last executing test programs: 2m35.72801997s ago: executing program 0 (id=945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be10a48401fe80000000000000a4100000000000aaff020000000000000000000000000001"], 0x10da) 2m35.484537301s ago: executing program 0 (id=948): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket(0x8, 0x3, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYRESHEX=0x0], 0x1f0}, 0x1, 0x0, 0x0, 0x4000}, 0x4801) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206010800000000000000000000000014000780050014007f00000005001500030000000500010006040000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) socketpair(0xa, 0x800, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000380)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f00000003c0)=0x2c) 2m35.047684102s ago: executing program 0 (id=954): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtclass={0x40, 0x28, 0x8, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff2, 0xffff}, {0x10, 0x6}, {0x5, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0xfffffff9}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x8000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r5}, 0x18) r6 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r6, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000240)={@random="9a0a8d7db2cb", @remote, @void, {@can={0xc, {{0x0, 0x0, 0x1}, 0x3, 0x3, 0x0, 0x0, "4a875db9ef84bcff"}}}}, &(0x7f0000000340)={0x1, 0x1, [0x26b, 0x155, 0x16c, 0x671]}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x3e7d}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e20}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x800) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000380)={@remote, r9}, 0x14) 2m34.351970138s ago: executing program 0 (id=962): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ac000000100000000800"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000005c001a805800028054000180080020000100000008001d0006000000080011002f1800000800060006000000080018000600000008000e00990f000008001b000000000008001a000500000008002100010000000800210008000000140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0xac}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ac000000100000000800"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000005c001a805800028054000180080020000100000008001d0006000000080011002f1800000800060006000000080018000600000008000e00990f000008001b000000000008001a000500000008002100010000000800210008000000140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0xac}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) 2m34.155791115s ago: executing program 0 (id=966): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @private}, 0x2, 0x0, 0x2, 0x3}}, 0x2e) (async) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @private}, 0x2, 0x0, 0x2, 0x3}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000180)) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x4000000, {0x0, 0x0, 0x0, r6, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff}, @TCA_FLOWER_KEY_SCTP_DST={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x24004000) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@newtfilter={0x7c, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x6}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x50, 0x2, [@TCA_BPF_ACT={0x4c, 0x1, [@m_tunnel_key={0x48, 0x4, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}]}}]}, 0x7c}}, 0x40) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@newtfilter={0x7c, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x6}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x50, 0x2, [@TCA_BPF_ACT={0x4c, 0x1, [@m_tunnel_key={0x48, 0x4, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}]}}]}, 0x7c}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRESOCT=r7, @ANYRES16=r1], 0x44}, 0x1, 0x2000000000000000, 0x0, 0x8880}, 0x40080) r8 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="f17db6e5c6a49562cdb8d3001a69486d2f1a789aec7abc1679d56df54a3bf86336eaeb344fbf0435af8eb149154e94e7d6fd8d9f643c5dfea7453a9501a97db5624ef8b3b7a67fde7aeafc82463ae58b900df0e74c3b39f93d67f4f4f321550002a5f42545fd6604981abcbad1ec60bdfe9a73741b8b5f54e47a4f9cfa1dc7aa39748da18fde6a3ccc2c845169f707ff9558200212ab059f848f0f63e2210f91be5baa4ac98c4e0f947d83d64502a9adbcbc4f91ff88467771ea5413218cc1a2913fea8fda796eb9f595312896d5bed9de3c2026b86d3bcc80ad71db5591b0daf8c9e980b887183e4632256b91", 0xfffffffffffffe0b}, {&(0x7f00000006c0)="8882486415d126d757e1150576295ae34edf01e303837365d5d34837fb36335f86ce47c3e429f05623a607e24c1a22be2b522d6db5e7467183dd68ebbfec3c151e8671be9f51695a84d9a3081f", 0x4d}], 0x2, &(0x7f0000000180)}, 0x4000011) (async) sendmsg$alg(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="f17db6e5c6a49562cdb8d3001a69486d2f1a789aec7abc1679d56df54a3bf86336eaeb344fbf0435af8eb149154e94e7d6fd8d9f643c5dfea7453a9501a97db5624ef8b3b7a67fde7aeafc82463ae58b900df0e74c3b39f93d67f4f4f321550002a5f42545fd6604981abcbad1ec60bdfe9a73741b8b5f54e47a4f9cfa1dc7aa39748da18fde6a3ccc2c845169f707ff9558200212ab059f848f0f63e2210f91be5baa4ac98c4e0f947d83d64502a9adbcbc4f91ff88467771ea5413218cc1a2913fea8fda796eb9f595312896d5bed9de3c2026b86d3bcc80ad71db5591b0daf8c9e980b887183e4632256b91", 0xfffffffffffffe0b}, {&(0x7f00000006c0)="8882486415d126d757e1150576295ae34edf01e303837365d5d34837fb36335f86ce47c3e429f05623a607e24c1a22be2b522d6db5e7467183dd68ebbfec3c151e8671be9f51695a84d9a3081f", 0x4d}], 0x2, &(0x7f0000000180)}, 0x4000011) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000070100800c0001"], 0x114}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073114900000000008510000002000000b7000000000000009500c20000002c459500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffee0, 0x0, 0x0, 0x10, 0x8000}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073114900000000008510000002000000b7000000000000009500c20000002c459500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffee0, 0x0, 0x0, 0x10, 0x8000}, 0x70) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 2m32.937249491s ago: executing program 0 (id=977): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="6a0ac4ff000000007110930000000000950b"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x90) r0 = socket(0x29, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff"], 0x4c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000640)}, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000000414010029bd700001000010080001"], 0x18}, 0x1, 0x0, 0x0, 0x20000088}, 0x24000018) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000000414010029bd700001000010080001"], 0x18}, 0x1, 0x0, 0x0, 0x20000088}, 0x24000018) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c5}, 0x20000000) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c5}, 0x20000000) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x64, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x6, 0x9}, {}, {0x9, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x11, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x64, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x6, 0x9}, {}, {0x9, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x11, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000001baccee2ac35f9e2000006000000000000019500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0xf8, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x10, 0xffff}, {0xffff, 0xffff}, {0x0, 0x12}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xc8, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe], 0x0, [0x4, 0x5, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x54, 0x4, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0xc, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1002]}, [@TCA_MQPRIO_MAX_RATE64={0x70, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x2}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0xfffffffffffffff9}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0xfffffffffffffff4}, {0xc, 0x4, 0x30}, {0xc, 0x4, 0x2b}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0xd9}]}]}}}]}, 0xf8}}, 0x20000000) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0xf8, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x10, 0xffff}, {0xffff, 0xffff}, {0x0, 0x12}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xc8, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe], 0x0, [0x4, 0x5, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x54, 0x4, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0xc, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1002]}, [@TCA_MQPRIO_MAX_RATE64={0x70, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x2}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0xfffffffffffffff9}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0xfffffffffffffff4}, {0xc, 0x4, 0x30}, {0xc, 0x4, 0x2b}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0xd9}]}]}}}]}, 0xf8}}, 0x20000000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x5c, &(0x7f0000000840)=[@in={0x2, 0x4e20, @private=0xa010102}, @in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e24, 0x2ced, @empty, 0x7fffffff}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000140)=0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r12 = socket(0x200000100000011, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r12, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa1400060000000000ffffffff"], 0x54}}, 0x0) 2m18.318181941s ago: executing program 32 (id=977): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="6a0ac4ff000000007110930000000000950b"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x90) r0 = socket(0x29, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff"], 0x4c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000640)}, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000000414010029bd700001000010080001"], 0x18}, 0x1, 0x0, 0x0, 0x20000088}, 0x24000018) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000000414010029bd700001000010080001"], 0x18}, 0x1, 0x0, 0x0, 0x20000088}, 0x24000018) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c5}, 0x20000000) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c5}, 0x20000000) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x64, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x6, 0x9}, {}, {0x9, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x11, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x64, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x6, 0x9}, {}, {0x9, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x11, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000001baccee2ac35f9e2000006000000000000019500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0xf8, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x10, 0xffff}, {0xffff, 0xffff}, {0x0, 0x12}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xc8, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe], 0x0, [0x4, 0x5, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x54, 0x4, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0xc, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1002]}, [@TCA_MQPRIO_MAX_RATE64={0x70, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x2}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0xfffffffffffffff9}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0xfffffffffffffff4}, {0xc, 0x4, 0x30}, {0xc, 0x4, 0x2b}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0xd9}]}]}}}]}, 0xf8}}, 0x20000000) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0xf8, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x10, 0xffff}, {0xffff, 0xffff}, {0x0, 0x12}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xc8, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe], 0x0, [0x4, 0x5, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x54, 0x4, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0xc, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1002]}, [@TCA_MQPRIO_MAX_RATE64={0x70, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x2}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0xfffffffffffffff9}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0xfffffffffffffff4}, {0xc, 0x4, 0x30}, {0xc, 0x4, 0x2b}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0xd9}]}]}}}]}, 0xf8}}, 0x20000000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x5c, &(0x7f0000000840)=[@in={0x2, 0x4e20, @private=0xa010102}, @in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e24, 0x2ced, @empty, 0x7fffffff}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000140)=0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r12 = socket(0x200000100000011, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r12, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa1400060000000000ffffffff"], 0x54}}, 0x0) 1m51.413165487s ago: executing program 5 (id=1607): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0xb10, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0xa40, 0x2e8, 0x2e8, 0xa40, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x128, 0x170, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@devgroup={{0x38}, {0x5}}, @common=@dst={{0x48}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0x8b0, 0x8d0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xbc5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000028c0)=@filter={'filter\x00', 0x2, 0x4, 0x1428, 0xffffffff, 0x1250, 0x1250, 0x1250, 0xfeffffff, 0xffffffff, 0x1250, 0x1358, 0x1358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1108, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0xfd, 0x0, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}, @common=@frag={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@mh={{0x28}, {"6bbf"}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth1_vlan\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1488) 1m51.277673904s ago: executing program 5 (id=1609): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e0001fcff009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000) 1m51.091372672s ago: executing program 5 (id=1613): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@func={0xe, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x30, 0x0, 0x30, 0x2e, 0x0, 0x2e, 0x30, 0x5f, 0x30]}}, &(0x7f0000000240)=""/178, 0x2f, 0xb2, 0x1, 0xfffffffa}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r4, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x814}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m50.911732129s ago: executing program 5 (id=1616): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x20008844) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000001c0)={r3, 0x1, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000600)={r3, 0x1, 0x6, @remote}, 0x10) 1m50.380504251s ago: executing program 5 (id=1624): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x80}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x0, 0x8}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x2000c080) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x134, r0, 0x22, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x3, 0x6, 0x4, 0x80000001]}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x609}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1f1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ec}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffffd}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4d9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4c8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xfe}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x601}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xa82c}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x33c}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x50, 0x7, 0x2]}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5e}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x12c}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x10}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x11}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x289}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x2]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x81}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) (async) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x134, r0, 0x22, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x3, 0x6, 0x4, 0x80000001]}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x609}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1f1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ec}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffffd}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4d9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4c8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xfe}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x601}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xa82c}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x33c}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x50, 0x7, 0x2]}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5e}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x12c}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x10}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x11}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x289}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x2]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x81}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x5, 0x9, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x40, 0x40, 0x946, 0xffff0000}}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000480)={@local, @dev={0xfe, 0x80, '\x00', 0x16}, @mcast1, 0x8, 0x1, 0x7f, 0x0, 0x10, 0x202, r5}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000540)={'lo\x00'}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x4) (async) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x4) accept4$bt_l2cap(r4, &(0x7f0000000580), &(0x7f00000005c0)=0xe, 0x80000) (async) r9 = accept4$bt_l2cap(r4, &(0x7f0000000580), &(0x7f00000005c0)=0xe, 0x80000) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f0000000600)={0x4, 0x8, 0xa, 0x0, 0x0, [{{r8}, 0xfffffffffffffffb}, {{r9}, 0x8000000000000000}, {{r8}, 0x3}, {{r7}, 0x9}, {{r8}, 0x8}, {{r1}, 0x6}, {{r6}, 0x80000001}, {{r3}, 0x3ff}, {{r7}, 0x7}, {{r7}, 0x9}]}) (async) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f0000000600)={0x4, 0x8, 0xa, 0x0, 0x0, [{{r8}, 0xfffffffffffffffb}, {{r9}, 0x8000000000000000}, {{r8}, 0x3}, {{r7}, 0x9}, {{r8}, 0x8}, {{r1}, 0x6}, {{r6}, 0x80000001}, {{r3}, 0x3ff}, {{r7}, 0x7}, {{r7}, 0x9}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={r3, 0xffffffffffffffff}, 0x4) ioctl$VFAT_IOCTL_READDIR_BOTH(r10, 0x82307201, &(0x7f00000007c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r10, 0x82307201, &(0x7f00000007c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000a00)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000a40)={'gretap0\x00', r11, 0x10, 0x10, 0x7, 0x0, {{0x13, 0x4, 0x0, 0x3d, 0x4c, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x29}, {[@timestamp_prespec={0x44, 0x2c, 0xfc, 0x3, 0x1, [{@private=0xa010100, 0xe9}, {@multicast2, 0x101}, {@local, 0x10000}, {@private=0xa010102, 0xd}, {@remote, 0x4}]}, @timestamp={0x44, 0x8, 0x66, 0x0, 0x6, [0x4]}, @noop, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000b80)={'ip6gre0\x00', &(0x7f0000000b00)={'syztnl1\x00', r5, 0x29, 0x7, 0x5, 0x7e, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, 0x7800, 0x1, 0x7, 0x7}}) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000002000)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000000c40)={0x1374, r12, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x9}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffffffe}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}, @ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_OURS={0x12c8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_MASK={0xee, 0x5, "65fb28eb1ad96e3e1c9f30e1f92e12b577b9839feacec3786d3db3f35ad08ee1668cb0dfaa4a8ac8c91289cd89b901ef65f714769f3621d6b3a61e74ad60cd39b8e2bfa0c09585783fa15be7749dadd278c155b8ca406abeb19522f1e91d744ac971b2cab69727ce00710032544ac84c24419fe85425ffb271b4f5a52cae0994078ac5af8e2c0944a14cbd4cae32ece9e34c41ee28689a95f2c9e1714622ab8b0b1af00464d2b4ec1cbf0b10da154c8288819a155352db371da2baf1f04ddc7c43b44aafba726f23d71deb2eb28715f3e257c98aed0da8eeb7045c74bc652264c9b843513c54cdacbbf2"}, @ETHTOOL_A_BITSET_VALUE={0x5b, 0x4, "53ee6ceea97929232b9503753d1fe5ae8abd81a4a8d1d5c56d5bdde875afe99b9b853fa2eefea379f24ef94cb5f7b74b2f8ca60d269e37553eac85f52126b9a9a0415b966d2d78365486260f126b047af597e76cc34f0a"}, @ETHTOOL_A_BITSET_MASK={0xa3, 0x5, "18fce004db06ae299663751fc42dc4b95fbc113c7daafe903bce5ad1b96491b949cd8fd2a91dbf8e2cff056f4460192ade29b05fea919721b59ce48f521da80118e2e1f7be85ee3cd93eeb4fbd59b8c2f3f3ee2d3b3e93a11c0046eb2fde131b8686ad9a20b30da47b9dfa35d7af0227b70531a2b4b3c1678e8edd74f9869e95fc1219ed81dbbcafde59fbc33d4f7a03f18d9138255b4d9a1cbf4c86ce7516"}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x9d, 0x5, "4ab18de8be9d17b8848e445253400641cbacb04f8eca90395d52bb31ce839a2baf348bcd768e590e9883595eb36f08c063e64d94ed04f1b98fd843a2da2ec9f649b1b6faaa3a0ee1650c2e74afbeb0908bba040b29c6020faeac32a1998ed634af2d0533f664810361db2cc6218798d47f154fa527f3cc1533cabf1d95cc53b33b9785adbe61472b331c8288c70919f5c817f912e9d32ccd8e"}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x1374}, 0x1, 0x0, 0x0, 0x24000011}, 0x4841) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000002000)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000000c40)={0x1374, r12, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x9}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffffffe}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}, @ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_OURS={0x12c8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_MASK={0xee, 0x5, "65fb28eb1ad96e3e1c9f30e1f92e12b577b9839feacec3786d3db3f35ad08ee1668cb0dfaa4a8ac8c91289cd89b901ef65f714769f3621d6b3a61e74ad60cd39b8e2bfa0c09585783fa15be7749dadd278c155b8ca406abeb19522f1e91d744ac971b2cab69727ce00710032544ac84c24419fe85425ffb271b4f5a52cae0994078ac5af8e2c0944a14cbd4cae32ece9e34c41ee28689a95f2c9e1714622ab8b0b1af00464d2b4ec1cbf0b10da154c8288819a155352db371da2baf1f04ddc7c43b44aafba726f23d71deb2eb28715f3e257c98aed0da8eeb7045c74bc652264c9b843513c54cdacbbf2"}, @ETHTOOL_A_BITSET_VALUE={0x5b, 0x4, "53ee6ceea97929232b9503753d1fe5ae8abd81a4a8d1d5c56d5bdde875afe99b9b853fa2eefea379f24ef94cb5f7b74b2f8ca60d269e37553eac85f52126b9a9a0415b966d2d78365486260f126b047af597e76cc34f0a"}, @ETHTOOL_A_BITSET_MASK={0xa3, 0x5, "18fce004db06ae299663751fc42dc4b95fbc113c7daafe903bce5ad1b96491b949cd8fd2a91dbf8e2cff056f4460192ade29b05fea919721b59ce48f521da80118e2e1f7be85ee3cd93eeb4fbd59b8c2f3f3ee2d3b3e93a11c0046eb2fde131b8686ad9a20b30da47b9dfa35d7af0227b70531a2b4b3c1678e8edd74f9869e95fc1219ed81dbbcafde59fbc33d4f7a03f18d9138255b4d9a1cbf4c86ce7516"}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x9d, 0x5, "4ab18de8be9d17b8848e445253400641cbacb04f8eca90395d52bb31ce839a2baf348bcd768e590e9883595eb36f08c063e64d94ed04f1b98fd843a2da2ec9f649b1b6faaa3a0ee1650c2e74afbeb0908bba040b29c6020faeac32a1998ed634af2d0533f664810361db2cc6218798d47f154fa527f3cc1533cabf1d95cc53b33b9785adbe61472b331c8288c70919f5c817f912e9d32ccd8e"}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x1374}, 