] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.185557][T14438] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.194674][T14438] bridge_slave_0: entered allmulticast mode [ 436.203908][T14438] bridge_slave_0: entered promiscuous mode [ 436.213470][T14438] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.221369][T14438] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.228787][T14438] bridge_slave_1: entered allmulticast mode [ 436.237330][T14438] bridge_slave_1: entered promiscuous mode [ 436.372471][T14438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.405018][T14438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.614097][T14438] team0: Port device team_slave_0 added [ 436.657776][T10937] IPVS: starting estimator thread 0... [ 436.686560][T14438] team0: Port device team_slave_1 added [ 436.761387][T14596] IPVS: using max 27 ests per chain, 64800 per kthread [ 436.866875][T14599] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2217'. [ 436.910626][T14438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.941395][T14438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.989972][T14438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.007072][T14438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.014849][T14438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.048175][T14438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.081374][T14612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2220'. [ 437.240526][T14438] hsr_slave_0: entered promiscuous mode [ 437.247793][T14438] hsr_slave_1: entered promiscuous mode [ 437.365472][T14617] lo speed is unknown, defaulting to 1000 [ 437.782379][T14626] tipc: Started in network mode [ 437.787403][T14626] tipc: Node identity 3ab61ddb9e71, cluster identity 4711 [ 437.795680][T14626] tipc: Enabled bearer , priority 0 [ 437.822677][T14626] syzkaller0: entered promiscuous mode [ 437.828400][T14626] syzkaller0: entered allmulticast mode [ 437.837764][T14626] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2224'. [ 437.881670][T14625] tipc: Resetting bearer [ 437.962477][T14625] tipc: Disabling bearer [ 438.118224][ T5155] Bluetooth: hci5: command tx timeout [ 438.300001][T14640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2227'. [ 438.337250][T14643] netlink: 572 bytes leftover after parsing attributes in process `syz.6.2228'. [ 438.370122][T14642] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2229'. [ 438.398240][T14644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2229'. [ 438.642050][ T8369] vlan2: left promiscuous mode [ 438.880410][T14658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2233'. [ 438.933506][T14438] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 438.982326][T14659] xt_CT: No such helper "snmp" [ 439.009468][T14438] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 439.038868][T14438] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 439.074432][T14438] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 439.173159][T14670] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2237'. [ 439.234057][T14671] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2237'. [ 439.249207][T14680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2235'. [ 439.304340][T14681] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input9 [ 439.588144][T14684] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 439.636663][T14438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.722375][T14438] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.763261][ T8369] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.770515][ T8369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.805402][ T8369] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.812656][ T8369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.887416][T14438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 439.963017][T14704] netlink: 'syz.6.2243': attribute type 1 has an invalid length. [ 439.980039][T14704] netlink: 'syz.6.2243': attribute type 1 has an invalid length. [ 440.156811][T14704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.210765][ T5155] Bluetooth: hci5: command tx timeout [ 440.316782][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2249'. [ 440.540585][T14438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.815388][T14743] netlink: 'syz.6.2254': attribute type 11 has an invalid length. [ 440.840420][T14743] netlink: 'syz.6.2254': attribute type 11 has an invalid length. [ 440.996895][T14748] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 441.712460][T14438] veth0_vlan: entered promiscuous mode [ 441.754395][T14438] veth1_vlan: entered promiscuous mode [ 441.934891][T14438] veth0_macvtap: entered promiscuous mode [ 441.983677][T14438] veth1_macvtap: entered promiscuous mode [ 442.063379][T14438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.137462][T14438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.283238][T14438] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.305474][T14438] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.321883][T14438] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.330638][T14438] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.560569][T13652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.593469][T13652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.655582][T14821] netem: incorrect ge model size [ 442.662000][T14821] netem: change failed [ 442.699829][T13652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.709321][T13652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.867772][T14827] __nla_validate_parse: 9 callbacks suppressed [ 442.867790][T14827] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2280'. [ 442.905822][T14829] xt_CT: You must specify a L4 protocol and not use inversions on it [ 442.939220][T14833] xt_CONNSECMARK: invalid mode: 0 [ 443.065570][T14836] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 443.284001][T13653] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.302395][T14845] netlink: 'syz.6.2285': attribute type 13 has an invalid length. [ 443.337108][T14845] netlink: 'syz.6.2285': attribute type 58 has an invalid length. [ 443.348708][T14845] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2285'. [ 443.436924][T13653] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.606989][T13653] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.808923][T13653] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.159659][T13653] bridge_slave_1: left allmulticast mode [ 444.166767][T13653] bridge_slave_1: left promiscuous mode [ 444.173114][T13653] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.183463][T13653] bridge_slave_0: left allmulticast mode [ 444.189119][T13653] bridge_slave_0: left promiscuous mode [ 444.196478][T13653] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.529628][T13653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.541184][T13653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.551722][T13653] bond0 (unregistering): Released all slaves [ 444.876515][T14850] pim6reg1: entered promiscuous mode [ 444.900495][T14850] pim6reg1: entered allmulticast mode [ 444.934384][T14856] tipc: Enabling of bearer rejected, failed to enable media [ 444.984394][T14860] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2288'. [ 445.005923][T14860] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2288'. [ 445.148530][T14863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2292'. [ 445.200540][T14863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2292'. [ 445.229725][T14866] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2293'. [ 445.251107][T14864] sctp: [Deprecated]: syz.1.2291 (pid 14864) Use of int in max_burst socket option deprecated. [ 445.251107][T14864] Use struct sctp_assoc_value instead [ 445.290148][T13653] hsr_slave_0: left promiscuous mode [ 445.312914][T13653] hsr_slave_1: left promiscuous mode [ 445.325734][T13653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.359355][T13653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.381887][T13653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.394975][T13653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.454617][T13653] veth1_macvtap: left promiscuous mode [ 445.464017][T13653] veth0_macvtap: left promiscuous mode [ 445.470948][T13653] veth1_vlan: left promiscuous mode [ 445.476671][T13653] veth0_vlan: left promiscuous mode [ 445.567351][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 445.582730][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 445.591483][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 445.600466][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 445.608955][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 445.995620][T13653] team0 (unregistering): Port device team_slave_1 removed [ 446.042142][T13653] team0 (unregistering): Port device team_slave_0 removed [ 446.459472][T14871] netlink: 'syz.6.2294': attribute type 4 has an invalid length. [ 446.661588][T14874] lo speed is unknown, defaulting to 1000 [ 447.092087][T14900] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2303'. [ 447.222013][T14904] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2304'. [ 447.277543][T14904] xt_TPROXY: Can be used only with -p tcp or -p udp [ 447.367989][T14910] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2307'. [ 447.451052][T14911] netlink: 'syz.7.2307': attribute type 1 has an invalid length. [ 447.586813][T14911] bond1: entered promiscuous mode [ 447.594986][T14911] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.693014][T14910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.705317][T14910] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 447.723900][ T51] Bluetooth: hci5: command tx timeout [ 447.740384][T14910] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 448.089374][T14910] bond1: (slave wireguard0): making interface the new active one [ 448.097898][T14910] wireguard0: entered promiscuous mode [ 448.125767][T14910] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 448.376183][T14944] netlink: 'syz.1.2315': attribute type 1 has an invalid length. [ 448.578877][T14953] __nla_validate_parse: 1 callbacks suppressed [ 