last executing test programs: 39.828362771s ago: executing program 0 (id=598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001100)={@val={0x6f01, 0x800}, @val={0x2, 0x1, 0x6, 0x6, 0x6, 0x81}, @mpls={[], @ipv4=@igmp={{0x5, 0x4, 0x2, 0x29, 0xfc0, 0x66, 0x0, 0x7f, 0x2, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x14, 0xb, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, "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"}}}}, 0xfce) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) 34.012123865s ago: executing program 0 (id=620): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x2}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[], 0x38}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r4}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x9, 0x4, 0xd1, 0x7}, 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r6}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f00000000c0)={0x2f, @broadcast, 0x4e22, 0x2, 'sh\x00', 0x26, 0x0, 0x5}, 0x2c) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 31.389044106s ago: executing program 1 (id=636): syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bb000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a0001"], 0x48}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}) 31.207216166s ago: executing program 3 (id=637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xc}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0x7}, {0x0, 0xfff1}, {0x7, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 30.168511614s ago: executing program 2 (id=640): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x6}, @IFLA_BRPORT_COST={0x8, 0x3, 0x6}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000000)={'team_slave_1\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000040)=ANY=[@ANYBLOB="9f00000000000008"], 0x8) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @link_local}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="175b3df56fc7491ae03e36e5b4628127df1add52bab6a99696a2eeec50c5d5385d", @ANYRES32=r2, @ANYRESHEX], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000280)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f00000004c0)=@raw=[@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xcccf}], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x0) 29.827132109s ago: executing program 4 (id=642): r0 = socket$inet6(0xa, 0x805, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001080)={r1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001100)={{{@in=@local, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000001200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3, r3, 0x400}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f0000000080), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080), 0x0) getsockopt$bt_hci(r0, 0x84, 0x22, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) 29.691216674s ago: executing program 4 (id=643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x10080000, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xf, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004865}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2}, 0x94) socket(0xa, 0x1, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f00000006c0)=@mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_a, @initial, {0x8, 0x4}, @value=@ver_80211n={0x0, 0x2, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, @tdls_teardown={0xc, 0x3, {0x12, {0x37, 0xb5, {0x7, 0x8, "847c663fda297a1642f7cd4d477c3ee8", "ac9661e8ed0a3ac59d403d95a664db0e00", "6c208a633f56b5441b6cbbb5db9cb45b7186ac77aba7a02bd19d00ffc6646dfc", [{0x4, 0x13, "cbdfae0afb2415a7fb47d2be33a4f38698207f"}, {0x1, 0x10, "5933cec781ae150e4297f741b8bd3cac"}, {0x4, 0x2, "31bc"}, {0x1}, {0x2, 0x5, "0dfdb2aaa4"}, {0x1, 0x18, "517600006c713c34067aa3230500000048112a2fc47dcec2"}, {0x2, 0x11, "eaf0693b5c7e1197d7b9cc0ecd45198d85"}, {0x2}]}}, {0x65, 0x12, {@random="dffe22d89ea1"}}}}}, 0xeb) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r5, @ANYRES64=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x2000c810}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x10080000, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xf, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004865}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) socket(0xa, 0x1, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f00000006c0)=@mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_a, @initial, {0x8, 0x4}, @value=@ver_80211n={0x0, 0x2, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, @tdls_teardown={0xc, 0x3, {0x12, {0x37, 0xb5, {0x7, 0x8, "847c663fda297a1642f7cd4d477c3ee8", "ac9661e8ed0a3ac59d403d95a664db0e00", "6c208a633f56b5441b6cbbb5db9cb45b7186ac77aba7a02bd19d00ffc6646dfc", [{0x4, 0x13, "cbdfae0afb2415a7fb47d2be33a4f38698207f"}, {0x1, 0x10, "5933cec781ae150e4297f741b8bd3cac"}, {0x4, 0x2, "31bc"}, {0x1}, {0x2, 0x5, "0dfdb2aaa4"}, {0x1, 0x18, "517600006c713c34067aa3230500000048112a2fc47dcec2"}, {0x2, 0x11, "eaf0693b5c7e1197d7b9cc0ecd45198d85"}, {0x2}]}}, {0x65, 0x12, {@random="dffe22d89ea1"}}}}}, 0xeb) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r4) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r5, @ANYRES64=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x2000c810}, 0x0) (async) 29.505601417s ago: executing program 1 (id=644): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="ad56b6c5911f0600002300000000000000", 0x11) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000002000010000000000fbdbdf250a400000011d00081500030014000200fc02000000000000000000000000000014000100200100"], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="10000000001000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000214000200fc"], 0x5c}}, 0x0) 29.50509398s ago: executing program 3 (id=645): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x2c, 0x56, 0x81, 0xa, 0x41, @private2, @local, @private1, [0xffffffff, 0x0, 0xffffff00, 0xff], [0xffffff00, 0x0, 0xffffffff, 0xff], [0x0, 0xffffffff, 0xff, 0xff000000], 0xb8f4757fc1e05f28, 0x180}}, @common=@hl={{0x28}, {0x1, 0x7}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @local, [], [], 'wg1\x00', 'veth1_to_batadv\x00', {}, {}, 0x62}, 0x0, 0x228, 0x258, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x6, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3, 0x0, 0x40}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000000c0)={{r0}, 0x2, &(0x7f0000000040)=[0x1, 0x853], 0x8000000000000001, 0x0, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="350b23bd7000fbdbdf251900000008000300", @ANYRES32=r4, @ANYRES32=r2], 0x1c}}, 0xa0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r2) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCX25GSUBSCRIP(r6, 0x89e5, 0x0) ioctl$sock_rose_SIOCDELRT(r5, 0x890c, 0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, 0x0, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x20004000) (async) getsockname$packet(r9, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmmsg$inet6(r10, &(0x7f0000000480)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x400, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000500)="71ee62a957116ff7236f45b5daa5b51d6ec4d2488d6a4cd256c8c303626f1989e1329af83add40337ed33fc68ffacf82e6386ee5a14476ef5a89bd93c2694f5f821f76f709cfff0d8db1d8692eb18dfe6a5291cc329149213288d2a1090d8502a30ba1be42a512ba3423497773ba165a17e1d6c75a98d1c95bb47629dd9a4f636b737b8bc8ddff872dde8c7d6e897e46c4e5c315af5c8025211b74a934b7a4fbb581a2df4799cce791242b104d434c6c59ef15707bd42c3860da482b582cac0b79729305cfc5e77afa033cedfb311efd1412a08887b76ec3b66687426e377d70a6c2fb6d1a290920056cd75f167d3746a208f2", 0xf3}, {&(0x7f0000000300)="03fbbd467342839aecade42b515f04703c98905ec0d5e83c05e99f7ea57cb5a748bd61d46a01482a88ed7e3c84c3861c7dc8acd3011d864879a928e9ffb04a0a23ab883dbd3ff88368675d4b45009afde6caebde23b6a8dd8a0f50aed1b4bcf9f47e2bf5e115ab59dc", 0x69}, {&(0x7f0000000600)="d3c03ce5f550e223549ca160c479e3f91d509aef6cc3222c691595a541b95f83e3968c5712a0e6ebc7de5e8d2e0100000000000000c533a65188a98b43d28d4a2080a029fd814cbed2067f52b329c3668f45be51c0cc7c7837592d5bb09c0a566ad6103ae6460bb13273ef4e264daf27ccaab67b311db4fb0f65f62353dc37ee21b2cea820b5ebdddc3dfe3a685f3ff7650a2b5c649cfb5455bfd2d89527f1697cb929847ad224eb70d98a8bc9575961127ccc93ed0301a08f600811cf687084b9ecf85413402791c64236b4d961be815433ce1d6326c30c6ad8cca82ee4a05cf6ec1d7d4cae", 0xe6}], 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x2c0}}], 0x1, 0x4800) (async) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0xe0b, 0x470bd28, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r7, &(0x7f0000000040)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendto$inet6(r7, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 29.351132487s ago: executing program 4 (id=646): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000000)=0x4) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80c0}, 0x400c040) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'pimreg\x00', 0x0}) (async) r3 = epoll_create1(0x0) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000180)={0x7, 0x1, 0x51a2, 0x1, 0xec}) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', r2, 0x10, 0x10, 0x0, 0x34a, {{0x6, 0x4, 0x3, 0x36, 0x18, 0x67, 0x0, 0x40, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @multicast1, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000240)={'tunl0\x00', r6, 0x20, 0x0, 0x5, 0xffffff00, {{0x1d, 0x4, 0x2, 0x4, 0x74, 0x66, 0x0, 0x5, 0x4, 0x0, @loopback, @multicast1, {[@timestamp={0x44, 0x2c, 0x3b, 0x0, 0x2, [0x2, 0x3ff, 0x1, 0x5, 0x401, 0xffffffff, 0x5, 0x5, 0x8, 0x400]}, @timestamp_prespec={0x44, 0x2c, 0xeb, 0x3, 0x7, [{@rand_addr=0x64010100, 0x7}, {@dev={0xac, 0x14, 0x14, 0x42}, 0xa27}, {@broadcast, 0x3}, {@rand_addr=0x64010100, 0x26}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x81}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x3, 0x87}]}}}}}) (async) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000340)={'netdevsim0\x00'}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6gre0\x00', r7, 0x4, 0x8, 0x81, 0xb, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x7800, 0x7800, 0x3}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x32, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', r2, 0x4, 0xff, 0x8, 0x0, 0x8, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x8, 0x1}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000a40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x14c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x404c880}, 0x44013) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000a80)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xca, 0xffffffff, 0xfef, 0x1, 0x5}, &(0x7f0000000b40)=0x98) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r12, 0x84, 0xf, &(0x7f0000000b80)={r13, @in={{0x2, 0x4e20, @broadcast}}, 0x458, 0xa, 0x2, 0x3, 0x1}, &(0x7f0000000c40)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r12, 0x84, 0x7b, &(0x7f0000000c80)={0x0, 0xfffffffa}, &(0x7f0000000cc0)=0x8) (async) ioctl$NILFS_IOCTL_GET_SUINFO(r4, 0x80186e84, &(0x7f0000000d40)={&(0x7f0000000d00)=[{0x3, 0x2}, {0x4}, {0x6, 0x9}], 0x3, 0x10, 0x8000, 0x5}) (async) r16 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r16, 0x84, 0xe, &(0x7f0000000d80)={r15, 0xa98, 0x9, 0x1cb0, 0x9, 0x0, 0xf3, 0x1, {r14, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x200000, 0x80, 0x9, 0x3, 0x11}}, &(0x7f0000000e40)=0xb0) (async) r17 = socket$netlink(0x10, 0x3, 0x13) r18 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ec0), r17) sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0xa8, r18, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xdc99}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20873c58}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r17, 