last executing test programs: 5m15.35175711s ago: executing program 4 (id=2247): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r3, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) 5m15.160015566s ago: executing program 2 (id=2250): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000005e43bb387ffa6532000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}, 0x11}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5m15.099322234s ago: executing program 4 (id=2251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x4040000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x22d6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}]}, 0x3c}}, 0x0) 5m15.092066253s ago: executing program 2 (id=2253): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x85}]}}}]}, 0x3c}}, 0x40800) 5m15.021073383s ago: executing program 4 (id=2255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e80), r4) sendmsg$NFC_CMD_DISABLE_SE(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8e054) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x150, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x120, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xd4, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xfffffffffffffd75, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xffffffc0, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7fffffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5m14.85933113s ago: executing program 2 (id=2256): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001d00070c000000000000000007000000", @ANYRES64=r0, @ANYBLOB="0c000200"], 0x28}}, 0x48000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0xd7a18000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r2, 0x80001000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@link_local, @remote, @void, {@ipv4={0x800, @tipc={{0x7, 0x4, 0x1, 0x4, 0x60, 0x65, 0x0, 0x15, 0x6, 0x0, @local, @loopback, {[@timestamp={0x44, 0x8, 0xa1, 0x0, 0xc, [0x9]}]}}, @name_distributor={{0x44, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x4, 0x0, 0x1, 0x4, 0x2, 0x1, 0x4e23, 0x4e24, 0x1, 0x2}, [{0x10000, 0xffffffff, 0x80000000, 0x7fffffff, 0xfffffff9, 0x5524, 0x0, 0xffffffb}]}}}}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 5m14.833204045s ago: executing program 4 (id=2257): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x30, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x3c, 0x0, @empty, @remote}}}}}}}, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x30, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x3c, 0x0, @empty, @remote}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006d0001000000000000000000003c0000", @ANYRES32=r0, @ANYBLOB="000000000000000018003480140035"], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}}, 0x4000040) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) r6 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r5, &(0x7f0000000380), &(0x7f00000003c0)=@tcp=r6, 0x3}, 0x20) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) (async) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000180)={r9, 0x200}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000180)={r9, 0x200}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000000)={r9, 0x1}, 0x8) 5m14.767767469s ago: executing program 2 (id=2259): syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a14a1d8c6900"}}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r4}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x108, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f09df33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000040000000000ac1414bb000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a14a1d8c6900"}}}}}}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r4}, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x108, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f09df33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000040000000000ac1414bb000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) (async) 5m14.679231478s ago: executing program 2 (id=2260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x4, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000600)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000640)=0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd00028008000340000001", @ANYRES8=r2], 0xe4}, 0x1, 0x0, 0x0, 0x40004}, 0x20050800) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000ac0)={[{0x2d, 'cpuacct'}, {0x2d, 'hugetlb'}, {0x2b, 'blkio'}, {0x2d, 'net_prio'}, {0x2b, 'cpu'}]}, 0x28) socket$netlink(0x10, 0x3, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@initdev, @in6=@dev}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000340)=0xe8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x400}, 0x1c) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r6}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r7, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r8, 0x894c, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r9, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r10}, 0x10) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r11}, 0x8) r13 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r13, 0x11, 0x0, 0x0, @void, @value=r12}, 0x20) recvmsg$unix(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r14, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 5m14.604240965s ago: executing program 4 (id=2261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 5m14.368012808s ago: executing program 2 (id=2264): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x60, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001efffffffffffffffe7f00000700000037b6751694ea199824825a82bc9be2c3a481c2dfbe88b11af5aa62abfe8d84", @ANYRES32, @ANYRES8=r0], 0x30}}, 0x8800) 5m14.061331867s ago: executing program 32 (id=2264): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x60, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001efffffffffffffffe7f00000700000037b6751694ea199824825a82bc9be2c3a481c2dfbe88b11af5aa62abfe8d84", @ANYRES32, @ANYRES8=r0], 0x30}}, 0x8800) 5m13.773282242s ago: executing program 4 (id=2269): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2d, 'blkio'}, {0x2b, 'rdma'}, {0x2d, 'pids'}, {0x2d, 'perf_event'}, {0x2d, 'rdma'}]}, 0x25) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, 0x54) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 5m13.772947179s ago: executing program 33 (id=2269): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2d, 'blkio'}, {0x2b, 'rdma'}, {0x2d, 'pids'}, {0x2d, 'perf_event'}, {0x2d, 'rdma'}]}, 0x25) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, 0x54) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m45.387817366s ago: executing program 5 (id=5526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r5 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r5, 0x0, 0x0) ioctl$FITHAW(r2, 0xc0045878) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20050000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0x0, 0xff, 0xff, 0xff000000]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1m45.083783319s ago: executing program 5 (id=5533): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) (async) socketpair(0x1a, 0x80000, 0x1, &(0x7f0000000000)) 1m44.959746976s ago: executing program 5 (id=5536): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="7c010000190001000000000000000000fe880000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000f000000000000000100000000000000c4000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000010000000000000000000000000000e0000002000000000000000000000000000000006c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc00000000000000000000000000000000000000040004"], 0x17c}}, 0x0) 1m44.853125145s ago: executing program 5 (id=5539): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffde7, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) socket(0x10, 0x803, 0x0) 1m44.657515985s ago: executing program 5 (id=5543): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x2}}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @func={0xa}]}}, 0x0, 0x4a}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0xff85}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, 0x0) 1m44.203584243s ago: executing program 5 (id=5552): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f00000000c0), &(0x7f0000000280)=@udp=r1}, 0x20) ppoll(&(0x7f00000000c0)=[{r1, 0x9004}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f00000002c0)=0xfa0, 0xfee3) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000180)=""/8, &(0x7f0000000240)=0xffffffffffffff61) (async) close(r2) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e21, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, 0x0, 0x1ff}, &(0x7f0000000480)=0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000004c0)={r5, @in6={{0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc0000000}}}, &(0x7f0000000580)=0x84) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg(r6, &(0x7f000000a2c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x20000001) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r8, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x40) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x5460, 0x96b5376b91506d81) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r10, 0x7ca8e000) (async, rerun: 32) ioctl$TUNGETVNETLE(r10, 0x800454dd, &(0x7f0000000200)) (async, rerun: 32) setsockopt$inet_int(r9, 0x0, 0xb, &(0x7f0000000040)=0x401, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) sendmsg$inet6(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="bd", 0x1}], 0x1}, 0x4040845) (async) getsockname(r9, &(0x7f0000000340)=@x25={0x9, @remote}, &(0x7f0000000280)=0x80) 1m43.889260727s ago: executing program 34 (id=5552): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f00000000c0), &(0x7f0000000280)=@udp=r1}, 0x20) ppoll(&(0x7f00000000c0)=[{r1, 0x9004}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f00000002c0)=0xfa0, 0xfee3) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000180)=""/8, &(0x7f0000000240)=0xffffffffffffff61) (async) close(r2) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e21, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, 0x0, 0x1ff}, &(0x7f0000000480)=0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000004c0)={r5, @in6={{0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc0000000}}}, &(0x7f0000000580)=0x84) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg(r6, &(0x7f000000a2c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x20000001) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r8, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x40) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x5460, 0x96b5376b91506d81) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r10, 0x7ca8e000) (async, rerun: 32) ioctl$TUNGETVNETLE(r10, 0x800454dd, &(0x7f0000000200)) (async, rerun: 32) setsockopt$inet_int(r9, 0x0, 0xb, &(0x7f0000000040)=0x401, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) sendmsg$inet6(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="bd", 0x1}], 0x1}, 0x4040845) (async) getsockname(r9, &(0x7f0000000340)=@x25={0x9, @remote}, &(0x7f0000000280)=0x80) 2.271848564s ago: executing program 6 (id=6380): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write(r0, &(0x7f0000000040)="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", 0x1000) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001040)={0x0, 0xa}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000010c0)={r2, 0x5, 0x5, 0x2f1f}, &(0x7f0000001100)=0x10) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001140)={r1, 0xfca5, 0xffffffffffffdf7c}) setsockopt$TIPC_MCAST_BROADCAST(r4, 0x10f, 0x85) (async, rerun: 32) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001180)={{0x0, 0x10, 0xdb, 0x2197, 0x6, 0x3, 0x5, 0x6, 0x7, 0xffffffff, 0x9, 0x4c5, 0x100, 0x3, 0x4}}) (rerun: 32) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000002180)={0x0, "939d1cc7360daa46726f0a48c9b99ed5"}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000003180)={r5, "41b648cdb6b89ab9ff3b8fca38537d76"}) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000004180)={r3, 0x7, 0xc}, 0x8) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000004200), r4) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f00000042c0)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004280)={&(0x7f0000004240)={0x2c, r6, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'nicvf0\x00'}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000004300)) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000004340)=0xcd) (async, rerun: 64) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000004380)=0x5) (async, rerun: 64) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000043c0), 0x40, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r7, 0x40047211, &(0x7f0000004400)=0x4) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000004440), &(0x7f00000044c0)=0x68) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000004500)={r2}, 0x8) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004580), r4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000045c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000046c0)={&(0x7f0000004540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004680)={&(0x7f0000004600)={0x64, r9, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9, 0x4b}}}}, [@crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x29, 0x115, "bd81c8d064ea2dcbc7864bfdedd6c742baaef27b61613f78c0b25f3606aad0781143fe1ef6"}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PBSS={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000004700)={r3, @in6={{0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}, 0x0, 0xc000, 0x7ff, 0xfff, 0x24, 0x5, 0x8}, 0x9c) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r11, 0x4010942a, &(0x7f00000047c0)={0x1, 0x8}) (async, rerun: 32) recvmsg$unix(r4, &(0x7f0000005b00)={&(0x7f0000004800), 0x6e, &(0x7f00000059c0)=[{&(0x7f0000004880)=""/4096, 0x1000}, {&(0x7f0000005880)=""/40, 0x28}, {&(0x7f00000058c0)=""/16, 0x10}, {&(0x7f0000005900)=""/133, 0x85}], 0x4, &(0x7f0000005a00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}, 0x40000040) (rerun: 32) setsockopt$MRT_ADD_VIF(r12, 0x0, 0xca, &(0x7f0000005b40)={0x0, 0x0, 0x5, 0x80, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x30}, @local}, 0x10) 2.157500285s ago: executing program 6 (id=6381): sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}]}, 0x1c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="911007000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bond_slave_1\x00', 0x1}, 0x18) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0xf, 0x1c, 0x66, 0x0, 0x80, 0x2, 0x0, @remote, @local}, "156b3485e766b1df"}}}}, 0x0) socket$kcm(0x29, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2040000}, 0x40) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000080)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000005700)={'wlan1\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="540100001800010000000000000000001d0100001500030000000000000000008ca5be073cff296e020000001e01060001", @ANYRESOCT], 0x154}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f00000059c0)={0x0, 0x0, &(0x7f0000005980)={&(0x7f0000000140)={0x34, r8, 0x105, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8, 0x18}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20008804) 1.575979072s ago: executing program 7 (id=6390): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000000d1401d2d9cd7000040000000800010000000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005000300000000000c0001800800014080ffffff05001400fa00000005000500020000000500010006"], 0x68}}, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000600012800b0001006772657461700000500002800800140006000000050016000200000006000e0000000000060018000400000004001200050013"], 0x90}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 1.395815592s ago: executing program 6 (id=6394): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) r4 = socket(0xf, 0x3, 0x1) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x63a2fadd1031498e, 0xe, 0x40, @vifc_lcl_addr=@broadcast, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, 0xe, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x140080c0}, 0x4004050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x4, 0x1, 0x9, 0x0, 0x0, 0x1, 0x8}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000900)={0x69c, r6, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x294, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x8a, 0xb, "f88973e1e5b696f3956d49a011569becc950a82a3c25dec35d0b9d66032647732bae790a27543fd065e62d1e2ab63bb169d353a8c7b5e7a3daef99424397b1e2cf8e4d6f2ce6bbebefac9e0030744fc62675e4cfe58b7aa91ce9fb472500e10d3a8e9ef9240be2b4ccd9aa0fdcfa2cadd97faa11c7581984e7ef8d52eb652b7280f04b94d1dd"}, @NL80211_NAN_FUNC_SRF={0x17c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x64, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x5}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x84, 0xd, 0x0, 0x1, [{0x7e, 0x0, "a210807d3953fb2446136d9a01705dec39ff5b96e8ee1a722376500863b338537e62dc642d60c9becbb59186c85a949c39d80645147f9209c6c5e75bbdfa72b35ae0adaa76dc3776ffcb3939fd9c1eb68f7259e44b9768389260f4f08e807d0685c9474a3a6081b12a4c064a72663227b881a16e5073344ef8f8"}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x3ec, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "4904fff1e34d"}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x3cc, 0xe, 0x0, 0x1, [{0xa9, 0x0, "56e8eb5401f0879d7590233af085203e810924730e603fc830d32d32bb2cf5f1ea4e7f3e40ff2d9bc860a01a47fa1dba116dcd1d94ed3e94db21f3ddd7356c4d12525299a8db3a652b0ae333149c2013e189dfee8c00dca110a546aed194fb4ecdd3bb8ca7c722fa32e7deee7a7dbf2e5e8dfb26c4e3942b9c16a8c5569b7a61f976e98c2e37c018036ee356e0640cf90f5156d157e48879ebad121b3d1e56a00c17f14daa"}, {0x91, 0x0, "744f044f58fd04680cc8fb4582e87416db9606de0042cd390c512213b3c8b3142bacf95018d93d339e35d680c5fc34e6904907c4b05645dd9df8cfed3eefc9b028004f82690358de1f5064b67e9da714c12be211a5c3c123aede46a7675395a23a229aa7a708466caf559f5c50b2312a572bc30e3463a8b9b8531a1c039b8f250bb28f678b9f86f31647d2f1fc"}, {0xf, 0x0, "ea82c9bac911d1bab8dc4e"}, {0xf4, 0x0, "e29fc9f72dc9ed3ffafddd9fdaecf040fe134cc55127781578188046fbefb9abeddbdc6fde73d0782291aeb30cffbfac2478a33d4fde21b7ef08f88fa9961ff8a62a04b1ca97d69fc6b254906d98895a6b1190c9ff54cd7ab3cc475440ef6de0be7267426c0b6cce0a79cccf5e7c731f315b3c1fac7e0b1d49797ed6e4985dee03a0e071a0ba720cacb8fca2e22537a2fd02b3cb1191b200123bae25c6f3b146da8e8c0aebe11675fe1501bd82d277eee8ab3f63760c3900fd0e2c5bd41d138c651c0f41e277b221372bf2febbcd349a178b3628854cf1799ce997b034e355a4310d809a96d0723af4896c77cfdd1e04"}, {0x4e, 0x0, "3eeb3df25d9e801d91cba15b71548bee455bd5b9a9c09b44a92d112a0b451fdf191eef2f819a5230fd27e0c51f52cecf759a8676b8e1b11a282175d8e3cdc6be5eb110784f2d7713ad19"}, {0xb8, 0x0, "aa1dfcb5a42e9dd4b19c74f72d137716031d307e7b01187f9b50cc9df68c257152df43597b906e58fa869d3f74bac03415289813962d73ffb63d6aed9df08a9aada7a4cf00dea41bed8c5eb38a7e02d9e78946a1436dd10010c57b180609fbc31d676209e49ab49ad3d80eef64312e9922dc2ec0826785dc4bf6227b3d40a943cc82d5354580f6a071b0b3196b665edc7beec8d535ebf3a513e77a2eea2f64745c2382c8fa61e5cb96c42c5c68e264c57834c842"}, {0x2b, 0x0, "f8dd6d8667d94f60698e4ff371fb4594debdadb2013415ae9d23a17c21fd553d7fccc8b8d2148b"}, {0x50, 0x0, "7f34cb7c8828eaeefa82fb8787c8b5a27a5370d725dab0dc638254bad4a683017478ff07a2b9048a70fcfbc67bd7b492f30a1304b58d5697f60ba5e0f15c2b7b59a1f26c8b90cbb043527798"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x3}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x80}]}]}, 0x69c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 1.332102396s ago: executing program 7 (id=6397): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000001540)={0xffffffffffffffff, 0x7}) 1.279991475s ago: executing program 6 (id=6398): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x6, @rand_addr=0x64010101, 0x4e21, 0x6, 'lc\x00', 0xd, 0xc, 0x77}, {@remote, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x1, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000780)={r2, 0x1, 0x6, @local}, 0x10) 1.243411901s ago: executing program 7 (id=6399): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x3, 0x101, 0xfffd, 0x4}, 0xc) listen(r1, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) write(r5, &(0x7f0000000280)="4591", 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x5}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0x6, 0x4, 0x8, {0x8, 0x0, 0x6, 0x80, 0xfff9}, {0x0, 0x2, 0x1, 0xc05, 0x77}, 0x2, 0x5, 0xffffffff}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x15, 0x2, {0x9, 0x80, 0x7, 0xecf, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xcc}}, 0x0) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r10, 0x103, 0x1, 0x0, 0x0) 1.100669539s ago: executing program 6 (id=6402): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r1, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) connect$netrom(r0, &(0x7f00000008c0)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendto$netrom(r0, 0x0, 0x55, 0x0, &(0x7f0000000240)={{0x6, @rose}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="0500ffffffff0c0000002e00000008000300", @ANYRES32, @ANYBLOB="0a00340001010101010100000800490001ac0f0006006600060800000a00"], 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x880) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0xfffffffc}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0xed000000, 