last executing test programs: 7m44.224820006s ago: executing program 32 (id=1170): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x7000000}, @TCA_FQ_FLOW_REFILL_DELAY={0x1027, 0x9, 0x3}]}}]}, 0xa2}}, 0x0) 7m43.925697579s ago: executing program 33 (id=1174): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000240)=0x40) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f0000000140)={@null, 0x3, 'geneve0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002cc0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0xffe0}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x2}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054) 7m21.639783575s ago: executing program 34 (id=1228): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x6, 0x200c6e) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000002c6fe138bde61be238f5b9001000110f00", @ANYRES32=0x0, @ANYBLOB="04010000000000003000128009000100766c616e00000000200002800c0002001b0000001f00000006000100000000000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x60}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r3) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4010}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040044}, 0x4080) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601010000000000000000000000400500010006000000050005000200000005dc0400000000000900020073797a31000000000c00078008020840000000c411000300686173683a69702c6d61726b00000000"], 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000440), r8) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000200)={0x20, r9, 0x539, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r10}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040840}, 0xc840) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x0) r11 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c, 0x80800) bind$inet6(r11, &(0x7f0000000280)={0xa, 0x4e21, 0x4, @private1, 0x8}, 0x1c) 5m26.700449393s ago: executing program 35 (id=2593): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x15, 0x6, 0x6) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x811}, 0x40000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r3, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r1], 0x68}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "ff07000000000000"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 5m26.432880145s ago: executing program 36 (id=2597): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x50) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000180)=@newtaction={0xd8, 0x30, 0x1, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0x24}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x6}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x44, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x17, 0x6, "511d2e4c075eca24e21530fa4d4ab9eb53bf37"}, {0xfffffffffffffe17}, {0xc, 0x8, {0x2, 0xeb804a98c420662d}}}}]}]}, 0xd8}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x0) ioctl(r4, 0x3, &(0x7f0000000280)="013b05ab2a5c90365e97354d2d4c57a2ed649837a8754ac8dd94d1da52818096b44a973b90e488814698767d5c03498f0c6a6621a827a29fc05c24f6c70eeebb2e6914cacbb2243f23c42e6731b0a9a55aaa0042be57f0bf70ea7a8e4fb78ff94a5591442cb764baf227dc5d6afdc49ac8566c8efc41d590fb1948e6dcf64adec2d5494189e92bfa1b02bbf94870de2b711a66cb26bf32335941e71b4a59847608e51787df3ec1cab98a91471543ea537add6d87ebc9e25cdc0f8c11b584a3d695ffa469862c07ea051d9384aac424ff2b206d7dfb118f226225c2056c2a5e11ee9d5e78216bfb545464cac15d95") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da", 0x33}], 0x2}], 0x1, 0x24040800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) 2m22.297443978s ago: executing program 1 (id=4478): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="5e546507da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}], 0x1, 0x4002840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r2) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x64000) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x6, 0x81) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) 2m22.083682856s ago: executing program 1 (id=4479): r0 = socket(0x11, 0x800000003, 0x0) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0x4) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="016f0800452c002800630000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x2c) (async, rerun: 64) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) (rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6b}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a000020"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) (async) r3 = socket$inet6(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r4, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) (async, rerun: 64) sendto$inet6(r3, &(0x7f00000000c0)="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", 0x10a73, 0x20000800, 0x0, 0x4b6ae4f95a5de37f) (rerun: 64) 2m21.61555584s ago: executing program 1 (id=4483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x10, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "840000000000110002000f116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m21.254763066s ago: executing program 1 (id=4487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe(&(0x7f0000000300)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x2}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) 2m21.12331861s ago: executing program 1 (id=4489): syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180b300000e0000000000008100200086dd63269fe000143aff20010000000000000000000000000001ff02000000000000000000000000000187009078ff02000000000d000000000000000001"], 0x0) r0 = socket(0x1e, 0x1, 0x0) recvmmsg(r0, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/175, 0xaf}], 0x1}}], 0x1, 0x40000161, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m20.895862388s ago: executing program 1 (id=4492): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @dev}}}]}]}, 0x50}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5, 0x2}}, 0x14}}, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r3) sendmmsg$alg(r3, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x895}], 0x1, 0x24002894) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000c400)=ANY=[@ANYBLOB], 0x8dec}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000c0a0) 2m15.738126044s ago: executing program 37 (id=4400): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r4, 0x5, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x5}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x8060040) openat$cgroup_int(r2, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000027c0)=""/4102, 0x1006}, {&(0x7f0000005540)=""/4093, 0xffd}, {&(0x7f0000000440)=""/207, 0xcf}], 0x3}, 0x0) write$cgroup_subtree(r6, &(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRESOCT=r2, @ANYRESDEC=r6, @ANYRES8=r7], 0x9) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090) 2m15.062429001s ago: executing program 38 (id=4408): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x100010, r0, 0x0) (async) nanosleep(&(0x7f00000000c0)={0x77359400}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5, 0x2}}, 0x14}}, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000001f00)=""/4062, &(0x7f00000001c0)=0xfde) (async) r3 = accept$unix(r0, &(0x7f0000000100)=@abs, &(0x7f0000000000)=0x6e) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e22, @local}], 0x1) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x11, 0xa, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x88) (async) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2m7.755826846s ago: executing program 9 (id=4585): syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000000)) 2m7.571766618s ago: executing program 9 (id=4587): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000003c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f7", 0x27}], 0x1}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20c0}, 0x0) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c00c9242bbd7000fbdbdf2507000000", @ANYRES32=r4, @ANYBLOB="80001e0a0a000200aaaaaaaaaa1b0000"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2m7.309594371s ago: executing program 9 (id=4589): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={r2, 0x400, 0x6bc, 0x9, 0x7, 0xc}, 0x14) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x34, 0x4}}], 0x18}}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x52, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES16=r3], 0x18}, 0x1, 0x0, 0x0, 0x4040811}, 0x4040000) 2m7.104702644s ago: executing program 9 (id=4591): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe46a}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 2m6.790288213s ago: executing program 9 (id=4593): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 64) recvfrom$inet(r1, &(0x7f0000000480)=""/231, 0xe7, 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@delqdisc={0xd8, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x7, 0x9}, {0xd, 0xffe0}}, [@q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x15}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xbadc}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x4}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/223, 0xdf}], 0x1}, 0x101}], 0x1, 0x60, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4a4a9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) 2m6.588892462s ago: executing program 9 (id=4594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={0x0, &(0x7f0000000740)=""/83, 0x0, 0x53, 0x1, 0xb0}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x26}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}]}, 0x64}}, 0x40011) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)=ANY=[@ANYBLOB="98008f45", @ANYRES16=r4, @ANYBLOB="0100feffffff000000000100000009000a0073797a30000000000c0005001f193c99a8772efb0c0006000100000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x140000c0}, 0x20000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r6, 0x0, 0x1}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r8, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r8, 0x3) accept4(r8, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r11, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000ffdbdf251e00000008000300", @ANYRES32=r10, @ANYBLOB="3c002f800c0002000200aaaaaaaaaaaa2c00038008000100000000002000038006000100ffff0000080002"], 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="24a7c600", @ANYRES16=r9, @ANYBLOB="000226bd7000fedbdf25110000000500120080000000050012004f000000"], 0x24}}, 0x20000000) r12 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001"], 0x64}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r12, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r14}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) 2m5.889517713s ago: executing program 39 (id=4492): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @dev}}}]}]}, 0x50}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5, 0x2}}, 0x14}}, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r3) sendmmsg$alg(r3, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x895}], 0x1, 0x24002894) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000c400)=ANY=[@ANYBLOB], 0x8dec}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000c0a0) 1m51.518772439s ago: executing program 40 (id=4594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={0x0, &(0x7f0000000740)=""/83, 0x0, 0x53, 0x1, 0xb0}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x26}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}]}, 0x64}}, 0x40011) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)=ANY=[@ANYBLOB="98008f45", @ANYRES16=r4, @ANYBLOB="0100feffffff000000000100000009000a0073797a30000000000c0005001f193c99a8772efb0c0006000100000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x140000c0}, 0x20000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r6, 0x0, 0x1}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r8, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r8, 0x3) accept4(r8, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r11, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000ffdbdf251e00000008000300", @ANYRES32=r10, @ANYBLOB="3c002f800c0002000200aaaaaaaaaaaa2c00038008000100000000002000038006000100ffff0000080002"], 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="24a7c600", @ANYRES16=r9, @ANYBLOB="000226bd7000fedbdf25110000000500120080000000050012004f000000"], 0x24}}, 0x20000000) r12 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001"], 0x64}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r12, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r14}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) 25.647767783s ago: executing program 2 (id=5489): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000140)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$TUNSETOWNER(r1, 0x400454d4, 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0x10, 0x2, 0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440), 0x0, 0x4c851) 25.183778477s ago: executing program 2 (id=5497): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@remote, @default, @remote, @netrom, @null, @null, @null, @default]}, &(0x7f0000000080)=0x48, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @address_reply={0x12, 0x0, 0x0, 0x400}}}}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r4 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000300)) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x4e23, 0x40, @local, 0x401}, 0x1c) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000ec0)={0x1030, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x5c}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x1008, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x1004, 0x3, "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"}]}]}, 0x1030}, 0x1, 0x0, 0x0, 0x24004084}, 0x24001094) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000000206010800000000000000000000000005000100070000000900020073797a30000000000c000780080013400000007f0110000300686173683a69702c6d61630005000500020000000500040000000000"], 0x54}}, 0x0) 24.268321168s ago: executing program 8 (id=5507): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300001d0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000200fe8000000000000000000000000000bb000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe880000000000000000000000000001000000000000000005000700000000000a00000000000000fc01000000000000000000000000000000000000000000000200130001"], 0xe8}}, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f00000005c0)=@assoc_value={0x0}, &(0x7f0000000580)=0x8) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0x1, 0xfd, 0x9}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000040)={0x6, 'macsec0\x00', {}, 0x8000}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f00000006c0)={0x0, 'macvtap0\x00', {0xffe}, 0x2b1}) (async) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r2, 0x81}, 0x8) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x2400c001}, 0x840) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000006a]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) 24.223311648s ago: executing program 2 (id=5508): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, &(0x7f0000000080)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5ceee148424fd3f0ca7739c9f1c86d1500ab34d6479c014254fd8991a49ea2d229229719e1b4296733fcb8e7ac23f12d757ef7928c90abc799b000000205204fa292dfbab6072be273a848641f10d90ed5377bd35f1ef0657a39893afa4552c9ade9fbcac14077cbc71b0a71fb7d2849945a5ab5e414c2077f4d3e199b31ac2d7add4b268d0d577bdc2207c9fdc24185812ccb554df0e3cce78c6704fd5e1045d5e097617bcb547e92e166139fcd7d761b934a12a064e19010da2207549e0f79826a93b7c20e10d25222dfce2971dbaf8296476c94f7fffb7a5ba7b1bee044acf73a5cd4f1b1d004f", 0xfe) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x80, 0x0, 0x831a, 0x7}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e24, @empty}}, 0x6, 0x0, 0x0, 0x1, 0x2, 0x2, 0xf9}, 0x9c) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ppoll(&(0x7f00000001c0)=[{r2, 0x120}, {}, {r2, 0x6010}, {r1, 0x20}], 0x4, &(0x7f0000000400)={r4, r5+10000000}, &(0x7f0000000440)={[0x3]}, 0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000ffdbdf250500000008000100", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x80) 24.083872767s ago: executing program 8 (id=5509): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd2c, 0xfffffffd, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0xa000}, @IFA_LOCAL={0x8, 0x2, @remote}, @IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0xe01, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, 0x2, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x10000, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x40}}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002"], 0xfc}}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c00018006000600843b00004c150280081517"], 0x1570}, 0x1, 0x0, 0x0, 0x2}, 0xc800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50) 23.84363771s ago: executing program 4 (id=5513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x4ee0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x4ee0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) socket(0x29, 0x2, 0x7) socket(0x10, 0xa, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 23.830476004s ago: executing program 8 (id=5514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYBLOB="010002"]) close(r1) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f0000000540)={@default, @null, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast]}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="02180000100000000000000000000000030006000000000002000004000000000000000000000000080012000000000000000000000000003000000000000000000000000000000002000001000000000000000000000000fc020000000000000000000000000000030005000000000002"], 0x80}}, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000300)={@val={0x0, 0x8884}, @void, @eth={@random="183b7083bca9", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5d, 0x0, 0x0, 0xfc, 0x2f, 0x0, @remote, @multicast1}, {0xa000, 0x86dd, 0x49, 0x0, @wg=@data={0x4, 0x7f, 0x60, "a7364e2addcfe4367a1b691344db0cf84396b45a122224f46009b09559b2f71daf3e4017681692ddfaef64c58e34a387dc"}}}}}}}, 0x6f) 23.56446862s ago: executing program 4 (id=5518): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = socket(0x22, 0x2, 0x2) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x14}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r3, 0xb97534d5fe9704cf, 0x70bd28, 0x25dfdafe, {{0x12}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000016c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xfb57bf36c35b11ab}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x34, r3, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4b}]}, 0x34}, 0x1, 0x0, 0x0, 0x40881}, 0x20008010) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001480)=ANY=[@ANYBLOB="9feb01001800000000000000630000006300000006000000070000000400000f0300000003000000feffffffa9d200000500000002000000000000000100000001000080ffffff7f040000000900000006000000c6b6420000000000000003000000000100000002000000070000000400000000000002030000000000302e5f2e00a4ebcf1dd731d125c215c4b8e9fbfe79376585b757401de71eac7052aa88243dbc6285e6fe9e08e58b2ddb5f1fc900146bea6503e9d2d3194f492b5efefc395c52318cacbb9e8683542a75f3169166e80d1d5a40b4994b098214ff0b1608732e2600c6b8c7832103b6cb32dfcefab9fe22a68f08c85fab605de9e44710425b43deed995db1695bb1231311e61026be983e3aa48725"], &(0x7f0000000000)=""/117, 0x82, 0x75, 0x0, 0x20}, 0x28) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f00000000c0)=""/82, &(0x7f0000000140)=0x52) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f00000015c0)={0x0, @qipcrtr={0x2a, 0x0, 0x7fff}, @nfc={0x27, r6, 0x1, 0x5}, @hci={0x1f, 0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000340), 0xff, 0x8, 0x2}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001440)={r4, 0x20, &(0x7f00000001c0)={&(0x7f00000003c0)=""/113, 0x71, 0x0, &(0x7f0000000440)=""/4096, 0x1000}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x18) 23.370802115s ago: executing program 4 (id=5521): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f0000000000)) 23.151464125s ago: executing program 2 (id=5523): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x28, 0x42, 0x1, 0x0, 0xfffffffc, {0xe}, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x21, 0x3, 0x2) bind$netlink(r1, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbfb, 0x2000000}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001e004b050000000000000000070000000bc906590ed227c1d4e01a13cf5d604567899ce2d793115956156f69dfe313df8228a291de4fd4c1ff4b4693d1d26ab36723817336a02474bca41dfa9d5caf130f7580d2158ba8e22e5c20f1164484b7e8d7905e640846b08aae35149115e5c89350f25308693da3fecfdbd857b2d3ede9906d3bce91259732d1657053326bc459a70a204f1f9e68768aed932bf69687a1c6a18cb2f9eecad6e88561becf9491a461f3f54f52a95bd5206001705ecc00b99f14416d859ae1c9b43240d4f2527c0df808f6537e2d1c56e41e72290197231fb9788f2c89bdd9f7e8", @ANYRES32=0x0, @ANYRES16=r0, @ANYRES32=r0], 0x28}}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x70, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x65}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x6, 0x25, &(0x7f0000000040), 0x4) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r5], 0x78}}, 0x0) 23.122292096s ago: executing program 4 (id=5526): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x24048081}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x400, 0x33}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0xc, 0x1, 0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) unshare(0x22020600) unshare(0x2a020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x7, 0x0, 0x0, 0x10}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r9, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="a1ab00000000000000003200000008001701"], 0x24}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 22.915852681s ago: executing program 8 (id=5528): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {}, {0x5, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0}, 0x90) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r4, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x59}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}]}, 0x38}}, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x6], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x58}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16, @ANYBLOB="0100000000070000000009000000780003800800030004000000060007004e21000014000600fc010600000000010000000000000001060007004e20000008000100010000001400020076657468315f746f5f7465616d000000050008000100000008000500e0"], 0x8c}}, 0x0) 22.61881957s ago: executing program 4 (id=5531): r0 = socket(0x10, 0x3, 0x0) getpeername$packet(r0, 0x0, 0x0) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) sendto$inet(r0, &(0x7f0000000340)="c6000b070c6a9cd4d85ae0e76e8f4b63ed7c51b0e57fc12612678e2d63b021", 0x1f, 0x20004001, &(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0xf6, "7a666f6f14ccb825637d3265bc539a47b3019e75071a9ceeb018687716a6d3832efa5289193020c745f6e22a020dd534eccfcf4f5ad2fe87146e984b3d72ef2754e7ebd40b0821b566eb625aa86d56b834f1afd2bbdb57f5f41374b45e0d08a72d050eb53d36c6f285fe42e836737e1514ad0718775ee505d978a8ce02e1d9b9ea63b0ab8e259567e4289dac7e083cb1c20c9e108c09d7ea8f705a9cb40709a847699e236e93d9a154a0441b773c0a83a5f62460f3f7d30191b3b7401258bc7afc4da4f518fdd7de088f4699b9738ef801790490cf57fcf185e04853c46b11ea118fdcb4582d31382cf6d8cc896e6682f7d4ef6b4aa8"}, &(0x7f0000000040)=0xfe) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1, 0x5b}, &(0x7f00000001c0)=0x8) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r5) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r12, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000380)={0x3c, r10, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r7, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xc5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22.511599523s ago: executing program 8 (id=5532): r0 = socket(0x39, 0x4, 0x2) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'bond_slave_1\x00', 0x4}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20400, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x7655, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x40}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000240)={r4, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}]}, &(0x7f0000000280)=0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xec, r7, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x84, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f00000004c0)) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000500)={'IDLETIMER\x00'}, &(0x7f0000000540)=0x1e) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x88, 0x3, 0x8, 0x401, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffff001}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xdb}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xc0}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x10040}, 0x4000) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000740), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)=0x0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1ef4759d5e74246}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r8, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000880)={r5, 0x7d2, 0x5}, 0x8) bind$l2tp(r0, &(0x7f00000008c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x3, &(0x7f0000000900)={@broadcast, @multicast1, r1}, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000940)={'vcan0\x00'}) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFBR(r10, 0x8940, &(0x7f0000000a40)=@get={0x1, &(0x7f0000000980)=""/151, 0x3}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000a80)={r4, 0xe8}, 0x8) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r7, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20044804) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r11, &(0x7f0000000c80)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x102, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 22.242393279s ago: executing program 2 (id=5533): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) close(0x3) recvfrom$l2tp6(r4, 0x0, 0x0, 0x20, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r3, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 19.587955979s ago: executing program 4 (id=5535): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x28, [@restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x28, 0x0, 0x1, 0x2}, 0x28) 18.982867037s ago: executing program 41 (id=5535): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x28, [@restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x28, 0x0, 0x1, 0x2}, 0x28) 18.968275281s ago: executing program 2 (id=5539): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) sendmmsg$alg(r1, &(0x7f00000017c0)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="ed60af8a59c5", 0x6}], 0x1, 0x0, 0x0, 0x20000081}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20088800}], 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="7b32fd3c6739140b7b0b750a2a2be916", 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc0002042, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x2c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x7, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x48, &(0x7f0000000040)={0x0, 0x0}, 0x10) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x68, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffff800, 0x8, 0x99f5, 0x2, 0x2}}]}]}}}]}, 0x68}}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) read(r10, &(0x7f0000000100)=""/35, 0x23) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e22, 0x8, @mcast1, 0x5d37}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000005c0)={r11, @in6={{0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x60}, 0x7}}}, &(0x7f00000003c0)=0x84) socket$netlink(0x10, 0x3, 0x0) sendto$packet(r5, &(0x7f0000000580)="44c394f305916c4516999da20800", 0x36, 0x0, &(0x7f0000000440)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) 18.745126322s ago: executing program 42 (id=5539): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) sendmmsg$alg(r1, &(0x7f00000017c0)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="ed60af8a59c5", 0x6}], 0x1, 0x0, 0x0, 0x20000081}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20088800}], 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="7b32fd3c6739140b7b0b750a2a2be916", 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc0002042, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x2c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x7, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x48, &(0x7f0000000040)={0x0, 0x0}, 0x10) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x68, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffff800, 0x8, 0x99f5, 0x2, 0x2}}]}]}}}]}, 0x68}}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) read(r10, &(0x7f0000000100)=""/35, 0x23) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e22, 0x8, @mcast1, 0x5d37}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000005c0)={r11, @in6={{0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x60}, 0x7}}}, &(0x7f00000003c0)=0x84) socket$netlink(0x10, 0x3, 0x0) sendto$packet(r5, &(0x7f0000000580)="44c394f305916c4516999da20800", 0x36, 0x0, &(0x7f0000000440)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) 18.698068304s ago: executing program 8 (id=5541): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x5, 0x0) unshare(0x20000400) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x12, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x7}], 0x1c) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000180)=0x4) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="f5af24bd7000000000000e"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="ea12b41154c9534cea4518bc777764e5e3f36170770db4b448c3c9fc17b188227c5dd4d59a57ac05b1bb0d74321181b6a6071f84b5526825eb4959f0c318387c0257dc7b2af6399ad40606b9639ee037c3fa9c6f9bd78937edaa457283c02738e96680ffcf1c16c06c62be9a9403aa0a10899dd54cbff67d77", @ANYRES8=r8], 0x20}}, 0x40c4) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r9) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020f00001500000000000000000000000800120000000100000000000000000006000000000000000000000000000000000000000000000000000000000000002001000000000000000000000000000205000600000000000a00000300000000fe8000000000000000000000000000bb000000000000000001001800000001"], 0xa8}}, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffffffc, 0xf) 18.697332681s ago: executing program 43 (id=5541): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x5, 0x0) unshare(0x20000400) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x12, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x7}], 0x1c) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000180)=0x4) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="f5af24bd7000000000000e"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="ea12b41154c9534cea4518bc777764e5e3f36170770db4b448c3c9fc17b188227c5dd4d59a57ac05b1bb0d74321181b6a6071f84b5526825eb4959f0c318387c0257dc7b2af6399ad40606b9639ee037c3fa9c6f9bd78937edaa457283c02738e96680ffcf1c16c06c62be9a9403aa0a10899dd54cbff67d77", @ANYRES8=r8], 0x20}}, 0x40c4) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r9) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020f00001500000000000000000000000800120000000100000000000000000006000000000000000000000000000000000000000000000000000000000000002001000000000000000000000000000205000600000000000a00000300000000fe8000000000000000000000000000bb000000000000000001001800000001"], 0xa8}}, 0x0) splice(r2, 0x0, r1, 0x0, 0xfffffffc, 0xf) 2.931610028s ago: executing program 0 (id=5642): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x148, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0xf29a}, {0x8, 0x13, 0xd}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0xf}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x8001}, {0x8, 0x13, 0x8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008c84) (async) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4010, r0}, 0x18) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r5, r4, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000100)={'gretap0\x00', r4, 0x40, 0x20, 0x9, 0x7, {{0x6, 0x4, 0x2, 0x4, 0x18, 0x67, 0x10, 0x81, 0x4, 0x0, @empty, @empty, {[@end]}}}}}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r7, r8, 0x26, 0x0, @void}, 0x10) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0xd}, 0xc) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0xe028, 0x28}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) (async) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r13, &(0x7f0000000c80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x108, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40008c1}, 0x10) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="5ef79b3fa0bf41d33620904120615b6230bd91258337bb9a8842a8251e7f95c1c324709fc1fa44ea701ec5dddd6153ac1e09a48ee7fa536922467d7dfcce92301a79e290d289a018835e88b799264296"], 0x34}}, 0x0) (async) r15 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) (async) bind$inet6(r14, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r14, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0xd, @loopback}, 0x1c) (async) sendto$inet6(r14, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r14, 0x0) splice(r14, 0x0, r13, 0x0, 0x2, 0x0) (async) getsockopt$inet_pktinfo(r13, 0x0, 0x8, &(0x7f0000000280)={0x0, @rand_addr, @empty}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5a8}, [@ldst={0x1, 0x3, 0x6, 0x7, 0x4, 0xfffffffffffffffc, 0x9}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000000c0)='syzkaller\x00', 0xff, 0xcd, &(0x7f00000002c0)=""/205, 0x41100, 0x3, '\x00', r6, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r7, 0x1, &(0x7f00000005c0)=[r9, r10, r11, r12, r13], &(0x7f0000000600)=[{0x0, 0x4, 0x0, 0x1}], 0x10, 0x3ff}, 0x94) 2.927802119s ago: executing program 3 (id=5643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x40b, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}, @NFTA_RULE_USERDATA={0x5d, 0x7, 0x1, 0x0, "4a6e9c176a9931ec53f8da91292f31d412637fe4a620853552244f93f46f39d998b5aa66631d98eeb917cbccca99e02316b66cde641d4d92e8affbcccc302973be28319fa5359366da5494c80864c94056f7e02f03db241da7"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0xd4}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000300)="a0", 0x1, 0x0, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0x21) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000240)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x60000050) 2.494079139s ago: executing program 0 (id=5645): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg$unix(r3, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) 2.317447076s ago: executing program 0 (id=5648): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'batadv0\x00', {}, 0xce4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb8, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "9c83c74f031bbeba4ce8ee69b80dc05a309e53c1dd7317"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb0, 0x15, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_OBJ_USERDATA={0x53, 0x8, "4feeac69a77e0590e8c86b4193f62dea55e6ab1a3116b3d4f4026d88d2843196d09fcd17e3fa3b5fad4718a9571473e3b3783941a52e25707c99c43e52c16c789592814376022309860576bb6116c4"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2000c895}, 0x4004000) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r4, 0x1) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000003c0)={0x0, 0x6}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000440)={r7, 0x91, "86d1a5092bf32c0050f0774e8e12b741d786f54729bf5f50bf47bf0c436ac443897684250d615ee124b0e7bfcde4035a3339cc40e6c39abd8c65b38c7ed93c3ad59db0432796fe1d85f27e72e15b96dab6115ef2580464c0678d77f9ae945b5b33205600eda597dafa43a4ad96bd461c791f2f63be1713ba39b4da7e7d5e5ed0094046e4dc8e7acd262dac880280351824"}, &(0x7f0000000500)=0x99) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000005c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000600)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000640)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000680)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000006c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000700)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000800)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r10, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x24040000) recvmmsg(r1, &(0x7f00000094c0)=[{{&(0x7f0000000840)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001c80)=[{&(0x7f00000008c0)=""/190, 0xbe}, {&(0x7f0000000980)=""/45, 0x2d}, {&(0x7f00000009c0)=""/199, 0xc7}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/245, 0xf5}, {&(0x7f0000001bc0)=""/189, 0xbd}], 0x6, &(0x7f0000001d00)=""/4096, 0x1000}, 0x2}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002d00)=""/227, 0xe3}, {&(0x7f0000002e00)=""/22, 0x16}, {&(0x7f0000002e40)=""/71, 0x47}, {&(0x7f0000002ec0)=""/164, 0xa4}], 0x4}, 0x6}, {{&(0x7f0000002fc0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}}, 0x80, &(0x7f0000003180)=[{&(0x7f0000003040)=""/98, 0x62}, {&(0x7f00000030c0)=""/129, 0x81}], 0x2, &(0x7f00000031c0)=""/1, 0x1}, 0x2}, {{&(0x7f0000003200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000004700)=[{&(0x7f0000003280)=""/105, 0x69}, {&(0x7f0000003300)=""/210, 0xd2}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/129, 0x81}, {&(0x7f00000044c0)=""/118, 0x76}, {&(0x7f0000004540)=""/30, 0x1e}, {&(0x7f0000004580)=""/156, 0x9c}, {&(0x7f0000004640)=""/5, 0x5}, {&(0x7f0000004680)=""/112, 0x70}], 0x9, &(0x7f00000047c0)=""/129, 0x81}, 0x7}, {{&(0x7f0000004880)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000004900)=""/23, 0x17}, {&(0x7f0000004940)=""/135, 0x87}, {&(0x7f0000004a00)=""/4, 0x4}, {&(0x7f0000004a40)=""/79, 0x4f}], 0x4, &(0x7f0000004b00)}, 0x4}, {{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000004b40)=""/115, 0x73}, {&(0x7f0000004bc0)=""/122, 0x7a}, {&(0x7f0000004c40)=""/82, 0x52}, {&(0x7f0000004cc0)=""/174, 0xae}, {&(0x7f0000004d80)=""/214, 0xd6}, {&(0x7f0000004e80)=""/121, 0x79}, {&(0x7f0000004f00)=""/4096, 0x1000}, {&(0x7f0000005f00)=""/201, 0xc9}, {&(0x7f0000006000)=""/76, 0x4c}, {&(0x7f0000006080)=""/171, 0xab}], 0xa}, 0x8}, {{&(0x7f0000006200)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000064c0)=[{&(0x7f0000006280)=""/205, 0xcd}, {&(0x7f0000006380)=""/166, 0xa6}, {&(0x7f0000006440)=""/50, 0x32}, {&(0x7f0000006480)=""/18, 0x12}], 0x4, &(0x7f0000006500)=""/123, 0x7b}, 0x3}, {{&(0x7f0000006580)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000006d40)=[{&(0x7f0000006600)=""/237, 0xed}, {&(0x7f0000006700)=""/225, 0xe1}, {&(0x7f0000006800)=""/209, 0xd1}, {&(0x7f0000006900)=""/148, 0x94}, {&(0x7f00000069c0)=""/31, 0x1f}, {&(0x7f0000006a00)=""/189, 0xbd}, {&(0x7f0000006ac0)=""/179, 0xb3}, {&(0x7f0000006b80)=""/172, 0xac}, {&(0x7f0000006c40)=""/34, 0x22}, {&(0x7f0000006c80)=""/167, 0xa7}], 0xa, &(0x7f0000006e00)=""/108, 0x6c}, 0xf15}, {{&(0x7f0000006e80), 0x80, &(0x7f0000009380)=[{&(0x7f0000006f00)=""/184, 0xb8}, {&(0x7f0000006fc0)=""/4096, 0x1000}, {&(0x7f0000007fc0)=""/188, 0xbc}, {&(0x7f0000008080)=""/45, 0x2d}, {&(0x7f00000080c0)=""/4096, 0x1000}, {&(0x7f00000090c0)=""/26, 0x1a}, {&(0x7f0000009100)=""/131, 0x83}, {&(0x7f00000091c0)=""/109, 0x6d}, {&(0x7f0000009240)=""/75, 0x4b}, {&(0x7f00000092c0)=""/162, 0xa2}], 0xa, &(0x7f0000009440)=""/117, 0x75}, 0x741}], 0x9, 0x2000, &(0x7f0000009700)={0x77359400}) bind$x25(r17, &(0x7f0000009740)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) writev(r3, &(0x7f0000009bc0)=[{&(0x7f0000009780)="ed9f9bad33be6c8290bc44304a48a01e293bf7c4c939fae26a4aab1948f81f7e3a7cfaba310415c01b0705349760fc8a79ba626ac0e367ba332b017bb70db98f6a951f3e80ac4e22dbfd948c5ee2b576af0917f6faef141d583b7dcfbb287bc9f0e3d1bbb98184503ef6ad233eec017a6e823c83cb2c7037d702b572607b9d4c260839c53a835ea4d6fb7c35c493db9a6c2f9e47585acfb592fb1580c096b951ddcfc35e3a0cee53970fa4df5f3670eb1d5b7c15ae194f181b4c88b5f1eca3dcf4edd7625a3fe9bc1cfe270ba7430aae6ac78003a6ca3fc920264b6175d92530529d0519eefe7d3b9dec37e13fa6bc04", 0xf0}, {&(0x7f0000009880)="6e92148b70e7522bd4b34a6f47a2b3cf5799ca15431ca71e7ee7d275e33d0cf021982918713fe9a7efa327205e664cb29867b6b13bc664afc21ff540d2b8df82bf5970bdbee52706b1bf118d4f5caef3c4152f64d80a1a2c3e3ab8fee62069633b8c74a3b8fba6d0a2707f656ef840928e39b60e1a37f571e0d40630ec0ba31653df82171c6d97517ba5526215927c3fc40552", 0x93}, {&(0x7f0000009940)="275ac956a9d97f0947baceef2e9fd1c8e775a44017777b48112d75beabd37e0955e08349300a062c157bef9535a6054eea0938223209d0a4ea2afcbc41aa82a5935e673c6867e58b2e5f05506eaae7892fd7eff8b8b3eb3bbc99b9d33a0983e9a1b808f8428c6682fe62c13bb4d924d20c1da41e65224a524f2b6c1a306e06f19cc1e360a0633cae5fb9b085f4977f2bb1c118b56b484d5021063bec27cb0832435f0dba4568b633c22963ede421a6db072e1e196c8563136c51afb1a4397ae83f4c2aada25cfaa5", 0xc8}, {&(0x7f0000009a40)="1e06134d3072d389c956a9ec85bb1796faf9f6337440d71aeb109d8faaef055bc733997864e30eb9d9f4856b69055e4757f543332372cbe9dba1dddcd0f4e700a76c0c6384caa211d70f38441429863b7a3e517acf5c73d486f68e268560082764d3c82bba87259cacc5f9fbe9fed035701a86e4fcfb0d482523ad7852e06ef6282c7881845a06bee2dab48eedc4f39989ae1381e205659b83d3521f1bda04f113a3f09b7efe21789fb2946a36465d9cce2a07713477ec7cdb8f513fa6cf65da85694989527952b3d0037d572a85c113ef6eb1b37e52bc685bc01ab215d125ac062cf1ec2e7ea5d4e6df", 0xea}, {&(0x7f0000009b40)="38db18616b20bf9212e96ec4d67176fca7dbe3c33c1420cc1314ff751ce9fead746bfeb5344a30f44ff1bb5c3f39e6f975ddb0bf126a361d1c307a420b6e04dc5d876c11786f5fdc14a62daf19c63d4aebc4b7b8", 0x54}], 0x5) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r17, 0x942e, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000009c40)=@assoc_value={r8, 0x1}, 0x8) openat$cgroup_int(r6, &(0x7f0000009c80)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendmsg(r5, &(0x7f000000a080)={&(0x7f0000009cc0)=@caif=@rfm={0x25, 0x10, "68bc59bed5a892e3c72880db6858aaa6"}, 0x80, &(0x7f0000009f40)=[{&(0x7f0000009d40)="484fc39de622f9f15f826ba8aab8c080b135f3d2742f555c3eb00eafe55ff529d1cb211c30ebee1db1e18e1b37e8098589", 0x31}, {&(0x7f0000009d80)="9a563ae35642b5210eac566fae8af8e70fafda8de6879e177345f7b9b6fa17cc3b90f2cbb0b707d3e620c4c62813f514314305bc8ef774a0d859985d6725f0f34cb475e1b667a626a48c8a08ffb1cad78b1a9d7a7c2aebbfabc2a2c605c07551321f4a670a33bf9a347cdaaa9c9a755bf28f9c68a755d12d5663974eeeaed7034459", 0x82}, {&(0x7f0000009e40)="3ad13472c27b15c50e5f0ba7516b8df7baeaf4f17b0f756c72b67677ea52e42fe440ee28481a0afd48a8a5fabb5a664736525478640933dd924ce055bc0b0a4beffb6ca1006ee85be30c2118a35038dc2d", 0x51}, {&(0x7f0000009ec0)="20d5fc3970b3976612dc8016fb2e30a2a5a1bf51e7a50d58592c516986d6325c5db2d598c7f44e95b27049246fc469d0c6d5cd792214c0951b394049f1c588732e", 0x41}], 0x4, &(0x7f0000009f80)=[{0xd8, 0x16b, 0x5, "6ab82c93972426c6932b03995f5dbb957f0f41c7771d30831d1f7b145fa50032c89d1fc3674056a25c2dacb7f6c877491c1f5110ca356617dba11e21e071f1b25d5079f8960cab798285805eb270135cb07ca6caee1755110cb9ed630b4e744ec47a0d97116d59bbf1f376ce7176dd6e88be72fdf663f5586cfdd9832ee5d6c6678a5c9359b4659206cfb500bd592316858ad231bb45b2efcdecdac358256b3abc1329b9d162faaee64d6e942a1965c3ef37c0811d01c788ecea7c4e2685663207e8109e"}], 0xd8}, 0x24000000) bind$x25(r3, &(0x7f000000a0c0), 0x12) 2.031962267s ago: executing program 5 (id=5650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000001b0a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000008c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.910843061s ago: executing program 3 (id=5651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0xf00, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) (async) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x168, r2, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff3a}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff8001}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x57}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x844}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5a}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x168}, 0x1, 0x0, 0x0, 0x840}, 0x4004850) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}}, 0x0) 1.817854973s ago: executing program 5 (id=5652): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r1, @ANYBLOB="01000000000000047fc9010000000400048008000200010000000800010000000000d00008802c00078008000600c500000008000500aee6633708000600d9000000080005002d7c9172080005006d67491d0c0007800800050024da98751c00078008000500878f000008000600df0000de"], 0x10c}}, 0x0) 1.713955224s ago: executing program 3 (id=5654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r6, r5, 0x2f}, 0x20) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r8, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r9, r7}, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x9, 0xb}, {0xd, 0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0xff800000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000071}, 0x4008000) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (rerun: 64) 1.581400415s ago: executing program 5 (id=5655): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x0, 0x30, 0x0, &(0x7f000000a500)) r1 = socket$inet(0x2, 0x4000000805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x13, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="b700000060000000bca3000000000000240300001afeffff620af0fff8ffffff69a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000a61147900000000001d430000000000007a0a00fe0000001f6114040000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19b0161e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba3a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652db036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700e89a56fe8e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a033a2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf799b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d54abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c940000002b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac987fd637c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fd52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23541320d8579c5ab42bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de01fdee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812fc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b2584e6c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795d35f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7eddd12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f386c4dd317e11c1e89fac1fa9bceb50fad686ffbb5f7d79565271add99821c3601653bf6d4091ce8e0af3ab3a82a2735abb21d675d21f0a65caeb3213db39c9d55a35c1d588a732ee0b3d3a09c7786bc50b014802027d1da4a2a0fde4672d8dccd9fa000000000000697d1f90ddf1f320292d9fa4d81dc97f9fd7088d29edb2473b5284227936edf9f00b6deddc45841b6c54cd3741c95fe628f31ae0bf7619817735688fa26ce52c368e5ac02bdd46f10eae05da628e8d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r2, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x6, 0x0, 0x0, @broadcast}, 0x10) accept4$llc(r2, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="3a0000000000000084000000050000001000000000b235d16a39646906574791be1b67b5a4e0ec658e12000000"], 0x18}}], 0x2, 0x0) 1.363807651s ago: executing program 0 (id=5656): r0 = socket$isdn(0x22, 0x2, 0x22) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x4}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}]}]}, 0xcc}}, 0x0) close(r0) 1.363421887s ago: executing program 5 (id=5657): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x58, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x8090) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) (async) listen(r0, 0x50) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x42, r4, 0x1, 0x80000000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) (async) r5 = socket$inet6(0xa, 0x5, 0x0) (async) r6 