448.578898][T14953] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2317'. [ 448.608052][T14957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2315'. [ 448.626721][T14944] 8021q: adding VLAN 0 to HW filter on device bond8 [ 448.639050][T14944] bond7: (slave bond8): making interface the new active one [ 448.651244][T14944] bond7: (slave bond8): Enslaving as an active interface with an up link [ 448.754946][T14954] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 448.811607][T14957] 8021q: adding VLAN 0 to HW filter on device bond7 [ 448.819861][T14874] chnl_net:caif_netlink_parms(): no params data found [ 449.345624][T14874] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.368652][T14874] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.386825][T14874] bridge_slave_0: entered allmulticast mode [ 449.424138][T14874] bridge_slave_0: entered promiscuous mode [ 449.441961][T14874] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.454969][T14874] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.472054][T15002] netlink: 27 bytes leftover after parsing attributes in process `syz.6.2330'. [ 449.486316][T14874] bridge_slave_1: entered allmulticast mode [ 449.496975][T14874] bridge_slave_1: entered promiscuous mode [ 449.597947][T14874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.634687][T14874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.794941][ T51] Bluetooth: hci5: command tx timeout [ 449.823867][T15014] netlink: 'syz.4.2333': attribute type 20 has an invalid length. [ 449.916234][T14874] team0: Port device team_slave_0 added [ 449.933951][T14874] team0: Port device team_slave_1 added [ 450.094354][T14874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.126472][T14874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.210932][T14874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.226840][T15032] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2334'. [ 450.266488][T14874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.303234][T15032] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2334'. [ 450.321098][T14874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.366181][T14874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.499601][T15052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2343'. [ 450.509434][T15052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2343'. [ 450.527124][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2341'. [ 450.556393][T15049] vlan2: entered allmulticast mode [ 450.564915][T15049] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode [ 450.581384][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2341'. [ 450.598106][T14874] hsr_slave_0: entered promiscuous mode [ 450.617163][T14874] hsr_slave_1: entered promiscuous mode [ 450.727601][T15057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.769867][T15060] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.2346'. [ 450.985661][T15068] netlink: 'syz.6.2347': attribute type 10 has an invalid length. [ 451.082931][T15072] netlink: 'syz.4.2348': attribute type 7 has an invalid length. [ 451.870904][ T51] Bluetooth: hci5: command tx timeout [ 451.961170][T14285] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 452.000992][T10933] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 452.009061][T14285] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 452.196819][T15116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.294679][T14874] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 452.642117][T10933] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 452.756958][T10933] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 453.833953][T14874] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 453.877081][T14874] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 453.935356][T14874] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 453.959698][ T51] Bluetooth: hci5: command tx timeout [ 454.395439][T15155] netlink: 'syz.7.2372': attribute type 1 has an invalid length. [ 454.432692][T15155] __nla_validate_parse: 8 callbacks suppressed [ 454.432710][T15155] netlink: 244 bytes leftover after parsing attributes in process `syz.7.2372'. [ 454.510113][T14874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.631498][T14874] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.711969][T13652] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.719205][T13652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.755393][T13652] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.762620][T13652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.913578][T15181] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2377'. [ 454.936145][T15180] netlink: 'syz.4.2379': attribute type 32 has an invalid length. [ 454.959972][T15180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2379'. [ 454.969460][T15183] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2380'. [ 454.993857][T15183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.994667][T14874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 455.048044][T15180] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 455.287373][T15194] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2383'. [ 455.296460][T15195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2384'. [ 455.316308][T15195] macvlan3: entered promiscuous mode [ 455.342827][T15195] macvlan3: entered allmulticast mode [ 455.354054][T15195] batadv0: entered promiscuous mode [ 455.376474][T15195] batadv0: entered allmulticast mode [ 455.411822][T15195] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 455.434894][T15195] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 455.504901][T15201] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2386'. [ 455.746897][T15213] netlink: 'syz.4.2390': attribute type 21 has an invalid length. [ 455.758912][T15213] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2390'. [ 455.822922][T14874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.030980][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 456.085447][T15226] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2393'. [ 456.215287][T15232] netlink: 'syz.4.2395': attribute type 11 has an invalid length. [ 456.272434][T15232] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2395'. [ 456.369447][T15237] netlink: 'syz.6.2397': attribute type 39 has an invalid length. [ 456.949322][T15260] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 457.006151][T14874] veth0_vlan: entered promiscuous mode [ 457.097896][T14874] veth1_vlan: entered promiscuous mode [ 457.208411][T14874] veth0_macvtap: entered promiscuous mode [ 457.238712][T14874] veth1_macvtap: entered promiscuous mode [ 457.343437][T14874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.368166][T14874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.387412][T14874] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.402951][T14874] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.412615][T14874] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.422359][T14874] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.497729][T15278] netlink: 'syz.1.2409': attribute type 10 has an invalid length. [ 457.577674][T15278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.585712][T15278] team0: Device batadv0 failed to register rx_handler [ 457.650039][ T6227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.681574][ T6227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.717600][T14285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.732018][T14285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.124821][T14285] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.363403][T14285] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.452956][T14285] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.539526][T14285] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.736000][T14285] bridge_slave_1: left allmulticast mode [ 458.743830][T14285] bridge_slave_1: left promiscuous mode [ 458.749563][T14285] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.759802][T14285] bridge_slave_0: left allmulticast mode [ 458.765915][T14285] bridge_slave_0: left promiscuous mode [ 458.772700][T14285] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.137855][T14285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.158641][T14285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.173553][T14285] bond0 (unregistering): Released all slaves [ 459.556595][T14285] hsr_slave_0: left promiscuous mode [ 459.563920][T14285] hsr_slave_1: left promiscuous mode [ 459.569973][T14285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.578674][T14285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.587008][T14285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.595362][T14285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.617929][T14285] veth1_macvtap: left promiscuous mode [ 459.624145][T14285] veth0_macvtap: left promiscuous mode [ 459.632157][T14285] veth1_vlan: left promiscuous mode [ 459.637488][T14285] veth0_vlan: left promiscuous mode [ 459.797305][T15307] __nla_validate_parse: 10 callbacks suppressed [ 459.797325][T15307] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2422'. [ 460.130459][ T5155] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 460.150234][ T5155] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 460.163063][ T5155] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 460.173225][ T5155] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 460.186421][ T5155] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 460.365717][T14285] team0 (unregistering): Port device team_slave_1 removed [ 460.405832][T14285] team0 (unregistering): Port device team_slave_0 removed [ 460.822294][T15307] gretap0: entered promiscuous mode [ 460.847879][T15311] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2420'. [ 461.008443][T15321] lo speed is unknown, defaulting to 1000 [ 461.139076][T15329] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2426'. [ 461.163141][T15329] hsr_slave_0: left promiscuous mode [ 461.178287][T15333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2427'. [ 461.189304][T15329] hsr_slave_1: left promiscuous mode [ 461.631642][T15347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2431'. [ 