0x10, &(0x7f0000000200), 0x10}, 0x80) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800c0001006d6163766c616e0018000280080001001000000004000580080003000300000008000500", @ANYRES32=r6, @ANYBLOB="c09bd096f265351a890cd0c1e534f117b10000bb9fa3bb95d2d4da3c74ec24b3edb1f7f627ec0b1858f54c6a3c24589c3fecc9c2aff4cf3b9f54342dad0579a82d9af8d70dbe34"], 0x50}}, 0x0) syz_emit_ethernet(0xdd2, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xd9c, 0x0, 0x0, @private2, @mcast2, {[@routing={0x84}], "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"}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r7, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r8 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000fc0), r2) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)={0xa4, r9, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8fdc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa40f}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x80}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffcb}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x230e}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20008800}, 0x8894) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r11, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x44, r12, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000240)={r13, 0x20, "d656c9a61490b7e8773ca55437fa234c0170c8cbe5ebdd2be9"}, &(0x7f0000000180)=0xfc86) 922.833453ms ago: executing program 0 (id=6404): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) r8 = socket(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r8, 0x89e0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r10) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@delchain={0xfe0, 0x65, 0x4, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0x9}, {0x6, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @filter_kind_options=@f_flow={{0x9}, {0x38c, 0x2, [@TCA_FLOW_EMATCHES={0x388, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x90, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x18, 0x3, 0x0, 0x0, {{0x1, 0x0, 0xb}, "1c0312edcb30a44dd2"}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x5e, 0x2, 0x100}, {0x1, 0x6, 0x1, "24a6c1e2b874"}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x574, 0x8, 0x800}, {0x0, 0x2, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x100, 0x8, 0x5d}, {0x0, 0x6}}}, @TCF_EM_CONTAINER={0x3c, 0x2, 0x0, 0x0, {{0x9, 0x0, 0x4}, "1874c91328db744531121160cb6cfdf1c08b8dc969d6042f67b8b7ed2b727b7a67b06970cac416fee2d267f97c"}}]}, @TCA_EMATCH_TREE_LIST={0x2ac, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xec, 0x1, 0x0, 0x0, {{0x9, 0x9, 0xfff8}, [@TCA_EM_IPT_MATCH_DATA={0xc6, 0x5, "e8cf364a1749071a28ca0785eee0c302cbb471cdc077dcb2f894a5e775e526f9e760735534cc2db2f63efaa19e78a4df2156dfec8803958ea589a625c7c29ec4fcadd39f222c9a953635de670f6d28b006d003be09e945b39d76f3fdbe2bc49f148181ca0471354bfd7443cf6ebad4d7354ae6e93883e6e711b15eaa604172fa01367f6e0f80698c6bbb1212b4ce20906a611a7e95d9f3cf4a8eae2cd9c02b4029d10309e523cc6745581d00d3efc4075082a901533ac675a88df99a8a72f3d88bde"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x40}]}}, @TCF_EM_IPT={0x1bc, 0x2, 0x0, 0x0, {{0x5}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x85, 0x5, "d1c29811c8071633b253c065850aabc5cf24c121fe99a69426335e89e9bc42ed8e04a152bfeb4f06435fb3e63d579312f9bc947673b910ca3d52a581c00fa126fa1d3501260866bdc7be0863edf28be3e5f1c6c17035cc0ae2f18a398d92864bcdaaf3e8acc7038bc8ddb7d9c482795d6f14e1915de1cb16ace4fd908d65e98b82"}, @TCA_EM_IPT_MATCH_DATA={0xf5, 0x5, "6226848700e9fa41e4ed4959189e695dd3dafb61113b2264a9fc8fa00fdc7d47a7040d035024bedec8bd0ea2fdaeaeebe7abf7d2dc94af5c43b5d651448cf68642afbb86dccecbc1117d34dddf6a02c87e1a37e472244940c503967c3cba2205f91885dbe159c5e99b70d3929ae9978bff59a40d34d4126a200e97c36234a270d881b6083b0b6c96e323647ec6f9d7bf3f1d293b8a3a137e8611ed9479130d4490a4294effbb24c0f6fe1dd8253a0095ccd03fce9de2fc3a3a829ec4de86896d06a321cfd45d0af26e8171c50ed89c08df070f7e16bd9269d3d189c43bea3dd8a36967eb86272b33439019e1932877e0fc"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xae, 0x1, 0x7}, {0xfffffffc, 0x1, 0xdc, 0x5, 0x4, 0x0, 0x1}}}, @TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x66}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xc5, 0x8, 0x2}, {0x1, 0x1, 0x3}}}]}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc14, 0x2, [@TCA_BPF_POLICE={0xc10, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x3, 0x4, 0xfaba, 0x2, 0x7, 0x9, 0xffffffff, 0x9, 0x6, 0xf, 0x2, 0xff, 0x7, 0x5, 0x9, 0x9, 0x8, 0x1, 0xd31e, 0xd, 0x2b, 0x1, 0x7, 0x5, 0xddf, 0x1, 0x2, 0xb, 0x4, 0xa, 0x9, 0xd, 0xfffff651, 0x81, 0x1, 0x5c, 0xfeaa, 0x6, 0x0, 0x1, 0x2, 0x1, 0x5, 0x2, 0x5, 0x4, 0x0, 0x400, 0x7, 0x5, 0x8, 0x6, 0x7, 0x10, 0x1000, 0x6, 0xfffffffc, 0x54, 0xc2, 0x5, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x7, 0x4, 0x3, 0x2, 0x7, 0x7, 0x1, 0x4, 0x6, 0x10000, 0x1, 0x5, 0x7, 0x5, 0x6, 0x10000, 0x3, 0x80000000, 0xa84e, 0x0, 0x5, 0x6c9e, 0x4, 0x80, 0xd, 0x8, 0xe, 0x4, 0x0, 0x7, 0x0, 0x5, 0x3, 0xeb17, 0xfffffff1, 0x3, 0xffff, 0xa020, 0xbb, 0x1ff, 0x3, 0x10, 0x2, 0x7ee5, 0x3, 0x5fe4, 0x401, 0x2, 0x98b, 0x1, 0x80000003, 0x4, 0x6, 0xfffffffa, 0x7, 0x7fffffff, 0x3, 0x1, 0x198b400, 0xe7, 0x2, 0xe31, 0x8, 0x2f, 0x7, 0x3e3, 0x3, 0xc, 0x3, 0xffffffff, 0x0, 0x5, 0x8, 0xfffffffc, 0x2d1000, 0xa, 0xfffffffd, 0x8, 0x7, 0x4, 0x0, 0x80000000, 0x8, 0x7, 0x6, 0x6, 0x8, 0x5, 0x6, 0x1, 0x8d76, 0x80000000, 0xe, 0x5, 0x6, 0x7, 0x0, 0x8, 0x8000, 0x0, 0x7fffffff, 0x0, 0x2, 0x6, 0x81, 0x2, 0x0, 0xc0000, 0x3, 0x2d, 0xfffffff2, 0x5, 0x8, 0x7, 0xdb23, 0x27, 0x6, 0x0, 0x7, 0x0, 0x3, 0x3e, 0xa8b7, 0x6f0f2833, 0x80000000, 0x0, 0x10001, 0x244d, 0x227b, 0x56497fb0, 0x400, 0x5, 0x3, 0x1000, 0x6, 0x2, 0x40000, 0x0, 0x7, 0x3ff, 0x3, 0x6, 0x3, 0x60b, 0x100, 0xffff, 0x1, 0x4, 0x8, 0x8000, 0x8, 0x0, 0x80, 0x1, 0xff, 0xa, 0xf5d0, 0x3, 0x8000, 0x2, 0x406, 0x401, 0x8, 0xda79, 0x7fffffff, 0x1, 0x7, 0x4, 0x4c3, 0x4, 0x10000, 0x9, 0x1, 0x6, 0x4, 0xd708a80, 0xff, 0x4, 0x37d, 0x400, 0x9, 0x7, 0x23894440, 0x9, 0xd75, 0x9, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xffffffb6, 0x1, 0x1, 0x5, 0x0, 0x2, 0x1000, 0x1000, 0x8, 0x9, 0x7, 0x8, 0xe, 0x698, 0x4, 0x2, 0x200, 0xfffffff3, 0x8, 0x9, 0x876, 0xbb97, 0x8000000, 0x81c, 0x64127ccb, 0x9, 0x3, 0x4, 0xd, 0x8, 0x8, 0xa, 0xfffffffa, 0x0, 0x2, 0x7, 0xce0, 0xceb1, 0x80, 0x1, 0xe, 0x10, 0x100, 0x9, 0x1, 0x3, 0x3ff, 0x80, 0x1, 0x1, 0x3, 0x7, 0xda96, 0x7, 0x9, 0x4, 0x5, 0x8, 0xfffffffb, 0x3, 0x1, 0xa, 0x6, 0x8246, 0xd2, 0xf9, 0x3, 0x3, 0x401, 0x2, 0x3, 0x8, 0x8c3, 0x9, 0x55d, 0x8, 0x8001, 0x9, 0x5, 0x7, 0x5b4a, 0xfffffff2, 0x2, 0x6, 0xfffffffb, 0x8, 0x7, 0x1, 0x2, 0xe, 0x0, 0x0, 0x484c, 0x9, 0x800, 0x9, 0x157, 0x4, 0x4a05, 0x1000, 0xd93d, 0xc3, 0x3, 0x6, 0x3, 0x6, 0x80000001, 0x81, 0x2, 0xc, 0xff, 0x1, 0x7, 0x8, 0x8, 0xc, 0xaaed, 0x795, 0xc5, 0x10001, 0x4, 0x5, 0x1000, 0x9, 0x3, 0x3, 0x1, 0x10000, 0x6, 0x3b910aad, 0x200, 0x3a3, 0x91, 0x7, 0xfffffffd, 0x854, 0x4, 0x4, 0x7, 0x3, 0x5, 0x9, 0x2, 0x5, 0x8, 0x7, 0x8001, 0x100, 0x0, 0x5, 0x4, 0x7, 0x7fff, 0x8, 0x3, 0x4, 0x1, 0x1, 0xfff, 0xd8a, 0x6, 0x5, 0xc72f, 0x8a46, 0xcb, 0x7, 0xff6e, 0x8000, 0xce, 0x7fff, 0x5, 0x9, 0x1, 0x821a, 0x6, 0x7, 0x9, 0xf, 0x1, 0xfff, 0xe7, 0x887, 0x0, 0x3, 0x5, 0x9, 0x56e6, 0x49, 0x8ca, 0x0, 0x4, 0x3, 0x4, 0x9, 0x4, 0x8, 0x0, 0xffff4247, 0x0, 0x1, 0x422, 0x2, 0x2, 0x28, 0x8, 0x8, 0x4fb, 0x8, 0x0, 0x6, 0x4, 0xc1, 0x7, 0x80000001, 0x9, 0x3, 0xf3, 0x2, 0x1, 0x4, 0x1, 0x8, 0x3, 0xf87, 0x3, 0x5, 0xfffffffd, 0x401, 0x4, 0x3, 0xfff, 0xffff8001, 0x2, 0xb0, 0x4, 0x4, 0x2, 0xb, 0x0, 0x0, 0x4, 0xe, 0x6, 0x4, 0x8, 0x1, 0x100, 0x8001, 0xd, 0x4, 0x0, 0xda, 0xb, 0x5, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x8, 0xff, 0x81, 0x1, 0x1, 0x5, 0x8, 0xff, 0x0, 0x5, 0x9, 0x30, 0x6, 0x0, 0x7227, 0x4, 0x2020, 0xa39, 0x3, 0x6, 0x8, 0x5, 0x5, 0x7, 0x9, 0x2, 0x35, 0x81, 0x800, 0x4, 0x2, 0x16701ef0, 0x3, 0x5, 0x3, 0x3, 0x3, 0x9, 0x4, 0x7, 0x5, 0x7, 0x5, 0x40, 0xfe, 0x46, 0x2706, 0x9, 0x1, 0x10001, 0x2, 0x481, 0x4cdb, 0x6, 0x3, 0x101, 0x6, 0x3ff, 0x3, 0x8, 0x0, 0x6, 0x2, 0x1, 0xb, 0x10000, 0x8, 0x0, 0x3, 0x4, 0x86, 0x5, 0x9, 0x4c8, 0x1ff, 0x2e, 0x3, 0x8, 0x59a, 0x980, 0xb16, 0x3, 0x9, 0x9, 0x4, 0x8001, 0x5, 0x1, 0xfa, 0x3, 0x5, 0x0, 0x7, 0x6, 0x7, 0xf8, 0xffffffff, 0x8, 0x10001, 0x100, 0x1000, 0x2, 0x1000, 0x4, 0x3, 0x8001, 0x4, 0x2, 0x7, 0xf, 0x5, 0x3ff, 0x0, 0x910e, 0x965d, 0x86e0, 0x8, 0x9, 0xff, 0x7, 0x8, 0x0, 0xfffffffa, 0x9, 0x8, 0x1e, 0x0, 0x2, 0x3, 0x3, 0x5, 0x252b, 0x80, 0x8, 0x8000, 0x6, 0x7, 0x1, 0xffff3736, 0xffffffff, 0x7fff, 0x8, 0x8, 0x10001, 0x80000000, 0x2, 0x8dc, 0x2, 0x80000000, 0x6, 0x763, 0x410, 0x6, 0x4000, 0x80000000, 0x3, 0x2, 0xad02, 0x1, 0x628aab26, 0x7, 0x8, 0x8, 0x9, 0x9, 0x3, 0x80000000, 0x929e, 0xc, 0xbf7, 0xffff1d13, 0x3, 0x9, 0x7, 0x4, 0x9, 0x80, 0xd584, 0x2f72, 0x5, 0x1, 0x7fffffff, 0x2, 0x2, 0x6e4300, 0x2, 0x3, 0x10001, 0x7fffffff, 0x4, 0x5, 0x3, 0x2, 0x1ff, 0x7, 0x1ef60d56, 0xf, 0x3, 0x3, 0x4, 0x4, 0x2, 0x5, 0x7, 0x0, 0x400, 0xb, 0x80000001, 0x7, 0x4a9, 0x9, 0xe, 0xf, 0x10000, 0xc528, 0xffff, 0x5, 0x8, 0x3, 0xc, 0xe8bb, 0x6, 0x3, 0x101, 0x9, 0x5, 0x0, 0x5a, 0x9, 0x6, 0xd, 0x2, 0xf2, 0x0, 0x9, 0x0, 0x1, 0x8, 0x1, 0x0, 0x28, 0x4, 0x4, 0x1, 0x10001, 0x4, 0x5, 0x5, 0x4, 0x1, 0x6, 0x80000001, 0x8, 0x7b4, 0x7]}]}]}}]}, 0xfe0}, 0x1, 0x0, 0x0, 0x40004}, 0x400c004) 819.201419ms ago: executing program 3 (id=6406): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43000000f45400000001"], 0x14}}, 0x0) r2 = socket(0x15, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x4884) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r6, 0x101, 0x7, &(0x7f0000000000)=0x2, 0x4) setsockopt$ax25_int(r6, 0x101, 0x1, &(0x7f0000000040)=0x2, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) poll(&(0x7f0000000040), 0x55, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) syz_extract_tcp_res(&(0x7f0000000240), 0x7ff, 0x7) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0xf}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x18, 0x2, 0x4}, {0x2, 0x0, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x80) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43000000f45400000001"], 0x14}}, 0x0) (async) socket(0x15, 0x5, 0x0) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x4884) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) setsockopt$ax25_int(r6, 0x101, 0x7, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$ax25_int(r6, 0x101, 0x1, &(0x7f0000000040)=0x2, 0x4) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) poll(&(0x7f0000000040), 0x55, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) (async) syz_extract_tcp_res(&(0x7f0000000240), 0x7ff, 0x7) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0xf}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x18, 0x2, 0x4}, {0x2, 0x0, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async) 793.172534ms ago: executing program 7 (id=6407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYRES64, @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x20000850}, 0x24000000) 703.788229ms ago: executing program 0 (id=6408): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, 0x1410, 0x1, 0x70bd2c, 0x25dfcbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r3, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28044881}, 0x44000) 684.141362ms ago: executing program 1 (id=6409): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x6, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800800010010000000080003000000000008000400"], 0x58}}, 0x0) 654.63981ms ago: executing program 7 (id=6410): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d31800000001000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xe8}, 0x94) close(r0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x84) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00'}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6801036c", @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165932900000000000000000000000000000009000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}}, 0x4008014) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000580)=ANY=[@ANYBLOB="07000000000000003c000000000000000300000000000000", @ANYRES32=r1, @ANYBLOB="000000000100"/28, @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="000000000600000000000000000000000000000000000000000000003b05fa6d94e9a78fe8bea685d989cd9e0840ee5f0df9fd8bfd404b5182097e9706ae8dfe11e314ddf79151923daacb7a868775696175673149aa71ecc72326031144e937099d884587c25416a76d669e3bfb486af627e3ed48c3ab01b5900b5688a4b7234cd30d12bffc3b2e50cf01e6"]) 535.47841ms ago: executing program 1 (id=6411): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x18000}, 0x40010) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:ld_so_cache_t:s0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xf}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x34}}, 0x4000000) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$inet(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000480)="77621e6b01d6b34c1168b9f71093d791ad0f2f42cbe694c10b71a030144cf9ccb2cb0bfb189c900ead7a2a8c4f8745e7058c4717b6463f0d6513b7b6b00756d0e62179b77ea050b54c60bfe51f29bc", 0x4f}], 0x1}, 0x4000) (async, rerun: 32) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r0) (rerun: 32) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r6, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4040800) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001880)={0xffffffffffffffff, 0x0, 0x1000, 0x77, &(0x7f0000000700)="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", &(0x7f0000001700)=""/119, 0x20a, 0x0, 0x43, 0x6f, &(0x7f0000001780)="b5066bb06617b96613abe0e259d6100fc16141a0cbf80af5b2192ae6e4aca31ffc7bf6da86285abb1364934ad8bc70b95875797271b31c6ad51571509274beb2a26472", &(0x7f0000001800)="e7eb4dd114689be581d0d40ea61ab8379b39eb344f7f095c213775af2c771cd8b18192bc19cfca7c9058cc4911ad2a7ee59a8e11ea357181193ffb2b1d2e1bc4c8d96a35a1e765cf2b007b9c22f8a6cc5a245ac4c25ba01b9b3a7ba6cfc464c2ae307801112dc09e2a889cf11817b8", 0x4, 0x0, 0x1000}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000001900)={r5, 0xf, 0xfd, 0x3}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001a00)={'syztnl0\x00', &(0x7f0000001980)={'syztnl1\x00', 0x0, 0x2f, 0xbb, 0x9, 0x0, 0x2, @mcast2, @loopback, 0x7, 0x30, 0x7, 0x5}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d00)={0xffffffffffffffff, 0xe0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001ac0)=[0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000001b00)=[{}, {}], 0x10, 0x10, &(0x7f0000001b40), &(0x7f0000001b80), 0x8, 0xc9, 0x8, 0x8, &(0x7f0000001bc0)}}, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r7, &(0x7f0000001e00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x48, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4) r10 = ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r10, 0x8004f50c, &(0x7f0000001e40)) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000001e80)={r7}) getsockopt$MISDN_TIME_STAMP(r11, 0x0, 0x1, &(0x7f0000001ec0), &(0x7f0000001f00)=0x4) (async, rerun: 64) sendmsg$AUDIT_GET(r11, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x10, 0x3e8, 0x400, 0x70bd2a, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) (async, rerun: 64) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xc5f0c58eabd3f299}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$TIPC_CMD_SET_NETID(r7, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x24, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x800}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24008010}, 0x1) accept4$inet(r11, &(0x7f0000002240)={0x2, 0x0, @local}, &(0x7f0000002280)=0x10, 0x80000) r12 = socket$caif_stream(0x25, 0x1, 0x5) ioctl$int_in(r12, 0x5421, &(0x7f00000022c0)=0x3) (async) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002340), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000002400)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x2c, r13, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040080}, 0x80) (async) sendmsg$IPVS_CMD_ZERO(r11, &(0x7f0000002640)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002600)={&(0x7f00000024c0)={0x138, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x829}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x28}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x90, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nicvf0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4040401}, 0x20000000) 532.734371ms ago: executing program 0 (id=6412): bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1b}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/uts\x00') 532.203405ms ago: executing program 3 (id=6413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000078000100005332d8f200000007000000"], 0x28}, 0x1, 0x0, 0x0, 0x44090}, 0x8040) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000180)=0xfffffd45) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x240040c0}, 0x600008c5) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="140000000005000004001000060000000c610200", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r10, &(0x7f0000000040)="f0", &(0x7f0000000080)=""/13}, 0x20) sendmsg$NFC_CMD_GET_TARGET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x9) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)="991347c388249d2e", 0x8}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r9) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r9) socket(0x23, 0xa, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="0100000000800000000007000000080001"], 0x1c}}, 0x80) 481.720625ms ago: executing program 7 (id=6414): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) listen(r0, 0x2) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000), 0x4) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000030805000000000000000000000000000c0004800800014000000000060002400000000005000300ff"], 0x30}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c00)={r2, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000001980), &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f0000001580)=[{}, {}, {}], 0x10, 0x10, &(0x7f0000001a40), &(0x7f0000001a80), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000001540)}}, 0x7) recvfrom$inet6(r1, &(0x7f0000000000)=""/115, 0x73, 0x40000000, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x5}, 0x1c) 444.000102ms ago: executing program 1 (id=6415): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) (async) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) 319.743465ms ago: executing program 0 (id=6416): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705000000005bae3c3ef47d07e2c0621bf0000061106a000000000000000000"], 0x0}, 0x90) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705000000005bae3c3ef47d07e2c0621bf0000061106a000000000000000000"], 0x0}, 0x90) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) (async) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) (async) 318.925504ms ago: executing program 3 (id=6417): r0 = socket$netlink(0x10, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x85, 0x0, &(0x7f00000004c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c0000005e0001002abd7000fedbdb2500000000", @ANYRES32=r2, @ANYBLOB="7f"], 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 317.924893ms ago: executing program 1 (id=6418): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x4, 0x4) bind$netlink(r1, &(0x7f00000002c0), 0xc) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0xb, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) 254.886007ms ago: executing program 1 (id=6419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8}]}, 0x15c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x130, 0x7, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc3}]}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_USERDATA={0x3a, 0x7, 0x1, 0x0, "250592cbe27e99e8bcd1f7085c1febc475be4856c58691af5b3a7a941ab89c20d63ce5b7ea906da4628568dafb94bd5953caabafc426"}]}, 0x130}, 0x1, 0x0, 0x0, 0x400001c}, 0x8801) 254.089386ms ago: executing program 3 (id=6420): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) (async) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async, rerun: 64) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) (async, rerun: 64) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x10) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x210, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @multicast2, 0xff000000, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e20], [0x4e22, 0x4e24], [0x40, 0x3, 0x6, 0x8, 0x34, 0x0, 0x0, 0x5, 0x8000, 0x81, 0xfffffffd, 0xfffffffe, 0x8000, 0x7ff, 0x44, 0x58639972, 0x9, 0x10, 0x8, 0x3ff, 0xfffffff2, 0x91, 0x9, 0x1, 0x1ca8, 0xb96d, 0x100, 0x9, 0x80000000, 0x8, 0xe, 0x6, 0x26c, 0xb9ae, 0x80, 0x400, 0x99d8, 0x1, 0x10000, 0x7, 0x6, 0x3, 0x9, 0x5, 0xad3, 0x6, 0xff, 0x8, 0x8, 0x1, 0x0, 0x7, 0xb, 0xd, 0x6, 0xc, 0x5, 0x40000000, 0x10, 0x3, 0x3, 0x78, 0x9, 0x9], 0x0, [{0x0, 0x0, 0xd5}, {0x0, 0x51, 0x6}, {0x3, 0x3, 0xa}, {0x8, 0x80, 0x8}], 0x0, 0x4}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @broadcast, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@private=0xa010103, @loopback, 0xff000000, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x62, 0x1, 0x1}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0xd, 0x8, [0x8, 0x27, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x6, 0x31, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 234.813701ms ago: executing program 0 (id=6421): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x2a, 0x5, 