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r6, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) (async) listen(r6, 0x3) (async) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) (async) listen(r5, 0x50) 1.253189242s ago: executing program 6 (id=5658): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x0) (async) bind$x25(r0, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 1.159370731s ago: executing program 3 (id=5659): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000000ca69d1480042cbd7004fddbdf25080001000500"], 0x18}}, 0x800) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002006000"], 0xa0}}, 0x0) 1.158967711s ago: executing program 0 (id=5660): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0x2}, {0x8, 0xfffc}, {0x6, 0xfff2}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) recvfrom(r0, &(0x7f00000001c0)=""/81, 0x51, 0x2122, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) syz_genetlink_get_family_id$team(&(0x7f0000000240), r2) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x98, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4e}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044000) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000440)=0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000480)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000880)={{r0}, r4, 0x5, @unused=[0x0, 0x800, 0xf83e, 0x1], @devid=r5}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000001880)={0x7, 0x0}, 0x8) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000018c0)={r6, 0x1, 0x10}, 0xc) pipe(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001940)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000019c0)={r8, r10, 0x24, 0x0, @val=@iter={&(0x7f0000001980)=@cgroup={0x2, 0xffffffffffffffff, 0x2}, 0x10}}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001a40)={r9, r1, 0x25, 0xe, @val=@iter={&(0x7f0000001a00)=@cgroup={0x4, r9, 0x2}, 0x10}}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r9, 0x89f9, &(0x7f0000001ac0)={'sit0\x00', &(0x7f0000001a80)={@private1, @dev={0xac, 0x14, 0x14, 0x26}, 0x14, 0x9}}) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000001b00)={0x0, @private, @initdev}, &(0x7f0000001b40)=0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000001bc0)={0x3, 'veth1_vlan\x00', {0x4}, 0x9}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001f00)={0x11, 0xa, &(0x7f0000001c00)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, r8}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xff}, @exit, @generic={0x3, 0x3, 0x0, 0x401, 0x9}], &(0x7f0000001c80)='GPL\x00', 0x101, 0xf8, &(0x7f0000001cc0)=""/248, 0x41100, 0x1, '\x00', r1, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001dc0)={0x5, 0x0, 0xff, 0x80000000}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001e00)=[r9, r7, r9], &(0x7f0000001e40)=[{0x4, 0x5, 0xa, 0x7}, {0x0, 0x3, 0x8, 0x9}, {0x4, 0x2, 0x10, 0x3}, {0x2, 0x2, 0xe, 0xb}, {0x5, 0x1, 0xd, 0x3}, {0x0, 0x5, 0x2, 0xc}, {0x4, 0x5, 0xc, 0x2}, {0x5, 0x4, 0x7, 0x2}, {0x2, 0x3, 0x10, 0x8}], 0x10, 0xffff01f9}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r11, 0x8010661b, &(0x7f0000001fc0)) setsockopt$inet6_tcp_TLS_RX(r9, 0x11a, 0x2, &(0x7f0000002000)=@gcm_128={{0x303}, "fb6e34ef457f1f70", "9a78149e4b2236016ac5f783af0df110", "cff1bf4a", "87b2a69294144780"}, 0x28) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000002080), r2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000002180)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x54, r12, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x32}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002200), r8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x14, r13, 0x20, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008814}, 0x4000000) socket(0x2a, 0x6, 0x2) 1.154371902s ago: executing program 7 (id=5543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x30, 0x65, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x5, 0x0, 0x65, 0x174, 0xd, 0x73, 0x6, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) 1.095995331s ago: executing program 5 (id=5661): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x100}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000001640)=[{{&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000480)=[{&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000100)=""/54, 0x36}, {&(0x7f0000000300)=""/161, 0xa1}, {&(0x7f00000003c0)=""/175, 0xaf}], 0x4}, 0x7}, {{&(0x7f00000004c0)=@generic, 0x80, &(0x7f0000000a40)=[{&(0x7f00000005c0)=""/210, 0xd2}, {&(0x7f00000006c0)=""/219, 0xdb}, {&(0x7f00000007c0)=""/167, 0xa7}, {&(0x7f0000000880)=""/235, 0xeb}, {&(0x7f0000000540)=""/57, 0x39}, {&(0x7f0000000980)=""/165, 0xa5}], 0x6, &(0x7f0000000ac0)=""/176, 0xb0}, 0x7879}, {{&(0x7f0000000c00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000c80)=""/137, 0x89}, {&(0x7f0000000d40)=""/244, 0xf4}, {&(0x7f0000000e40)=""/171, 0xab}, {&(0x7f0000000f00)=""/20, 0x14}, {&(0x7f0000000f40)=""/23, 0x17}, {&(0x7f0000000f80)=""/209, 0xd1}], 0x6, &(0x7f0000001100)=""/196, 0xc4}, 0x3}, {{&(0x7f0000001200)=@generic, 0x80, &(0x7f0000001580)=[{&(0x7f0000001280)=""/80, 0x50}, {&(0x7f0000001300)=""/103, 0x67}, {&(0x7f0000001380)=""/11, 0xb}, {&(0x7f00000013c0)=""/244, 0xf4}, {&(0x7f00000014c0)=""/148, 0x94}], 0x5, &(0x7f0000001600)=""/31, 0x1f}, 0x9}], 0x4, 0x10000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x14, 0x1, 0x3, 0x801}, 0x14}}, 0x0) 1.095294843s ago: executing program 6 (id=5662): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}]}, 0x2c}}, 0x64000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000100071102800000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x90) 971.087174ms ago: executing program 3 (id=5663): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x800) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000500)="edb52945033c624178566edbe9ff60737d1d338b4afa4f668cf703ed9915e3c40f7fbc09a7857f2dc8e6f46c4db11daa6c7d54a41a1e6b0fae7a4134c8816ec9e2672d259a4a45abfef1ff089a57380ead5974e7e185e06fd805e4987a48e49288834bf3b65fb01122aaa1fbd1c71f21421d7624eb8b732f1bcc3c437c0c0df574e7607f448729372c9ac8dc46f7963a71d70f0fccfc3efb9edee8a2fd166c1db4fc5745c5ed4fa9aa2a84e821cb") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x9}, 0x10) sendto$inet(r1, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @loopback}, 0x10) r2 = socket(0x23, 0x2, 0x3) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f00000002c0)='(\\\x00', 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0xac}, 0x1, 0x0, 0x0, 0x45}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000001c0)={{'\x00', 0x3}, {0x4}, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)="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", 0x17e, 0x0, &(0x7f00000007c0)={0x2, 0xd}, 0x19}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x34, r6, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094) socket$inet6_sctp(0xa, 0x0, 0x84) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r9, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f00000003c0)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x1, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r10, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="d800000019008111e0020f060d8107040a600200640f040b067c55a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a290457f0189b316277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b83ece0b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) 963.363596ms ago: executing program 6 (id=5664): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = accept4(r0, &(0x7f0000000000)=@tipc, &(0x7f0000000080)=0x80, 0x80000) ioctl$int_in(r1, 0xe5efae910e14c067, &(0x7f00000000c0)=0x4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000001180)={{r1}, "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"}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r3, 0x6, 0x4, 0x0, 0xf0ff1f00000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x1a, 0x3, &(0x7f0000000f80)=@framed, &(0x7f0000000fc0)='syzkaller\x00', 0x8}, 0x94) socket$kcm(0x29, 0x2, 0x0) (async) accept4(r0, &(0x7f0000000000)=@tipc, &(0x7f0000000080)=0x80, 0x80000) (async) ioctl$int_in(r1, 0xe5efae910e14c067, &(0x7f00000000c0)=0x4) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000001180)={{r1}, "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"}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) getsockopt$bt_BT_SECURITY(r3, 0x6, 0x4, 0x0, 0xf0ff1f00000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x1a, 0x3, &(0x7f0000000f80)=@framed, &(0x7f0000000fc0)='syzkaller\x00', 0x8}, 0x94) (async) 946.201993ms ago: executing program 7 (id=5665): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x6}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0xffffffffffffff92, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x1}}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0xa}, 0x8) shutdown(r2, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 767.679412ms ago: executing program 7 (id=5666): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000f40)=""/4089, 0x1a, 0xff9, 0x8}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001280)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000200)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e23, 0x8, @private0={0xfc, 0x0, '\x00', 0x9}, 0x3}, @in6={0xa, 0x4e21, 0x1, @empty, 0x8200}, @in6={0xa, 0x4e20, 0xb89, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}], 0x64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x18) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x1, 0xfff8, 0x7, 0x8, 0x200}, {0x20, 0x1, 0xb, 0x9, 0x9}, 0x3, 0xfffffffb, 0x67}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r5) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}}, 0x4008000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x5, '\x00', r6, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x30, r8, 0x201, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe2}]}, 0x30}, 0x1, 0x0, 0x0, 0x42094}, 0x20004050) getsockopt(r1, 0x200000000114, 0x2720, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 762.309564ms ago: executing program 6 (id=5667): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r5}]}}}, @IFLA_IFNAME={0x22, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYRES16=r6, @ANYRES16=r6, @ANYBLOB="01000000000000000000010000004c00088048000080200009801c00b00fdc3a449ffe38007f0f000200ac1414aa0500030002000000240001000000000000000000000000000000000000000000000000000000000000000000d1fd5d4543a80f5219a9d751f0cb080800"], 0x7c}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 522.196581ms ago: executing program 6 (id=5668): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000010c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000c00000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0x401, 0x4) 463.909205ms ago: executing program 7 (id=5669): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-aesni\x00'}, 0x58) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002cbd7000ff0700004100000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x200088c0}, 0x4000) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000040)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) write$bt_hci(r2, 0x0, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x58}}, 0x48010) 382.045185ms ago: executing program 6 (id=5670): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) sendto$packet(r4, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x88a8, r8, 0x1, 0x4, 0x6, @local}, 0x14) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket(0x2c, 0x800, 0x243) bind$inet6(r11, &(0x7f0000000080)={0xa, 0x4e24, 0x55, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) r12 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) (async) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f00000003c0)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000580)="5b94755b74629a9b55f7c9f76fb71feb06743c9aa12c28a42212a704830953f0c1aeb8899154e41fd10c0c599080e08fa26ea1a437476f3cbc646124aaf85da46feb0b849b4dee258c735cfdfd5d3e13b5a430f96472bf484af9f16c3df826cc11d57681ee6a5a455acdd9a7c0b8407aef36b5851d9651bfa160efa6c8905365ec73d342db80c7e71f2c61aa1df7f28f115570dfb2fbc841b3d08ed531c0bcf335cbe1b347e352a32b", 0xa9}, {&(0x7f0000000300)="82748e1763f396b8c76222dbf24ff7cbd3a9c72e1724c28910849161a4dcc26ba32b86c89ef66eb031e200ffc9238783dde85460574632e286bd", 0x3a}, {&(0x7f00000006c0)="dd90a8f7659460876418eeaba82d5ebbdc427b25110880d9a7023141574d13db00fc35f588ed23e8156aaebddd005c33265047c65f254647c94b8849347484f9f2036f300ca72f686d6e7090c30707c74ca50e09f6a3f842beca797b35004661ca2dc5bb84044fa4738c7a3932601aa3f13f8d06e0c38807992a99eea34511c57c8f5a252049ca0188a08db8b85d2f4a0f5a411292fce989d5d724d0e742bb394d8e6c3565a8b5f2f8e360501eea154eb2fcac199a1ddee24329f3099df4eb3d57b3ba0fcc61d1b78402c903b35b299ec5ce0fc45fbd", 0xd6}], 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="680000000000000017010000020000004d000000ddb314a6a2e450ab79ee57777dcf10fd3aa2e7173d3f3ad9a86fad6a284243b8b11102d82034f098e548e1ac9e342c93364c487956d0e912ae0e8b56ec6eb3dfca9e5ff2a6eabf8fbf20a6e6ea00000000000000180000000000000017010000040000000800000000000000180000000000000017010000040000000300000000000000b53dc6e3"], 0x98, 0x41}], 0x1, 0x40004) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 361.63669ms ago: executing program 7 (id=5671): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) (async) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 179.728792ms ago: executing program 0 (id=5672): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$inet6(0xa, 0x805, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) write$cgroup_int(r2, &(0x7f0000000100)=0x3, 0x12) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000040)=0x10) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r5, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000001080)="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", 0x42f}, {&(0x7f00000002c0)="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", 0x151}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x40000f0, 0x95c, 0xffffffff, &(0x7f0000000280)="7b5515c2c8bca12641e65d58fd1a12f639", 0x0, 0x71e}, 0x28) 179.242416ms ago: executing program 5 (id=5673): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f00000001c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) (async) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) pread64(r2, &(0x7f0000000200)=""/108, 0x6c, 0xff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={r3}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={r3, 0xd44b}, 0x8) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r7) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r7) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x20, r8, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x20, r8, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r4, 0x952de000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x31}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x1a00, r8, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x1914, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x110, 0xe, 0x0, 0x1, [{0x37, 0x0, "74e2a56ae3d4b315b574c3f8624b5e244fad5fa91d4e9f64f250a0c757774fed4f4f23565db240d73677d85543c5c8b21d56b4"}, {0x1b, 0x0, "b613048aea8bbf19f88223e0863bcc5007f94cee57848a"}, {0xd, 0x0, "62d324067aa70d75d8"}, {0xa5, 0x0, "659038b6400e054ab63d794327e8d533b9bee7a36c94b93e86cc3b1c114f2234644a223b6658e27ba9aecf0a17f4a3c7d065c765707f2b2de9fd83f79cbbbb451a4fbf803858e4057c08d410bb597d0be89d37cb90b62b14bea36944db5b017b2e551047e2ef0b126c9f33f0e5efee35e476e284556a6c0512136e604bb103bd68a86ce47faecae4d2b2526a9c2003ff2d0b8c368bcca8ba8275f97ecac9f17e7a"}]}, @NL80211_NAN_FUNC_SRF={0x4a0, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x2}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF={0x103, 0x2, "9054c68f227d034d10952ee40cc878392521fc38df3d076205d2a3f408b55853827395e3b6925d23a3e0a6318ec4f5ec729b75ea5aa8e0c36bde3a0bd73aec3620562193527b110d2ea817217dee1bd1c556effe5e02269b516fd6079e0de89919a256a8439583fa8f5bf40a3bdf459b384361aec668e68ecc92fcd13c1df257c5bc2b0e593699aabb6b26b5ba6d6e6f5424f337f7d3deb585b3a3f9d336a65335669b644cbc422dfa2ae0436e7d892c701a5bf9799613d252aea81a58463283013f252155bd811635bad146f0a11739f21ab9491c265f1ab527bae1350b3d1ea33ec70bd310c199bf0d90c95f1724be395fc640467199626c78b5a987ee6a"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x204, 0xe, 0x0, 0x1, [{0x4}, {0x25, 0x0, "b9d46732373467d04def66ee4d3b9ba21b66e83e10e99e04a7e5531f1d90261745"}, {0xab, 0x0, "0bcd8b4c687de399761d8f44841d167a5daa55af44ab86a5eb77a35e7d0203f7f732770c8fa1e3a41d0f8b84657634539db22f7384d0ff65a4cfe68dcaf31238b237f804696be9c1ee1a2dddb6dce08fb46e11658ee9f6a0c6241f02b33b96a4609e01e4f231809f23663c1fc42744dc9f0ae24faa6194c3de4de68ee425e038cacfa66dc7d1db8f4f7e6cfbf77c6af3762253319f8bdf74813ecf1b407480812f4c038e8e183e"}, {0xb5, 0x0, "cf5c5ecdcdff78cdc81425e25f5a1c18747511f758d4df2bc96213f29553d6bf31254648da4acee6075e3c2822a712b03297dcf97db1484f2717e470ff468554ef1639e998c8768506fe2be84a9678b411d3f1d8a8beebb8cbe53323857a972a1c65940d6a70bdabb8784434b5d4f2d1b73a6422af1ad7323a537db4de0129497b60dc80bc791a8004eec4b166fd2e6c89120c88a66fbb2a2c39dc89e0b0a8e4ae0eb5a5cb4e70e3a224a2d54b87f4d7f8"}, {0x6d, 0x0, "6d4ad51f7df5fecfff90fc7e124e8a297706e83f0406c13779a25cae9b3422ab486206afa26e8106cb7dc8d4222905c209ae00e2cec7590217fb8204cd65bc0b3c80d75eae4b3a76a5b6a489fe6f2898e65f20e951f10b7fa68835c1e5a41007d908aa66dc7a006a19"}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x115c, 0xe, 0x0, 0x1, [{0x1004, 0x0, "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"}, {0x28, 0x0, "47cc68673ef56f160b29737e9227acc1b34f780af7e0231bd80ebfb7c3689d044f8f001b"}, {0xac, 0x0, "78dcf53bd1e4ee9be0010d4b81c7ddcd229435f65b2a442814f00a6fed7615044912d9b7ca0e6859c8773fca395ca33e945b39aa303039db9bc0f1b2a3ff7ddf4a38730c45482b9f800538169259c77e3b9c9dd50a77799e714a99f9b4d7d30644b5b077a8dafe12d405f483ae13d6232e92b636249668034f002fabf149a66aca26ea120bf2ab8624a146d6a097023c82eefe3861a0a8346d3b655131ee44a2a9d3901e68f11b5e"}, {0x7f, 0x0, "a641135522934d6711cc6a022eac2d1f55c73e8eb246c659db583b01d6e07b3b91ecd4406973c91a20fb414a7ebd40281b9b361551aeadeae3a23ed3efee86a57cc9570f014092120cd51fe34d1f6b69c2ae50a0546707dccf9e99a6f5867b06c0e1ba1c5af61ac02634d2f82695776c87d96dce0cdfebd2cf81a1"}]}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}]}, @NL80211_ATTR_NAN_FUNC={0xcc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0xa4, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x7c, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}]}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}]}, 0x1a00}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048000) 178.275088ms ago: executing program 7 (id=5674): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[], 0x50}}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x40}, 0x1, 0xffffffff00000003}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) r4 = accept(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000340)={0x20002008}) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, 0x0) getpid() (async) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="d4070000", @ANYRES16=0x0, @ANYBLOB="080025bd7000fddbdf251b000000080001007063690011000200303030303a30303a31302e300000000008000b00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000b000000080001007063690011000200303030303a30303a31302e300000000008000b00ffffff7f"], 0xd4}, 0x1, 0x0, 0x0, 0x48c4}, 0x800) (async) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, 0x0) (async) getpid() (async) ioctl$sock_SIOCSPGRP(r2, 0x8902, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), r5) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001040)={'wpan4\x00'}) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="010028bd7000fcdbdf250f00000800030000000000000000ff0100000000", @ANYRES8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, r6, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) (async) bind$nfc_llcp(r4, &(0x7f0000000240)={0x27, r6, 0x0, 0x4, 0x50, 0xff, "bac5115c75ad488702b535116f631007002203c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e0000000000000000f5ffffff00", 0x28}, 0x60) (async) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000380)) 0s ago: executing program 3 (id=5675): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$sock(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="b31654f65e", 0x5}], 0x1}, 0x81) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x11, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, [0x0, 0x4000]}}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) kernel console output (not intermixed with test programs): s `syz.9.4172'. [ 518.707055][T20918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4173'. [ 519.015776][T20527] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 519.063399][T20527] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 519.093626][T20527] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 519.123068][T20929] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4177'. [ 519.165344][T20527] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 519.223617][T20939] xt_HMARK: proto mask must be zero with L3 mode [ 519.360260][T20943] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4181'. [ 519.634070][T20953] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4185'. [ 519.663252][T20527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.742198][T20953] bond2: entered promiscuous mode [ 519.851143][T20527] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.887443][T17642] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.894632][T17642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.182334][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.189635][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.798868][T20999] netlink: 'syz.7.4196': attribute type 1 has an invalid length. [ 521.011150][T20999] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4196'. [ 521.034358][T21009] netlink: 'syz.1.4198': attribute type 29 has an invalid length. [ 521.063424][T21011] netlink: 'syz.1.4198': attribute type 29 has an invalid length. [ 521.093134][T21009] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4198'. [ 521.165942][T21013] sit0: entered promiscuous mode [ 521.234182][T21013] netlink: 'syz.1.4202': attribute type 1 has an invalid length. [ 521.264044][T21019] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4200'. [ 521.266353][T21013] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4202'. [ 521.348922][T20527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.381131][T21021] netlink: 'syz.8.4203': attribute type 13 has an invalid length. [ 521.419796][T21021] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4203'. [ 521.451977][T21021] netlink: 'syz.8.4203': attribute type 13 has an invalid length. [ 521.817553][T21039] veth0: entered promiscuous mode [ 522.122480][T21061] macvtap1: entered promiscuous mode [ 522.129887][T21061] vlan0: entered promiscuous mode [ 522.145500][T21061] macvtap1: entered allmulticast mode [ 522.165981][T21061] vlan0: entered allmulticast mode [ 522.183708][T21061] veth0_vlan: entered allmulticast mode [ 522.202712][T20527] veth0_vlan: entered promiscuous mode [ 522.237948][T21064] macvtap2: entered promiscuous mode [ 522.244902][T21064] macvtap2: entered allmulticast mode [ 522.297016][T20527] veth1_vlan: entered promiscuous mode [ 522.426782][T20527] veth0_macvtap: entered promiscuous mode [ 522.491212][T20527] veth1_macvtap: entered promiscuous mode [ 522.528633][T20527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.554955][T21038] veth0: left promiscuous mode [ 522.574760][T20527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.626793][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.666833][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.762404][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.782712][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.966339][T21087] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 