0x1, 0x0, 0x0, 0x24000011}, 0x4841) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0_virt_wifi\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x58, r0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40090) (async) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x58, r0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40090) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f00000021c0)) (async) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f00000021c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000002200)={{{@in6=@private1, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000002300)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000002200)={{{@in6=@private1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000002300)=0xe8) sendmsg$netlink(r4, &(0x7f0000003d80)={0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000002340)={0x140c, 0x40, 0x100, 0x70bd29, 0x25dfdbfd, "", [@nested={0x142, 0x72, 0x0, 0x1, [@nested={0x4, 0x62}, @nested={0x4, 0x4d}, @typed={0x8, 0xfd, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x8, 0x101, 0x0, 0x0, @pid=r13}, @typed={0x7, 0x5d, 0x0, 0x0, @str='{@\x00'}, @nested={0x4, 0x91}, @nested={0x4, 0x13f}, @nested={0x4, 0x11a}, @generic="62fca04cd83af089614bfc0d2a4e5aa9e1c7b5dd", @generic="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"]}, @nested={0x74, 0x148, 0x0, 0x1, [@typed={0x5, 0xdd, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x11e, 0x0, 0x0, @fd=r7}, @typed={0x5f, 0x151, 0x0, 0x0, @binary="5d43000e428806bc904b235280eac419ade7e51c1307a6b33f78f998e2d6bc26ba1b0afc06712bd9b899b57f5eff221e937f5f1f1f734010a6be490d6608e9e98cbc9ea23cb9f6e80c2569832626d4994bdecdac0cb608d4877d2b"}]}, @generic="57e3169357517f547446863a2e9772815557e08c4f9b9b69765e4dd83a160be78b54a8300ede6e0730b9166f60e1da501f1d5227500fd5ce05ca0b0aa2a363f81a367b98089482a572142115ec46ed17ade1fd06f8da52d73c23d9fb89a4cb0b55d3bb21895bfb12bd329fd494b50d8f4a507f38f86313423eab1baf2e348c99e2", @generic="44742bb973fbada1140e7c3283da52907d27f62be667846b18272c9aada57e917691afeda72b8b9757fe8fd948331168088c584da0da94a6e162c5ac9d11028fd9171f7ea6eb24168d88426e845967f30328936a07e9bba55e0c674685abf67efd94dffa74b3cad2caefe7e1e9877cfdd75afc61612358ed994d0009", @generic="8ad89d10b70dcd01b74dc02a4d86a0bc8bc8fe53c8284ac59fb549068f4c9a9817fa75ca320fa67bab48cad1c2f418df4855ef9fe96f89641a2b0ecded5fb69956bc4c236cadd017a1c7ad59e2fba9b40e5adabdf7d9fd3018bc3e1bbb20118f2c5e39ad3e6c7224a315d151170669d3e4f0da0f16463817256c255dfcc9474947c0870ac8c08f8ff9974c33871fc05647cab6ee8c8394e2bb523dfa63329d7a1219bb7598c5c6576bc598477a3f84945b2307e864469e66624aa7c43035cb3f30a98284dc292bbeb4d2356b08a77389199529d699bfd6b3edb93d021b", @generic="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", @nested={0x65, 0xc, 0x0, 0x1, [@typed={0x8, 0x131, 0x0, 0x0, @uid=r14}, @nested={0x4, 0x4}, @nested={0x4, 0x14d}, @nested={0x4, 0xb4}, @typed={0x8, 0x60, 0x0, 0x0, @ipv4=@local}, @generic="98420ba36111949e7f9efab7242549d4ebeb8f7da2e28b54328af7a9f8ade8d59fe9012d9c44fee97805413307537ed11cadd0617ee45dde5e3ef990e04585e3d91477cc73"]}]}, 0x140c}, {&(0x7f0000003780)={0x24, 0x29, 0x200, 0x70bd27, 0x25dfdbfe, "", [@typed={0x14, 0x1e, 0x0, 0x0, @ipv6=@local}]}, 0x24}, {&(0x7f00000037c0)={0x198, 0x17, 0x100, 0x70bd28, 0x25dfdbff, "", [@generic="23ac", @generic="c71ea02b34a3af9890ff1532115f758aa02353fb8d123f6cc2438f6012a1ab84860ab7ddbfc0444581b1d6d80ddfff1e59fa46f6d8ea7ec68bd172a48684f32f393b55b1f3e6c4b7adacb6dc83b649f4487c53", @typed={0xc, 0x78, 0x0, 0x0, @u64=0x8}, @generic="bbf69309689dae5ac03961bd5140d9e22057106a4c0bf12217c022fcf0732de1134867f60fdfbdb8da2924bc108ed6292e5493d0e2c1ff23782e42c2a538c683105d341cc13d617cac12d6d05e0f56c6205012104e554f7245121ef3c77b8de4d814fcc1b52c150bdb47d3afa1d463d1b5d30a9f4626d5881673", @nested={0xaa, 0x14f, 0x0, 0x1, [@typed={0x8, 0x10d, 0x0, 0x0, @ipv4=@local}, @typed={0x14, 0x13d, 0x0, 0x0, @ipv6=@empty}, @generic="ffae268a1b5571171d73ebbd2225a9d129e939b5a45061cb919c87f1a72e1306ea61e2b42e7518d13c2a92069522c1b857e20460a71eea5bc060ba8932f647d495899d215061ccb9c3a41c20295e111b89a311cffb9444ae91550fc8424ab94a8903f377934e7380590a2939ba47609c8c9e71d2998cd612aea758476d88f1e7af218ac38ed650e80453"]}]}, 0x198}, {&(0x7f0000003980)={0x208, 0x31, 0x4, 0x70bd2d, 0x25dfdbff, "", [@generic="3434668822ddd896bb83fabeb7b638e1f3add6651a07363598293a5ed58fc0d652d0c06fd0bef46e9e01b4f4dc756ff49fbedcd7f70711f3c4f8f235e7d5e54196aae761974badd2b5dbcf4d6d7cb6fdefd9fffe3930a639536089efa5e129ed2b464ff0ad753419840a866f08418a743dc4dfb71053430cdecc6ae72f566f4f33abc9c93eb13b31159ab7cf1738a3cc52c1102ed651bc3b8b43f956ebd0e14deb20f7d7b8369af2a429eb5aeed8c0d0c1ee1031bcb4", @nested={0x115, 0x2a, 0x0, 0x1, [@generic="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", @nested={0x4, 0x145}, @nested={0x4, 0x123}, @typed={0x8, 0x14e, 0x0, 0x0, @fd=r10}, @nested={0x4, 0x10f}]}, @nested={0x28, 0xb9, 0x0, 0x1, [@typed={0x4, 0x14c}, @typed={0xb, 0x43, 0x0, 0x0, @str='++)%\')\x00'}, @nested={0x4, 0x90}, @nested={0x4, 0x140}, @nested={0x4, 0x140}, @typed={0x8, 0x6, 0x0, 0x0, @fd=r4}]}]}, 0x208}, {&(0x7f0000003bc0)={0x120, 0x24, 0xa02, 0x70bd2b, 0x25dfdbfe, "", [@generic="bad3a35d62d39bcab233cc26e5c0b8e2ce449f970ef69cfee3c7e3c99647fd4faf6096bd52ef74c4b3fc8b0521ff66ce1b315cd5f9ea2b4fa0cf2037a9584b284cae7e388e1038f75bf9cebdfce47e3610f7d15aa5f1b829e06e09b2ce4ee7f6463401dfb3b76b9102f57c9d5906e06183", @generic="9a6ed1c2091aa53171eb8dc2d3ce5fb62188295358a5ea3c9dec026c06d9c46dc6bd8f4008150b7cae5feda03a20c17eb81db06a6ace2d18a42cfcd897c8efd23a204c73da5d509dca7ce3ebcb0146c5ed96bdb3b6746ec46e1c17b93c182ada596097cd733c3a3f5e42cbbf0868e490deb2630eb59fd5dba44058919aac8aa5d265bea54dab02732d584556b4efb40a203ec29c5ac9b0784c0ae55138"]}, 0x120}], 0x5, 0x0, 0x0, 0x60008001}, 0xd7b793d3dc978db7) socket$netlink(0x10, 0x3, 0x4) (async) socket$netlink(0x10, 0x3, 0x4) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000003dc0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r15, 0xd0009412, &(0x7f0000003fc0)={r16, 0x9}) 1m50.180655932s ago: executing program 5 (id=1627): sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cc, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x2, {0x0, 0xf0}, {0x1, 0xf0, 0x2}, 0xfe, 0x2}, {0x2, 0x3, {0x1, 0xf0, 0x2}, {0x2, 0xf0}, 0xfd, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x1}, {0x0, 0xf0, 0x2}, 0x2, 0x2}, {0x1, 0x0, {0x2, 0x1, 0x2}, {0x0, 0xff, 0x4}}], 0x80) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x60, r1, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x10}, @device_b, @device_a, @initial, {0xc, 0x9}, @value=@ver_80211n={0x0, 0x60, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x0, 0x2, {}, @val, @val={0x2d, 0x1a, {0x80, 0x2, 0x2, 0x0, {0xf, 0x9, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x5}}}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x4000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r3, 0x400448cc, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x2, {0x0, 0xf0}, {0x1, 0xf0, 0x2}, 0xfe, 0x2}, {0x2, 0x3, {0x1, 0xf0, 0x2}, {0x2, 0xf0}, 0xfd, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x1}, {0x0, 0xf0, 0x2}, 0x2, 0x2}, {0x1, 0x0, {0x2, 0x1, 0x2}, {0x0, 0xff, 0x4}}], 0x80) (async) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x60, r1, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x10}, @device_b, @device_a, @initial, {0xc, 0x9}, @value=@ver_80211n={0x0, 0x60, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x0, 0x2, {}, @val, @val={0x2d, 0x1a, {0x80, 0x2, 0x2, 0x0, {0xf, 0x9, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x5}}}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) 1m35.116838864s ago: executing program 33 (id=1627): sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cc, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x2, {0x0, 0xf0}, {0x1, 0xf0, 0x2}, 0xfe, 0x2}, {0x2, 0x3, {0x1, 0xf0, 0x2}, {0x2, 0xf0}, 0xfd, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x1}, {0x0, 0xf0, 0x2}, 0x2, 0x2}, {0x1, 0x0, {0x2, 0x1, 0x2}, {0x0, 0xff, 0x4}}], 0x80) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x60, r1, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x10}, @device_b, @device_a, @initial, {0xc, 0x9}, @value=@ver_80211n={0x0, 0x60, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x0, 0x2, {}, @val, @val={0x2d, 0x1a, {0x80, 0x2, 0x2, 0x0, {0xf, 0x9, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x5}}}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x4000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r3, 0x400448cc, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x2, {0x0, 0xf0}, {0x1, 0xf0, 0x2}, 0xfe, 0x2}, {0x2, 0x3, {0x1, 0xf0, 0x2}, {0x2, 0xf0}, 0xfd, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x1}, {0x0, 0xf0, 0x2}, 0x2, 0x2}, {0x1, 0x0, {0x2, 0x1, 0x2}, {0x0, 0xff, 0x4}}], 0x80) (async) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x60, r1, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x10}, @device_b, @device_a, @initial, {0xc, 0x9}, @value=@ver_80211n={0x0, 0x60, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x0, 0x2, {}, @val, @val={0x2d, 0x1a, {0x80, 0x2, 0x2, 0x0, {0xf, 0x9, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x5}}}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) 1m3.552484043s ago: executing program 2 (id=2097): sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008050}, 0x4814) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x453, 0x4, 0x70bd27, 0x25dfdbfc, "d98b8d359ef78c9525e8cd0455fd41ca1181c3cbd9a0eb3005e40381991c6c8574bfdd952fd6ff208e1e36f28aa88ae79b"}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) recvfrom(r0, &(0x7f0000000040)=""/239, 0xef, 0x10160, &(0x7f0000000140)=@x25, 0x80) 52.602929123s ago: executing program 2 (id=2097): sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008050}, 0x4814) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x453, 0x4, 0x70bd27, 0x25dfdbfc, "d98b8d359ef78c9525e8cd0455fd41ca1181c3cbd9a0eb3005e40381991c6c8574bfdd952fd6ff208e1e36f28aa88ae79b"}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) recvfrom(r0, &(0x7f0000000040)=""/239, 0xef, 0x10160, &(0x7f0000000140)=@x25, 0x80) 43.643705302s ago: executing program 2 (id=2097): sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008050}, 0x4814) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x453, 0x4, 0x70bd27, 0x25dfdbfc, "d98b8d359ef78c9525e8cd0455fd41ca1181c3cbd9a0eb3005e40381991c6c8574bfdd952fd6ff208e1e36f28aa88ae79b"}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) recvfrom(r0, &(0x7f0000000040)=""/239, 0xef, 0x10160, &(0x7f0000000140)=@x25, 0x80) 34.437340266s ago: executing program 2 (id=2097): sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008050}, 0x4814) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x453, 0x4, 0x70bd27, 0x25dfdbfc, "d98b8d359ef78c9525e8cd0455fd41ca1181c3cbd9a0eb3005e40381991c6c8574bfdd952fd6ff208e1e36f28aa88ae79b"}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) recvfrom(r0, &(0x7f0000000040)=""/239, 0xef, 0x10160, &(0x7f0000000140)=@x25, 0x80) 21.048232922s ago: executing program 2 (id=2097): sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008050}, 0x4814) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x453, 0x4, 0x70bd27, 0x25dfdbfc, "d98b8d359ef78c9525e8cd0455fd41ca1181c3cbd9a0eb3005e40381991c6c8574bfdd952fd6ff208e1e36f28aa88ae79b"}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) recvfrom(r0, &(0x7f0000000040)=""/239, 0xef, 0x10160, &(0x7f0000000140)=@x25, 0x80) 10.29404994s ago: executing program 2 (id=2097): sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008050}, 0x4814) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x453, 0x4, 0x70bd27, 0x25dfdbfc, "d98b8d359ef78c9525e8cd0455fd41ca1181c3cbd9a0eb3005e40381991c6c8574bfdd952fd6ff208e1e36f28aa88ae79b"}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) recvfrom(r0, &(0x7f0000000040)=""/239, 0xef, 0x10160, &(0x7f0000000140)=@x25, 0x80) 2.207209397s ago: executing program 6 (id=2799): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) write$cgroup_devices(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="660a00000000000061115c0000000000850000000200080095000000000000fbf1c74133a06565c2c78d"], &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="0500ffffffff0c0000002e00000008000300", @ANYRES32, @ANYBLOB="0a00340001010101010100000800490001ac0f0006006600060800000a00"], 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x880) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000005000100000000000500070019000000050011007f0000000c0009000200aaaaaaaaaaaa06000a00ffff00000c0009"], 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x0, 0xa4, 0x5e, &(0x7f0000000040)="ee1511b76545dd1edc71ccd3263e2abf6f0b2df5a681b6ffe82b1b26c7f51afab152b858cea4850de66843f7bed45d29d4d407b8b55a9d9656a5ff3e9d30086077f1e38ab8d74e44d045cc14104f947cde420e99411b876bdf8f868865d75e8402c25f6e883df60a2527b79108309a775f68eedb94079d180a96c2d1b9ec2d0ba147ec57a9f4aa8d75458b9b8a721d2f23493e11c2868f287ed80cdd5091fd753315d3a0", &(0x7f0000000100)=""/94, 0xffff0000, 0x0, 0x56, 0x0, &(0x7f00000001c0)="1b41d4aabb55745cd538eca82cc391ddc1ad49b644b540985a027453001ebfd19292ca5bc9b748b82bfa898e0966f6fa6b2bcefd365d63d8e43b70edfda19f931488f6b9996360612ea5818d814eae7b5ea7d22df448", &(0x7f0000000240), 0x3, 0x0, 0x8d4}, 0x50) 2.060344464s ago: executing program 1 (id=2801): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000140)={&(0x7f0000000040)=""/202, 0xca}) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000180)) poll(&(0x7f00000001c0)=[{r0, 0x740}, {r0, 0xe224}, {r0, 0x30}, {r0, 0x6032}], 0x4, 0x8) r1 = accept4$netrom(r0, &(0x7f0000000240)={{0x3, @netrom}, [@rose, @remote, @default, @netrom, @rose, @bcast, @null, @rose]}, &(0x7f00000002c0)=0x48, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000380)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f00000004c0)=0xe8) sendmsg$nl_generic(r0, &(0x7f00000008c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000500)={0x370, 0x13, 0x0, 0x70bd26, 0x25dfdbfd, {0x1a}, [@nested={0x1c, 0x9d, 0x0, 0x1, [@nested={0x4, 0x7d}, @typed={0x8, 0x119, 0x0, 0x0, @fd=r1}, @nested={0x4, 0xcc}, @typed={0x8, 0x65, 0x0, 0x0, @fd=r0}]}, @generic="a23e7e8ad053dd95eb9fd780379c51e5bb1bd8353d7d03ed55a977646292cfcb400ef9ed8e4bf23a123bda13dd1967b3edce18fa54468a9df59ba3d50d7731e49e6240d78c72bcc482e3f8d06741665f2561574e503ddeb4019c5cb2555f9d2fe073c559731cd5e5ba7161175f3af3a0fd31b93d4e20bf5ded1171b128860f7b93d8dbfae4ed18d9328826443986ce0790f0b7c28933cd2153e5b24efb774a8f85525c21e6a85e5d5284f11d91ebfedb9921b0c887a33e4e9e", @generic="ebfbaed442857c746643af5c16f2f70b907df384d7718771a8215ce1f1d8e0e9882aecb8c61c7da50a4d9aacec63de3731e2fc35eff0c50063373fa49dfb081619f85f4562091c9c5ce233f0215c9d4745e509a0eaebea2327eb1cb7b93e18a410af1ce1a3a51df362fb31df2931e247fadd483e1d5b302ca94f9962b5cbe91525af20a90141f4040e2ddd5a767128313e35f83d0ff6470767e8286b32007978179ebaf05edd9e", @nested={0x10, 0x14a, 0x0, 0x1, [@nested={0x4, 0x141}, @typed={0x8, 0x132, 0x0, 0x0, @pid=r2}]}, @typed={0x8, 0x105, 0x0, 0x0, @pid=r3}, @generic="6f2f7fbad4651a8ac577d8d4b4b3e306ab579f8d79b8ab4263a9dd80ce9b137b752951c6e7f3001e35474b804d3e252a09ac9ee66c6373542b27275633158b4fc60e07aa63a69756a47d2022d8e994e3d824867c3b0dcb5f691b8ad7e5831a167387aaaaf6", @generic="26e3106a9a73795ecca1f93148ba477ac1548a1a63a9184273dfa0f9e76197ff726d820b4529c4e67cce09c831e8887d1924f4bfb5863b8b5f631af99932cd339511dc36f68398cd6b3fd622ee9b7b8e81185b457d130b0980b0156984760b3612dbbe26d22fe398740a8414498343e686a6cd5c260be2a9a5f193eb2dc6010957f2ec48cd9a25257da1382b838540393db749d93b3808779f27e472167f7a7ab58998bbc7b5ee0418c58f1ceab5d9dfe43993aeba6e25441d0b91922e76ea6480b1ca9dddbcad852d9eb061427bccdb191935645a7f", @typed={0x8, 0x7d, 0x0, 0x0, @uid=r5}, @generic="57d42e7c27f1bfc82583726cbe5e83597f3897c74b8c26c0c6b066716a5d1fedb5202bceec6976e6fc5581f92cfb098cb2ae7d14a47cbb1db8318da21dadb005fe21d94e7e7d5b3464528244a1785b7a3ffc3beacff2f4102718e03515b125dfc3d98666b1a80377fc365124ae915f314b271c292a75d7f006fc61c5df6fe7cc5267df7312"]}, 0x370}, 0x1, 0x0, 0x0, 0x20040000}, 0x8080) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000900)={@remote, r4}, 0x14) close(r1) getsockname$inet6(r0, &(0x7f0000000940)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000980)=0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x2, 0x7fff, 0xd, 0x2002, r0, 0x9, '\x00', r4, r0, 0x3, 0x1, 0x5}, 0x50) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000a40)) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x10, 0x3fb, 0x200, 0x70bd26, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}}, 0x4000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000b80)={{{@in6=@dev, @in6}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000c80)=0xe8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000001140)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f0000001100)={&(0x7f0000000d80)={0x35c, r6, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x1}}}}, [@NL80211_ATTR_IE={0xfc, 0x2a, [@random={0x9, 0xf6, "6710913357f7fffe1a4857a74e246e33260027679743f0a34f4b10be2c85467066e5195b70e744fa67f2c6384bb150763087a4548a0d51083830f6c6430a8d85de552b3d7cadb7431dbf74d215cfd72981c14146a83429d07ac42aeb27544ea5a28b24511deef4a0233fea12e109f6fc998ec5d840b13022bebba20ea5c00cdb3ef510f7cc0a52ca394ea66d008b44ee353a8e296377f33b54fe6f3e08ae8b530337224d3290fcfac42f2d702629b40ca19f524bd3a5a314e754d874264b92366c723197d5e4cc6b053e039d61a88847c5f23609cf058d9469276e03f26fcc0521e239bd35909bc229f1159bdc9db8b0bb549806b5c4"}]}, @NL80211_ATTR_IE={0x1c, 0x2a, [@random={0x81, 0x9, "f18591a27888cb1b62"}, @supported_rates, @erp={0x2a, 0x1}, @gcr_ga={0xbd, 0x6}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "af510553c3ddafa2"}, @NL80211_ATTR_FILS_ERP_RRK={0x34, 0xfc, "8440414e28c7aaddfd41eb31db7dd5604e581c61346187e83d32c9e9a9cd0c917680f08dafb6c7616684d8d36caea6b7"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_REALM={0xb8, 0xfa, "fb679e101b592fea4c824dc2031dcf5372da1e4660ea16d865790f87fa338990a9e6d186620c34a4b53002ffbbd1936bcc34f4d367650954d2dde08e09841b12ed8a7f65a5da47360c22a6acf39a060f680a35fdcd9d7775d7d9c94e99c02e8266e884cf21e1314adfa2fca0d730a1d7f53882638fa433cc3407ec8445d6c5202db20f65038d2a097b7e7ba07695a751af6af5a4b3154646c5c088bf30d80ec2f0c7347af9c16c96d4fd2821fc3419c35169248b"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x317}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "3384a684fa2e16e5bd0bb7"}, @NL80211_ATTR_FILS_ERP_REALM={0x101, 0xfa, "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"}]]}, 0x35c}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) r8 = accept4$packet(r0, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000011c0)=0x14, 0x80000) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000001200)={r4, 0x1, 0x6, @random="5781651b8cfb"}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x20, r9, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008080}, 0x20040000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001380)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg$kcm(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000013c0)=""/86, 0x56}], 0x1}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000014c0), r0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000001500)={{{@in=@empty, @in6=@mcast1, 0x1, 0x9, 0x4e21, 0x5, 0x2, 0x20, 0x120, 0x2c, 0x0, r5}, {0x9, 0x9ae, 0x1, 0xa52, 0x641, 0x9, 0x8, 0x6}, {0x6, 0x1, 0x4, 0x3}, 0x78, 0x6e6bbb, 0x1, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d2, 0x3c}, 0xa, @in=@empty, 0x0, 0x3, 0x3, 0xc2, 0x1, 0x80, 0xe0000000}}, 0xe8) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001600)={0x4, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) 2.047146367s ago: executing program 6 (id=2802): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaaffc3000a000400aaaaaaaaaa00000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r1], 0x80}}, 0x0) 1.951930922s ago: executing program 3 (id=2803): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) (async, rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040), &(0x7f00000004c0)=@tcp6=r1, 0x2}, 0x20) (async, rerun: 32) sendmmsg$inet6(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 1.874531505s ago: executing program 1 (id=2805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESHEX=r1, @ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000280)={0x0, 0x2b, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0x1, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x20048884) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x108}, 0x1, 0x0, 0x0, 0x20044044}, 0x20000095) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x108}, 0x1, 0x0, 0x0, 0x20044044}, 0x20000095) 1.720264124s ago: executing program 6 (id=2807): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="08840f35e3e6f3fa91f6e63cc8d06b84396035bcf1616cabba0a611a7e26b359dc192ee77bc78f897d9666652d9136ae850d505e43cfb226c4aad574a6f6207980f80f336f12d824c2524f8feb9f2399c9cf31c2513788dc5c3718dc59d5ad086cfa409269c62c33b611ce0247fe3777faffae78ba0d17fd006f6cc301", 0x7d}, 0x1, 0x0, 0x0, 0x4}, 0xc851) (async) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="08840f35e3e6f3fa91f6e63cc8d06b84396035bcf1616cabba0a611a7e26b359dc192ee77bc78f897d9666652d9136ae850d505e43cfb226c4aad574a6f6207980f80f336f12d824c2524f8feb9f2399c9cf31c2513788dc5c3718dc59d5ad086cfa409269c62c33b611ce0247fe3777faffae78ba0d17fd006f6cc301", 0x7d}, 0x1, 0x0, 0x0, 0x4}, 0xc851) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000000140009"], 0x30}}, 0x0) 1.528213234s ago: executing program 1 (id=2808): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x140c, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) r2 = socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r6, @ANYBLOB="0200000000008000800012000800010076746936740002006000"], 0xa0}}, 0x0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000000840)=""/4097, 0x1001}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000001880)=""/238, 0xee}, {&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000440)=""/59, 0x3b}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x7}, 0x7ffffffe}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x40000000, 0x0) 1.48048419s ago: executing program 3 (id=2810): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r4, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x41) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @empty, 0x3}, 0xb) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000005000100000000000500070019000000050011007f0000000c0009000200aaaaaaaaaaaa06000a00ffff00000c0009"], 0x4c}}, 0x4c8e0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000030805e60000000000000000000000000500030000000000fcdbe7d78dedf4ab789861aaf40fd5f6db3125782f0dfb"], 0x1c}}, 0x0) 1.469015473s ago: executing program 6 (id=2811): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'none\x00', 0x1, 0x7, 0x78}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4f21, 0x3, 