0x9, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004e40)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESOCT=0x0, @ANYBLOB="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", @ANYRES32=r0], 0x7c}}, 0x4000001) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) (async) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611210000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) recvmmsg(r2, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1ff001}, {{0x0, 0x0, 0x0}, 0xaea2}, {{0x0, 0x0, 0x0}, 0xf01}, {{0x0, 0x0, 0x0}, 0x8104}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/174, 0xae}, {&(0x7f0000000400)=""/243, 0xf3}, {&(0x7f0000003e40)=""/4095, 0xfff}, {&(0x7f0000002e00)=""/4101, 0x1005}, {&(0x7f0000000500)=""/90, 0x5a}, {&(0x7f0000000000)=""/104, 0x68}, {&(0x7f0000000340)=""/184, 0xb8}], 0x7}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) (rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x19, 0xa, 0xe, &(0x7f0000000940)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) connect$packet(r5, &(0x7f0000000880)={0x11, 0x1a, r6, 0x1, 0xc0}, 0x14) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b00736970"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000150001032dbd7000000000000c1600000800040001"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) (async, rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000002000010000000000080000000a008000000000080e000100140002f61b7f7e4da0021ef8f8e61ef1186900fc"], 0x30}}, 0x40000) (async, rerun: 32) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async, rerun: 32) listen(r9, 0xffffffff) (async, rerun: 32) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f00000008c0)=0x7, 0x4) (async) r10 = accept4(r9, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e24, 0xf29e, @empty, 0x5}}, 0xfff7, 0x9}, &(0x7f0000000000)=0x90) (async) sendmsg$AUDIT_GET_FEATURE(r10, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3fb, 0x100, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8001}, 0x4000890) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="700000001400020028bd7000fbdbdf25021084c8", @ANYRES32=r11, @ANYBLOB="080001000000000008000800900400001400030076657468315f746f5f6873720000000014000600050000000b000000d5ac00080080000008000800c0010000080004000a01010108000a00030000000800090001000000"], 0x70}}, 0x0) 127.890503ms ago: executing program 3 (id=6422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000000800010001000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000000008000100020000"], 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x64, r3, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x95}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x200000c1) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r1, 0x11a, 0x4, &(0x7f0000000000)=0x8000, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x7}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) 125.96762ms ago: executing program 6 (id=6423): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x14, 0x80, 0x2, 0xfc, 0x1, 0x0, 0x9, 0xbadc369db9fa037f}, [@RTA_PREF={0x5, 0x14, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448de, &(0x7f00000000c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703340000001f03000000000000040014000d000a000d0000009ee517d3334abc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004002) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01"], 0x3c}}, 0x0) 113.738274ms ago: executing program 1 (id=6424): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x24088000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1f8, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1b4a4f29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff2bea}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6edf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xba}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb0f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7947}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4840}, 0x4004040) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@delqdisc={0x24, 0x25, 0x800, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xe, 0x3}, {0x0, 0xfff2}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000a00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x11c, 0x2, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_TABLE_USERDATA={0xe8, 0x6, "b3990845c14dc242b5b112a687729be8dc9291a13f9f18ecdc6a25aa4af1e5c5f3175507c2b3a7d96b567b7dd811ffd7bf88bad6ff2d34391da63c4982ee0135853f5f517319525322ca4e3d734d5ffa6e722d9a02c8bdd347e1acb505a5a5c779ba58701f7eb01467d336f9cf14a011f4dd0a4149d978e257ececb4fdc1bf99e679a63aeb3cbe0969bfaf1331581711037be537ea9678fb4e97fa21ab91778317a135a5db3430ad07f8c7d2a77e9c4b7d15e9f27db92371c864c4b8a8d697aada8fdd75891873638452273690ad21d1c301ef429cdc6b0b7eb9fb23f980567eacc02c63"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x44, 0x18, 0xa, 0xa, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x184, 0x6, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x886c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2e}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xfe, 0x7, 0x1, 0x0, "d732bc1e637f8502f5aba45d23a813cfe51b510f3a5f3d469746e76234c96e16dc9cd2f9c3694b4bcb350f220a8e9d1ef22bbc72a6a6e6e2a135d719a50873e2fc17af1b8c8e408bae3819f26f8c2ef61b39668fc52869cba157aa24d7fa2dc2416d61ddf19fdb59b3dc368955008aff49960cf6d91806805192be9bdaed64b46ece2e5b59945341b19c770817bdd62f65e7a748c40e8bacd245bed6986c2ae802f0e12ada45b9e6ccefb1c1cdf329726c34d0718cc534e090a3ff76a555f9c40a8efa00865a05a8a4b053785d69631587bd2b6d05a7769c59130a048006cf4bcdc173d1a9abe2406380115c1e988b2cfeff0f58e8e6db300504"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x5c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3ec}, 0x1, 0x0, 0x0, 0x20000081}, 0x4880) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) getsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) ioctl$SIOCNRDECOBS(r3, 0x89e2) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x0, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4801) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, 0x1407, 0x400, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x24000000) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x19, &(0x7f0000000d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2a2e}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4b}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e00)='syzkaller\x00', 0x4, 0x27, &(0x7f0000000e40)=""/39, 0x41100, 0x50, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000e80)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000ec0)=[{0x3, 0x4, 0x1, 0x7}, {0x2, 0x4, 0x6, 0x4}, {0x4, 0x4, 0x5, 0x9}], 0x10, 0x10000000}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000010c0)={@cgroup, 0x1e, 0x0, 0x9, &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000001000)=[0x0], &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001100)={@fallback=r8, r9, 0x30, 0x2038, 0x0, @void, @void, @value=0xffffffffffffffff, @void, r10}, 0x20) r11 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGPGRP(r11, 0x8904, &(0x7f0000001140)) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000001280)={0x1, 0x5, 0xf1, &(0x7f0000001180)=""/241}) pipe(&(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RXRPC_SECURITY_KEY(r12, 0x110, 0x1, &(0x7f0000001300)='}\x00', 0x2) r14 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r14, 0x84, 0x1c, &(0x7f0000001340), &(0x7f0000001380)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x53, &(0x7f00000013c0)=0x10000, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r13, 0x6, 0x1d, &(0x7f0000001400), &(0x7f0000001440)=0x14) 57.505558ms ago: executing program 0 (id=6425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x15, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{0x0, 0x114}], 0x1}, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) (async) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0xa, 0x300) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r9, @ANYBLOB="200001"], 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0xb8, r1, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_TX_RATES={0x78, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x4de, 0x5, 0x0, 0x0, 0x400, 0x2]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xc, 0x48, 0x1b, 0x2, 0x4, 0x0, 0x9, 0x3, 0x4, 0x42, 0x6e, 0xc, 0x2, 0x6, 0x2, 0x9, 0x5, 0x30, 0x36, 0x12, 0xc, 0xc, 0x9, 0x48, 0x60, 0x16, 0x36, 0x6c, 0x6, 0x24, 0x60, 0x18]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x12, 0x3, 0x60, 0x5, 0x1b, 0x16, 0x4, 0xc, 0x68, 0x60, 0x48, 0x36, 0x12, 0x60, 0x6, 0x2, 0x1, 0x1, 0x5, 0x16, 0x4, 0x5, 0xb, 0x14, 0x1, 0x0, 0x6c, 0x1b, 0x1, 0x2, 0x5, 0x0]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x24, 0x24, 0xc, 0x60, 0x30, 0xc, 0x48, 0x4c2a738cf6022a89, 0xb, 0x60, 0x3, 0x30, 0x6, 0x6c, 0x18]}]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x123}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}]]}, 0xb8}}, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0xd605, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1a21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r11}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) (async) getsockopt$inet6_mreq(r8, 0x29, 0x14, &(0x7f00000004c0)={@private1, 0x0}, &(0x7f0000000500)=0x14) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000680)={&(0x7f00000000c0), 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0x90, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9d21}, @ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x6}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xffffffff}, @ETHTOOL_A_RINGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r10, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xff}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x5}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000000) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 0s ago: executing program 3 (id=6426): r0 = socket(0x40000000015, 0x5, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x85dc}], 0x1, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) (async) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) listen(r1, 0x0) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000240)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f400000000000000f462013c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): 49 > 9 [ 408.260439][ T5150] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 408.274777][ T5150] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 408.282503][ T5150] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 408.341708][T22988] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.367616][T22988] netdevsim netdevsim5 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 408.415427][T22988] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 408.440152][T22988] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 408.573655][T22988] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.594539][T22988] netdevsim netdevsim5 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 408.612844][T22988] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 408.636773][T22988] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 408.658880][T23400] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5218'. [ 408.671689][T23368] wlan1 speed is unknown, defaulting to 1000 [ 408.695830][T23368] hsr0 speed is unknown, defaulting to 1000 [ 408.698642][T23396] tipc: Enabled bearer , priority 0 [ 408.743544][T23396] syzkaller0: entered promiscuous mode [ 408.760290][T23396] syzkaller0: entered allmulticast mode [ 408.772546][T22988] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.782743][T22988] netdevsim netdevsim5 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 408.793557][T22988] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 408.804444][T22988] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 408.898722][T23396] tipc: Resetting bearer [ 408.911203][T22988] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.926267][T22988] netdevsim netdevsim5 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 408.936598][T22988] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 408.946693][T22988] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 408.994110][T23394] tipc: Resetting bearer [ 409.025390][T23394] tipc: Disabling bearer [ 409.224740][T23432] block nbd4: Unsupported socket: should be TCP or UNIX. [ 409.290162][T23432] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5229'. [ 409.595459][T23368] chnl_net:caif_netlink_parms(): no params data found [ 409.777590][T22988] batadv2: left allmulticast mode [ 409.782949][T22988] batadv2: left promiscuous mode [ 409.790100][T22988] bridge0: port 1(batadv2) entered disabled state [ 410.184966][T23478] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5241'. [ 410.235990][T23480] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5241'. [ 410.378578][ T5150] Bluetooth: hci3: command tx timeout [ 411.059598][T22988] dvmrp0 (unregistering): left allmulticast mode [ 411.651908][T22988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.662944][T22988] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 411.671913][T22988] bond0 (unregistering): Released all slaves [ 411.684994][T22988] bond1 (unregistering): Released all slaves [ 411.697607][T22988] bond2 (unregistering): Released all slaves [ 411.710161][T22988] bond3 (unregistering): Released all slaves [ 411.724483][T22988] bond4 (unregistering): Released all slaves [ 411.826229][T22988] bond5 (unregistering): Released all slaves [ 411.838819][T22988] bond6 (unregistering): Released all slaves [ 411.887957][T23478] gretap0: entered promiscuous mode [ 411.899933][T23001] net_ratelimit: 18 callbacks suppressed [ 411.899953][T23001] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 411.915607][T23480] 0ªî{X¹¦: renamed from gretap0 [ 411.923391][T23480] 0ªî{X¹¦: left promiscuous mode [ 411.936696][T23480] 0ªî{X¹¦: entered allmulticast mode [ 411.948996][T23480] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 411.957005][T23487] ip6t_srh: unknown srh invflags 4000 [ 412.128030][T22988] tipc: Disabling bearer [ 412.137693][T22988] tipc: Left network mode [ 412.206807][T23368] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.224950][T23368] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.232250][T23368] bridge_slave_0: entered allmulticast mode [ 412.248165][T23368] bridge_slave_0: entered promiscuous mode [ 412.258065][T23368] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.265896][T23368] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.273144][T23368] bridge_slave_1: entered allmulticast mode [ 412.283344][T23368] bridge_slave_1: entered promiscuous mode [ 412.291939][T23004] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 412.445116][ T5150] Bluetooth: hci3: command tx timeout [ 412.466322][T23368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.516663][T23368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.576866][T22988] hsr_slave_0: left promiscuous mode [ 412.589047][T22988] hsr_slave_1: left promiscuous mode [ 412.608244][T22988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.623391][T22988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.719179][T22988] veth0_macvtap: left promiscuous mode [ 412.747446][T23525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5253'. [ 412.775055][T23525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5253'. [ 413.128164][T22988] team0 (unregistering): Port device veth0_virt_wifi removed [ 413.271478][T22988] team0 (unregistering): Port device team_slave_1 removed [ 413.311009][T22988] team0 (unregistering): Port device team_slave_0 removed [ 413.561171][T22988] vcan0 (unregistering): left allmulticast mode [ 413.676494][T23368] team0: Port device team_slave_0 added [ 413.684384][T23002] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 413.756045][T23368] team0: Port device team_slave_1 added [ 413.837584][T23368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.864751][T23368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.926324][T23368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.933625][T23565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5264'. [ 413.954358][T23002] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 413.985614][T23368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.992604][T23368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.079593][T23368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.116614][T23575] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5268'. [ 414.116935][T23002] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 414.139460][T23576] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5269'. [ 414.149355][T23576] openvswitch: netlink: Flow key attr not present in new flow. [ 414.329110][T23368] hsr_slave_0: entered promiscuous mode [ 414.347402][T23368] hsr_slave_1: entered promiscuous mode [ 414.379222][T23368] debugfs: 'hsr0' already exists in 'hsr' [ 414.404443][T23368] Cannot create hsr debugfs directory [ 414.413060][T23590] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5273'. [ 414.424925][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 414.522010][T22988] IPVS: stop unused estimator thread 0... [ 414.528003][ T5150] Bluetooth: hci3: command tx timeout [ 414.554361][T23597] netlink: 112 bytes leftover after parsing attributes in process `syz.6.5276'. [ 414.755931][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 414.805356][T23610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5280'. [ 414.817809][T23615] netlink: 596 bytes leftover after parsing attributes in process `syz.1.5278'. [ 414.934916][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 414.979922][T23619] Bluetooth: MGMT ver 1.23 [ 414.998742][T23623] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5284'. [ 415.083031][T23626] netlink: 'syz.0.5285': attribute type 3 has an invalid length. [ 415.218989][T23634] netlink: 'syz.3.5288': attribute type 1 has an invalid length. [ 415.341363][T23640] bond5: option lp_interval: invalid value (0) [ 415.347983][T23640] bond5: option lp_interval: allowed values 1 - 2147483647 [ 415.360324][T23640] bond5 (unregistering): Released all slaves [ 415.386291][T23647] xt_cgroup: xt_cgroup: no path or classid specified [ 415.452243][T23368] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 415.503706][T23368] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 415.526337][T23368] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 415.548205][T23368] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 415.622504][T23662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.702864][T23654] xt_CT: No such helper "snmp" [ 415.780146][T23368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.800784][T23673] netlink: 'syz.3.5297': attribute type 12 has an invalid length. [ 415.811637][T23368] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.845267][T23673] bond5: option primary_reselect: invalid value (255) [ 415.855821][T23673] bond5 (unregistering): Released all slaves [ 415.899593][T22988] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.906852][T22988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.922197][T23003] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.929390][T23003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.379360][T23703] syzkaller0: entered promiscuous mode [ 416.611589][ T5150] Bluetooth: hci3: command tx timeout [ 416.647268][T23368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.015138][T23002] net_ratelimit: 12 callbacks suppressed [ 417.015159][T23002] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 417.154356][T23002] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 417.265668][T23760] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 417.365934][T23368] veth0_vlan: entered promiscuous mode [ 417.389751][T23368] veth1_vlan: entered promiscuous mode [ 417.434497][T23002] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 417.542703][T23770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.552455][T23770] bond_slave_0: left promiscuous mode [ 417.572766][T23770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.583666][T23770] bond_slave_1: left promiscuous mode [ 417.597292][T23770] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 417.607080][T23770] mac80211_hwsim hwsim34 wlan1: left promiscuous mode [ 417.617148][T23770] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 417.626295][T23770] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.648595][T23770] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 417.659146][T23770] bridge_slave_1: left promiscuous mode [ 417.670454][T23770] bond0 (unregistering): Released all slaves [ 417.707499][ T6852] wlan1 speed is unknown, defaulting to 1000 [ 417.741152][T23368] veth0_macvtap: entered promiscuous mode [ 417.766623][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 417.790625][T23368] veth1_macvtap: entered promiscuous mode [ 417.809573][T23783] netlink: 'syz.0.5326': attribute type 9 has an invalid length. [ 417.841546][T23368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.885553][T23368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.907817][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 417.955064][T23788] __nla_validate_parse: 76 callbacks suppressed [ 417.955083][T23788] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5327'. [ 