last executing test programs: 3m3.212750364s ago: executing program 32 (id=653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000400)={'geneve1\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000032, 0x3, 0x80000000) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0xa1, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1815d1000000000000000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) socket(0x10, 0x803, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x28, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYRES8=r6], 0x0, 0x5b4230ff, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf739, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r8, 0x0, 0x3}, 0x18) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 2m22.947595949s ago: executing program 3 (id=1178): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r2, 0xfffffff6}, &(0x7f0000000180)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000080)=0x5, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c000280080008008100f3b0492521984f00000a000100aa"], 0x48}}, 0x0) 2m22.634374887s ago: executing program 3 (id=1180): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xec0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594012124fc60", 0x14}], 0x1}, 0x1000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc240}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r1], 0x158}, 0x1, 0xba01}, 0x44) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="2f000000180010080400006d2bd73806f56d002fc6c3fea2a3eaf80b48bd726ef7856f5dd720b5f337fb98a79dcf984b31742badeec75a98cd4e4409fe560e751d55314428625e96abdb400db4055acb671a7ebc2e45c59281ecaeadc4480af167d97c2f8dc0df80ca227b4db360346a73", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="8500ff030000000000000000e56dd4de7071eb912600000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r6, 0x8b1a, &(0x7f0000000040)) close(r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m20.502815004s ago: executing program 3 (id=1191): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1, 0xfffffffd, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0x15}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}, @IFLA_MTU={0x8}]}, 0x44}, 0x9}, 0x0) 2m20.301787247s ago: executing program 3 (id=1193): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) close(0x3) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "826df33fcc14161cfe6498bd3393aeb3"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x44, r3, 0x1, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0) 2m19.926597423s ago: executing program 3 (id=1194): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'ip6gre0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x8020, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) sendmsg$nl_generic(r1, 0x0, 0x200008c0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000007c0), &(0x7f0000000800)=0x30) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r7, &(0x7f0000000240)={0x2, @long}, 0x14) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x2004c085) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x2, &(0x7f0000000000)=""/31, &(0x7f0000000040)=0x1f) listen(r6, 0x204) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) recvmmsg(r4, &(0x7f00000061c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1}, 0xfe}], 0x1, 0x141, 0x0) 2m19.748605923s ago: executing program 2 (id=1197): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xffff, 'syz0\x00', @default, 0x4, 0x80002, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f0000000200)={0x1}) r2 = socket$rxrpc(0x21, 0x2, 0x2) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0xfffffffffffffda4, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f00000000c0)='\x00e\xa9f\x9e\xbbT}\x15\x91H\x93sW\x94\b\xa2\xf0Es&\xc7\xf8\x8c\xc8\xb1&\x12\xebS\x98\xf3C]A\xf5$\x1e\xf5g|a\xc0\r\x00\x00', 0xff1e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'geneve1\x00', 0x400}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xffff, 'syz0\x00', @default, 0x4, 0x80002, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) (async) socket(0x40000000015, 0x5, 0x0) (async) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f0000000200)={0x1}) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0xfffffffffffffda4, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f00000000c0)='\x00e\xa9f\x9e\xbbT}\x15\x91H\x93sW\x94\b\xa2\xf0Es&\xc7\xf8\x8c\xc8\xb1&\x12\xebS\x98\xf3C]A\xf5$\x1e\xf5g|a\xc0\r\x00\x00', 0xff1e) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'geneve1\x00', 0x400}) (async) 2m19.558569562s ago: executing program 2 (id=1198): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_VERSION={0x5, 0x6, 0xc}]}}}]}, 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x24048055) 2m19.522082907s ago: executing program 2 (id=1199): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000880)={0x8, 0x5, 0x7fff, 0x5, 0x8, 0x1a, 0x17, "d8f693ddfddfd88bfea2a688941b79b871c43f0d", "4e311600"}) 2m19.414898473s ago: executing program 2 (id=1200): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) splice(0xffffffffffffffff, &(0x7f0000000000)=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x6, 0x1, 0x0, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x4c}}, 0x0) 2m19.11877389s ago: executing program 2 (id=1201): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711010000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r0, 0x1, 0xffffffff, 0x5dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r4}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x20044800) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000140)={&(0x7f00000002c0)=""/217, 0xd9}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 2m19.060719435s ago: executing program 2 (id=1202): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r2, 0x0, 0x3}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m18.967993183s ago: executing program 3 (id=1203): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='rpc_stats_latency\x00', r1, 0x0, 0x8001}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r3, 0x0, 0xf}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0x18c, 0x148, 0xd0, 0x0, 0x168, 0x2a8, 0x2a8, 0x168, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @remote, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0x2, 0x3, 0x7, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xee) syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x88, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x88, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000580)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd2b, 0x25dfdbfd, {{@in=@empty, @in6=@remote, 0x4e24, 0x2, 0x4e22, 0x0, 0xa}, 0x0, 0x426d722e34e63eff}, [@policy_type={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) sendmsg$nl_xfrm(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000580)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd2b, 0x25dfdbfd, {{@in=@empty, @in6=@remote, 0x4e24, 0x2, 0x4e22, 0x0, 0xa}, 0x0, 0x426d722e34e63eff}, [@policy_type={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 2m11.765037192s ago: executing program 33 (id=1152): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x3f, 0x3f6, 0x100, 0x70bd25, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x48000}, 0x48000) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000ac0)={0x10, 0x0, 0x25dfdbfb, 0x8000}, 0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)=@migrate={0x50, 0x21, 0x4, 0x70bd29, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4e22, 0x8, 0x4e20, 0xdc, 0x2, 0xa0, 0x80, 0xc}, 0x6e6bb4, 0x1}}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x3f, 0x3f6, 0x100, 0x70bd25, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x48000}, 0x48000) (async) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bind$netlink(r1, &(0x7f0000000ac0)={0x10, 0x0, 0x25dfdbfb, 0x8000}, 0xc) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)=@migrate={0x50, 0x21, 0x4, 0x70bd29, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4e22, 0x8, 0x4e20, 0xdc, 0x2, 0xa0, 0x80, 0xc}, 0x6e6bb4, 0x1}}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) 2m3.622338133s ago: executing program 34 (id=1202): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r2, 0x0, 0x3}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m3.561306818s ago: executing program 35 (id=1203): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='rpc_stats_latency\x00', r1, 0x0, 0x8001}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r3, 0x0, 0xf}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0x18c, 0x148, 0xd0, 0x0, 0x168, 0x2a8, 0x2a8, 0x168, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @remote, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0x2, 0x3, 0x7, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xee) syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x88, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x88, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000580)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd2b, 0x25dfdbfd, {{@in=@empty, @in6=@remote, 0x4e24, 0x2, 0x4e22, 0x0, 0xa}, 0x0, 0x426d722e34e63eff}, [@policy_type={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) sendmsg$nl_xfrm(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000580)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd2b, 0x25dfdbfd, {{@in=@empty, @in6=@remote, 0x4e24, 0x2, 0x4e22, 0x0, 0xa}, 0x0, 0x426d722e34e63eff}, [@policy_type={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 1m46.742067391s ago: executing program 7 (id=1384): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)={0x1c8, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x3}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x7}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xbee2}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x1}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x80000001}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x400}, {0x8, 0x13, 0xe}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff1}, {0x6, 0x11, 0x75}, {0x8, 0x13, 0x3}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa00000}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0xfffffffb}, {0x5, 0x14, 0x1}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x80}, 0x2000c801) r5 = socket(0x22, 0x2, 0x3) ioctl$IMGETCOUNT(r5, 0x80044943, &(0x7f00000003c0)) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000980)={0x18c, 0x0, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x39}}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x8000, 0x2, 0x40, 0x4, 0xb, 0x9]}, @CTA_NAT_SRC={0xc4, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0x18c}, 0x1, 0x0, 0x0, 0x44000}, 0xc0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200000d0000f0ffffffff050001080006040002ffffffffffffac1414bbbbbbbbbbbbbb7f000001"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r6], 0x38}}, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x1ec, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x151}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "433d7fcccfb0d55dd349e977543836fdffd2e7abc3"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x15ae}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "bc765319d1f63e2a76d5921b60ad8aa705ee8824110dd082838ef988f911a68d"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x24048044}, 0x20008015) sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x44040) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', r6, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 1m46.265814461s ago: executing program 7 (id=1391): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000440)=0x1, 0x4) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r2, 0x8919, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000200), 0xe) listen(r3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000100), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x15) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="8bdfd8ec37aa8d0a00c9c0e4185c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) socket(0x2a, 0xa, 0xd) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0xffffffff) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) sendmsg$netlink(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000ac0)={0x10, 0x2a, 0x800, 0x70bd27, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x2000c010}, 0x20000000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r8, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) close(r8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000000050000000000c4000000b7000000000000009500030000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="610cbe220bde2d65d587f126d91b8d66ab04b5b1caac7d8912a5d37a1e177541ca4237a751091f1e06afcb5ad6111682a41da290f6b6dd04641f75710e9827dd70feada14a86ce3e65e031c39110649d416f4566859e3360a21f807023a4630b8c0810540d5493264b8c2d7cd4425a7466a055fe1c006195331d3e716d96f06b8402f16a75636670a85aad0a8f76d933fd2bed4e505f27bad53706390a946b1308a4619d950c460e5f23f28a9ecb26b27c7dcbb643161f24a42c82724c1dff743e4eacee5dbe83bd3c92", 0xca}, {&(0x7f0000000280)="0a05ad81a05ae9f8f0cd29708603e4691c2a861920d05b06f4c357422999a2f4e5d154770d5e4735f71281313832e773eab7d10a9cbe1fd0bf895e1975871df6db80c19c595a196867b1bb583769f3ceec3ad2f33b8aa3a85898af8dd2123678ed1c43e7aa3229483d74bdbf65a54f7c8806f30c044fcef80773159faf1ac8c7f2216b6add9efa9ef8aae13f33b6ba54b03b1c8a7c4ba451022252ab9669c193e4c9f6f2180cda37935182d855089c290cad131110b6a42f957ab4558a6a2908726aa61fb13a8d9ddcaeb2a2739b177dc92d253f02af095192a234a21c28cdfc8be64bdd4b52245c5efdb9e7bd9c6aa10888", 0xf2}], 0x2, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xb, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000008c66a540226b36421e967300000061108000000000009500000000000000a53954fc613d77d535f7004aae09f41335b78da899"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1m45.846632975s ago: executing program 7 (id=1393): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) (async) listen(r1, 0x0) (async) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) (async) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001280)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (rerun: 32) 1m44.826686786s ago: executing program 7 (id=1400): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x4000) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) syz_emit_ethernet(0xb3, &(0x7f0000000100)={@random="db1916cd6045", @random="347eea2a239a", @void, {@x25={0x805, {0x3, 0x2, 0x5, "a5e9867dadda8b573624c272a6b202576ce2fa69831225183c11007f118f411e657c971ca47cb4b31892b4d860ee765c234e622d58664c8e084d48a4c4ae282d4fc1bb6fb2ca7332e4cde7aaea975e5f5d1f11cbe19b844288e1985fe5aaade79b93407f0b75cf7ffd7b3ee429e15dc483e8eb8dd272e34fb4f66277387dee8c21362133d6627a1fdcb12717ccb360868f31c028713127fe98f8a18621071c969928"}}}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="00224354b31132000000000000000400"/31], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40014) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)={0x65, r2, 0x1, 0x70fd28, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x10) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 1m43.834639635s ago: executing program 7 (id=1403): syz_emit_ethernet(0x76, &(0x7f0000001100)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa8100000086dd60b33883003c3a0020010000000000000000000000000002fe8000000000000000000000000000aa03009078000000006074cd7b00008800fc010000000000000000000000000000ff010000000000000000000000000001a7214c55d1055a616515f5a7"], 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0xdb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000300000000000000050000a3492b469660008ec7a1bd4c00000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)={@ifindex, r1, 0x11, 0x0, 0x0, @void, @value=r4}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) socket$packet(0x11, 0x3, 0x300) socket(0x11, 0x3, 0x4000000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x5) (async) listen(r5, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async) writev(r11, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) socket(0x10, 0x3, 0x7) 1m43.826692397s ago: executing program 7 (id=1409): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x62, &(0x7f0000003480)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x28, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @dev={0xfe, 0x80, '\x00', 0x3a}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r1, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m28.839447831s ago: executing program 36 (id=1409): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x62, &(0x7f0000003480)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x28, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @dev={0xfe, 0x80, '\x00', 0x3a}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r1, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m24.237886632s ago: executing program 8 (id=1534): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000007b0bafe200040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) (async) connect$inet6(r0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "03735b83c918c2fe", "343bb977dd373a5f086ebb08698128e9", 'gP)V', "a187dfb0f4a88a44"}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async) listen(r2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r5 