'rr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x0, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) sendto$inet(r2, &(0x7f0000000340)="51de3d421ee68d14c26bf7d21e5c4ebf", 0x10, 0x8040, 0x0, 0x0) 1.283832446s ago: executing program 3 (id=2812): setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x5}, 0x8) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x18, 0x0, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x18, 0x0, &(0x7f0000000340)=0x23) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYRESHEX=r0, @ANYRES32=r4], 0x90}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="cf702e8cf675aaaaaaaaaabb86dd6000000000303afffe880000000000000000000000000001ff020000000000000000000000000001890090780000d1521ce7294ce4be61940000fe800000000000000000000000000000fe8000008000000000000000000000000201703b744dc5c6"], 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x2a, 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) connect$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r7, 0x3a, 0x39, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8923, &(0x7f0000000000)={'hsr0\x00', 0x2}) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000100010a00000000000000000a000000"], 0x14}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) 1.27184151s ago: executing program 1 (id=2813): setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x5}, 0x8) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x18, 0x0, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x18, 0x0, &(0x7f0000000340)=0x23) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYRESHEX=r0, @ANYRES32=r4], 0x90}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="cf702e8cf675aaaaaaaaaabb86dd6000000000303afffe880000000000000000000000000001ff020000000000000000000000000001890090780000d1521ce7294ce4be61940000fe800000000000000000000000000000fe8000008000000000000000000000000201703b744dc5c6"], 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x2a, 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) connect$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r7, 0x3a, 0x39, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8923, &(0x7f0000000000)={'hsr0\x00', 0x2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 887.876344ms ago: executing program 4 (id=2815): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[], 0xd8}}, 0x0) 825.389542ms ago: executing program 1 (id=2816): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000000000000e0021001400000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x1, 0x1, 0x7, 0x4, {{0x21, 0x4, 0x0, 0x7, 0x84, 0x65, 0x0, 0xff, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, {[@cipso={0x86, 0xf, 0xffffffffffffffff, [{0x6, 0x9, "a32e04d4aa76b6"}]}, @timestamp={0x44, 0x8, 0xa6, 0x0, 0x4, [0x7]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x63, 0x1, 0x0, [{@loopback, 0xfffffffe}, {@rand_addr=0x64010100, 0xeb2}]}, @lsrr={0x83, 0x1b, 0xfc, [@private=0xa010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010101, @local, @broadcast]}, @lsrr={0x83, 0xf, 0xf, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @ssrr={0x89, 0x7, 0xb6, [@loopback]}, @end, @generic={0x88, 0xf, "77c9b898148ed43fe3adaa521f"}]}}}}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="50000000000101040000000000000000020000001400188008000140000000000800024000000000240001801400018008000100e000000108000500e00000010c000280050001000000000004001640c275d0300c74b706dadca3572cd85f33b11a9c02acbcb65e8a92c63ab3665b99b8ea65f0f23e55b9427e2d0bb9c0459077f23d63825f280b7f0705e3070e71ec4882f5881986250306ce33eefa154f4730e68fd71ce5919b675813587fc0f2905ef4cb96151def221000000000000000cb81cb4850f34ff151a6badbfe6a446d8c5c62d7df30459792009712bdb4cf0af6"], 0x50}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000002c0001000000000000f3ffff07000000fe3c46d8229bc9e4145c985342eb5b01b835f53b4888c985a667e527cbb9da56aad9fb1083e1087949252996493f68a84e57c36ac928ade0cfc6b72e95fe489dca28fff2b8c86f54b0ce541a4271da7c712535e34df877808766d931285e9c45c4838d05d59737dc71e515a9feeda6a9d4393f5f240db2b3456cdf1441a30394302d6ac5a752ec8af40119a7d202f574226d817c46", @ANYRES32=r7, @ANYBLOB="0b000080976b6408686030001800018011000d80905176c518740da397a9423603000000"], 0x3c}], 0x1}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @broadcast}, &(0x7f0000000500)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newpolicy={0x1a4, 0x13, 0x40, 0x70bd2d, 0x25dfdbfd, {{@in6=@rand_addr=' \x01\x00', @in=@remote, 0x4e23, 0xfc00, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x3c, r2, r7}, {0x6, 0x1a0, 0x7, 0x0, 0x0, 0x39, 0x40, 0x1}, {0x8000000000000000, 0x9, 0x44, 0x7fffffff}, 0x4, 0x0, 0x2, 0x1, 0x0, 0x3}, [@proto={0x5}, @offload={0xc, 0x1c, {r8, 0x2}}, @policy_type={0xa, 0x10, {0x1}}, @etimer_thresh={0x8, 0xc, 0x38}, @migrate={0x50, 0x11, [{@in6=@mcast2, @in=@loopback, @in6=@empty, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, 0x3c, 0x1, 0x0, 0x0, 0x2, 0x1a}]}, @migrate={0x50, 0x11, [{@in=@remote, @in=@private=0xa010102, @in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x6c, 0x2, 0x0, 0x0, 0x2, 0xa}]}, @lifetime_val={0x24, 0x9, {0x0, 0x80000000, 0x2, 0x4}}]}, 0x1a4}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@jmp={0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0}], {0x95, 0x0, 0x0, 0x1a03d3}}, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r12 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r14) sendmsg$NL80211_CMD_FRAME(r14, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, r15, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x12}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x5]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x44, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8}, @broadcast, @broadcast, @initial, {0x3, 0x10}, @value=@ver_80211n={0x0, 0x2}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x18, {0x1, 0x8000, @val=0x8, @val=0x27, @val="7f1ffe9c6f1e87f468c471d188c1aee7"}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0xfffd, 0x9]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4c15}, 0x20000002) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r13, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r16 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r16, 0x29, 0x33, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400"/20], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 776.494282ms ago: executing program 4 (id=2817): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000063010c000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000063010c000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="dc43a6c5511172f0ebfd3117611326c2345d181d45a10eaddac4aa8b15dacd824ce00dc62c31266f57024fcf8c35e8d445632c01af802e995c9fce8a657e5f5dd1a112af3c69278c6cefe59a5850c5898fa3a6318f051c4540f5ba7058b67571ef7e2cd7c02efb8d3c5f8d629752d57fe6fe492008737b5174659e95c4644ad57ff041c98d881e4ece826d7dad3fdb9692210d93", 0x94) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x4, 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x4, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000021b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x18, 0x11, 0x0, @empty, @empty, {[], {0x0, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0xffe0}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x18, 0x11, 0x0, @empty, @empty, {[], {0x0, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0xffe0}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x4, 0x2, 0x4, 0x3}, {0xfffc, 0x6, 0x28, 0x5}]}) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x3e) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="000002"], 0x1c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="000002"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) 716.013157ms ago: executing program 3 (id=2818): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 595.090491ms ago: executing program 3 (id=2819): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000006800010003000000feffff7f00000000000000000c000200010000000600000014000600fe800000000000000000000000200017"], 0x38}}, 0x40000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x10, r0, 0xde1c5000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r4 = socket(0x1e, 0x5, 0x0) setsockopt$inet6_tcp_int(r4, 0x10f, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c20000096a7cd8d5b847e929b2b2f20ab4e897c59b6cd0fee936c6af788695993988f21f39e6176826e2a33650e5940ca0b0bc223c6e871be39b0cd54a93cd151574afea636ed429cebe2c0a8f61a39fc7589a0f2ae4a24386fff1c40ed1c6a091726f0ea17942ad81385deee783f25cee5cd7becb3bcaf668e3bdb8510226b80e4c2e7889f05590c2d17b5e54d9a3ed60686efa3e864523128e73c45", @ANYRES16=r6, @ANYBLOB="010027bd7000ffdbdf251e00000030002f800c0002000201aaaaaaaaaaaa200003801400038006000100030000000800020001000000080001000000000008000300", @ANYRES32=r7, @ANYBLOB], 0x4c}}, 0x40) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x8, 0x7, 0x8, 0x6, {{0x26, 0x4, 0x3, 0x13, 0x98, 0x67, 0x0, 0x40, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, {[@lsrr={0x83, 0x13, 0x33, [@rand_addr=0x64010102, @broadcast, @remote, @private=0xa010101]}, @timestamp_addr={0x44, 0x4c, 0x83, 0x1, 0x8, [{@empty, 0x3}, {@remote, 0x5}, {@remote, 0xd244}, {@empty, 0x2}, {@remote, 0x7}, {@multicast1, 0xfffffffb}, {@multicast2, 0x1ff}, {@multicast1, 0x7}, {@empty, 0x4}]}, @timestamp_prespec={0x44, 0x4, 0x18, 0x3, 0x6}, @generic={0x1d, 0x5, "fb9886"}, @timestamp={0x44, 0x1c, 0xc3, 0x0, 0xb, [0x0, 0x6, 0xffff, 0x7, 0x3, 0x8]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=@getqdisc={0x30, 0x26, 0x61c, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xe, 0xc}, {0x10, 0xffff}, {0x3, 0x8}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) 565.127469ms ago: executing program 4 (id=2820): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x8010, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x84, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x206ea, @dev={0xfe, 0x80, '\x00', 0x34}}}, 0x0, 0x0, 0x0, 0x0, 0x400}, &(0x7f0000000200)=0x98) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x24}}, 0x0) 419.855666ms ago: executing program 6 (id=2821): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x40000}]}}}]}, 0x48}}, 0x88890) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x397, @empty}, 0x1c) close(0x3) 419.30096ms ago: executing program 1 (id=2822): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x4024044) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000000c0), 0x4) close(r6) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x80, 0x0, 0x201, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffffafc3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x726c74cb}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f00000013c0)={{r4}, r10, 0x1e, @inherit={0x88, &(0x7f00000023c0)=ANY=[@ANYBLOB="01000000000000000800000000000000050000000000000009000000000000002000007cbf09ad20729808400acafa0000000000bd0000000000000008000000000000000200000000000000050000000000000028e88439000000000cc5d61b00000000ff01000000000000180000000000000001000000000000000100000000000000020000000000000000fcffffffffffffe8e14ec742f45ed355448892805ffe7007d7342642a9a98c0d2f36668c8155b90d8be1b419f114881e81dbbfc4e2a82f852389201e2eb0149cc2b69fd18cc43a867c968daefa"]}, @name="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"}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r9, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) socket(0x1a, 0x6, 0x3) getsockopt$sock_int(r7, 0x1, 0xc, 0x0, &(0x7f0000000400)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 338.411333ms ago: executing program 4 (id=2823): syz_emit_ethernet(0x5e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800280600fc010000000000000000000000000002fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES8=0x0, @ANYBLOB="a002000990790000051200f700020000007f00040007000700730000"], 0x0) 168.838125ms ago: executing program 6 (id=2824): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000009010994423fd8232aa00000008000300000000000a000400aaaaaaaaaabbc3ff08000500", @ANYRES32=r1], 0x80}}, 0x0) 80.001476ms ago: executing program 4 (id=2825): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001500010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0800090000000000080008f2ffffffff130001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 71.875716ms ago: executing program 3 (id=2826): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000040), 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2a, &(0x7f00000000c0)=0x7a, 0x30) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) 0s ago: executing program 4 (id=2827): setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x5}, 0x8) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x18, 0x0, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x18, 0x0, &(0x7f0000000340)=0x23) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYRESHEX=r0, @ANYRES32=r4], 0x90}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="cf702e8cf675aaaaaaaaaabb86dd6000000000303afffe880000000000000000000000000001ff020000000000000000000000000001890090780000d1521ce7294ce4be61940000fe800000000000000000000000000000fe8000008000000000000000000000000201703b744dc5c6"], 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x2a, 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) connect$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r7, 0x3a, 0x39, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8923, &(0x7f0000000000)={'hsr0\x00', 0x2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) kernel console output (not intermixed with test programs): filter on device bond0 [ 175.725355][ T9587] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 175.746332][ T9587] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 175.850109][ T9595] veth3: entered promiscuous mode [ 175.859415][ T9595] bond0: (slave veth3): Enslaving as an active interface with a down link [ 175.888875][ T9599] vlan1: entered allmulticast mode [ 175.894249][ T9599] bond0: entered allmulticast mode [ 175.968836][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'. [ 176.454948][ T9639] netlink: 'syz.4.1054': attribute type 1 has an invalid length. [ 176.479358][ T9639] netlink: 'syz.4.1054': attribute type 4 has an invalid length. [ 176.499914][ T9639] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1054'. [ 176.528204][ T9639] NCSI netlink: No device for ifindex 458760 [ 176.778654][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1057'. [ 176.993553][ T9668] No such timeout policy "syz0" [ 177.167974][ T9678] sctp: [Deprecated]: syz.1.1063 (pid 9678) Use of int in max_burst socket option. [ 177.167974][ T9678] Use struct sctp_assoc_value instead [ 177.217366][ T9678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1063'. [ 177.461161][ T9696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1067'. [ 177.604000][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1070'. [ 177.650249][ T9708] netlink: 'syz.2.1069': attribute type 1 has an invalid length. [ 177.699017][ T9708] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.743745][ T9710] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.751511][ T9710] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 177.768015][ T9710] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 177.841677][ T9708] veth5: entered promiscuous mode [ 177.852042][ T9713] netlink: 'syz.4.1072': attribute type 16 has an invalid length. [ 177.854209][ T9708] bond3: (slave veth5): Enslaving as an active interface with a down link [ 177.865569][ T9713] netlink: 'syz.4.1072': attribute type 3 has an invalid length. [ 177.879343][ T9716] bond3: (slave vlan1): Opening slave failed [ 177.882188][ T9713] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1072'. [ 177.973775][ T9719] syz_tun: entered allmulticast mode [ 177.984927][ T9719] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1074'. [ 177.996162][ T9718] syz_tun: left allmulticast mode [ 178.057039][ T9721] FAULT_INJECTION: forcing a failure. [ 178.057039][ T9721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.071227][ T9721] CPU: 0 UID: 0 PID: 9721 Comm: syz.4.1075 Not tainted 6.16.0-rc3-syzkaller-00122-g60f7f4afaf6d #0 PREEMPT(full) [ 178.071255][ T9721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.071265][ T9721] Call Trace: [ 178.071273][ T9721] [ 178.071281][ T9721] dump_stack_lvl+0x189/0x250 [ 178.071316][ T9721] ? __pfx____ratelimit+0x10/0x10 [ 178.071355][ T9721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.071384][ T9721] ? __pfx__printk+0x10/0x10 [ 178.071421][ T9721] should_fail_ex+0x414/0x560 [ 178.071452][ T9721] _copy_from_user+0x2d/0xb0 [ 178.071473][ T9721] alg_setkey+0xb8/0x190 [ 178.071500][ T9721] alg_setsockopt+0x3da/0x4a0 [ 178.071524][ T9721] ? __pfx_alg_setsockopt+0x10/0x10 [ 178.071547][ T9721] do_sock_setsockopt+0x25a/0x3e0 [ 178.071573][ T9721] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 178.071600][ T9721] ? __fget_files+0x2a/0x420 [ 178.071634][ T9721] __x64_sys_setsockopt+0x18b/0x220 [ 178.071663][ T9721] do_syscall_64+0xfa/0x3b0 [ 178.071690][ T9721] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.071715][ T9721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.071734][ T9721] ? clear_bhb_loop+0x60/0xb0 [ 178.071758][ T9721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.071776][ T9721] RIP: 0033:0x7fd13f18e929 [ 178.071793][ T9721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.071809][ T9721] RSP: 002b:00007fd13ff41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 178.071830][ T9721] RAX: ffffffffffffffda RBX: 00007fd13f3b5fa0 RCX: 00007fd13f18e929 [ 178.071844][ T9721] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 178.071856][ T9721] RBP: 00007fd13ff41090 R08: 0000000000000000 R09: 0000000000000000 [ 178.071867][ T9721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.071878][ T9721] R13: 0000000000000000 R14: 00007fd13f3b5fa0 R15: 00007ffd7bf3bf58 [ 178.071909][ T9721] [ 178.550897][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1081'. [ 178.874025][ T9749] openvswitch: netlink: Flow key attr not present in new flow. [ 179.147251][ T9760] FAULT_INJECTION: forcing a failure. [ 179.147251][ T9760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.180964][ T9760] CPU: 0 UID: 0 PID: 9760 Comm: syz.2.1089 Not tainted 6.16.0-rc3-syzkaller-00122-g60f7f4afaf6d #0 PREEMPT(full) [ 179.180994][ T9760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 179.181005][ T9760] Call Trace: [ 179.181012][ T9760] [ 179.181020][ T9760] dump_stack_lvl+0x189/0x250 [ 179.181057][ T9760] ? __pfx____ratelimit+0x10/0x10 [ 179.181085][ T9760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.181115][ T9760] ? __pfx__printk+0x10/0x10 [ 179.181151][ T9760] should_fail_ex+0x414/0x560 [ 179.181182][ T9760] _copy_to_user+0x31/0xb0 [ 179.181205][ T9760] simple_read_from_buffer+0xe1/0x170 [ 179.181232][ T9760] proc_fail_nth_read+0x1df/0x250 [ 179.181268][ T9760] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.181301][ T9760] ? rw_verify_area+0x258/0x650 [ 179.181329][ T9760] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.181354][ T9760] vfs_read+0x200/0x980 [ 179.181389][ T9760] ? __pfx___mutex_lock+0x10/0x10 [ 179.181420][ T9760] ? __pfx_vfs_read+0x10/0x10 [ 179.181450][ T9760] ? __fget_files+0x2a/0x420 [ 179.181477][ T9760] ? __fget_files+0x3a0/0x420 [ 179.181497][ T9760] ? __fget_files+0x2a/0x420 [ 179.181528][ T9760] ksys_read+0x145/0x250 [ 179.181555][ T9760] ? __fget_files+0x2a/0x420 [ 179.181577][ T9760] ? __pfx_ksys_read+0x10/0x10 [ 179.181610][ T9760] ? do_syscall_64+0xbe/0x3b0 [ 179.181641][ T9760] do_syscall_64+0xfa/0x3b0 [ 179.181666][ T9760] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.181692][ T9760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.181710][ T9760] ? clear_bhb_loop+0x60/0xb0 [ 179.181733][ T9760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.181750][ T9760] RIP: 0033:0x7f80f558d33c [ 179.181768][ T9760] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 179.181784][ T9760] RSP: 002b:00007f80f33f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 179.181806][ T9760] RAX: ffffffffffffffda RBX: 00007f80f57b5fa0 RCX: 00007f80f558d33c [ 179.181820][ T9760] RDX: 000000000000000f RSI: 00007f80f33f60a0 RDI: 0000000000000004 [ 179.181831][ T9760] RBP: 00007f80f33f6090 R08: 0000000000000000 R09: 0000000000000000 [ 179.181842][ T9760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.181854][ T9760] R13: 0000000000000000 R14: 00007f80f57b5fa0 R15: 00007ffce55c8ff8 [ 179.181888][ T9760] [ 179.776081][ T9787] netlink: 'syz.1.1099': attribute type 10 has an invalid length. [ 179.789055][ T9787] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 179.816229][ T9787] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 180.103927][ T9803] netlink: 'syz.3.1104': attribute type 1 has an invalid length. [ 180.147715][ T9808] netlink: 'syz.3.1104': attribute type 1 has an invalid length. [ 180.346561][ T9815] __nla_validate_parse: 5 callbacks suppressed [ 180.346581][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1108'. [ 180.364512][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1108'. [ 180.515934][ T9826] netlink: 'syz.3.1112': attribute type 8 has an invalid length. [ 180.523907][ T9826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1112'. [ 180.539743][ T9826] bridge0: entered allmulticast mode [ 180.774195][ T9840] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1116'. [ 180.934719][ T9850] netlink: 'syz.1.1118': attribute type 10 has an invalid length. [ 180.944307][ T9850] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1118'. [ 180.960225][ T9850] batadv0: entered promiscuous mode [ 180.973824][ T9850] batadv0: entered allmulticast mode [ 180.987021][ T9853] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1118'. [ 180.992559][ T9850] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 180.996087][ T9853] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1118'. [ 181.346963][ T9865] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1123'. [ 181.358790][ T9865] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1123'. [ 181.599124][ T9878] netlink: 'syz.3.1128': attribute type 3 has an invalid length. [ 181.610661][ T9878] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1128'. [ 181.779246][ T9883] x_tables: duplicate underflow at hook 2 [ 181.840908][ T9887] tipc: Enabling of bearer rejected, failed to enable media [ 181.850855][ T9887] syzkaller0: entered promiscuous mode [ 181.857934][ T9887] syzkaller0: entered allmulticast mode [ 181.871145][ T9888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.047042][ T9931] xt_l2tp: missing protocol rule (udp|l2tpip) [ 183.532395][ T9967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.566208][ T9968] netlink: 'syz.1.1158': attribute type 13 has an invalid length. [ 183.574214][ T9968] netlink: 'syz.1.1158': attribute type 17 has an invalid length. [ 183.628622][ T9968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.656653][ T9968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.797691][ T9974] ipt_REJECT: ECHOREPLY no longer supported. [ 183.863441][ T9978] netlink: 'syz.1.1162': attribute