462.037891][T15362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2436'. [ 462.243333][T15376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2439'. [ 462.271531][ T5155] Bluetooth: hci5: command tx timeout [ 462.450620][T15382] netlink: 'syz.6.2440': attribute type 14 has an invalid length. [ 462.651815][T15321] chnl_net:caif_netlink_parms(): no params data found [ 462.712951][T15391] dvmrp1: entered allmulticast mode [ 462.858440][T15402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2446'. [ 462.963519][T15321] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.971807][T15321] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.979101][T15321] bridge_slave_0: entered allmulticast mode [ 462.987891][T15321] bridge_slave_0: entered promiscuous mode [ 462.998856][T15321] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.008422][T15321] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.016097][T15321] bridge_slave_1: entered allmulticast mode [ 463.024308][T15321] bridge_slave_1: entered promiscuous mode [ 463.078648][T15414] sctp: [Deprecated]: syz.1.2449 (pid 15414) Use of int in max_burst socket option. [ 463.078648][T15414] Use struct sctp_assoc_value instead [ 463.175332][T15321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.190616][T15321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.217897][T15418] dvmrp0: entered allmulticast mode [ 463.225661][T15418] dvmrp0: left allmulticast mode [ 463.375294][T15321] team0: Port device team_slave_0 added [ 463.415660][T15321] team0: Port device team_slave_1 added [ 463.508810][T15422] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 463.536014][T15321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.551151][T15321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.599812][T15321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.639546][T15321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.649383][T15321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.676838][T15321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.998061][T15441] 8021q: adding VLAN 0 to HW filter on device bond10 [ 464.024960][T15444] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2458'. [ 464.066500][T15321] hsr_slave_0: entered promiscuous mode [ 464.119223][T15321] hsr_slave_1: entered promiscuous mode [ 464.282932][T15462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2464'. [ 464.350908][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 464.359145][ T5155] Bluetooth: hci5: command tx timeout [ 464.413748][T15470] nbd: must specify at least one socket [ 464.543391][T15479] netlink: 'syz.4.2470': attribute type 8 has an invalid length. [ 465.030000][T15494] __nla_validate_parse: 4 callbacks suppressed [ 465.030019][T15494] netlink: 576 bytes leftover after parsing attributes in process `syz.7.2474'. [ 465.135522][T15501] openvswitch: netlink: EtherType 0 is less than min 600 [ 465.179913][T15503] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2476'. [ 465.451601][T15321] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 465.516951][T15321] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 465.559745][T15321] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 465.598211][T15321] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 465.819468][T15534] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2485'. [ 465.945807][T15539] netlink: 'syz.4.2487': attribute type 2 has an invalid length. [ 465.983396][T15539] netlink: 'syz.4.2487': attribute type 1 has an invalid length. [ 466.073675][T15542] IPv6: sit2: Disabled Multicast RS [ 466.080293][T15542] sit2: entered allmulticast mode [ 466.197495][T15548] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 466.251781][T15550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2490'. [ 466.301317][T15321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.368845][T15321] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.415516][T13652] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.422805][T13652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.434689][ T5155] Bluetooth: hci5: command tx timeout [ 466.476545][ T8369] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.483759][ T8369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.530327][T15567] netlink: 'syz.7.2492': attribute type 15 has an invalid length. [ 466.911936][T15583] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2496'. [ 466.949114][T15586] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2495'. [ 467.558566][T15321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.625021][T15615] bond0: option ad_select: unable to set because the bond device is up [ 467.639253][T15619] xt_bpf: check failed: parse error [ 467.775019][T15625] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2503'. [ 467.833161][T15628] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2505'. [ 468.204189][T15642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2507'. [ 468.496054][T15658] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2511'. [ 468.512174][ T5155] Bluetooth: hci5: command tx timeout [ 468.599853][T15321] veth0_vlan: entered promiscuous mode [ 468.786715][T15321] veth1_vlan: entered promiscuous mode [ 468.896944][T15321] veth0_macvtap: entered promiscuous mode [ 468.924469][T15321] veth1_macvtap: entered promiscuous mode [ 468.992761][T15321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.016415][T15678] sctp: [Deprecated]: syz.7.2516 (pid 15678) Use of struct sctp_assoc_value in delayed_ack socket option. [ 469.016415][T15678] Use struct sctp_sack_info instead [ 469.058743][T15677] 8021q: adding VLAN 0 to HW filter on device bond4 [ 469.085617][T15321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.127236][T15321] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.150356][T15684] netlink: 'syz.4.2519': attribute type 1 has an invalid length. [ 469.202646][T15321] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.212254][T15321] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.224955][T15321] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.749367][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.761644][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.818484][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.827202][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.266365][T15714] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input10 [ 470.346762][T15717] __nla_validate_parse: 3 callbacks suppressed [ 470.346779][T15717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2530'. [ 470.456940][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.620289][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.712070][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.777657][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.105223][ T49] bridge_slave_1: left allmulticast mode [ 471.111077][ T49] bridge_slave_1: left promiscuous mode [ 471.116868][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.127097][ T49] bridge_slave_0: left allmulticast mode [ 471.134620][ T49] bridge_slave_0: left promiscuous mode [ 471.140341][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.471473][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.483300][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.493418][ T49] bond0 (unregistering): Released all slaves [ 471.855048][ T49] hsr_slave_0: left promiscuous mode [ 471.865343][ T49] hsr_slave_1: left promiscuous mode [ 471.871681][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.879090][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.887189][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.894784][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.918255][ T49] veth1_macvtap: left promiscuous mode [ 471.923853][ T49] veth0_macvtap: left promiscuous mode [ 471.929447][ T49] veth1_vlan: left promiscuous mode [ 471.934959][ T49] veth0_vlan: left promiscuous mode [ 472.144011][T15733] sctp: [Deprecated]: syz.6.2534 (pid 15733) Use of struct sctp_assoc_value in delayed_ack socket option. [ 472.144011][T15733] Use struct sctp_sack_info instead [ 472.262999][T15743] sctp: [Deprecated]: syz.6.2534 (pid 15743) Use of struct sctp_assoc_value in delayed_ack socket option. [ 472.262999][T15743] Use struct sctp_sack_info instead [ 472.846213][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 472.858540][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 472.870335][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 472.889968][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 472.905127][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 473.105071][ T49] team0 (unregistering): Port device team_slave_1 removed [ 473.157644][ T49] team0 (unregistering): Port device team_slave_0 removed [ 473.666477][T15756] lo speed is unknown, defaulting to 1000 [ 473.874305][T15767] batadv0 (unregistering): left allmulticast mode [ 473.967823][T15767] bond0: (slave macvlan3): Releasing backup interface [ 474.347743][T15781] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2546'. [ 474.367908][T15778] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2545'. [ 474.425383][T15783] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2545'. [ 474.454075][T15783] netlink: 508 bytes leftover after parsing attributes in process `syz.7.2545'. [ 474.476004][T15780] pim6reg: entered allmulticast mode [ 474.503762][T15787] tipc: Enabling of bearer rejected, already enabled [ 474.666132][T15778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.689113][T15778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.705184][T15778] bond0 (unregistering): Released all slaves [ 474.733154][T15792] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2548'. [ 474.752291][T15798] sit0: entered promiscuous mode [ 474.777932][T15798] netlink: 'syz.4.2547': attribute type 1 has an invalid length. [ 474.821328][T15798] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2547'. [ 474.941369][T15802] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2549'. [ 474.996806][ T5155] Bluetooth: hci5: command tx timeout [ 475.147950][T15816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2552'. [ 475.259405][T15756] chnl_net:caif_netlink_parms(): no params