417.986677][T23795] netlink: 'syz.0.5330': attribute type 11 has an invalid length. [ 418.007876][T23788] netlink: 'syz.6.5327': attribute type 7 has an invalid length. [ 418.011638][T22991] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.017947][T23788] netlink: 'syz.6.5327': attribute type 8 has an invalid length. [ 418.052196][T23788] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5327'. [ 418.062897][T23003] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.075661][T23798] delete_channel: no stack [ 418.104702][T22991] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.131478][T22991] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.171357][T23002] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 418.215131][T23808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5333'. [ 418.294666][T22991] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 418.322795][T22988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.341776][T22988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.378358][T23823] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5338'. [ 418.393099][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.447668][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.467476][T22991] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 418.584960][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 418.707869][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 419.341324][T23854] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5349'. [ 419.428483][T23857] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5350'. [ 419.461889][T23857] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 419.512302][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 419.521858][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 419.536741][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 419.549514][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 419.557448][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 419.594048][T23869] netlink: 'syz.3.5353': attribute type 1 has an invalid length. [ 419.654427][T23865] wlan1 speed is unknown, defaulting to 1000 [ 419.670102][T23865] hsr0 speed is unknown, defaulting to 1000 [ 420.173467][T23865] chnl_net:caif_netlink_parms(): no params data found [ 420.419645][T23865] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.427783][T23865] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.448012][T23865] bridge_slave_0: entered allmulticast mode [ 420.477050][T23865] bridge_slave_0: entered promiscuous mode [ 420.500743][T23865] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.515631][T23865] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.524378][T23865] bridge_slave_1: entered allmulticast mode [ 420.532243][T23865] bridge_slave_1: entered promiscuous mode [ 420.712950][T23898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 420.727554][T23929] syzkaller0: entered promiscuous mode [ 420.744582][T23929] syzkaller0: entered allmulticast mode [ 420.767815][T23865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.801683][T23865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.914426][T23944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5369'. [ 420.992727][T23865] team0: Port device team_slave_0 added [ 421.003298][T23944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5369'. [ 421.029216][T23865] team0: Port device team_slave_1 added [ 421.183150][T23865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.190890][T23865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.224742][T23865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.273480][T23865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.282043][T23865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.284884][T23966] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 421.313070][T23865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.467963][T23865] hsr_slave_0: entered promiscuous mode [ 421.481509][T23865] hsr_slave_1: entered promiscuous mode [ 421.499708][T23865] debugfs: 'hsr0' already exists in 'hsr' [ 421.524305][T23865] Cannot create hsr debugfs directory [ 421.574917][T23977] SET target dimension over the limit! [ 421.589754][T23979] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5383'. [ 421.602824][T23980] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5383'. [ 421.644879][ T5150] Bluetooth: hci1: command tx timeout [ 421.824905][T23865] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.842767][T23865] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.944042][T23865] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.954227][T23865] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.032350][T23865] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.042317][T23865] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.126409][T23865] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.165243][T23865] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.194352][T22991] net_ratelimit: 14 callbacks suppressed [ 422.194387][T22991] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 422.387882][T24012] netlink: 'syz.5.5395': attribute type 1 has an invalid length. [ 422.433990][T24012] netlink: 'syz.5.5395': attribute type 4 has an invalid length. [ 422.462333][T23865] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 422.508279][T23865] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 422.536312][T23865] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 422.578009][T23865] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 422.643910][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 422.706757][T24035] erspan0: entered promiscuous mode [ 422.722714][T24035] erspan0: entered allmulticast mode [ 422.774280][T23002] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 422.963272][T23865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.024270][T23002] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 423.066919][T23865] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.079542][T24064] __nla_validate_parse: 5 callbacks suppressed [ 423.079561][T24064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5407'. [ 423.102965][T22991] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.110560][T22991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.193603][T24064] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 423.207292][T24064] bond0 (unregistering): Released all slaves [ 423.233184][T24069] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5407'. [ 423.242259][T23002] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 423.258346][T24075] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5411'. [ 423.259209][T24078] netlink: 'syz.5.5412': attribute type 10 has an invalid length. [ 423.271216][T24075] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5411'. [ 423.297118][T24078] veth1_macvtap: left promiscuous mode [ 423.346229][T23002] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.353409][T23002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.414280][T23002] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 423.525828][T24090] sctp: [Deprecated]: syz.0.5416 (pid 24090) Use of int in maxseg socket option. [ 423.525828][T24090] Use struct sctp_assoc_value instead [ 423.540665][T22991] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 423.647515][T22991] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 423.725478][ T5150] Bluetooth: hci1: command tx timeout [ 423.776105][T22991] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 423.903966][T23001] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 423.921507][T23865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.228630][T24128] pim6reg1: entered promiscuous mode [ 424.245644][T24128] pim6reg1: entered allmulticast mode [ 424.252089][T24134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5426'. [ 424.464965][T24147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5428'. [ 424.509114][T23865] veth0_vlan: entered promiscuous mode [ 424.525384][T23865] veth1_vlan: entered promiscuous mode [ 424.566547][T24150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5430'. [ 424.625009][T23865] veth0_macvtap: entered promiscuous mode [ 424.648581][T23865] veth1_macvtap: entered promiscuous mode [ 424.695800][T23865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.709812][T24156] : renamed from hsr0 (while UP) [ 424.721686][T23865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.758564][T24156] bond0: entered promiscuous mode [ 424.764089][T24156] bond_slave_0: entered promiscuous mode [ 424.769869][T24156] bond_slave_1: entered promiscuous mode [ 424.786478][T22991] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.795446][T22991] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.820664][T22991] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.846726][T22991] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.949164][T22991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.985426][T22991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.061720][T23004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.073375][T23004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.224917][T24170] delete_channel: no stack [ 425.243191][T24175] netlink: 2 bytes leftover after parsing attributes in process `syz.5.5438'. [ 425.566867][T24200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5446'. [ 425.807999][ T5150] Bluetooth: hci1: command tx timeout [ 425.845566][T24214] netlink: 'syz.3.5453': attribute type 1 has an invalid length. [ 425.958543][T24226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5456'. [ 426.826225][T24240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.244787][T23004] net_ratelimit: 28 callbacks suppressed [ 427.244809][T23004] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 427.373040][T24317] netlink: 'syz.5.5481': attribute type 1 has an invalid length. [ 427.395026][T23004] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 427.403265][T24317] netlink: 'syz.5.5481': attribute type 10 has an invalid length. [ 427.420545][T24317] batadv0: entered promiscuous mode [ 427.433879][T24317] batadv0: entered allmulticast mode [ 427.440784][T24317] bridge0: port 3(batadv0) entered blocking state [ 427.449584][T24321] xt_bpf: check failed: parse error [ 427.461702][T24317] bridge0: port 3(batadv0) entered disabled state [ 427.476824][T24317] bridge0: port 3(batadv0) entered blocking state [ 427.483433][T24317] bridge0: port 3(batadv0) entered forwarding state [ 427.513901][T24319] netlink: 'syz.3.5478': attribute type 32 has an invalid length. [ 427.522741][T23003] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 427.527997][T24314] bridge0: port 3(batadv0) entered blocking state [ 427.532926][T23003] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 427.547666][T24314] bridge0: port 3(batadv0) entered disabled state [ 427.547854][T24314] batadv0: entered allmulticast mode [ 427.549781][T24314] batadv0: entered promiscuous mode [ 427.571380][T24326] netlink: 'syz.1.5483': attribute type 10 has an invalid length. [ 427.600974][T24326] dummy0: entered promiscuous mode [ 427.616930][T24326] bridge0: port 2(dummy0) entered blocking state [ 427.640216][T24326] bridge0: port 2(dummy0) entered disabled state [ 427.665411][T24326] dummy0: entered allmulticast mode [ 427.694932][T23004] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 427.884712][ T5150] Bluetooth: hci1: command tx timeout [ 428.004350][T23004] batman_adv: batadv0: IGMP Querier appeared [ 428.010462][T23004] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 428.121474][T24358] xt_ecn: cannot match TCP bits for non-tcp packets [ 428.130324][T24358] __nla_validate_parse: 8 callbacks suppressed [ 428.130345][T24358] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5493'. [ 428.304949][T24338] team0 (unregistering): Port device team_slave_0 removed [ 428.322126][T24338] team0 (unregistering): Port device team_slave_1 removed [ 428.396892][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 428.535304][T22998] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 428.632342][T24383] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5498'. [ 428.684974][T24383] netlink: 120 bytes leftover after parsing attributes in process `syz.6.5498'. [ 428.696037][T24383] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5498'. [ 428.867172][T24392] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 429.151893][T24416] IPVS: set_ctl: invalid protocol: 192 127.0.0.1:20000 [ 430.723102][T24404] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 430.733795][T24404] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 430.742262][T24404] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 430.743829][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 430.885790][T24431] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5514'. [ 430.896520][T22998] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 430.898856][T24438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5515'. [ 431.053421][T24447] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5519'. [ 431.124776][T24447] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5519'. [ 431.154126][T22998] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 431.264159][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 431.403984][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 431.678284][T24482] lo: entered promiscuous mode [ 431.805649][T24491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5537'. [ 431.817802][T24491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5537'. [ 432.354650][T22988] net_ratelimit: 8 callbacks suppressed [ 432.354693][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 432.547923][T22998] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.635211][T24529] tipc: Started in network mode [ 432.640261][T24529] tipc: Node identity 7e43956b35d8, cluster identity 4711 [ 432.661270][T24529] tipc: Enabled bearer , priority 0 [ 432.691037][T24524] syzkaller0: MTU too low for tipc bearer [ 432.699104][T24524] tipc: Disabling bearer [ 432.730624][T22998] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.774315][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 432.816176][T22998] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.894250][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 433.006709][T22998] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.074181][T23001] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 433.120025][T24549] netlink: 'syz.6.5562': attribute type 1 has an invalid length. [ 433.195089][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 433.255679][T24553] netlink: 'syz.3.5563': attribute type 3 has an invalid length. [ 433.266748][T24553] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5563'. [ 433.300139][T22998] bridge0: port 3(batadv0) entered disabled state [ 433.327540][T22998] bridge_slave_1: left allmulticast mode [ 433.338831][T22998] bridge_slave_1: left promiscuous mode [ 433.348375][T22998] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.364267][T22998] bridge_slave_0: left allmulticast mode [ 433.370031][T22998] bridge_slave_0: left promiscuous mode [ 433.385132][T22998] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.412111][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 433.423472][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 433.437841][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 433.448771][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 433.457586][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 433.902784][T22998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.913234][T22998] bond_slave_0: left promiscuous mode [ 433.922872][T22998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.934954][T22998] bond_slave_1: left promiscuous mode [ 433.942881][T22998] bond0 (unregistering): Released all slaves [ 434.210534][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 434.335654][T24559] wlan1 speed is unknown, defaulting to 1000 [ 434.345696][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 434.366290][T24559] hsr0 speed is unknown, defaulting to 1000 [ 434.451629][T24592] xt_CT: No such helper "snmp" [ 434.551303][T22998] hsr_slave_0: left promiscuous mode [ 434.577616][T22998] hsr_slave_1: left promiscuous mode [ 434.596479][T22998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.605297][T22998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.614489][T22998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.623002][T22998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.629510][T24612] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 434.631601][T24609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5579'. [ 434.650838][T24609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5579'. [ 434.677378][T22998] veth0_macvtap: left promiscuous mode [ 434.683552][T22998] veth1_vlan: left promiscuous mode [ 434.689974][T22998] veth0_vlan: left promiscuous mode [ 435.148214][T22998] team0 (unregistering): Port device team_slave_1 removed [ 435.205078][T22998] team0 (unregistering): Port device team_slave_0 removed [ 435.485230][ T5150] Bluetooth: hci3: command tx timeout [ 435.595576][T24607] tipc: Enabling not permitted [ 435.601203][T24607] tipc: Enabling of bearer rejected, failed to enable media [ 435.642750][T24609] bridge0: port 3(vlan2) entered blocking state [ 435.687395][T24609] bridge0: port 3(vlan2) entered disabled state [ 435.716863][T24609] vlan2: entered allmulticast mode [ 435.730569][T24609] bridge0: entered allmulticast mode [ 435.776653][T24609] vlan2: left allmulticast mode [ 435.781551][T24609] bridge0: left allmulticast mode [ 435.823845][T23001] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 435.893468][T24632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5589'. [ 435.907760][T24633] x_tables: unsorted underflow at hook 2 [ 435.914367][T24632] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5589'. [ 436.004525][T24640] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5588'. [ 436.019469][T24636] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5588'. [ 436.107748][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 436.266095][T24656] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5594'. [ 436.277330][T24656] netlink: 92 bytes leftover after parsing attributes in process `syz.6.5594'. [ 436.330597][T24559] chnl_net:caif_netlink_parms(): no params data found [ 436.514239][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 436.682172][T24559] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.685297][T24685] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 436.721980][T24559] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.722462][T24693] netlink: 'syz.0.5603': attribute type 21 has an invalid length. [ 436.752837][T24693] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5603'. [ 436.754076][T24559] bridge_slave_0: entered allmulticast mode [ 436.793021][T24559] bridge_slave_0: entered promiscuous mode [ 436.828201][T24559] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.836253][T24559] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.867240][T24559] bridge_slave_1: entered allmulticast mode [ 436.886052][T24559] bridge_slave_1: entered promiscuous mode [ 436.968054][T24559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.995709][T24559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.051014][T24559] team0: Port device team_slave_0 added [ 437.060693][T24559] team0: Port device team_slave_1 added [ 437.156019][T24559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.163076][T24559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.192880][T24559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.203475][ C1] vcan0: j1939_tp_rxtimer: 0xffff888044f18c00: rx timeout, send abort [ 437.207112][T24718] netlink: 'syz.0.5615': attribute type 1 has an invalid length. [ 437.218863][T24559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.229082][T24559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.256127][T24559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.320344][T24720] netlink: 'syz.3.5614': attribute type 10 has an invalid length. [ 437.359937][T24559] hsr_slave_0: entered promiscuous mode [ 437.368394][T24559] hsr_slave_1: entered promiscuous mode [ 437.384833][T24559] debugfs: 'hsr0' already exists in 'hsr' [ 437.390675][T24559] Cannot create hsr debugfs directory [ 437.565240][ T5150] Bluetooth: hci3: command tx timeout [ 437.653164][T24735] xt_bpf: check failed: parse error [ 437.684005][T22998] net_ratelimit: 1 callbacks suppressed [ 437.684024][T22998] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 437.694329][ C1] vcan0: j1939_tp_rxtimer: 0xffff888044f18000: rx timeout, send abort [ 437.705375][ C1] vcan0: j1939_tp_rxtimer: 0xffff888044f18c00: abort rx timeout. Force session deactivation [ 437.869153][T24559] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 437.881720][T24559] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 437.898383][T24559] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 437.914803][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 437.925006][T24559] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 437.939249][T24747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.074131][T22998] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 