type 7 has an invalid length. [ 184.210918][ T9994] netlink: 'syz.3.1167': attribute type 18 has an invalid length. [ 184.266379][ T9994] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.275928][ T9994] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.284886][ T9994] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.293621][ T9994] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.576702][T10011] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 184.961835][T10034] tipc: Started in network mode [ 184.974097][T10034] tipc: Node identity d60870e33469, cluster identity 4711 [ 184.999461][T10034] tipc: Enabled bearer , priority 0 [ 185.136384][T10034] syzkaller0: entered promiscuous mode [ 185.143826][T10034] syzkaller0: entered allmulticast mode [ 185.150350][T10034] tipc: Resetting bearer [ 185.157661][T10041] netlink: 'syz.3.1183': attribute type 5 has an invalid length. [ 185.200285][T10027] tipc: Resetting bearer [ 185.511806][T10052] __nla_validate_parse: 8 callbacks suppressed [ 185.511830][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1191'. [ 186.047383][ T5890] tipc: Node number set to 3798036707 [ 186.634831][T10027] tipc: Disabling bearer [ 186.949814][T10069] batadv_slave_1: entered promiscuous mode [ 186.997470][T10072] ip6gre2: entered allmulticast mode [ 187.011147][T10064] batadv_slave_1: left promiscuous mode [ 187.020805][T10073] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1196'. [ 187.092747][T10075] tipc: Started in network mode [ 187.114750][T10075] tipc: Node identity 080211, cluster identity 4711 [ 187.135335][T10075] tipc: Enabled bearer , priority 0 [ 187.157289][T10075] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 187.186874][T10075] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 187.212915][T10075] tipc: Enabling of bearer rejected, failed to enable media [ 187.231085][T10075] tipc: Resetting bearer [ 187.239298][T10075] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1198'. [ 187.493307][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 187.503652][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 187.517878][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 187.528991][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 187.546539][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 187.993548][T10113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1207'. [ 188.042447][T10116] netlink: 'syz.3.1210': attribute type 1 has an invalid length. [ 188.069363][T10114] netlink: 'syz.1.1207': attribute type 27 has an invalid length. [ 188.136509][T10116] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.148784][T10124] syz_tun: entered allmulticast mode [ 188.215208][ T5943] tipc: Node number set to 134353152 [ 188.751097][T10093] chnl_net:caif_netlink_parms(): no params data found [ 188.877478][T10156] sctp: [Deprecated]: syz.1.1221 (pid 10156) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.877478][T10156] Use struct sctp_sack_info instead [ 189.136499][T10173] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1226'. [ 189.215949][T10093] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.226079][T10093] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.233503][T10093] bridge_slave_0: entered allmulticast mode [ 189.242166][T10093] bridge_slave_0: entered promiscuous mode [ 189.251799][T10093] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.260481][T10093] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.268931][T10093] bridge_slave_1: entered allmulticast mode [ 189.279139][T10093] bridge_slave_1: entered promiscuous mode [ 189.362311][T10186] netlink: 'syz.3.1230': attribute type 20 has an invalid length. [ 189.430133][T10093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.444394][T10093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.610158][ T5838] Bluetooth: hci5: command tx timeout [ 189.682955][T10093] team0: Port device team_slave_0 added [ 189.708106][T10093] team0: Port device team_slave_1 added [ 189.763392][T10205] netlink: 152064 bytes leftover after parsing attributes in process `syz.2.1237'. [ 189.796460][T10093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.803475][T10093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.834948][T10205] netlink: zone id is out of range [ 189.840369][T10205] netlink: zone id is out of range [ 189.849989][T10093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.865063][T10205] netlink: zone id is out of range [ 189.870230][T10205] netlink: zone id is out of range [ 189.885451][T10205] netlink: zone id is out of range [ 189.895125][T10093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.896564][T10209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1239'. [ 189.904757][T10205] netlink: zone id is out of range [ 189.915822][T10093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.951067][T10093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.962693][T10205] netlink: zone id is out of range [ 189.968268][T10205] netlink: zone id is out of range [ 189.973632][T10205] netlink: zone id is out of range [ 189.980445][T10210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1239'. [ 189.990318][T10205] netlink: zone id is out of range [ 190.152399][T10093] hsr_slave_0: entered promiscuous mode [ 190.164066][T10093] hsr_slave_1: entered promiscuous mode [ 190.176722][T10093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.189704][T10093] Cannot create hsr debugfs directory [ 190.234748][T10220] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 190.298248][T10214] 8021q: adding VLAN 0 to HW filter on device bond4 [ 190.312778][T10214] bond0: (slave bond4): Enslaving as an active interface with an up link [ 190.347270][T10224] netlink: 'syz.1.1244': attribute type 1 has an invalid length. [ 190.393624][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1244'. [ 190.538703][T10224] bond0: entered promiscuous mode [ 190.553571][T10224] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 190.569448][T10224] bond0: left promiscuous mode [ 190.575412][T10224] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 190.643478][T10229] syzkaller1: entered promiscuous mode [ 190.662476][T10229] syzkaller1: entered allmulticast mode [ 190.840956][T10245] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1251'. [ 191.185960][T10093] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 191.241254][T10093] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 191.261473][T10093] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 191.261951][T10265] netlink: 'syz.2.1258': attribute type 1 has an invalid length. [ 191.287193][T10265] netlink: 'syz.2.1258': attribute type 1 has an invalid length. [ 191.292402][T10093] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 191.309282][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1259'. [ 191.333294][T10271] xt_l2tp: v2 tid > 0xffff: 150994944 [ 191.375856][T10271] xt_l2tp: v2 tid > 0xffff: 150994944 [ 191.382497][T10271] xt_l2tp: v2 tid > 0xffff: 150994944 [ 191.390127][T10271] xt_l2tp: v2 tid > 0xffff: 150994944 [ 191.567752][T10285] IPVS: set_ctl: invalid protocol: 255 172.20.20.15:20002 [ 191.598249][T10286] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 191.618396][T10287] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 191.621780][T10093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.638554][T10285] netlink: 'syz.2.1262': attribute type 10 has an invalid length. [ 191.671421][T10093] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.685475][ T5838] Bluetooth: hci5: command tx timeout [ 191.696037][ T9236] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.703259][ T9236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.811750][ T9228] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.819177][ T9228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.404367][T10316] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1270'. [ 192.444076][T10316] 0ªX¹¦D: entered promiscuous mode [ 192.475961][T10316] 0ªX¹¦D: left allmulticast mode [ 192.498159][T10320] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1270'. [ 192.527788][T10320] 1ªX¹¦D: renamed from 30ªX¹¦D [ 192.634904][T10320] 1ªX¹¦D: left promiscuous mode [ 192.647749][T10320] 1ªX¹¦D: entered allmulticast mode [ 192.714267][T10326] syzkaller1: entered promiscuous mode [ 192.739170][T10326] syzkaller1: entered allmulticast mode [ 192.818633][T10093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.173182][T10338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1278'. [ 193.189627][T10338] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1278'. [ 193.430602][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1280'. [ 193.620421][T10356] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 193.647432][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1282'. [ 193.670393][T10093] veth0_vlan: entered promiscuous mode [ 193.733379][T10356] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 193.750835][T10093] veth1_vlan: entered promiscuous mode [ 193.775831][ T5838] Bluetooth: hci5: command tx timeout [ 193.839894][T10093] veth0_macvtap: entered promiscuous mode [ 193.858518][T10093] veth1_macvtap: entered promiscuous mode [ 193.921436][T10093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.954306][T10093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.966961][T10093] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.977261][T10093] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.987117][T10093] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.998094][T10093] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.285199][ T9236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.303959][ T9236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.307485][T10380] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1293'. [ 194.371414][ T9236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.385981][ T9236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.590544][T10393] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1295'. [ 194.899721][T10406] x_tables: duplicate underflow at hook 2 [ 194.911136][T10407] x_tables: duplicate underflow at hook 2 [ 194.968219][T10395] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 194.984201][T10395] bond0 (unregistering): Released all slaves [ 195.222663][T10413] net_ratelimit: 219 callbacks suppressed [ 195.222685][T10413] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 195.596305][T10440] netlink: set zone limit has 8 unknown bytes [ 195.686586][T10446] netlink: 'syz.3.1312': attribute type 10 has an invalid length. [ 195.788564][T10454] netlink: 'syz.3.1312': attribute type 10 has an invalid length. [ 195.845660][ T5838] Bluetooth: hci5: command tx timeout [ 196.142072][ T5943] hid-generic 0005:04F3:FFF9.0001: item fetching failed at offset 0/1 [ 196.156145][ T5943] hid-generic 0005:04F3:FFF9.0001: probe with driver hid-generic failed with error -22 [ 196.357466][T10488] __nla_validate_parse: 3 callbacks suppressed [ 196.357489][T10488] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1324'. [ 196.389965][T10488] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1324'. [ 196.400617][T10486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1325'. [ 196.609311][T10506] tipc: Can't bind to reserved service type 0 [ 196.620948][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1329'. [ 196.647271][T10508] x_tables: duplicate underflow at hook 2 [ 196.750974][T10512] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 197.063194][T10527] tipc: Started in network mode [ 197.070159][T10527] tipc: Node identity ac1414aa, cluster identity 4711 [ 197.082798][T10527] tipc: Enabled bearer , priority 10 [ 197.180552][T10529] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 197.227002][T10533] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 197.445597][T10537] nbd1: detected capacity change from 0 to 63 [ 197.462887][T10543] block nbd1: NBD_DISCONNECT [ 197.479563][T10543] block nbd1: Disconnected due to user request. [ 197.511611][T10543] block nbd1: shutting down sockets [ 197.604343][T10555] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1345'. [ 197.618535][T10555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1345'. [ 197.628279][T10555] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 198.074740][ T8902] tipc: Node number set to 2886997162 [ 198.627992][T10607] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1361'. [ 198.651812][T10607] batadv0: entered promiscuous mode [ 198.658899][T10607] team0: entered promiscuous mode [ 198.670716][T10607] team_slave_0: entered promiscuous mode [ 198.679772][T10607] team_slave_1: entered promiscuous mode [ 198.691153][T10607] hsr2: entered promiscuous mode [ 198.703258][T10613] netlink: 'syz.4.1361': attribute type 1 has an invalid length. [ 198.717710][T10607] hsr2: entered allmulticast mode [ 198.723096][T10613] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1361'. [ 198.738480][T10607] batadv0: entered allmulticast mode [ 198.744079][T10607] team0: entered allmulticast mode [ 198.749646][T10607] team_slave_0: entered allmulticast mode [ 198.755876][T10607] team_slave_1: entered allmulticast mode [ 198.776939][T10615] netlink: 'syz.3.1364': attribute type 1 has an invalid length. [ 198.795777][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1361'. [ 198.820789][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1364'. [ 198.932002][T10626] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 198.949941][T10626] netlink: 'syz.4.1367': attribute type 1 has an invalid length. [ 198.985239][T10628] ip6t_rpfilter: unknown options [ 199.912730][T10665] netlink: 'syz.1.1381': attribute type 1 has an invalid length. [ 200.038798][T10672] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.063025][T10672] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.088752][T10672] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.117339][T10672] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.150863][T10672] geneve2: entered promiscuous mode [ 200.216333][T10672] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.245629][T10672] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.261094][T10672] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.287829][T10672] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.471202][T10697] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 200.494730][T10697] netlink: 'syz.3.1390': attribute type 1 has an invalid length. [ 201.557922][T10726] team0 (unregistering): Port device team_slave_0 removed [ 201.603332][T10726] team0 (unregistering): Port device team_slave_1 removed [ 202.297517][T10785] netlink: 'syz.3.1420': attribute type 39 has an invalid length. [ 202.345022][ T30] audit: type=1800 audit(1751319981.413:3): pid=10787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1419" name="bpf-map" dev="anon_inodefs" ino=1063 res=0 errno=0 [ 203.225361][T10829] netlink: 'syz.1.1432': attribute type 6 has an invalid length. [ 203.252214][T10832] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 203.268724][T10832] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 203.449661][T10837] __nla_validate_parse: 7 callbacks suppressed [ 203.449685][T10837] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1435'. [ 203.517856][T10842] netlink: 'syz.1.1437': attribute type 1 has an invalid length. [ 203.533837][T10842] netlink: 'syz.1.1437': attribute type 4 has an invalid length. [ 203.542455][T10842] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1437'. [ 203.559518][T10842] netlink: 'syz.1.1437': attribute type 1 has an invalid length. [ 203.574369][T10842] netlink: 'syz.1.1437': attribute type 4 has an invalid length. [ 203.621981][T10842] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1437'. [ 203.651163][T10842] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 203.663398][T10846] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 203.874077][T10856] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1442'. [ 203.893312][T10856] : renamed from hsr0 (while UP) [ 204.138617][T10864] netlink: 'syz.1.1445': attribute type 2 has an invalid length. [ 204.345358][T10876] bridge0: port 1(batadv_slave_1) entered blocking state [ 204.354735][T10876] bridge0: port 1(batadv_slave_1) entered disabled state [ 204.407737][T10876] batadv_slave_1: entered allmulticast mode [ 204.425945][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1451'. [ 204.468441][T10876] batadv_slave_1: entered promiscuous mode [ 204.500042][T10876] bridge0: port 1(batadv_slave_1) entered blocking state [ 204.507335][T10876] bridge0: port 1(batadv_slave_1) entered forwarding state [ 204.529895][T10890] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1454'. [ 204.575069][T10890] : renamed from hsr0 [ 204.891087][T10903] openvswitch: netlink: Multiple metadata blocks provided [ 205.067958][T10911] bridge_slave_0: left allmulticast mode [ 205.073686][T10911] bridge_slave_0: left promiscuous mode [ 205.101460][T10911] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.155764][T10911] bridge_slave_1: left allmulticast mode [ 205.161502][T10911] bridge_slave_1: left promiscuous mode [ 205.171914][T10911] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.214106][T10911] team_slave_0: left promiscuous mode [ 205.235684][T10911] team_slave_0: left allmulticast mode [ 205.268217][T10911] team0: Port device team_slave_0 removed [ 205.286915][T10911] team_slave_1: left promiscuous mode [ 205.296953][T10911] team_slave_1: left allmulticast mode [ 205.316053][T10911] team0: Port device team_slave_1 removed [ 205.322713][T10911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.330884][T10911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.341221][T10911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.350879][T10911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.374135][T10911] bond0: (slave veth3): Releasing active interface [ 205.422472][T10926] syz.1.1467 (10926) used obsolete PPPIOCDETACH ioctl [ 205.687669][T10939] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.1473'. [ 205.813938][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1474'. [ 205.961688][T10948] C: renamed from lo (while UP) [ 206.078026][T10965] xt_l2tp: unknown flags: 18 [ 206.113414][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1482'. [ 206.584160][T10992] netlink: 'syz.3.1490': attribute type 1 has an invalid length. [ 206.631672][T10996] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1492'. [ 206.690672][T11003] x_tables: unsorted entry at hook 3 [ 206.700072][T10993] bond3 (unregistering): Released all slaves [ 206.738236][T10992] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 206.808326][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 206.808350][ T5152] Bluetooth: hci2: command 0x0406 tx timeout [ 206.808394][ T5152] Bluetooth: hci3: command 0x0406 tx timeout [ 207.387222][T11032] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 207.493484][T11040] IPVS: length: 123 != 8 [ 207.530391][T11043] xt_l2tp: missing protocol rule (udp|l2tpip) [ 207.536935][T11034] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 208.550988][T11092] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1522'. [ 208.585625][T11092] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 209.417184][T11137] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1534'. [ 209.592201][T11149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1539'. [ 209.620624][T11148] x_tables: duplicate underflow at hook 1 [ 209.648448][T11149] geneve2: entered promiscuous mode [ 209.865503][T11151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.990848][T11160] vlan1: entered allmulticast mode [ 210.009161][T11160] bond0: entered allmulticast mode [ 210.398874][T11185] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 211.223081][T11215] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:0 [ 211.335894][T11224] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1565'. [ 211.867007][T11254] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1575'. [ 212.063479][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1579'. [ 212.081625][T11266] erspan0: entered promiscuous mode [ 212.113957][T11268] netlink: 'syz.1.1579': attribute type 1 has an invalid length. [ 212.270178][T11276] SET target dimension over the limit! [ 212.280589][T11278] syzkaller1: entered promiscuous mode [ 212.291417][T11278] syzkaller1: entered allmulticast mode [ 213.391916][T11335] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1602'. [ 213.495553][T11347] netlink: 'syz.5.1603': attribute type 5 has an invalid length. [ 213.585091][T11352] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 213.618317][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1604'. [ 213.636626][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1604'. [ 213.669545][T11352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1604'. [ 213.686301][T11356] netlink: 'syz.3.1606': attribute type 29 has an invalid length. [ 213.705314][T11356] netlink: 'syz.3.1606': attribute type 29 has an invalid length. [ 213.713992][T11352] openvswitch: netlink: Flow actions attr not present in new flow. [ 213.725910][T11356] netlink: 'syz.3.1606': attribute type 29 has an invalid length. [ 214.167503][T11382] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1615'. [ 214.187514][T11382] netlink: 'syz.1.1615': attribute type 21 has an invalid length. [ 214.225632][T11382] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1615'. [ 214.431901][T11396] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1618'. [ 214.496958][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'. [ 214.606520][T11403] netlink: 'syz.3.1621': attribute type 21 has an invalid length. [ 214.635478][T11406] SET target dimension over the limit! [ 214.635973][T11403] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1621'. [ 214.925026][T11424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1627'. [ 214.982305][T11428] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1625'. [ 215.907422][T11480] netlink: 'syz.3.1639': attribute type 13 has an invalid length. [ 216.019429][T11480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.162151][T11488] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 216.449913][T11503] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.459073][T11503] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.468023][T11503] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.477678][T11503] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.712756][T11516] netlink: 'syz.2.1654': attribute type 1 has an invalid length. [ 216.888523][T11524] xt_hashlimit: max too large, truncated to 1048576 [ 217.244942][T11547] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20006 [ 217.813151][T11586] Dead loop on virtual device ip6_vti0, fix it urgently! [ 217.833579][T11586] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.852248][T11586] team0: Cannot enslave team device to itself [ 218.582751][T11631] netlink: 'syz.3.1684': attribute