0x89f4, &(0x7f0000001080)={'sit0\x00', &(0x7f0000001040)={@loopback, 0x1, 0x0, 0x10, 0x0, [{@dev}]}}) 29.221189633s ago: executing program 3 (id=647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, &(0x7f0000000340)='^'}, 0x20) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x3, 0xfd, 0xfffff028}, {0x6, 0x0, 0x9, 0x1}]}) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000001100)={0x11, 0x3, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$802154_dgram(r7, 0x0, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x8, '\x00', r6, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1a, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x8b}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @ldst={0x2, 0x0, 0x4, 0x9, 0x1, 0xc, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x28, 0x31, &(0x7f0000000280)=""/49, 0x40f00, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x0, 0x975, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[r2, r3, r8, r2], &(0x7f0000000600)=[{0x15, 0x1, 0x6, 0x1}], 0x10, 0xfff}, 0x94) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000ac0)={0x3, 0x7}, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r9, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socket$l2tp6(0xa, 0x2, 0x73) 29.22020481s ago: executing program 1 (id=648): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r2, 0x6, 0xd, &(0x7f0000000000), 0x4) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000140)) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 29.205602677s ago: executing program 2 (id=649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000000080101000000000000000005000007060002408863000004000480090001007379343000000000050003002f"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x6003}, @val={0x2, 0x80, 0x9, 0xff, 0x80, 0xf5}, @eth={@broadcast, @random="1db4c6a286a7", @void, {@ipv4={0x800, @gre={{0x9, 0x4, 0x1, 0x2, 0x2c8, 0x67, 0x0, 0x6, 0x2f, 0x0, @empty, @broadcast, {[@rr={0x7, 0x7, 0x76, [@rand_addr=0x64010102]}, @generic={0x88, 0x9, "cc48787f1a1e90"}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x57, 0x3, [0x2], "f3c7e5095f476f579d706733b4c248909d007a84ff71b868ed7086e3eb7cf5ae2866e2ca54cd958fae2e43c54959b9f8257d38cf46cf342c64a50a207769d984a5f26ce711634bc1380381bb64918f1f65ab1ade6c1d46"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x3], "1006c269bff1f387e72a6d597baf3a697a3a0ce7da7b4e0fa0f52ac904e4f7213e5b869aeeeb189a8a86c0fd01330cdcaac8e247eec95f3817a8ab5884b47efe5481f3d9f1df387e748df3ddd5274b581e60ce37afe9d7be701ae2ebf5bd1e4ff0584859eb5346c56b95c342b6a8be85413ee80707aedd6ba060f0f7504728e47f17a67415368198707ec1c7c142865258dd09d5f7"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0xffff, 0x0], "eaa1f421646ca00b66324ef269c236b45cbcab752767d6c1a462047b58362c46c77278e6987816f051b33e0e69651e4f28cfc85167125c1169e3cd4dbd077b6410fa3ba23e97aaf1713698176412e1132adcb429090a35fbfe9688ca8662872dfeb514f96e9264a7e9a42758acac91132d2c68299f7154e32c8a78c5751db0d3a619b2e4b7985eacb5869bb42975df12d4e109e320a7a6bfa3a59f7bf0325890dc34152358c21b1e6698808f9bbc805fcb3b1595"}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x8, 0x3, 0x0, 0x2, 0x3, 0x4}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x1, {{0x7, 0x2, 0x6, 0x1, 0x0, 0x1, 0x1, 0x4}, 0x2, {0x3, 0x9, 0x0, 0x7, 0x0, 0x0, 0x2}}}, {0x8, 0x6558, 0x3, "c9b488664a97239dbd12160ed92799d769f982d017820f069818658b7f3b14f7ff9861f81a83945ac009790da608f69f99e32a425cd1243f5aacaa36855ac8a2bfc84df4c59fc2853136059a147a8deb338ce7ae46dc56053d157fc0f81f01fe09f2777a280560f5191f6652de3debce3c36faa68f338ad3c868969f9ed4154c490349d3f1fb3fd526fb9ad723f01029453152d8f4a5c388795f01bcf56fbd040444f8f9d5d3163514ae0576e87691778c12bbb3a52c791b"}}}}}}}, 0x2e4) 28.892628845s ago: executing program 4 (id=650): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fbdbdf25100000000500100083000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4c004}, 0x44000) 28.541549814s ago: executing program 1 (id=651): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x402200, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x5421, 0x0) (async) ioctl$TUNSETOFFLOAD(r0, 0x5421, 0x0) 28.5408728s ago: executing program 0 (id=652): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x8, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x6, 0x2, 0x66, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x7, 0x4, 0x4}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x6, [@func={0x1, 0x0, 0x0, 0xc, 0x3}, @struct={0x9, 0x1, 0x0, 0x4, 0x0, 0x6, [{0x8, 0x2, 0xa}]}, @volatile={0x10, 0x0, 0x0, 0x9, 0x4}, @typedef={0xe, 0x0, 0x0, 0x8, 0x5}, @enum64={0x6, 0x4, 0x0, 0x13, 0x0, 0x2, [{0x7, 0x40, 0x7fffffff}, {0x2, 0xc, 0x9}, {0xf, 0x2, 0x1}, {0xd, 0x7, 0x2}]}, @volatile={0x2, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x0, 0x0, 0x30, 0x30]}}, &(0x7f0000000300)=""/116, 0xa2, 0x74, 0x1, 0x9}, 0x28) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x9, 0xa9c, 0x8, 0x80a0, r0, 0x6, '\x00', r1, r2, 0x2, 0x2, 0x5, 0x0, @value=r3}, 0x50) 28.446985484s ago: executing program 4 (id=653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000bc0)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000900142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace801796ec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r3) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0xf7}, @val={0x2, 0x1, 0x4, 0x81, 0x9}, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @val={@val={0x88a8, 0x2}, {0x8100, 0x1, 0x1, 0x3}}, {@canfd={0xd, {{0x4, 0x1, 0x1}, 0x18, 0x1, 0x0, 0x0, "9920c0dc2c2ea171e384dd74360a53f909f2e2595886de72dfa5d6c4963a6e3623c24662c396d7440d9f702e3c6e7826b5a6783becdf58adef27dc0df23490a5"}}}}}, 0x6c) 28.345417664s ago: executing program 1 (id=654): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r3, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r3, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 28.205191043s ago: executing program 0 (id=655): r0 = socket(0x11, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600c7000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f00000001c0)="520222171935f335f1e859e48843f49ecfabe6b7aa722b66173da5cfcfd393c7d2070bbb91ab1ffa5da786cc4db054006fd676484e513462d69932ded722da3375df83a1748971fa20cecfc3ab09095aad8df77320aa60a2395a9b1c2ef04ac3a39350293363d331ab4061e904586bc47e737a30bc4eb214f6d15c3ebdf02fe04e78c21c2c3a0352e3c22402e8ecce7ff6", 0x91) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc0280200003031e000500e1000c0400070080000900", 0x33a) 28.090795276s ago: executing program 1 (id=656): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x6, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000380)={@dev={0xfe, 0x80, '\x00', 0x1f}, 0x76, r2}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 27.983252337s ago: executing program 3 (id=657): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x4) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="c8ff3f1c9fe6b89e952825bbaba7930a8f5fd752", 0x14}], 0x1, 0x0, 0x0, 0x28044854}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x40801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000100)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRESOCT=r3, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f400002000000000000080000000000000000010005000000000044000500ac141426000000000000000000000000000004d53c"], 0xfc}}, 0x4040980) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendto$rxrpc(r6, &(0x7f00000003c0)="e3710f00217c24965647c62556fdfd5a1c8fa69473fa99bc3dc851c71da76d5b70edf18e3d94a3c2d0f4fdf0765a30bb", 0x30, 0x4000, 0x0, 0x0) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000100)=""/40, 0x28}, {&(0x7f0000000480)=""/102, 0x66}], 0x2}, 0x2041) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYRES16=r3, @ANYRES64=r0], 0x24}}, 0x0) 27.729598215s ago: executing program 0 (id=658): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0x3, 0x0, &(0x7f0000000200)="63eced", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000400)={r0, r0, 0x4283, 0x0, 0x0, 0x7, 0x2, 0x7, 0x5, 0x400, 0x6, 0x3ff, 'syz1\x00'}) (async) r2 = accept$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)) (async) r4 = accept$netrom(0xffffffffffffffff, &(0x7f0000000080)={{}, [@netrom, @bcast, @bcast, @bcast, @bcast, @rose, @default]}, &(0x7f00000004c0)=0x48) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000140)=0x8, 0x4) (async) r5 = socket(0x10, 0x3, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000240)={0x7, 0x7, 0x202, 0x1ff, 0x2, 0x9, 0x6, 0xa3d, r9}, 0x20) write(r5, &(0x7f0000000380)="3c00000058001f000307f4f9002304000a04d6490800010002010002070003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f00000003c0)={0x6, 'pimreg0\x00', {0x4}, 0x1}) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in, 0x0, 0x33}, @in6=@loopback, {0x5}, {}, {}, 0x70bd26, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@mcast1, 0x0, 0x3}, {@in6=@remote, 0x0, 0x33}, @in=@local, {0x2}, {0x0, 0x0, 0x0, 0x3}, {0x2}}, 0x0, 0x5dfe}, [@lastused={0xc, 0xf, 0xfffffffffffffffd}]}, 0x104}}, 0x0) 27.620640417s ago: executing program 2 (id=659): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000003, 0x44010, r0, 0x1c614000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 27.53890334s ago: executing program 0 (id=660): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="44000000100039040000000000000000000003e4", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="6be6e05028ce41888c199466d191afd82a770b1d16a7c9fcd2d9a57e42c5f71dc955e56e2dd9c3db90bbf9e5869ce10c82a833b88e225bc213ee96d382f00c6088dbb5ce06968cc3231478f2a3bf4be745151efc7176948b772963cc4319"], 0x44}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r3, 0xcc071acbf25dbf8f, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) getsockopt$inet_opts(r1, 0x0, 0x53, 0x0, &(0x7f0000002e40)=0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000000c0)=""/19, 0x13}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x2d8, 0x30}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x20bbfb2b, 0xf2, 0x45ff, 0x9, 0xfffffffc, 0xb5, 0x10001, 0x2, 0x81}}}}]}, 0x58}}, 0x180c0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x6c, r9, 0x7, 0x8, 0x3, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x40, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x36, 0x4, "8b6f528b843acf7f9a78462279a35a379d1e2c02dcdf5a5e838661488f1f4b6a9a73eb125af76b25d84bc8f24ac4176babfb"}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x484}, 0x0) r10 = socket$inet(0xa, 0x801, 0x84) connect$inet(r10, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r10, 0x8) r11 = accept4(r10, 0x0, 0x0, 0x0) write(r11, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r11, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x50) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(r11) 27.523291953s ago: executing program 3 (id=661): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011809ed61b77d9f16a96c594a1961ed189d63c3391c4854d66a1452ed6b21920c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b7120f9b5cb852eaa3c6ad1b9be"], 0xb4}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) r3 = socket$inet(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f0000002a80)=""/4084, &(0x7f0000000000)=0xff4) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0), 0x0) 27.32968983s ago: executing program 4 (id=662): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c000101e97e8d885088cfdf1edb5470b2830e31a91ca3d59634316baf87d2dd5f8e642e32d174adb714b2c91608e16ed800872140a5be0f61be7237374bb2d1d1557265940503f7a6785f391af73656a89f80b9b614208165e17eda81ec83a6786d333b6c72b8a55c79d0fda98c01b4213f7a126c802fb509961467bf349515bf4aa0837048671cb03fbe1146aea219446cd2d9ea5ce59ed17f2584d4b57178", @ANYRES16=0x0, @ANYBLOB="08002cbd7000fbdbdf250f0000004c001780050006000700000000000000050006000c000000000000000500060010000000000000000c000500f9b458f2cd4675540c000500210722136ceb2acb0c0005002400345df34822730400e2000800350004000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40440c0}, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r1) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58) close(0x3) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000070000000c00018008000700", @ANYRES32=0x0, @ANYBLOB="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"], 0x20}}, 0x880) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) getsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000000300), &(0x7f00000003c0)=0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xfff5}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r6, &(0x7f0000000640)=[{&(0x7f0000000200)=""/228, 0xe4}], 0x1) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000800)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000000000000000000000000ff0200000000000000000000000000014f094e2000109078c205000100000000c6aefd3e7e9ed9180aac6668866f6c05e610030a8794143f46a6dc0540038e70dc7ef3272234dec472d65360253a82d5e5d5880d51c38e59863f517df27cef803296eaff7c6430ce88d3b6ca6ae29adbf2a51a5a01ea44225afd8818f653a41460dfffae0077cb95c08c40c96542af1abe374230ed51f11dd1a3737f4ad46ead792e5ad6675fd60b58aeb8608ce90f4ccc50aa732e43b12282"], 0x4a) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) 27.294653029s ago: executing program 2 (id=663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)={0x30, 0xe, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0xfffffd47, 0x2, 'syz2\x00'}]}, 0x30}}, 0x28000000) 27.130035416s ago: executing program 2 (id=664): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x1410, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x1070bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x6a, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x40088a1) 24.397915531s ago: executing program 3 (id=665): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}}, 0x20000084) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x0, 0x0, 0x4}, 0x20) close(0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r7, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x2a, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 16.041679686s ago: executing program 2 (id=666): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x300000000000011, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0xfffc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xe}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x99}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c0000000206050000000000000000000000fffe05000400000000000900020073797a32000000000500010007000000050005000a000000140007800800114000000008050015000500000011000300686173683a69702c6d61726b000000000900020073797a31000000000900020073797a300000000005000100070000000900020073797a3100000000"], 0x8c}}, 0x840) 0s ago: executing program 32 (id=660): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="44000000100039040000000000000000000003e4", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="6be6e05028ce41888c199466d191afd82a770b1d16a7c9fcd2d9a57e42c5f71dc955e56e2dd9c3db90bbf9e5869ce10c82a833b88e225bc213ee96d382f00c6088dbb5ce06968cc3231478f2a3bf4be745151efc7176948b772963cc4319"], 0x44}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r3, 0xcc071acbf25dbf8f, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) getsockopt$inet_opts(r1, 0x0, 0x53, 0x0, &(0x7f0000002e40)=0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000000c0)=""/19, 0x13}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x2d8, 0x30}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x20bbfb2b, 0xf2, 0x45ff, 0x9, 0xfffffffc, 0xb5, 0x10001, 0x2, 0x81}}}}]}, 0x58}}, 0x180c0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x6c, r9, 0x7, 0x8, 0x3, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x40, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x36, 0x4, "8b6f528b843acf7f9a78462279a35a379d1e2c02dcdf5a5e838661488f1f4b6a9a73eb125af76b25d84bc8f24ac4176babfb"}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x484}, 0x0) r10 = socket$inet(0xa, 0x801, 0x84) connect$inet(r10, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r10, 0x8) r11 = accept4(r10, 0x0, 0x0, 0x0) write(r11, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r11, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x50) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(r11) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.135' (ED25519) to the list of known hosts. [ 64.053799][ T5806] cgroup: Unknown subsys name 'net' [ 64.160099][ T5806] cgroup: Unknown subsys name 'cpuset' [ 64.168687][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.494366][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.535205][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.551395][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.559549][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.572705][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.581577][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.588206][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.589409][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.596464][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.606230][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.618306][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.619027][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.632570][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.633565][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.640571][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.656717][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.664070][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.672310][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.679908][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.687462][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.695959][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.703780][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.704369][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.719951][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.721249][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.734982][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.213976][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 68.274620][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 68.362711][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 68.395183][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 68.539509][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 68.555465][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.563200][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.570609][ T5819] bridge_slave_0: entered allmulticast mode [ 68.577658][ T5819] bridge_slave_0: entered promiscuous mode [ 68.619151][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.626285][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.633496][ T5819] bridge_slave_1: entered allmulticast mode [ 68.640390][ T5819] bridge_slave_1: entered promiscuous mode [ 68.701669][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.708859][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.716020][ T5828] bridge_slave_0: entered allmulticast mode [ 68.723374][ T5828] bridge_slave_0: entered promiscuous mode [ 68.730866][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.738078][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.745226][ T5828] bridge_slave_1: entered allmulticast mode [ 68.752369][ T5828] bridge_slave_1: entered promiscuous mode [ 68.764184][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.772094][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.779386][ T5832] bridge_slave_0: entered allmulticast mode [ 68.786508][ T5832] bridge_slave_0: entered promiscuous mode [ 68.816184][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.842960][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.850864][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.858488][ T5832] bridge_slave_1: entered allmulticast mode [ 68.865374][ T5832] bridge_slave_1: entered promiscuous mode [ 68.883884][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.920119][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.928142][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.935283][ T5821] bridge_slave_0: entered allmulticast mode [ 68.942378][ T5821] bridge_slave_0: entered promiscuous mode [ 68.960893][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.988844][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.995924][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.003748][ T5821] bridge_slave_1: entered allmulticast mode [ 69.011048][ T5821] bridge_slave_1: entered promiscuous mode [ 69.028407][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.037648][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.044745][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.052117][ T5820] bridge_slave_0: entered allmulticast mode [ 69.059099][ T5820] bridge_slave_0: entered promiscuous mode [ 69.068548][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.088898][ T5819] team0: Port device team_slave_0 added [ 69.103391][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.110623][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.117839][ T5820] bridge_slave_1: entered allmulticast mode [ 69.124652][ T5820] bridge_slave_1: entered promiscuous mode [ 69.133712][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.153156][ T5819] team0: Port device team_slave_1 added [ 69.188458][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.210886][ T5828] team0: Port device team_slave_0 added [ 69.235253][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.254698][ T5828] team0: Port device team_slave_1 added [ 69.262879][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.273886][ T5832] team0: Port device team_slave_0 added [ 69.289175][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.296137][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.322627][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.346452][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.353413][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.379883][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.393030][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.404074][ T5832] team0: Port device team_slave_1 added [ 69.438725][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.445860][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.472151][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.504023][ T5821] team0: Port device team_slave_0 added [ 69.521414][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.528566][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.554794][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.567066][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.574020][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.600008][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.621889][ T5821] team0: Port device team_slave_1 added [ 69.628717][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.635649][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.661671][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.687757][ T5820] team0: Port device team_slave_0 added [ 69.727545][ T5824] Bluetooth: hci0: command tx timeout [ 69.729113][ T5819] hsr_slave_0: entered promiscuous mode [ 69.733352][ T5833] Bluetooth: hci1: command tx timeout [ 69.740415][ T5819] hsr_slave_1: entered promiscuous mode [ 69.765510][ T5820] team0: Port device team_slave_1 added [ 69.781506][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.788526][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.814713][ T5833] Bluetooth: hci3: command tx timeout [ 69.816655][ T5824] Bluetooth: hci4: command tx timeout [ 69.820491][ T5833] Bluetooth: hci2: command tx timeout [ 69.826853][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.878601][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.885576][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.911819][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.934238][ T5832] hsr_slave_0: entered promiscuous mode [ 69.941037][ T5832] hsr_slave_1: entered promiscuous mode [ 69.947717][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 69.953512][ T5832] Cannot create hsr debugfs directory [ 70.000482][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.007526][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.033863][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.049312][ T5828] hsr_slave_0: entered promiscuous mode [ 70.055627][ T5828] hsr_slave_1: entered promiscuous mode [ 70.062029][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 70.067811][ T5828] Cannot create hsr debugfs directory [ 70.080988][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.088033][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.114329][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.202283][ T5821] hsr_slave_0: entered promiscuous mode [ 70.208743][ T5821] hsr_slave_1: entered promiscuous mode [ 70.214746][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 70.220943][ T5821] Cannot create hsr debugfs directory [ 70.333378][ T5820] hsr_slave_0: entered promiscuous mode [ 70.339798][ T5820] hsr_slave_1: entered promiscuous mode [ 70.345744][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 70.351697][ T5820] Cannot create hsr debugfs directory [ 70.687284][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.701114][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.725256][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.741755][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.799396][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.818555][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.852009][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.867774][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.911369][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.935840][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.949752][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.972139][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.048960][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.062330][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.072335][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.082940][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.100088][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.175592][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.197852][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.219212][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.226461][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.238542][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.250899][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.279138][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.292008][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.299173][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.346585][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.412928][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.422907][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.437356][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.448823][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.469400][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.498734][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.510256][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.517446][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.542103][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.549269][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.573511][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.610125][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.617291][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.644868][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.652180][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.670754][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.707251][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.714409][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.745330][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.752473][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.806954][ T5833] Bluetooth: hci1: command tx timeout [ 71.808357][ T51] Bluetooth: hci0: command tx timeout [ 71.821579][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.851108][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.877260][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.888238][ T51] Bluetooth: hci4: command tx timeout [ 71.893655][ T51] Bluetooth: hci2: command tx timeout [ 71.899944][ T5833] Bluetooth: hci3: command tx timeout [ 71.939820][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.953360][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.998314][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.005479][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.024312][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.031500][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.152693][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.214081][ T5819] veth0_vlan: entered promiscuous mode [ 72.266007][ T5819] veth1_vlan: entered promiscuous mode [ 72.342815][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.375633][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.415104][ T5819] veth0_macvtap: entered promiscuous mode [ 72.458501][ T5819] veth1_macvtap: entered promiscuous mode [ 72.482621][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.520448][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.558231][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.573606][ T5821] veth0_vlan: entered promiscuous mode [ 72.593734][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.621418][ T5821] veth1_vlan: entered promiscuous mode [ 72.639476][ T5832] veth0_vlan: entered promiscuous mode [ 72.645350][ T1336] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.656165][ T1336] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.691490][ T1336] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.713328][ T1336] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.736929][ T5832] veth1_vlan: entered promiscuous mode [ 72.802534][ T5821] veth0_macvtap: entered promiscuous mode [ 72.832625][ T5820] veth0_vlan: entered promiscuous mode [ 72.860122][ T5821] veth1_macvtap: entered promiscuous mode [ 72.898271][ T5820] veth1_vlan: entered promiscuous mode [ 72.912262][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.930957][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.949906][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.994552][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.005841][ T5832] veth0_macvtap: entered promiscuous mode [ 73.040987][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.049861][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.051775][ T5828] veth0_vlan: entered promiscuous mode [ 73.064619][ T34] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.074639][ T34] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.084066][ T5832] veth1_macvtap: entered promiscuous mode [ 73.103638][ T34] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.113099][ T34] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.135724][ T5828] veth1_vlan: entered promiscuous mode [ 73.153938][ T5820] veth0_macvtap: entered promiscuous mode [ 73.158342][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.186120][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.218954][ T5820] veth1_macvtap: entered promiscuous mode [ 73.278026][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.287522][ T5935] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.295593][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.301430][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.311238][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 73.338603][ T5935] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2'. [ 73.349819][ T81] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.356815][ T5935] netlink: 'syz.1.2': attribute type 5 has an invalid length. [ 73.382182][ T81] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.401504][ T5828] veth0_macvtap: entered promiscuous mode [ 73.432945][ T81] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.472066][ T81] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.483852][ T81] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.521831][ T81] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.532869][ T5828] veth1_macvtap: entered promiscuous mode [ 73.555774][ T81] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.591355][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.600664][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.614729][ T1336] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.677253][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.685102][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.691497][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.730927][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.750107][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.759257][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.768240][ T34] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.777419][ T34] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.811471][ T34] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.846137][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.856996][ T34] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.887378][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.887756][ T5833] Bluetooth: hci0: command tx timeout [ 73.902994][ T5824] Bluetooth: hci1: command tx timeout [ 73.922644][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.953905][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.969539][ T5824] Bluetooth: hci4: command tx timeout [ 73.975046][ T5833] Bluetooth: hci2: command tx timeout [ 73.980825][ T5824] Bluetooth: hci3: command tx timeout [ 74.069812][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.090990][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.156942][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.165555][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.317286][ T5959] netlink: 'syz.0.1': attribute type 24 has an invalid length. [ 74.323684][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.370262][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.410500][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 74.492922][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 