438.099364][T24559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.130907][T24559] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.148542][T22998] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.155970][T22998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.189099][T23000] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.196324][T23000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.206101][ C1] vcan0: j1939_tp_rxtimer: 0xffff888044f18000: abort rx timeout. Force session deactivation [ 438.210610][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 438.354279][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 438.464381][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 438.575789][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 438.633026][T24785] tipc: Enabled bearer , priority 0 [ 438.642231][T24794] __nla_validate_parse: 1 callbacks suppressed [ 438.642249][T24794] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5637'. [ 438.689408][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 438.737954][T24784] tipc: Disabling bearer [ 438.766890][T24559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.804356][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 438.826785][T24798] netlink: 'syz.1.5639': attribute type 1 has an invalid length. [ 438.836210][T24798] netlink: 'syz.1.5639': attribute type 3 has an invalid length. [ 438.874208][T24798] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5639'. [ 438.885948][T24798] NCSI netlink: No device for ifindex 0 [ 438.912496][T24804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5639'. [ 439.190479][T24823] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5645'. [ 439.357685][T24834] xt_TCPMSS: Only works on TCP SYN packets [ 439.405579][T24559] veth0_vlan: entered promiscuous mode [ 439.419544][T24559] veth1_vlan: entered promiscuous mode [ 439.468660][T24559] veth0_macvtap: entered promiscuous mode [ 439.477208][T24836] netlink: 14448 bytes leftover after parsing attributes in process `syz.3.5650'. [ 439.492328][T24559] veth1_macvtap: entered promiscuous mode [ 439.542867][T24559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.592400][T24559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.636265][ T2976] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.653904][ T2976] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.654144][ T5150] Bluetooth: hci3: command tx timeout [ 439.662649][ T2976] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.662688][ T2976] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.773187][T24841] tipc: Enabled bearer , priority 0 [ 439.788345][T24841] syzkaller0: entered promiscuous mode [ 439.798357][T24841] syzkaller0: entered allmulticast mode [ 439.855882][T24841] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 439.915906][T24841] tipc: Resetting bearer [ 439.947440][T24839] tipc: Resetting bearer [ 439.998814][T24839] tipc: Disabling bearer [ 440.040662][T23003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.065106][T23003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.164893][T22998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.173089][T24863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5659'. [ 440.190926][T24866] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 440.197116][T22998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.206405][T24863] x_tables: duplicate underflow at hook 2 [ 440.215059][T24863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5659'. [ 440.236281][T24864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5659'. [ 440.250742][T24870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5661'. [ 440.302940][T24870] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5661'. [ 440.774131][T24897] xt_recent: Unsupported userspace flags (000000b1) [ 440.815702][T24896] tipc: Started in network mode [ 440.832697][T24896] tipc: Node identity e6b8e89b9c88, cluster identity 4711 [ 440.848164][T24896] tipc: Enabled bearer , priority 0 [ 440.874664][T24906] syzkaller0: entered promiscuous mode [ 440.883072][T24906] syzkaller0: entered allmulticast mode [ 440.932502][T24896] tipc: Resetting bearer [ 441.019623][T24895] tipc: Resetting bearer [ 441.079953][T24895] tipc: Disabling bearer [ 441.724332][ T5150] Bluetooth: hci3: command tx timeout [ 441.749844][T24957] pim6reg: entered allmulticast mode [ 442.543320][T25016] netlink: 'syz.7.5711': attribute type 2 has an invalid length. [ 442.562322][T25016] netlink: 'syz.7.5711': attribute type 2 has an invalid length. [ 442.673073][T25021] sctp: [Deprecated]: syz.7.5714 (pid 25021) Use of int in maxseg socket option. [ 442.673073][T25021] Use struct sctp_assoc_value instead [ 442.777095][T25023] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 442.793906][T22998] net_ratelimit: 29 callbacks suppressed [ 442.793930][T22998] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 442.926250][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 443.074108][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 443.096745][T25048] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 443.105668][T25053] openvswitch: netlink: Missing key (keys=40, expected=100) [ 443.186221][T22998] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 443.303932][T22998] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 443.423919][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 443.458319][T25071] syzkaller0: refused to change device tx_queue_len [ 443.574607][T22998] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 443.670556][T25082] netlink: 'syz.6.5734': attribute type 1 has an invalid length. [ 443.679101][T25082] netlink: 'syz.6.5734': attribute type 2 has an invalid length. [ 443.704629][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 443.713572][T25081] delete_channel: no stack [ 443.814287][T22998] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 444.059183][T25103] xt_hashlimit: max too large, truncated to 1048576 [ 444.102326][T25103] rdma_rxe: rxe_newlink: failed to add bond0 [ 444.448186][T25130] x_tables: duplicate underflow at hook 1 [ 444.486230][T25129] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸Ú‡v°ýÙ[£DŒw˜zR' [ 444.531471][T25129] CPU: 1 UID: 0 PID: 25129 Comm: syz.0.5750 Not tainted syzkaller #0 PREEMPT(full) [ 444.531502][T25129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 444.531518][T25129] Call Trace: [ 444.531526][T25129] [ 444.531535][T25129] dump_stack_lvl+0x189/0x250 [ 444.531565][T25129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.531587][T25129] ? __pfx__printk+0x10/0x10 [ 444.531614][T25129] ? kernfs_path_from_node+0x2f/0x290 [ 444.531637][T25129] ? kernfs_path_from_node+0x250/0x290 [ 444.531658][T25129] ? kernfs_path_from_node+0x2f/0x290 [ 444.531686][T25129] sysfs_warn_dup+0x8e/0xa0 [ 444.531708][T25129] sysfs_do_create_link_sd+0xc0/0x110 [ 444.531735][T25129] device_add_class_symlinks+0x1cf/0x240 [ 444.531768][T25129] device_add+0x475/0xb50 [ 444.531801][T25129] wiphy_register+0x1c81/0x2aa0 [ 444.531845][T25129] ? __pfx_wiphy_register+0x10/0x10 [ 444.531870][T25129] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 444.531898][T25129] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 444.531933][T25129] ieee80211_register_hw+0x3473/0x40d0 [ 444.531968][T25129] ? ieee80211_register_hw+0x13c1/0x40d0 [ 444.531998][T25129] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 444.532016][T25129] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 444.532050][T25129] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 444.532071][T25129] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 444.532101][T25129] ? __hrtimer_setup+0x187/0x210 [ 444.532122][T25129] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 444.532151][T25129] mac80211_hwsim_new_radio+0x2f7a/0x5220 [ 444.532209][T25129] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 444.532231][T25129] ? trace_kmalloc+0x1f/0xd0 [ 444.532254][T25129] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 444.532281][T25129] ? kstrndup+0xbf/0x160 [ 444.532313][T25129] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 444.532344][T25129] ? __pfx___nla_validate_parse+0x10/0x10 [ 444.532387][T25129] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 444.532418][T25129] ? rcu_is_watching+0x15/0xb0 [ 444.532445][T25129] ? __nla_parse+0x40/0x60 [ 444.532475][T25129] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 444.532512][T25129] genl_family_rcv_msg_doit+0x215/0x300 [ 444.532546][T25129] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 444.532587][T25129] ? bpf_lsm_capable+0x9/0x20 [ 444.532609][T25129] ? security_capable+0x7e/0x2e0 [ 444.532641][T25129] genl_rcv_msg+0x60e/0x790 [ 444.532679][T25129] ? __pfx_genl_rcv_msg+0x10/0x10 [ 444.532703][T25129] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 444.532743][T25129] netlink_rcv_skb+0x208/0x470 [ 444.532761][T25129] ? __lock_acquire+0xab9/0xd20 [ 444.532781][T25129] ? __pfx_genl_rcv_msg+0x10/0x10 [ 444.532807][T25129] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 444.532850][T25129] ? down_read+0x1ad/0x2e0 [ 444.532879][T25129] genl_rcv+0x28/0x40 [ 444.532901][T25129] netlink_unicast+0x82c/0x9e0 [ 444.532941][T25129] ? __pfx_netlink_unicast+0x10/0x10 [ 444.532972][T25129] ? netlink_sendmsg+0x642/0xb30 [ 444.532990][T25129] ? skb_put+0x11b/0x210 [ 444.533015][T25129] netlink_sendmsg+0x805/0xb30 [ 444.533053][T25129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.533078][T25129] ? aa_sock_msg_perm+0xf1/0x1d0 [ 444.533106][T25129] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 444.533125][T25129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.533146][T25129] __sock_sendmsg+0x21c/0x270 [ 444.533178][T25129] ____sys_sendmsg+0x505/0x830 [ 444.533207][T25129] ? __pfx_____sys_sendmsg+0x10/0x10 [ 444.533243][T25129] ? import_iovec+0x74/0xa0 [ 444.533265][T25129] ___sys_sendmsg+0x21f/0x2a0 [ 444.533291][T25129] ? __pfx____sys_sendmsg+0x10/0x10 [ 444.533356][T25129] ? __fget_files+0x2a/0x420 [ 444.533373][T25129] ? __fget_files+0x3a0/0x420 [ 444.533403][T25129] __x64_sys_sendmsg+0x19b/0x260 [ 444.533430][T25129] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 444.533473][T25129] ? do_syscall_64+0xbe/0xfa0 [ 444.533501][T25129] do_syscall_64+0xfa/0xfa0 [ 444.533523][T25129] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.533545][T25129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.533564][T25129] ? clear_bhb_loop+0x60/0xb0 [ 444.533589][T25129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.533613][T25129] RIP: 0033:0x7f32beb8eec9 [ 444.533631][T25129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.533647][T25129] RSP: 002b:00007f32bf97a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.533669][T25129] RAX: ffffffffffffffda RBX: 00007f32bede5fa0 RCX: 00007f32beb8eec9 [ 444.533683][T25129] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 444.533696][T25129] RBP: 00007f32bec11f91 R08: 0000000000000000 R09: 0000000000000000 [ 444.533711][T25129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.533721][T25129] R13: 00007f32bede6038 R14: 00007f32bede5fa0 R15: 00007fffe05a5798 [ 444.533751][T25129] [ 446.322851][ T2976] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 446.332143][ T2976] bond0 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - ee:22:25:e8:c7:64 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 446.556043][ T2976] bond2 (unregistering): (slave geneve3): Releasing active interface [ 446.576455][ T2976] bond1 (unregistering): (slave geneve2): Releasing active interface [ 447.070757][ T2976] ` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 447.079917][ T2976] bridge_slave_1: left promiscuous mode [ 447.089766][ T2976] ` (unregistering): Released all slaves [ 447.192219][ T2976] bond1 (unregistering): Released all slaves [ 447.293586][ T2976] bond2 (unregistering): Released all slaves [ 447.393382][ T2976] bond3 (unregistering): (slave veth3): Releasing active interface [ 447.402832][ T2976] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 447.412805][ T2976] bond3 (unregistering): Released all slaves [ 447.427386][ T2976] bond0 (unregistering): (slave veth5): Releasing backup interface [ 447.436465][ T2976] bond0 (unregistering): Released all slaves [ 447.533183][ T2976] bond4 (unregistering): Released all slaves [ 447.546160][ T2976] bond5 (unregistering): Released all slaves [ 447.809769][T25167] net_ratelimit: 9 callbacks suppressed [ 447.809789][T25167] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 447.848463][ T2976] tipc: Disabling bearer [ 447.854337][ T2976] tipc: Left network mode [ 447.874903][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 448.016296][T25179] mac80211_hwsim hwsim64 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 448.043895][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 448.169316][T23001] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 448.235955][T25196] __nla_validate_parse: 11 callbacks suppressed [ 448.235975][T25196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5769'. [ 448.236591][T25198] netlink: 'syz.3.5770': attribute type 8 has an invalid length. [ 448.242565][T25196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.315955][T25196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.384313][T23001] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 448.474370][ T2976] hsr_slave_0: left promiscuous mode [ 448.629406][ T2976] pimreg3 (unregistering): left allmulticast mode [ 448.857611][T25227] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5780'. [ 448.922233][T25231] Bluetooth: MGMT ver 1.23 [ 449.558099][T25214] sit0: entered promiscuous mode [ 449.571413][T25214] netlink: 'syz.0.5775': attribute type 1 has an invalid length. [ 449.579794][T25214] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5775'. [ 449.622435][T25221] tipc: Enabling of bearer rejected, failed to enable media [ 449.645012][T23001] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 449.653263][T25227] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.654238][T25239] netlink: 140124 bytes leftover after parsing attributes in process `syz.1.5782'. [ 449.660984][T25227] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.732197][T25240] syzkaller0: entered promiscuous mode [ 449.744142][T25252] openvswitch: netlink: IP tunnel dst address not specified [ 449.779047][T25240] syzkaller0: entered allmulticast mode [ 449.814347][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 449.928584][T25257] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5784'. [ 449.937800][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 450.070572][T25268] ip6gre1: entered allmulticast mode [ 450.084321][T23001] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 450.134487][T25270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5790'. [ 450.170070][ T2976] IPVS: stop unused estimator thread 0... [ 450.210673][T25280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5795'. [ 450.235689][T25285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5795'. [ 450.248397][T25272] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 450.258377][T23003] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 450.527923][T25303] netlink: 'syz.1.5799': attribute type 12 has an invalid length. [ 450.532865][T25308] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5799'. [ 450.575229][T25306] tipc: Enabled bearer , priority 0 [ 450.585227][T25308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5799'. [ 450.589042][T25306] syzkaller0: entered promiscuous mode [ 450.600131][T25306] syzkaller0: entered allmulticast mode [ 450.711112][T25312] tipc: Resetting bearer [ 450.754125][T25302] tipc: Resetting bearer [ 450.831122][T25302] tipc: Disabling bearer [ 450.846164][ T2976] wlan1: Trigger new scan to find an IBSS to join [ 450.862884][T25330] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:19997 [ 451.146737][T25333] syzkaller0: entered promiscuous mode [ 451.161159][T25333] syzkaller0: entered allmulticast mode [ 451.828434][T25386] netlink: 'syz.0.5818': attribute type 7 has an invalid length. [ 453.224617][T23000] net_ratelimit: 6 callbacks suppressed [ 453.224639][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 453.454303][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 453.485959][T25398] openvswitch: netlink: ct_state flags af6d4083 unsupported [ 453.603868][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 453.737030][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 453.805249][T22988] wlan1: Trigger new scan to find an IBSS to join [ 453.853565][T25428] netlink: 'syz.0.5834': attribute type 142 has an invalid length. [ 453.854084][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 453.904751][T25429] __nla_validate_parse: 5 callbacks suppressed [ 453.904769][T25429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5832'. [ 454.034015][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 454.164443][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 454.296132][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 454.365739][T25465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5847'. [ 454.455737][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 454.502776][T25474] netlink: 9896 bytes leftover after parsing attributes in process `syz.6.5850'. [ 455.178037][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 455.186454][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 455.195810][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 455.205604][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 455.213280][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 455.242729][T25495] wlan1 speed is unknown, defaulting to 1000 [ 455.250079][T25495] hsr0 speed is unknown, defaulting to 1000 [ 455.365413][T25495] chnl_net:caif_netlink_parms(): no params data found [ 455.431133][T25495] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.438608][T25495] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.446709][T25495] bridge_slave_0: entered allmulticast mode [ 455.453777][T25495] bridge_slave_0: entered promiscuous mode [ 455.461411][T25495] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.468894][T25495] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.476175][T25495] bridge_slave_1: entered allmulticast mode [ 455.483546][T25495] bridge_slave_1: entered promiscuous mode [ 455.515861][T25495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.527664][T25495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.557907][T25495] team0: Port device team_slave_0 added [ 455.566335][T25495] team0: Port device team_slave_1 added [ 455.592947][T25495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.600536][T25495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.626635][T25495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.638692][T25495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.646841][T25495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.673200][T25495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.713295][T25495] hsr_slave_0: entered promiscuous mode [ 455.720064][T25495] hsr_slave_1: entered promiscuous mode [ 455.726687][T25495] debugfs: 'hsr0' already exists in 'hsr' [ 455.732430][T25495] Cannot create hsr debugfs directory [ 455.826644][T25495] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 455.837660][T25495] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 455.848456][T25495] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 455.912167][T25495] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 455.921925][T25495] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 455.932225][T25495] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 455.987819][T25495] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 455.998240][T25495] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 456.008224][T25495] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 456.081606][T25495] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 456.092276][T25495] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 456.102843][T25495] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 456.219836][T25495] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 456.229494][T25495] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 456.239970][T25495] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 456.250585][T25495] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 456.278061][T25495] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.285758][T25495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.293753][T25495] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.301119][T25495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.356350][T25495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.376778][T22999] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.387118][T22999] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.405773][T25495] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.418170][T23000] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.425526][T23000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.439271][T23003] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.446462][T23003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.619935][T25495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.660982][T25495] veth0_vlan: entered promiscuous mode [ 