type 2 has an invalid length. [ 218.629914][T11633] __nla_validate_parse: 15 callbacks suppressed [ 218.629933][T11633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1683'. [ 218.744337][T11637] batadv1: entered allmulticast mode [ 218.851098][T11645] netlink: 'syz.2.1688': attribute type 10 has an invalid length. [ 219.278568][T11673] netlink: 'syz.4.1698': attribute type 23 has an invalid length. [ 219.446068][T11679] netlink: 'syz.4.1701': attribute type 1 has an invalid length. [ 219.453987][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1701'. [ 219.620556][T11688] openvswitch: netlink: Message has 199 unknown bytes. [ 219.628592][T11688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.741679][T11694] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1706'. [ 219.750952][T11694] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1706'. [ 219.907953][T11699] netlink: 'syz.1.1708': attribute type 1 has an invalid length. [ 219.919250][T11699] netlink: 'syz.1.1708': attribute type 11 has an invalid length. [ 219.928812][T11699] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1708'. [ 220.160901][T11709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1712'. [ 221.747687][T11716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1713'. [ 221.949868][T11728] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1715'. [ 221.997305][T11728] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1715'. [ 222.166540][T11736] tipc: Enabling of bearer rejected, failed to enable media [ 222.295349][T11742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1722'. [ 222.422149][T11742] syzkaller0: entered promiscuous mode [ 222.427871][T11742] syzkaller0: entered allmulticast mode [ 224.423819][T11786] netlink: 'syz.2.1735': attribute type 4 has an invalid length. [ 224.673249][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1739'. [ 225.123745][ T9242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.152429][ T9242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.188250][T11833] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.202705][T11833] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.213475][T11833] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.222521][T11833] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.404538][ T8892] syz1: Port: 1 Link DOWN [ 226.653091][T11855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1752'. [ 226.825710][T11866] batman_adv: batadv0: Interface deactivated: dummy0 [ 226.832610][T11866] batman_adv: batadv0: Removing interface: dummy0 [ 226.858667][T11866] batadv_slave_1: left allmulticast mode [ 226.889203][T11866] batadv_slave_1: left promiscuous mode [ 226.907143][T11866] bridge0: port 1(batadv_slave_1) entered disabled state [ 226.935246][T11879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1758'. [ 227.017568][T11871] team0: Mode changed to "activebackup" [ 227.045759][T11871] vlan0: entered promiscuous mode [ 227.050874][T11871] geneve1: entered promiscuous mode [ 227.101042][T11871] team0: Port device vlan0 added [ 227.152569][T11872] tipc: Enabling of bearer rejected, failed to enable media [ 227.160896][T11882] xt_CT: No such helper "syz0" [ 227.203408][T11887] team0: Port device team_slave_0 removed [ 227.222577][T11887] team0: Port device team_slave_1 removed [ 227.234795][T11887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.243906][T11887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.263784][T11887] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 227.274271][T11887] batman_adv: batadv0: Removing interface: ipvlan2 [ 227.296261][T11887] bond3: (slave veth5): Releasing active interface [ 227.312799][T11887] bond0: (slave bond4): Releasing backup interface [ 227.323953][T11898] netlink: 'syz.1.1763': attribute type 1 has an invalid length. [ 227.354397][T11898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.361742][T11898] IPv6: NLM_F_CREATE should be set when creating new route [ 227.386923][T11899] netlink: 'syz.1.1763': attribute type 1 has an invalid length. [ 227.401241][T11899] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.432902][T11889] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.452890][T11902] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1766'. [ 227.509942][T11889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.535750][ T6264] syz1: Port: 1 Link ACTIVE [ 227.548076][T11898] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 227.765365][T11915] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 227.773057][T11915] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 227.782087][T11915] tipc: Resetting bearer [ 228.053452][T11924] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 228.319877][T11935] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1777'. [ 228.378901][T11938] netlink: 'syz.3.1778': attribute type 21 has an invalid length. [ 228.384215][T11937] netlink: 'syz.3.1778': attribute type 21 has an invalid length. [ 228.387102][T11938] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1778'. [ 228.405365][T11937] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1778'. [ 228.413625][T11938] netlink: 'syz.3.1778': attribute type 5 has an invalid length. [ 228.423486][T11938] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1778'. [ 228.433757][T11937] netlink: 'syz.3.1778': attribute type 5 has an invalid length. [ 228.441954][T11937] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1778'. [ 228.451238][T11939] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1777'. [ 228.573437][ T9244] tipc: Resetting bearer [ 228.858209][T11957] veth0_to_bridge: mtu greater than device maximum [ 229.276076][T11982] delete_channel: no stack [ 230.023449][T12014] __nla_validate_parse: 3 callbacks suppressed [ 230.023473][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1799'. [ 230.226860][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1802'. [ 230.898792][T12043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1806'. [ 230.952845][T12043] geneve2: entered promiscuous mode [ 231.082343][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 231.091320][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 231.109217][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 231.131936][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 231.147121][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 231.150454][T12055] veth1_macvtap: left promiscuous mode [ 231.310274][T12067] netlink: 'syz.2.1810': attribute type 13 has an invalid length. [ 231.563041][T12067] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.615457][T12067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.146894][T12099] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig [ 232.527231][T12113] xt_TCPMSS: Only works on TCP SYN packets [ 232.590524][T12123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1823'. [ 232.690716][T12118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.937351][T12054] chnl_net:caif_netlink_parms(): no params data found [ 233.204900][ T5844] Bluetooth: hci6: command tx timeout [ 233.316000][T12154] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 233.456811][T12054] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.471010][T12054] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.492498][T12054] bridge_slave_0: entered allmulticast mode [ 233.501250][T12054] bridge_slave_0: entered promiscuous mode [ 233.519804][T12054] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.533673][T12054] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.567642][T12054] bridge_slave_1: entered allmulticast mode [ 233.576301][T12054] bridge_slave_1: entered promiscuous mode [ 233.598841][T12165] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 233.646163][T12165] netlink: 'syz.2.1835': attribute type 11 has an invalid length. [ 233.830708][T12054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.873468][T12054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.003584][T12054] team0: Port device team_slave_0 added [ 234.041819][T12054] team0: Port device team_slave_1 added [ 234.138588][T12184] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1840'. [ 234.204936][T12187] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1841'. [ 234.219323][T12054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.220690][T12184] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1840'. [ 234.231919][T12054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.279732][T12054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.292905][T12054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.300749][T12054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.329538][T12054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.360331][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1840'. [ 234.580049][T12203] netlink: 'syz.1.1844': attribute type 10 has an invalid length. [ 234.626480][T12203] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1844'. [ 234.672434][T12198] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.689964][T12198] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.803720][T12203] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 234.835173][T12203] team0: Failed to send options change via netlink (err -105) [ 234.842922][T12203] team0: Port device geneve0 added [ 234.958732][T12198] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.004623][T12198] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.061403][T12054] hsr_slave_0: entered promiscuous mode [ 235.086056][T12054] hsr_slave_1: entered promiscuous mode [ 235.092665][T12054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.095515][T12225] netlink: 'syz.4.1854': attribute type 10 has an invalid length. [ 235.117645][T12054] Cannot create hsr debugfs directory [ 235.187878][T12198] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.201447][T12198] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.284732][ T5844] Bluetooth: hci6: command tx timeout [ 235.363755][T12198] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.374918][T12198] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.387065][T12235] xt_l2tp: invalid flags combination: 4 [ 235.517375][T12237] bridge_slave_0: entered promiscuous mode [ 235.697482][T12198] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.711517][T12198] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.747155][T12198] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.761362][T12198] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.789519][T12198] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.799168][T12198] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.833139][T12198] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.843675][T12198] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.968204][T12054] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 236.012415][T12054] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 236.037641][T12054] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 236.066333][T12054] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 236.088062][T12247] netlink: 'syz.4.1861': attribute type 12 has an invalid length. [ 236.361678][T12054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.417645][T12054] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.447952][ T9229] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.455304][ T9229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.542245][ T9229] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.549661][ T9229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.661955][T12266] vlan1: entered promiscuous mode [ 236.668535][T12266] bridge0: entered promiscuous mode [ 237.237981][T12288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1871'. [ 237.263087][T12288] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1871'. [ 237.329358][T12288] : renamed from hsr0 [ 237.372975][ T5838] Bluetooth: hci6: command tx timeout [ 237.474247][T12054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.525934][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 237.599892][T12306] bridge0: entered allmulticast mode [ 237.610600][T12306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1876'. [ 237.823000][T12319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1880'. [ 237.834975][T12319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1880'. [ 238.208194][T12329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1883'. [ 238.217639][T12329] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1883'. [ 238.338926][T12339] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1885'. [ 238.543252][T12054] veth0_vlan: entered promiscuous mode [ 238.582833][T12054] veth1_vlan: entered promiscuous mode [ 238.770745][T12054] veth0_macvtap: entered promiscuous mode [ 238.821436][T12054] veth1_macvtap: entered promiscuous mode [ 238.928083][T12054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.950660][T12054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.978287][T12359] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.985643][T12359] IPv6: NLM_F_CREATE should be set when creating new route [ 238.992921][T12359] IPv6: NLM_F_CREATE should be set when creating new route [ 239.000223][T12359] IPv6: NLM_F_CREATE should be set when creating new route [ 239.011208][T12054] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.022367][T12054] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.033577][T12054] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.056350][T12362] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.063870][T12054] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.183396][T12360] can: request_module (can-proto-3) failed. [ 239.411133][ T9240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.439867][ T9240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.447414][ T5844] Bluetooth: hci6: command tx timeout [ 239.510515][ T30] audit: type=1107 audit(1751320018.573:4): pid=12382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':mÔ¢ÏæÕgQw(ˆ(ì¼}!TØDcaå”ɉ୥ì,œdH÷CdEÍïî¡k‚‡z±ìÙcú쿸Ö\³‘Y<‰¢tùõC¡¡¹ñ!¸êjxçI‹Ï=¸úT5Õ®p&ûå8j†jûÁÆò`ž:ªk$¢ƒaLJ›.MÁqñëMX¸ÁïvlýqŠ?^Ö骙ñû1N\Wz4ø' [ 239.552797][ T9228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.565251][ T9228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.602916][T12386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1898'. [ 239.613523][T12386] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1898'. [ 239.629712][T12386] : renamed from hsr0 (while UP) [ 240.529420][T12418] team1: entered promiscuous mode [ 240.537099][T12418] team1: entered allmulticast mode [ 240.555516][T12425] hsr_slave_0: left promiscuous mode [ 240.563970][T12425] hsr_slave_1: left promiscuous mode [ 240.650196][T12432] netlink: 'syz.2.1913': attribute type 27 has an invalid length. [ 241.190779][T12452] netlink: 'syz.4.1922': attribute type 1 has an invalid length. [ 241.299000][T12452] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.448321][T12456] bond2: (slave veth5): Enslaving as an active interface with a down link [ 241.528002][T12463] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 241.594170][T12452] vlan2: entered allmulticast mode [ 241.602443][T12452] team_slave_0: entered allmulticast mode [ 241.632988][T12452] bond2: (slave vlan2): Opening slave failed [ 241.773176][T12486] openvswitch: netlink: Missing key (keys=40, expected=80) [ 241.848250][T12489] netlink: 'syz.4.1931': attribute type 30 has an invalid length. [ 241.919592][T12489] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 241.932368][T12489] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 242.142665][T12505] x_tables: duplicate underflow at hook 3 [ 242.613949][T12529] __nla_validate_parse: 5 callbacks suppressed [ 242.613971][T12529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1942'. [ 243.070777][T12541] tipc: Enabling of bearer rejected, media not registered [ 243.449337][T12559] 8021q: VLANs not supported on ip6tnl0 [ 243.740982][T12567] netlink: 'syz.4.1950': attribute type 11 has an invalid length. [ 243.760015][T12567] netlink: 'syz.4.1950': attribute type 11 has an invalid length. [ 243.779931][T12567] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1950'. [ 244.600035][T12612] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1963'. [ 245.000340][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1967'. [ 245.487058][T12655] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1975'. [ 245.836880][T12671] netlink: 'syz.1.1980': attribute type 1 has an invalid length. [ 245.861946][T12671] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1980'. [ 245.897566][T12671] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1980'. [ 245.948984][T12680] : renamed from hsr0 (while UP) [ 246.173442][ T6264] IPVS: starting estimator thread 0... [ 246.196121][T12692] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 246.280425][T12690] IPVS: using max 27 ests per chain, 64800 per kthread [ 246.937915][T12721] xfrm0: entered promiscuous mode [ 246.952842][T12721] xfrm0: entered allmulticast mode [ 247.034130][T12732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1998'. [ 247.599555][T12757] xt_CONNSECMARK: invalid mode: 0 [ 247.626416][T12756] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 248.110387][T12775] pim6reg: entered allmulticast mode [ 248.169421][T12784] pim6reg: left allmulticast mode [ 249.534709][T12848] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2035'. [ 249.579844][T12848] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2035'. [ 249.581162][T12850] delete_channel: no stack [ 249.613128][T12853] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2038'. [ 249.654230][T12853] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2038'. [ 249.739812][T12857] netlink: 'syz.4.2038': attribute type 8 has an invalid length. [ 249.749669][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2038'. [ 249.783794][T12857] bridge0: entered allmulticast mode [ 250.077821][T12880] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2048'. [ 250.158560][T12885] tipc: Enabling of bearer rejected, failed to enable media [ 250.543716][T12896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2055'. [ 250.548468][T12900] netlink: 'syz.4.2056': attribute type 21 has an invalid length. [ 250.565732][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2054'. [ 250.581773][T12900] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2056'. [ 250.709508][T12906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2056'. [ 251.477343][T12949] netlink: 'syz.1.2072': attribute type 3 has an invalid length. [ 251.603482][T12951] netlink: 'syz.1.2072': attribute type 3 has an invalid length. [ 251.963644][T12971] tipc: Enabled bearer , priority 0 [ 252.260200][T12967] tipc: Disabling bearer [ 252.528969][T13006] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 252.811343][T13018] netlink: 'syz.6.2093': attribute type 21 has an invalid length. [ 253.355229][T13036] netlink: 'syz.4.2102': attribute type 5 has an invalid length. [ 253.716669][T13046] pim6reg: left allmulticast mode [ 253.792765][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 253.807345][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 253.821768][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 253.852840][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 253.861773][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 254.633466][T13092] __nla_validate_parse: 10 callbacks suppressed [ 254.633489][T13092] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2113'. [ 254.816668][T13103] netlink: 348 bytes leftover after parsing attributes in process `syz.6.2118'. [ 254.829889][T13051] chnl_net:caif_netlink_parms(): no params data found [ 254.954841][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2120'. [ 255.130448][T13051] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.145028][T13051] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.152349][T13051] bridge_slave_0: entered allmulticast mode [ 255.160778][T13051] bridge_slave_0: entered promiscuous mode [ 255.170752][T13051] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.178318][T13051] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.200653][T13051] bridge_slave_1: entered allmulticast mode [ 255.216850][T13051] bridge_slave_1: entered promiscuous mode [ 255.482987][T13051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.493282][T13132] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.2126'. [ 255.513404][T13051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.653706][T13051] team0: Port device team_slave_0 added [ 255.692736][T13051] team0: Port device team_slave_1 added [ 255.765840][T13148] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2130'. [ 255.789517][T13148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2130'. [ 255.894671][T13051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.901689][T13051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.945397][ T5844] Bluetooth: hci1: command tx timeout [ 256.029267][T13051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.033002][T13157] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2134'. [ 256.091918][T13051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.103173][T13051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.168257][T13051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.394079][T13051] hsr_slave_0: entered promiscuous mode [ 256.435840][T13051] hsr_slave_1: entered promiscuous mode [ 256.442038][T13051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.458538][T13051] Cannot create hsr debugfs directory [ 256.465342][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2137'. [ 256.475206][T13169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2137'. [ 256.660598][T13176] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.2140'. [ 257.870130][T13051] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 257.932615][T13051] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 257.999471][T13051] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 258.013596][ T5844] Bluetooth: hci1: command tx timeout [ 258.040054][T13051] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 258.393226][T13051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.446585][T13258] bridge0: failed insert local address into bridge forwarding table [ 258.501060][T13051] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.543273][ T9241] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.550552][ T9241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.609827][ T9241] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.617082][ T9241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.151019][T13287] No such timeout policy "syz0" [ 259.340427][T13051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.609546][T13051] veth0_vlan: entered promiscuous mode [ 259.699790][T13051] veth1_vlan: entered promiscuous mode [ 259.709638][T13309] __nla_validate_parse: 7 callbacks suppressed [ 