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) (async) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) (async) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r5) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) (async) r8 = openat$cgroup_procs(r6, &(0x7f0000002a40)='cgroup.procs\x00', 0x2, 0x0) pread64(r8, &(0x7f0000000040)=""/75, 0x4b, 0x3) (async) sendfile(r7, r7, 0x0, 0x401) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r9, &(0x7f0000002a40)='cgroup.procs\x00', 0x2, 0x0) (async) pread64(r5, &(0x7f0000000100)=""/70, 0x46, 0x407) 1m24.054682627s ago: executing program 8 (id=1535): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x150, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x114, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xec, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x88, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x59, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x30, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FD={0x8}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYRES16=r1], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 1m23.894005387s ago: executing program 8 (id=1537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b02"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c0000000d0a09000000000c000b4000000000000067c3080003300000000008000340000000011400000011000100000000000000000000004db8b5e21398f01700"/100], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001004000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="020000000100"/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r3, 0x0, 0x0}, 0x10) ioctl$int_in(r3, 0x5421, &(0x7f00000002c0)=0x5) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) 1m23.694601779s ago: executing program 8 (id=1540): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000000903000000000000000000070000000900010073797a3000000000640002001400018008000100e000000208000200000000000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) 1m21.005818193s ago: executing program 8 (id=1553): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept$alg(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000011c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0xc554}]}}}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) recvmsg(r2, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}, {&(0x7f0000006000)=""/4096, 0x1000}], 0x2}, 0x40000102) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r6}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) r7 = accept4(r4, 0x0, 0x0, 0x800) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000800)="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", 0x801}], 0x1) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000340)="1a56fed79de45b0d48251382a8ea364b", 0x10}, {0x0}], 0x2, &(0x7f0000000680)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4001044}], 0x1, 0x40088c4) sendmmsg$inet(r2, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="ec0767", 0x3}, {&(0x7f0000000400)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2bf920be733d5e21ac510b279753142e15c366bd567563a39dc8a1f82c12b5e23e4297fa70d70110fd408097aa1b9c560dae166223968985d838c4dc5cf0b9122d7df3e79c64af3b05fe3dd65bdba33b66aa6e67e71127deb6cab6c7b1ee2858dc8e2aed6de1a8e07dd75b017df1bd495c59812ac39c2066b761f596a88ece33728617f756fd136f6b2819c27e68ea969881ae13899dd2fe4193b18c0210a47dd57b02240ed5fbe3b902caf598599", 0xcf}, {&(0x7f00000000c0)="80819a406c4532b29ab729dd0e4b12cffeb3347d8b69fb0fd7cbd350f01b17ad694672000cf10c8ed49156aa8617da1d70dde03283db4bd40fafaf2acecd0b59707d0b4ffbe1d938673cfc2099646e761ddded8cd96605ce080e313344ca123c103fe1bcf68fd4f2890418d9b67537405b0bc2889546f05bd712495b432d4bce477d5aa2407923b2fff8bf1cfce5b74dd7d77c2e0d02", 0x96}, {&(0x7f0000000200)="2cad1cb24db0481cba0fe4efcc9b012f9976ea7f782c100ce30fca34ffa9c98e5c24851bc899a730ff662353fa6cad61e53be4c5d14f555ef2a1a9e7dfca05c8532236694df200cd9fba820c02cec743286b58f4380acfec90d09a8f38dee5976a2b5204b2", 0x65}], 0x4}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000500)="25bbf953d9e63a86502326a91bcb452d049906b8663a98ffd6eb4a9471a6b34a725ae193d99db3d460f7bc4aed2217ef4f96211bcb85f3c5b29b0357cb5526a2bf026fce752e9453032fe77673f0bf89cd0d842e437d5d7c0a6af5493a6160e4019655e7ec27c1566b7e5c625149dc633e4c132a9118796e0dae4b094d7030d37e3b268c2da4c0716e9c9da8be9ad79d176059ed950c425404eee5c70a91acb3a80fa82c61d5637be14a66056edc33e8111e50e43eadc326d80dd63563cf75b7dc86f5aa26ac30bc812b0a4244625753", 0xd0}, {&(0x7f0000000600)="c88b24d13e46650476bd62b2a4a9e5258baaa2b1b66b01e3187aa58a5113890ed7917a083d5b4cc77aca9afa9e", 0x2d}, {&(0x7f0000000640)="2d8535ae0c438abd0bc4f58c4e3baea8dc8a0248bafcc0f45d9fce4d", 0x1c}, {&(0x7f00000006c0)="28af22ee5579386fc97a788ae2cb0a93652970304dd5154e567b867e4fc749d42f1bb962067560f20849897defddcc9d10bae0452d478880ba507183c78b5c1efe9f45f0e7a4ef0b76e656c836f13aab1d6dc20a979f369d0138ae25598c12691ae036ea88f7795caa2de286d76cd09ed58bfaa4c19d5ffa7504ae8da3e6cf4ba524ffd11c8235c0e5759bfd1bb1cc82c61e63a1316e3e6ae0acf6c9b445316d617d300df440817a4e505915ce6d77f883da6173830838af380d13e9c78300aad57a78d4408c4e2a55d011be914c1b93659eb7bbaf94c63636e2c14334e77699a4d77138aa08a37f9fc2", 0xea}, {&(0x7f0000000800)="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", 0xfb}, {&(0x7f0000000900)="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", 0xb49}], 0x6}}], 0x2, 0x8058) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r7) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000001480)={0x14c, r8, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4048080}, 0x8080) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x0, 0x0, 0x200}, 0xc) 1m20.579007435s ago: executing program 8 (id=1556): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000007c0)={0x0, 0xfffffffffffffe77, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r3, 0x1, 0xfffffffc, 0x0, {{}, {}, {0x1, 0x13, @udp='udp:syz1\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)=@req={0xfe, 0xe, 0xb, 0x2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r4}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m14.650533369s ago: executing program 9 (id=1581): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x80000001, 0x7fffffff, 0xb3a, 0x48208, r1, 0xffff0000, '\x00', 0x0, r1, 0x1, 0x1, 0x5, 0x2, @value=r1, @void, @void, @value}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x20044000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x13, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r7) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r8, 0x5, 0x40000000, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2008c0d4) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0xea60}) write$cgroup_int(r1, &(0x7f0000000040), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000000100)={0x4}) 1m14.54643473s ago: executing program 4 (id=812): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000400), 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8994, &(0x7f0000000200)={'bond0\x00'}) 1m12.953844769s ago: executing program 9 (id=1585): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @remote}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) 1m11.94704607s ago: executing program 9 (id=1590): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="6c00000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3100000000200007800c000180087a14b4f6a6ddd774ad0a05e300080000000000f76838c3eaef7fa2af2fe24748e15ec608000640000000000500050002000000050001000600"/139], 0x6c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbmod={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001500)=""/4073, 0xe7c}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x2}, 0x40000020) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) (async) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e1f, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}]}, &(0x7f0000000400)=0x4) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e1f, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}]}, &(0x7f0000000400)=0x4) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0xd1a}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d60a00000000000061110c93f0f1d86d925524000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d60a00000000000061110c93f0f1d86d925524000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x40, 0x40, 0xb9a, 0x9, {{0x21, 0x4, 0x3, 0x6, 0x84, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @loopback, {[@timestamp_prespec={0x44, 0x14, 0x50, 0x3, 0xe, [{@rand_addr=0x64010102, 0xac}, {@multicast1, 0x4}]}, @timestamp_prespec={0x44, 0x14, 0xde, 0x3, 0x7, [{@broadcast, 0x8}, {@remote, 0x400}]}, @rr={0x7, 0x3, 0xec}, @timestamp_addr={0x44, 0xc, 0x7e, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x4}]}, @cipso={0x86, 0x32, 0x2, [{0x6, 0x12, "40adfdb06881ce2d05c22df3365ac287"}, {0x6, 0xc, "a704b5c75f9025b55169"}, {0x6, 0x2}, {0x1, 0xc, "f01a54531c510e2b57b2"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x40, 0x40, 0xb9a, 0x9, {{0x21, 0x4, 0x3, 0x6, 0x84, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @loopback, {[@timestamp_prespec={0x44, 0x14, 0x50, 0x3, 0xe, [{@rand_addr=0x64010102, 0xac}, {@multicast1, 0x4}]}, @timestamp_prespec={0x44, 0x14, 0xde, 0x3, 0x7, [{@broadcast, 0x8}, {@remote, 0x400}]}, @rr={0x7, 0x3, 0xec}, @timestamp_addr={0x44, 0xc, 0x7e, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x4}]}, @cipso={0x86, 0x32, 0x2, [{0x6, 0x12, "40adfdb06881ce2d05c22df3365ac287"}, {0x6, 0xc, "a704b5c75f9025b55169"}, {0x6, 0x2}, {0x1, 0xc, "f01a54531c510e2b57b2"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYRESHEX=r6, @ANYRES32], &(0x7f00000008c0)=""/192, 0xc9, 0xc0, 0x0, 0x2, 0x10000, @value}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x8bdb, 0x3d9, 0x7fff, 0x20121, 0xffffffffffffffff, 0x9, '\x00', r7, r8, 0x4, 0x4, 0x3, 0x5, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r9, @ANYRES32=r6, @ANYBLOB="040000090000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)={0x14, 0x1d, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x82, &(0x7f00000001c0)={r13, 0x0, 0x3ff}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x82, &(0x7f00000001c0)={r13, 0x0, 0x3ff}, 0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r13, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24000004}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3b, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x8001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 1m10.578644907s ago: executing program 9 (id=1594): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x39}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=0x1, 0x16, 0x0, 0x1, &(0x7f0000000100)=[0x0], 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0}, 0x40) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup=r3, r0, 0x1, 0x200c, 0x0, @value=r4, @void, @void, @void, r2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r5, 0x2, {0x0, 0x0, 0x4}, 0x1}, 0x18) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x48050}, 0x48881) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000070000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c000240000000000000008108000340fffffffd0c0001400000000000000007"], 0xb8}}, 0x0) 1m10.438754802s ago: executing program 9 (id=1595): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r2, &(0x7f00000066c0)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x5efe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002640)=ANY=[@ANYRESHEX=r0], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x8844) 1m10.335695583s ago: executing program 9 (id=1596): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet_icmp(0x2, 0x2, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r4, 0x0, 0x3}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001240)={0x3c, r9, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040005}, 0x895) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) socket$inet(0x2, 0x2, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x40) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r4, 0x0, 0x3}, 0x18) (async) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001240)={0x3c, r9, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040005}, 0x895) (async) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async) 1m5.433153829s ago: executing program 37 (id=1556): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000007c0)={0x0, 0xfffffffffffffe77, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r3, 0x1, 0xfffffffc, 0x0, {{}, {}, {0x1, 0x13, @udp='udp:syz1\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)=@req={0xfe, 0xe, 0xb, 0x2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r4}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m3.589489792s ago: executing program 4 (id=812): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000400), 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8994, &(0x7f0000000200)={'bond0\x00'}) 55.271587868s ago: executing program 38 (id=1596): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet_icmp(0x2, 0x2, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r4, 0x0, 0x3}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001240)={0x3c, r9, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040005}, 0x895) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) socket$inet(0x2, 0x2, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x40) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r4, 0x0, 0x3}, 0x18) (async) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001240)={0x3c, r9, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040005}, 0x895) (async) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async) 44.00618243s ago: executing program 4 (id=812): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000400), 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8994, &(0x7f0000000200)={'bond0\x00'}) 31.296902216s ago: executing program 4 (id=812): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000400), 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8994, &(0x7f0000000200)={'bond0\x00'}) 16.645643355s ago: executing program 4 (id=812): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000400), 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8994, &(0x7f0000000200)={'bond0\x00'}) 4.797509714s ago: executing program 6 (id=2058): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@loopback, @in6=@empty, 0x4e22, 0x8000, 0x4e20, 0x5, 0xa, 0x20, 0x0, 0x0, r2, 0xee01}, {0x5, 0x3, 0x7, 0x80000000, 0x1, 0xac, 0x9, 0x2}, {0x4, 0x0, 0x100, 0x6e}, 0x2, 0x6e6bb0, 0x2, 0x0, 0x3, 0x1}, {{@in6=@loopback, 0x4d4, 0x6c}, 0xa, @in6=@remote, 0x0, 0x0, 0x2, 0x5b, 0x3, 0x8000}}, 0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xe6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x20000001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xc5f, 0x4f}}}}, [@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004095}, 0x24000801) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xc0, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0xb}}}}, [@NL80211_ATTR_FRAME_MATCH={0x98, 0x5b, "714ae4618db0ed185b6b7be4556bcb34fd899fba62cec3dfe0d7a8cc32a55e72b8d28e161c893b14f0054a9e4afa5d0ed98ecc80f6b38e97d7e39ff0987642734e6ba251615ea22fbd6c63548e64b285a50dd3c322511452ddd6d272b11e15cb6379eddfd01adf66754f470bf0fb455712b7b1be9dbff078c7a5eb5440191bb2f6043ef208a05615cf052f5dbfa9057d5cc694dd"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x8000881) sendmsg$inet(r1, &(0x7f0000000cc0)={&(0x7f0000000680)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f0000000b80)=[{&(0x7f00000006c0)="957ad90f5b9cd99bb9667ca107b12504f699a352d88ec3bbaa9d6be64158137ed6d9924837606f81ac17110c057b5bc36af474a8cfdd517e6cccff3f671fa1b98893b3a4464dc4dccbbeb6cdd208b25fba9fa3134d649a95e867a558158918cfe8bf4cc8cd569116f231946e58d2f622111bb5276a21b0e0ef74726ee2351e670a81d897db3afe00e62054ded54171f42491958196c399d64ce85c37c29662c2b3efe0376b91ef12c08fa34b7156367527ed99d45ba2291ad4ae5d223952048c45c063050f017e48e01bca12dea49066e0943d62a434cca24acb34a11bb7b0f122ff081f46efe38ea25ea9eca0b73c", 0xef}, {&(0x7f00000007c0)="0883f47b1364cc724c1a200081af47f33d728bb84976", 0x16}, {&(0x7f0000000800)="ecced64c94f616b18e064e212b9e97a44e394e67e113d7ea103ca06025ba50bab6fc286c08d649ad9f62cd9df5b1590dec", 0x31}, {&(0x7f0000000840)="d86247db9a15ed9f3bfc4f9be20711309483c30e37141ef543cef32d4267fabd637e460d88b9d34bfa3eede9687d893b2f03b69d051e37f60ae34f101603ca1ddb849ecca240c58d2cc444df3ea3e0bfbe226d509b77bb12a7cd19c6b2508d14ff0b411bd09687c8e37596e2b9459c252e42a9a26ecf42748e035905e5bfc0c1d9c6884c3c03190f8c6e631310a7df60d84f67117858ecd750ba923adfdd421d7e46b1af1dc91a8413ae3bc77af82d6e61b0bfbef9980e95cee2e378c59e96bb7a6731b65e99c48143c18b1b51977cc6168c4fb10f0413e00b8719315f", 0xdd}, {&(0x7f0000000940)="20a8fb4675f2861ae633ae19cde6076636884e3865d5b6d9bd444a5f6d7fd649ff81c9cb75960530e61eb149c5ed54ce979241327f8dc5e4de99d213371f3a00c50f5cd26ad3eebaafa94a9534f38dfeb3fc2298e5167d8ff697a9d32ac19008120996ffd4658eb8a322f55b16925e8d87cff9479b809244faf8c383475e45994852d51297e83b97de6683e698bb03edce9fae556835311cb14b1aeef7", 0x9d}, {&(0x7f0000000a00)="0ded8e7170c5605866c098c75db7b5e2d2f47bb0b65db3f9fe00e1d1f546c6476b5a27ffedb256edbe710f7010214e37410fdb3245e062f1d1fc0a7289105aef215090f62a8a8721555d852ee91bd40ce26801051200c2de55f11fad55a49c090bd6ef54c011825bc02751", 0x6b}, {&(0x7f0000000a80)="56987d", 0x3}, {&(0x7f0000000ac0)="ebaabe2965b16750358496f98835916e7e54b9447c1bee36ff24bb4b7216894cc0f0aa69fd586acb69c56e03158ad0b3bd37d63cf6fdcabee10e6ccff6dcc0ead9b8f51959464e98cf825b6f118be732d58577a249475160d0532d99df", 