74.771158][ T5981] Unsupported ieee802154 address type: 0 [ 74.790012][ T5981] syzkaller1: entered promiscuous mode [ 74.796086][ T5981] syzkaller1: entered allmulticast mode [ 75.038495][ T5984] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14'. [ 75.325680][ T5998] syz.0.16 uses obsolete (PF_INET,SOCK_PACKET) [ 75.351859][ T6002] netlink: 'syz.3.18': attribute type 1 has an invalid length. [ 75.370337][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 75.377639][ T6002] netlink: 224 bytes leftover after parsing attributes in process `syz.3.18'. [ 75.417316][ T5990] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 75.442457][ T5990] netlink: 148 bytes leftover after parsing attributes in process `syz.0.16'. [ 75.485881][ T6011] pim6reg: entered allmulticast mode [ 75.554297][ T6001] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 75.619166][ T6001] bond1 (unregistering): Released all slaves [ 75.629142][ T6017] netlink: 52 bytes leftover after parsing attributes in process `syz.1.24'. [ 75.843073][ T6032] netlink: 'syz.2.28': attribute type 1 has an invalid length. [ 75.889274][ T6032] netlink: 'syz.2.28': attribute type 3 has an invalid length. [ 75.931308][ T6032] netlink: 224 bytes leftover after parsing attributes in process `syz.2.28'. [ 75.931699][ T6021] netlink: 'syz.3.23': attribute type 1 has an invalid length. [ 75.974253][ T5833] Bluetooth: hci0: command tx timeout [ 75.979984][ T5824] Bluetooth: hci1: command tx timeout [ 76.049801][ T5824] Bluetooth: hci2: command tx timeout [ 76.055330][ T5824] Bluetooth: hci3: command tx timeout [ 76.061031][ T5833] Bluetooth: hci4: command tx timeout [ 76.191912][ T6042] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.386266][ T6051] gtp0: entered promiscuous mode [ 76.395880][ T6051] gtp0: entered allmulticast mode [ 76.444870][ T6055] warning: `syz.0.34' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.559745][ T6057] bond1: entered promiscuous mode [ 76.565624][ T6057] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.593816][ T6053] Zero length message leads to an empty skb [ 76.630631][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 76.755678][ T6018] infiniband syz2: set down [ 76.774072][ T6018] infiniband syz2: added syzkaller0 [ 76.904969][ T6018] RDS/IB: syz2: added [ 76.914543][ T6018] smc: adding ib device syz2 with port count 1 [ 76.923474][ T6018] smc: ib device syz2 port 1 has no pnetid [ 77.015088][ T6084] x_tables: duplicate entry at hook 1 [ 77.202740][ T6091] netlink: 'syz.0.45': attribute type 1 has an invalid length. [ 78.326044][ T6156] __nla_validate_parse: 13 callbacks suppressed [ 78.326062][ T6156] netlink: 16 bytes leftover after parsing attributes in process `syz.2.62'. [ 78.351860][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.63'. [ 78.363327][ T6157] openvswitch: netlink: Flow key attr not present in new flow. [ 78.680593][ T6175] openvswitch: netlink: IP tunnel dst address not specified [ 78.684596][ T6178] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 78.695313][ T6178] IPv6: NLM_F_CREATE should be set when creating new route [ 78.702672][ T6178] IPv6: NLM_F_CREATE should be set when creating new route [ 78.918805][ T6190] netlink: 'syz.0.70': attribute type 6 has an invalid length. [ 78.986800][ T6195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.71'. [ 79.027908][ T6195] netlink: 92 bytes leftover after parsing attributes in process `syz.2.71'. [ 79.194111][ T6203] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 79.411705][ T6212] syzkaller0: entered promiscuous mode [ 79.417997][ T6212] syzkaller0: entered allmulticast mode [ 79.725703][ T6224] netlink: 'syz.4.83': attribute type 4 has an invalid length. [ 79.727188][ T49] smc: removing ib device syz2 [ 79.742919][ T6224] netlink: 'syz.4.83': attribute type 10 has an invalid length. [ 79.811132][ T6224] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 80.591337][ T6265] gretap0: entered promiscuous mode [ 80.600017][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.97'. [ 80.643304][ T6265] gretap0: left promiscuous mode [ 80.767683][ T6274] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.896992][ T6278] h: entered promiscuous mode [ 80.904390][ T10] IPVS: starting estimator thread 0... [ 80.918197][ T6271] syzkaller0: entered promiscuous mode [ 80.932428][ T6284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.103'. [ 80.943671][ T6271] syzkaller0: entered allmulticast mode [ 80.964556][ T6284] sctp: [Deprecated]: syz.1.103 (pid 6284) Use of int in max_burst socket option. [ 80.964556][ T6284] Use struct sctp_assoc_value instead [ 81.047921][ T6285] IPVS: using max 29 ests per chain, 69600 per kthread [ 81.364064][ T6302] macvlan0: entered promiscuous mode [ 81.384623][ T6304] netlink: 'syz.0.109': attribute type 5 has an invalid length. [ 81.454622][ T897] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.483244][ T897] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.499291][ T897] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.585383][ T897] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.781135][ T6327] netlink: 'syz.1.117': attribute type 1 has an invalid length. [ 81.859864][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.118'. [ 81.955679][ T6336] netlink: 'syz.2.119': attribute type 1 has an invalid length. [ 81.998420][ T6336] netlink: 'syz.2.119': attribute type 3 has an invalid length. [ 82.026037][ T6336] netlink: 'syz.2.119': attribute type 7 has an invalid length. [ 82.037530][ T6336] netlink: 'syz.2.119': attribute type 8 has an invalid length. [ 82.060820][ T6336] netlink: 184 bytes leftover after parsing attributes in process `syz.2.119'. [ 82.104161][ T6336] NCSI netlink: No device for ifindex 131092 [ 82.279221][ T6345] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 82.321515][ T6345] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 82.370729][ T6349] Driver unsupported XDP return value 0 on prog (id 26) dev N/A, expect packet loss! [ 82.420780][ T6343] xt_hashlimit: overflow, rate too high: 0 [ 82.660135][ T6367] FAULT_INJECTION: forcing a failure. [ 82.660135][ T6367] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 82.682436][ T6367] CPU: 0 UID: 0 PID: 6367 Comm: syz.0.128 Not tainted syzkaller #0 PREEMPT(full) [ 82.682463][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 82.682480][ T6367] Call Trace: [ 82.682487][ T6367] [ 82.682494][ T6367] dump_stack_lvl+0xe8/0x150 [ 82.682524][ T6367] should_fail_ex+0x412/0x560 [ 82.682554][ T6367] _copy_from_user+0x2d/0xb0 [ 82.682575][ T6367] ___sys_recvmsg+0x175/0x590 [ 82.682611][ T6367] ? __pfx____sys_recvmsg+0x10/0x10 [ 82.682648][ T6367] ? __fget_files+0x3a0/0x420 [ 82.682682][ T6367] do_recvmmsg+0x334/0x800 [ 82.682711][ T6367] ? __pfx_do_recvmmsg+0x10/0x10 [ 82.682743][ T6367] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.682780][ T6367] __x64_sys_recvmmsg+0x198/0x250 [ 82.682805][ T6367] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 82.682838][ T6367] do_syscall_64+0x14d/0xf80 [ 82.682854][ T6367] ? trace_irq_disable+0x3b/0x150 [ 82.682867][ T6367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.682884][ T6367] ? clear_bhb_loop+0x40/0x90 [ 82.682904][ T6367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.682922][ T6367] RIP: 0033:0x7f636419c799 [ 82.682939][ T6367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.682953][ T6367] RSP: 002b:00007f63623f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 82.682972][ T6367] RAX: ffffffffffffffda RBX: 00007f6364415fa0 RCX: 00007f636419c799 [ 82.682983][ T6367] RDX: 0000000000000002 RSI: 0000200000006400 RDI: 0000000000000004 [ 82.682992][ T6367] RBP: 00007f63623f6090 R08: 0000000000000000 R09: 0000000000000000 [ 82.683001][ T6367] R10: 0000000000014023 R11: 0000000000000246 R12: 0000000000000001 [ 82.683011][ T6367] R13: 00007f6364416038 R14: 00007f6364415fa0 R15: 00007ffdad02fc28 [ 82.683039][ T6367] [ 82.960722][ T6371] xt_l2tp: v2 sid > 0xffff: 1114112 [ 83.059917][ T6376] geneve2: entered promiscuous mode [ 83.065166][ T6376] geneve2: entered allmulticast mode [ 83.075356][ T81] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 83.085870][ T81] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 83.100351][ T81] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 83.101630][ T6375] netlink: zone id is out of range [ 83.111132][ T81] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 83.121741][ T6375] netlink: zone id is out of range [ 83.155098][ T6375] netlink: zone id is out of range [ 83.171921][ T6375] netlink: zone id is out of range [ 83.190459][ T6375] netlink: zone id is out of range [ 83.195868][ T6375] netlink: zone id is out of range [ 83.201982][ T6375] netlink: zone id is out of range [ 83.211594][ T6375] netlink: zone id is out of range [ 83.226958][ T6375] netlink: zone id is out of range [ 83.232407][ T6375] netlink: zone id is out of range [ 83.267472][ T6386] netlink: 'syz.4.135': attribute type 1 has an invalid length. [ 83.693995][ T5899] IPVS: starting estimator thread 0... [ 83.761918][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.140'. [ 83.799258][ T6414] IPVS: using max 35 ests per chain, 84000 per kthread [ 83.954240][ T6429] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.145'. [ 84.165664][ T6445] validate_nla: 5 callbacks suppressed [ 84.165683][ T6445] netlink: 'syz.4.147': attribute type 1 has an invalid length. [ 84.173780][ T6441] xt_CT: No such helper "pptp" [ 84.239808][ T6448] netlink: 52 bytes leftover after parsing attributes in process `syz.1.150'. [ 84.366314][ T6451] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 84.421159][ T6451] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 84.432198][ T6456] netlink: 'syz.4.153': attribute type 63 has an invalid length. [ 84.498891][ T6459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 84.635712][ T6459] hsr_slave_0 (unregistering): left promiscuous mode [ 84.988723][ T6479] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.159'. [ 85.178063][ T6490] netlink: 'syz.3.162': attribute type 11 has an invalid length. [ 85.198676][ T6490] netlink: 64 bytes leftover after parsing attributes in process `syz.3.162'. [ 85.333753][ T6498] Bluetooth: MGMT ver 1.23 [ 85.339178][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.165'. [ 85.804499][ T6529] netlink: 'syz.1.173': attribute type 7 has an invalid length. [ 85.839913][ T5899] IPVS: starting estimator thread 0... [ 85.936985][ T6531] IPVS: using max 28 ests per chain, 67200 per kthread [ 86.022337][ T6538] netlink: 'syz.1.174': attribute type 1 has an invalid length. [ 86.079929][ T6538] bond1: entered promiscuous mode [ 86.085542][ T6538] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.105431][ T6540] syzkaller0: entered promiscuous mode [ 86.111474][ T6540] syzkaller0: entered allmulticast mode [ 86.222205][ T6538] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.267104][ T6538] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 86.345413][ T6538] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 86.380345][ T6538] bond1: (slave vcan1): making interface the new active one [ 86.384194][ T6553] netlink: 'syz.2.176': attribute type 9 has an invalid length. [ 86.391856][ T6538] vcan1: entered promiscuous mode [ 86.409383][ T6553] netlink: 'syz.2.176': attribute type 11 has an invalid length. [ 86.425362][ T6538] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 86.443373][ T6553] netlink: 'syz.2.176': attribute type 12 has an invalid length. [ 86.470735][ T6553] netlink: 