259.709661][T13309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2180'. [ 259.729330][T13311] netlink: 'syz.1.2181': attribute type 3 has an invalid length. [ 259.749156][T13311] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2181'. [ 259.786889][T13315] netlink: 'syz.1.2181': attribute type 3 has an invalid length. [ 259.798082][T13315] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2181'. [ 259.877622][T13051] veth0_macvtap: entered promiscuous mode [ 259.929384][T13051] veth1_macvtap: entered promiscuous mode [ 259.989528][T13051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.081348][T13051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.098597][ T5844] Bluetooth: hci1: command tx timeout [ 260.109258][T13051] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.131690][T13051] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.147910][T13051] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.157006][T13051] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.347217][T13334] unsupported nlmsg_type 40 [ 260.425950][T13337] xfrm0: entered promiscuous mode [ 260.436439][T13337] xfrm0: entered allmulticast mode [ 260.457178][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2190'. [ 260.600827][ T9229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.620871][ T9229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.758425][ T9228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.784518][ T9228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.912670][T13356] netlink: 'syz.4.2198': attribute type 3 has an invalid length. [ 260.921625][T13355] netlink: 'syz.3.2197': attribute type 1 has an invalid length. [ 260.995357][T13361] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2197'. [ 260.996996][T13355] 8021q: adding VLAN 0 to HW filter on device bond3 [ 261.127209][T13361] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2197'. [ 261.200041][T13355] bond3: (slave veth7): Enslaving as an active interface with a down link [ 261.248961][T13355] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2197'. [ 262.529973][T13414] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 262.588074][T13414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2218'. [ 262.722671][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 262.732053][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 262.741148][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 262.752050][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 262.760128][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 263.070375][T13416] batadv0: left promiscuous mode [ 263.085044][T13416] batadv0: left allmulticast mode [ 263.409504][T13416] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 263.492968][T13414] syz_tun (unregistering): left allmulticast mode [ 263.502892][T13414] syz_tun (unregistering): left promiscuous mode [ 263.576808][ T6263] infiniband syz1: ib_query_port failed (-19) [ 263.881890][T13440] sch_fq: defrate 0 ignored. [ 263.955026][T13445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2226'. [ 264.042762][T13445] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2226'. [ 264.246751][ T5838] Bluetooth: hci6: command 0x0405 tx timeout [ 264.272233][T13422] chnl_net:caif_netlink_parms(): no params data found [ 264.383692][T13461] wg1: entered promiscuous mode [ 264.403505][T13464] netlink: 'syz.3.2228': attribute type 1 has an invalid length. [ 264.468124][T13459] batman_adv: batadv0: Adding interface: dummy0 [ 264.475344][T13459] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.508514][T13459] batman_adv: batadv0: Interface activated: dummy0 [ 264.536153][T13468] batadv0: mtu less than device minimum [ 264.552143][T13468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 264.563560][T13468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 264.575219][T13468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 264.586580][T13468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 264.597826][T13468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 264.609146][T13468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 264.620427][T13468] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 264.753412][T13422] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.767036][T13422] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.775454][T13422] bridge_slave_0: entered allmulticast mode [ 264.783893][T13422] bridge_slave_0: entered promiscuous mode [ 264.807652][ T5838] Bluetooth: hci1: command tx timeout [ 264.821793][T13422] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.838614][T13422] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.855014][T13422] bridge_slave_1: entered allmulticast mode [ 264.874011][T13422] bridge_slave_1: entered promiscuous mode [ 264.990301][T13422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.029702][T13422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.199774][T13422] team0: Port device team_slave_0 added [ 265.299443][T13422] team0: Port device team_slave_1 added [ 265.453445][T13422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.484190][T13422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.538898][T13422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.568961][T13422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.584641][T13422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.622044][T13422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.879368][T13422] hsr_slave_0: entered promiscuous mode [ 265.893308][T13422] hsr_slave_1: entered promiscuous mode [ 265.936906][T13422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.952229][T13422] Cannot create hsr debugfs directory [ 266.356546][T13526] __nla_validate_parse: 2 callbacks suppressed [ 266.356569][T13526] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2248'. [ 266.818337][T13538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2253'. [ 266.880403][T13538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2253'. [ 266.902754][ T5838] Bluetooth: hci1: command tx timeout [ 267.149657][T13552] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2260'. [ 267.393496][T13422] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.559249][T13422] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.680944][T13422] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.785258][T13576] net_ratelimit: 12 callbacks suppressed [ 267.785281][T13576] openvswitch: netlink: Missing key (keys=40, expected=80) [ 267.878937][T13422] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.939771][T13581] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2268'. [ 268.054714][T13583] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2270'. [ 268.083679][T13586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2271'. [ 268.434058][T13422] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 268.475276][T13422] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 268.544036][T13422] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 268.606893][T13422] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 268.655102][T13608] bridge_slave_0: entered promiscuous mode [ 268.670056][T13608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2277'. [ 268.722516][T13618] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2278'. [ 268.966886][ T5838] Bluetooth: hci1: command tx timeout [ 269.007932][T13422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.040048][T13422] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.050081][ T9240] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 269.059884][ T9240] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 269.075456][ T6263] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 269.087335][ T9241] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.094613][ T9241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.121726][ T9228] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.128971][ T9228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.456888][T13636] ip6t_rpfilter: unknown options [ 269.622634][T13647] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2288'. [ 269.665365][ T6264] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 269.850215][ T6264] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 269.880200][T13655] SET target dimension over the limit! [ 269.887881][T13422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.015967][T13422] veth0_vlan: entered promiscuous mode [ 270.051507][T13422] veth1_vlan: entered promiscuous mode [ 270.338837][T13422] veth0_macvtap: entered promiscuous mode [ 270.395869][T13667] batman_adv: batadv0: Interface deactivated: dummy0 [ 270.417764][T13667] batman_adv: batadv0: Removing interface: dummy0 [ 270.456433][T13667] bridge_slave_0: left allmulticast mode [ 270.462148][T13667] bridge_slave_0: left promiscuous mode [ 270.481603][T13667] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.516322][T13667] bridge_slave_1: left allmulticast mode [ 270.543116][T13667] bridge_slave_1: left promiscuous mode [ 270.555939][T13667] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.587012][T13667] bond0: (slave bond_slave_0): Releasing backup interface [ 270.642214][T13667] bond0: (slave bond_slave_1): Releasing backup interface [ 270.707617][T13667] team0: Port device team_slave_0 removed [ 270.747733][T13667] team0: Port device team_slave_1 removed [ 270.767466][T13667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.778141][T13667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.790195][T13667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.798412][T13667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.828405][T13422] veth1_macvtap: entered promiscuous mode [ 271.044807][ T5838] Bluetooth: hci1: command tx timeout [ 271.067360][T13422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.091085][T13422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.134155][T13422] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.144952][T13422] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.153805][T13422] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.162737][T13422] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.481601][ T9242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.509729][ T9242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.652936][ T9228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.673702][ T9228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.060368][T13729] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.2314'. [ 272.319506][T13734] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2316'. [ 272.397831][T13734] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2316'. [ 272.426900][T13734] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2316'. [ 272.908548][T13745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2320'. [ 272.932720][T13745] netlink: 'syz.3.2320': attribute type 2 has an invalid length. [ 272.970971][T13745] netlink: 'syz.3.2320': attribute type 1 has an invalid length. [ 272.988229][T13749] netlink: 'syz.3.2320': attribute type 2 has an invalid length. [ 273.035172][T13745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2320'. [ 273.374722][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 273.519460][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.532958][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.542711][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.551185][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.561491][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.871085][T13775] netlink: 'syz.3.2327': attribute type 72 has an invalid length. [ 273.933136][T13780] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2329'. [ 273.954006][T13768] chnl_net:caif_netlink_parms(): no params data found [ 273.965713][T13780] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2329'. [ 274.222606][T13792] netlink: 'syz.4.2331': attribute type 10 has an invalid length. [ 274.246468][T13792] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2331'. [ 274.341271][T13792] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.368388][T13792] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.380749][T13792] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.397144][T13792] geneve0: entered promiscuous mode [ 274.402855][T13792] geneve0: entered allmulticast mode [ 274.413431][T13792] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 274.430892][T13792] team0: Failed to send options change via netlink (err -105) [ 274.438712][T13792] team0: Port device geneve0 added [ 274.515708][T13785] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.552583][T13768] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.567389][T13768] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.583944][T13768] bridge_slave_0: entered allmulticast mode [ 274.605295][T13768] bridge_slave_0: entered promiscuous mode [ 274.630058][T13768] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.646835][T13768] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.661863][T13768] bridge_slave_1: entered allmulticast mode [ 274.670628][T13768] bridge_slave_1: entered promiscuous mode [ 274.697181][T13785] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.761421][T13806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.783285][T13809] geneve2: entered promiscuous mode [ 274.788754][T13809] geneve2: entered allmulticast mode [ 274.918194][T13785] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.973230][T13768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.008736][T13768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.063914][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2339'. [ 275.200781][T13768] team0: Port device team_slave_0 added [ 275.253287][T13768] team0: Port device team_slave_1 added [ 275.422884][T13785] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.440393][T13768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.448823][T13768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.477190][T13768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.528206][T13785] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.538769][T13768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.552194][T13768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.580623][T13768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.604830][ T5838] Bluetooth: hci1: command tx timeout [ 275.611459][T13785] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.644307][T13785] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.740367][T13768] hsr_slave_0: entered promiscuous mode [ 275.754097][T13768] hsr_slave_1: entered promiscuous mode [ 275.762159][T13768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.770133][T13768] Cannot create hsr debugfs directory [ 276.091144][T13845] netlink: 'syz.6.2349': attribute type 1 has an invalid length. [ 276.242833][T13768] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.657842][T13768] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.671701][T13864] netlink: 'syz.4.2354': attribute type 1 has an invalid length. [ 276.696142][T13864] netlink: 'syz.4.2354': attribute type 10 has an invalid length. [ 276.704031][T13864] netlink: 'syz.4.2354': attribute type 4 has an invalid length. [ 276.827100][T13768] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.939767][T13768] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.098656][T13877] __nla_validate_parse: 3 callbacks suppressed [ 277.098680][T13877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2358'. [ 277.146876][T13877] netlink: 'syz.4.2358': attribute type 4 has an invalid length. [ 277.465344][T13887] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2361'. [ 277.592243][T13768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 277.632054][T13768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 277.683554][T13898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2364'. [ 277.694876][ T5838] Bluetooth: hci1: command tx timeout [ 277.714104][T13768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 277.755931][T13768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 277.894781][T13903] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2366'. [ 278.013014][T13916] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.2368'. [ 278.123815][T13768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.188809][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2369'. [ 278.200660][T13921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2369'. [ 278.222539][T13768] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.269781][ T9228] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.277060][ T9228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.403774][ T9242] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.411050][ T9242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.717382][T13768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 278.749569][T13768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.098891][T13962] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2381'. [ 279.421705][T13768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.636169][T13985] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 279.681250][T13989] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2389'. [ 279.703405][T13768] veth0_vlan: entered promiscuous mode [ 279.764368][T13768] veth1_vlan: entered promiscuous mode [ 279.770511][ T5838] Bluetooth: hci1: command tx timeout [ 279.808840][T13993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.841163][T13994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.967326][T13768] veth0_macvtap: entered promiscuous mode [ 280.011173][T13768] veth1_macvtap: entered promiscuous mode [ 280.069096][T13768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.108988][T13768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.183380][T14006] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2391'. [ 280.213179][T13768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.242615][T13768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.273768][T13768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.283196][T13768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.308698][T14006] gretap0: entered promiscuous mode [ 280.590151][ T9236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.608733][ T9236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.735463][ T9240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.744354][ T9240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.165346][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 282.603195][T14078] __nla_validate_parse: 1 callbacks suppressed [ 282.603217][T14078] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2413'. [ 282.685575][T14078] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2413'. [ 282.858602][T14084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2415'. [ 283.133868][T14095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2418'. [ 283.191045][T14095] validate_nla: 1 callbacks suppressed [ 283.191066][T14095] netlink: 'syz.3.2418': attribute type 1 has an invalid length. [ 283.216044][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 283.226999][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 283.241304][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 283.250751][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 283.260011][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 283.333901][T14100] netlink: 'syz.3.2418': attribute type 1 has an invalid length. [ 283.457665][T14109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2422'. [ 283.569710][T14109] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2422'. [ 283.968149][T14129] tipc: Started in network mode [ 283.988712][T14129] tipc: Node identity 06e2e0bffc56, cluster identity 4711 [ 284.008240][T14129] tipc: Enabled bearer , priority 0 [ 284.073972][T14126] syzkaller0: entered promiscuous mode [ 284.081324][T14126] syzkaller0: entered allmulticast mode [ 284.208025][T14126] tipc: Resetting bearer [ 284.228534][T14141] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2432'. [ 284.239685][T14123] tipc: Resetting bearer [ 284.318765][T14123] tipc: Disabling bearer [ 284.458296][T14098] chnl_net:caif_netlink_parms(): no params data found [ 284.549312][T14149] netlink: 'syz.6.2436': attribute type 3 has an invalid length. [ 284.574855][T14149] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.2436'. [ 284.892407][T14098] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.925133][T14098] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.932790][T14098] bridge_slave_0: entered allmulticast mode [ 284.953873][T14098] bridge_slave_0: entered promiscuous mode [ 285.008792][T14098] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.033007][T14098] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.048141][T14098] bridge_slave_1: entered allmulticast mode [ 285.057047][T14098] bridge_slave_1: entered promiscuous mode [ 285.315527][T14180] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2441'. [ 285.366730][ T5838] Bluetooth: hci1: command tx timeout [ 285.445119][T14183] xt_TPROXY: Can be used only with -p tcp or -p udp [ 285.461610][T14098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.491177][T14098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.645564][T14098] team0: Port device team_slave_0 added [ 285.661353][T14098] team0: Port device team_slave_1 added [ 285.691699][T14194] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2446'. [ 285.790303][T14098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.797916][T14098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.834735][T14098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.866313][T14098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.873620][T14098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.900416][T14098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.989615][T14098] hsr_slave_0: entered promiscuous mode [ 285.996580][T14098] hsr_slave_1: entered promiscuous mode [ 286.002843][T14098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.015582][T14098] Cannot create hsr debugfs directory [ 286.032577][T14200] netlink: 'syz.3.2449': attribute type 13 has an invalid length. [ 286.057370][T14200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.366356][T14098] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.538963][T14098] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.739919][T14098] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.947607][T14098] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.021536][T14231] openvswitch: netlink: IP tunnel TTL not specified. [ 287.219976][T14239] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20000 [ 287.234113][T14239] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20000 [ 287.360291][T14098] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 287.390408][T14098] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 