data found [ 475.491774][T15756] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.499677][T15756] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.507781][T15756] bridge_slave_0: entered allmulticast mode [ 475.517443][T15756] bridge_slave_0: entered promiscuous mode [ 475.535156][T15756] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.543411][T15756] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.550932][T15756] bridge_slave_1: entered allmulticast mode [ 475.558331][T15756] bridge_slave_1: entered promiscuous mode [ 475.610506][T15756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.625207][T15756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.745994][T15756] team0: Port device team_slave_0 added [ 475.796393][T15756] team0: Port device team_slave_1 added [ 476.089896][T15756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.099311][T15756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.127892][T15756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.233064][T15756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.240085][T15756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.355749][T15756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.673867][T15756] hsr_slave_0: entered promiscuous mode [ 476.690098][T15756] hsr_slave_1: entered promiscuous mode [ 476.721357][ T30] audit: type=1800 audit(1750849944.341:5): pid=15876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2570" name="memory.events" dev="tmpfs" ino=2996 res=0 errno=0 [ 476.834854][T15880] netlink: 'syz.4.2572': attribute type 4 has an invalid length. [ 477.017338][T15889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2575'. [ 477.082059][ T5155] Bluetooth: hci5: command tx timeout [ 477.095809][ T5910] lo speed is unknown, defaulting to 1000 [ 477.105538][ T5910] syz0: Port: 1 Link DOWN [ 477.148084][ T5910] lo speed is unknown, defaulting to 1000 [ 477.195379][T15897] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20003 [ 477.617558][T15913] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2585'. [ 477.629278][T15913] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2585'. [ 477.832025][T15922] netlink: 'syz.6.2586': attribute type 1 has an invalid length. [ 477.937721][T15930] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2586'. [ 477.966692][T15931] xt_hashlimit: size too large, truncated to 1048576 [ 478.007621][T15924] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2587'. [ 478.044782][T15933] : renamed from bridge_slave_0 (while UP) [ 478.116584][T15924] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2587'. [ 478.251745][T15937] bond0: Master is either lo or non-ether device [ 478.430307][T15756] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 478.439738][T15940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2592'. [ 478.510192][T15756] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 478.555643][T15756] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 478.622940][T15949] x_tables: duplicate entry at hook 3 [ 478.643314][T15950] xt_socket: unknown flags 0x50 [ 478.649358][T15756] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 478.663157][T15951] tun0: tun_chr_ioctl cmd 1074025675 [ 478.669837][T15951] tun0: persist disabled [ 478.679998][T15947] netlink: 'syz.1.2595': attribute type 2 has an invalid length. [ 478.749532][T15958] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2596'. [ 478.790517][T15961] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 478.983464][T15756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.006913][T15971] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2600'. [ 479.103154][T15975] xt_hashlimit: overflow, rate too high: 0 [ 479.110680][T15756] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.139816][T15976] xt_hashlimit: overflow, rate too high: 0 [ 479.140105][T13652] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.152929][T13652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.165542][ T5155] Bluetooth: hci5: command tx timeout [ 479.226370][T13652] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.233683][T13652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.513885][T15993] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2605'. [ 479.747102][T15997] lo speed is unknown, defaulting to 1000 [ 479.955136][T16012] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 480.026140][T16008] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.102428][T16008] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 480.119906][ T5910] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 480.143567][ T5910] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 480.351017][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 480.457516][T15756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.871772][T16048] IPVS: persistence engine module ip_vs_pe_À not found [ 481.208634][T16066] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 3, id = 0 [ 481.237877][ T5155] Bluetooth: hci5: command tx timeout [ 481.359914][T16068] ip6t_rpfilter: unknown options [ 482.059456][T15756] veth0_vlan: entered promiscuous mode [ 482.126775][T15756] veth1_vlan: entered promiscuous mode [ 482.208848][T15756] veth0_macvtap: entered promiscuous mode [ 482.245630][T15756] veth1_macvtap: entered promiscuous mode [ 482.295980][T16105] __nla_validate_parse: 5 callbacks suppressed [ 482.295999][T16105] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2634'. [ 482.315446][T15756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.355198][T15756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.377862][T16110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2636'. [ 482.399058][T15756] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.418658][T15756] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.435844][T15756] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.447140][T15756] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.529220][T16117] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2637'. [ 482.613124][T16117] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 482.763105][ T6227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.783987][ T6227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.848926][T16126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2638'. [ 482.863984][ T6227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.887189][ T6227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.321292][T16138] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2641'. [ 483.646534][T16144] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2643'. [ 483.663950][T16144] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2643'. [ 483.824038][ T24] IPVS: starting estimator thread 0... [ 483.931148][T16152] IPVS: using max 27 ests per chain, 64800 per kthread [ 484.076213][T16162] netlink: 'syz.4.2649': attribute type 12 has an invalid length. [ 484.131965][ T5910] IPVS: starting estimator thread 0... [ 484.139141][T16158] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 484.199019][T16158] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2650'. [ 484.253726][T16171] netlink: 'syz.6.2652': attribute type 21 has an invalid length. [ 484.261011][T16168] IPVS: using max 26 ests per chain, 62400 per kthread [ 484.266883][T14285] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.398025][T14285] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.567659][T14285] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.716300][T14285] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.816797][T14285] bridge_slave_1: left allmulticast mode [ 484.823610][T14285] bridge_slave_1: left promiscuous mode [ 484.829407][T14285] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.840152][T14285] bridge_slave_0: left allmulticast mode [ 484.846681][T14285] bridge_slave_0: left promiscuous mode [ 484.853314][T14285] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.166113][T14285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.177654][T14285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.188384][T14285] bond0 (unregistering): Released all slaves [ 485.503953][T14285] hsr_slave_0: left promiscuous mode [ 485.509988][T14285] hsr_slave_1: left promiscuous mode [ 485.518006][T14285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.527317][T14285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.536161][T14285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.543885][T14285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.569032][T14285] veth1_macvtap: left promiscuous mode [ 485.574705][T14285] veth0_macvtap: left promiscuous mode [ 485.580299][T14285] veth1_vlan: left promiscuous mode [ 485.585807][T14285] veth0_vlan: left promiscuous mode [ 486.026044][T16178] netlink: 'syz.6.2654': attribute type 21 has an invalid length. [ 486.035774][T16178] IPv6: NLM_F_CREATE should be specified when creating new route [ 486.264522][T16188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2658'. [ 486.290858][T16188] openvswitch: netlink: Flow actions attr not present in new flow. [ 486.489118][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 486.499072][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 486.514014][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 486.532742][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 486.540939][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 486.688917][T14285] team0 (unregistering): Port device team_slave_1 removed [ 486.735345][T14285] team0 (unregistering): Port device team_slave_0 removed [ 487.197878][T16188] netlink: 'syz.1.2658': attribute type 1 has an invalid length. [ 487.206242][T16188] netlink: 'syz.1.2658': attribute type 1 has an invalid length. [ 487.268770][T16196] lo speed is unknown, defaulting to 1000 [ 487.424975][T16202] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2660'. [ 487.489626][T16208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2661'. [ 487.856723][T16221] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2665'. [ 488.115829][T16230] netlink: 'syz.6.2669': attribute type 10 has an invalid length. [ 488.128698][T16230] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2669'. [ 488.155254][T16231] veth9: entered allmulticast mode [ 488.198166][T16230] team0: Device geneve0 is of different type [ 488.221601][T16230] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 488.254727][T16232] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2667'. [ 488.558159][T16252] netlink: 'syz.6.2672': attribute type 11 has an invalid length. [ 488.567263][T16252] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2672'. [ 488.595152][ T5155] Bluetooth: hci5: command tx timeout [ 488.649064][T16196] chnl_net:caif_netlink_parms(): no params data found [ 488.792887][ T6227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.813984][ T6227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.836026][T16196] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.843676][T16196] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.852284][T16196] bridge_slave_0: entered allmulticast mode [ 488.860550][T16196] bridge_slave_0: entered promiscuous mode [ 488.881363][T16196] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.891898][T16196] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.909073][T16196] bridge_slave_1: entered allmulticast mode [ 488.944865][T16196] bridge_slave_1: entered promiscuous mode [ 489.082520][T16196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.102667][T16274] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2678'. [ 489.108323][T16196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.186099][T16279] Bluetooth: MGMT ver 1.23 [ 489.305742][T16196] team0: Port device team_slave_0 added [ 489.391627][T16196] team0: Port device team_slave_1 added [ 489.515930][T16196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.541301][T16196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.572951][T16196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.590479][T16297] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2684'. [ 489.593656][T16196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.606756][T16196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.639029][T16196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.766088][T16196] hsr_slave_0: entered promiscuous mode [ 489.778363][T16196] hsr_slave_1: entered promiscuous mode [ 490.401350][T16314] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2688'. [ 490.444707][T16314] 0ªX¹¦D: renamed from gretap0 [ 490.479169][T16314] 0ªX¹¦D: left promiscuous mode [ 490.496938][T16314] 0ªX¹¦D: entered allmulticast mode [ 490.510133][T16314] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 490.533857][T16314] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2688'. [ 490.555353][T16314] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 490.579519][T16314] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 490.637801][T16196] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 490.664701][T16196] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 490.678487][ T5155] Bluetooth: hci5: command tx timeout [ 490.697512][T16196] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 490.713625][T16196] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 491.077767][T16196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.083855][T16342] x_tables: duplicate underflow at hook 2 [ 491.129593][T16196] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.184339][T13653] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.191618][T13653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.205415][T13653] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.212677][T13653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.820209][T16196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.907699][T16369] bond0: entered promiscuous mode [ 491.914530][T16369] bond0: entered allmulticast mode [ 492.221961][T16383] netlink: 'syz.1.2708': attribute type 1 has an invalid length. [ 492.238245][T16383] netlink: 'syz.1.2708': attribute type 2 has an invalid length. [ 492.384913][T16196] veth0_vlan: entered promiscuous mode [ 492.452814][T16196] veth1_vlan: entered promiscuous mode [ 492.604471][T16196] veth0_macvtap: entered promiscuous mode [ 492.629088][T16405] __nla_validate_parse: 6 callbacks suppressed [ 492.629105][T16405] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2711'. [ 492.648895][T16196] veth1_macvtap: entered promiscuous mode [ 492.751554][ T5155] Bluetooth: hci5: command tx timeout [ 492.807134][T16196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.845404][T16196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.868692][T16196] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.888969][T16196] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.908760][T16196] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.921120][T16196] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.178121][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.189372][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.282792][T13653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.302419][T13653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.379972][T16437] netlink: 'syz.4.2721': attribute type 1 has an invalid length. [ 493.446056][T16437] lo speed is unknown, defaulting to 1000 [ 493.484417][T16437] netlink: 'syz.4.2721': attribute type 5 has an invalid length. [ 493.721761][T16449] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2724'. [ 494.036881][T16460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2727'. [ 494.042643][T16465] unknown channel width for channel at 909000KHz? [ 494.097646][T16465] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2728'. [ 494.125930][T14285] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.130281][T16467] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2728'. [ 494.204504][T16466] unknown channel width for channel at 909000KHz? [ 494.218422][T16460] geneve2: entered promiscuous mode [ 494.436000][T14285] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.513406][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 494.524544][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 494.532999][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 494.542034][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 494.551940][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 494.579665][T14285] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.619383][T16470] lo speed is unknown, defaulting to 1000 [ 494.754191][T14285] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.007867][T14285] bridge_slave_1: left allmulticast mode [ 495.019013][T14285] bridge_slave_1: left promiscuous mode [ 495.024941][T14285] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.036106][T14285] bridge_slave_0: left allmulticast mode [ 495.042174][T14285] bridge_slave_0: left promiscuous mode [ 495.047944][T14285] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.383367][T14285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.401300][T14285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.412264][T14285] bond0 (unregistering): Released all slaves [ 495.435368][T16470] chnl_net:caif_netlink_parms(): no params data found [ 495.591488][T16470] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.598777][T16470] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.606395][T16470] bridge_slave_0: entered allmulticast mode [ 495.614387][T16470] bridge_slave_0: entered promiscuous mode [ 495.623110][T16470] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.630240][T16470] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.638034][T16470] bridge_slave_1: entered allmulticast mode [ 495.646898][T16470] bridge_slave_1: entered promiscuous mode [ 495.708885][T16470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.729781][T16470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.832682][T16470] team0: Port device team_slave_0 added [ 495.850482][T16470] team0: Port device team_slave_1 added [ 495.951969][T16470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.958971][T16470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.986367][T16470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.012544][T16470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.019537][T16470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.046415][T16470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.064742][T14285] hsr_slave_0: left promiscuous mode [ 496.071516][T14285] hsr_slave_1: left promiscuous mode [ 496.077756][T14285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.130808][T14285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.151890][T14285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.159380][T14285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.295070][T14285] veth1_macvtap: left promiscuous mode [ 496.316099][T14285] veth0_macvtap: left promiscuous mode [ 496.348412][T14285] veth1_vlan: left promiscuous mode [ 496.361263][T14285] veth0_vlan: left promiscuous mode [ 496.591131][ T51] Bluetooth: hci5: command tx timeout [ 496.690809][ T5155] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 496.714092][ T5155] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 496.724077][ T5155] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 496.735241][ T5155] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 496.743938][ T5155] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 497.078024][T14285] team0 (unregistering): Port device team_slave_1 removed [ 497.130291][T14285] team0 (unregistering): Port device team_slave_0 removed [ 497.771641][T16498] lo speed is unknown, defaulting to 1000 [ 497.834470][T16470] hsr_slave_0: entered promiscuous mode [ 497.849355][T16470] hsr_slave_1: entered promiscuous mode [ 498.277739][T16510] lo speed is unknown, defaulting to 1000 [ 498.296049][T16514] netlink: 'syz.6.2741': attribute type 1 has an invalid length. [ 498.321546][T16514] netlink: 'syz.6.2741': attribute type 2 has an invalid length. [ 498.350139][T16514] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2741'. [ 498.381848][T16515] netlink: 'syz.6.2741': attribute type 1 has an invalid length. [ 498.395559][T16515] netlink: 'syz.6.2741': attribute type 2 has an invalid length. [ 498.416759][T16515] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2741'. [ 