193092 bytes leftover after parsing attributes in process `syz.2.176'. [ 86.500966][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 86.745694][ T6573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.182'. [ 86.810318][ T6575] gretap1: entered promiscuous mode [ 86.815568][ T6575] gretap1: entered allmulticast mode [ 86.822148][ T1208] cfg80211: failed to load regulatory.db [ 87.653008][ T6636] netlink: 'syz.3.201': attribute type 16 has an invalid length. [ 87.674869][ T6636] netlink: 'syz.3.201': attribute type 3 has an invalid length. [ 87.814591][ T6645] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.838026][ T6645] bridge_slave_1: left allmulticast mode [ 87.864890][ T6645] bridge_slave_1: left promiscuous mode [ 87.881881][ T6645] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.926859][ T6645] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 88.446917][ T6678] net_ratelimit: 185 callbacks suppressed [ 88.446935][ T6678] IPv6: addrconf: prefix option has invalid lifetime [ 88.621458][ T6695] IPVS: Unknown mcast interface: pim6reg [ 88.660309][ T6701] Bluetooth: MGMT ver 1.23 [ 88.664799][ T6701] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 88.858155][ T6716] __nla_validate_parse: 7 callbacks suppressed [ 88.858174][ T6716] netlink: 56 bytes leftover after parsing attributes in process `syz.1.225'. [ 88.918028][ T30] audit: type=1800 audit(1774822769.551:2): pid=6709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.221" name="memory.events" dev="tmpfs" ino=272 res=0 errno=0 [ 89.221619][ T6734] netlink: 104 bytes leftover after parsing attributes in process `syz.4.228'. [ 89.239353][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.229'. [ 89.608707][ T6764] netlink: 96 bytes leftover after parsing attributes in process `syz.2.236'. [ 89.631263][ T6762] syzkaller0: entered promiscuous mode [ 89.641497][ T6760] netlink: 92 bytes leftover after parsing attributes in process `syz.3.235'. [ 89.646670][ T6762] syzkaller0: entered allmulticast mode [ 89.684449][ T6764] vlan2: entered allmulticast mode [ 89.699123][ T6764] erspan0: entered allmulticast mode [ 89.890087][ T6779] validate_nla: 2 callbacks suppressed [ 89.890106][ T6779] netlink: 'syz.2.242': attribute type 1 has an invalid length. [ 89.932890][ T6779] netlink: 224 bytes leftover after parsing attributes in process `syz.2.242'. [ 90.128158][ T6794] netlink: 224 bytes leftover after parsing attributes in process `syz.2.246'. [ 90.471713][ T6808] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.249'. [ 90.676142][ T6817] netlink: 9 bytes leftover after parsing attributes in process `syz.0.252'. [ 90.877354][ T6827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.254'. [ 90.898536][ T6830] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 90.922484][ T6826] 0·: renamed from hsr_slave_1 (while UP) [ 90.974935][ T6826] 0·: entered allmulticast mode [ 90.981799][ T6826] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 91.055120][ T6828] 1·: renamed from c0· (while UP) [ 91.086235][ T6828] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 91.435378][ T6867] ip6t_rpfilter: unknown options [ 91.553449][ T6875] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 91.583909][ T6880] nbd: must specify a device to reconfigure [ 91.750469][ T6888] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 91.790595][ T6890] tipc: Started in network mode [ 91.796204][ T6890] tipc: Node identity 86136177d151, cluster identity 4711 [ 91.804580][ T6890] tipc: Enabled bearer , priority 0 [ 91.886092][ T6890] syzkaller0: entered promiscuous mode [ 91.893465][ T6890] syzkaller0: entered allmulticast mode [ 91.901610][ T6890] tipc: Resetting bearer [ 91.916918][ T6889] tipc: Resetting bearer [ 93.187847][ T6889] tipc: Disabling bearer [ 93.242571][ T6924] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 93.302443][ T6924] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 93.348363][ T5899] tipc: Node number set to 1463968119 [ 93.398065][ T6924] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 93.419794][ T6924] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 93.433447][ T6934] netlink: 'syz.3.282': attribute type 9 has an invalid length. [ 93.460610][ T6933] netlink: 'syz.3.282': attribute type 9 has an invalid length. [ 94.071017][ T6977] tipc: Started in network mode [ 94.097567][ T6977] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 94.128231][ T6977] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 94.157796][ T6977] tipc: Enabled bearer , priority 10 [ 94.197076][ T6976] __nla_validate_parse: 8 callbacks suppressed [ 94.197096][ T6976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.294'. [ 94.385295][ T6987] netlink: 28 bytes leftover after parsing attributes in process `syz.4.296'. [ 94.465638][ T6996] pim6reg: entered allmulticast mode [ 94.792818][ T7011] netlink: 'syz.4.303': attribute type 3 has an invalid length. [ 94.849030][ T7008] netlink: 32 bytes leftover after parsing attributes in process `syz.2.302'. [ 95.000940][ T7022] netlink: 'syz.1.306': attribute type 1 has an invalid length. [ 95.017346][ T7022] netlink: 'syz.1.306': attribute type 2 has an invalid length. [ 95.276855][ T1208] tipc: Node number set to 1 [ 95.588490][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'. [ 95.620715][ T7056] openvswitch: netlink: Flow actions attr not present in new flow. [ 96.065156][ T7087] netlink: 'syz.1.320': attribute type 50 has an invalid length. [ 96.073481][ T7087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.320'. [ 96.277864][ T7101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.395687][ T7106] netlink: 'syz.3.325': attribute type 9 has an invalid length. [ 96.430334][ T7106] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.325'. [ 96.460816][ T7106] bridge_slave_1: default FDB implementation only supports local addresses [ 96.577728][ C1] af_packet: tpacket_rcv: packet too big, clamped from 9922 to 3956. macoff=92 [ 96.625922][ T7068] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20001 [ 96.650699][ T7069] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20001 [ 96.659070][ T7068] netlink: 36 bytes leftover after parsing attributes in process `syz.4.315'. [ 96.692384][ T7068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.755771][ T7122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.329'. [ 96.768251][ T7121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.330'. [ 96.784138][ T7068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.909725][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 97.162936][ T7135] pim6reg1: entered promiscuous mode [ 97.186943][ T7135] pim6reg1: entered allmulticast mode [ 97.457673][ T7150] vlan2: entered promiscuous mode [ 97.479081][ T7150] bridge0: entered promiscuous mode [ 97.769811][ T7178] 0·: renamed from hsr_slave_1 (while UP) [ 97.823459][ T7178] 0·: entered allmulticast mode [ 97.853083][ T7178] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 97.907228][ T7189] netlink: 'syz.2.346': attribute type 2 has an invalid length. [ 98.169648][ T7195] syzkaller0: entered promiscuous mode [ 98.187820][ T7202] bond0: Error: Cannot enslave bond to itself. [ 98.221493][ T7205] netlink: 'syz.3.353': attribute type 1 has an invalid length. [ 99.322147][ T7205] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 102.555681][ T7238] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 102.812038][ T7285] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 102.872657][ T7285] __nla_validate_parse: 12 callbacks suppressed [ 102.872676][ T7285] netlink: 214 bytes leftover after parsing attributes in process `syz.0.372'. [ 102.997431][ T7293] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.374'. [ 103.058374][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.374'. [ 103.239221][ T7314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.380'. [ 103.294591][ T7320] netlink: 28 bytes leftover after parsing attributes in process `syz.4.381'. [ 103.311957][ T7321] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:0 [ 103.464405][ T7330] netlink: 'syz.0.383': attribute type 29 has an invalid length. [ 103.478735][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'. [ 103.500993][ T7333] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.638470][ T7339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.388'. [ 104.126133][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.393'. [ 104.177381][ T7374] netlink: 165 bytes leftover after parsing attributes in process `syz.4.395'. [ 104.211773][ T7374] netlink: 'syz.4.395': attribute type 1 has an invalid length. [ 104.242152][ T7374] netlink: 'syz.4.395': attribute type 2 has an invalid length. [ 104.329678][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.398'. [ 105.255473][ T7441] netlink: 'syz.4.413': attribute type 26 has an invalid length. [ 105.391629][ T7446] netlink: 'syz.3.416': attribute type 2 has an invalid length. [ 105.479984][ T7449] netlink: 'syz.2.417': attribute type 1 has an invalid length. [ 105.658594][ T7449] bond2: entered promiscuous mode [ 105.664266][ T7449] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.700594][ T7454] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.733344][ T7454] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 105.774226][ T7454] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 105.830517][ T7454] bond2: (slave vcan1): making interface the new active one [ 105.856300][ T7454] vcan1: entered promiscuous mode [ 105.877562][ T7454] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 106.955416][ T7488] xt_hashlimit: max too large, truncated to 1048576 [ 107.243674][ T7501] tipc: Started in network mode [ 107.270836][ T7501] tipc: Node identity , cluster identity 4711 [ 107.305133][ T7501] tipc: Failed to obtain node identity [ 107.331387][ T7501] tipc: Enabling of bearer rejected, failed to enable media [ 107.791504][ T7523] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 108.128255][ T7538] netlink: 'syz.2.440': attribute type 1 has an invalid length. [ 108.291637][ T7544] netlink: 'syz.4.441': attribute type 1 has an invalid length. [ 108.410379][ T7542] bond3: (slave geneve2): making interface the new active one [ 108.418672][ T7542] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 108.573011][ T7548] bond1: (slave gretap1): making interface the new active one [ 108.632280][ T7548] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 108.669236][ T49] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 108.714829][ T7563] __nla_validate_parse: 11 callbacks suppressed [ 108.714857][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'. [ 108.752190][ T49] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 108.789648][ T49] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 108.839549][ T49] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 109.185338][ T7574] bond4: (slave ip6gretap1): making interface the new active one [ 109.288108][ T7574] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 110.049607][ T7618] netlink: 'syz.0.456': attribute type 21 has an invalid length. [ 110.068424][ T7610] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 110.098820][ T7618] netlink: 152 bytes leftover after parsing attributes in process `syz.0.456'. [ 110.109696][ T7610] bond1: option packets_per_slave: allowed values 0 - 65535 [ 110.194237][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.458'. [ 110.289601][ T7610] bond1 (unregistering): Released all slaves [ 110.401406][ T7616] netlink: 72 bytes