287.404815][T14098] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 287.419797][T14098] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 287.445713][ T5838] Bluetooth: hci1: command tx timeout [ 287.539203][T14098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.565225][T14098] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.579627][ T9228] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.586848][ T9228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.603464][ T9240] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.610617][ T9240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.058185][T14098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.185861][T14268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2467'. [ 288.186535][T14098] veth0_vlan: entered promiscuous mode [ 288.230163][T14098] veth1_vlan: entered promiscuous mode [ 288.240514][T14268] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2467'. [ 288.276557][T14268] netlink: 'syz.1.2467': attribute type 21 has an invalid length. [ 288.377915][T14098] veth0_macvtap: entered promiscuous mode [ 288.418118][T14098] veth1_macvtap: entered promiscuous mode [ 288.469584][T14098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.505745][T14098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.553618][T14282] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2471'. [ 288.577456][T14098] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.579062][T14281] delete_channel: no stack [ 288.598918][T14098] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.614664][T14098] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.623434][T14098] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.783931][T14289] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2474'. [ 288.896873][ T9241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.934513][ T9241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.080167][ T9240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.131403][ T9240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.708580][T14310] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 289.805353][T14317] tipc: Enabling of bearer rejected, failed to enable media [ 289.963560][T14321] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2486'. [ 290.481801][T14343] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2492'. [ 290.545739][T14344] netlink: 'syz.1.2494': attribute type 11 has an invalid length. [ 290.584301][T14344] netlink: 'syz.1.2494': attribute type 11 has an invalid length. [ 290.634967][T14344] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2494'. [ 290.802483][T14353] netlink: 'syz.6.2496': attribute type 1 has an invalid length. [ 291.855150][T14371] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2502'. [ 292.060673][T14380] netlink: 'syz.4.2507': attribute type 1 has an invalid length. [ 292.142232][T14384] x_tables: duplicate underflow at hook 2 [ 292.477696][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 292.499187][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 292.513411][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 292.523264][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 292.534611][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 292.702542][T14405] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2516'. [ 292.952364][T14417] sctp: [Deprecated]: syz.3.2521 (pid 14417) Use of int in maxseg socket option. [ 292.952364][T14417] Use struct sctp_assoc_value instead [ 292.984157][T14415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.162975][T14415] syzkaller1: entered promiscuous mode [ 293.195011][T14415] syzkaller1: entered allmulticast mode [ 293.553603][T14394] chnl_net:caif_netlink_parms(): no params data found [ 293.779300][T14449] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2529'. [ 294.180364][T14394] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.200040][T14394] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.235716][T14394] bridge_slave_0: entered allmulticast mode [ 294.268970][T14473] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2536'. [ 294.277339][T14394] bridge_slave_0: entered promiscuous mode [ 294.313279][T14394] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.334788][T14394] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.357451][T14394] bridge_slave_1: entered allmulticast mode [ 294.376969][T14394] bridge_slave_1: entered promiscuous mode [ 294.656298][ T5844] Bluetooth: hci1: command tx timeout [ 294.668148][T14394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.699489][T14394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.757428][T14492] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2541'. [ 294.776820][T14394] team0: Port device team_slave_0 added [ 294.809342][T14394] team0: Port device team_slave_1 added [ 294.988429][T14394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.008714][T14394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.098805][T14394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.161678][T14394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.194643][T14394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.263288][T14394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.526354][T14394] hsr_slave_0: entered promiscuous mode [ 295.550327][T14394] hsr_slave_1: entered promiscuous mode [ 295.581614][T14394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.611612][T14394] Cannot create hsr debugfs directory [ 295.693886][T14526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.033539][T14535] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2553'. [ 296.068539][T14536] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2555'. [ 296.097614][T14535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2553'. [ 296.158995][T14539] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2556'. [ 296.200472][T14540] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2556'. [ 296.303421][T14543] netlink: 'syz.3.2558': attribute type 1 has an invalid length. [ 296.323690][T14543] netlink: 'syz.3.2558': attribute type 11 has an invalid length. [ 296.333445][T14543] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2558'. [ 296.598623][T14394] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.725224][ T5844] Bluetooth: hci1: command tx timeout [ 296.829341][T14394] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.033188][T14394] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.061131][T14586] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2568'. [ 297.301256][T14394] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.475567][T14604] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 297.520322][T14604] ip6t_srh: unknown srh invflags 4449 [ 297.758416][T14394] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 297.811602][T14394] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 297.882377][T14394] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 297.915859][T14394] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 298.240276][T14394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.303825][T14394] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.346231][ T9236] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.353352][ T9236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.376406][ T9229] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.383706][ T9229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.395850][T14640] syz.4.2582: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 298.442468][T14640] CPU: 0 UID: 0 PID: 14640 Comm: syz.4.2582 Not tainted 6.16.0-rc3-syzkaller-00122-g60f7f4afaf6d #0 PREEMPT(full) [ 298.442502][T14640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 298.442514][T14640] Call Trace: [ 298.442523][T14640] [ 298.442531][T14640] dump_stack_lvl+0x189/0x250 [ 298.442575][T14640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.442606][T14640] ? __pfx__printk+0x10/0x10 [ 298.442631][T14640] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 298.442655][T14640] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 298.442681][T14640] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 298.442706][T14640] warn_alloc+0x214/0x310 [ 298.442730][T14640] ? stack_depot_save_flags+0x40/0x900 [ 298.442762][T14640] ? __pfx_warn_alloc+0x10/0x10 [ 298.442788][T14640] ? kasan_save_track+0x4f/0x80 [ 298.442827][T14640] ? xskq_create+0x56/0x170 [ 298.442854][T14640] ? xsk_init_queue+0xb0/0x110 [ 298.442878][T14640] ? xsk_setsockopt+0x43f/0x710 [ 298.442902][T14640] ? do_sock_setsockopt+0x25a/0x3e0 [ 298.442923][T14640] ? __x64_sys_setsockopt+0x18b/0x220 [ 298.442944][T14640] ? do_syscall_64+0xfa/0x3b0 [ 298.442972][T14640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.443004][T14640] __vmalloc_node_range_noprof+0x125/0x12f0 [ 298.443066][T14640] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 298.443090][T14640] ? xskq_create+0x56/0x170 [ 298.443120][T14640] ? __kasan_kmalloc+0x93/0xb0 [ 298.443143][T14640] vmalloc_user_noprof+0xad/0xf0 [ 298.443167][T14640] ? xskq_create+0xbf/0x170 [ 298.443196][T14640] xskq_create+0xbf/0x170 [ 298.443229][T14640] xsk_init_queue+0xb0/0x110 [ 298.443260][T14640] xsk_setsockopt+0x43f/0x710 [ 298.443289][T14640] ? __pfx_xsk_setsockopt+0x10/0x10 [ 298.443313][T14640] ? __lock_acquire+0xab9/0xd20 [ 298.443352][T14640] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 298.443376][T14640] ? __pfx_xsk_setsockopt+0x10/0x10 [ 298.443403][T14640] do_sock_setsockopt+0x25a/0x3e0 [ 298.443430][T14640] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 298.443460][T14640] ? __fget_files+0x2a/0x420 [ 298.443493][T14640] __x64_sys_setsockopt+0x18b/0x220 [ 298.443525][T14640] do_syscall_64+0xfa/0x3b0 [ 298.443553][T14640] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.443581][T14640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.443600][T14640] ? clear_bhb_loop+0x60/0xb0 [ 298.443625][T14640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.443645][T14640] RIP: 0033:0x7fd13f18e929 [ 298.443664][T14640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.443682][T14640] RSP: 002b:00007fd13ff20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 298.443706][T14640] RAX: ffffffffffffffda RBX: 00007fd13f3b6080 RCX: 00007fd13f18e929 [ 298.443721][T14640] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 298.443734][T14640] RBP: 00007fd13f210b39 R08: 0000000000000004 R09: 0000000000000000 [ 298.443747][T14640] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.443759][T14640] R13: 0000000000000000 R14: 00007fd13f3b6080 R15: 00007ffd7bf3bf58 [ 298.443795][T14640] [ 298.443803][T14640] Mem-Info: [ 298.806212][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 298.813609][T14640] active_anon:5027 inactive_anon:0 isolated_anon:0 [ 298.813609][T14640] active_file:1696 inactive_file:39929 isolated_file:0 [ 298.813609][T14640] unevictable:768 dirty:57 writeback:0 [ 298.813609][T14640] slab_reclaimable:11635 slab_unreclaimable:147116 [ 298.813609][T14640] mapped:39536 shmem:1368 pagetables:1184 [ 298.813609][T14640] sec_pagetables:0 bounce:0 [ 298.813609][T14640] kernel_misc_reclaimable:0 [ 298.813609][T14640] free:1252745 free_pcp:13064 free_cma:0 [ 298.821992][ T5844] Bluetooth: hci1: command tx timeout [ 298.904800][T14640] Node 0 active_anon:20008kB inactive_anon:0kB active_file:6784kB inactive_file:159512kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158144kB dirty:224kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16692kB pagetables:4604kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 299.005206][T14640] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 299.056480][T14640] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 299.088716][T14640] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 299.096915][T14640] Node 0 DMA32 free:1094936kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19972kB inactive_anon:0kB active_file:6784kB inactive_file:157688kB unevictable:1536kB writepending:256kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:31964kB local_pcp:17336kB free_cma:0kB [ 299.139820][T14640] lowmem_reserve[]: 0 0 1 1 1 [ 299.145662][T14640] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 299.176616][T14640] lowmem_reserve[]: 0 0 0 0 0 [ 299.181511][T14640] Node 1 Normal free:3900924kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19968kB local_pcp:10560kB free_cma:0kB [ 299.230588][T14640] lowmem_reserve[]: 0 0 0 0 0 [ 299.250956][T14659] lo: entered promiscuous mode [ 299.251911][T14640] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 299.286119][T14659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.295666][T14640] Node 0 DMA32: 502*4kB (UME) 382*8kB (ME) 185*16kB (UM) 136*32kB (UME) 48*64kB (UME) 16*128kB (M) 15*256kB (UM) 23*512kB (ME) 3*1024kB (UM) 1*2048kB (M) 258*4096kB (M) = 1095000kB [ 299.348540][ T8892] lo speed is unknown, defaulting to 1000 [ 299.354343][ T8892] syz2: Port: 1 Link DOWN [ 299.378529][T14663] netlink: 'syz.6.2589': attribute type 10 has an invalid length. [ 299.397886][T14663] veth0_vlan: entered allmulticast mode [ 299.403596][T14640] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 299.453385][T14640] Node 1 Normal: 181*4kB (UME) 47*8kB (UME) 38*16kB (UME) 101*32kB (UME) 38*64kB (UME) 13*128kB (UME) 5*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 948*4096kB (M) = 3901004kB [ 299.475452][T14640] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 299.500354][T14667] __nla_validate_parse: 12 callbacks suppressed [ 299.500374][T14667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2590'. [ 299.520046][T14640] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 299.526501][T14663] veth0_vlan: left promiscuous mode [ 299.550606][T14640] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 299.573450][T14640] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 299.576270][T14663] veth0_vlan: entered promiscuous mode [ 299.593445][T14640] 42989 total pagecache pages [ 299.605447][T14640] 0 pages in swap cache [ 299.614193][T14640] Free swap = 124996kB [ 299.623064][T14640] Total swap = 124996kB [ 299.626107][T14663] team0: Device veth0_vlan failed to register rx_handler [ 299.633169][T14640] 2097051 pages RAM [ 299.640976][T14640] 0 pages HighMem/MovableOnly [ 299.646560][T14640] 424694 pages reserved [ 299.650805][T14640] 0 pages cma reserved [ 299.786352][T14394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.009260][T14394] veth0_vlan: entered promiscuous mode [ 300.061387][T14394] veth1_vlan: entered promiscuous mode [ 300.316852][T14682] syzkaller0: entered promiscuous mode [ 300.322451][T14682] syzkaller0: entered allmulticast mode [ 300.359839][T14394] veth0_macvtap: entered promiscuous mode [ 300.411371][T14394] veth1_macvtap: entered promiscuous mode [ 300.901152][ T5838] Bluetooth: hci1: command tx timeout [ 302.667466][T14718] netlink: 'syz.3.2604': attribute type 13 has an invalid length. [ 302.671447][T14394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.692692][T14718] netlink: 'syz.3.2604': attribute type 58 has an invalid length. [ 302.711789][T14718] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2604'. [ 302.735264][T14394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.788261][T14394] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.819675][T14394] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.847959][T14394] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.867320][T14394] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.959070][T14728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2607'. [ 303.173994][ T9242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.231256][ T9242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.357314][ T9242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.367036][ T9242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.111557][T14775] veth0: entered promiscuous mode [ 305.119369][T14775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2621'. [ 305.177074][T14775] veth0 (unregistering): left promiscuous mode [ 305.283066][T14777] No such timeout policy "syz0" [ 305.682189][T14796] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2628'. [ 305.709685][T14797] netlink: 'syz.6.2627': attribute type 10 has an invalid length. [ 305.793932][T14798] netlink: 'syz.6.2627': attribute type 1 has an invalid length. [ 305.831966][T14798] netlink: 236 bytes leftover after parsing attributes in process `syz.6.2627'. [ 305.833476][T14797] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 305.981591][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 305.991491][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 305.999948][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 306.011566][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 306.022280][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.698232][T14806] chnl_net:caif_netlink_parms(): no params data found [ 306.833485][T14841] netlink: 'syz.3.2641': attribute type 1 has an invalid length. [ 306.917402][T14844] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2642'. [ 306.955184][T14806] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.965319][T14806] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.982940][T14806] bridge_slave_0: entered allmulticast mode [ 307.010310][T14806] bridge_slave_0: entered promiscuous mode [ 307.076065][T14806] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.097456][T14806] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.119446][T14806] bridge_slave_1: entered allmulticast mode [ 307.164763][T14806] bridge_slave_1: entered promiscuous mode [ 307.205926][ T5844] Bluetooth: hci6: command 0x0405 tx timeout [ 307.386216][T14806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.425701][T14806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.497894][T14866] x_tables: duplicate underflow at hook 2 [ 307.622613][T14806] team0: Port device team_slave_0 added [ 307.672606][T14806] team0: Port device team_slave_1 added [ 307.826289][T14881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2653'. [ 307.955496][T14806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.978201][T14806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.094578][ T5838] Bluetooth: hci1: command tx timeout [ 308.100769][T14806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.130033][T14806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.138708][T14806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.180617][T14806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.358777][T14898] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2658'. [ 308.448816][T14806] hsr_slave_0: entered promiscuous mode [ 308.467746][T14806] hsr_slave_1: entered promiscuous mode [ 308.486170][T14806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.493796][T14806] Cannot create hsr debugfs directory [ 308.786275][T14907] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2662'. [ 308.828003][T14907] netlink: zone id is out of range [ 308.844225][T14911] bond3: entered promiscuous mode [ 308.862467][T14907] netlink: zone id is out of range [ 308.891832][T14907] netlink: zone id is out of range [ 308.918634][T14911] bond3: entered allmulticast mode [ 308.924227][T14911] 8021q: adding VLAN 0 to HW filter on device bond3 [ 308.927901][T14907] netlink: zone id is out of range [ 308.937984][T14915] IPVS: nq: UDP 224.0.0.2:20004 - no destination available [ 308.954027][T14907] netlink: zone id is out of range [ 308.972790][T14907] netlink: get zone limit has 8 unknown bytes [ 309.012181][T14919] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2664'. [ 309.069139][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2664'. [ 309.388278][T14933] netlink: 'syz.1.2668': attribute type 1 has an invalid length. [ 309.418499][T14935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2668'. [ 309.561747][T14806] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.827784][T14806] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.957841][T14806] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.968731][T14956] netlink: 'syz.6.2675': attribute type 1 has an invalid length. [ 309.987094][T14956] netlink: 'syz.6.2675': attribute type 1 has an invalid length. [ 310.089208][T14806] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.173435][ T5838] Bluetooth: hci1: command tx timeout [ 310.557486][T14806] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 310.612798][T14806] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 310.883423][T14806] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 310.968495][T14806] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 311.076687][T15004] netlink: 'syz.6.2687': attribute type 21 has an invalid length. [ 311.391420][T14806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.468849][T14806] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.515178][ T9228] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.522435][ T9228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.639243][ T9240] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.646512][ T9240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.827854][T15031] pimreg: entered allmulticast mode [ 312.201070][T15049] xt_SECMARK: invalid mode: 0 [ 312.247056][ T5838] Bluetooth: hci1: command tx timeout [ 312.512446][T15057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2702'. [ 312.528129][T14806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.572179][T15059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2703'. [ 312.859084][T14806] veth0_vlan: entered promiscuous mode [ 312.917025][T15076] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2706'. [ 312.968106][T14806] veth1_vlan: entered promiscuous mode [ 313.148770][T14806] veth0_macvtap: entered promiscuous mode [ 313.189000][T14806] veth1_macvtap: entered promiscuous mode [ 313.258466][T14806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.311759][T15090] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.2712'. [ 313.327220][T14806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.354084][T14806] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.375465][T14806] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.389670][T14806] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.399287][T14806] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.491848][T15093] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2713'. [ 313.980507][ T9240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.006755][ T9240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.109314][ T9228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.127726][ T9228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.259228][T15121] xt_CT: You must specify a L4 protocol and not use inversions on it [ 314.324933][ T5838] Bluetooth: hci1: command tx timeout [ 316.771155][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.787985][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 316.800007][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 