0x5d}, {&(0x7f0000000b40)="61a203836afc30e260106f36f0cfaa935d891fcd414994a58b588ed91c0b610c27b5de7e66d193c54d9378676c14ac360f3b802b5a", 0x35}], 0x9, &(0x7f0000000c40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x48}, 0x44) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x1) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000e40)={'wg2\x00'}) recvmmsg(r7, &(0x7f0000001240)=[{{&(0x7f0000000e80)=@nfc, 0x80, &(0x7f0000001100)=[{&(0x7f0000000f00)=""/225, 0xe1}, {&(0x7f0000001000)=""/242, 0xf2}], 0x2, &(0x7f0000001140)=""/244, 0xf4}, 0x7f}], 0x1, 0x12100, &(0x7f0000001280)={0x77359400}) clock_gettime(0x0, &(0x7f0000001700)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000016c0)=[{{&(0x7f00000012c0)=@caif=@dbg, 0x80, &(0x7f0000001580)=[{&(0x7f0000001340)=""/140, 0x8c}, {&(0x7f0000001400)=""/34, 0x22}, {&(0x7f0000001440)=""/95, 0x5f}, {&(0x7f00000014c0)=""/76, 0x4c}, {&(0x7f0000001540)=""/27, 0x1b}], 0x5, &(0x7f0000001600)=""/145, 0x91}, 0x61}], 0x1, 0x41, &(0x7f0000001740)={r9, r10+10000000}) r11 = accept$inet6(r1, &(0x7f0000001780)={0xa, 0x0, 0x0, @dev}, &(0x7f00000017c0)=0x1c) ioctl$sock_inet6_SIOCSIFDSTADDR(r11, 0x8918, &(0x7f0000001800)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x49, r2}) r12 = socket(0x1a, 0x6, 0x80000001) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x4c, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4a}, @void, @val={0xc, 0x99, {0x6, 0x6f}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c00)={0x6, 0x15, &(0x7f0000001980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x64ff}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @jmp={0x5, 0x1, 0xc, 0x3, 0xc, 0x40, 0x4}]}, &(0x7f0000001a40)='syzkaller\x00', 0xf6, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001ac0)={0x0, 0x0, 0x100, 0x7}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001b00)=[r12, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001b40)=[{0x4, 0x5, 0xa, 0xc}, {0x3, 0x2, 0x9, 0x4}, {0x3, 0x5, 0xa}, {0x0, 0x3, 0x8}, {0x0, 0x2, 0x9, 0x9}, {0x3, 0x4, 0x7, 0x1}, {0x4, 0x3, 0x10, 0x6}, {0x2, 0x5, 0x7, 0x6}, {0x0, 0x3, 0x2, 0x6}], 0x10, 0xffffffff, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000001cc0)=r13, 0x4) r14 = accept4$bt_l2cap(r12, &(0x7f0000001d00)={0x1f, 0x0, @none}, &(0x7f0000001d40)=0xe, 0x80800) getsockopt$bt_BT_RCVMTU(r14, 0x112, 0xd, &(0x7f0000001d80), &(0x7f0000001dc0)=0x2) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r12, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x28, 0x140b, 0x200, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x28}}, 0x8010) 4.702388482s ago: executing program 1 (id=2059): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2e8, 0x0, 0x0, 0x0, 0x7f}]}, &(0x7f00000000c0)='GPL\x00', 0x10, 0x6b, &(0x7f0000000100)=""/107, 0x40f00, 0x6b, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x5, 0x5, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000240)=[{0x4, 0x2, 0xb, 0x2}, {0x5, 0x2, 0xa, 0x5}, {0x3, 0x1, 0x5, 0x7}, {0x4, 0x5, 0xf}, {0x1, 0x4, 0xe, 0xa}, {0x1, 0x4, 0xa, 0x3}], 0x10, 0x401, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=0xffffffffffffffff, 0x10, 0x0, 0x7fff, &(0x7f0000000380)=[0x0], 0x1, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x1e, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r3, r0, 0x23, 0x20, 0x0, @void, @void, @void, @value=r4, r2}, 0x20) socket$packet(0x11, 0x2, 0x300) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x58, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x8, 0xd58, 0xcca, 0x8, 0x8, 0x3ff, 0x800]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800}, 0x4) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xe8, 0x2, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}, @CTA_TUPLE_REPLY={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_FILTER={0x44, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x420}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x60}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x28c}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x148}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x880}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x4, 0x6]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20008000}, 0x4c010) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000b00)={0x2f, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x7}]}, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0x7, 0x0, r3, 0xffffffff, '\x00', r5, 0xffffffffffffffff, 0x3, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000bc0), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d40)={r7, 0x20, &(0x7f0000000d00)={&(0x7f0000000c00)=""/132, 0x84, 0x0, &(0x7f0000000cc0)=""/56, 0x38}}, 0x10) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000d80)=0xffffffffffffffff, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000dc0), 0x101000, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000f40)={'tunl0\x00', &(0x7f0000000e00)={'syztnl0\x00', r5, 0x7800, 0x10, 0x0, 0x7, {{0x3d, 0x4, 0x3, 0x8, 0xf4, 0x65, 0x0, 0x4, 0x4, 0x0, @local, @loopback, {[@cipso={0x86, 0x38, 0x2, [{0x7, 0xc, "b4754e7c1bb1b52f999b"}, {0x6, 0xc, "3dd2addc3c33c3407041"}, {0x5, 0x5, "313ffa"}, {0x2, 0x4, '|A'}, {0x1, 0x11, "541ba1a6ccc5838b9a225e90adc897"}]}, @rr={0x7, 0xf, 0x98, [@broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x17}]}, @cipso={0x86, 0x21, 0x0, [{0x0, 0x12, "d50d2672adea1dce618c8622a72a81c9"}, {0x6, 0x5, "5b7dd8"}, {0x0, 0x4, "9f63"}]}, @timestamp_prespec={0x44, 0xc, 0xc4, 0x3, 0x1, [{@empty, 0x8001}]}, @generic={0x94, 0x8, "b92b6c019a39"}, @rr={0x7, 0x27, 0xcf, [@multicast2, @dev={0xac, 0x14, 0x14, 0x32}, @multicast2, @multicast1, @remote, @loopback, @multicast2, @empty, @broadcast]}, @ssrr={0x89, 0xf, 0x54, [@empty, @rand_addr=0x64010100, @remote]}, @noop, @ssrr={0x89, 0x1f, 0xc5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @loopback, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @rr={0x7, 0xb, 0x5c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000000f80)={'ip_vti0\x00', r9, 0x40, 0x20, 0x3, 0x6, {{0x1f, 0x4, 0x3, 0x4, 0x7c, 0x65, 0x0, 0xf, 0x521fb09dc329c853, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x30}, {[@ssrr={0x89, 0x2b, 0x5b, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x35}, @broadcast, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x2c, 0xb, 0x3, 0x0, [{@multicast2, 0xfffff001}, {@broadcast, 0xfffff282}, {@multicast2, 0x100}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@loopback, 0x4}]}, @generic={0x7, 0xf, "d6a2ca649468bff7a3dea024c3"}]}}}}}) r10 = socket$kcm(0x29, 0x5, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r11, 0x5411, &(0x7f0000001080)) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000010c0)={@map=r6, r0, 0x38, 0x20, 0x0, @void, @void, @void, @value=r4, r2}, 0x20) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001100)={0x0, 0x9, 0x6, [0x6, 0x8, 0x3, 0x80, 0xffff, 0x3]}, &(0x7f0000001140)=0x14) setsockopt$inet_sctp_SCTP_MAXSEG(r12, 0x84, 0xd, &(0x7f0000001180)=@assoc_value={r13, 0x1}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000011c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001280)={{0x1, 0xffffffffffffffff}, &(0x7f0000001200), &(0x7f0000001240)=r0}, 0x20) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001440)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x2, '\x00', 0x0, r7, 0x2, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001580)={0x6, 0x1f, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x963}, [@call={0x85, 0x0, 0x0, 0xce}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r14}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_val={0x18, 0xd, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @generic={0x10, 0x3, 0x2, 0x7fff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r15}}]}, &(0x7f00000013c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xc, '\x00', r5, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001400)={0x3, 0xd, 0x1000000, 0x833}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000014c0)=[r16, r6, r6, r10], &(0x7f0000001500)=[{0x4, 0x5, 0xd, 0xe}, {0x5, 0x5, 0xc, 0x8}, {0x0, 0x1, 0xc, 0xa}, {0x1, 0x1, 0xa, 0xa}, {0x2, 0xfff, 0x8, 0x5}], 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000018c0)={&(0x7f0000001640)="55864fca6e62a994eebe495a2d323507cf023db104a5f81d9e6e3a85124820a1fae8b1d6a5c9a219f265b5a1bd04386741076f6496b63db9133400988f5c6ad26e86071dfaf219304d803a35a2ad94310c343c0b93e17592b756b024ec9f2b48ebdb5ea9771fd6040f2c2c6a1bf9a4e0c0c543d9feb6500e5fe51991b055359f18934370aa8637c9f3c1f3b87cf6e064", &(0x7f0000001700)=""/11, &(0x7f0000001740)="6b06b5ba5e287dd3490267bae4dd06c8b227491622945b822bfa243712f7794d3ca4f8b97ad7380fd9f19ca239fcdcea97b7ddfa06badbc5ab5b897863484c083177c99e1905656e0e54b4038c8959a786e93da58a299f7bae08c346469818bb79df9b31c40157bdda13ac6974aac38b2ffff7abf1d261cf32faae6c", &(0x7f00000017c0)="e84a9534bc3963b5c1606362a9fa673245c3f1839c64062a1dd22065cdb8e14d314b61d19e3250b9fa05fa6874473cf042c48a2ff1f2a4b0aaaa0daaf930a701018abea26638f29423ab09efd8b97ab5af73bc6150d760d7072c63b6cc2e008bd5ae0fe2a304c2e4431b52b477100a978fccc087df17618a26496493170a5af6671b74f1944302b884fe3f69da9d4365b60706778ed4e3e715cec968178d0a2550c24cc650d98dce6c6f8d29a1e48a7bd99184de50eb7fbc854eb94c45f9fcaccc63d480ff2af6", 0xd, r15}, 0x38) r17 = socket(0x29, 0x800, 0x800) sendmsg$nl_route(r17, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)=@ipmr_newroute={0x54, 0x18, 0x8, 0x70bd29, 0x25dfdbff, {0x80, 0x20, 0x10, 0xa, 0xff, 0x4, 0xff, 0xa, 0x1900}, [@RTA_DST={0x8, 0x1, @broadcast}, @RTA_GATEWAY={0x8, 0x5, @broadcast}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_IP_PROTO={0x5, 0x1b, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x7}, @RTA_SRC={0x8, 0x2, @multicast1}, @RTA_IIF={0x8, 0x3, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4050) 4.638625258s ago: executing program 5 (id=2060): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000080)=0x8, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmmsg$inet(r3, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000005c0)="54c49a44f6c1644f106ba4d0633d9e9e207e24b3b01fc032be91c130199b837e962894be", 0x24}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000800)="6e52fa9d8cc531373f0c8b0641f0c8aab1d870bf786587ba09970d163cdf3ef0a4e14336d35defc695def322d4eded2fcfeabfd23e47e264c893c2d486ed004f772c5f7096c1558b03b1b52f810f38783d913208ebe0e0f471c13ed205d7aa7065e464a3648f052fddb6abe0a666518a29012b1531770da1", 0x78}], 0x1}}, {{&(0x7f0000000ec0)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x4000800) (async) sendmmsg$inet(r3, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000005c0)="54c49a44f6c1644f106ba4d0633d9e9e207e24b3b01fc032be91c130199b837e962894be", 0x24}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000800)="6e52fa9d8cc531373f0c8b0641f0c8aab1d870bf786587ba09970d163cdf3ef0a4e14336d35defc695def322d4eded2fcfeabfd23e47e264c893c2d486ed004f772c5f7096c1558b03b1b52f810f38783d913208ebe0e0f471c13ed205d7aa7065e464a3648f052fddb6abe0a666518a29012b1531770da1", 0x78}], 0x1}}, {{&(0x7f0000000ec0)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x4000800) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000100)=0x1, 0x4) sendmsg(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)="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", 0x329}], 0x1}, 0x10) connect$802154_dgram(r0, &(0x7f0000000180)={0x27}, 0x14) (async) connect$802154_dgram(r0, &(0x7f0000000180)={0x27}, 0x14) 4.56548769s ago: executing program 0 (id=2061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x75}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000940)={0x31c, r7, 0x11, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x78}}}}, [@NL80211_ATTR_FRAME={0x2a3, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @device_b, @random="ca6b2f3fa926", {0x5, 0x7}}, 0x0, @random=0xc8, 0x281d, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x8, 0x0, 0x9be, 0x8}}, @void, @void, @val={0x72, 0x6}, @void, [{0xdd, 0xbc, "f469017edc9b68b118fea06703bc52d3f85da2c7e04bc16c24405dbd7703097b2ca23b2493f0322ab3dec41061dcef0ae3174a6af21c206d85b293e05aca26d2be234b8d7005dee59ed56cc4a5014a348a2ec36412f65c09f6a110d81692ae78bfadb35c6bae83b6bfd20c721b65965ed702b52c6dd818d8ccf280a5973a1c18b7253589dbe0f70ec2fd5e14eae48fbcf5e1d7cb484db472eecff912282c1b41acbc22a2d5a0431620a67c0fe9cdd3ab0e8d372145bc143ed64dd6dd"}, {0xdd, 0x39, "ef73038cd28313f40619c295399420216a7965ea503e9837fdbeb2a3d08814351a492ecd5708f5b8d7058814049aacd5435d7c93f1a91931b2"}, {0xdd, 0x2d, "c4f20358826ac26f9991ddf9760eb3c6159e33d1e0e3a1ee0275b33f6da2f389de7541ffa336367138d8882d76"}, {0xdd, 0x48, "98c71a3d4c4e4c8ba698bfd0def7d5d0de538c765065a8f232b280e988ff34c07e91ec797e05d05d356a571bb2a85495fb403ff372a504c7a92507264bf7957de17c47bc528848f9"}, {0xdd, 0x7a, "8b4a2d6cdd07f5949ace5ea39cfa7e94f391cd3bd252e1e2faf7ed8983c643e79b33c18f7aedb8951d2c45604517c39c5df24f60c51d82e9e0d04655af6f9bd1e416fd6faf760c420e2cf4f37f88e4e9c4b0432900e59864715f18341c4cc830a4070bd142c1d37da2e128e44f2680f305d766e262a089096f1c"}, {0xdd, 0x73, "5841e19df76843537f34d956fcace3e6b64577a470cbd4132bfe805b2796fbdf449d68ff00f38913cb68a492e3a4bb2f0fec9939206db552def104f0c4752599729e9ca1b97f159c8154ad92b9e390527067ad44f06c73615753e56598ef160c5d6c92a00eaf8cd07eae66a86de7064f39d1d3"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x18, 0xcd, [0x58b1, 0xfff, 0xfffc, 0x0, 0x3, 0x9, 0x7ff, 0x6, 0x5, 0x4]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x8b, 0x8]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xf8}]]}, 0x31c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) connect$unix(r6, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 4.469579476s ago: executing program 1 (id=2062): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@gettaction={0x14, 0x32, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20c}, 0xc, &(0x7f0000000340)={&(0x7f00000009c0)=@newlink={0x23c, 0x10, 0x20, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x8008}, [@IFLA_VF_PORTS={0x1ec, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4b0d37d62f2f74c3892b4ec8c74700d1"}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_PROFILE={0x6, 0x2, ')\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9500acf1c9e0c897cbd735c9bcfa7946"}, @IFLA_PORT_PROFILE={0x8, 0x2, 'nfc\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_VF={0x8, 0x1, 0x81}, @IFLA_PORT_PROFILE={0x8, 0x2, 'nfc\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "27d492efb9de8989b074eea2c15b602d"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_PROFILE={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x101}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "fac81a60a8755518e049185f8165178a"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, '-./-\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, 'lo\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "92fd7f44e78bebae1322a97eebd5f222"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x87}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a4c7fd32e166d31e009a93837c8a7af6"}]}, {0x7c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x13, 0x2, '$\'-@!{)/-:/\r,.