522.977610][T10234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.994173][T10234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.072243][T21090] tipc: Enabling not permitted [ 523.083603][T21090] tipc: Enabling of bearer rejected, failed to enable media [ 523.137927][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.159570][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.280041][T21094] IPVS: Scheduler module ip_vs_sip not found [ 523.408795][T21105] netlink: 'syz.1.4224': attribute type 11 has an invalid length. [ 523.434646][T21105] netlink: 'syz.1.4224': attribute type 11 has an invalid length. [ 523.955254][T21140] __nla_validate_parse: 6 callbacks suppressed [ 523.955273][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4231'. [ 523.971321][T21140] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4231'. [ 523.997561][ T30] audit: type=1107 audit(1759735175.643:3): pid=21138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òЍŠç›' [ 524.073330][T21142] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4233'. [ 524.095233][T21142] chnl_net:caif_netlink_parms(): no params data found [ 524.674074][T21176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4243'. [ 524.694125][T21176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4243'. [ 524.726354][T21176] netlink: 50 bytes leftover after parsing attributes in process `syz.1.4243'. [ 525.186003][T21199] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4248'. [ 525.570507][T21227] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4257'. [ 525.596546][T21227] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4257'. [ 525.914784][T21242] netlink: 'syz.5.4260': attribute type 10 has an invalid length. [ 525.969877][T21242] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.984651][T21242] bridge_slave_1: left allmulticast mode [ 525.994469][T21242] bridge_slave_1: left promiscuous mode [ 526.007003][T21242] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.033108][T21242] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 526.130184][T21246] netlink: 2 bytes leftover after parsing attributes in process `syz.9.4261'. [ 526.918631][T21272] syzkaller1: entered allmulticast mode [ 528.321523][T21340] netlink: 'syz.5.4284': attribute type 1 has an invalid length. [ 528.385499][T21348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 528.706487][T21368] xt_socket: unknown flags 0xd0 [ 528.980669][T21381] netlink: 'syz.9.4295': attribute type 11 has an invalid length. [ 528.989397][T21381] __nla_validate_parse: 6 callbacks suppressed [ 528.989415][T21381] netlink: 224 bytes leftover after parsing attributes in process `syz.9.4295'. [ 529.071399][T21382] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4296'. [ 529.155146][T21392] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4299'. [ 529.187631][T21392] netlink: 176 bytes leftover after parsing attributes in process `syz.9.4299'. [ 529.212273][T21392] netlink: 'syz.9.4299': attribute type 5 has an invalid length. [ 529.343747][T16848] IPVS: starting estimator thread 0... [ 529.345091][T21405] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 529.383915][T21406] IPVS: set_ctl: invalid protocol: 45 224.0.0.2:20000 [ 529.437644][T21407] IPVS: using max 28 ests per chain, 67200 per kthread [ 529.976371][T21427] tap0: tun_chr_ioctl cmd 1074025672 [ 530.004695][T21427] tap0: ignored: set checksum disabled [ 530.142596][T21434] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4306'. [ 530.413247][T21439] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4309'. [ 530.734644][T21459] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4315'. [ 530.767885][T21459] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4315'. [ 530.832977][T21463] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4316'. [ 530.903339][T21463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4316'. [ 532.187972][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 532.520817][T21534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.666996][T21537] netlink: 'syz.5.4340': attribute type 12 has an invalid length. [ 532.695312][T21541] netlink: 'syz.8.4342': attribute type 1 has an invalid length. [ 532.783720][T21541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.944995][T21545] bond0: (slave geneve3): making interface the new active one [ 533.002914][T21545] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 533.488927][T21569] netlink: 'syz.5.4347': attribute type 3 has an invalid length. [ 533.726485][T21575] netlink: 'syz.9.4350': attribute type 8 has an invalid length. [ 533.961436][T21589] netlink: 'syz.1.4354': attribute type 2 has an invalid length. [ 533.974292][T21589] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 534.008424][T21589] __nla_validate_parse: 9 callbacks suppressed [ 534.008445][T21589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4354'. [ 534.275354][T21597] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 534.469020][T21604] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4359'. [ 534.753893][T21612] veth0_to_team: entered promiscuous mode [ 534.769878][T21614] netlink: 'syz.8.4361': attribute type 1 has an invalid length. [ 534.784798][T21612] veth0_to_team: entered allmulticast mode [ 534.865083][T21618] netlink: 'syz.5.4363': attribute type 1 has an invalid length. [ 534.873369][T21619] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4361'. [ 534.895833][T21618] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4363'. [ 534.942421][T21618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4363'. [ 535.254490][T21631] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4364'. [ 535.264924][T21631] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4364'. [ 535.380498][T21632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4367'. [ 535.484804][T21642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4367'. [ 535.836990][T21652] netlink: 'syz.9.4371': attribute type 30 has an invalid length. [ 536.019689][T21652] bond3: option arp_missed_max: invalid value (0) [ 536.081655][T21652] bond3: option arp_missed_max: allowed values 1 - 255 [ 536.120194][T21652] bond3 (unregistering): Released all slaves [ 536.273571][T21659] netlink: 284 bytes leftover after parsing attributes in process `syz.1.4372'. [ 537.384556][T21701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.576069][T21713] netlink: 'syz.8.4384': attribute type 2 has an invalid length. [ 537.828802][T21723] netlink: 'syz.7.4390': attribute type 10 has an invalid length. [ 537.918179][T21730] netlink: 'syz.1.4393': attribute type 1 has an invalid length. [ 537.934159][T21723] team0: Port device geneve0 added [ 538.090495][T21730] 8021q: adding VLAN 0 to HW filter on device bond9 [ 538.142596][T21748] netlink: 'syz.7.4397': attribute type 1 has an invalid length. [ 538.238891][T21731] bond9: (slave geneve2): making interface the new active one [ 538.282736][T21731] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 538.828908][T21779] netlink: 'syz.8.4406': attribute type 3 has an invalid length. [ 539.362401][T21800] __nla_validate_parse: 10 callbacks suppressed [ 539.362419][T21800] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4412'. [ 539.994820][T21827] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4418'. [ 540.100624][T21828] IPv6: sit1: Disabled Multicast RS [ 540.117373][T21828] sit1: entered allmulticast mode [ 540.167310][T21831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4420'. [ 540.340387][T21831] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 540.381474][T21831] bond10 (unregistering): Released all slaves [ 541.554410][T21870] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4428'. [ 541.950848][T21883] netlink: 516 bytes leftover after parsing attributes in process `syz.1.4433'. [ 541.974058][T21885] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4432'. [ 542.094497][T21888] netlink: 'syz.1.4434': attribute type 8 has an invalid length. [ 542.118745][T21889] netlink: 'syz.1.4434': attribute type 8 has an invalid length. [ 542.314049][T21891] netlink: 'syz.8.4435': attribute type 13 has an invalid length. [ 542.521239][T21900] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4438'. [ 542.737200][T21911] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4439'. [ 542.892280][T21917] netlink: 'syz.8.4440': attribute type 10 has an invalid length. [ 542.904565][T21917] team0: Device vethi failed to register rx_handler [ 543.012652][T21919] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4441'. [ 543.063563][T21920] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4441'. [ 543.495048][T21935] syzkaller1: entered promiscuous mode [ 543.531027][T21935] syzkaller1: entered allmulticast mode [ 543.548195][ T5856] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 543.564105][T21945] netlink: 'syz.9.4446': attribute type 10 has an invalid length. [ 544.106471][T21957] sctp: [Deprecated]: syz.1.4451 (pid 21957) Use of struct sctp_assoc_value in delayed_ack socket option. [ 544.106471][T21957] Use struct sctp_sack_info instead [ 544.719515][T21971] netlink: 'syz.9.4456': attribute type 7 has an invalid length. [ 544.759295][T21970] sch_fq: defrate 0 ignored. [ 544.986672][T21982] netlink: 'syz.9.4460': attribute type 1 has an invalid length. [ 544.996364][T21982] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 545.145558][T21988] __nla_validate_parse: 16 callbacks suppressed [ 545.145577][T21988] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4462'. [ 545.288393][T21994] syzkaller1: entered promiscuous mode [ 545.293900][T21994] syzkaller1: entered allmulticast mode [ 545.891870][T22015] syzkaller0: entered promiscuous mode [ 545.897375][T22015] syzkaller0: entered allmulticast mode [ 546.429859][T22032] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4474'. [ 546.610417][T22039] lo speed is unknown, defaulting to 1000 [ 546.658842][T22044] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.4477'. [ 546.939282][T22039] wlan0 speed is unknown, defaulting to 1000 [ 547.401725][T22063] netlink: 10 bytes leftover after parsing attributes in process `syz.8.4482'. [ 547.450056][T22063] netlink: 172 bytes leftover after parsing attributes in process `syz.8.4482'. [ 547.483488][T22063] netlink: 10 bytes leftover after parsing attributes in process `syz.8.4482'. [ 547.670001][T22068] xt_l2tp: v2 sid > 0xffff: 1114112 [ 548.210387][T22093] netlink: 'syz.8.4491': attribute type 8 has an invalid length. [ 548.406106][T22104] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4495'. [ 548.474221][T22104] 8021q: adding VLAN 0 to HW filter on device bond3 [ 548.492262][T22107] veth0: entered promiscuous mode [ 548.508250][T22107] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 548.624771][T22104] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4495'. [ 548.638776][T22110] team0: entered promiscuous mode [ 548.643945][T22110] team_slave_0: entered promiscuous mode [ 548.650256][T22110] team_slave_1: entered promiscuous mode [ 548.660268][T22110] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.677603][T22104] veth0_macvtap: left promiscuous mode [ 548.944784][T22116] netlink: 'syz.9.4498': attribute type 4 has an invalid length. [ 549.462561][T22138] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4506'. [ 549.682812][T22146] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4509'. [ 550.239165][T22167] macvlan4: entered promiscuous mode [ 550.244911][T22167] bond0: (slave macvlan4): Error -22 calling dev_set_mtu [ 551.188752][T22186] __nla_validate_parse: 1 callbacks suppressed [ 551.188885][T22186] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4518'. [ 551.226527][T22186] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4518'. [ 551.456333][T22191] bond4: entered allmulticast mode [ 551.463523][T22191] 8021q: adding VLAN 0 to HW filter on device bond4 [ 551.474296][T22191] bridge0: port 1(bond4) entered blocking state [ 551.480856][T22191] bridge0: port 1(bond4) entered disabled state [ 551.490858][T22191] bond4: entered promiscuous mode [ 551.894946][T22203] netlink: 812 bytes leftover after parsing attributes in process `syz.9.4524'. [ 552.051234][T22207] tc_dump_action: action bad kind [ 552.554821][T22217] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4528'. [ 552.768696][T22224] tipc: Enabled bearer , priority 0 [ 552.798143][T22224] tipc: Disabling bearer [ 552.979875][T22234] tipc: Enabled bearer , priority 0 [ 552.987633][T22234] syzkaller0: entered promiscuous mode [ 552.993117][T22234] syzkaller0: entered allmulticast mode [ 553.008577][T22234] tipc: Resetting bearer [ 553.037152][T22232] tipc: Resetting bearer [ 553.070419][T22232] tipc: Disabling bearer [ 553.598655][T22253] tipc: Enabled bearer , priority 0 [ 553.625447][T22254] syzkaller0: entered promiscuous mode [ 553.647322][T22257] netlink: 'syz.8.4541': attribute type 1 has an invalid length. [ 553.658045][T22254] syzkaller0: entered allmulticast mode [ 553.689686][T22257] netlink: 'syz.8.4541': attribute type 1 has an invalid length. [ 553.732292][T22253] tipc: Resetting bearer [ 553.752188][T22252] tipc: Resetting bearer [ 553.808573][T22252] tipc: Disabling bearer [ 553.854726][T22260] tipc: Enabling of bearer rejected, media not registered [ 554.067157][T21871] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 554.102699][T21871] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 554.118759][T21871] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 554.136250][T21871] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 554.148341][T21871] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 554.251165][T22267] lo speed is unknown, defaulting to 1000 [ 554.646774][T22267] wlan0 speed is unknown, defaulting to 1000 [ 554.720186][T21871] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 554.733831][T21871] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 554.744210][T21871] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 554.752488][T21871] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 554.762248][T21871] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 554.976269][T22282] lo speed is unknown, defaulting to 1000 [ 555.193599][T22307] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4552'. [ 555.356815][T22267] chnl_net:caif_netlink_parms(): no params data found [ 555.640651][T22267] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.661029][T22267] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.675053][T22267] bridge_slave_0: entered allmulticast mode [ 555.686091][T22267] bridge_slave_0: entered promiscuous mode [ 555.696076][T22282] wlan0 speed is unknown, defaulting to 1000 [ 555.731925][T22267] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.742781][T22267] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.750792][T22267] bridge_slave_1: entered allmulticast mode [ 555.767128][T22267] bridge_slave_1: entered promiscuous mode [ 555.874467][T22267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.895270][T22267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.971947][T22267] team0: Port device team_slave_0 added [ 555.992372][T22267] team0: Port device team_slave_1 added [ 556.023464][T22320] netlink: 'syz.8.4555': attribute type 8 has an invalid length. [ 556.271773][ T5856] Bluetooth: hci6: command tx timeout [ 556.282083][T22267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.292777][T22267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.320287][T22267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.351440][T22267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.371610][T22267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.399374][T22267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.747040][T22267] hsr_slave_0: entered promiscuous mode [ 556.784778][T22267] hsr_slave_1: entered promiscuous mode [ 556.793905][T22267] debugfs: 'hsr0' already exists in 'hsr' [ 556.799992][T22267] Cannot create hsr debugfs directory [ 556.827833][ T5856] Bluetooth: hci7: command tx timeout [ 556.852702][T22282] chnl_net:caif_netlink_parms(): no params data found [ 556.899915][T22342] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4559'. [ 556.938469][T22342] netlink: 'syz.8.4559': attribute type 2 has an invalid length. [ 556.971335][T22342] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4559'. [ 557.031129][T22342] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.208093][T22348] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4561'. [ 557.252766][T22282] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.272943][T22282] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.305422][T22282] bridge_slave_0: entered allmulticast mode [ 557.321470][T22282] bridge_slave_0: entered promiscuous mode [ 557.384448][T22352] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4562'. [ 557.387278][T22282] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.407989][T22282] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.415284][T22282] bridge_slave_1: entered allmulticast mode [ 557.423416][T22282] bridge_slave_1: entered promiscuous mode [ 557.576993][T22282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.611937][T22282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.804433][T22267] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.826421][T22267] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.871473][T22282] team0: Port device team_slave_0 added [ 557.913704][T22282] team0: Port device team_slave_1 added [ 558.021085][T22267] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.041584][T22267] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.062514][T22363] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4564'. [ 558.228228][T22267] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.244180][T22267] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.259481][T22368] netlink: 'syz.8.4565': attribute type 12 has an invalid length. [ 558.271653][T22282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.278845][T22282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.305291][T22282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.326857][T22282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.340074][T22282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.367480][ T5856] Bluetooth: hci6: command tx timeout [ 558.372958][T22282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.386826][T22368] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 558.420535][T22267] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.456366][T22267] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.513639][T22381] IPv6: NLM_F_CREATE should be specified when creating new route [ 558.780762][T22282] hsr_slave_0: entered promiscuous mode [ 558.796949][T22282] hsr_slave_1: entered promiscuous mode [ 558.804004][T22282] debugfs: 'hsr0' already exists in 'hsr' [ 558.809857][T22282] Cannot create hsr debugfs directory [ 558.835921][T22384] tipc: Enabled bearer , priority 0 [ 558.907955][ T5856] Bluetooth: hci7: command tx timeout [ 558.955244][T22385] syzkaller0: entered promiscuous mode [ 558.988955][T22385] syzkaller0: entered allmulticast mode [ 558.998873][T22386] tipc: Resetting bearer [ 559.106097][T22383] tipc: Resetting bearer [ 559.150364][T22383] tipc: Disabling bearer [ 559.377092][T22267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 559.476915][T22267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 559.516973][T22267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 559.530883][T22267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 559.951010][T22267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.003154][T22267] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.031465][T10234] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.038671][T10234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.057000][T22412] nbd: must specify an index to disconnect [ 560.072278][T22412] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4575'. [ 560.171517][T10229] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.178713][T10229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.248499][T22414] netlink: 204 bytes leftover after parsing attributes in process `syz.8.4576'. [ 560.330914][T22282] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 560.351660][T22282] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 560.404261][T22282] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 560.430261][ T5856] Bluetooth: hci6: command tx timeout [ 560.461592][T22282] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 560.485484][T22421] netlink: 'syz.9.4579': attribute type 2 has an invalid length. [ 560.497226][T22421] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4579'. [ 560.758318][T22437] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4581'. [ 560.831162][T22282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.853945][T22282] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.878372][T22437] macvlan4: entered promiscuous mode [ 560.883699][T22437] macvlan4: entered allmulticast mode [ 560.892127][T22437] bond5: (slave macvlan4): Opening slave failed [ 560.940732][T16799] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.947907][T16799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.994409][ T5856] Bluetooth: hci7: command tx timeout [ 561.005717][T16799] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.012926][T16799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.222652][T22267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.405689][T22460] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4586'. [ 561.564793][T22466] bridge_slave_0: entered promiscuous mode [ 561.725240][T22282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.876308][T22282] veth0_vlan: entered promiscuous mode [ 561.920405][T22282] veth1_vlan: entered promiscuous mode [ 562.040276][T22267] veth0_vlan: entered promiscuous mode [ 562.066554][T22481] __nla_validate_parse: 2 callbacks suppressed [ 562.066572][T22481] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4591'. [ 562.085821][T22481] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4591'. [ 562.089285][T22483] netlink: 164 bytes leftover after parsing attributes in process `syz.8.4592'. [ 562.098212][T22481] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4591'. [ 562.118139][T22481] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4591'. [ 562.135354][T22267] veth1_vlan: entered promiscuous mode [ 562.159383][T22282] veth0_macvtap: entered promiscuous mode [ 562.264981][T22282] veth1_macvtap: entered promiscuous mode [ 562.418463][T22282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.440231][T22267] veth0_macvtap: entered promiscuous mode [ 562.503520][T22493] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4594'. [ 562.504474][T22282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.521939][ T5856] Bluetooth: hci6: command tx timeout [ 562.583079][T22267] veth1_macvtap: entered promiscuous mode [ 562.614321][ T76] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.654230][ T76] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.700473][ T76] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.730394][ T76] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.796646][T22267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.889795][T22267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.897205][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.912690][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 562.925380][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.970779][T17642] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.986082][T17642] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.034499][T17642] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.061907][T17642] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.068274][ T5856] Bluetooth: hci7: command tx timeout [ 563.121976][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.150938][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.358900][T17642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.380712][T17642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.513539][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.542296][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.026081][T21871] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 564.048285][T21871] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 564.067308][T22542] netlink: 'syz.8.4604': attribute type 1 has an invalid length. [ 564.067611][T21871] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 564.075856][T22542] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4604'. [ 564.109963][T21871] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 564.126181][T22542] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4604'. [ 564.126259][T21871] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 564.248919][T22539] lo speed is unknown, defaulting to 1000 [ 564.290500][T22550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4606'. [ 565.191224][T22539] wlan0 speed is unknown, defaulting to 1000 [ 565.903741][T22590] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4616'. [ 566.033451][T22593] syzkaller0: entered allmulticast mode [ 566.189631][ T5856] Bluetooth: hci8: command tx timeout [ 566.190931][T22539] chnl_net:caif_netlink_parms(): no params data found [ 566.327723][T22599] netlink: 'syz.3.4620': attribute type 1 has an invalid length. [ 566.537353][T22539] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.562644][T22539] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.595620][T22539] bridge_slave_0: entered allmulticast mode [ 566.621176][T22539] bridge_slave_0: entered promiscuous mode [ 566.649945][T22606] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 566.669593][T22539] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.688280][T22539] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.695607][T22539] bridge_slave_1: entered allmulticast mode [ 566.729631][T22539] bridge_slave_1: entered promiscuous mode [ 566.894712][T22539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.949027][T22539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.120311][T22627] netlink: 'syz.4.4626': attribute type 1 has an invalid length. [ 567.158884][T22539] team0: Port device team_slave_0 added [ 567.167873][T22627] __nla_validate_parse: 2 callbacks suppressed [ 567.167890][T22627] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4626'. [ 567.177975][T22539] team0: Port device team_slave_1 added [ 567.204325][T22633] netlink: 'syz.4.4626': attribute type 1 has an invalid length. [ 567.218714][T22633] netlink: 'syz.4.4626': attribute type 4 has an invalid length. [ 567.226560][T22633] netlink: 192 bytes leftover after parsing attributes in process `syz.4.4626'. [ 567.272270][T22635] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4628'. [ 567.318392][T22539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.325361][T22539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.327981][T22635] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.4628'. [ 567.413551][T22539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.448060][T22539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.463226][T22539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.544644][T22539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.752990][T22539] hsr_slave_0: entered promiscuous mode [ 567.768951][T22539] hsr_slave_1: entered promiscuous mode [ 567.799507][T22539] debugfs: 'hsr0' already exists in 'hsr' [ 567.805337][T22539] Cannot create hsr debugfs directory [ 567.968128][T22652] veth3: entered allmulticast mode [ 567.973528][T22657] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4636'. [ 567.987718][T22657] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4636'. [ 568.268743][ T5856] Bluetooth: hci8: command tx timeout [ 568.464183][T22674] Bluetooth: MGMT ver 1.23 [ 568.513768][T22539] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.544729][T22674] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4640'. [ 568.548223][T22539] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.636964][T22679] netlink: 'syz.4.4641': attribute type 3 has an invalid length. [ 568.857131][T22539] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.872752][T22539] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.159847][T22539] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.177366][T22539] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.348030][ T5856] Bluetooth: hci8: command tx timeout [ 572.418351][T22539] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.434451][T22539] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.437625][ T5856] Bluetooth: hci8: command tx timeout [ 572.852903][T22539] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 572.874980][T22728] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input6 [ 572.922960][T22539] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 572.960950][T22539] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 572.993596][T22539] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 573.035460][T22735] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4656'. [ 573.127709][T22735] xfrm2: entered promiscuous mode [ 573.134854][T22735] xfrm2: entered allmulticast mode [ 573.577136][T22539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.600050][T22539] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.681195][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.688403][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.719543][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.726737][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.870575][T22764] vlan2: entered promiscuous mode [ 573.886643][T22764] bridge0: entered promiscuous mode [ 574.124851][T22775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4664'. [ 574.221294][T22777] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4665'. [ 574.552651][T22539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.694751][T22801] netlink: 'syz.8.4671': attribute type 1 has an invalid length. [ 574.765592][T22539] veth0_vlan: entered promiscuous mode [ 574.776879][T22804] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4671'. [ 574.847050][T22539] veth1_vlan: entered promiscuous mode [ 574.885994][T22539] veth0_macvtap: entered promiscuous mode [ 574.912400][T22539] veth1_macvtap: entered promiscuous mode [ 574.956127][T22539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.981611][T22539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.023677][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.044477][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.084973][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.104757][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.247233][T22824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4678'. [ 575.455921][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.467649][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.475245][T22831] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4681'. [ 575.560681][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.577861][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.758322][T22844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4597'. [ 575.767349][T22844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4597'. [ 575.770279][T22839] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 575.787260][T22845] netlink: 'syz.2.4597': attribute type 2 has an invalid length. [ 575.805923][T22839] bond1 (unregistering): Released all slaves [ 576.680691][T22873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4691'. [ 577.102503][T22894] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4697'. [ 577.218636][T22896] IPv6: Can't replace route, no match found [ 577.671846][T22921] tipc: Enabled bearer , priority 10 [ 578.043210][T22929] __nla_validate_parse: 1 callbacks suppressed [ 578.043229][T22929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4712'. [ 578.160726][T22935] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4714'. [ 578.395379][T22943] xt_time: unknown flags 0xf4 [ 578.424397][T21871] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 578.441643][T21871] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 578.449782][T21871] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 578.458951][T21871] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 578.467989][T21871] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 578.615095][T22944] lo speed is unknown, defaulting to 1000 [ 579.290254][T22944] wlan0 speed is unknown, defaulting to 1000 [ 579.455059][T22987] 8021q: VLANs not supported on sit0 [ 579.781430][T23011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4729'. [ 579.789944][T22944] chnl_net:caif_netlink_parms(): no params data found [ 579.927835][T23017] netlink: 'syz.4.4731': attribute type 12 has an invalid length. [ 579.952177][T23011] netlink: 'syz.3.4729': attribute type 1 has an invalid length. [ 580.363778][T22944] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.384824][T23026] netlink: 'syz.3.4733': attribute type 13 has an invalid length. [ 580.393739][T22944] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.423093][T22944] bridge_slave_0: entered allmulticast mode [ 580.460012][T22944] bridge_slave_0: entered promiscuous mode [ 580.461695][T23035] netlink: 'syz.3.4733': attribute type 1 has an invalid length. [ 580.509751][T22944] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.516913][T22944] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.524790][T21871] Bluetooth: hci9: command tx timeout [ 580.557843][T22944] bridge_slave_1: entered allmulticast mode [ 580.576133][T22944] bridge_slave_1: entered promiscuous mode [ 580.780378][T23035] 8021q: adding VLAN 0 to HW filter on device bond2 [ 580.824815][T23043] bond2: (slave gretap1): making interface the new active one [ 580.866103][T23043] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 580.920927][T22944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.072891][T22944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.182195][T23059] netlink: 'syz.8.4739': attribute type 4 has an invalid length. [ 581.200264][T23059] netlink: 39084 bytes leftover after parsing attributes in process `syz.8.4739'. [ 581.334297][T22944] team0: Port device team_slave_0 added [ 581.361254][T22944] team0: Port device team_slave_1 added [ 581.452251][T23065] : entered promiscuous mode [ 581.530360][T22944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.553923][T22944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.655210][T22944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.781689][T22944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.798587][T22944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.847176][T22944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.887064][T23080] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4748'. [ 581.950272][T23088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4750'. [ 582.019291][T23083] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4749'. [ 582.137817][T23088] bond0: entered promiscuous mode [ 582.142889][T23088] bond_slave_0: entered promiscuous mode [ 582.152295][T23088] bond_slave_1: entered promiscuous mode [ 582.172377][T23088] bond0: left promiscuous mode [ 582.182164][T23088] bond_slave_0: left promiscuous mode [ 582.205927][T23088] bond_slave_1: left promiscuous mode [ 582.339583][T22944] hsr_slave_0: entered promiscuous mode [ 582.356772][T22944] hsr_slave_1: entered promiscuous mode [ 582.391645][T22944] debugfs: 'hsr0' already exists in 'hsr' [ 582.418275][T22944] Cannot create hsr debugfs directory [ 582.588135][T21871] Bluetooth: hci9: command tx timeout [ 582.726514][T23120] tipc: Started in network mode [ 582.735316][T23120] tipc: Node identity 1eaae6258ec8, cluster identity 4711 [ 582.751244][T23120] tipc: Enabled bearer , priority 0 [ 582.900552][T23115] syzkaller0: entered promiscuous mode [ 582.906216][T23115] syzkaller0: entered allmulticast mode [ 582.913983][T23115] tipc: Resetting bearer [ 582.985518][T23115] tipc: Resetting bearer [ 583.151025][T23133] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4760'. [ 583.569671][T23145] netlink: 'syz.4.4763': attribute type 1 has an invalid length. [ 583.628757][T23143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4763'. [ 583.847826][ T864] tipc: Node number set to 2422400549 [ 584.673526][T21871] Bluetooth: hci9: command tx timeout [ 586.527382][T23115] tipc: Disabling bearer [ 586.559318][T23145] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 586.747755][T21871] Bluetooth: hci9: command tx timeout [ 586.763242][T23161] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4766'. [ 586.883935][T22944] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 586.928499][T22944] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 587.026755][T22944] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 587.047766][T22944] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 587.170156][T22944] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 587.195110][T22944] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 587.330336][T22944] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 587.374001][T22944] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 588.029629][T22944] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 588.090374][T22944] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 588.148934][T22944] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 588.205825][T22944] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 588.361358][T23197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4777'. [ 588.404755][T22944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.485146][T22944] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.505076][T23205] vlan0: entered promiscuous mode [ 588.532579][T23205] vlan0: entered allmulticast mode [ 588.538188][T23205] veth0_vlan: entered allmulticast mode [ 588.578390][T10229] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.585672][T10229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.617286][T17642] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.624502][T17642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.761983][T23214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 588.824138][T23214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4782'. [ 588.948637][T23222] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4784'. [ 588.960371][T23222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4784'. [ 588.971378][T23222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4784'. [ 588.984283][T23221] netlink: 'syz.2.4783': attribute type 10 has an invalid length. [ 589.049681][T23221] veth1_macvtap: left promiscuous mode [ 589.201913][T23223] bridge: RTM_NEWNEIGH with invalid ether address [ 589.217611][T23224] bridge: RTM_NEWNEIGH with invalid ether address [ 589.536286][T23242] 8021q: VLANs not supported on sit0 [ 589.583163][T23245] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4791'. [ 589.666131][T22944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.291308][T22944] veth0_vlan: entered promiscuous mode [ 590.304550][T22944] veth1_vlan: entered promiscuous mode [ 590.338441][T22944] veth0_macvtap: entered promiscuous mode [ 590.351466][T22944] veth1_macvtap: entered promiscuous mode [ 590.534644][T22944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.610418][T22944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.699754][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.724982][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.746253][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.778844][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.029239][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.037092][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.180860][T16799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.197799][T16799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.398807][T23297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4807'. [ 591.675266][T23301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4706'. [ 591.758978][T23304] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4808'. [ 591.845915][T23304] bond1: (slave ip6tnl0): Device is not bonding slave [ 591.849780][T23312] sctp: [Deprecated]: syz.6.4811 (pid 23312) Use of int in max_burst socket option. [ 591.849780][T23312] Use struct sctp_assoc_value instead [ 591.890344][T23304] bond1: option active_slave: invalid value (ip6tnl0) [ 591.927566][T23309] nbd2: detected capacity change from 0 to 127 [ 591.940364][T21871] block nbd2: Receive control failed (result -32) [ 591.953510][T23313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4808'. [ 591.997178][T23304] bond1 (unregistering): Released all slaves [ 592.466838][T23325] tipc: Started in network mode [ 592.481582][T23325] tipc: Node identity 86de840ef8b6, cluster identity 4711 [ 592.492547][T23325] tipc: Enabled bearer , priority 0 [ 592.526493][T23330] netlink: 'syz.3.4816': attribute type 1 has an invalid length. [ 592.590837][T23333] syzkaller0: entered promiscuous mode [ 592.611030][T23333] syzkaller0: entered allmulticast mode [ 592.700377][T23338] netlink: 'syz.4.4818': attribute type 1 has an invalid length. [ 592.768441][T23324] tipc: Resetting bearer [ 592.866843][T23324] tipc: Disabling bearer [ 593.354506][T23361] IPVS: rr: FWM 3 0x00000003 - no destination available [ 593.380643][ T5957] IPVS: starting estimator thread 0... [ 593.467935][T23363] IPVS: using max 23 ests per chain, 55200 per kthread [ 596.633405][T23369] openvswitch: netlink: Tunnel attr 332 out of range max 16 [ 596.732759][T23371] __nla_validate_parse: 6 callbacks suppressed [ 596.732779][T23371] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4829'. [ 597.395141][T23393] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4836'. [ 597.763127][T23430] netlink: 'syz.6.4845': attribute type 1 has an invalid length. [ 597.782273][T23430] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4845'. [ 597.865191][T23430] veth3: entered allmulticast mode [ 598.455241][T23474] lo: entered promiscuous mode [ 598.467771][T23474] netlink: 'syz.8.4855': attribute type 2 has an invalid length. [ 598.471860][T23478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4856'. [ 598.475513][T23474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 598.503290][T23479] tipc: Started in network mode [ 598.517951][T23478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4856'. [ 598.531921][T23479] tipc: Node identity , cluster identity 4711 [ 598.580946][T23479] tipc: Failed to obtain node identity [ 598.631852][T23479] tipc: Enabling of bearer rejected, failed to enable media [ 598.733900][T23489] netlink: 'syz.2.4858': attribute type 1 has an invalid length. [ 598.756692][T23489] netlink: 388 bytes leftover after parsing attributes in process `syz.2.4858'. [ 598.767547][T10229] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.788278][T10229] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.797010][T10229] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.821890][T10229] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.873780][T23498] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4861'. [ 598.961525][T23502] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4864'. [ 599.065273][T23499] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4863'. [ 599.638152][T23539] syzkaller1: entered promiscuous mode [ 599.644882][T23539] syzkaller1: entered allmulticast mode [ 599.840091][T23543] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4877'. [ 599.850832][T23543] netlink: 'syz.3.4877': attribute type 5 has an invalid length. [ 600.094562][T23554] bond6: Unable to set up delay as MII monitoring is disabled [ 600.124021][T23554] bond6 (unregistering): Released all slaves [ 600.651467][T23591] rdma_op ffff88807a9cc9f0 conn xmit_rdma 0000000000000000 [ 600.719854][T23591] pim6reg1: entered promiscuous mode [ 600.746010][T23591] pim6reg1: entered allmulticast mode [ 600.828130][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 601.668091][T23630] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 601.743103][T23635] __nla_validate_parse: 8 callbacks suppressed [ 601.743121][T23635] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4905'. [ 601.772031][T23633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4904'. [ 601.945499][T23643] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4907'. [ 602.269561][T23660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4912'. [ 602.292736][T10233] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.292865][T23660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4912'. [ 602.311090][T10233] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.360357][T10233] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.383746][T10233] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.414659][T23671] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4917'. [ 602.618030][T23686] netlink: 'syz.2.4915': attribute type 21 has an invalid length. [ 602.651570][T23686] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4915'. [ 603.063047][T23699] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4922'. [ 603.082899][T23699] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 603.118264][T23699] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 603.132882][T23704] netlink: 'syz.6.4922': attribute type 3 has an invalid length. [ 603.145237][T23699] gretap1: entered promiscuous mode [ 603.150830][T23704] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4922'. [ 603.160344][T23699] gretap1: entered allmulticast mode [ 603.201016][T23701] pimreg3: entered allmulticast mode [ 603.233131][T23715] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.4924'. [ 603.242808][T23715] netlink: zone id is out of range [ 603.265385][T23715] netlink: zone id is out of range [ 603.301628][T23715] netlink: zone id is out of range [ 603.338583][T23715] netlink: zone id is out of range [ 603.344505][T23715] netlink: zone id is out of range [ 603.350767][T23715] netlink: get zone limit has 8 unknown bytes [ 604.027249][T23747] netlink: 'syz.6.4933': attribute type 2 has an invalid length. [ 604.979540][T23785] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 605.033191][T23785] netlink: 'syz.8.4945': attribute type 8 has an invalid length. [ 605.742699][T23795] lo: entered allmulticast mode [ 605.781724][T23795] tunl0: entered allmulticast mode [ 605.932743][T23822] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 605.933078][T23795] gre0: entered allmulticast mode [ 606.025731][T23795] gretap0: entered allmulticast mode [ 606.088877][T23795] erspan0: entered allmulticast mode [ 606.100724][T23795] ip_vti0: entered allmulticast mode [ 606.137664][T23795] ip6_vti0: entered allmulticast mode [ 606.160390][T23795] sit0: entered allmulticast mode [ 606.181329][T23795] ip6tnl0: entered allmulticast mode [ 606.215676][T23795] ip6gre0: entered allmulticast mode [ 606.226142][T23795] syz_tun: entered allmulticast mode [ 606.244714][T23795] ip6gretap0: entered allmulticast mode [ 606.259099][T23795] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.266928][T23795] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.276143][T23795] bridge0: entered allmulticast mode [ 606.287340][T23795] vcan0: entered allmulticast mode [ 606.300489][T23795] bond0: entered allmulticast mode [ 606.306006][T23795] bond_slave_0: entered allmulticast mode [ 606.312422][T23795] bond_slave_1: entered allmulticast mode [ 606.422159][T23795] team0: entered allmulticast mode [ 