316.814859][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.825719][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 317.555290][T15205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2743'. [ 317.585795][T15206] netlink: 'syz.1.2746': attribute type 21 has an invalid length. [ 317.607435][T15206] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2746'. [ 317.632480][T15206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2746'. [ 318.020082][T15175] chnl_net:caif_netlink_parms(): no params data found [ 318.455063][T15242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2755'. [ 318.676678][T15175] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.694257][T15175] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.725451][T15175] bridge_slave_0: entered allmulticast mode [ 318.745304][T15175] bridge_slave_0: entered promiscuous mode [ 318.803038][T15175] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.825535][T15175] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.845872][T15175] bridge_slave_1: entered allmulticast mode [ 318.856611][T15175] bridge_slave_1: entered promiscuous mode [ 318.875880][T15246] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.891449][ T5838] Bluetooth: hci1: command tx timeout [ 318.927365][T15250] bridge_slave_1: default FDB implementation only supports local addresses [ 318.968009][T15246] No such timeout policy "syz0" [ 319.146621][T15175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.218585][T15175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.373530][T15175] team0: Port device team_slave_0 added [ 319.463512][T15175] team0: Port device team_slave_1 added [ 319.588046][T15277] tipc: Enabling of bearer rejected, failed to enable media [ 319.722161][T15175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.760343][T15175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.865978][T15175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.917107][T15175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.924120][T15175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.978467][T15175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.165742][T15175] hsr_slave_0: entered promiscuous mode [ 320.217995][T15175] hsr_slave_1: entered promiscuous mode [ 320.280045][T15175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.324500][T15175] Cannot create hsr debugfs directory [ 320.827589][T15314] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2772'. [ 320.839064][T15322] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2774'. [ 320.965452][ T5838] Bluetooth: hci1: command tx timeout [ 321.178681][T15338] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 321.219254][T15340] openvswitch: netlink: IP tunnel TTL not specified. [ 321.458388][T15350] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2783'. [ 321.482039][T15175] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.518408][T15354] openvswitch: netlink: Missing key (keys=40, expected=100) [ 321.546729][T15350] 0ªX¹¦D: renamed from gretap0 (while UP) [ 321.573996][T15350] 0ªX¹¦D: left promiscuous mode [ 321.633586][T15350] 0ªX¹¦D: entered allmulticast mode [ 321.643840][T15350] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 321.754119][T15175] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.790165][T15363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2788'. [ 321.978744][T15175] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.182850][T15175] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.433806][T15394] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2795'. [ 322.530300][T15394] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 322.787725][T15402] macsec0: entered promiscuous mode [ 322.813772][T15402] macsec0: entered allmulticast mode [ 322.855942][T15175] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 322.893070][T15407] netlink: 'syz.6.2799': attribute type 83 has an invalid length. [ 322.898400][T15403] veth1_macvtap: entered allmulticast mode [ 322.935417][T15403] macsec0: left allmulticast mode [ 322.945214][T15403] veth1_macvtap: left allmulticast mode [ 322.956601][T15175] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 322.993420][T15175] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 323.044872][ T5838] Bluetooth: hci1: command tx timeout [ 323.121337][T15175] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 323.417366][T15431] netlink: 'syz.6.2807': attribute type 9 has an invalid length. [ 323.602140][T15175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.703295][T15175] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.761811][ T3470] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.769129][ T3470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.843221][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.850524][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.311409][T15467] netlink: 'syz.1.2816': attribute type 33 has an invalid length. [ 324.370165][T15467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2816'. [ 324.433771][T15467] netlink: 'syz.1.2816': attribute type 1 has an invalid length. [ 324.879538][T15175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.049456][ T31] INFO: task syz.0.977:9375 blocked for more than 143 seconds. [ 325.070616][T15175] veth0_vlan: entered promiscuous mode [ 325.071543][ T31] Not tainted 6.16.0-rc3-syzkaller-00122-g60f7f4afaf6d #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 325.095740][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 325.106199][T15175] veth1_vlan: entered promiscuous mode [ 325.122601][ T31] task:syz.0.977 state:D stack:24072 pid:9375 tgid:9373 ppid:5828 task_flags:0x400140 flags:0x00004004 [ 325.134930][ T5838] Bluetooth: hci1: command tx timeout [ 325.165906][ T31] Call Trace: [ 325.169329][ T31] [ 325.172358][ T31] __schedule+0x16f5/0x4d00 [ 325.246723][ T31] ? schedule+0x165/0x360 [ 325.280575][ T31] ? __lock_acquire+0xab9/0xd20 [ 325.284447][T15175] veth0_macvtap: entered promiscuous mode [ 325.317782][ T31] ? __pfx___schedule+0x10/0x10 [ 325.381586][ T31] ? schedule+0x91/0x360 [ 325.397105][ T31] schedule+0x165/0x360 [ 325.401355][ T31] schedule_timeout+0x9a/0x270 [ 325.454534][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 325.460032][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 325.485237][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.490795][ T31] ? wait_for_completion+0x267/0x5d0 [ 325.514729][ T31] wait_for_completion+0x2bf/0x5d0 [ 325.519961][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 325.534645][ T31] ? up_write+0x1c4/0x420 [ 325.539060][ T31] ? remove_client_context+0xc0/0x1e0 [ 325.549473][ T31] disable_device+0x1c6/0x320 [ 325.554221][ T31] ? __pfx_disable_device+0x10/0x10 [ 325.559608][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 325.565157][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 325.573234][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 325.579125][ T31] nldev_dellink+0x2d1/0x320 [ 325.583744][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 325.588978][ T31] ? rcu_is_watching+0x15/0xb0 [ 325.593785][ T31] ? apparmor_capable+0x137/0x1b0 [ 325.599003][ T31] ? bpf_lsm_capable+0x9/0x20 [ 325.603715][ T31] ? security_capable+0x7e/0x2e0 [ 325.608874][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 325.614013][ T31] rdma_nl_rcv+0x6ae/0x980 [ 325.618674][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 325.623644][ T31] ? __lock_acquire+0xab9/0xd20 [ 325.628698][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 325.633933][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 325.639243][ T31] netlink_unicast+0x758/0x8d0 [ 325.644015][ T31] netlink_sendmsg+0x805/0xb30 [ 325.648917][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.654212][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 325.659366][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 325.664769][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.670096][ T31] __sock_sendmsg+0x219/0x270 [ 325.676891][ T31] ____sys_sendmsg+0x505/0x830 [ 325.681719][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 325.701879][ T31] ? import_iovec+0x74/0xa0 [ 325.707165][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 325.711906][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 325.717404][ T31] ? __fget_files+0x2a/0x420 [ 325.722031][ T31] ? __fget_files+0x3a0/0x420 [ 325.727058][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 325.732008][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 325.737630][ T31] ? rcu_is_watching+0x15/0xb0 [ 325.742432][ T31] ? do_syscall_64+0xbe/0x3b0 [ 325.747217][ T31] do_syscall_64+0xfa/0x3b0 [ 325.751752][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.757221][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.763314][ T31] ? clear_bhb_loop+0x60/0xb0 [ 325.769121][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.775216][ T31] RIP: 0033:0x7f75f8f8e929 [ 325.781717][ T31] RSP: 002b:00007f75f9dfd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.790377][ T31] RAX: ffffffffffffffda RBX: 00007f75f91b5fa0 RCX: 00007f75f8f8e929 [ 325.798519][ T31] RDX: 0000000024000018 RSI: 00002000000005c0 RDI: 0000000000000008 [ 325.806874][ T31] RBP: 00007f75f9010b39 R08: 0000000000000000 R09: 0000000000000000 [ 325.815030][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.823173][ T31] R13: 0000000000000000 R14: 00007f75f91b5fa0 R15: 00007fffb035f7a8 [ 325.831342][ T31] [ 325.879722][ T31] INFO: task syz.0.977:9377 blocked for more than 144 seconds. [ 325.915048][ T31] Not tainted 6.16.0-rc3-syzkaller-00122-g60f7f4afaf6d #0 [ 325.922868][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 325.994907][ T31] task:syz.0.977 state:D stack:26824 pid:9377 tgid:9373 ppid:5828 task_flags:0x400140 flags:0x00004004 [ 326.034940][ T31] Call Trace: [ 326.038289][ T31] [ 326.041264][ T31] __schedule+0x16f5/0x4d00 [ 326.064828][ T31] ? __lock_acquire+0xab9/0xd20 [ 326.069764][ T31] ? schedule+0x165/0x360 [ 326.074139][ T31] ? __pfx___schedule+0x10/0x10 [ 326.145184][ T31] ? schedule+0x91/0x360 [ 326.149627][ T31] schedule+0x165/0x360 [ 326.153849][ T31] schedule_preempt_disabled+0x13/0x30 [ 326.214475][ T31] __mutex_lock+0x724/0xe80 [ 326.219089][ T31] ? __mutex_lock+0x51b/0xe80 [ 326.223818][ T31] ? __ib_unregister_device+0x284/0x3f0 [ 326.274474][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 326.279605][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 326.344700][ T31] ? __up_read+0x280/0x680 [ 326.349341][ T31] ? __pfx___up_read+0x10/0x10 [ 326.354158][ T31] __ib_unregister_device+0x284/0x3f0 [ 326.385064][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 326.393385][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 326.414974][ T31] nldev_dellink+0x2d1/0x320 [ 326.419674][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 326.434778][ T31] ? rcu_is_watching+0x15/0xb0 [ 326.439635][ T31] ? apparmor_capable+0x137/0x1b0 [ 326.454486][ T31] ? bpf_lsm_capable+0x9/0x20 [ 326.459223][ T31] ? security_capable+0x7e/0x2e0 [ 326.464199][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 326.514650][ T31] rdma_nl_rcv+0x6ae/0x980 [ 326.519180][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 326.524161][ T31] ? __lock_acquire+0xab9/0xd20 [ 326.574484][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 326.579769][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 326.634533][ T31] netlink_unicast+0x758/0x8d0 [ 326.639413][ T31] netlink_sendmsg+0x805/0xb30 [ 326.644244][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.701788][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 326.725317][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 326.730687][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.754529][ T31] __sock_sendmsg+0x219/0x270 [ 326.759345][ T31] ____sys_sendmsg+0x505/0x830 [ 326.764161][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.794712][ T31] ? import_iovec+0x74/0xa0 [ 326.799360][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 326.841446][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.851556][ T31] ? __fget_files+0x2a/0x420 [ 326.856258][ T31] ? __fget_files+0x3a0/0x420 [ 326.861243][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 326.867134][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 326.872733][ T31] ? rcu_is_watching+0x15/0xb0 [ 326.877697][ T31] ? do_syscall_64+0xbe/0x3b0 [ 326.882417][ T31] do_syscall_64+0xfa/0x3b0 [ 326.889637][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.895280][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.901384][ T31] ? clear_bhb_loop+0x60/0xb0 [ 326.908323][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.914251][ T31] RIP: 0033:0x7f75f8f8e929 [ 326.918730][ T31] RSP: 002b:00007f75f9ddc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.927212][ T31] RAX: ffffffffffffffda RBX: 00007f75f91b6080 RCX: 00007f75f8f8e929 [ 326.935414][ T31] RDX: 0000000024000018 RSI: 00002000000005c0 RDI: 0000000000000008 [ 326.943410][ T31] RBP: 00007f75f9010b39 R08: 0000000000000000 R09: 0000000000000000 [ 326.952724][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.960866][ T31] R13: 0000000000000000 R14: 00007f75f91b6080 R15: 00007fffb035f7a8 [ 326.970328][ T31] [ 326.979401][ T31] [ 326.979401][ T31] Showing all locks held in the system: [ 326.987396][ T31] 3 locks held by ksoftirqd/1/23: [ 326.993376][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 327.003442][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 327.016255][ T31] #2: ffffffff8e8cd958 (pool_lock#2){-.-.}-{2:2}, at: __free_object+0x260/0x6c0 [ 327.025558][ T31] 1 lock held by khungtaskd/31: [ 327.030429][ T31] #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 327.040400][ T31] 2 locks held by getty/5591: [ 327.045441][ T31] #0: ffff88814cb260a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 327.055332][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 327.065673][ T31] 3 locks held by kworker/0:29/8902: [ 327.071093][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 327.082312][ T31] #1: ffffc90003667bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 327.092737][ T31] #2: ffffffff8e144978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 327.103730][ T31] 4 locks held by kworker/u8:30/9245: [ 327.112413][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 327.123495][ T31] #1: ffffc9001c247bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 327.135024][ T31] #2: ffffffff8f503350 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 327.144537][ T31] #3: ffff888056c546d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 327.155883][ T31] 2 locks held by syz.0.977/9375: [ 327.160907][ T31] #0: ffffffff99e41b18 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 327.170990][ T31] #1: ffff888056c546d0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 327.182831][ T31] 2 locks held by syz.0.977/9377: [ 327.188078][ T31] #0: ffffffff99e41b18 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 327.198210][ T31] #1: ffff888056c546d0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 327.213934][ T31] 1 lock held by syz.5.1627/11424: [ 327.220161][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 327.230367][ T31] 2 locks held by syz-executor/12054: [ 327.236664][ T31] #0: ffff888024874dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 327.246957][ T31] #1: ffff8880248740b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 327.257329][ T31] 4 locks held by syz-executor/15175: [ 327.263141][ T31] #0: ffff8880346e8dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 327.273166][ T31] #1: ffff8880346e80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 327.282938][ T31] #2: ffffffff8f677fa8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 327.293507][ T31] #3: ffff888044970b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 327.302987][ T31] 3 locks held by syz.1.2822/15482: [ 327.308313][ T31] #0: ffff88803292cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 327.320186][ T31] #1: ffff88803292c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 327.330050][ T31] #2: ffffffff8f677fa8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 327.340219][ T31] 3 locks held by syz.3.2826/15497: [ 327.345514][ T31] #0: ffff888033c40dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 327.355652][ T31] #1: ffff888033c400b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 327.365445][ T31] #2: ffffffff8f677fa8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 327.375748][ T31] 3 locks held by syz.4.2827/15499: [ 327.381074][ T31] #0: ffff8880324c4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 327.391223][ T31] #1: ffff8880324c40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 327.401116][ T31] #2: ffffffff8f677fa8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 327.440275][ T31] [ 327.442722][ T31] ============================================= [ 327.442722][ T31] [ 327.464434][ T31] NMI backtrace for cpu 1 [ 327.464466][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00122-g60f7f4afaf6d #0 PREEMPT(full) [ 327.464490][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 327.464502][ T31] Call Trace: [ 327.464509][ T31] [ 327.464518][ T31] dump_stack_lvl+0x189/0x250 [ 327.464551][ T31] ? __wake_up_klogd+0xd9/0x110 [ 327.464577][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.464607][ T31] ? __pfx__printk+0x10/0x10 [ 327.464641][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 327.464668][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 327.464699][ T31] ? _printk+0xcf/0x120 [ 327.464725][ T31] ? __pfx__printk+0x10/0x10 [ 327.464749][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 327.464776][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 327.464803][ T31] watchdog+0xfee/0x1030 [ 327.464831][ T31] ? watchdog+0x1de/0x1030 [ 327.464862][ T31] kthread+0x70e/0x8a0 [ 327.464884][ T31] ? __pfx_watchdog+0x10/0x10 [ 327.464907][ T31] ? __pfx_kthread+0x10/0x10 [ 327.464931][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.464956][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.464981][ T31] ? __pfx_kthread+0x10/0x10 [ 327.465003][ T31] ret_from_fork+0x3fc/0x770 [ 327.465033][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 327.465065][ T31] ? __switch_to_asm+0x39/0x70 [ 327.465083][ T31] ? __switch_to_asm+0x33/0x70 [ 327.465101][ T31] ? __pfx_kthread+0x10/0x10 [ 327.465123][ T31] ret_from_fork_asm+0x1a/0x30 [ 327.465159][ T31] [ 327.465167][ T31] Sending NMI from CPU 1 to CPUs 0: [ 327.638851][ C0] NMI backtrace for cpu 0 [ 327.638871][ C0] CPU: 0 UID: 0 PID: 9241 Comm: kworker/u8:27 Not tainted 6.16.0-rc3-syzkaller-00122-g60f7f4afaf6d #0 PREEMPT(full) [ 327.638891][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 327.638901][ C0] Workqueue: 0x0 (bat_events) [ 327.638926][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 327.638947][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 cb ab c9 f5 cc [ 327.638962][ C0] RSP: 0018:ffffc9001c29f2d8 EFLAGS: 00000046 [ 327.638975][ C0] RAX: ffffffff8e005040 RBX: 0000000000000000 RCX: 1a4f6d49f922e400 [ 327.638987][ C0] RDX: ffff88801d6fda14 RSI: ffffffff8db6efd1 RDI: ffffffff8be28d40 [ 327.638999][ C0] RBP: 0000000000000004 R08: 0000000000000004 R09: ffff88801d6fecf0 [ 327.639009][ C0] R10: dffffc0000000000 R11: ffffed1003adfbc7 R12: 1ffff11003adfd9e [ 327.639020][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 327.639031][ C0] FS: 0000000000000000(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 327.639043][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.639055][ C0] CR2: 00007fe805c92e9c CR3: 000000000df38000 CR4: 00000000003526f0 [ 327.639071][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 327.639081][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 327.639091][ C0] Call Trace: [ 327.639097][ C0] [ 327.639103][ C0] psi_task_change+0xc3/0x250 [ 327.639123][ C0] dequeue_task+0x5e1/0x6a0 [ 327.639140][ C0] detach_task+0x137/0x340 [ 327.639164][ C0] sched_balance_rq+0x3f39/0x57a0 [ 327.639201][ C0] ? __pfx_sched_balance_rq+0x10/0x10 [ 327.639224][ C0] ? __lock_acquire+0xab9/0xd20 [ 327.639246][ C0] ? rcu_is_watching+0x15/0xb0 [ 327.639294][ C0] ? __lock_acquire+0xab9/0xd20 [ 327.639321][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 327.639347][ C0] sched_balance_newidle+0x693/0xfb0 [ 327.639366][ C0] ? sched_balance_newidle+0x29b/0xfb0 [ 327.639384][ C0] ? do_raw_spin_lock+0x121/0x290 [ 327.639405][ C0] pick_next_task_fair+0x40/0xba0 [ 327.639423][ C0] __pick_next_task+0xe4/0x450 [ 327.639444][ C0] __schedule+0x6fe/0x4d00 [ 327.639472][ C0] ? schedule+0x165/0x360 [ 327.639492][ C0] ? __lock_acquire+0xab9/0xd20 [ 327.639512][ C0] ? __pfx___schedule+0x10/0x10 [ 327.639539][ C0] ? schedule+0x91/0x360 [ 327.639560][ C0] schedule+0x165/0x360 [ 327.639580][ C0] worker_thread+0xa82/0xda0 [ 327.639614][ C0] kthread+0x70e/0x8a0 [ 327.639633][ C0] ? __pfx_worker_thread+0x10/0x10 [ 327.639654][ C0] ? __pfx_kthread+0x10/0x10 [ 327.639672][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.639691][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.639711][ C0] ? __pfx_kthread+0x10/0x10 [ 327.639728][ C0] ret_from_fork+0x3fc/0x770 [ 327.639750][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 327.639773][ C0] ? __switch_to_asm+0x39/0x70 [ 327.639789][ C0] ? __switch_to_asm+0x33/0x70 [ 327.639803][ C0] ? __pfx_kthread+0x10/0x10 [ 327.639820][ C0] ret_from_fork_asm+0x1a/0x30 [ 327.639842][ C0] [ 327.643235][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 327.959205][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00122-g60f7f4afaf6d #0 PREEMPT(full) [ 327.971023][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 327.981088][ T31] Call Trace: [ 327.984372][ T31] [ 327.987330][ T31] dump_stack_lvl+0x99/0x250 [ 327.991943][ T31] ? __asan_memcpy+0x40/0x70 [ 327.996552][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.001762][ T31] ? __pfx__printk+0x10/0x10 [ 328.006378][ T31] panic+0x2db/0x790 [ 328.010293][ T31] ? __pfx_panic+0x10/0x10 [ 328.014723][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 328.020551][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 328.025936][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 328.032109][ T31] watchdog+0x102d/0x1030 [ 328.036456][ T31] ? watchdog+0x1de/0x1030 [ 328.040890][ T31] kthread+0x70e/0x8a0 [ 328.044970][ T31] ? __pfx_watchdog+0x10/0x10 [ 328.049658][ T31] ? __pfx_kthread+0x10/0x10 [ 328.054257][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.059475][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.064690][ T31] ? __pfx_kthread+0x10/0x10 [ 328.069296][ T31] ret_from_fork+0x3fc/0x770 [ 328.073926][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 328.079282][ T31] ? __switch_to_asm+0x39/0x70 [ 328.084064][ T31] ? __switch_to_asm+0x33/0x70 [ 328.088840][ T31] ? __pfx_kthread+0x10/0x10 [ 328.093450][ T31] ret_from_fork_asm+0x1a/0x30 [ 328.098240][ T31] [ 328.101413][ T31] Kernel Offset: disabled [ 328.105742][ T31] Rebooting in 86400 seconds..