\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "0ef61a2469e9004d48c7bcd39382e2dc"}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_PROFILE={0x8, 0x2, 'nfc\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0x36e5}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_PROFILE={0x9, 0x2, 'plug\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "5084924636b8724d95295687f204d0c4"}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_PROFILE={0xd, 0x2, 'nl802154\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, 'lo\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_PROFILE={0x8, 0x2, '&+#\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2fec1fbf838942431cc3dede262718f7"}]}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x7}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x6}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x64f7c}, @IFLA_MTU={0x8, 0x4, 0x8}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x4}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20000080) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x10040000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000540)=[{0x1, 0x1, 0xd, 0xa}, {0x3, 0x4, 0xe, 0x7}, {0x5, 0x4, 0x2, 0xa}, {0x2, 0x2, 0xc, 0x6}, {0x2, 0x3, 0x2}, {0x5, 0x3, 0x3, 0x4}, {0x1, 0x4, 0x2, 0x3}], 0x10, 0x800, @void, @value}, 0x94) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r8, 0x1) (async) shutdown(r8, 0x1) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) syz_emit_ethernet(0x6e, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x9, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x94, 0x2}]}}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000300)={r10}, &(0x7f0000000180)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0xfffffffe, 0x20}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002a80)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x4000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffe}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002a80)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x4000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffe}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r11, 0x1, 0x7, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071140a000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071140a000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 4.254844151s ago: executing program 0 (id=2063): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4, 0x10}, @jmp={0x5, 0x0, 0xb6e977ce89e18e57, 0xa, 0x3, 0xfffffffffffffff4, 0x4}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.0832295s ago: executing program 5 (id=2064): r0 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x203, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000fff8000002000005580004802c000180090001006d657461000000001c00028008000240000000090800014000000008080001400000001028000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x850}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r1, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x100, 0x12) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', r4, 0xffffffffffffffff, 0x5, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000002d000100000008000000000000000000", @ANYRES32, @ANYBLOB="0b000080976b640868603000910001"], 0xb8}], 0x1}, 0x0) 2.079691293s ago: executing program 0 (id=2065): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, 0x0, &(0x7f00000000c0)) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 2.078850501s ago: executing program 1 (id=2066): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000cc0)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1c", 0xdc}, {&(0x7f00000003c0)="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", 0x14f}, {&(0x7f0000000700)="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", 0xfe}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb32e16330e0d7d520f4887da0d6f356f8ef230b9b237409", 0x6a}, {&(0x7f0000000300)="77729a", 0x3}], 0x7, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) (async) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), &(0x7f0000000280)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000001000000008000a40000000000900010073797a30000000000900020073797a32000000000800054000000033080003400000001408000c40000000000800084040"], 0x7c}}, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000003c0)={"eabb11ff2b9976618466e6256698a350", 0x0, 0x0, {0x5}, {0xffffffffffffffff}, 0x0, [0x0, 0x0, 0x8, 0x400000000000, 0x2, 0xfffffffffffffffd, 0x9, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e24, @remote}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=0x0, @ANYRESDEC=r4, @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x40040081}, 0x0) (async) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) sendto$inet6(r8, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) sendto$inet6(r8, &(0x7f0000000100)='K', 0x1, 0x44008011, 0x0, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcc2, 0x0, 0x0}, &(0x7f0000000180)=0x40) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x30, r9, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}]}]}, 0x30}}, 0x880) (async) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2.078285069s ago: executing program 5 (id=2067): unshare(0x22020600) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r1 = socket(0xf, 0x800, 0x3) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000000414010027bd7000fbdbdf25080001000000000008000300"], 0x30}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x24, 0x1e, 0x505, 0x0, 0x0, "", [@typed={0x11, 0x12b, 0x0, 0x0, @binary="461dc071caf2d43500d1f6c8a6"}]}, 0x24}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{0x2, 0x4e24, @multicast2}, {0x306, @random="4acbcec8eb9e"}, 0x40, {0x2, 0x4e24, @private=0xa010102}, 'veth0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6}]}, 0x24}}, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000140), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000280)={0x3, 0x6, 0x202, 0x5, 0x3, 0xa, 0xffff, 0x363}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2bb85}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x4}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x5}]}, 0x50}}, 0x0) 2.076807201s ago: executing program 0 (id=2068): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x11, r1}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0xc000) 2.076270103s ago: executing program 6 (id=2069): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, 0x0, 0x0) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000280), 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="ae4d03000000000001009ecf79cfa2", @ANYRES16=r3, @ANYBLOB="20002cbd7000fbdbdf25180000000c00990000000000690000000a000600ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00000a0006000802110000000000"], 0x50}, 0x1, 0x0, 0x0, 0x44000010}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.074302046s ago: executing program 1 (id=2070): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8}]}}}]}, 0x3c}}, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x4) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) r3 = socket(0x2d, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000001700)={0x1, 0x3}) (async) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) 2.073995229s ago: executing program 0 (id=2071): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0xccb, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) recvmmsg(r1, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/190, 0xbe}, 0x7f}], 0x1, 0x0, 0x0) 2.073536176s ago: executing program 1 (id=2072): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r3, 0x1, 0xb, &(0x7f00000000c0)=0x10000, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000017c00000c0004804e0a00"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101000000000000000005ffff000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001400000000014000300", @ANYRESDEC=r3], 0xa4}}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x235, 0x2881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x4c000) 2.073224527s ago: executing program 4 (id=812): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000400), 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8994, &(0x7f0000000200)={'bond0\x00'}) 1.290142236s ago: executing program 6 (id=2073): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71", 0xc5}], 0x1}}], 0x1, 0xc0) (async) r1 = getgid() (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000540)=0x0) r3 = getgid() (async) r4 = gettid() r5 = getgid() r6 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000b80)) getuid() (async) r7 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002c40)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0x13e) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001d40)=0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002ac0)=ANY=[@ANYBLOB="240000002d000100000000000000002d08000000cff6cfe589426add6b1fca1f01c1adfd11b50a2838917e19085043cb3d30505ee6303a02a4147e8cb7b8ddf09707d18b0e00f8f41b7f188bbea01c8f9c2c2bba5c11be30b13a9026ed71b27435520828e86429a248aa3700"/123, @ANYRES32=r11, @ANYBLOB="0b000080976b640868603000"], 0x24}], 0x1}, 0x0) (async) r12 = getgid() (async) r13 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000023c0), 0x800) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002400)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002440)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private0}}, &(0x7f0000002540)=0xe8) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002580)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000002680)=0xe8) (async) r17 = getpid() (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000026c0)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f00000027c0)=0xe8) (async) r19 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002900)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000d00)="0a28481505bf4c66eb90add3fd1e48958acc1f6632d70692e18bb8ddb6c3bfa17531f6ef77ec5a68424bdbb49de051fdaed01ab1be45952d808ee85f5114648b72aab09c2cb4a67a1732f65850dc5bd3b458053eeee3f16de4948faec108d92770bb5f6ea379d333536e9aa98c570da3a9fd37b721d9920b912e818184c8cc9b3ed4e5df2daa0340c8a55d562ca70090e6cd1bf41976d52f2534f23fadab6837858c08c840d5af693f1ef7984e7133e3fe17f8e86f06d4d0765aa50a7b31b600221331758b56ba52d280b3615438f2db38b5153a014ff031a960d5a131811fadb84ff54a12dbb10a7c763d93854e42cbdc748a24d57dc105bc17c80e386c23ff806c2921847bbc10c1623d0103afc368d7ba25e95b9a6c91d4862e28f679a2b5e900a7fc0883bac0839f84cf0f4105026dcdfc0820f427f00bc455f4e014dbc46f40ffbe2b7a286f2c8e1af3eb1d7fc88d73e25174128c1e56918831dd8e43a06497364a1d89701be968b926156863d5c27c6f05450bd274c3cfe35021e6faa130ee030ec0453700dddd6f6ce042b3bad7b5ed7025dd39ceecf86803fc7ac780aafd6089c0e005509f6805a9591660b0af4d55266412ad55621e02e8cb0f8752efefa0ae966584f9d730611312af8e0307eaaeac424345f0771cdb0ec27370aff16fe302712bf5a364d0ea968eb0b18ee238aa6bf3592a411a285aa720e93b679f555c25c8b635fd85de4231ffee5c077dcf3d67ef31ccef5a9389137f0a47761f29620d85d3108d07f29eb98c54dc85c34e4fb8ef0bfcca70ed77859086e7fbe4cdfed2928e98748fd70dc7afaff3d75423668763d54ac2cdf6d7af45288389f1d589e711c07877ae046586502623cd6c84fd6821241b52a7a1466fe9d50ad806b96ce7f1a07415c09e84803072e4a8724ba0c1545673b78ec53dc18144ce256488521924cb585100e251b8e0584e7cd9b03c4e6db14de9e52f17c7b1323dd06c0ebbf9a0384600c3fdc78e3fd9b3304f27a7c2882871162858b1e5dbdf4acdd7ecc9dc5645830e95d57307b6c303577d0d63fd78465b1ad7570f9742f6e8361aeb00eb40a3c2695f11c0a81954cd3a7f973ecc2b9d87ac582ae9bd63b6ef7f1bae45c9bea9849e6f0df4de4c71e67f2c3463635d7604baeedc93cf3aab0195d4b9996293a1157940ae80fdd3d251c3706ef2d3505494558b58e64633d2af74437e45eb031fe60c250bf8da5f08915b4316bfe4827d524cfddd2c5b00f3db0cce148005ebdce49ff12b7055b0efd778a603c18ddc199080d9159364950c3753e97209cc3b7cc59f45a9b928de010d5b9947dac72bb1eaaee389132e4623f8b3130ffa59d8ddcc37529e552d301508ff4cdc13010572ad0acfa74de975397be31f52356708bf294ff398c591288e992282c55defba90137006fdd970827e43ae55de9723dd7e97fb83dd0069ada2a79783701265feedf9258762fa8cb8a0a6bd291f46d432b0975edcb93dfc6df2b9f669c95a870c0399fcbb4a1bb752bd21d7ef0f37d48f5219698ad8732280eb3ae4cd7e248dbcbee22fa19a56a0e70f3af119cd93ba8a86521933ce8ae5348fda2c4481e6341dcf0f40a0ae1f77e5a67fb184a62445b7920b593e9c96b9b0dd789f5b1ecd6f10e8a6558c69b000db98eabc45a4d5541b748d2057e6dc421389e48b7750fa6ca2863f93961c59fe51628bfe31232eeb88a32899b24910645469f1653711771c7df42f74d9980e3f023aed0eb9b8c305a179886da853287e5b59e2ed2ebf1489be7b77b814305946d6f7b4feaad4de81ba13e2145257b6b9c8d0fa1d5e912d04d52b687d2a9aa4b29beb7313a53f69b29d44eebd234ff13a656bd1f6e4d0e2cffda3c7bfb78e9e19dbb8bf91e333a6b1cc90122fd12e52d27a55149ee5520db01bea6df1c09a70b618682154d0ce6965307f28424162436ff5b449b9885899bf571132aa441c8ced9c240ef5da894ba4dda16e7e4d958d6be9cb25abe5e80a82bbbc4cfa36d26cd065b2724c59f48060112562e7030d6684d32d5c5b2a377826a8b0c919783e2c0f15c2fe2709bc3bfd8c8893649f8ef7b807e2becf14f007b169daef2676dfa511573076bf79b71663f86293219f4aeebf2edab393127a459f1e32fa61823cb7bd8b92adcb60388b5005831bbc61ce593848e3524e45849b0933a5c2c59e6686fcddc1830e2d58eb05e1a262bb1c80c7d5c7a3ebbfefb9416e254a4fbd6471386674e04ff1491938eb8f26f2bb587d20c7a875da415641226142e000182daa9fd550be04697c7c76ea2fb2e5f1cec1031d59bfffa5c4e233675329a4afa43beefb109b7173d8cf2dcb6fee6f0f638219f9e0551b78bf351058a7779e29c9694cdf280aa315ba1dbd99d5d426d7d3a9f4ecbb9f963fca7e813c1ff455048259ad4d930d1f7528bef202acfac9fde70224619fefef42a9eff059cd9bc83413be06dd5e869342753936bf4475332ec30c9855eecfd0d2dd4627274c9fb8208a4f4bca571996f938e8ce6114ac5251475e7ecb476f1e241b5aa52dd64517b1d9baccaa9bd3e18471747023ad5b3e750eaecadb66ce26bb1fa47468fa11163c542ac0ca0fb5b2a478b2bfe3e8adb8f8118cf094c056ce7eb05da3f76606de07ebb2c4f6be5d73851635c3dd7424f55370e36468a64adb62fba9804c159730108b73749e09ccd2a5e52e94d1ac41e7c7ff95765467e2915544bb9f2a6e36ae279e029bf4b1a0e7ffac65e7dde8baa76f581c3bc7343da88867c7cdd88442c5e771435f0d55ddf4660d34e3b2bb47369766c5c9a202ddc6a7cec17d4a13dfa50e1a73f0c085aee5c9ccf594cefb3b1a16c9a029efa98431792b80bbf17c916f69002fdcfd07601b2ac65ea7384dae87bc2df1d41ff7b474c130b00e7711dec6ca90736e938e469728e1575731b66aa9b640d172d38c59a2f6747925d9fd9d82b454b3bf210cdc8da07336086dcb8d33b58642eaefa5c349c41ebd52de15e20e3a34c94a7b266d222eb63cada97a82c340d545ea0cd911acb90ab13ef68237ea93baf7e041292a5809bbe6af62ee78534c9153483c42f48bc25f269cba1cfbff4b3938fcea34b7d3da6f7ca62e5161f107a4beca44698ce23e40cec729bee9d2d41af7f18b8539a62504deb2fc8b6a3494a87561b8cc5583b949419b36dc60f7dbd355c1d93e74509f77fb8ded3983ef0890336dd016a126a4ffdd4d3b469965e380167f51f94c99ec96e81a90c6a2684313f51c989c9da0e6a8489ac72da3b20915db3f682c162a9c7f23b2ba72dbdbadcdb4d50d837d884117d1b024cc7e9ebc7546aed159209b1830ab38694e31cb45c0ec08aef1dcae6be79b5e540d84aebe05d10d42083bbc81aced1f678a68345698b39592eb44923d885b6a84ee92339cfba1ef85dfbb951d2e7ad5ec51c1acf84184d2460f50e578ad304fa97404b5a876511e58f1f49803751e0a8567d4f411d829ccbc400335843813730d353068ddb968b488a1dd12f87304ac3b4eb33d43b77e6098d6619ba1ce852ac894bb7bbf081d146a859ffa68e7de124878c328f77149a928bbd0c9945b1625fb24e8ab8d0b2b271f71fda0d20ae6ba36f6ed08be00bbddb48ea2d501b464c09ed38b89da86730271759104ae1a8bfb560e633a18cedf7e4145f3bef85efd6dc69a17e9f621bd745abb68475536aba0ac60e794685c9e3558558b99c698eb9cb5fbbe9bcc749dea100e0d0775c98fd4ab029440dbafdaf005f67dfded31ba6431455032c4ca064623d8826c7394e08d20ef9849746e6e757cde82b20a975353d289d37500ac01a6de239df159aeb69d1a37a7ba3bea6041c31c3ab9b7c1c7fc1f67760e28db22a4f32a6231ecc1e6bdee8ff8703d22a3748e9a4d961caab2fa2f723846f73a97bf89c22f6a57877de71941e7070d135159565e10625a8f84982e44780e612f6d33dedf8fab39110145775c15ef4f4cd57091ac533be1a1d1107920c8c223b6f14762ed35c7dae066604c090720324fe72ccfc7f94a4eefb6c2d7b7063f0d6e8fb9bcb5969336f3ebeaa64a89207a298f8e8bfce20d463284e7e645c6ca147edcf02fa5ef7730afb27c62576301aec2903587aeaff3afbe6457014fb59d56b7ef421d1b20197d10e475d60c21feff799f14caa061c3844545055a9f8e55beba1c3fce9c7a9ae2b5d0bda203551935edb5af98bbd108d9f40c0aaa9fe565c00df8a249ffd8bb65a4e02f87879ccca7db70b58f38bca0ba482b6bac81c3956bdf122954492f6bc4967f9e4cf01f30887c0ddecfdaa8a71887d6275c1df68f7e5e31aa4a4af714d778990900023889e78afc2a74e11513e34d850f7aa7c5f3a8b8015e126ebe4baee54e0d5f2c5e0c79a1168a1ec389d796600a2ff40785c7284f6352b16fc261312c02ff3b9be0fdb05617b8758d7f2aee4d19e70e8ef5172ca651aeff889cb5172dedbbded44e84cad05b907fd17af02c9470514feee03d8722c502ab18b35d0e3bb9bb656589ce6b3535318711da19777a7eaa0feef61720bdedfad032e7b6fa30e5f2654134f6b25cf074955a364132ce5185b9609f228dd3d8c5bea5c247d269c8b80d3edfc0159afefd99c6fcc5ed20091174d8ba6197ae22938d12a530359bd54c5a44ca3703da548e08d6fc390218ea522820651fdd8a23eb016ccc0156ce25f15e03d8327adf9ff5c68503aed69f75b971761161640a2fef54d71301d4ca0a739e721702164c2d8ff85f05daf661e07d80977356471160a04c4d2ee05f13482470dc0f92db79a8b9b0c2d11cf1b5c53043b3aa412c1e8af6980438b93cf0929043247e45630116e35a52c47e57e93e66dba696713abc18bd7db59955d092f5bc5a570e128c6f4e94caa462014dc5fd91736ba4973cfbeef2e71da5110d636424f5990f7041af4b79f6b2402de87f18cb372b0c49748e4d1f1984d267f0e44ab4dc1c614ee51e085f736d99710637c0ca08c3dc367704dc1c19b9e079d6d196e01e95d7bada36c2ec33efd629757ba030ece99a88f21f19232b8371deefd3d68c567e399b0d9239bca7d375a5f663d9cf90436998407381e9f49e416952b7cefd410e43b83cd4bfbf271177ce4a0035b7f5620783e1297682d928cbca7176ff2c6e9fc8fcd354f02f7af5f54667363ba441676c8ef10c23f304a7d6a8958bbfc5337b3d91cc2849fed8ad181c07c1ff0c37091826fe64602851189e7364a5f79d933ab3101251473681068c2fb5dbc1eac4e01e3762f0c100048c06942d4fc4382c536855ee54b3647f6648945e264a73b3eab03b16925d4a019368575bd63af6a086b0d71acf1ecdf19475fefb60369aa3bd5ae870aa21b37826cba7acc0f2262f9291476bad35642ef4d358f4547ca6ce15adf777c830921f1aa5d05a5a6d067121df4ce5e394af7d61c5a4ad41588fecf5a0c66ee557f8616a1a470ebf1ce70e70037f323f701ab0f0642e8a5bc842d6fb6fda675f684cd1cc41ac69204d90fbbf990a5d36b77e59d562cee35bc8274cd4bfa586f640f19c46f74b158c2799a81a99e76d9101ea780856ac480b45303b44dca19bfc189ed5ebafece612359e7e4f0b2e722bf3588857f395d4442377340690fa2173f19384afe6eb43fdff32c6d472f9b10aaa72c2d6a9f749f27f07ecd6959573784a4b68b8208484f0b78d973130133d2d75b89dc611bf41993c169d36f8ea93328d9c828aea4690f01d90f1b2d0e758bf3feb58db28196caa516591d329cd425a9f1c82d305e0bb", 0x1000}, {&(0x7f0000000200)="3fde86eea6c341274560488e507326a4327d6a53db3303ae344fc8b589f7f535ac4d4386e57745cb65fadc217ecf8924aaeaa67b830f5b89d4906a3b00203be7d8adb64a10294c9b3ba7f6b6270a50397996488c2a7759e301cab351a1bae71ea6866fcd37bfb2e7c511ecedaeef5cb8dc", 0x71}, {&(0x7f00000003c0)="5aee7af689ba72a8631609863f7ffd19765abb40af4cbaf9ed1cc92a0086d3ed58e8aecd815421640bd3719117fc02634e12a36b8979f64e227ea2419933626306d5feae1a997f3e8309b8b383296862bebc7722f880d4284684fdef96af582e789d55c7d03c3975643837cf5051460b3cdb690ea30eb99f2152dbe1710fe932d71abf43785e6f556830e37eb9fa281821f5bf1f83ca67640705cc2c5cf0199d81040e43baadb7a4648a69c62be2558423fa00f443a94ec416bf9199f20636b330062bbef231a189e171f5b9b63b321228b9738a7da8e85e8f7d", 0xda}], 0x3, &(0x7f0000002b80)=ANY=[@ANYBLOB="241a00010000000001130000010000007eee16e71b1cebe533e45bde05e2000000000000000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee00, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x1000}}, {{&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000700)="1db1b3012ed9f10d4216065750a433145014b0f4e1acdacdb89c846043d3da1455169666370d29db5076fddb0193cf281fe5d50d5c261b8fba5564cd4bc608295fd76d56cde8582d1787aa52cca2f81325cd6f1fd2873ed20f4880a0b162e2d6b24d509fae620911675f77b0be99f406d546c1bdefc8a6004103642f5e8753d98089451bbb4ff9baff44c80f78b0f48e27e9349d77d36b3441f418d2", 0x9c}, {&(0x7f00000007c0)="3d7df8545596413545251d38849c6e751ae9408aaf3d03b71e56947f004cc8c1fe295815ecc0a743df72d2b054675cc3441aeb1cf000b5c0a5dff040454b5c051d52dea830055427b9a699a748cba84ad00127e58b93f8cc41295ac02fc993b4f00d982ede1717bb2d8224b87e6d675d17b528bcf9ec7a094492c777d3b002cea4c5946b0a659b1b239bed3a5917df52125f92ccddb8c4d098a91118fe6c0d313e483f2a80f47d9f01ad58dfa68078985372e0cdb1ae19a64e301656dde88534647c1358aacf", 