498.567151][T16470] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 498.597826][T16470] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 498.654646][T16470] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 498.675530][ T51] Bluetooth: hci5: command tx timeout [ 498.693793][T16470] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 498.778008][T16498] chnl_net:caif_netlink_parms(): no params data found [ 498.799329][T16521] xt_bpf: check failed: parse error [ 498.806210][T16530] xt_bpf: check failed: parse error [ 498.831454][ T51] Bluetooth: hci7: command tx timeout [ 499.007905][ T5894] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 499.019320][ T5894] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 499.132057][T16538] fido_id[16538]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci7/hci7:200/report_descriptor': No such file or directory [ 499.333365][T16498] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.344350][T16498] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.354589][T16498] bridge_slave_0: entered allmulticast mode [ 499.401985][T16498] bridge_slave_0: entered promiscuous mode [ 499.417645][T16498] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.425426][T16498] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.433335][T16498] bridge_slave_1: entered allmulticast mode [ 499.448373][T16498] bridge_slave_1: entered promiscuous mode [ 499.563464][T16498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.576706][T16498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.751285][ T51] Bluetooth: hci5: command tx timeout [ 500.921079][ T51] Bluetooth: hci7: command tx timeout [ 501.200536][T16498] team0: Port device team_slave_0 added [ 501.220207][T16498] team0: Port device team_slave_1 added [ 501.303221][T16498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.321594][T16498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.349853][T16498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.382866][T16498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.389861][T16498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.431157][T16498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.449029][T16470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.550443][T16470] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.568392][T16498] hsr_slave_0: entered promiscuous mode [ 501.574886][T16559] openvswitch: netlink: Missing key (keys=40, expected=100) [ 501.575938][T16498] hsr_slave_1: entered promiscuous mode [ 501.589137][T16498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 501.597218][T16498] Cannot create hsr debugfs directory [ 501.610328][T16557] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2748'. [ 501.622566][T13653] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.629701][T13653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.658314][T16560] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2748'. [ 501.682367][T16557] C: entered allmulticast mode [ 501.693006][T13653] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.700235][T13653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.715419][T16557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2748'. [ 501.731042][T16562] netlink: 696 bytes leftover after parsing attributes in process `syz.6.2750'. [ 501.958231][T16571] delete_channel: no stack [ 501.968289][T16569] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2752'. [ 501.980422][T16571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2753'. [ 502.427463][T16470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.446343][T16589] netlink: 'syz.4.2756': attribute type 10 has an invalid length. [ 502.488335][T16589] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 502.617701][T16498] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 502.676660][T16498] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 502.695245][T16498] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 502.714621][T16498] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 502.746942][T16596] lo: entered promiscuous mode [ 502.756965][T16596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 502.831766][ T51] Bluetooth: hci5: command tx timeout [ 502.896967][T16498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.933383][T16498] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.975383][T14285] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.982572][T14285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.991871][ T51] Bluetooth: hci7: command tx timeout [ 503.045572][T16606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2758'. [ 503.057738][T16606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2758'. [ 503.078009][ T8369] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.085269][ T8369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.104233][T16470] veth0_vlan: entered promiscuous mode [ 503.170173][T16470] veth1_vlan: entered promiscuous mode [ 503.220082][T16498] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 503.237701][T16498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 503.414236][T16470] veth0_macvtap: entered promiscuous mode [ 503.437082][T16470] veth1_macvtap: entered promiscuous mode [ 503.481574][T16470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.507138][T16470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.530439][T16625] unsupported nla_type 52263 [ 503.549462][T16470] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.564386][T16625] netlink: 'syz.6.2764': attribute type 1 has an invalid length. [ 503.569030][T16470] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.592298][T16470] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.605545][T16470] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.831417][T13653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.850316][T13653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.904214][T16498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.932587][T16636] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2768'. [ 503.949949][T16636] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2768'. [ 503.966232][ T6227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.976907][ T6227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.531992][T16498] veth0_vlan: entered promiscuous mode [ 504.564251][T16498] veth1_vlan: entered promiscuous mode [ 504.674355][ T6227] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.701095][ T6227] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.845905][ T6227] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.870760][ T6227] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.907107][T16498] veth0_macvtap: entered promiscuous mode [ 504.926564][T16498] veth1_macvtap: entered promiscuous mode [ 504.959061][T16669] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:20000 [ 504.991913][ T6227] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.019826][ T6227] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.074051][ T51] Bluetooth: hci7: command tx timeout [ 505.107532][T16498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.168189][ T6227] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.179417][ T6227] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.215032][T16498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.258351][T16498] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.279989][T16498] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.300417][T16498] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.320725][T16498] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.525151][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.534696][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.591719][ T5155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 505.604943][ T5155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 505.613481][ T5155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 505.632693][ T5155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 505.648197][ T5155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 506.085457][ T6227] team0: Port device bond0 removed [ 506.095575][ T6227] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 506.107106][ T6227] bond0 (unregistering): Released all slaves [ 506.126838][ T6227] bond1 (unregistering): Released all slaves [ 506.142172][ T6227] bond2 (unregistering): Released all slaves [ 506.256603][ T6227] bond3 (unregistering): (slave veth3): Releasing active interface [ 506.264797][ T6227] vlan2: entered promiscuous mode [ 506.279947][ T6227] bond3 (unregistering): (slave vlan2): Releasing active interface [ 506.289882][ T6227] bond3 (unregistering): Released all slaves [ 506.399846][ T6227] bond4 (unregistering): Released all slaves [ 506.416144][ T6227] bond5 (unregistering): Released all slaves [ 506.439612][T14285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.448126][T14285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.536731][T16683] lo speed is unknown, defaulting to 1000 [ 506.544962][ T6227] tipc: Left network mode [ 507.485933][T16683] chnl_net:caif_netlink_parms(): no params data found [ 507.506273][ T6227] hsr_slave_0: left promiscuous mode [ 507.515531][ T6227] hsr_slave_1: left promiscuous mode [ 507.533080][ T6227] veth1_macvtap: left promiscuous mode [ 507.538899][ T6227] veth1_vlan: left promiscuous mode [ 507.544764][ T6227] veth0_vlan: left promiscuous mode [ 507.711148][ T51] Bluetooth: hci0: command tx timeout [ 508.558200][ T6227] lo (unregistering): left allmulticast mode [ 508.695420][T16683] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.703319][T16683] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.711817][T16683] bridge_slave_0: entered allmulticast mode [ 508.719615][T16683] bridge_slave_0: entered promiscuous mode [ 508.734791][T16683] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.742129][T16683] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.749296][T16683] bridge_slave_1: entered allmulticast mode [ 508.757692][T16683] bridge_slave_1: entered promiscuous mode [ 508.794025][T16683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.806673][T16683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.855288][T16683] team0: Port device team_slave_0 added [ 508.864532][T16683] team0: Port device team_slave_1 added [ 508.866538][ T6227] IPVS: stop unused estimator thread 0... [ 508.906650][T16683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.914740][T16683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.944248][T16683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.956889][T16683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.964020][T16683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.991979][T16683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.095803][T16683] hsr_slave_0: entered promiscuous mode [ 509.115904][T16683] hsr_slave_1: entered promiscuous mode [ 509.131732][T16683] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 509.149676][T16683] Cannot create hsr debugfs directory [ 509.415602][ T6227] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.574801][ T6227] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.628322][ T5155] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 509.642074][ T5155] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 509.651087][ T5155] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 509.661719][ T5155] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 509.669796][ T5155] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 509.757115][ T6227] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.787988][T16736] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2792'. [ 509.802547][ T51] Bluetooth: hci0: command tx timeout [ 509.856414][T16735] netlink: 11562 bytes leftover after parsing attributes in process `syz.8.2792'. [ 509.941032][ T6227] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.964855][T16732] lo speed is unknown, defaulting to 1000 [ 510.554294][ T6227] bridge_slave_1: left allmulticast mode [ 510.560014][ T6227] bridge_slave_1: left promiscuous mode [ 510.575413][T16759] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2799'. [ 510.585287][ T6227] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.605840][ T6227] bridge_slave_0: left allmulticast mode [ 510.617288][ T6227] bridge_slave_0: left promiscuous mode [ 510.624204][ T6227] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.684909][T16763] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2798'. [ 511.046168][ T6227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.057492][ T6227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.067838][ T6227] bond0 (unregistering): Released all slaves [ 511.098913][T16765] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 511.543846][T16778] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2803'. [ 511.667627][T16778] sock: sock_set_timeout: `syz.4.2803' (pid 16778) tries to set negative timeout [ 511.712147][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 511.719506][ T51] Bluetooth: hci7: command tx timeout [ 511.732383][T16780] netlink: 'syz.8.2805': attribute type 1 has an invalid length. [ 511.849603][T16683] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 511.873465][ T51] Bluetooth: hci0: command tx timeout [ 511.962520][T16683] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 511.984701][T16683] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 512.008749][T16683] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 512.029576][ T5155] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 512.045793][ T5155] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 512.055230][ T5155] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 512.076487][T16732] chnl_net:caif_netlink_parms(): no params data found [ 512.076539][ T5155] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 512.101875][T16791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2808'. [ 512.121426][ T5155] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 512.122637][T16791] netlink: 'syz.4.2808': attribute type 4 has an invalid length. [ 512.404391][T16790] lo speed is unknown, defaulting to 1000 [ 512.447898][ T6227] hsr_slave_0: left promiscuous mode [ 512.484487][ T6227] hsr_slave_1: left promiscuous mode [ 512.519262][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.557493][ T6227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.580276][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.589491][ T6227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.657774][ T6227] veth1_macvtap: left promiscuous mode [ 512.673129][ T6227] veth0_macvtap: left promiscuous mode [ 512.685740][ T6227] veth1_vlan: left promiscuous mode [ 512.697192][ T6227] veth0_vlan: left promiscuous mode [ 512.913578][T16815] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2811'. [ 513.001725][ T31] INFO: task syz.2.1695:12559 blocked for more than 143 seconds. [ 513.009623][ T31] Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 [ 513.021296][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 513.030246][ T31] task:syz.2.1695 state:D stack:27528 pid:12559 tgid:12558 ppid:5838 task_flags:0x400040 flags:0x00004004 [ 513.046346][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 513.049955][ T31] [ 513.053105][ T31] __schedule+0x16f5/0x4d00 [ 513.071612][ T31] ? __lock_acquire+0xab9/0xd20 [ 513.076568][ T31] ? schedule+0x165/0x360 [ 513.102453][ T31] ? __pfx___schedule+0x10/0x10 [ 513.107416][ T31] ? schedule+0x91/0x360 [ 513.121160][ T31] schedule+0x165/0x360 [ 513.131036][ T31] schedule_preempt_disabled+0x13/0x30 [ 513.140913][ T31] __mutex_lock+0x724/0xe80 [ 513.145474][ T31] ? __mutex_lock+0x51b/0xe80 [ 513.187712][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 513.218976][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 513.235169][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 513.250814][ T31] ? __nlmsg_put+0xef/0x1b0 [ 513.256685][ T31] ? genlmsg_put+0x137/0x2e0 [ 513.267130][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 513.300693][ T31] ? kernel_text_address+0xa5/0xe0 [ 513.306251][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 513.313604][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 513.319206][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 513.325380][ T31] genl_rcv_msg+0x60e/0x790 [ 513.329942][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.335175][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 513.341530][ T31] netlink_rcv_skb+0x205/0x470 [ 513.346366][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.351525][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.356883][ T31] ? down_read+0x1ad/0x2e0 [ 513.361472][ T31] genl_rcv+0x28/0x40 [ 513.365487][ T31] netlink_unicast+0x758/0x8d0 [ 513.370267][ T31] netlink_sendmsg+0x805/0xb30 [ 513.375227][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.380549][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 513.386313][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 513.392029][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.397370][ T31] __sock_sendmsg+0x219/0x270 [ 513.402455][ T31] ____sys_sendmsg+0x505/0x830 [ 513.407295][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.412784][ T31] ? import_iovec+0x74/0xa0 [ 513.417353][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 513.422187][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 513.427477][ T31] ? __fget_files+0x2a/0x420 [ 513.432226][ T31] ? __fget_files+0x3a0/0x420 [ 513.436951][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 513.442020][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 513.447522][ T31] ? rcu_is_watching+0x15/0xb0 [ 513.452473][ T31] ? do_syscall_64+0xbe/0x3b0 [ 513.457185][ T31] do_syscall_64+0xfa/0x3b0 [ 513.461836][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.467087][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.473423][ T31] ? clear_bhb_loop+0x60/0xb0 [ 513.478153][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.484153][ T31] RIP: 0033:0x7f35af18e929 [ 513.489090][ T31] RSP: 002b:00007f35b006a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.497706][ T31] RAX: ffffffffffffffda RBX: 00007f35af3b5fa0 RCX: 00007f35af18e929 [ 513.505799][ T31] RDX: 0000000024000100 RSI: 0000200000001740 RDI: 0000000000000003 [ 513.514156][ T31] RBP: 00007f35af210b39 R08: 0000000000000000 R09: 0000000000000000 [ 513.522241][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.530253][ T31] R13: 0000000000000000 R14: 00007f35af3b5fa0 R15: 00007ffe8cf7ff88 [ 513.538405][ T31] [ 513.548101][ T31] [ 513.548101][ T31] Showing all locks held in the system: [ 513.576461][ T31] 1 lock held by ksoftirqd/0/15: [ 513.582493][ T31] 1 lock held by khungtaskd/31: [ 513.587413][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 513.633964][ T31] 3 locks held by kworker/u8:3/49: [ 513.639162][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 513.651951][ T31] #1: ffffc90000b97bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 513.663355][ T31] #2: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 513.672736][ T31] 2 locks held by getty/5595: [ 513.677462][ T31] #0: ffff8880308af0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 513.687956][ T31] #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 513.698625][ T31] 5 locks held by kworker/u8:10/6227: [ 513.704349][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 513.715873][ T31] #1: ffffc9000b5f7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 513.726768][ T31] #2: ffffffff8f503750 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 513.738139][ T31] #3: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 513.749148][ T31] #4: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 513.767862][ T31] 5 locks held by kworker/0:7/10937: [ 513.773758][ T31] 2 locks held by kworker/0:10/10941: [ 513.779167][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 513.798349][ T5155] Bluetooth: hci7: command tx timeout [ 513.804937][ T31] #1: ffffc9000cab7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 513.821921][ T31] 2 locks held by syz.3.1592/12210: [ 513.827158][ T31] #0: ffffffff8f5764f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 513.840829][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 513.858019][ T31] 2 locks held by syz.2.1695/12559: [ 513.864540][ T31] #0: ffffffff8f5764f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 513.879126][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 