606.470187][T23795] team_slave_0: entered allmulticast mode [ 606.483684][T23795] team_slave_1: entered allmulticast mode [ 606.506830][T23795] dummy0: entered allmulticast mode [ 606.578774][T23795] nlmon0: entered allmulticast mode [ 606.589976][T23795] caif0: entered allmulticast mode [ 606.604547][T23795] batadv0: entered allmulticast mode [ 606.660343][T23795] vxcan0: entered allmulticast mode [ 606.671476][T23795] vxcan1: entered allmulticast mode [ 606.681210][T23795] veth0: entered allmulticast mode [ 606.705253][T23795] veth1: entered allmulticast mode [ 606.731944][T23795] wg0: entered allmulticast mode [ 606.745895][T23795] wg1: entered allmulticast mode [ 606.759011][T23795] wg2: entered allmulticast mode [ 606.781151][T23795] veth0_to_bridge: entered allmulticast mode [ 606.795998][T23795] veth1_to_bridge: entered allmulticast mode [ 606.816566][T23795] veth0_to_bond: entered allmulticast mode [ 606.860371][T23795] veth1_to_bond: entered allmulticast mode [ 606.873151][T23795] veth0_to_team: entered allmulticast mode [ 606.890508][T23795] veth1_to_team: entered allmulticast mode [ 606.904984][T23795] veth0_to_batadv: entered allmulticast mode [ 606.916812][T23795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.942502][T23795] batadv_slave_0: entered allmulticast mode [ 606.955535][T23795] veth1_to_batadv: entered allmulticast mode [ 606.969068][T23795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.986058][T23795] batadv_slave_1: entered allmulticast mode [ 607.001742][T23795] xfrm0: entered allmulticast mode [ 607.017202][T23795] veth0_to_hsr: entered allmulticast mode [ 607.041905][T23795] hsr_slave_0: entered allmulticast mode [ 607.053502][T23795] veth1_to_hsr: entered allmulticast mode [ 607.064904][T23795] hsr_slave_1: entered allmulticast mode [ 607.084769][T23795] hsr0: entered allmulticast mode [ 607.094962][T23795] veth1_virt_wifi: entered allmulticast mode [ 607.110204][T23795] veth0_virt_wifi: entered allmulticast mode [ 607.120986][T23795] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 607.129930][T23795] veth1_vlan: entered allmulticast mode [ 607.164323][T23795] veth0_vlan: entered allmulticast mode [ 607.184382][T23795] vlan0: entered allmulticast mode [ 607.189936][T23795] vlan1: entered allmulticast mode [ 607.196474][T23795] macvlan0: entered allmulticast mode [ 607.206949][T23795] macvlan1: entered allmulticast mode [ 607.220034][T23795] ipvlan0: entered allmulticast mode [ 607.225768][T23795] ipvlan1: entered allmulticast mode [ 607.232811][T23795] veth1_macvtap: entered allmulticast mode [ 607.243982][T23795] veth0_macvtap: entered allmulticast mode [ 607.256485][T23795] macvtap0: entered allmulticast mode [ 607.269204][T23795] geneve0: entered allmulticast mode [ 607.279725][T23795] geneve1: entered allmulticast mode [ 607.300208][T23795] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 607.335504][T23795] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 607.347983][T23795] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 607.382126][T23795] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 607.420868][T23795] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 607.457633][T23795] mac80211_hwsim hwsim48 wlan1: entered allmulticast mode [ 607.474547][T23795] : entered allmulticast mode [ 607.483447][T23795] @: entered allmulticast mode [ 607.526147][T23832] : entered promiscuous mode [ 607.592349][T10233] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.611161][T10233] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.691980][T10233] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.757167][T23855] vlan1: entered allmulticast mode [ 607.783809][T23855] bond0: entered allmulticast mode [ 607.813119][T23855] geneve3: entered allmulticast mode [ 607.834232][T10233] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.910546][T23860] team0: Device wireguard0 is of different type [ 608.467965][T23879] __nla_validate_parse: 5 callbacks suppressed [ 608.467986][T23879] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4967'. [ 608.492011][T23879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4967'. [ 608.653265][T23882] netlink: 'syz.2.4968': attribute type 10 has an invalid length. [ 608.703662][T23882] bridge_slave_1: left allmulticast mode [ 608.729815][T23882] bridge_slave_1: left promiscuous mode [ 608.744299][T23890] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20004 [ 608.768325][T23882] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.821046][T23882] bridge_slave_1: entered allmulticast mode [ 608.860193][T23882] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 609.026032][T23898] dvmrp1: entered allmulticast mode [ 609.161828][T23896] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.182660][T23896] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.189933][T23896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.534402][T23922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4981'. [ 609.696365][T23926] syzkaller1: entered promiscuous mode [ 609.702564][T23926] syzkaller1: entered allmulticast mode [ 609.902409][T23936] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4984'. [ 609.982528][T23937] netlink: 'syz.4.4984': attribute type 1 has an invalid length. [ 610.020874][T23937] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4984'. [ 610.039285][T23937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4984'. [ 610.209947][T23947] netlink: 'syz.2.4987': attribute type 1 has an invalid length. [ 610.234330][T23947] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4987'. [ 610.262696][T23947] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4987'. [ 610.337222][T23956] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4990'. [ 610.383517][T23958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4991'. [ 610.783491][T23980] netlink: 'syz.2.4994': attribute type 21 has an invalid length. [ 611.985696][T24008] netlink: 'syz.4.5005': attribute type 4 has an invalid length. [ 612.297116][T24020] veth0: entered promiscuous mode [ 612.425914][T24029] netlink: 'syz.6.5011': attribute type 25 has an invalid length. [ 612.466817][T24029] netlink: 'syz.6.5011': attribute type 5 has an invalid length. [ 612.488490][T24018] nbd3: detected capacity change from 0 to 127 [ 612.515982][T21871] block nbd3: Receive control failed (result -32) [ 612.527386][T24029] geneve2: entered promiscuous mode [ 612.533114][T24029] geneve2: entered allmulticast mode [ 612.554256][T24016] veth0: left promiscuous mode [ 612.566064][ T12] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 612.597848][ T12] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 612.635073][ T12] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 612.695257][T10233] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 613.123470][T24061] sctp: [Deprecated]: syz.4.5019 (pid 24061) Use of struct sctp_assoc_value in delayed_ack socket option. [ 613.123470][T24061] Use struct sctp_sack_info instead [ 613.175561][T24061] netlink: 'syz.4.5019': attribute type 13 has an invalid length. [ 613.199161][T24064] bridge_slave_0: left promiscuous mode [ 613.260426][T24064] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.659041][T24085] team_slave_1: entered promiscuous mode [ 613.672265][T24085] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 613.761066][T24093] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 614.095232][T24123] __nla_validate_parse: 15 callbacks suppressed [ 614.095251][T24123] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5035'. [ 614.165945][T24123] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5035'. [ 614.218398][T24123] netlink: 'syz.4.5035': attribute type 6 has an invalid length. [ 614.268312][T24123] netlink: 'syz.4.5035': attribute type 5 has an invalid length. [ 614.279570][T24123] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5035'. [ 614.978705][T24155] netlink: 'syz.3.5041': attribute type 11 has an invalid length. [ 615.247112][T24173] netlink: 'syz.3.5045': attribute type 1 has an invalid length. [ 615.289525][T24173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5045'. [ 615.408930][T24178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.563694][T24182] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.5049'. [ 615.971761][T24200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5055'. [ 616.266432][T24226] netlink: 'syz.8.5061': attribute type 2 has an invalid length. [ 616.275471][T24226] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5061'. [ 616.297230][T24226] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5061'. [ 616.313475][T24228] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5064'. [ 616.331143][T24227] netlink: 184 bytes leftover after parsing attributes in process `syz.6.5065'. [ 616.355707][T24227] xt_socket: unknown flags 0xd0 [ 616.415107][T24227] netlink: 'syz.6.5065': attribute type 27 has an invalid length. [ 616.682586][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 616.739557][T24248] sctp: [Deprecated]: syz.4.5069 (pid 24248) Use of int in max_burst socket option. [ 616.739557][T24248] Use struct sctp_assoc_value instead [ 616.963709][T24248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 617.817366][T24290] : entered promiscuous mode [ 617.993481][T24298] netlink: 'syz.4.5083': attribute type 3 has an invalid length. [ 618.088140][T24306] lo speed is unknown, defaulting to 1000 [ 618.112513][T24306] lo speed is unknown, defaulting to 1000 [ 618.164764][T24306] lo speed is unknown, defaulting to 1000 [ 618.617090][T24322] IPVS: stopping master sync thread 23630 ... [ 618.941318][T24306] infiniband syz0: set down [ 618.947301][ T10] lo speed is unknown, defaulting to 1000 [ 618.953527][T24306] infiniband syz0: added lo [ 618.960735][T24306] syz0: rxe_create_cq: returned err = -12 [ 618.998741][T24306] infiniband syz0: Couldn't create ib_mad CQ [ 619.004909][T24306] infiniband syz0: Couldn't open port 1 [ 619.127496][T24336] __nla_validate_parse: 9 callbacks suppressed [ 619.127512][T24336] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5096'. [ 619.185047][T24306] RDS/IB: syz0: added [ 619.216093][T24306] lo speed is unknown, defaulting to 1000 [ 619.222829][T24332] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5095'. [ 619.255567][T24331] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5095'. [ 619.690288][T24350] netlink: 'syz.3.5101': attribute type 1 has an invalid length. [ 619.821368][T24352] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 619.855747][T24352] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 619.983393][T24350] bond3: (slave bridge3): Enslaving as an active interface with a down link [ 620.003521][T24306] lo speed is unknown, defaulting to 1000 [ 620.023843][T24352] macvlan4: entered promiscuous mode [ 620.047889][T24352] macvlan4: entered allmulticast mode [ 620.080344][T24352] bond3: entered promiscuous mode [ 620.086212][T24352] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 620.113731][T24352] bond3: left promiscuous mode [ 620.272879][T24370] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5104'. [ 620.586035][T24380] netlink: 152 bytes leftover after parsing attributes in process `syz.8.5107'. [ 620.833160][T24392] Bluetooth: hci1: too big key_count value 32778 [ 621.122257][T24306] lo speed is unknown, defaulting to 1000 [ 621.721506][T24426] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 622.194616][T24306] lo speed is unknown, defaulting to 1000 [ 622.334658][T24445] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5126'. [ 622.453114][T24445] tipc: Started in network mode [ 622.467765][T24445] tipc: Node identity e0000002, cluster identity 4711 [ 622.483661][T24445] tipc: Enabling of bearer rejected, failed to enable media [ 622.502495][T24444] delete_channel: no stack [ 622.613124][T24455] wg1: entered promiscuous mode [ 622.623009][T24455] wg1: entered allmulticast mode [ 622.766591][T24469] veth0_to_team: entered promiscuous mode [ 622.778121][T24469] veth0_to_team: entered allmulticast mode [ 623.082180][T24481] netlink: 100 bytes leftover after parsing attributes in process `syz.8.5137'. [ 623.255156][T24306] lo speed is unknown, defaulting to 1000 [ 623.410495][T24498] netlink: 576 bytes leftover after parsing attributes in process `syz.6.5141'. [ 623.511991][T24503] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5143'. [ 623.613506][T24507] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5145'. [ 624.054160][T24306] lo speed is unknown, defaulting to 1000 [ 624.328962][T24531] __nla_validate_parse: 1 callbacks suppressed [ 624.328980][T24531] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5152'. [ 624.391066][T24533] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5153'. [ 624.470120][T24536] netlink: 'syz.4.5154': attribute type 7 has an invalid length. [ 624.681405][T24547] netlink: 'syz.8.5158': attribute type 1 has an invalid length. [ 624.764186][T24554] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5158'. [ 624.888011][T24560] netlink: 'syz.3.5161': attribute type 1 has an invalid length. [ 624.909745][T24560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.056205][T24567] sctp: [Deprecated]: syz.3.5164 (pid 24567) Use of int in maxseg socket option. [ 625.056205][T24567] Use struct sctp_assoc_value instead [ 625.120619][T24567] sctp: [Deprecated]: syz.3.5164 (pid 24567) Use of int in maxseg socket option. [ 625.120619][T24567] Use struct sctp_assoc_value instead [ 625.259740][T24306] lo speed is unknown, defaulting to 1000 [ 625.416640][T24586] netlink: 'syz.8.5170': attribute type 19 has an invalid length. [ 625.441525][T24586] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5170'. [ 625.521715][T24586] netlink: 'syz.8.5170': attribute type 19 has an invalid length. [ 625.530415][T24586] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5170'. [ 625.742850][T24597] netlink: 'syz.4.5173': attribute type 11 has an invalid length. [ 625.751222][T24597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5173'. [ 625.841903][T24306] lo speed is unknown, defaulting to 1000 [ 626.213284][T24606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5176'. [ 626.262336][T24306] lo speed is unknown, defaulting to 1000 [ 626.593529][T24306] lo speed is unknown, defaulting to 1000 [ 626.775700][T24615] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5178'. [ 627.044202][T24306] lo speed is unknown, defaulting to 1000 [ 627.373658][T24306] lo speed is unknown, defaulting to 1000 [ 627.747682][T24306] lo speed is unknown, defaulting to 1000 [ 628.081392][T24306] lo speed is unknown, defaulting to 1000 [ 628.523483][T24608] lo speed is unknown, defaulting to 1000 [ 628.923246][T24638] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5186'. [ 628.940952][T24640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5185'. [ 628.975703][T24641] netlink: 'syz.8.5186': attribute type 1 has an invalid length. [ 629.087240][T24608] wlan0 speed is unknown, defaulting to 1000 [ 629.467026][T24646] team1: entered promiscuous mode [ 629.525125][T24646] team1: entered allmulticast mode [ 629.731229][T24673] __nla_validate_parse: 1 callbacks suppressed [ 629.731249][T24673] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5196'. [ 629.875574][T24678] xt_l2tp: wrong L2TP version: 0 [ 630.372414][T24704] macvtap1: entered promiscuous mode [ 630.397736][T24704] vlan0: entered promiscuous mode [ 630.403177][T24704] macvtap1: entered allmulticast mode [ 630.430015][T24704] vlan0: entered allmulticast mode [ 630.474268][T24709] netlink: 'syz.6.5205': attribute type 3 has an invalid length. [ 630.477065][T24704] veth0_vlan: entered allmulticast mode [ 630.548737][T24705] macvtap2: entered promiscuous mode [ 630.554072][T24705] macvtap2: entered allmulticast mode [ 631.053605][T24732] netlink: 'syz.2.5210': attribute type 10 has an invalid length. [ 631.089045][T24735] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5208'. [ 631.181965][T24741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5209'. [ 631.711276][T24732] hsr0: left allmulticast mode [ 631.767055][T24732] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 632.175720][T24765] netlink: 'syz.6.5211': attribute type 1 has an invalid length. [ 632.213146][T24765] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5211'. [ 632.267103][T24771] netlink: 'syz.8.5214': attribute type 2 has an invalid length. [ 632.287863][T24770] netlink: 'syz.2.5215': attribute type 1 has an invalid length. [ 632.311331][T24773] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5217'. [ 632.423698][T24782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5219'. [ 632.463514][T24778] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5218'. [ 632.506273][T24786] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5220'. [ 632.666323][ T5955] IPVS: starting estimator thread 0... [ 632.684238][T24792] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5221'. [ 632.787846][T24794] IPVS: using max 34 ests per chain, 81600 per kthread [ 632.911254][T24801] syzkaller1: entered promiscuous mode [ 632.921271][T24801] syzkaller1: entered allmulticast mode [ 632.986062][T24801] netlink: 'syz.8.5225': attribute type 1 has an invalid length. [ 633.172654][T24812] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5229'. [ 633.265401][T24809] bond6: (slave bridge6): making interface the new active one [ 633.295090][T24809] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 633.861824][T24848] netlink: 'syz.3.5238': attribute type 4 has an invalid length. [ 633.935291][T24852] netlink: 'syz.4.5239': attribute type 1 has an invalid length. [ 634.444074][T24867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 634.884735][T24878] __nla_validate_parse: 8 callbacks suppressed [ 634.884753][T24878] netlink: 156 bytes leftover after parsing attributes in process `syz.8.5250'. [ 635.110974][T24898] netlink: 'syz.8.5257': attribute type 1 has an invalid length. [ 635.178618][T24898] netlink: 'syz.8.5257': attribute type 2 has an invalid length. [ 636.030731][T24943] validate_nla: 2 callbacks suppressed [ 636.030751][T24943] netlink: 'syz.6.5270': attribute type 1 has an invalid length. [ 636.066609][T24943] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5270'. [ 636.224069][T24952] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5273'. [ 636.837236][T24978] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5281'. [ 637.102687][T24984] vlan2: entered promiscuous mode [ 637.130026][T24984] bridge0: entered promiscuous mode [ 637.396992][T24995] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5286'. [ 637.577864][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 637.600875][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 637.611402][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 637.620915][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 637.639874][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 637.674284][T17642] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.701072][T17642] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 637.743530][T17642] netdevsim netdevsim8 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 637.882538][T17642] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.912805][T17642] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 637.923659][T17642] netdevsim netdevsim8 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 637.979672][T25020] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5292'. [ 637.998614][T25002] lo speed is unknown, defaulting to 1000 [ 638.022381][T17642] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.031273][T25021] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5292'. [ 638.041847][T25020] openvswitch: netlink: Missing key (keys=40, expected=80) [ 638.045318][T17642] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 638.076358][T17642] netdevsim netdevsim8 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 638.180393][T17642] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.212614][T17642] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 638.245576][T17642] netdevsim netdevsim8 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 638.282568][T25030] netlink: 'syz.2.5295': attribute type 10 has an invalid length. [ 638.314797][T25030] hsr_slave_0: left allmulticast mode [ 638.416016][T25034] netlink: 'syz.4.5297': attribute type 2 has an invalid length. [ 638.447873][T25034] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5297'. [ 638.457203][T25034] nbd: must specify at least one socket [ 638.529082][ T1105] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.552247][ T1105] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.614829][ T12] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.682439][ T12] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.710046][T25002] wlan0 speed is unknown, defaulting to 1000 [ 638.717499][T25040] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5300'. [ 638.727158][T25045] atomic_op ffff88807b55f998 conn xmit_atomic 0000000000000000 [ 638.735521][T17642] bridge_slave_0: left allmulticast mode [ 638.748188][T17642] bridge_slave_0: left promiscuous mode [ 638.766710][T17642] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.304375][T17642] bond1 (unregistering): (slave gretap1): Releasing active interface [ 639.491485][T17642] bond0 (unregistering): (slave geneve3): Releasing active interface [ 639.510325][T17642] geneve3 (unregistering): left allmulticast mode [ 639.711989][ T5856] Bluetooth: hci3: command tx timeout [ 639.944791][T17642] bond6 (unregistering): (slave bridge6): Releasing active interface [ 639.994742][T17642] bond1 (unregistering): Released all slaves [ 640.227217][T17642] bond2 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 640.248729][T17642] bond2 (unregistering): Released all slaves [ 640.266339][T17642] bond3 (unregistering): Released all slaves [ 640.486511][T17642] bond0 (unregistering): Released all slaves [ 640.510497][T17642] bond4 (unregistering): Released all slaves [ 640.544248][T17642] bond5 (unregistering): Released all slaves [ 640.564365][T17642] bond6 (unregistering): Released all slaves [ 640.591058][T25002] lo speed is unknown, defaulting to 1000 [ 640.811654][T17642] tipc: Disabling bearer [ 640.833871][T17642] tipc: Disabling bearer [ 640.853647][T17642] tipc: Left network mode [ 641.097864][T25070] macvtap1: entered allmulticast mode [ 641.105146][T25070] veth0_macvtap: entered allmulticast mode [ 641.204947][T25082] tipc: Enabled bearer , priority 0 [ 641.224096][T25083] netlink: 208 bytes leftover after parsing attributes in process `syz.4.5309'. [ 641.259915][T25084] syzkaller0: entered promiscuous mode [ 641.265420][T25084] syzkaller0: entered allmulticast mode [ 641.712316][T25090] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 641.787850][T21871] Bluetooth: hci3: command tx timeout [ 641.913614][T25084] tipc: Resetting bearer [ 642.035570][T25084] tipc: Disabling bearer [ 642.232322][T25097] tipc: Started in network mode [ 642.237305][T25097] tipc: Node identity , cluster identity 4711 [ 642.244477][T25097] tipc: Failed to obtain node identity [ 642.253499][T25097] tipc: Enabling of bearer rejected, failed to enable media [ 642.282176][T25094] syzkaller0: entered promiscuous mode [ 642.300589][T25094] syzkaller0: entered allmulticast mode [ 642.673479][T25113] Unsupported ieee802154 address type: 0 [ 642.680932][T25113] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5319'. [ 642.933562][T25116] vlan0: entered promiscuous mode [ 643.128270][T25118] pimreg: entered allmulticast mode [ 643.371850][T25002] chnl_net:caif_netlink_parms(): no params data found [ 643.412248][T25127] sctp: [Deprecated]: syz.2.5324 (pid 25127) Use of struct sctp_assoc_value in delayed_ack socket option. [ 643.412248][T25127] Use struct sctp_sack_info instead [ 643.483863][T25130] netlink: 'syz.4.5325': attribute