456.673048][T25495] veth1_vlan: entered promiscuous mode [ 456.701316][T25495] veth0_macvtap: entered promiscuous mode [ 456.711654][T25495] veth1_macvtap: entered promiscuous mode [ 456.732453][T25495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.746962][T25495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.762090][T23001] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.771757][T23001] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.782428][T23001] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.791500][T23001] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.845882][T23003] wlan1: Trigger new scan to find an IBSS to join [ 456.869548][T23000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.884323][T23000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.909945][T23001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.919327][T23001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.244144][ T5150] Bluetooth: hci0: command tx timeout [ 457.725971][T23003] wlan1: Creating new IBSS network, BSSID fa:ca:32:d5:c8:6b [ 458.275012][ T2976] net_ratelimit: 26 callbacks suppressed [ 458.275032][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 458.394208][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 458.503946][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 458.613920][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 458.724062][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 458.844786][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 458.953924][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 459.063920][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 459.174256][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 459.284061][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 459.324237][ T5150] Bluetooth: hci0: command tx timeout [ 461.404199][ T5150] Bluetooth: hci0: command tx timeout [ 463.383922][T22988] net_ratelimit: 36 callbacks suppressed [ 463.383938][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 463.484149][ T5150] Bluetooth: hci0: command tx timeout [ 463.504096][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 463.624144][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 463.734030][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 463.844203][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 463.954075][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 464.063976][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 464.174052][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 464.286358][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 464.403983][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 468.494126][T23003] net_ratelimit: 36 callbacks suppressed [ 468.494147][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 468.614080][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 468.724028][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 468.834614][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 468.944063][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 469.054085][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 469.164340][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 469.274046][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 469.384040][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 469.493973][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 473.564130][T22988] net_ratelimit: 36 callbacks suppressed [ 473.564152][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 473.684147][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 473.794063][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 473.904384][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 474.014014][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 474.124243][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 474.234261][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 474.343953][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 474.454211][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 474.564429][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 477.607659][T25522] netlink: 'syz.7.5862': attribute type 7 has an invalid length. [ 477.938719][T25551] netlink: 'syz.1.5873': attribute type 1 has an invalid length. [ 478.012075][T25552] netlink: 'syz.6.5872': attribute type 2 has an invalid length. [ 478.021974][T25552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5872'. [ 478.032281][T25552] netlink: 'syz.6.5872': attribute type 2 has an invalid length. [ 478.060885][T25552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5872'. [ 478.171616][T25551] 8021q: adding VLAN 0 to HW filter on device bond10 [ 478.202350][T25556] bond10: (slave geneve2): making interface the new active one [ 478.213270][T25556] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 478.214481][T25564] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20001 [ 478.289049][T25569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5877'. [ 478.356432][T25569] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5877'. [ 478.365911][T25569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5877'. [ 478.429881][T25564] netlink: 'syz.3.5875': attribute type 29 has an invalid length. [ 478.589034][T25584] wlan1 speed is unknown, defaulting to 1000 [ 478.604625][T23000] net_ratelimit: 32 callbacks suppressed [ 478.604645][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 478.638870][T25584] hsr0 speed is unknown, defaulting to 1000 [ 478.764888][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 478.993396][T25607] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5889'. [ 479.137829][T23001] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 479.373865][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 479.432431][T25628] syzkaller1: entered promiscuous mode [ 479.444066][T25628] syzkaller1: entered allmulticast mode [ 479.560705][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 479.591911][T25646] Bluetooth: MGMT ver 1.23 [ 479.669554][T25655] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5903'. [ 479.703974][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 479.737373][T25659] xt_socket: unknown flags 0x50 [ 479.864492][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 479.911195][T25674] netlink: 'syz.7.5908': attribute type 4 has an invalid length. [ 479.973966][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 480.008294][T25679] netlink: 'syz.1.5911': attribute type 1 has an invalid length. [ 480.048534][T25679] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 480.082744][T25690] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5913'. [ 480.126800][T25685] bond5: entered promiscuous mode [ 480.135474][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 480.244071][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 480.580130][T25721] : entered promiscuous mode [ 480.633055][T25727] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5924'. [ 480.655386][T25727] vlan2: entered allmulticast mode [ 480.757591][T25735] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 480.770674][T25738] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5925'. [ 481.010379][T25755] sctp: [Deprecated]: syz.3.5931 (pid 25755) Use of int in maxseg socket option. [ 481.010379][T25755] Use struct sctp_assoc_value instead [ 481.785843][T25797] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 481.809527][T25797] bond1 (unregistering): Released all slaves [ 482.008037][T25814] netlink: 'syz.1.5947': attribute type 23 has an invalid length. [ 482.104537][T25817] netlink: 'syz.1.5947': attribute type 1 has an invalid length. [ 482.146093][T25819] netlink: 'syz.0.5949': attribute type 2 has an invalid length. [ 482.196879][T25814] bond11: (slave gretap2): making interface the new active one [ 482.223593][T25814] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 482.363104][T25836] Bluetooth: hci0: unsupported parameter 1024 [ 482.371027][T25836] Bluetooth: hci0: invalid length 11, exp 2 for type 13 [ 482.608733][ T5150] block nbd4: Receive control failed (result -32) [ 482.859073][T25873] veth1_to_bond: entered allmulticast mode [ 482.898563][T25873] bond0: (slave bond_slave_1): Releasing backup interface [ 483.130443][T25887] __nla_validate_parse: 5 callbacks suppressed [ 483.130463][T25887] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5970'. [ 483.155912][T25887] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5970'. [ 483.441196][T25840] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 483.452718][T25906] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5974'. [ 483.488570][T25911] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5976'. [ 483.494559][T25912] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5975'. [ 483.545946][T25912] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5975'. [ 483.570931][T25912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5975'. [ 483.577588][T25921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5978'. [ 483.592304][T25911] netlink: 2 bytes leftover after parsing attributes in process `syz.7.5976'. [ 483.601671][T25912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5975'. [ 483.642571][T25916] vcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 483.696497][T23000] net_ratelimit: 29 callbacks suppressed [ 483.696517][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 483.831325][T25933] netlink: 'syz.0.5981': attribute type 4 has an invalid length. [ 483.904641][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 483.916174][T25943] netlink: 'syz.6.5985': attribute type 10 has an invalid length. [ 483.928253][T25943] dummy0: entered promiscuous mode [ 483.935097][T25943] bridge0: port 3(dummy0) entered blocking state [ 483.941748][T25943] bridge0: port 3(dummy0) entered disabled state [ 483.951873][T25943] dummy0: entered allmulticast mode [ 483.960562][T25943] bridge0: port 3(dummy0) entered blocking state [ 483.967117][T25943] bridge0: port 3(dummy0) entered forwarding state [ 483.976761][T25937] syzkaller0: entered promiscuous mode [ 483.982249][T25937] syzkaller0: entered allmulticast mode [ 484.074129][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 484.184339][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 484.184796][T25957] netlink: 'syz.0.5989': attribute type 1 has an invalid length. [ 484.215553][T25957] netlink: 'syz.0.5989': attribute type 4 has an invalid length. [ 484.294044][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 484.404020][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 484.513918][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 484.623879][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 484.734009][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 484.844423][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 487.733937][T22988] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 488.804004][T22988] net_ratelimit: 35 callbacks suppressed [ 488.804025][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 488.924495][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 489.033866][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 489.143897][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 489.254011][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 489.363843][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 489.474551][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 489.583811][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 489.693930][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 489.804262][T23001] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 493.874074][T23000] net_ratelimit: 36 callbacks suppressed [ 493.874095][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 493.994147][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 494.114046][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 494.223831][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 494.333876][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 494.453936][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 494.564111][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 494.673810][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 494.793872][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 494.903855][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 498.903994][T22999] net_ratelimit: 35 callbacks suppressed [ 498.904015][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 499.023812][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 499.133863][T23001] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 499.244583][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 499.353804][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 499.463843][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 499.573857][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 499.684016][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 499.793902][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 499.903836][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 503.913840][T23000] net_ratelimit: 35 callbacks suppressed [ 503.913860][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 504.033965][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 504.143865][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 504.253874][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 504.364491][T23001] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 504.473815][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 504.583817][T23001] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 504.693911][T23001] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 504.803843][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 504.913819][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 506.750544][T25965] __nla_validate_parse: 4 callbacks suppressed [ 506.750563][T25965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5992'. [ 506.770803][T25968] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5994'. [ 506.796465][T25968] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5994'. [ 506.962689][T25983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5998'. [ 506.990468][T25985] netlink: 'syz.6.5997': attribute type 7 has an invalid length. [ 507.042458][T25965] team0 (unregistering): Port device team_slave_0 removed [ 507.054882][T25988] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5997'. [ 507.068856][T25965] team0 (unregistering): Port device team_slave_1 removed [ 507.090365][T25965] team0 (unregistering): Port device geneve0 removed [ 507.104410][T25965] team0 (unregistering): Port device veth0_virt_wifi removed [ 507.135994][T25988] dummy0: left allmulticast mode [ 507.141176][T25988] bridge0: port 3(dummy0) entered disabled state [ 507.191787][T25988] bridge_slave_1: left allmulticast mode [ 507.208414][T25988] bridge_slave_1: left promiscuous mode [ 507.226523][T25988] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.250260][T25988] bridge_slave_0: left promiscuous mode [ 507.268426][T25988] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.727442][T26022] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6010'. [ 507.777926][T26028] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6012'. [ 507.784191][T26022] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 507.789405][T26028] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6012'. [ 507.820391][T26030] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6010'. [ 508.000999][T26044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6016'. [ 508.017870][T26043] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 508.344328][T26063] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 508.359634][T26063] netlink: 'syz.6.6023': attribute type 1 has an invalid length. [ 508.560193][T26073] tipc: Started in network mode [ 508.570010][T26073] tipc: Node identity f685b530730f, cluster identity 4711 [ 508.583990][T26073] tipc: Enabled bearer , priority 0 [ 508.644757][T26077] syzkaller0: entered promiscuous mode [ 508.650930][T26077] syzkaller0: entered allmulticast mode [ 508.681608][T26075] veth0_to_bridge: entered promiscuous mode [ 508.702778][T26081] Bluetooth: hci0: invalid length 39, exp 2 for type 17 [ 508.749046][T26077] tipc: Resetting bearer [ 508.761354][T26074] veth0_to_bridge: left promiscuous mode [ 508.793538][T26072] tipc: Resetting bearer [ 508.909856][T26072] tipc: Disabling bearer [ 508.943965][ T2976] net_ratelimit: 28 callbacks suppressed [ 508.943985][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 509.076282][T23001] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 509.204345][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 509.313945][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 509.433921][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 509.556049][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 509.591044][T26133] IPVS: Unknown mcast interface: netpci0 [ 509.694339][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 509.814000][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 509.925790][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 510.047597][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 510.098162][T26160] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 512.029335][T26272] __nla_validate_parse: 18 callbacks suppressed [ 512.029355][T26272] netlink: 168 bytes leftover after parsing attributes in process `syz.7.6086'. [ 512.186628][T26280] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6089'. [ 512.191844][T26276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6088'. [ 512.280797][T26276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6088'. [ 512.597269][T26307] can: request_module (can-proto-0) failed. [ 512.811462][T26334] geneve2: entered promiscuous mode [ 512.816815][T26334] geneve2: entered allmulticast mode [ 512.827863][T23001] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 512.839727][T23001] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 512.880704][T23001] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 512.892413][T23001] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 512.959025][T26342] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6107'. [ 513.057793][T26348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6109'. [ 513.078209][T26348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6109'. [ 513.153613][T26350] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.182771][T26350] netlink: 'syz.7.6110': attribute type 1 has an invalid length. [ 513.440165][T26365] netlink: 'syz.3.6115': attribute type 1 has an invalid length. [ 513.449999][T26365] netlink: 'syz.3.6115': attribute type 3 has an invalid length. [ 513.909772][T26392] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6122'. [ 514.049437][T23001] net_ratelimit: 33 callbacks suppressed [ 514.049456][T23001] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 514.103658][T26405] netlink: 'syz.6.6124': attribute type 10 has an invalid length. [ 514.207109][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 514.218710][T26408] syz_tun: entered allmulticast mode [ 514.224995][T26406] syz_tun: left allmulticast mode [ 514.324720][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 514.433805][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 514.543807][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 514.667158][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 514.761847][T26433] lo: entered allmulticast mode [ 514.804024][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 514.832659][T26436] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6137'. [ 514.913799][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 515.025663][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 515.123361][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 515.132725][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 515.139921][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 515.148668][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 515.156741][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 515.164902][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 515.250953][T26453] wlan1 speed is unknown, defaulting to 1000 [ 515.277888][T26453] hsr0 speed is unknown, defaulting to 1000 [ 515.496622][T26472] can: request_module (can-proto-4) failed. [ 515.525879][T26478] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 515.705506][T26490] netlink: 'syz.7.6146': attribute type 10 has an invalid length. [ 515.726759][T26490] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 515.773546][T26453] chnl_net:caif_netlink_parms(): no params data found [ 515.802169][T26492] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6147'. [ 516.000583][T26453] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.008418][T26453] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.016881][T26453] bridge_slave_0: entered allmulticast mode [ 516.025714][T26453] bridge_slave_0: entered promiscuous mode [ 516.025879][ T6852] hid (null): unknown global tag 0xe [ 516.038254][ T6852] hid (null): nested delimiters [ 516.046660][ T6852] hid (null): bogus close delimiter [ 516.047163][T26453] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.073659][T26453] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.089110][T26453] bridge_slave_1: entered