513.889642][ T31] 3 locks held by kworker/u8:13/13653: [ 513.899811][ T31] #0: ffff88802fd4c148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 513.911817][ T31] #1: ffffc9000ad87bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 513.925049][ T31] #2: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 513.934721][ T31] 2 locks held by syz.7.2596/15949: [ 513.939951][ T31] #0: ffffffff8f5764f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 513.948307][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 513.959022][ T31] 2 locks held by syz.1.2735/16496: [ 513.961130][ T5155] Bluetooth: hci0: command tx timeout [ 513.964428][ T31] #0: ffffffff8f5764f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 513.977989][ T31] #1: ffffffff8e41ce08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 513.988631][ T31] 1 lock held by syz-executor/16683: [ 513.994282][ T31] #0: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20 [ 514.004056][ T31] 2 locks held by syz-executor/16732: [ 514.009453][ T31] #0: ffffffff8fa14b98 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 514.019429][ T31] #1: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 514.028701][ T31] 2 locks held by syz-executor/16790: [ 514.034293][ T31] #0: ffffffff8f503750 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 514.044117][ T31] #1: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 514.053770][ T31] 1 lock held by syz.4.2811/16815: [ 514.058908][ T31] #0: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x4ea/0x900 [ 514.068101][ T31] 1 lock held by syz.4.2811/16823: [ 514.073629][ T31] #0: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 514.083163][ T31] 1 lock held by syz.4.2811/16824: [ 514.088295][ T31] #0: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 514.097840][ T31] 5 locks held by syz.8.2812/16817: [ 514.103901][ T31] #0: ffff888027a58dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 514.114103][ T31] #1: ffff888027a580b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 514.123907][ T31] #2: ffffffff8f6783a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 514.134345][ T31] #3: ffff88801e3cd338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 514.143903][ T31] #4: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 514.155353][ T31] [ 514.157783][ T31] ============================================= [ 514.157783][ T31] [ 514.166654][ T31] NMI backtrace for cpu 1 [ 514.166676][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) [ 514.166697][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 514.166710][ T31] Call Trace: [ 514.166718][ T31] [ 514.166726][ T31] dump_stack_lvl+0x189/0x250 [ 514.166767][ T31] ? __wake_up_klogd+0xd9/0x110 [ 514.166793][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.166823][ T31] ? __pfx__printk+0x10/0x10 [ 514.166858][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 514.166888][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 514.166911][ T31] ? _printk+0xcf/0x120 [ 514.166937][ T31] ? __pfx__printk+0x10/0x10 [ 514.166961][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 514.166990][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 514.167019][ T31] watchdog+0xfee/0x1030 [ 514.167047][ T31] ? watchdog+0x1de/0x1030 [ 514.167083][ T31] kthread+0x70e/0x8a0 [ 514.167109][ T31] ? __pfx_watchdog+0x10/0x10 [ 514.167134][ T31] ? __pfx_kthread+0x10/0x10 [ 514.167158][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 514.167184][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.167208][ T31] ? __pfx_kthread+0x10/0x10 [ 514.167230][ T31] ret_from_fork+0x3f9/0x770 [ 514.167260][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 514.167294][ T31] ? __switch_to_asm+0x39/0x70 [ 514.167312][ T31] ? __switch_to_asm+0x33/0x70 [ 514.167330][ T31] ? __pfx_kthread+0x10/0x10 [ 514.167353][ T31] ret_from_fork_asm+0x1a/0x30 [ 514.167387][ T31] [ 514.167397][ T31] Sending NMI from CPU 1 to CPUs 0: [ 514.201849][ T5155] Bluetooth: hci8: command tx timeout [ 514.205355][ C0] NMI backtrace for cpu 0 [ 514.205370][ C0] CPU: 0 UID: 0 PID: 5155 Comm: kworker/u9:1 Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) [ 514.205391][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 514.205403][ C0] Workqueue: hci8 hci_cmd_timeout [ 514.205424][ C0] RIP: 0010:enqueue_hrtimer+0xdb/0x3a0 [ 514.205442][ C0] Code: ff 5d dc 0d 01 0f 85 15 01 00 00 e8 4f bb 11 00 4d 89 f5 49 c1 ed 03 43 80 7c 25 00 00 74 08 4c 89 f7 e8 58 39 75 00 4d 8b 3e <49> 83 c7 4c 4c 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 01 01 [ 514.205457][ C0] RSP: 0018:ffffc90000007c68 EFLAGS: 00000046 [ 514.205472][ C0] RAX: ffffffff81aea0e6 RBX: ffff88807c5df048 RCX: ffff888033fa1e00 [ 514.205496][ C0] RDX: 0000000000000100 RSI: ffffffff8be28b60 RDI: ffffffff8be28b20 [ 514.205512][ C0] RBP: 0000000000000001 R08: ffffffff8fa110f7 R09: 1ffffffff1f4221e [ 514.205524][ C0] R10: dffffc0000000000 R11: fffffbfff1f4221f R12: dffffc0000000000 [ 514.205536][ C0] R13: 1ffff110170c4fa8 R14: ffff8880b8627d40 R15: ffff8880b8627ac0 [ 514.205549][ C0] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 514.205563][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 514.205575][ C0] CR2: 00007f07e9dfa6b0 CR3: 000000003290c000 CR4: 00000000003526f0 [ 514.205590][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 514.205599][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 514.205610][ C0] Call Trace: [ 514.205617][ C0] [ 514.205626][ C0] __hrtimer_run_queues+0x656/0xc60 [ 514.205668][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 514.205693][ C0] ? read_tsc+0x9/0x20 [ 514.205713][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 514.205748][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 514.205770][ C0] handle_softirqs+0x286/0x870 [ 514.205800][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 514.205828][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 514.205860][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 514.205886][ C0] __irq_exit_rcu+0xca/0x1f0 [ 514.205915][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 514.205946][ C0] irq_exit_rcu+0x9/0x30 [ 514.205972][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 514.206000][ C0] [ 514.206006][ C0] [ 514.206013][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 514.206036][ C0] RIP: 0010:vprintk_emit+0x58f/0x7a0 [ 514.206052][ C0] Code: 85 32 01 00 00 e8 d1 61 1f 00 41 89 df 4d 85 f6 48 8b 1c 24 75 07 e8 c0 61 1f 00 eb 06 e8 b9 61 1f 00 fb 48 c7 c7 20 30 13 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 b9 36 [ 514.206066][ C0] RSP: 0018:ffffc9000ea1f720 EFLAGS: 00000293 [ 514.206080][ C0] RAX: ffffffff81a0fa97 RBX: ffffffff81a0f954 RCX: ffff888033fa1e00 [ 514.206097][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e133020 [ 514.206108][ C0] RBP: ffffc9000ea1f830 R08: ffffffff8fa110f7 R09: 1ffffffff1f4221e [ 514.206121][ C0] R10: dffffc0000000000 R11: fffffbfff1f4221f R12: dffffc0000000000 [ 514.206134][ C0] R13: 1ffff92001d43ee8 R14: 0000000000000200 R15: 0000000000000023 [ 514.206147][ C0] ? vprintk_emit+0x444/0x7a0 [ 514.206167][ C0] ? vprintk_emit+0x587/0x7a0 [ 514.206187][ C0] ? vprintk_emit+0x444/0x7a0 [ 514.206204][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 514.206218][ C0] ? stack_trace_save+0x9c/0xe0 [ 514.206240][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 514.206260][ C0] ? check_path+0x21/0x40 [ 514.206282][ C0] _printk+0xcf/0x120 [ 514.206307][ C0] ? __pfx__printk+0x10/0x10 [ 514.206332][ C0] bt_err+0x10b/0x160 [ 514.206354][ C0] ? __lock_acquire+0xab9/0xd20 [ 514.206380][ C0] ? __pfx_bt_err+0x10/0x10 [ 514.206422][ C0] hci_cmd_timeout+0xff/0x1e0 [ 514.206436][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 514.206463][ C0] process_scheduled_works+0xae1/0x17b0 [ 514.206513][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 514.206549][ C0] worker_thread+0x8a0/0xda0 [ 514.206566][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 514.206600][ C0] ? __kthread_parkme+0x7b/0x200 [ 514.206622][ C0] kthread+0x70e/0x8a0 [ 514.206643][ C0] ? __pfx_worker_thread+0x10/0x10 [ 514.206672][ C0] ? __pfx_kthread+0x10/0x10 [ 514.206691][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 514.206718][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.206743][ C0] ? __pfx_kthread+0x10/0x10 [ 514.206761][ C0] ret_from_fork+0x3f9/0x770 [ 514.206794][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 514.206822][ C0] ? __switch_to_asm+0x39/0x70 [ 514.206840][ C0] ? __switch_to_asm+0x33/0x70 [ 514.206856][ C0] ? __pfx_kthread+0x10/0x10 [ 514.206875][ C0] ret_from_fork_asm+0x1a/0x30 [ 514.206901][ C0] [ 514.212464][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 514.212483][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) [ 514.212512][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 514.212525][ T31] Call Trace: [ 514.212534][ T31] [ 514.212543][ T31] dump_stack_lvl+0x99/0x250 [ 514.212579][ T31] ? __asan_memcpy+0x40/0x70 [ 514.212609][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.212640][ T31] ? __pfx__printk+0x10/0x10 [ 514.212677][ T31] panic+0x2db/0x790 [ 514.212713][ T31] ? __pfx_panic+0x10/0x10 [ 514.212749][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 514.212771][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 514.212810][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 514.212837][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 514.212873][ T31] watchdog+0x102d/0x1030 [ 514.871897][ T31] ? watchdog+0x1de/0x1030 [ 514.876438][ T31] kthread+0x70e/0x8a0 [ 514.880525][ T31] ? __pfx_watchdog+0x10/0x10 [ 514.885216][ T31] ? __pfx_kthread+0x10/0x10 [ 514.889825][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 514.895041][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.900279][ T31] ? __pfx_kthread+0x10/0x10 [ 514.904882][ T31] ret_from_fork+0x3f9/0x770 [ 514.909512][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 514.914646][ T31] ? __switch_to_asm+0x39/0x70 [ 514.919438][ T31] ? __switch_to_asm+0x33/0x70 [ 514.924234][ T31] ? __pfx_kthread+0x10/0x10 [ 514.928843][ T31] ret_from_fork_asm+0x1a/0x30 [ 514.933628][ T31] [ 514.937004][ T31] Kernel Offset: disabled [ 514.941343][ T31] Rebooting in 86400 seconds..