type 1 has an invalid length. [ 643.551112][T25127] netlink: 'syz.2.5324': attribute type 5 has an invalid length. [ 643.559962][T25127] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5324'. [ 643.607564][T25133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5325'. [ 643.862094][T25131] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.869877][T25131] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.879851][T21871] Bluetooth: hci3: command tx timeout [ 644.151503][T25131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.185205][T25131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.489551][T25131] veth0_macvtap: left allmulticast mode [ 644.518699][T25130] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 644.699939][T17642] hsr_slave_0: left promiscuous mode [ 644.730156][T17642] hsr_slave_1: left promiscuous mode [ 644.744452][T17642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.791253][T17642] veth1_macvtap: left promiscuous mode [ 644.813557][T17642] veth0_macvtap: left promiscuous mode [ 644.826276][T17642] veth1_vlan: left promiscuous mode [ 644.833317][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 644.860768][T17642] veth0_vlan: left promiscuous mode [ 645.764294][T17642] team_slave_1 (unregistering): left promiscuous mode [ 645.783677][T17642] team0 (unregistering): Port device team_slave_1 removed [ 645.870704][T17642] team_slave_0 (unregistering): left promiscuous mode [ 645.879256][T17642] team0 (unregistering): Port device team_slave_0 removed [ 645.947984][T21871] Bluetooth: hci3: command tx timeout [ 646.545391][T10233] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.555501][T10233] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.567588][T10233] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 646.576420][T10233] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.594837][T10233] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.604041][T10233] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 646.665378][T25146] tipc: Enabling of bearer rejected, failed to enable media [ 646.728212][T10233] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.737118][T10233] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.747338][T25160] netlink: 'syz.3.5330': attribute type 1 has an invalid length. [ 646.798566][T25160] netlink: 'syz.3.5330': attribute type 3 has an invalid length. [ 646.806556][T25160] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5330'. [ 646.808612][T10233] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 646.873629][T25160] NCSI netlink: No device for ifindex 131307 [ 646.906006][T10233] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.924090][T10233] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.942972][T10233] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 647.169912][T25171] netlink: 'syz.6.5334': attribute type 10 has an invalid length. [ 647.204539][T25002] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.221031][T25002] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.230323][T25178] netlink: 'syz.6.5334': attribute type 10 has an invalid length. [ 647.238574][T25002] bridge_slave_0: entered allmulticast mode [ 647.246494][T25002] bridge_slave_0: entered promiscuous mode [ 647.279462][T25171] team0: Port device dummy0 added [ 647.288647][T25178] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 647.310798][T25178] team0: Failed to send options change via netlink (err -105) [ 647.319735][T25178] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 647.329882][T25178] team0: Port device dummy0 removed [ 647.380204][T25178] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 647.389479][T25002] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.401019][T25002] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.424548][T25002] bridge_slave_1: entered allmulticast mode [ 647.441706][T25002] bridge_slave_1: entered promiscuous mode [ 647.574076][T25002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.591300][T25002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.673152][T25002] team0: Port device team_slave_0 added [ 647.712185][T25002] team0: Port device team_slave_1 added [ 647.829219][T25002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.836304][T25002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.864816][T25002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.960830][T25002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.968502][T25002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.002979][T25002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.025252][T25191] wg1: entered promiscuous mode [ 648.060853][T25191] wg1: entered allmulticast mode [ 648.074583][T25189] tipc: Enabled bearer , priority 0 [ 648.197873][T25192] syzkaller0: entered promiscuous mode [ 648.206399][T25192] syzkaller0: entered allmulticast mode [ 648.258283][T25192] tipc: Resetting bearer [ 648.282242][T25188] tipc: Resetting bearer [ 649.141022][ T5957] tipc: Node number set to 3758096386 [ 652.321955][T25188] tipc: Disabling bearer [ 652.470446][T25002] hsr_slave_0: entered promiscuous mode [ 652.484857][T25002] hsr_slave_1: entered promiscuous mode [ 652.502665][T25002] debugfs: 'hsr0' already exists in 'hsr' [ 652.510262][T25002] Cannot create hsr debugfs directory [ 652.574015][T25256] tipc: Enabled bearer , priority 0 [ 652.651357][T25252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5349'. [ 652.651602][ T1105] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xcc [ 652.672354][T25256] syzkaller0: entered promiscuous mode [ 652.690006][T25256] syzkaller0: entered allmulticast mode [ 652.704663][T25263] delete_channel: no stack [ 652.744992][T25252] bond4: option xmit_hash_policy: invalid value (64) [ 652.779019][T25252] bond4 (unregistering): Released all slaves [ 652.966482][T25270] tipc: Resetting bearer [ 653.335239][T25254] tipc: Resetting bearer [ 653.427046][T25254] tipc: Disabling bearer [ 653.908969][T25308] netlink: 312 bytes leftover after parsing attributes in process `syz.2.5360'. [ 654.016971][T25002] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 654.044797][T25002] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 654.071524][T25002] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 654.104194][T25002] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 654.336060][T25331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5367'. [ 654.454295][T25334] netlink: 'syz.6.5368': attribute type 33 has an invalid length. [ 654.539682][T25002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.634816][T25002] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.706253][T16799] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.713471][T16799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.787202][T16799] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.794447][T16799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.844171][T25347] netlink: 'syz.2.5373': attribute type 1 has an invalid length. [ 654.853129][T25347] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5373'. [ 654.869842][T25347] netlink: 'syz.2.5373': attribute type 1 has an invalid length. [ 654.924922][T25352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5373'. [ 654.954214][T25347] netlink: 'syz.2.5373': attribute type 2 has an invalid length. [ 654.976644][T25347] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5373'. [ 655.340501][T25368] netlink: 'syz.3.5377': attribute type 9 has an invalid length. [ 655.348611][T25368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5377'. [ 655.376320][T25368] netlink: 'syz.3.5377': attribute type 9 has an invalid length. [ 655.412127][T25368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5377'. [ 655.471020][T25379] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5380'. [ 655.621473][T25002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.717747][T25389] netlink: 'syz.4.5383': attribute type 1 has an invalid length. [ 655.758402][T25389] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5383'. [ 655.772666][T25399] netlink: zone id is out of range [ 655.812514][T25399] netlink: zone id is out of range [ 655.837618][T25399] netlink: zone id is out of range [ 655.842769][T25399] netlink: zone id is out of range [ 655.897561][T25399] netlink: zone id is out of range [ 655.906293][T25399] netlink: zone id is out of range [ 655.937586][T25399] netlink: zone id is out of range [ 655.942736][T25399] netlink: zone id is out of range [ 655.977745][T25399] netlink: zone id is out of range [ 656.011586][T25399] netlink: zone id is out of range [ 656.091681][T25413] netlink: 'syz.6.5389': attribute type 1 has an invalid length. [ 656.150411][T25416] netlink: 'syz.3.5390': attribute type 4 has an invalid length. [ 656.168441][T25416] netlink: 'syz.3.5390': attribute type 4 has an invalid length. [ 656.409689][T25421] hsr_slave_0 (unregistering): left promiscuous mode [ 656.789169][T25434] bond4: option xmit_hash_policy: invalid value (64) [ 656.799781][T25434] bond4 (unregistering): Released all slaves [ 656.852476][T25002] veth0_vlan: entered promiscuous mode [ 656.912991][T25002] veth1_vlan: entered promiscuous mode [ 657.029671][T25002] veth0_macvtap: entered promiscuous mode [ 657.056440][T25002] veth1_macvtap: entered promiscuous mode [ 657.115368][T25002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.146403][T25002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.220278][ T1105] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.247512][ T1105] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.266552][ T1105] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.327033][ T1105] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.437079][T25453] bond1: ARP target 1.0.0.0 is already present [ 657.445131][T25453] bond1: option arp_ip_target: invalid value (1) [ 657.459331][T25453] bond1 (unregistering): Released all slaves [ 657.618075][T10233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.642296][T10233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.725530][T25475] __nla_validate_parse: 10 callbacks suppressed [ 657.725548][T25475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5406'. [ 657.794137][T25475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5406'. [ 657.805425][T10234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.826005][T10234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.895224][T25482] netlink: 144 bytes leftover after parsing attributes in process `syz.6.5408'. [ 657.899853][T25486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5409'. [ 657.935872][T25485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5409'. [ 658.006448][T25486] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5409'. [ 658.045178][T25491] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5409'. [ 658.055112][T25500] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5412'. [ 658.192507][T16799] nci: nci_ntf_packet: unknown ntf opcode 0x13a [ 658.698109][T25536] dvmrp0: entered allmulticast mode [ 659.185190][T25554] xt_socket: unknown flags 0xe4 [ 659.359063][T25564] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5430'. [ 659.387074][T25564] batadv_slave_1: entered promiscuous mode [ 659.407688][T25564] batadv_slave_1: left promiscuous mode [ 659.454968][T25569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5431'. [ 659.648142][T25580] tipc: Enabled bearer , priority 0 [ 659.667163][T25583] syzkaller0: entered promiscuous mode [ 659.690347][T25583] syzkaller0: entered allmulticast mode [ 659.741664][T25576] tipc: Resetting bearer [ 659.810424][T25576] tipc: Disabling bearer [ 660.452958][T25632] validate_nla: 1 callbacks suppressed [ 660.452975][T25632] netlink: 'syz.2.5452': attribute type 10 has an invalid length. [ 660.466929][T25632] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 660.479084][T25632] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 660.487307][T25632] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 660.619453][T25639] bond2: Unable to set up delay as MII monitoring is disabled [ 660.679572][T25639] bond2 (unregistering): Released all slaves [ 660.735715][T25644] netlink: 'syz.3.5455': attribute type 1 has an invalid length. [ 660.821325][T25645] bond2 (unregistering): Released all slaves [ 661.160737][T25675] netlink: 'syz.4.5461': attribute type 32 has an invalid length. [ 661.277995][T25675] bond2: option coupled_control: invalid value (16) [ 661.299047][T25675] bond2 (unregistering): Released all slaves [ 661.542784][T25682] net_ratelimit: 25 callbacks suppressed [ 661.542804][T25682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.609874][T25684] netlink: 'syz.6.5464': attribute type 1 has an invalid length. [ 661.758400][T25695] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 661.766422][T25690] netlink: 'syz.3.5467': attribute type 6 has an invalid length. [ 661.791081][T25690] netlink: 'syz.3.5467': attribute type 5 has an invalid length. [ 662.077793][T25710] netlink: 'syz.2.5469': attribute type 1 has an invalid length. [ 662.240509][T25718] bond1: (slave bridge2): making interface the new active one [ 662.272226][T21871] Bluetooth: hci2: command 0x0405 tx timeout [ 662.304567][T25718] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 663.045208][T25761] __nla_validate_parse: 15 callbacks suppressed [ 663.045230][T25761] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5484'. [ 663.169481][T25761] netlink: 'syz.8.5484': attribute type 10 has an invalid length. [ 663.288620][T25736] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 663.343491][T25736] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 663.512280][T25780] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5488'. [ 663.658928][T25784] netlink: 'syz.4.5491': attribute type 1 has an invalid length. [ 663.739488][T25784] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 663.771349][T25793] bridge: RTM_NEWNEIGH with invalid ether address [ 664.036064][T25807] netlink: 'syz.8.5499': attribute type 1 has an invalid length. [ 664.045691][T25805] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5497'. [ 664.672313][T25829] tipc: Enabled bearer , priority 0 [ 664.690716][T25829] syzkaller0: entered promiscuous mode [ 664.696375][T25829] syzkaller0: entered allmulticast mode [ 664.765439][T25828] tipc: Resetting bearer [ 664.879256][T25828] tipc: Disabling bearer [ 664.998855][T25842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5505'. [ 665.029516][T25843] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5509'. [ 665.058141][T25844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5508'. [ 665.077099][T25843] openvswitch: netlink: Message has 5372 unknown bytes. [ 665.100898][T25843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 665.410939][T25862] tipc: Started in network mode [ 665.421595][T25862] tipc: Node identity 0697aebfe53c, cluster identity 4711 [ 665.434347][T25862] tipc: Enabled bearer , priority 0 [ 665.478637][T25867] syzkaller0: entered promiscuous mode [ 665.494233][T25867] syzkaller0: entered allmulticast mode [ 665.535575][T25862] tipc: Resetting bearer [ 665.672038][T25877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5520'. [ 665.691393][T25877] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5520'. [ 665.710317][T25858] tipc: Resetting bearer [ 665.739273][T25877] openvswitch: netlink: IP tunnel dst address not specified [ 665.821543][T25858] tipc: Disabling bearer [ 666.048362][T25895] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5523'. [ 666.158915][T25894] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5525'. [ 667.218094][T25907] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.225696][T25907] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.323807][T25907] team_slave_1: left promiscuous mode [ 667.592555][T25907] wg1: left promiscuous mode [ 668.042126][T25907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.098196][T25907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.225608][T25907] vlan0: left allmulticast mode [ 669.256929][T25907] veth0_vlan: left allmulticast mode [ 669.279881][T25907] vlan0: left promiscuous mode [ 669.304256][T25907] macvtap1: left promiscuous mode [ 669.642118][ T3459] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.677565][ T3459] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.727683][T10229] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.736587][T10229] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.791844][T10229] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.817615][T10229] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.826536][T10229] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.883378][T10229] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.948923][T21871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 670.958801][T21871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 670.992672][T21871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 671.008669][T21871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 671.025982][T21871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 671.130283][T25954] lo speed is unknown, defaulting to 1000 [ 671.199910][T25965] validate_nla: 1 callbacks suppressed [ 671.199928][T25965] netlink: 'syz.6.5550': attribute type 10 has an invalid length. [ 671.242521][T25965] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 671.272783][T21871] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 671.302684][T21871] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 671.337738][T21871] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 671.389500][T21871] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 671.402609][T21871] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 671.571128][T21871] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 671.580632][T21871] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 671.589537][T21871] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 671.598579][T21871] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 671.607594][T21871] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 671.685900][T25954] wlan0 speed is unknown, defaulting to 1000 [ 671.686243][T25966] lo speed is unknown, defaulting to 1000 [ 671.695911][T25954] lo speed is unknown, defaulting to 1000 [ 671.780873][T25980] vlan3: entered allmulticast mode [ 671.786096][T25980] bond0: entered allmulticast mode [ 671.802000][T25980] bond_slave_0: entered allmulticast mode [ 671.814078][T25980] bond_slave_1: entered allmulticast mode [ 671.837283][T25980] dummy0: entered allmulticast mode [ 671.848327][T25980] bridge0: entered allmulticast mode [ 672.192306][T25974] lo speed is unknown, defaulting to 1000 [ 672.198667][T25966] wlan0 speed is unknown, defaulting to 1000 [ 672.226781][T25966] lo speed is unknown, defaulting to 1000 [ 672.681581][T25974] wlan0 speed is unknown, defaulting to 1000 [ 672.749491][T25954] chnl_net:caif_netlink_parms(): no params data found [ 672.844112][T25974] lo speed is unknown, defaulting to 1000 [ 673.050725][T25954] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.067745][ T5856] Bluetooth: hci3: command tx timeout [ 673.087830][T25954] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.098305][T25954] bridge_slave_0: entered allmulticast mode [ 673.114519][T25954] bridge_slave_0: entered promiscuous mode [ 673.126580][T25954] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.133917][T25954] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.141417][T25954] bridge_slave_1: entered allmulticast mode [ 673.154518][T25954] bridge_slave_1: entered promiscuous mode [ 673.300541][T26006] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5561'. [ 673.357198][T25954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.429282][T26006] delete_channel: no stack [ 673.439977][T26011] pim6reg: entered allmulticast mode [ 673.467801][ T5856] Bluetooth: hci6: command tx timeout [ 673.489463][T25954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.659174][T25954] team0: Port device team_slave_0 added [ 673.666570][T26016] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5563'. [ 673.676211][T26016] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5563'. [ 673.707720][ T5856] Bluetooth: hci8: command tx timeout [ 673.734149][T25954] team0: Port device team_slave_1 added [ 673.911346][T25954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.919258][T26020] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5565'. [ 673.935224][T25954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.968047][T25954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.981229][T25954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.991452][T25954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.017932][T25954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.038145][T26021] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5565'. [ 674.119755][T26028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5566'. [ 674.324485][T26028] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 674.332323][T26028] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5566'. [ 674.584399][T26042] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5570'. [ 674.586667][T25966] chnl_net:caif_netlink_parms(): no params data found [ 674.679804][T25954] hsr_slave_0: entered promiscuous mode [ 674.744800][T25954] hsr_slave_1: entered promiscuous mode [ 674.770828][T25954] debugfs: 'hsr0' already exists in 'hsr' [ 674.776604][T25954] Cannot create hsr debugfs directory [ 674.822448][T25974] chnl_net:caif_netlink_parms(): no params data found [ 675.148021][ T5856] Bluetooth: hci3: command tx timeout [ 675.364200][T25966] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.371622][T25966] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.379070][T25966] bridge_slave_0: entered allmulticast mode [ 675.387148][T25966] bridge_slave_0: entered promiscuous mode [ 675.432550][T26057] pim6reg1: entered promiscuous mode [ 675.438063][T26057] pim6reg1: entered allmulticast mode [ 675.505659][T25966] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.517773][T25966] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.528599][T25966] bridge_slave_1: entered allmulticast mode [ 675.537101][T25966] bridge_slave_1: entered promiscuous mode [ 675.552043][ T5856] Bluetooth: hci6: command tx timeout [ 675.659042][T25974] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.667338][T25974] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.688027][T25974] bridge_slave_0: entered allmulticast mode [ 675.709720][T25974] bridge_slave_0: entered promiscuous mode [ 675.781037][T25966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.797845][ T5158] Bluetooth: hci8: command tx timeout [ 675.837034][T25974] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.851778][T25974] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.860195][T25974] bridge_slave_1: entered allmulticast mode [ 675.871822][T25974] bridge_slave_1: entered promiscuous mode [ 675.900343][T25966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.008211][T25966] team0: Port device team_slave_0 added [ 676.026654][T25974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.051401][T25974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.096566][T25966] team0: Port device team_slave_1 added [ 676.412701][T25974] team0: Port device team_slave_0 added [ 676.538587][T25966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.545564][T25966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.630258][T25966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.674286][T25966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.681436][T25966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.708191][T25966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.744140][T25974] team0: Port device team_slave_1 added [ 