allmulticast mode [ 516.102498][T26453] bridge_slave_1: entered promiscuous mode [ 516.176584][T26453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.209298][T26453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.328179][T26453] team0: Port device team_slave_0 added [ 516.373548][T26453] team0: Port device team_slave_1 added [ 516.456521][T26519] netlink: 'syz.0.6154': attribute type 1 has an invalid length. [ 516.465693][T26519] netlink: 'syz.0.6154': attribute type 1 has an invalid length. [ 516.500498][T26453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.509366][T26453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.559175][T26453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.574639][T26453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.581690][T26453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.684099][T26453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.736936][T26535] xt_policy: too many policy elements [ 516.777100][T26535] netem: incorrect gi model size [ 516.782754][T26535] netem: change failed [ 516.900911][T26453] hsr_slave_0: entered promiscuous mode [ 516.911294][T26453] hsr_slave_1: entered promiscuous mode [ 516.921024][T26453] debugfs: 'hsr0' already exists in 'hsr' [ 516.961071][T26453] Cannot create hsr debugfs directory [ 516.968687][T26544] netlink: 'syz.1.6161': attribute type 2 has an invalid length. [ 517.243914][ T5839] Bluetooth: hci2: command tx timeout [ 517.346149][ T6852] hid-generic 0005:0D45:1012.0001: unknown global tag 0xe [ 517.353541][ T6852] hid-generic 0005:0D45:1012.0001: item 0 2 1 14 parsing failed [ 517.361968][ T6852] hid-generic 0005:0D45:1012.0001: probe with driver hid-generic failed with error -22 [ 517.501158][T26453] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.524822][T26453] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 517.539088][T26453] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 517.555221][T26565] __nla_validate_parse: 4 callbacks suppressed [ 517.555236][T26565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6168'. [ 517.582456][T26565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6168'. [ 517.672564][T26453] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.686120][T26453] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 517.696788][T26453] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 517.782741][T26453] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.815572][T26453] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 517.831578][T26453] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 517.852407][T26583] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6175'. [ 517.855461][T26584] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6175'. [ 517.877411][T26584] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6175'. [ 517.887108][T26583] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6175'. [ 517.906411][T26581] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6174'. [ 517.914232][T26584] gretap0: entered promiscuous mode [ 517.929834][T26584] gretap0: left promiscuous mode [ 517.949647][T26583] gretap0: entered promiscuous mode [ 517.956475][T26583] gretap0: left promiscuous mode [ 517.981242][T26581] bond1 (unregistering): Released all slaves [ 518.005884][T26453] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.016108][T26453] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 518.034947][T26453] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 518.193473][T26600] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 518.235758][T26600] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6179'. [ 518.257341][T26605] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6182'. [ 518.455774][T26620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6184'. [ 518.486493][T26453] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 518.506309][T26453] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 518.541657][T26620] macvtap1: entered promiscuous mode [ 518.544763][T26626] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 518.548631][T26620] vlan0: entered promiscuous mode [ 518.568138][T26620] macvtap1: entered allmulticast mode [ 518.577360][T26620] vlan0: entered allmulticast mode [ 518.582498][T26620] veth0_vlan: entered allmulticast mode [ 518.594334][T26453] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 518.611985][T26626] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 518.634995][T26627] macvtap2: entered promiscuous mode [ 518.640509][T26627] macvtap2: entered allmulticast mode [ 518.652572][T26634] netlink: 'syz.6.6188': attribute type 1 has an invalid length. [ 518.663569][T22999] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 518.678000][T26453] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 518.751123][T26634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 518.888804][T26655] netlink: 'syz.0.6192': attribute type 12 has an invalid length. [ 518.966918][ T2976] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.985207][ T2976] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.008756][ T2976] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.018206][ T2976] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.165330][T26453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.240515][T26673] xt_TCPMSS: Only works on TCP SYN packets [ 519.247602][T26453] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.294735][ T2976] net_ratelimit: 14 callbacks suppressed [ 519.294754][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 519.320735][T23000] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.327929][T23000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.333777][ T5839] Bluetooth: hci2: command tx timeout [ 519.408890][T23000] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.416089][T23000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.456971][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 519.585432][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 519.610124][T26694] xt_hashlimit: size too large, truncated to 1048576 [ 519.714146][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 519.845715][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 519.894502][T26453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.977875][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 520.033699][T26453] veth0_vlan: entered promiscuous mode [ 520.058691][T26453] veth1_vlan: entered promiscuous mode [ 520.103834][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 520.135838][T26453] veth0_macvtap: entered promiscuous mode [ 520.149882][T26453] veth1_macvtap: entered promiscuous mode [ 520.180105][T26453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.205873][T26453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.278561][T23000] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.290599][T23000] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.302702][T23000] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.317726][T23000] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.384596][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 520.482765][T26722] bond1: Invalid ad_actor_system MAC address. [ 520.490840][T26722] bond1: option ad_actor_system: invalid value (1) [ 520.500112][T26722] bond1 (unregistering): Released all slaves [ 520.560662][T22988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.595658][T22988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.625375][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 520.679723][T22999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.707220][T22999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.734559][T22988] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 521.149134][T26750] tipc: Enabled bearer , priority 0 [ 521.186456][T26750] syzkaller0: entered promiscuous mode [ 521.191959][T26750] syzkaller0: entered allmulticast mode [ 521.298975][T26750] tipc: Resetting bearer [ 521.315535][T26749] tipc: Resetting bearer [ 521.404273][ T5839] Bluetooth: hci2: command tx timeout [ 521.410404][T26749] tipc: Disabling bearer [ 521.766642][T26780] x_tables: duplicate underflow at hook 1 [ 521.810184][T22998] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.821047][T22998] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.846461][ T5150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 521.856367][ T5150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 521.864503][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 521.872539][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 521.881009][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 521.928973][T26781] wlan1 speed is unknown, defaulting to 1000 [ 521.955931][T22998] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.969039][T22998] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.999835][T26781] hsr0 speed is unknown, defaulting to 1000 [ 522.010076][T26793] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.017810][T26793] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.099722][T22998] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.122862][T22998] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.219137][T26800] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 522.237309][T26806] netlink: 'syz.6.6235': attribute type 6 has an invalid length. [ 522.262835][T22998] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.294069][T26806] netlink: 'syz.6.6235': attribute type 1 has an invalid length. [ 522.305695][T22998] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.535400][T26828] netlink: 'syz.3.6241': attribute type 83 has an invalid length. [ 522.620353][T22998] dummy0: left allmulticast mode [ 522.632145][T22998] bridge0: port 2(dummy0) entered disabled state [ 522.647153][T26833] __nla_validate_parse: 14 callbacks suppressed [ 522.647171][T26833] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6244'. [ 522.670457][T22998] bridge_slave_0: left allmulticast mode [ 522.676741][T22998] bridge_slave_0: left promiscuous mode [ 522.682560][T22998] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.907223][T22998] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 522.916207][T22998] bond5 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 92:59:be:7c:b9:8a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 522.983969][T26846] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 523.141978][T22998] bond11 (unregistering): (slave gretap2): Releasing active interface [ 523.211631][T22998] dvmrp0 (unregistering): left allmulticast mode [ 523.229080][T22998] bond10 (unregistering): (slave geneve2): Releasing active interface [ 523.494063][ T5150] Bluetooth: hci2: command tx timeout [ 523.687691][T22998] bond1 (unregistering): Released all slaves [ 523.700442][T22998] bond2 (unregistering): Released all slaves [ 523.713005][T22998] bond3 (unregistering): Released all slaves [ 523.810809][T22998] bond4 (unregistering): Released all slaves [ 523.826705][T22998] bond5 (unregistering): (slave veth7): Releasing backup interface [ 523.836389][T22998] bond5 (unregistering): Released all slaves [ 523.936016][T22998] bond6 (unregistering): Released all slaves [ 523.986902][ T5150] Bluetooth: hci4: command tx timeout [ 524.030824][T22998] bond7 (unregistering): Released all slaves [ 524.043304][T22998] bond8 (unregistering): Released all slaves [ 524.055687][T22998] bond0 (unregistering): Released all slaves [ 524.067900][T22998] bond9 (unregistering): Released all slaves [ 524.163538][T22998] bond10 (unregistering): Released all slaves [ 524.176055][T22998] bond11 (unregistering): Released all slaves [ 524.190034][T22998] bond12 (unregistering): Released all slaves [ 524.207678][T26781] chnl_net:caif_netlink_parms(): no params data found [ 524.229073][T26839] syz.7.6245: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 524.248680][T26839] CPU: 1 UID: 0 PID: 26839 Comm: syz.7.6245 Not tainted syzkaller #0 PREEMPT(full) [ 524.248704][T26839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 524.248715][T26839] Call Trace: [ 524.248724][T26839] [ 524.248732][T26839] dump_stack_lvl+0x189/0x250 [ 524.248762][T26839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 524.248783][T26839] ? __pfx__printk+0x10/0x10 [ 524.248803][T26839] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 524.248830][T26839] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 524.248858][T26839] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 524.248888][T26839] warn_alloc+0x214/0x310 [ 524.248923][T26839] ? __pfx_warn_alloc+0x10/0x10 [ 524.248962][T26839] ? __get_vm_area_node+0x28f/0x300 [ 524.248990][T26839] ? fq_pie_init+0x435/0x840 [ 524.249021][T26839] __vmalloc_node_range_noprof+0x690/0x12d0 [ 524.249050][T26839] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 524.249096][T26839] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 524.249124][T26839] ? fq_pie_init+0x435/0x840 [ 524.249153][T26839] ? rcu_is_watching+0x15/0xb0 [ 524.249177][T26839] ? fq_pie_init+0x435/0x840 [ 524.249205][T26839] __kvmalloc_node_noprof+0x674/0x910 [ 524.249234][T26839] ? fq_pie_init+0x435/0x840 [ 524.249261][T26839] ? tcf_block_get+0x67/0xa0 [ 524.249279][T26839] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 524.249304][T26839] fq_pie_init+0x435/0x840 [ 524.249335][T26839] ? __pfx_fq_pie_init+0x10/0x10 [ 524.249363][T26839] qdisc_create+0x7a9/0xea0 [ 524.249398][T26839] tc_modify_qdisc+0x1538/0x20e0 [ 524.249443][T26839] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 524.249502][T26839] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 524.249535][T26839] rtnetlink_rcv_msg+0x77c/0xb70 [ 524.249559][T26839] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 524.249578][T26839] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 524.249595][T26839] ? ref_tracker_free+0x63a/0x7d0 [ 524.249621][T26839] ? __asan_memcpy+0x40/0x70 [ 524.249646][T26839] ? __pfx_ref_tracker_free+0x10/0x10 [ 524.249682][T26839] netlink_rcv_skb+0x208/0x470 [ 524.249704][T26839] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 524.249726][T26839] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 524.249759][T26839] ? netlink_deliver_tap+0x2e/0x1b0 [ 524.249789][T26839] netlink_unicast+0x82c/0x9e0 [ 524.249828][T26839] ? __pfx_netlink_unicast+0x10/0x10 [ 524.249860][T26839] ? netlink_sendmsg+0x642/0xb30 [ 524.249879][T26839] ? skb_put+0x11b/0x210 [ 524.249905][T26839] netlink_sendmsg+0x805/0xb30 [ 524.249937][T26839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.249963][T26839] ? aa_sock_msg_perm+0xf1/0x1d0 [ 524.249992][T26839] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 524.250011][T26839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.250033][T26839] __sock_sendmsg+0x21c/0x270 [ 524.250065][T26839] ____sys_sendmsg+0x505/0x830 [ 524.250094][T26839] ? __pfx_____sys_sendmsg+0x10/0x10 [ 524.250126][T26839] ? import_iovec+0x74/0xa0 [ 524.250148][T26839] ___sys_sendmsg+0x21f/0x2a0 [ 524.250168][T26839] ? __pfx____sys_sendmsg+0x10/0x10 [ 524.250216][T26839] ? __fget_files+0x2a/0x420 [ 524.250230][T26839] ? __fget_files+0x3a0/0x420 [ 524.250252][T26839] __x64_sys_sendmsg+0x19b/0x260 [ 524.250274][T26839] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 524.250307][T26839] ? do_syscall_64+0xbe/0xfa0 [ 524.250329][T26839] do_syscall_64+0xfa/0xfa0 [ 524.250346][T26839] ? lockdep_hardirqs_on+0x9c/0x150 [ 524.250365][T26839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.250380][T26839] ? clear_bhb_loop+0x60/0xb0 [ 524.250401][T26839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.250420][T26839] RIP: 0033:0x7faaef78eec9 [ 524.250435][T26839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.250452][T26839] RSP: 002b:00007faaf062f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.250472][T26839] RAX: ffffffffffffffda RBX: 00007faaef9e5fa0 RCX: 00007faaef78eec9 [ 524.250486][T26839] RDX: 000000002000400c RSI: 0000200000000300 RDI: 0000000000000003 [ 524.250498][T26839] RBP: 00007faaef811f91 R08: 0000000000000000 R09: 0000000000000000 [ 524.250517][T26839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.250527][T26839] R13: 00007faaef9e6038 R14: 00007faaef9e5fa0 R15: 00007ffc0816a758 [ 524.250560][T26839] [ 524.250587][T26839] Mem-Info: [ 524.679426][T26839] active_anon:3873 inactive_anon:0 isolated_anon:0 [ 524.679426][T26839] active_file:3412 inactive_file:40063 isolated_file:0 [ 524.679426][T26839] unevictable:768 dirty:58 writeback:0 [ 524.679426][T26839] slab_reclaimable:13421 slab_unreclaimable:125491 [ 524.679426][T26839] mapped:30032 shmem:1356 pagetables:1081 [ 524.679426][T26839] sec_pagetables:0 bounce:0 [ 524.679426][T26839] kernel_misc_reclaimable:0 [ 524.679426][T26839] free:1292385 free_pcp:14497 free_cma:0 [ 524.731087][T26839] Node 0 active_anon:15492kB inactive_anon:0kB active_file:13648kB inactive_file:160048kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120128kB dirty:232kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14820kB pagetables:4204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 524.764410][T26839] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 524.796048][T26839] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 524.827472][T26839] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 524.833265][T26839] Node 0 DMA32 free:1251536kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15492kB inactive_anon:0kB active_file:13648kB inactive_file:160048kB unevictable:1536kB writepending:232kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:45980kB local_pcp:17672kB free_cma:0kB [ 524.867614][T26839] lowmem_reserve[]: 0 0 1 1 1 [ 524.872363][T26839] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 524.902394][T26839] lowmem_reserve[]: 0 0 0 0 0 [ 524.911570][T26839] Node 1 Normal free:3902548kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13196kB local_pcp:3444kB free_cma:0kB [ 524.944336][T26839] lowmem_reserve[]: 0 0 0 0 0 [ 524.949067][T26839] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 524.962603][T26839] Node 0 DMA32: 2*4kB (ME) 3*8kB (ME) 267*16kB (UME) 106*32kB (ME) 57*64kB (UME) 61*128kB (UME) 278*256kB (UME) 176*512kB (UME) 110*1024kB (UM) 2*2048kB (UM) 233*4096kB (UM) = 1251536kB [ 524.982034][T26839] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 524.993602][T26839] Node 1 Normal: 163*4kB (UE) 43*8kB (UME) 41*16kB (UME) 91*32kB (UME) 40*64kB (UME) 7*128kB (UME) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3902548kB [ 525.016406][T26839] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 525.026025][T26839] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 525.035763][T26839] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 525.045432][T26839] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 525.054933][T26839] 44828 total pagecache pages [ 525.059615][T26839] 0 pages in swap cache [ 525.064295][T26839] Free swap = 124996kB [ 525.068453][T26839] Total swap = 124996kB [ 525.072605][T26839] 2097051 pages RAM [ 525.076553][T26839] 0 pages HighMem/MovableOnly [ 525.081225][T26839] 424543 pages reserved [ 525.085980][T26839] 0 pages cma reserved [ 525.103411][T26852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6247'. [ 525.187804][T22998] tipc: Left network mode [ 525.304090][T26857] tipc: Started in network mode [ 525.309001][T26857] tipc: Node identity 5a771876ba2d, cluster identity 4711 [ 525.321273][T26857] tipc: Enabled bearer , priority 0 [ 525.384635][T26869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6252'. [ 525.509159][T26868] syzkaller0: entered allmulticast mode [ 525.575755][T26869] vlan2: entered promiscuous mode [ 525.580856][T26869] bond0: entered promiscuous mode [ 525.586231][T26869] bond_slave_0: entered promiscuous mode [ 525.627901][T26781] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.653310][T26781] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.663471][T26781] bridge_slave_0: entered allmulticast mode [ 525.671687][T26781] bridge_slave_0: entered promiscuous mode [ 525.680163][T26857] tipc: Resetting bearer [ 525.702633][T26856] tipc: Disabling bearer [ 525.731051][T26883] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6255'. [ 525.766410][T26781] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.785788][T26781] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.793078][T26781] bridge_slave_1: entered allmulticast mode [ 525.810413][T26781] bridge_slave_1: entered promiscuous mode [ 525.897574][T26885] 8021q: VLANs not supported on xfrm0 [ 526.046501][ T5150] Bluetooth: hci4: command tx timeout [ 526.068902][T26781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.150907][T26781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.198054][T26903] veth0: entered promiscuous mode [ 526.230809][T26902] veth0: left promiscuous mode [ 526.255523][T26781] team0: Port device team_slave_0 added [ 526.283331][T26781] team0: Port device team_slave_1 added [ 526.351527][T22998] hsr_slave_0: left promiscuous mode [ 526.370625][T22998] hsr_slave_1: left promiscuous mode [ 526.378304][T22998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.401186][T26922] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6268'. [ 526.405403][T22998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.410270][T26922] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6268'. [ 526.464191][T26923] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6269'. [ 