leftover after parsing attributes in process `syz.1.457'. [ 110.462245][ T7616] netlink: 72 bytes leftover after parsing attributes in process `syz.1.457'. [ 110.511801][ T7628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.460'. [ 110.618470][ T7631] netlink: 'syz.2.460': attribute type 62 has an invalid length. [ 111.050921][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.462'. [ 111.133961][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.462'. [ 111.175411][ T7650] netlink: 32 bytes leftover after parsing attributes in process `syz.2.463'. [ 111.572413][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'. [ 111.813065][ T7664] gtp0: entered promiscuous mode [ 111.819119][ T7664] gtp0: entered allmulticast mode [ 112.765471][ T7682] netlink: 'syz.3.472': attribute type 39 has an invalid length. [ 114.994766][ T7701] __nla_validate_parse: 5 callbacks suppressed [ 114.994785][ T7701] netlink: 128 bytes leftover after parsing attributes in process `syz.1.479'. [ 115.013892][ T7701] netlink: 248 bytes leftover after parsing attributes in process `syz.1.479'. [ 115.024753][ T7701] netlink: 52 bytes leftover after parsing attributes in process `syz.1.479'. [ 115.098095][ T7703] block nbd0: not configured, cannot reconfigure [ 115.107141][ T7703] netlink: 112 bytes leftover after parsing attributes in process `syz.1.480'. [ 115.116799][ T7704] netlink: 112 bytes leftover after parsing attributes in process `syz.1.480'. [ 115.265500][ T7709] syzkaller1: entered promiscuous mode [ 115.274239][ T7709] syzkaller1: entered allmulticast mode [ 115.603647][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 115.613230][ T7711] netlink: 24 bytes leftover after parsing attributes in process `syz.4.483'. [ 115.622671][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 115.632581][ T7711] netlink: 24 bytes leftover after parsing attributes in process `syz.4.483'. [ 115.723661][ T7713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.484'. [ 116.649915][ T7717] netlink: 'syz.4.485': attribute type 2 has an invalid length. [ 116.662564][ T7717] netlink: 'syz.4.485': attribute type 22 has an invalid length. [ 116.680999][ T34] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.691103][ T7717] netlink: 'syz.4.485': attribute type 22 has an invalid length. [ 116.701515][ T34] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.715107][ T34] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.727533][ T34] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.821430][ T7719] ip6gre1: entered promiscuous mode [ 116.827156][ T7719] ip6gre1: entered allmulticast mode [ 117.000005][ T7725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.097942][ T7731] netlink: 'syz.4.489': attribute type 11 has an invalid length. [ 118.565837][ T7766] ieee802154 phy0 wpan0: encryption failed: -22 [ 120.115158][ T7814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.234155][ T7773] __nla_validate_parse: 6 callbacks suppressed [ 127.234178][ T7773] netlink: 60 bytes leftover after parsing attributes in process `syz.3.500'. [ 127.503815][ T7831] syzkaller0: entered promiscuous mode [ 127.532268][ T7831] syzkaller0: entered allmulticast mode [ 127.630004][ T7834] netlink: 16 bytes leftover after parsing attributes in process `syz.2.509'. [ 127.642832][ T7837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.507'. [ 127.703592][ T7838] syz.1.507: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 127.721270][ T7838] CPU: 0 UID: 0 PID: 7838 Comm: syz.1.507 Not tainted syzkaller #0 PREEMPT(full) [ 127.721293][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 127.721305][ T7838] Call Trace: [ 127.721312][ T7838] [ 127.721320][ T7838] dump_stack_lvl+0xe8/0x150 [ 127.721358][ T7838] warn_alloc+0x249/0x340 [ 127.721381][ T7838] ? stack_trace_save+0xa9/0x100 [ 127.721402][ T7838] ? __pfx_warn_alloc+0x10/0x10 [ 127.721429][ T7838] ? kasan_save_track+0x4f/0x80 [ 127.721447][ T7838] ? kasan_save_track+0x3e/0x80 [ 127.721464][ T7838] ? __kasan_kmalloc+0x93/0xb0 [ 127.721482][ T7838] ? __kmalloc_cache_noprof+0x31c/0x660 [ 127.721500][ T7838] ? xskq_create+0x56/0x170 [ 127.721518][ T7838] ? xsk_setsockopt+0x54c/0x990 [ 127.721541][ T7838] ? do_sock_setsockopt+0x17c/0x1b0 [ 127.721564][ T7838] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 127.721582][ T7838] ? do_syscall_64+0x14d/0xf80 [ 127.721605][ T7838] __vmalloc_node_range_noprof+0x132/0x1730 [ 127.721654][ T7838] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 127.721681][ T7838] ? __kasan_kmalloc+0x93/0xb0 [ 127.721706][ T7838] vmalloc_user_noprof+0xad/0xe0 [ 127.721725][ T7838] ? xskq_create+0xbf/0x170 [ 127.721744][ T7838] xskq_create+0xbf/0x170 [ 127.721765][ T7838] xsk_init_queue+0x8a/0xe0 [ 127.721810][ T7838] xsk_setsockopt+0x54c/0x990 [ 127.721839][ T7838] ? __pfx_xsk_setsockopt+0x10/0x10 [ 127.721865][ T7838] ? __pfx_aa_sk_perm+0x10/0x10 [ 127.721893][ T7838] ? aa_sock_opt_perm+0xff/0x1a0 [ 127.721922][ T7838] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 127.721941][ T7838] ? __pfx_xsk_setsockopt+0x10/0x10 [ 127.721973][ T7838] do_sock_setsockopt+0x17c/0x1b0 [ 127.721997][ T7838] __x64_sys_setsockopt+0x13d/0x1b0 [ 127.722022][ T7838] do_syscall_64+0x14d/0xf80 [ 127.722048][ T7838] ? trace_irq_disable+0x3b/0x150 [ 127.722063][ T7838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.722081][ T7838] ? clear_bhb_loop+0x40/0x90 [ 127.722102][ T7838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.722120][ T7838] RIP: 0033:0x7f6eabd9c799 [ 127.722145][ T7838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.722159][ T7838] RSP: 002b:00007f6eacbc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 127.722178][ T7838] RAX: ffffffffffffffda RBX: 00007f6eac016090 RCX: 00007f6eabd9c799 [ 127.722190][ T7838] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 127.722200][ T7838] RBP: 00007f6eabe32c99 R08: 0000000000000004 R09: 0000000000000000 [ 127.722211][ T7838] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.722221][ T7838] R13: 00007f6eac016128 R14: 00007f6eac016090 R15: 00007ffe482172e8 [ 127.722250][ T7838] [ 127.722261][ T7838] Mem-Info: [ 128.102798][ T7838] active_anon:5627 inactive_anon:0 isolated_anon:0 [ 128.102798][ T7838] active_file:2826 inactive_file:39947 isolated_file:0 [ 128.102798][ T7838] unevictable:768 dirty:66 writeback:0 [ 128.102798][ T7838] slab_reclaimable:10479 slab_unreclaimable:102521 [ 128.102798][ T7838] mapped:29169 shmem:1362 pagetables:1111 [ 128.102798][ T7838] sec_pagetables:0 bounce:0 [ 128.102798][ T7838] kernel_misc_reclaimable:0 [ 128.102798][ T7838] free:1327073 free_pcp:9444 free_cma:0 [ 128.167975][ T7838] Node 0 active_anon:22508kB inactive_anon:0kB active_file:11304kB inactive_file:159588kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116676kB dirty:260kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12152kB pagetables:4336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 128.202881][ T7838] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 128.239830][ T7838] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 128.286612][ T7838] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 128.293592][ T7838] Node 0 DMA32 free:1362404kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22508kB inactive_anon:0kB active_file:11304kB inactive_file:159588kB unevictable:1536kB writepending:260kB zspages:0kB present:3129332kB managed:2552656kB mlocked:0kB bounce:0kB free_pcp:38016kB local_pcp:20752kB free_cma:0kB [ 128.332810][ T7838] lowmem_reserve[]: 0 0 0 0 0 [ 128.339145][ T7838] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 128.372155][ T7838] lowmem_reserve[]: 0 0 0 0 0 [ 128.383428][ T7838] Node 1 Normal free:3931436kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 128.418030][ T7838] lowmem_reserve[]: 0 0 0 0 0 [ 128.422792][ T7838] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 128.440123][ T7838] Node 0 DMA32: 950*4kB (UME) 873*8kB (UME) 216*16kB (UME) 354*32kB (UME) 124*64kB (UME) 30*128kB (UME) 18*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 7*2048kB (UME) 318*4096kB (M) = 1363424kB [ 128.461478][ T7838] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 128.474582][ T7838] Node 1 Normal: 9*4kB (U) 15*8kB (UM) 19*16kB (UM) 11*32kB (UM) 10*64kB (UM) 3*128kB (UM) 2*256kB (M) 4*512kB (UM) 3*1024kB (UM) 0*2048kB 958*4096kB (M) = 3931436kB [ 128.499312][ T7838] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 128.511452][ T7838] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 128.525331][ T7838] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 128.538703][ T7838] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 128.549053][ T7838] 44131 total pagecache pages [ 128.553753][ T7838] 0 pages in swap cache [ 128.559059][ T7838] Free swap = 124996kB [ 128.563745][ T7838] Total swap = 124996kB [ 128.569887][ T7838] 2097051 pages RAM [ 128.573706][ T7838] 0 pages HighMem/MovableOnly [ 128.578879][ T7838] 427052 pages reserved [ 128.583164][ T7838] 0 pages cma reserved [ 129.464677][ T7854] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 130.400213][ T7870] netlink: 'syz.4.519': attribute type 1 has an invalid length. [ 130.460097][ T7870] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 130.578694][ T7873] netlink: 28 bytes leftover after parsing attributes in process `syz.4.519'. [ 130.668854][ T7873] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.678490][ T59] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 130.877662][ T1336] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 131.079454][ T7890] netlink: 156 bytes leftover after parsing attributes in process `syz.4.524'. [ 131.251066][ T7897] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20002 [ 131.623425][ T7903] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.528'. [ 131.726304][ T7903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.528'. [ 132.311420][ T7918] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.323055][ T7918] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 132.856878][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.865345][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.906028][ T7935] netlink: 'syz.3.536': attribute type 11 has an invalid length. [ 132.914833][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.536'. [ 132.943732][ T59] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.954801][ T7935] netlink: 'syz.3.536': attribute type 11 has an invalid length. [ 132.962684][ T59] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.973233][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.536'. [ 132.984679][ T59] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.994380][ T59] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.113541][ T7937] netlink: 132 bytes leftover after parsing attributes in process `syz.3.537'. [ 133.350393][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.539'. [ 133.481574][ T7944] netlink: 'syz.3.540': attribute type 15 has an invalid length. [ 134.435775][ T7918] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.456271][ T7918] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 134.501896][ T7949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.541'. [ 135.337661][ T7961] syzkaller0: entered promiscuous mode [ 135.343299][ T7961] syzkaller0: entered allmulticast mode [ 136.811250][ T7989] netlink: 'syz.0.551': attribute type 4 has an invalid length. [ 136.848651][ T7990] netlink: 'syz.0.551': attribute type 4 has an invalid length. [ 137.026283][ T7994] netlink: 'syz.0.552': attribute type 13 has an invalid