0xc6}, {&(0x7f00000008c0)="948475e8ffd3685a1be2e293bbfd265f724d1de5a259568c7e7e41abb4e57d41fc8c373337ab6258f7094a586cfbd075d3d82de8c0b4cbabe7a70644ca05699b79df5a2b395487c60cde3c8df15abe4f21925a1ab4aeb330554b786d54f458dfe1c3823fb69c6155e0361e4ac05ddd66f8f14a108a68f16c497b636ccc107d9153ed07954fe2e005be832e71c369714ffae19f2adaeddfd421dd6c3232", 0x9d}, {&(0x7f0000000980)="28c11cd8fae4dd062ecdd3ed04f968ae2e9c94b7cbff96d9fc179edaf0adc30c3b5021b02f36deb3c0a472048be9e5fb0d4a4bdbe132cc92ede3745bf19be555383e14917a943fc6409137e1497f71f18963b6bc1f9315b60425e2fc8a9f26e865376ea7811b9a85", 0x68}, {&(0x7f0000000a00)="3a57aa74673a19", 0x7}, {&(0x7f0000000a40)="d9e8be70b2491aa0e4d976d670291e7872817571548b9dd2d0743796605982f940d5c23065601740c428e7fd7e2bfa8ab9c8f17856c7d8cc08d778e3fa800c8d1b2a3a135d7eebf0fb6c25ae984319b4a9b4887617086735faf49ae345f2e0c70975e1df2652da99b917dcaac100c3c17ef718567d19da3f3845bf866bbf1fce15205efd12d8c4b3f9ae966c32653b995008c814ac8daa36e94b2afca8c268a1bce2065f43b9949447d8db81def1fc148f44b1c419079e90b053a3fd", 0xbc}], 0x6, &(0x7f00000005c0)=[@rights={{0x18, 0x1, 0x1, [r6, r0]}}, @rights={{0x20, 0x1, 0x1, [r10, r0, r6, r13]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r9, r11, r12}}}], 0x78, 0x844}}, {{&(0x7f0000001e00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001e80)="5e82ab13e1ddd12ba61724efff295e464a61b69fdbb693928341e7070c759601fd58af1d0c78b659380da6c9f8969bd06696a6127ede03b795d687b74ef8be7d270d3206c3060f6be1e3f50dd348246d4dff59b2dcf4bffa37614598657af443b41bdc5d5318efc5f40392a3dac0a44944c09ce4a956bc641c4087f199a9df6c8b9f1c46c9123b6ba5569c5e113690a2240087cb7bd8a2228856cbf91d046990696be706fd7fba1ac839f95b9d846238c8", 0xb1}, {&(0x7f0000001f40)="41732592637c27642f024e9c1951611778fbdd3f1b26050262d941924f19d332385191a8b876d61103694ab58e1544a15b788188c4d308922fd92d2c3436844af6cd8e7ef1", 0x45}, {&(0x7f0000001fc0)="50630f5ddbfa76e019d14e2cdb405bb24b09d68db42dff677207baa21630ef71f2296669c2b7b65532f8921d3fde443bd9c4a9cb2a42e4986a34330b96a90896fe3286ceb51a1bed0f12b97864605b4aabe840f31eef8ecd8d239a31708c95f32aae42b7553d9165b965da72535a9b68943325ff00d4c5d864b17c7064030e530ab34bcb9661e7c8603970f46641ad3650c58c909616e74596c3433a9c7acfe0e830471ef3db09a0937be25e2f96d01cb3293504f5ba009275", 0xb9}, {&(0x7f0000002080)="8aad60b120319cb0bf5a34a64884e40ef52922a70dd1a0b834e1f92c209398ba94498eba5afe38b810356856fdd1ab4da02cb2ce0d804d461b47713d911e4c361e0e3898f5abee539f241ee557355e54bb20cdbb8f40ebd5c090e5835e90876d829084b824a090cedce426f00e77d0116d72861536917b377f42f5147d6c820874e007c3188d72237a891728cdcc024f7baede2d0bb1fcd74b24f24061261e13e80ade637b64999f76ca0370aa5e4e4049957b951d88f48c180cdd6c1c4df75db43b61a7dd2b342258aff1d1511b0bb57d0bcc07eaa5", 0xd6}, {&(0x7f0000002180)="3d7465a663f005cbeef9fb2f0f43b49dc91daa4ca62e241e9288a3290c9d951e4d8ee694527619bf742f3696a86de91fd21753ab641066da1d513b71c57ae1705b3fddfd05e9004e7d1bbb51ec3d2b575027c33e5cfe3e1131a79ff1eaa05db998", 0x61}, {&(0x7f0000002200)="a0f334a36c25d0d37611b7b1024e6ebd4b391570186ad51d57e4b605f86a60587cc7c2d0e285fdbddedc052622a7", 0x2e}, {&(0x7f0000002240)="d0a3938892e6916533dfe8af165e419f1f88874484897e8147094cc4e4518dfff446dc7c73379d46b9a759fed40ef55b4af38424682f911b0ed8d2c1", 0x3c}, {&(0x7f0000002280)="af52fa5444bd296d51f14dcd763175776500", 0x12}, {&(0x7f00000029c0)="066ebe83f2b644cf611065ae6a363cf9773b6c87f7b9aa7a55d1227fba5f643d475b068527a25e86a2ca39707438cc7c2b837860dc55652738015ac3ff40c4984e2257e8a80904b21f1928d03f4dfdd8471bf56e05f1d4641720e239a2612db75fd9efb7889b112ce77ef4c84904ca526fcbb40e4bb6321d9feb9dd4d96926e4114851a804eaeee1491cc7584f8ae32a9dd0adc71ff023e073fcc01ca162e15f120c8713e87c766aac58b429b534fe269a93f2369ad1f88be7ec86e0bd6280077b06bcd70c", 0xc5}], 0x9, &(0x7f0000002800)=[@rights={{0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r13]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r16, 0xee01}}}, @rights={{0x34, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r0, r0, r0, r13, r0]}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}], 0xd0, 0x480c4}}], 0x3, 0x48c0) (async) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.289404502s ago: executing program 5 (id=2074): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000009000000000000000000"], 0x0, 0x45, 0x0, 0x0, 0xa, 0x0, @void, @value}, 0x28) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000000)={'wlan0\x00', {0x2, 0x4e24, @private=0xa010102}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008112a2000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x13, r4, 0xa896f000) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0xa8, r1, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "00eb1f0d7ff4e59a"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "34de8c96fce1f558"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}]}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9fe228d9a037da0a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7b07}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="578a7a05efed65032deb8de15f2cb21d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="15606b6f121a33d051e1b500344d50ef07db1cb53b67777b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "18fa53d99a77d5d1"}]}, @NL80211_ATTR_REKEY_DATA={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000010}, 0x400d0) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40000003) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000029000701000000081300000005d7b736865fde79240c9c7c0000180001806dfc0000fc01bdfb036e"], 0x2c}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080c0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000009000000000000000000"], 0x0, 0x45, 0x0, 0x0, 0xa, 0x0, @void, @value}, 0x28) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000000)={'wlan0\x00', {0x2, 0x4e24, @private=0xa010102}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008112a2000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x13, r4, 0xa896f000) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0xa8, r1, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "00eb1f0d7ff4e59a"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "34de8c96fce1f558"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}]}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9fe228d9a037da0a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7b07}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="578a7a05efed65032deb8de15f2cb21d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="15606b6f121a33d051e1b500344d50ef07db1cb53b67777b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "18fa53d99a77d5d1"}]}, @NL80211_ATTR_REKEY_DATA={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000010}, 0x400d0) (async) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40000003) (async) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}}}, 0xe0}}, 0x0) (async) sendmsg$nl_crypto(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000029000701000000081300000005d7b736865fde79240c9c7c0000180001806dfc0000fc01bdfb036e"], 0x2c}, 0x1, 0x0, 0x0, 0x20000880}, 0x40080c0) (async) 1.28809145s ago: executing program 0 (id=2075): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x1, 0x0, @multicast1, {0x10, 0x4, 0x2, 0x35, 0x9, 0x67, 0x1, 0x5, 0x6c, 0x8, @rand_addr=0x64010102, @loopback, {[@timestamp_prespec={0x44, 0x14, 0x9f, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast1, 0x7fffffff}]}, @lsrr={0x83, 0x17, 0x5b, [@dev={0xac, 0x14, 0x14, 0x32}, @multicast2, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40840}, 0x0) 1.229905362s ago: executing program 1 (id=2076): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5a0c829fef27fdb1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$isdn(0x22, 0x3, 0x21) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000012002102000000000000000007"], 0x28}}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x2, 0x0, 0x1, {0xa, 0x4e23, 0x77, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, 0x32) 1.034684363s ago: executing program 5 (id=2077): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@unspec=@state={{0x28}, {0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x18, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f00800fee0050000000000002f77fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xffffff23}, 0x2c) 910.746022ms ago: executing program 5 (id=2078): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000005000000000000000200000d0000000001000000000000000000000000000000005f10"], 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x24, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 234.747983ms ago: executing program 6 (id=2079): r0 = socket$kcm(0x21, 0x2, 0x2) (async, rerun: 32) r1 = socket$kcm(0x29, 0x7, 0x0) (async, rerun: 32) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000380)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f00000000c0), 0x4) (async) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000240)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5e2}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x18}, 0x40080) (async, rerun: 64) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (rerun: 64) 123.364712ms ago: executing program 6 (id=2080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYRESHEX=r0], 0x98}}, 0x0) 0s ago: executing program 6 (id=2081): unshare(0x26020480) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$netlink(0x10, 0x3, 0xe) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x4, 0x4) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x91, 0xe}, 0x2) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): ] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.228972][T10666] Cannot create hsr debugfs directory [ 238.263952][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1301'. [ 238.327073][T10680] team0: Port device team_slave_0 added [ 238.402403][T10680] team0: Port device team_slave_1 added [ 238.432549][T10772] ieee802154 phy1 wpan1: encryption failed: -22 [ 238.518142][T10680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.548257][T10680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.611816][T10680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.642477][T10680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.658850][T10680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.687134][T10680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.044485][T10680] hsr_slave_0: entered promiscuous mode [ 239.058038][T10680] hsr_slave_1: entered promiscuous mode [ 239.081653][T10680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.098570][ T5861] Bluetooth: hci8: command tx timeout [ 239.109146][T10680] Cannot create hsr debugfs directory [ 239.354950][T10799] netlink: 'syz.5.1311': attribute type 1 has an invalid length. [ 239.499522][T10594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.534445][T10666] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 239.566271][T10666] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 239.579579][ T5861] Bluetooth: hci9: command tx timeout [ 239.693071][T10666] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 239.758522][T10666] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 239.804012][T10594] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.819192][ T5861] Bluetooth: hci6: command tx timeout [ 239.940586][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.947795][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.963734][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1316'. [ 239.990970][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.998191][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.014382][T10680] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 240.056669][T10680] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 240.084576][T10680] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 240.105744][T10824] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 240.116038][T10680] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 240.206697][T10832] netlink: 'syz.5.1318': attribute type 1 has an invalid length. [ 240.327874][T10666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.404609][T10666] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.425369][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.432643][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.489438][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.496749][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.564722][T10680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.623001][T10680] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.656955][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.664249][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.697668][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.704950][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.757474][T10594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.183033][ T5861] Bluetooth: hci8: command tx timeout [ 241.265897][T10854] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1320'. [ 241.294317][T10666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.403960][T10854] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1320'. [ 241.524158][T10857] IPv6: sit1: Disabled Multicast RS [ 241.536676][T10857] sit1: entered allmulticast mode [ 241.546151][T10862] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1322'. [ 241.658508][ T5863] Bluetooth: hci9: command tx timeout [ 241.760474][T10680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.797178][T10866] IPv6: sit1: Disabled Multicast RS [ 241.818083][T10866] sit1: entered allmulticast mode [ 242.133518][T10594] veth0_vlan: entered promiscuous mode [ 242.206100][T10594] veth1_vlan: entered promiscuous mode [ 242.407206][T10594] veth0_macvtap: entered promiscuous mode [ 242.485839][T10594] veth1_macvtap: entered promiscuous mode [ 242.583851][T10666] veth0_vlan: entered promiscuous mode [ 242.607676][T10594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.657260][T10666] veth1_vlan: entered promiscuous mode [ 242.693238][T10594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.740223][T10594] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.758706][T10594] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.762716][T10894] netlink: 'syz.6.1329': attribute type 1 has an invalid length. [ 242.774188][T10594] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.784659][T10894] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.1329'. [ 242.785906][T10894] netlink: 'syz.6.1329': attribute type 1 has an invalid length. [ 242.785926][T10894] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.1329'. [ 242.828303][T10594] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.986299][T10666] veth0_macvtap: entered promiscuous mode [ 243.043976][T10666] veth1_macvtap: entered promiscuous mode [ 243.114364][T10666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.135205][T10680] veth0_vlan: entered promiscuous mode [ 243.175327][ T3550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.189844][T10666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.225436][ T3550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.253913][T10666] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.275703][ T5863] Bluetooth: hci8: command tx timeout [ 243.287861][T10666] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.308321][T10666] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.317098][T10666] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.373982][T10680] veth1_vlan: entered promiscuous mode [ 243.411088][T10908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1334'. [ 243.425910][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 243.426556][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.460515][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.610729][T10680] veth0_macvtap: entered promiscuous mode [ 243.696542][T10680] veth1_macvtap: entered promiscuous mode [ 243.738934][ T5863] Bluetooth: hci9: command 0x0419 tx timeout [ 243.798951][T10680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.827463][T10680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.904193][ T8614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.927059][ T8614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.991621][T10680] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.001342][T10680] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.012041][T10680] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.021485][T10680] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.089361][ T3550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.104667][ T3550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.346154][ T3550] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.510563][ T3550] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.556845][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.572599][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.607595][ T3550] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.647096][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.656472][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.886129][ T3550] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.084893][ T3550] bridge_slave_1: left allmulticast mode [ 245.091075][ T3550] bridge_slave_1: left promiscuous mode [ 245.096911][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.112614][ T3550] bridge_slave_0: left allmulticast mode [ 245.118652][ T3550] bridge_slave_0: left promiscuous mode [ 245.124432][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.382338][T10942] netlink: 'syz.5.1342': attribute type 83 has an invalid length. [ 245.818332][ T5863] Bluetooth: hci9: command 0x0419 tx timeout [ 245.842145][ T5861] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 245.857090][ T5861] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 245.871541][ T5861] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 245.887096][ T5861] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 245.914403][ T5861] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 245.952277][ T3550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.968587][ T3550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.045519][ T3550] bond0 (unregistering): Released all slaves [ 247.025594][T10987] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1350'. [ 247.051805][ T3550] hsr_slave_0: left promiscuous mode [ 247.063786][ T3550] hsr_slave_1: left promiscuous mode [ 247.073877][ T3550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.083837][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.094265][ T3550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.109684][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.135152][ T3550] veth1_macvtap: left promiscuous mode [ 247.142869][ T3550] veth0_macvtap: left promiscuous mode [ 247.150684][ T3550] veth1_vlan: left promiscuous mode [ 247.156138][ T3550] veth0_vlan: left promiscuous mode [ 247.166524][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1350'. [ 247.177226][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1350'. [ 247.795020][ T3550] team0 (unregistering): Port device team_slave_1 removed [ 247.841803][ T3550] team0 (unregistering): Port device team_slave_0 removed [ 247.982467][ T5863] Bluetooth: hci6: command tx timeout [ 248.789535][T10954] chnl_net:caif_netlink_parms(): no params data found [ 248.917779][T11021] netlink: zone id is out of range [ 248.952478][T11021] netlink: zone id is out of range [ 249.004668][T11021] netlink: zone id is out of range [ 249.019092][T11020] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1358'. [ 249.038311][T11021] netlink: zone id is out of range [ 249.043537][T11021] netlink: zone id is out of range [ 249.061001][T11020] tipc: Invalid UDP bearer configuration [ 249.061066][T11020] tipc: Enabling of bearer rejected, failed to enable media [ 249.104351][T11021] netlink: zone id is out of range [ 249.118616][T11021] netlink: zone id is out of range [ 249.127957][T11021] netlink: zone id is out of range [ 249.147964][T11021] netlink: zone id is out of range [ 249.156897][T11021] netlink: zone id is out of range [ 249.316392][T11028] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1359'. [ 249.732502][T10954] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.750801][T10954] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.758969][T10954] bridge_slave_0: entered allmulticast mode [ 249.792930][T10954] bridge_slave_0: entered promiscuous mode [ 249.855501][T10954] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.878415][T10954] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.899350][T10954] bridge_slave_1: entered allmulticast mode [ 249.918489][T10954] bridge_slave_1: entered promiscuous mode [ 250.058667][ T5863] Bluetooth: hci6: command tx timeout [ 250.124123][T10954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.171419][T10954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.380118][T11065] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1370'. [ 250.390052][T11065] netem: invalid attributes len -24 [ 250.395345][T11065] netem: change failed [ 250.407752][T11067] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 250.416552][T10954] team0: Port device team_slave_0 added [ 250.504312][T10954] team0: Port device team_slave_1 added [ 250.668101][T11087] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1375'. [ 250.720681][T10954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.747640][T10954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.810006][T10954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.850002][T10954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.857021][T10954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.945539][T10954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.162312][T11108] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1382'. [ 251.180888][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1382'. [ 251.204961][T11108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1382'. [ 251.207186][T11112] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1383'. [ 251.234461][T11109] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 251.237975][T11112] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1383'. [ 251.278082][T10954] hsr_slave_0: entered promiscuous mode [ 251.296103][T10954] hsr_slave_1: entered promiscuous mode [ 251.305315][T10954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.323508][T10954] Cannot create hsr debugfs directory [ 251.543062][T11119] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1384'. [ 252.052413][T11141] team0: entered promiscuous mode [ 252.075638][T11141] team_slave_1: entered promiscuous mode [ 252.087292][T11141] bond0: entered promiscuous mode [ 252.098125][T11141] bond_slave_0: entered promiscuous mode [ 252.114586][T11141] bond_slave_1: entered promiscuous mode [ 252.114943][T11151] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 252.150594][ T5863] Bluetooth: hci6: command tx timeout [ 252.193952][T11141] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 252.213043][T11141] Cannot create hsr debugfs directory [ 252.226314][T11141] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 252.525682][T11158] netlink: 'syz.8.1394': attribute type 2 has an invalid length. [ 252.759071][T11162] bridge1: entered promiscuous mode [ 252.773474][T11162] bridge1: entered allmulticast mode [ 252.947743][T11169] xt_CT: No such helper "syz1" [ 253.351718][T10954] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 253.403526][T10954] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 253.424119][T11192] netlink: 'syz.5.1401': attribute type 16 has an invalid length. [ 253.468453][T10954] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 253.526653][T10954] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 253.933262][T10954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.997581][T10954] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.065743][ T8606] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.073005][ T8606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.126876][ T8606] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.134159][ T8606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.219373][ T5863] Bluetooth: hci6: command tx timeout [ 254.323645][T11232] __nla_validate_parse: 5 callbacks suppressed [ 254.323666][T11232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1411'. [ 254.486784][T11238] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1413'. [ 254.870933][T11253] C: entered allmulticast mode [ 254.880446][T11246] C: left allmulticast mode [ 254.947400][T10954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.102295][T11260] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1418'. [ 255.602608][T11289] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1423'. [ 255.628111][T11287] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1423'. [ 255.681792][T11293] xt_SECMARK: invalid mode: 0 [ 255.690137][T11294] xt_SECMARK: invalid mode: 0 [ 255.697961][T11289] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1423'. [ 255.714199][T11287] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1423'. [ 255.745214][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1423'. [ 255.775733][T10954] veth0_vlan: entered promiscuous mode [ 255.811171][T10954] veth1_vlan: entered promiscuous mode [ 255.892983][T10954] veth0_macvtap: entered promiscuous mode [ 255.908080][T10954] veth1_macvtap: entered promiscuous mode [ 255.974016][T10954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.029545][T10954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.073996][T10954] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.088833][T10954] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.097800][T10954] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.107541][T10954] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.500168][ T8593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.537403][ T8593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.594350][T11317] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1430'. [ 256.635102][ T8606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.658577][ T8606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.768825][T11323] netlink: 'syz.5.1433': attribute type 23 has an invalid length. [ 256.822059][T11323] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1433'. [ 256.838047][T11323] netlink: 'syz.5.1433': attribute type 7 has an invalid length. [ 256.856645][T11323] netlink: 'syz.5.1433': attribute type 8 has an invalid length. [ 258.679836][T11323] erspan0: entered promiscuous mode [ 258.686574][T11323] erspan0: left promiscuous mode [ 259.030136][ T8606] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.075155][T11347] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 259.091218][T11342] ip6gretap0: entered promiscuous mode [ 259.584703][ T8606] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.675784][ T8606] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.736731][ T8606] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.884083][ T8606] bridge_slave_1: left allmulticast mode [ 259.890344][ T8606] bridge_slave_1: left promiscuous mode [ 259.896171][ T8606] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.917853][ T8606] bridge_slave_0: left allmulticast mode [ 259.923684][ T8606] bridge_slave_0: left promiscuous mode [ 259.932110][ T8606] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.072288][ C0] net_ratelimit: 13 callbacks suppressed [ 260.072314][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 260.250411][T11354] __nla_validate_parse: 3 callbacks suppressed [ 260.250432][T11354] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1441'. [ 260.854385][ T5861] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 260.887273][ T5861] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 260.895651][ T5861] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 260.913495][ T5861] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 260.921441][ T5861] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 261.029903][ T8606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.044416][ T8606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.055123][ T8606] bond0 (unregistering): Released all slaves [ 261.081218][T11373] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1446'. [ 261.096265][T11377] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1446'. [ 261.123413][T11368] syzkaller1: entered promiscuous mode [ 261.149606][T11368] syzkaller1: entered allmulticast mode [ 261.247014][T11385] netlink: 'syz.5.1447': attribute type 11 has an invalid length. [ 261.306204][T11388] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1448'. [ 261.342125][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.528561][T11388] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1448'. [ 261.630524][T11388] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1448'. [ 261.695344][T11388] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1448'. [ 261.763417][T11388] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1448'. [ 261.851500][ T8606] hsr_slave_0: left promiscuous mode [ 261.857786][ T8606] hsr_slave_1: left promiscuous mode [ 261.864695][ T8606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.873193][ T8606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.882175][ T8606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.890259][ T8606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.923577][ T8606] veth1_macvtap: left promiscuous mode [ 261.929460][ T8606] veth0_macvtap: left promiscuous mode [ 261.935297][ T8606] veth1_vlan: left promiscuous mode [ 261.941766][ T8606] veth0_vlan: left promiscuous mode [ 262.548648][ T8606] team0 (unregistering): Port device team_slave_1 removed [ 262.600766][ T8606] team0 (unregistering): Port device team_slave_0 removed [ 263.018625][ T5863] Bluetooth: hci6: command tx timeout [ 263.369693][T11413] Cannot find set identified by id 65535 to match [ 263.554353][T11379] chnl_net:caif_netlink_parms(): no params data found [ 263.587224][T11421] netlink: 'syz.6.1457': attribute type 4 has an invalid length. [ 263.912736][T11379] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.920130][T11379] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.927520][T11379] bridge_slave_0: entered allmulticast mode [ 263.935897][T11379] bridge_slave_0: entered promiscuous mode [ 263.947977][T11428] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1459'. [ 263.949205][T11379] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.964980][T11379] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.972924][T11379] bridge_slave_1: entered allmulticast mode [ 263.981254][T11379] bridge_slave_1: entered promiscuous mode [ 264.084129][T11379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.106400][T11434] xt_CONNSECMARK: invalid mode: 0 [ 264.127249][T11379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.227515][T11438] netlink: 'syz.8.1463': attribute type 1 has an invalid length. [ 264.241814][T11438] sctp: [Deprecated]: syz.8.1463 (pid 11438) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.241814][T11438] Use struct sctp_sack_info instead [ 264.321079][T11379] team0: Port device team_slave_0 added [ 264.353297][T11379] team0: Port device team_slave_1 added [ 264.512842][T11379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.541471][T11379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.616918][T11379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.645433][T11379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.647066][T11454] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1468'. [ 264.663078][T11379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.663169][T11379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.717267][T11454] netlink: 'syz.6.1468': attribute type 7 has an invalid length. [ 264.736607][T11454] netlink: 'syz.6.1468': attribute type 8 has an invalid length. [ 264.775862][T11454] gretap0: entered promiscuous mode [ 264.810540][T11454] gretap0: left promiscuous mode [ 264.942708][T11379] hsr_slave_0: entered promiscuous mode [ 264.950004][T11379] hsr_slave_1: entered promiscuous mode [ 264.956641][T11379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.973565][T11379] Cannot create hsr debugfs directory [ 265.108759][ T5863] Bluetooth: hci6: command tx timeout [ 265.542180][T11479] __nla_validate_parse: 1 callbacks suppressed [ 265.542200][T11479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1474'. [ 265.636609][T11479] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1474'. [ 265.671792][T11479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1474'. [ 265.876820][T11490] ip6gre1: entered allmulticast mode [ 265.969354][T11488] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1478'. [ 265.997562][T11488] bridge0: entered promiscuous mode [ 266.013200][T11488] bridge0: left promiscuous mode [ 266.368069][T11507] netlink: 'syz.6.1484': attribute type 4 has an invalid length. [ 266.389592][T11379] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 266.389876][T11507] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1484'. [ 266.446593][T11379] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 266.458745][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.477253][T11512] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1484'. [ 266.491978][T11379] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 266.504514][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1485'. [ 266.513878][T11379] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 266.523356][T11513] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1486'. [ 266.527878][T11510] netlink: 'syz.5.1485': attribute type 8 has an invalid length. [ 266.533558][T11513] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 266.551771][T11513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.732673][T11524] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1488'. [ 266.839036][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1489'. [ 266.855508][T11379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.935561][T11379] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.975976][ T8614] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.983216][ T8614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.016208][ T8606] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.023490][ T8606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.178658][ T5863] Bluetooth: hci6: command tx timeout [ 267.689957][T11558] tap0: tun_chr_ioctl cmd 2148553947 [ 267.752944][T11379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.347573][T11379] veth0_vlan: entered promiscuous mode [ 268.384163][T11379] veth1_vlan: entered promiscuous mode [ 268.456058][T11379] veth0_macvtap: entered promiscuous mode [ 268.472615][T11379] veth1_macvtap: entered promiscuous mode [ 268.546724][T11379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.595132][T11379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.637729][T11379] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.673780][T11379] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.694981][T11379] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.705275][T11379] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.880630][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.903384][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.030994][ T8593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.073341][ T8593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.831933][T11625] netlink: 'syz.5.1515': attribute type 11 has an invalid length. [ 269.921237][T11628] unsupported nlmsg_type 40 [ 270.053471][ T5861] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 270.063811][ T5861] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 270.072478][ T5861] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 270.081111][ T5861] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 270.090977][ T5861] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 270.352690][ T8614] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.445717][ T8614] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.633145][ T8614] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.655881][T11634] chnl_net:caif_netlink_parms(): no params data found [ 270.750891][T11634] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.758091][T11634] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.765862][T11634] bridge_slave_0: entered allmulticast mode [ 270.775647][T11634] bridge_slave_0: entered promiscuous mode [ 270.786147][T11634] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.793884][T11634] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.804410][T11634] bridge_slave_1: entered allmulticast mode [ 270.814071][T11634] bridge_slave_1: entered promiscuous mode [ 270.854270][T11634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.868125][T11634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.922307][T11634] team0: Port device team_slave_0 added [ 270.932233][T11634] team0: Port device team_slave_1 added [ 270.974367][ T8614] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.012774][T11634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.021083][T11634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.047912][T11634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.063023][T11634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.070657][T11634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.098818][T11634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.406158][T11634] hsr_slave_0: entered promiscuous mode [ 271.429882][T11634] hsr_slave_1: entered promiscuous mode [ 271.436390][T11634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.498454][T11634] Cannot create hsr debugfs directory [ 271.665805][T11662] netlink: 'syz.8.1523': attribute type 1 has an invalid length. [ 271.838893][ T5861] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 271.849469][ T5861] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 271.857985][ T5861] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 271.879835][ T5861] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 271.890346][ T5861] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 272.122096][T11662] bond2: (slave bridge4): making interface the new active one [ 272.153580][T11662] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 272.231755][ T5863] Bluetooth: hci6: command tx timeout [ 272.396631][ T8614] bridge_slave_1: left allmulticast mode [ 272.420858][ T8614] bridge_slave_1: left promiscuous mode [ 272.436885][ T8614] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.555761][ T8614] bridge_slave_0: left allmulticast mode [ 272.581308][ T8614] bridge_slave_0: left promiscuous mode [ 272.612061][ T8614] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.921013][T11692] __nla_validate_parse: 3 callbacks suppressed [ 272.921127][T11692] netlink: 512 bytes leftover after parsing attributes in process `syz.6.1530'. [ 273.540457][ T8614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.561067][ T8614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.582998][ T8614] bond0 (unregistering): Released all slaves [ 273.625000][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1531'. [ 273.694899][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1531'. [ 273.984015][ T5863] Bluetooth: hci10: command tx timeout [ 274.297121][ T8614] hsr_slave_0: left promiscuous mode [ 274.303940][ T5863] Bluetooth: hci6: command tx timeout [ 274.324841][ T8614] hsr_slave_1: left promiscuous mode [ 274.339652][ T8614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.347143][ T8614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.373490][ T8614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.382887][ T8614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.427465][T11725] netlink: 'syz.8.1540': attribute type 1 has an invalid length. [ 274.430260][ T8614] veth1_macvtap: left promiscuous mode [ 274.446909][T11725] netlink: 144 bytes leftover after parsing attributes in process `syz.8.1540'. [ 274.458668][ T8614] veth0_macvtap: left promiscuous mode [ 274.464371][ T8614] veth1_vlan: left promiscuous mode [ 274.477259][T11725] netlink: 'syz.8.1540': attribute type 1 has an invalid length. [ 274.483469][ T8614] veth0_vlan: left promiscuous mode [ 274.502579][T11725] netlink: 'syz.8.1540': attribute type 2 has an invalid length. [ 274.512709][T11725] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1540'. [ 275.044766][ T8614] team0 (unregistering): Port device team_slave_1 removed [ 275.097293][ T8614] team0 (unregistering): Port device team_slave_0 removed [ 275.578788][T11730] lo speed is unknown, defaulting to 1000 [ 275.584871][T11730] lo speed is unknown, defaulting to 1000 [ 275.814666][T11730] lo speed is unknown, defaulting to 1000 [ 275.859582][T11730] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 276.016425][T11634] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 276.060349][ T5863] Bluetooth: hci10: command tx timeout [ 276.086894][T11668] chnl_net:caif_netlink_parms(): no params data found [ 276.137381][T11730] lo speed is unknown, defaulting to 1000 [ 276.144838][T11634] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 276.206582][T11730] lo speed is unknown, defaulting to 1000 [ 276.214385][T11634] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 276.373219][T11730] lo speed is unknown, defaulting to 1000 [ 276.379913][ T5861] Bluetooth: hci6: command tx timeout [ 276.382083][T11634] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 276.424913][T11730] lo speed is unknown, defaulting to 1000 [ 276.469625][T11730] lo speed is unknown, defaulting to 1000 [ 276.495646][T11730] lo speed is unknown, defaulting to 1000 [ 276.554301][T11668] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.561927][T11730] lo speed is unknown, defaulting to 1000 [ 276.579864][T11668] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.587328][T11668] bridge_slave_0: entered allmulticast mode [ 276.597623][T11668] bridge_slave_0: entered promiscuous mode [ 276.619046][T11730] lo speed is unknown, defaulting to 1000 [ 276.628464][T11668] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.635648][T11668] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.659822][T11668] bridge_slave_1: entered allmulticast mode [ 276.667944][T11668] bridge_slave_1: entered promiscuous mode [ 276.695530][T11730] lo speed is unknown, defaulting to 1000 [ 276.707310][T11730] lo speed is unknown, defaulting to 1000 [ 276.941980][T11730] lo speed is unknown, defaulting to 1000 [ 276.952748][T11668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.997207][T11668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.059590][T11776] netlink: 'syz.6.1551': attribute type 11 has an invalid length. [ 277.067516][T11776] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1551'. [ 277.245042][T11668] team0: Port device team_slave_0 added [ 277.337056][T11781] pim6reg: entered allmulticast mode [ 277.381853][T11668] team0: Port device team_slave_1 added [ 277.517946][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1555'. [ 277.563140][T11789] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 277.592577][T11789] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 277.601546][T11789] gretap1: entered promiscuous mode [ 277.607162][T11789] gretap1: entered allmulticast mode [ 277.676171][T11791] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 277.724760][T11668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.746162][T11668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.774638][T11668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.809795][T11668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.816807][T11668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.879482][T11668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.148598][ T5861] Bluetooth: hci10: command tx timeout [ 278.423450][T11668] hsr_slave_0: entered promiscuous mode [ 278.459183][ T5861] Bluetooth: hci6: command tx timeout [ 278.470445][T11668] hsr_slave_1: entered promiscuous mode [ 278.486439][T11668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.506005][T11668] Cannot create hsr debugfs directory [ 278.539629][T11634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.662230][T11825] lo speed is unknown, defaulting to 1000 [ 278.680823][T11634] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.754863][ T8604] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.762125][ T8604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.830639][ T8604] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.837908][ T8604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.711774][T11668] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 279.726792][T11668] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 279.762041][T11668] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 279.783665][T11668] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 279.809687][T11634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.899912][T11855] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1563'. [ 280.054664][T11668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.144263][T11668] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.175298][ T8602] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.182556][ T8602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.229469][ T5861] Bluetooth: hci10: command tx timeout [ 280.267900][ T8604] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.275136][ T8604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.731970][T11634] veth0_vlan: entered promiscuous mode [ 280.762926][T11634] veth1_vlan: entered promiscuous mode [ 280.829409][T11634] veth0_macvtap: entered promiscuous mode [ 280.854847][T11634] veth1_macvtap: entered promiscuous mode [ 280.923836][T11634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.946704][T11668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.964392][T11634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.989778][T11634] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.998840][T11634] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.007704][T11634] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.018648][T11634] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.199808][ T8602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.220372][ T8602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.256085][T11887] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1567'. [ 281.277608][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1567'. [ 281.286825][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1567'. [ 281.299580][T11889] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1567'. [ 281.333387][ T8599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.343111][T11887] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1567'. [ 281.359446][ T8599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.876712][T11668] veth0_vlan: entered promiscuous mode [ 281.893508][T11668] veth1_vlan: entered promiscuous mode [ 281.946894][T11668] veth0_macvtap: entered promiscuous mode [ 281.990537][T11668] veth1_macvtap: entered promiscuous mode [ 282.085046][T11668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.132169][T11668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.213391][T11668] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.241678][T11668] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.262042][T11668] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.280038][T11668] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.512031][T11934] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1575'. [ 282.561951][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1574'. [ 282.655349][T11935] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 282.805962][T11935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.878376][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.905868][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.991917][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.018006][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.114333][T11948] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1578'. [ 283.659515][T11968] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1582'. [ 283.873853][ T8603] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.040151][ T8603] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.395078][ T8603] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.465864][ T8603] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.641671][ T8603] bridge_slave_1: left allmulticast mode [ 284.647388][ T8603] bridge_slave_1: left promiscuous mode [ 284.653680][ T8603] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.664991][ T8603] bridge_slave_0: left allmulticast mode [ 284.671084][ T8603] bridge_slave_0: left promiscuous mode [ 284.676807][ T8603] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.050675][ T8603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.062947][ T8603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.074255][ T8603] bond0 (unregistering): Released all slaves [ 285.248448][T11981] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1583'. [ 285.264223][T11981] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1583'. [ 285.273761][T11981] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1583'. [ 285.285626][T11981] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1583'. [ 285.672466][ T8603] hsr_slave_0: left promiscuous mode [ 285.680209][ T5861] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 285.688059][ T8603] hsr_slave_1: left promiscuous mode [ 285.694896][ T5861] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 285.695808][ T8603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.711943][ T5861] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 285.717235][ T8603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.736287][ T5861] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 285.737330][ T8603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.754643][ T8603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.759024][ T5861] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 285.801094][ T8603] veth1_macvtap: left promiscuous mode [ 285.806686][ T8603] veth0_macvtap: left promiscuous mode [ 285.816833][ T8603] veth1_vlan: left promiscuous mode [ 285.830284][ T8603] veth0_vlan: left promiscuous mode [ 286.150283][T11997] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1590'. [ 286.178731][T11996] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1589'. [ 286.707354][ T8603] team0 (unregistering): Port device team_slave_1 removed [ 286.754989][ T8603] team0 (unregistering): Port device team_slave_0 removed [ 287.278537][T11997] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1590'. [ 287.295158][T11997] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1590'. [ 287.355791][T11988] lo speed is unknown, defaulting to 1000 [ 287.458771][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1592'. [ 287.671147][T12007] bond0: (slave bond_slave_0): Releasing backup interface [ 287.783253][T12017] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1593'. [ 287.818649][ T5861] Bluetooth: hci10: command tx timeout [ 287.848478][T12021] netlink: 'syz.9.1596': attribute type 4 has an invalid length. [ 288.303280][T11988] chnl_net:caif_netlink_parms(): no params data found [ 288.354762][T12039] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 288.458642][T12041] netlink: 'syz.6.1601': attribute type 1 has an invalid length. [ 288.491696][T12041] netlink: 'syz.6.1601': attribute type 2 has an