526.563079][T22998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.571243][T22998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.620785][T22998] veth1_macvtap: left promiscuous mode [ 526.633078][T22998] veth1_vlan: left promiscuous mode [ 526.644487][T22998] veth0_vlan: left promiscuous mode [ 526.896748][T22998] pimreg3 (unregistering): left allmulticast mode [ 527.526317][T26781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.533397][T26781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.568782][T26781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.581040][T26929] kthread_run failed with err -4 [ 527.590575][T26931] netlink: 'syz.7.6270': attribute type 1 has an invalid length. [ 527.655118][T22999] net_ratelimit: 8 callbacks suppressed [ 527.655144][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 527.694810][T26781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.729868][T26781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.782565][T26781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.795955][T26958] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6277'. [ 527.834078][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 527.963274][T26958] hsr_slave_1 (unregistering): left promiscuous mode [ 528.001167][T26961] pim6reg1: entered promiscuous mode [ 528.006898][T26961] pim6reg1: entered allmulticast mode [ 528.129048][ T5150] Bluetooth: hci4: command tx timeout [ 528.182901][T26781] hsr_slave_0: entered promiscuous mode [ 528.222616][T26781] hsr_slave_1: entered promiscuous mode [ 528.230497][T26981] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6286'. [ 528.235041][T26781] debugfs: 'hsr0' already exists in 'hsr' [ 528.263573][T26781] Cannot create hsr debugfs directory [ 528.313062][T26974] bond1 (unregistering): Released all slaves [ 528.424342][T23001] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 528.452267][T26990] syzkaller0: entered promiscuous mode [ 528.462738][T26990] syzkaller0: entered allmulticast mode [ 528.519373][T22998] IPVS: stop unused estimator thread 0... [ 528.569882][T27000] Bluetooth: hci0: unsupported parameter 512 [ 528.588292][T27002] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6289'. [ 528.597384][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 528.613614][T27000] Bluetooth: hci0: invalid length 11, exp 2 for type 21 [ 528.634607][T27002] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6289'. [ 528.797017][T27012] xt_socket: unknown flags 0x50 [ 528.825934][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 528.835980][T27012] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.6293'. [ 528.958443][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 528.969636][T27021] netlink: 'syz.3.6295': attribute type 1 has an invalid length. [ 529.059617][T27025] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 529.105105][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 529.119545][T27032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6299'. [ 529.223900][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 529.383850][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 529.403076][T26781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 529.424620][T27044] netlink: 'syz.0.6304': attribute type 1 has an invalid length. [ 529.451589][T26781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 529.500496][T26781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 529.536854][T26781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 529.718693][T27063] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6311'. [ 529.731830][T27065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6310'. [ 529.745622][T27072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6311'. [ 529.964406][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 530.033653][T26781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.061757][T27082] netlink: 84 bytes leftover after parsing attributes in process `syz.6.6315'. [ 530.098926][T26781] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.123274][T22998] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.130444][T22998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.151715][T22998] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.158929][T22998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.180472][T27085] vlan2: entered allmulticast mode [ 530.186122][T27085] erspan0: entered allmulticast mode [ 530.189374][T27096] netlink: 'syz.6.6319': attribute type 1 has an invalid length. [ 530.201049][T27096] netlink: 'syz.6.6319': attribute type 2 has an invalid length. [ 530.209539][ T5150] Bluetooth: hci4: command tx timeout [ 530.654635][T27121] netlink: 'syz.3.6325': attribute type 23 has an invalid length. [ 530.723487][T26781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.827994][T26781] veth0_vlan: entered promiscuous mode [ 530.859208][T26781] veth1_vlan: entered promiscuous mode [ 530.909553][T26781] veth0_macvtap: entered promiscuous mode [ 530.949727][T26781] veth1_macvtap: entered promiscuous mode [ 530.979246][T27137] netlink: 'syz.3.6331': attribute type 1 has an invalid length. [ 531.108411][T26781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.169346][T26781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.229667][T23000] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.241014][T23000] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.270544][T23000] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.352470][T23000] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.624856][T23000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.664350][T23000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.744175][T23003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.752022][T23003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.814107][T27173] netlink: 'syz.7.6340': attribute type 58 has an invalid length. [ 532.736259][T27205] Cannot find set identified by id 65534 to match [ 532.848672][T27205] __nla_validate_parse: 9 callbacks suppressed [ 532.848690][T27205] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6348'. [ 532.889348][T27214] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6351'. [ 532.912268][T27214] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6351'. [ 532.942683][T23000] net_ratelimit: 17 callbacks suppressed [ 532.942701][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 532.965660][T27216] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6351'. [ 533.109541][T27221] netlink: 'syz.6.6353': attribute type 4 has an invalid length. [ 533.111396][T27222] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 533.139967][T27222] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 533.189402][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 533.302702][T27234] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6359'. [ 533.316405][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 533.443807][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 533.467305][T27241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6362'. [ 533.558530][T27245] netlink: 'syz.6.6363': attribute type 10 has an invalid length. [ 533.575941][T22998] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 533.598738][T27245] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6363'. [ 533.634269][T27245] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 533.649297][T27245] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 533.664201][T27245] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 533.705736][T27251] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6365'. [ 533.733973][T22998] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 533.746717][T27253] netlink: 'syz.3.6366': attribute type 4 has an invalid length. [ 533.784474][T27251] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6365'. [ 533.806422][T27251] openvswitch: netlink: Flow key attr not present in new flow. [ 533.806481][T27259] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6368'. [ 533.844160][T22998] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 533.955477][T22998] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 533.987476][T27265] 8021q: VLANs not supported on xfrm0 [ 533.992941][T27266] 8021q: VLANs not supported on xfrm0 [ 534.052200][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.054454][T27272] x_tables: duplicate underflow at hook 1 [ 534.078649][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.099663][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.134003][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.156020][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.171809][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.187803][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.221415][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.239931][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.251830][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.264854][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.275679][T27284] netlink: 'syz.1.6376': attribute type 11 has an invalid length. [ 534.286159][T27284] netlink: 'syz.1.6376': attribute type 5 has an invalid length. [ 534.295390][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.317080][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.330202][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.341810][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.360097][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.377236][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.403614][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.422660][T27289] syzkaller0: entered promiscuous mode [ 534.435434][T27289] syzkaller0: entered allmulticast mode [ 534.449231][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.484833][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.496082][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.507799][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.518215][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.528960][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.554018][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.568437][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.617474][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.668270][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.691373][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.701710][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.747409][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.776413][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.789183][T27312] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_1, syncid = 1, id = 0 [ 534.820002][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.861328][T27274] tipc: Enabling of bearer rejected, failed to enable media [ 534.968178][T27321] bridge0: port 3(batadv1) entered blocking state [ 534.975725][T27321] bridge0: port 3(batadv1) entered disabled state [ 534.982324][T27321] batadv1: entered allmulticast mode [ 535.028437][T27321] batadv1: entered promiscuous mode [ 535.054253][T27324] netlink: 'syz.3.6384': attribute type 12 has an invalid length. [ 535.075293][T27324] netlink: 'syz.3.6384': attribute type 12 has an invalid length. [ 535.111249][T23000] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.120733][T23000] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.134244][T23000] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.168943][T23000] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.222943][T27335] gretap1: entered promiscuous mode [ 535.243896][T27335] gretap1: entered allmulticast mode [ 535.405749][T27341] veth0_macvtap: left promiscuous mode [ 535.449677][T22998] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 535.459782][T22998] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 535.469747][T23001] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.480612][T27351] veth0: entered promiscuous mode [ 535.516844][T23001] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.535058][T27347] veth0: left promiscuous mode [ 535.539991][T23001] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.659008][T23001] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.844654][ T6858] IPVS: starting estimator thread 0... [ 535.943785][T27371] IPVS: using max 29 ests per chain, 69600 per kthread [ 536.278112][T27401] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 536.290518][T27401] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 536.419047][T27415] netlink: 'syz.1.6418': attribute type 11 has an invalid length. [ 536.679273][T27433] [ 536.681633][T27433] ====================================================== [ 536.688652][T27433] WARNING: possible circular locking dependency detected [ 536.695676][T27433] syzkaller #0 Not tainted [ 536.700082][T27433] ------------------------------------------------------ [ 536.707083][T27433] syz.1.6424/27433 is trying to acquire lock: [ 536.713142][T27433] ffffffff8f6396d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 536.722291][T27433] [ 536.722291][T27433] but task is already holding lock: [ 536.729660][T27433] ffff888146340b70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 536.738888][T27433] [ 536.738888][T27433] which lock already depends on the new lock. [ 536.738888][T27433] [ 536.749285][T27433] [ 536.749285][T27433] the existing dependency chain (in reverse order) is: [ 536.758289][T27433] [ 536.758289][T27433] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 536.766278][T27433] lock_acquire+0x120/0x360 [ 536.771305][T27433] _raw_spin_lock_bh+0x36/0x50 [ 536.776599][T27433] nr_rt_device_down+0x12a/0x720 [ 536.782051][T27433] nr_device_event+0x137/0x150 [ 536.787328][T27433] notifier_call_chain+0x1b6/0x3e0 [ 536.792964][T27433] __dev_notify_flags+0x18d/0x2e0 [ 536.798506][T27433] netif_change_flags+0xe8/0x1a0 [ 536.803964][T27433] dev_change_flags+0x130/0x260 [ 536.809329][T27433] dev_ioctl+0x7b4/0x1150 [ 536.814175][T27433] sock_do_ioctl+0x22c/0x300 [ 536.819288][T27433] sock_ioctl+0x576/0x790 [ 536.824135][T27433] __se_sys_ioctl+0xfc/0x170 [ 536.829261][T27433] do_syscall_64+0xfa/0xfa0 [ 536.834277][T27433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.840686][T27433] [ 536.840686][T27433] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 536.848499][T27433] lock_acquire+0x120/0x360 [ 536.853515][T27433] _raw_spin_lock_bh+0x36/0x50 [ 536.858796][T27433] nr_rt_device_down+0xa9/0x720 [ 536.864156][T27433] nr_device_event+0x137/0x150 [ 536.869424][T27433] notifier_call_chain+0x1b6/0x3e0 [ 536.875044][T27433] __dev_notify_flags+0x18d/0x2e0 [ 536.880578][T27433] netif_change_flags+0xe8/0x1a0 [ 536.886024][T27433] dev_change_flags+0x130/0x260 [ 536.891385][T27433] dev_ioctl+0x7b4/0x1150 [ 536.896224][T27433] sock_do_ioctl+0x22c/0x300 [ 536.901330][T27433] sock_ioctl+0x576/0x790 [ 536.906172][T27433] __se_sys_ioctl+0xfc/0x170 [ 536.911273][T27433] do_syscall_64+0xfa/0xfa0 [ 536.916287][T27433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.922698][T27433] [ 536.922698][T27433] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 536.930605][T27433] validate_chain+0xb9b/0x2140 [ 536.935890][T27433] __lock_acquire+0xab9/0xd20 [ 536.941077][T27433] lock_acquire+0x120/0x360 [ 536.946094][T27433] _raw_spin_lock_bh+0x36/0x50 [ 536.951381][T27433] nr_rt_ioctl+0x390/0xd50 [ 536.956310][T27433] sock_do_ioctl+0xdc/0x300 [ 536.961328][T27433] sock_ioctl+0x576/0x790 [ 536.966170][T27433] __se_sys_ioctl+0xfc/0x170 [ 536.971274][T27433] do_syscall_64+0xfa/0xfa0 [ 536.976296][T27433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.982697][T27433] [ 536.982697][T27433] other info that might help us debug this: [ 536.982697][T27433] [ 536.992917][T27433] Chain exists of: [ 536.992917][T27433] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 536.992917][T27433] [ 537.006740][T27433] Possible unsafe locking scenario: [ 537.006740][T27433] [ 537.014178][T27433] CPU0 CPU1 [ 537.019529][T27433] ---- ---- [ 537.024878][T27433] lock(&nr_node->node_lock); [ 537.029632][T27433] lock(nr_node_list_lock); [ 537.036730][T27433] lock(&nr_node->node_lock); [ 537.044002][T27433] lock(nr_neigh_list_lock); [ 537.048665][T27433] [ 537.048665][T27433] *** DEADLOCK *** [ 537.048665][T27433] [ 537.056897][T27433] 2 locks held by syz.1.6424/27433: [ 537.062085][T27433] #0: ffffffff8f639738 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 537.071571][T27433] #1: ffff888146340b70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 537.081223][T27433] [ 537.081223][T27433] stack backtrace: [ 537.087106][T27433] CPU: 0 UID: 0 PID: 27433 Comm: syz.1.6424 Not tainted syzkaller #0 PREEMPT(full) [ 537.087144][T27433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 537.087163][T27433] Call Trace: [ 537.087171][T27433] [ 537.087178][T27433] dump_stack_lvl+0x189/0x250 [ 537.087201][T27433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.087218][T27433] ? __pfx__printk+0x10/0x10 [ 537.087234][T27433] ? stack_trace_save+0x9c/0xe0 [ 537.087261][T27433] print_circular_bug+0x2ee/0x310 [ 537.087283][T27433] check_noncircular+0x134/0x160 [ 537.087306][T27433] validate_chain+0xb9b/0x2140 [ 537.087327][T27433] ? stack_trace_save+0x9c/0xe0 [ 537.087348][T27433] ? __pfx_stack_trace_save+0x10/0x10 [ 537.087370][T27433] ? stack_depot_save_flags+0x40/0x860 [ 537.087396][T27433] __lock_acquire+0xab9/0xd20 [ 537.087415][T27433] ? nr_rt_ioctl+0x390/0xd50 [ 537.087432][T27433] lock_acquire+0x120/0x360 [ 537.087447][T27433] ? nr_rt_ioctl+0x390/0xd50 [ 537.087466][T27433] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 537.087489][T27433] ? nr_rt_ioctl+0x390/0xd50 [ 537.087506][T27433] _raw_spin_lock_bh+0x36/0x50 [ 537.087524][T27433] ? nr_rt_ioctl+0x390/0xd50 [ 537.087541][T27433] nr_rt_ioctl+0x390/0xd50 [ 537.087562][T27433] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 537.087578][T27433] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.087603][T27433] ? apparmor_capable+0x137/0x1b0 [ 537.087622][T27433] ? capable+0x89/0xe0 [ 537.087639][T27433] ? nr_ioctl+0x1b1/0x3b0 [ 537.087665][T27433] sock_do_ioctl+0xdc/0x300 [ 537.087690][T27433] ? __pfx_sock_do_ioctl+0x10/0x10 [ 537.087718][T27433] sock_ioctl+0x576/0x790 [ 537.087742][T27433] ? __pfx_sock_ioctl+0x10/0x10 [ 537.087764][T27433] ? __fget_files+0x3a0/0x420 [ 537.087779][T27433] ? __fget_files+0x2a/0x420 [ 537.087795][T27433] ? bpf_lsm_file_ioctl+0x9/0x20 [ 537.087814][T27433] ? __pfx_sock_ioctl+0x10/0x10 [ 537.087835][T27433] __se_sys_ioctl+0xfc/0x170 [ 537.087856][T27433] do_syscall_64+0xfa/0xfa0 [ 537.087876][T27433] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.087896][T27433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.087912][T27433] ? clear_bhb_loop+0x60/0xb0 [ 537.087931][T27433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.087947][T27433] RIP: 0033:0x7fc64b38eec9 [ 537.087963][T27433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.087979][T27433] RSP: 002b:00007fc64c20f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 537.087997][T27433] RAX: ffffffffffffffda RBX: 00007fc64b5e5fa0 RCX: 00007fc64b38eec9 [ 537.088010][T27433] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000006 [ 537.088021][T27433] RBP: 00007fc64b411f91 R08: 0000000000000000 R09: 0000000000000000 [ 537.088032][T27433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.088043][T27433] R13: 00007fc64b5e6038 R14: 00007fc64b5e5fa0 R15: 00007ffd3bac4ee8 [ 537.088063][T27433] [ 537.388700][T27434] netlink: 'syz.6.6423': attribute type 1 has an invalid length. [ 537.477633][T27440] netlink: 'syz.6.6423': attribute type 10 has an invalid length. [ 537.486775][T27440] netlink: 'syz.6.6423': attribute type 10 has an invalid length. [ 537.596138][T27434] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 538.034016][T23001] net_ratelimit: 25 callbacks suppressed [ 538.034038][T23001] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 538.164096][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 538.273960][T22998] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 538.383910][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 538.494053][T22998] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 538.604747][T23001] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 538.713824][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 538.824524][T23001] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 538.943822][T22998] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 539.053805][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 539.495131][ T5150] Bluetooth: hci0: command 0x0c20 tx timeout [ 543.113793][ T2976] net_ratelimit: 35 callbacks suppressed [ 543.113814][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 543.235148][ T2976] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 543.343807][T23003] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 543.453806][T22998] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 543.563890][T23000] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 543.674119][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 543.784195][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 543.893956][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 544.003783][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 544.114166][T22999] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 544.453850][ T5150] Bluetooth: hci1: command 0x0406 tx timeout