length. [ 137.302670][ T7996] netlink: 104 bytes leftover after parsing attributes in process `syz.1.553'. [ 137.615662][ T7918] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.634303][ T8000] netlink: 'syz.0.555': attribute type 9 has an invalid length. [ 137.642810][ T8000] netlink: 'syz.0.555': attribute type 6 has an invalid length. [ 137.652414][ T7918] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 138.026082][ T8002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.556'. [ 138.049786][ T8002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.556'. [ 138.077229][ T8002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.556'. [ 138.096665][ T8002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.556'. [ 138.279255][ T8011] netlink: 'syz.1.560': attribute type 21 has an invalid length. [ 138.287850][ T8011] netlink: 'syz.1.560': attribute type 22 has an invalid length. [ 138.296110][ T8011] netlink: 'syz.1.560': attribute type 23 has an invalid length. [ 138.304453][ T8011] netlink: 'syz.1.560': attribute type 25 has an invalid length. [ 138.312587][ T8011] netlink: 96 bytes leftover after parsing attributes in process `syz.1.560'. [ 138.342789][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'. [ 138.820975][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 138.831232][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'. [ 139.582982][ T8042] bond2: option resend_igmp: invalid value (32767) [ 139.589971][ T8042] bond2: option resend_igmp: allowed values 0 - 255 [ 139.609074][ T8042] bond2 (unregistering): Released all slaves [ 139.700096][ T7918] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.710989][ T7918] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 140.786754][ T8051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.817181][ T8052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.069405][ T8058] xt_hashlimit: overflow, rate too high: 0 [ 141.284968][ T8068] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 141.335188][ T8068] bond1 (unregistering): Released all slaves [ 142.524310][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'. [ 142.558103][ T59] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 142.567859][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'. [ 142.582124][ T59] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 142.606211][ T59] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 142.621326][ T59] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 142.644970][ T59] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 142.657980][ T59] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 142.699127][ T8087] syzkaller0: entered promiscuous mode [ 142.705439][ T8087] syzkaller0: entered allmulticast mode [ 142.713332][ T59] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 142.730753][ T59] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 142.870362][ T8091] xt_policy: neither incoming nor outgoing policy selected [ 143.536119][ T8109] __nla_validate_parse: 1 callbacks suppressed [ 143.536137][ T8109] netlink: 11 bytes leftover after parsing attributes in process `syz.2.583'. [ 143.562954][ T8109] netlink: 9 bytes leftover after parsing attributes in process `syz.2.583'. [ 143.741466][ T8116] Cannot find map_set index 65533 as target [ 144.056926][ T8123] netlink: 'syz.2.589': attribute type 10 has an invalid length. [ 144.065324][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 144.075103][ T8123] netlink: 396 bytes leftover after parsing attributes in process `syz.2.589'. [ 144.093556][ T8125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.590'. [ 144.502310][ T8136] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 145.212787][ T8161] netlink: 'syz.3.596': attribute type 30 has an invalid length. [ 149.148538][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.593'. [ 149.494383][ T8191] netlink: 'syz.1.600': attribute type 12 has an invalid length. [ 149.515753][ T8191] netlink: 132 bytes leftover after parsing attributes in process `syz.1.600'. [ 149.562246][ T8191] netlink: 72 bytes leftover after parsing attributes in process `syz.1.600'. [ 149.593558][ T8191] netlink: 72 bytes leftover after parsing attributes in process `syz.1.600'. [ 150.154893][ T8207] xt_connbytes: Forcing CT accounting to be enabled [ 150.407772][ T8217] netlink: 24 bytes leftover after parsing attributes in process `syz.1.606'. [ 150.774106][ T8227] xt_socket: unknown flags 0xe4 [ 150.794107][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.610'. [ 150.847380][ T8233] netlink: 'syz.1.610': attribute type 1 has an invalid length. [ 151.037589][ T8233] netlink: 28 bytes leftover after parsing attributes in process `syz.1.610'. [ 151.734776][ T8253] netlink: 'syz.4.616': attribute type 2 has an invalid length. [ 151.754903][ T8255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.143483][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'. [ 152.682774][ T8275] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20002 [ 156.262429][ T8377] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 156.372192][ T8379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.520013][ T8383] ip6t_srh: unknown srh match flags 5F28 [ 157.041182][ T8407] netlink: 2 bytes leftover after parsing attributes in process `syz.1.648'. [ 157.088450][ T8396] netlink: 'syz.3.647': attribute type 4 has an invalid length. [ 157.149833][ T8403] netlink: 'syz.3.647': attribute type 4 has an invalid length. [ 157.695222][ T8420] netlink: 'syz.4.653': attribute type 21 has an invalid length. [ 157.841489][ T8427] netlink: 'syz.0.655': attribute type 21 has an invalid length. [ 157.869813][ T8427] netlink: 128 bytes leftover after parsing attributes in process `syz.0.655'. [ 157.983692][ T8430] netlink: 'syz.1.656': attribute type 1 has an invalid length. [ 157.995513][ T8427] netlink: 'syz.0.655': attribute type 5 has an invalid length. [ 158.022530][ T8427] netlink: 3 bytes leftover after parsing attributes in process `syz.0.655'. [ 158.144564][ T8435] netlink: 68 bytes leftover after parsing attributes in process `syz.3.657'. [ 158.632968][ T8449] netlink: 36 bytes leftover after parsing attributes in process `syz.0.660'. [ 158.780393][ T8456] netlink: 20 bytes leftover after parsing attributes in process `syz.2.663'. [ 160.214204][ T8450] netlink: 80 bytes leftover after parsing attributes in process `syz.3.661'. [ 162.486389][ C0] sched: DL replenish lagged too much [ 192.459019][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 192.511766][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 192.592547][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 192.613473][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 196.653636][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.673061][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.386409][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.401082][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 288.346040][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 308.546382][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 308.553366][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8467/1:b..l [ 308.561618][ C1] rcu: (detected by 1, t=10503 jiffies, g=20101, q=163173 ncpus=2) [ 308.569641][ C1] task:syz.4.662 state:R running task stack:28600 pid:8467 tgid:8452 ppid:5828 task_flags:0x400040 flags:0x00080000 [ 308.584116][ C1] Call Trace: [ 308.587417][ C1] [ 308.590363][ C1] __schedule+0x15dd/0x52d0 [ 308.594911][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 308.599887][ C1] ? __pfx___schedule+0x10/0x10 [ 308.604768][ C1] preempt_schedule_irq+0x4d/0xa0 [ 308.609805][ C1] irqentry_exit+0x599/0x620 [ 308.614407][ C1] ? trace_irq_disable+0x3b/0x150 [ 308.619447][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 308.625437][ C1] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 308.630739][ C1] Code: e9 30 ff ff ff e8 45 85 0d 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 c1 d2 7a 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d fe 84 73 [ 308.650354][ C1] RSP: 0018:ffffc9001c1676b8 EFLAGS: 00000286 [ 308.656444][ C1] RAX: f9c6eb00e7e95100 RBX: 0000000000000246 RCX: 0000000000000046 [ 308.664426][ C1] RDX: 000000000973479e RSI: ffffffff8e16a5c2 RDI: ffffffff8c27cb00 [ 308.672424][ C1] RBP: 0000000000000000 R08: ffffffff81767e95 R09: ffffffff8e75e620 [ 308.680413][ C1] R10: ffffc9001c167818 R11: ffffffff81b0cfd0 R12: 0000000000000002 [ 308.688404][ C1] R13: ffffffff8e75e620 R14: 0000000000000000 R15: 0000000000000000 [ 308.696395][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 308.702567][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 308.707711][ C1] ? __slab_free+0x263/0x2b0 [ 308.712315][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 308.717444][ C1] unwind_next_frame+0xc2/0x23c0 [ 308.722397][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 308.727525][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 308.732661][ C1] ? __free_frozen_pages+0xc2b/0xdb0 [ 308.737959][ C1] ? __slab_free+0x263/0x2b0 [ 308.742562][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 308.748725][ C1] arch_stack_walk+0x11b/0x150 [ 308.753515][ C1] ? __slab_free+0x263/0x2b0 [ 308.758122][ C1] stack_trace_save+0xa9/0x100 [ 308.762899][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 308.768298][ C1] save_stack+0x122/0x230 [ 308.772651][ C1] ? __pfx_save_stack+0x10/0x10 [ 308.777774][ C1] ? __free_frozen_pages+0xc2b/0xdb0 [ 308.783071][ C1] ? __slab_free+0x263/0x2b0 [ 308.787685][ C1] ? page_ext_put+0x97/0xc0 [ 308.792203][ C1] __reset_page_owner+0x71/0x1f0 [ 308.797156][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 308.802286][ C1] __slab_free+0x263/0x2b0 [ 308.806719][ C1] ? qlist_free_all+0x8c/0x100 [ 308.811496][ C1] qlist_free_all+0x97/0x100 [ 308.816102][ C1] kasan_quarantine_reduce+0x148/0x160 [ 308.821573][ C1] __kasan_kmalloc+0x22/0xb0 [ 308.826178][ C1] __kmalloc_noprof+0x35c/0x760 [ 308.831040][ C1] ? security_sk_alloc+0x52/0x360 [ 308.836074][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 308.841113][ C1] security_sk_alloc+0x52/0x360 [ 308.845975][ C1] sk_prot_alloc+0x101/0x210 [ 308.850571][ C1] ? sk_alloc+0x27/0x390 [ 308.854826][ C1] sk_alloc+0x3a/0x390 [ 308.858905][ C1] __netlink_create+0x65/0x260 [ 308.863689][ C1] ? __pfx_genl_release+0x10/0x10 [ 308.868721][ C1] netlink_create+0x3ca/0x590 [ 308.873498][ C1] ? __pfx_genl_unbind+0x10/0x10 [ 308.878444][ C1] ? __pfx_genl_bind+0x10/0x10 [ 308.883232][ C1] __sock_create+0x4b2/0x9d0 [ 308.887852][ C1] __sys_socket+0xd6/0x1b0 [ 308.892289][ C1] __x64_sys_socket+0x7a/0x90 [ 308.896988][ C1] do_syscall_64+0x14d/0xf80 [ 308.901590][ C1] ? trace_irq_disable+0x3b/0x150 [ 308.906627][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.912708][ C1] ? clear_bhb_loop+0x40/0x90 [ 308.917399][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.923386][ C1] RIP: 0033:0x7f4bbe59c799 [ 308.927809][ C1] RSP: 002b:00007f4bbbff2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 308.936234][ C1] RAX: ffffffffffffffda RBX: 00007f4bbe816360 RCX: 00007f4bbe59c799 [ 308.944230][ C1] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 308.952221][ C1] RBP: 00007f4bbe632c99 R08: 0000000000000000 R09: 0000000000000000 [ 308.960559][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.968546][ C1] R13: 00007f4bbe8163f8 R14: 00007f4bbe816360 R15: 00007ffd4888a728 [ 308.976813][ C1] [ 317.416823][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.430408][ T1299] ieee802154 phy1 wpan1: encryption failed: -22