676.850804][T25954] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 676.863582][T25954] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.976803][T25954] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 676.992369][T25954] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.058335][T25974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.080799][T25974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.122953][T25974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.190662][T26095] netlink: 27 bytes leftover after parsing attributes in process `syz.3.5583'. [ 677.228192][ T5158] Bluetooth: hci3: command tx timeout [ 677.236277][T25966] hsr_slave_0: entered promiscuous mode [ 677.256199][T25966] hsr_slave_1: entered promiscuous mode [ 677.275267][T25966] debugfs: 'hsr0' already exists in 'hsr' [ 677.275998][T26098] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5584'. [ 677.284602][T25966] Cannot create hsr debugfs directory [ 677.344129][T25954] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.365002][T25954] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.384006][T25974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.395433][T25974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.425774][T25974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.564490][T25954] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.587829][T25954] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.629454][ T5158] Bluetooth: hci6: command tx timeout [ 677.635093][ T5158] Bluetooth: hci7: command 0x0406 tx timeout [ 677.871048][T21871] Bluetooth: hci8: command tx timeout [ 678.043391][T25974] hsr_slave_0: entered promiscuous mode [ 678.079372][T25974] hsr_slave_1: entered promiscuous mode [ 678.094738][T25974] debugfs: 'hsr0' already exists in 'hsr' [ 678.104356][T25974] Cannot create hsr debugfs directory [ 678.503658][T26132] netlink: 'syz.6.5594': attribute type 29 has an invalid length. [ 678.623032][T26132] netlink: 'syz.6.5594': attribute type 29 has an invalid length. [ 678.639830][T26136] netlink: 500 bytes leftover after parsing attributes in process `syz.6.5594'. [ 678.650628][T26135] netlink: 'syz.3.5595': attribute type 58 has an invalid length. [ 678.658586][T26135] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5595'. [ 678.777618][T25954] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 678.854315][T25966] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.895518][T25954] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 678.910533][T25954] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 679.023352][T25954] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 679.184899][T25966] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.308902][T21871] Bluetooth: hci3: command tx timeout [ 679.402054][T25966] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.535282][T25954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.619636][T25966] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.676423][T26170] netlink: 'syz.6.5602': attribute type 3 has an invalid length. [ 679.684516][T26170] netlink: 666 bytes leftover after parsing attributes in process `syz.6.5602'. [ 679.708280][T21871] Bluetooth: hci6: command tx timeout [ 679.780779][T25954] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.869629][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.876795][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.909334][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.916491][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.950865][T21871] Bluetooth: hci8: command tx timeout [ 680.088788][T26187] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5605'. [ 680.266122][T25966] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 680.431015][T25974] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.454419][T25974] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.516007][T25966] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 680.559620][T25966] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 680.589259][T25966] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 680.700747][T25974] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.719558][T25974] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.758188][T26201] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5610'. [ 680.767183][T26201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5610'. [ 680.921968][T25974] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.934816][T25974] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.026008][T25974] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.038276][T25974] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.226095][T25954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.276905][T25966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.536216][T25966] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.592819][T25954] veth0_vlan: entered promiscuous mode [ 681.624253][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.631471][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.667979][T25974] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 681.728864][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.736047][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.746713][T26219] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5613'. [ 681.789360][T25954] veth1_vlan: entered promiscuous mode [ 681.797748][T25974] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 681.821960][T25974] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 681.913000][T26224] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5614'. [ 681.925882][T25974] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 682.242949][T25954] veth0_macvtap: entered promiscuous mode [ 682.325937][T25954] veth1_macvtap: entered promiscuous mode [ 682.589468][T25954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.640135][T25954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.700930][T10229] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.710422][T10229] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.165119][T10229] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.174761][T10229] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.438869][T25974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.587521][T16799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.595363][T16799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.643343][T26258] Bluetooth: MGMT ver 1.23 [ 683.670358][T25974] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.722254][T26258] netlink: 'syz.6.5621': attribute type 1 has an invalid length. [ 683.723773][T25966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.844869][T26258] 8021q: adding VLAN 0 to HW filter on device bond2 [ 683.854342][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.861512][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.942622][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.949939][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.995420][T10234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.012275][T10234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.189456][T26275] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5624'. [ 684.720568][T25966] veth0_vlan: entered promiscuous mode [ 684.775914][T25966] veth1_vlan: entered promiscuous mode [ 684.812104][T26300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.912240][T25966] veth0_macvtap: entered promiscuous mode [ 684.957122][T25974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.979907][T25966] veth1_macvtap: entered promiscuous mode [ 685.055792][T25966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.095818][T25966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.126196][T26317] netlink: 'syz.0.5634': attribute type 1 has an invalid length. [ 685.174215][ T3459] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.205792][ T3459] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.272938][ T3459] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.314614][ T3459] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.558579][T10233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.566434][T10233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.684042][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.736902][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.922661][T25974] veth0_vlan: entered promiscuous mode [ 685.970972][T25974] veth1_vlan: entered promiscuous mode [ 686.114380][T25974] veth0_macvtap: entered promiscuous mode [ 686.156987][T25974] veth1_macvtap: entered promiscuous mode [ 686.281602][T26350] bond1: Unable to set up delay as MII monitoring is disabled [ 686.295253][T26350] bond1 (unregistering): Released all slaves [ 686.455613][T26359] tipc: Enabling of bearer rejected, failed to enable media [ 686.546002][T25974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.600876][T25974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.652389][ T1105] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.674867][T26366] netlink: 'syz.6.5646': attribute type 1 has an invalid length. [ 686.773069][T26366] 8021q: adding VLAN 0 to HW filter on device bond3 [ 686.786724][ T1105] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.796334][ T1105] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.822771][T26370] bond3: (slave ip6erspan0): making interface the new active one [ 686.834200][T26370] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 686.865746][ T1105] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.907123][T26377] netlink: 'syz.6.5649': attribute type 39 has an invalid length. [ 687.294005][T26386] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5652'. [ 687.304304][T26386] netlink: 120 bytes leftover after parsing attributes in process `syz.5.5652'. [ 687.316107][T10234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.348029][T10234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.355523][T26386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5652'. [ 687.399255][T26390] syzkaller0: entered promiscuous mode [ 687.408976][T26390] syzkaller0: entered allmulticast mode [ 687.486538][T26388] netlink: 'syz.6.5653': attribute type 11 has an invalid length. [ 687.500545][T26388] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5653'. [ 687.582790][ T3459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.603682][ T3459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.749934][T26399] netlink: 'syz.0.5656': attribute type 1 has an invalid length. [ 687.767688][T26397] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5657'. [ 687.824150][T26399] delete_channel: no stack [ 688.354291][T26418] netlink: 'syz.3.5663': attribute type 1 has an invalid length. [ 688.362584][T26418] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5663'. [ 688.390298][T26437] veth0: entered promiscuous mode [ 688.406100][T26437] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5667'. [ 688.460480][T26436] veth0: left promiscuous mode [ 688.622062][T26447] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5669'. [ 688.782957][T26454] tipc: Enabled bearer , priority 0 [ 688.896373][T26458] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5673'. [ 688.932316][ T30] audit: type=1800 audit(1759735340.593:4): pid=26457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5673" name="memory.events" dev="tmpfs" ino=53 res=0 errno=0 [ 688.947974][T26464] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 688.988629][ T31] INFO: task syz.7.4408:21784 blocked for more than 143 seconds. [ 689.040676][ T31] Not tainted syzkaller #0 [ 689.045152][ T30] audit: type=1804 audit(1759735340.603:5): pid=26457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.5673" name="/newroot/7/memory.events" dev="tmpfs" ino=53 res=1 errno=0 [ 689.045644][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 689.045655][ T31] task:syz.7.4408 state:D stack:24856 pid:21784 tgid:21783 ppid:10834 task_flags:0x400040 flags:0x00080002 [ 689.140185][ T31] Call Trace: [ 689.145011][ T31] [ 689.156004][ T31] __schedule+0x1798/0x4cc0 [ 689.160862][ T31] ? __lock_acquire+0xab9/0xd20 [ 689.165862][ T31] ? __lock_acquire+0xab9/0xd20 [ 689.170881][ T31] ? __pfx___schedule+0x10/0x10 [ 689.176050][ T31] ? schedule+0x91/0x360 [ 689.180759][ T31] schedule+0x165/0x360 [ 689.186031][ T31] schedule_preempt_disabled+0x13/0x30 [ 689.191805][ T31] __mutex_lock+0x7e6/0x1350 [ 689.198971][ T31] ? __mutex_lock+0x5bb/0x1350 [ 689.203880][ T31] ? nfsd_nl_version_get_doit+0x16e/0xb60 [ 689.211433][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 689.216604][ T31] ? __nlmsg_put+0xef/0x1b0 [ 689.222243][ T31] ? genlmsg_put+0x137/0x2e0 [ 689.226979][ T31] nfsd_nl_version_get_doit+0x16e/0xb60 [ 689.233176][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 689.243924][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 689.252729][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 689.262486][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 689.269167][ T31] genl_rcv_msg+0x60e/0x790 [ 689.273944][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 689.279140][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 689.286627][ T31] ? __asan_memcpy+0x40/0x70 [ 689.291430][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 689.298224][ T31] netlink_rcv_skb+0x205/0x470 [ 689.303314][ T31] ? __lock_acquire+0xab9/0xd20 [ 689.309102][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 689.314332][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 689.322806][ T31] ? down_read+0x1ad/0x2e0 [ 689.327992][ T31] genl_rcv+0x28/0x40 [ 689.332301][ T31] netlink_unicast+0x82c/0x9e0 [ 689.337251][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 689.342969][ T31] ? netlink_sendmsg+0x642/0xb30 [ 689.349692][ T31] ? skb_put+0x11b/0x210 [ 689.354338][ T31] netlink_sendmsg+0x805/0xb30 [ 689.360229][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 689.365814][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 689.375309][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 689.382039][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 689.391563][ T31] __sock_sendmsg+0x219/0x270 [ 689.396574][ T31] ____sys_sendmsg+0x505/0x830 [ 689.401669][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 689.407282][ T31] ? import_iovec+0x74/0xa0 [ 689.412092][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 689.416935][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 689.422884][ T31] ? __fget_files+0x2a/0x420 [ 689.429047][ T31] ? __fget_files+0x3a0/0x420 [ 689.434031][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 689.439237][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 689.446420][ T31] ? do_syscall_64+0xbe/0x3b0 [ 689.451834][ T31] do_syscall_64+0xfa/0x3b0 [ 689.456677][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 689.463654][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.471100][ T31] ? clear_bhb_loop+0x60/0xb0 [ 689.475961][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.487065][ T31] RIP: 0033:0x7f36d7b8eec9 [ 689.496380][ T31] RSP: 002b:00007f36d5df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 689.506274][ T31] RAX: ffffffffffffffda RBX: 00007f36d7de5fa0 RCX: 00007f36d7b8eec9 [ 689.515259][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 689.523733][ T31] RBP: 00007f36d7c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 689.532054][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.542239][ T31] R13: 00007f36d7de6038 R14: 00007f36d7de5fa0 R15: 00007ffc162bef38 [ 689.553295][ T31] [ 689.556613][ T31] [ 689.556613][ T31] Showing all locks held in the system: [ 689.560019][T26452] tipc: Disabling bearer [ 689.660990][ T31] 1 lock held by khungtaskd/31: [ 689.670403][ T31] #0: ffffffff8dd3a860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 689.713911][ T31] 3 locks held by kworker/1:2/978: [ 689.731007][ T31] #0: ffff8880b8939fd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 689.760969][ T31] #1: ffff8880b8924048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 689.773979][ T31] #2: ffffffff8dd3a860 (rcu_read_lock){....}-{1:3}, at: xa_find+0x8c/0x2b0 [ 689.783308][ T31] 2 locks held by getty/5600: [ 689.793305][ T31] #0: ffff88802fb370a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 689.806030][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 689.834625][ T31] 1 lock held by syz.2.1228/10252: [ 689.841334][ T31] 3 locks held by kworker/u8:25/17642: [ 689.846917][ T31] #0: ffff88801aef6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 689.858254][ T31] #1: ffffc9000ca9fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 689.875287][ T31] #2: ffffffff8f0b7c10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 689.886613][ T31] 2 locks held by syz.5.4400/21756: [ 689.892255][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 689.904898][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 689.916290][ T31] 2 locks held by syz.7.4408/21784: [ 689.921773][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 689.933313][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 689.945234][ T31] 2 locks held by syz.1.4492/22094: [ 689.954153][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 689.963576][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 689.973839][ T31] 2 locks held by syz.9.4594/22493: [ 689.980437][ T31] #0: ffffffff8f12a5d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 689.991033][ T31] #1: ffffffff8e01edc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 690.004406][ T31] [ 690.006982][ T31] ============================================= [ 690.006982][ T31] [ 690.065687][ T31] NMI backtrace for cpu 0 [ 690.065710][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 690.065732][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 690.065744][ T31] Call Trace: [ 690.065751][ T31] [ 690.065760][ T31] dump_stack_lvl+0x189/0x250 [ 690.065793][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 690.065816][ T31] ? __pfx__printk+0x10/0x10 [ 690.065859][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 690.065887][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 690.065916][ T31] ? __pfx__printk+0x10/0x10 [ 690.065949][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 690.065971][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 690.066000][ T31] watchdog+0xf93/0xfe0 [ 690.066023][ T31] ? watchdog+0x1de/0xfe0 [ 690.066047][ T31] kthread+0x711/0x8a0 [ 690.066075][ T31] ? __pfx_watchdog+0x10/0x10 [ 690.066091][ T31] ? __pfx_kthread+0x10/0x10 [ 690.066118][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 690.066145][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 690.066172][ T31] ? __pfx_kthread+0x10/0x10 [ 690.066198][ T31] ret_from_fork+0x436/0x7d0 [ 690.066221][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 690.066247][ T31] ? __switch_to_asm+0x39/0x70 [ 690.066270][ T31] ? __switch_to_asm+0x33/0x70 [ 690.066293][ T31] ? __pfx_kthread+0x10/0x10 [ 690.066318][ T31] ret_from_fork_asm+0x1a/0x30 [ 690.066366][ T31] [ 690.066374][ T31] Sending NMI from CPU 0 to CPUs 1: [ 690.218242][ C1] NMI backtrace for cpu 1 [ 690.218260][ C1] CPU: 1 UID: 0 PID: 1105 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 690.218281][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 690.218293][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 690.218320][ C1] RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 690.218342][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 52 b8 01 00 00 00 31 d2 f0 0f b0 17 <75> 06 5a e9 88 3e 00 00 56 0f b6 f0 e8 9f ff ff ff 5e 5a c3 cc cc [ 690.218358][ C1] RSP: 0018:ffffc90003ddf4b8 EFLAGS: 00000046 [ 690.218379][ C1] RAX: 0000000000000001 RBX: ffffffff99764b70 RCX: 0000000000000001 [ 690.218391][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff99764b70 [ 690.218403][ C1] RBP: 1ffffffff32ec96f R08: ffffffff99764b73 R09: 1ffffffff32ec96e [ 690.218416][ C1] R10: dffffc0000000000 R11: fffffbfff32ec96f R12: dffffc0000000000 [ 690.218430][ C1] R13: 1ffffffff32ec970 R14: ffffffff99764b80 R15: ffffffff99764b78 [ 690.218447][ C1] FS: 0000000000000000(0000) GS:ffff88812649b000(0000) knlGS:0000000000000000 [ 690.218462][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 690.218474][ C1] CR2: 0000555573adc5c8 CR3: 0000000026dfa000 CR4: 00000000003526f0 [ 690.218490][ C1] Call Trace: [ 690.218496][ C1] [ 690.218504][ C1] do_raw_spin_unlock+0x122/0x240 [ 690.218531][ C1] _raw_spin_unlock_irqrestore+0x78/0x110 [ 690.218556][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 690.218581][ C1] ? __lock_acquire+0xab9/0xd20 [ 690.218602][ C1] debug_check_no_obj_freed+0x451/0x470 [ 690.218635][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1207/0x2af0 [ 690.218664][ C1] kfree+0x112/0x440 [ 690.218685][ C1] ieee80211_ibss_rx_queued_mgmt+0x1207/0x2af0 [ 690.218713][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 690.218749][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xfab/0x2af0 [ 690.218776][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 690.218804][ C1] ? __lock_acquire+0xab9/0xd20 [ 690.218825][ C1] ? __lock_acquire+0xab9/0xd20 [ 690.218853][ C1] ? kcov_remote_start+0x18e/0x7f0 [ 690.218886][ C1] ieee80211_iface_work+0x85f/0x12d0 [ 690.218911][ C1] cfg80211_wiphy_work+0x2b8/0x470 [ 690.218931][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 690.218950][ C1] process_scheduled_works+0xade/0x17b0 [ 690.218985][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 690.219013][ C1] worker_thread+0x8a0/0xda0 [ 690.219033][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 690.219063][ C1] ? __kthread_parkme+0x7b/0x200 [ 690.219089][ C1] kthread+0x711/0x8a0 [ 690.219112][ C1] ? __pfx_worker_thread+0x10/0x10 [ 690.219130][ C1] ? __pfx_kthread+0x10/0x10 [ 690.219153][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 690.219177][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 690.219201][ C1] ? __pfx_kthread+0x10/0x10 [ 690.219224][ C1] ret_from_fork+0x436/0x7d0 [ 690.219244][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 690.219265][ C1] ? __switch_to_asm+0x39/0x70 [ 690.219288][ C1] ? __switch_to_asm+0x33/0x70 [ 690.219310][ C1] ? __pfx_kthread+0x10/0x10 [ 690.219332][ C1] ret_from_fork_asm+0x1a/0x30 [ 690.219370][ C1] [ 690.231929][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 690.231950][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 690.231973][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 690.231986][ T31] Call Trace: [ 690.231995][ T31] [ 690.232004][ T31] dump_stack_lvl+0x99/0x250 [ 690.232033][ T31] ? __asan_memcpy+0x40/0x70 [ 690.232054][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 690.232078][ T31] ? __pfx__printk+0x10/0x10 [ 690.232128][ T31] vpanic+0x281/0x750 [ 690.232155][ T31] ? __pfx_vpanic+0x10/0x10 [ 690.232178][ T31] ? preempt_schedule+0xae/0xc0 [ 690.232208][ T31] ? preempt_schedule_common+0x83/0xd0 [ 690.232244][ T31] panic+0xb9/0xc0 [ 690.232267][ T31] ? __pfx_panic+0x10/0x10 [ 690.232291][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 690.232317][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 690.232346][ T31] watchdog+0xfd2/0xfe0 [ 690.232370][ T31] ? watchdog+0x1de/0xfe0 [ 690.232395][ T31] kthread+0x711/0x8a0 [ 690.232423][ T31] ? __pfx_watchdog+0x10/0x10 [ 690.232441][ T31] ? __pfx_kthread+0x10/0x10 [ 690.232467][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 690.232495][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 690.232523][ T31] ? __pfx_kthread+0x10/0x10 [ 690.232548][ T31] ret_from_fork+0x436/0x7d0 [ 690.232572][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 690.232599][ T31] ? __switch_to_asm+0x39/0x70 [ 690.232624][ T31] ? __switch_to_asm+0x33/0x70 [ 690.232647][ T31] ? __pfx_kthread+0x10/0x10 [ 690.232674][ T31] ret_from_fork_asm+0x1a/0x30 [ 690.232716][ T31] [ 690.697096][ T31] Kernel Offset: disabled [ 690.701409][ T31] Rebooting in 86400 seconds..