invalid length. [ 288.631312][T11988] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.640279][T11988] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.647612][T11988] bridge_slave_0: entered allmulticast mode [ 288.657236][T11988] bridge_slave_0: entered promiscuous mode [ 288.667503][T11988] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.675444][T11988] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.683339][T11988] bridge_slave_1: entered allmulticast mode [ 288.691806][T11988] bridge_slave_1: entered promiscuous mode [ 288.799991][T12053] netlink: 'syz.6.1605': attribute type 10 has an invalid length. [ 288.825036][T11988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.837519][T12053] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.867004][T12053] bridge_slave_1: left allmulticast mode [ 288.874595][T12053] bridge_slave_1: left promiscuous mode [ 288.893860][T12053] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.911275][T12053] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 288.942319][T11988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.087875][T11988] team0: Port device team_slave_0 added [ 289.105775][T11988] team0: Port device team_slave_1 added [ 289.263350][T11988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.270855][T11988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.309398][T11988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.345161][T11988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.356771][T11988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.396531][T11988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.567384][T11988] hsr_slave_0: entered promiscuous mode [ 289.585346][T11988] hsr_slave_1: entered promiscuous mode [ 289.600236][T11988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.613388][T11988] Cannot create hsr debugfs directory [ 289.899735][ T5861] Bluetooth: hci10: command tx timeout [ 290.011608][T12078] bond0 (unregistering): left promiscuous mode [ 290.027776][T12078] bond_slave_0: left promiscuous mode [ 290.034056][T12078] bond_slave_1: left promiscuous mode [ 290.056850][T12078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.081949][T12078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.104822][T12078] bond0 (unregistering): Released all slaves [ 290.175393][T12083] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.184253][T12083] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.398111][T12095] openvswitch: netlink: Actions may not be safe on all matching packets [ 290.772384][T11988] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 290.825623][T11988] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 290.847391][T11988] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 290.868688][T11988] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 291.095335][T12123] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 291.111899][T11988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.153244][T11988] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.176662][ T8604] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.183910][ T8604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.225222][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.232510][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.436830][T12131] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 291.453062][T12131] netlink: 'syz.5.1630': attribute type 39 has an invalid length. [ 291.709019][T11988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.980731][ T5861] Bluetooth: hci10: command tx timeout [ 292.204455][T11988] veth0_vlan: entered promiscuous mode [ 292.243901][T11988] veth1_vlan: entered promiscuous mode [ 292.333246][T11988] veth0_macvtap: entered promiscuous mode [ 292.346455][T11988] veth1_macvtap: entered promiscuous mode [ 292.424415][T12159] netlink: 'syz.5.1637': attribute type 11 has an invalid length. [ 292.428267][T11988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.435013][T12159] __nla_validate_parse: 8 callbacks suppressed [ 292.435032][T12159] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1637'. [ 292.460216][T11988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.563727][T11988] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.576679][T11988] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.604925][T11988] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.627995][T11988] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.695760][T12161] netlink: 'syz.5.1637': attribute type 11 has an invalid length. [ 292.722168][T12161] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1637'. [ 293.006133][ T8604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.058747][ T8604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.151608][ T8604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.171905][ T8604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.389956][ T5863] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 293.399936][ T5863] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 293.407938][ T5863] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 293.417090][ T5863] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 293.430262][ T5863] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 293.597632][T12185] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1644'. [ 293.655126][T12177] lo speed is unknown, defaulting to 1000 [ 293.802739][T12189] xt_hashlimit: size too large, truncated to 1048576 [ 293.897283][T12189] xt_hashlimit: overflow, try lower: 3/0 [ 293.897665][T12192] C: renamed from lo (while UP) [ 293.961818][T12192] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 294.070280][T12177] chnl_net:caif_netlink_parms(): no params data found [ 294.341987][T12177] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.352650][T12177] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.372469][T12177] bridge_slave_0: entered allmulticast mode [ 294.382598][T12177] bridge_slave_0: entered promiscuous mode [ 294.401696][T12177] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.420928][T12177] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.429214][T12211] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1651'. [ 294.461398][T12177] bridge_slave_1: entered allmulticast mode [ 294.487616][T12177] bridge_slave_1: entered promiscuous mode [ 294.616159][ T8602] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.709724][T12177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.735577][T12177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.811152][T12177] team0: Port device team_slave_0 added [ 294.828041][T12177] team0: Port device team_slave_1 added [ 294.881624][T12177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.889268][T12177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.915748][T12177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.929044][T12177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.936037][T12177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.963132][T12177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.045659][ T8602] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.075098][T12177] hsr_slave_0: entered promiscuous mode [ 295.083463][T12177] hsr_slave_1: entered promiscuous mode [ 295.095554][T12177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.104386][T12177] Cannot create hsr debugfs directory [ 295.135094][ T8602] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.229559][ T8602] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.476160][ T8602] bridge_slave_1: left allmulticast mode [ 295.487464][ T8602] bridge_slave_1: left promiscuous mode [ 295.493515][ T8602] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.502096][ T5863] Bluetooth: hci11: command tx timeout [ 295.513138][ T8602] bridge_slave_0: left allmulticast mode [ 295.519840][ T8602] bridge_slave_0: left promiscuous mode [ 295.525734][ T8602] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.912288][ T8602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.924948][ T8602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.936787][ T8602] bond0 (unregistering): Released all slaves [ 296.167030][T12177] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.169756][T12224] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1653'. [ 296.181688][T12177] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 296.237563][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1653'. [ 296.249612][T12220] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1653'. [ 296.443276][T12224] vlan2: entered allmulticast mode [ 296.459755][T12224] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 296.591269][T12177] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.630311][T12177] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 296.737105][ T5861] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 296.748339][ T5861] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 296.756801][ T5861] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 296.766531][ T5861] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 296.777690][ T5861] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 296.783005][T12177] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.848215][T12177] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 296.957300][T12234] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1655'. [ 297.041642][T12177] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.063195][T12177] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 297.166784][ T8602] hsr_slave_0: left promiscuous mode [ 297.185029][ T8602] hsr_slave_1: left promiscuous mode [ 297.215772][ T8602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.225348][ T8602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.233911][ T8602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.241843][ T8602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.266779][ T8602] veth1_macvtap: left promiscuous mode [ 297.272729][ T8602] veth0_macvtap: left promiscuous mode [ 297.278547][ T8602] veth1_vlan: left promiscuous mode [ 297.284260][ T8602] veth0_vlan: left promiscuous mode [ 297.578380][ T5861] Bluetooth: hci11: command tx timeout [ 297.914639][ T8602] team0 (unregistering): Port device team_slave_1 removed [ 297.973097][ T8602] team0 (unregistering): Port device team_slave_0 removed [ 298.536773][T12232] lo speed is unknown, defaulting to 1000 [ 298.860527][ T5861] Bluetooth: hci10: command tx timeout [ 298.917258][T12252] syzkaller0: entered promiscuous mode [ 298.923710][T12252] syzkaller0: entered allmulticast mode [ 298.936359][T12177] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 298.949372][T12177] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 298.971642][T12258] 8021q: VLANs not supported on ipvlan1 [ 298.980481][T12177] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 299.006148][T12177] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 299.105880][T12261] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1664'. [ 299.262377][ T5861] Bluetooth: hci5: command 0x0405 tx timeout [ 299.658501][ T5863] Bluetooth: hci11: command tx timeout [ 300.943830][ T5863] Bluetooth: hci10: command tx timeout [ 301.200334][T12232] chnl_net:caif_netlink_parms(): no params data found [ 301.560381][T12299] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1668'. [ 301.631033][T12232] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.639203][T12232] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.646570][T12232] bridge_slave_0: entered allmulticast mode [ 301.655241][T12232] bridge_slave_0: entered promiscuous mode [ 301.699428][T12232] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.716955][T12232] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.738607][ T5863] Bluetooth: hci11: command tx timeout [ 301.744646][T12232] bridge_slave_1: entered allmulticast mode [ 301.777052][T12232] bridge_slave_1: entered promiscuous mode [ 301.803397][T12301] x_tables: ip_tables: osf match: only valid for protocol 6 [ 301.887502][T12232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.942949][T12232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.960668][T12177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.057698][T12232] team0: Port device team_slave_0 added [ 302.082201][T12232] team0: Port device team_slave_1 added [ 302.212878][T12232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.239326][T12232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.296360][T12232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.322421][T12232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.331779][T12232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.361945][T12232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.376824][T12177] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.430153][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.437407][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.475362][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.482596][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.513296][T12322] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 302.578905][T12325] af_packet: tpacket_rcv: packet too big, clamped from 88 to 4294967272. macoff=96 [ 302.625194][T12232] hsr_slave_0: entered promiscuous mode [ 302.641576][T12232] hsr_slave_1: entered promiscuous mode [ 302.656757][T12232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.666883][T12232] Cannot create hsr debugfs directory [ 302.880417][T12336] x_tables: duplicate underflow at hook 3 [ 302.900287][T12336] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1678'. [ 302.986410][T12332] netlink: 4552 bytes leftover after parsing attributes in process `syz.5.1678'. [ 303.018413][ T5863] Bluetooth: hci10: command tx timeout [ 303.115140][T12332] netlink: 4552 bytes leftover after parsing attributes in process `syz.5.1678'. [ 303.138684][T12341] netlink: 'syz.6.1681': attribute type 10 has an invalid length. [ 303.206131][T12336] lo speed is unknown, defaulting to 1000 [ 303.260552][T12341] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 303.302643][T12341] netlink: 'syz.6.1681': attribute type 10 has an invalid length. [ 303.469501][T12341] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 303.499173][T12341] netlink: 'syz.6.1681': attribute type 10 has an invalid length. [ 303.572337][T12341] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 303.621332][T12341] netlink: 'syz.6.1681': attribute type 10 has an invalid length. [ 303.639496][T12341] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 303.657083][T12341] netlink: 'syz.6.1681': attribute type 10 has an invalid length. [ 303.686132][ T5861] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 303.695767][ T5861] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 303.704225][ T5861] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 303.715039][ T5861] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 303.732466][ T5861] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 303.864233][T12341] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 303.882663][T12353] netlink: 'syz.5.1682': attribute type 21 has an invalid length. [ 303.890912][T12353] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1682'. [ 303.907155][T12341] netlink: 'syz.6.1681': attribute type 10 has an invalid length. [ 303.964957][T12353] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1682'. [ 303.975202][T12341] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 304.094693][T12177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.129006][T12347] lo speed is unknown, defaulting to 1000 [ 304.196553][T12360] netlink: 'syz.5.1684': attribute type 7 has an invalid length. [ 304.260752][T12361] veth3: entered promiscuous mode [ 304.313367][T12356] veth5: entered promiscuous mode [ 304.563215][T12177] veth0_vlan: entered promiscuous mode [ 304.572693][T12372] xt_SECMARK: invalid mode: 0 [ 304.745685][T12177] veth1_vlan: entered promiscuous mode [ 304.762119][T12375] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1688'. [ 304.905028][T12232] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 304.932679][T12232] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 305.000063][T12232] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 305.045470][T12232] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 305.068977][T12347] chnl_net:caif_netlink_parms(): no params data found [ 305.098793][ T5861] Bluetooth: hci10: command tx timeout [ 305.350175][T12177] veth0_macvtap: entered promiscuous mode [ 305.424147][T12177] veth1_macvtap: entered promiscuous mode [ 305.451302][T12401] batadv1: entered allmulticast mode [ 305.501959][T12404] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1694'. [ 305.523034][T12404] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1694'. [ 305.543390][T12347] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.570692][T12347] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.598941][T12347] bridge_slave_0: entered allmulticast mode [ 305.607048][T12347] bridge_slave_0: entered promiscuous mode [ 305.650057][T12347] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.657268][T12347] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.667144][T12347] bridge_slave_1: entered allmulticast mode [ 305.683463][T12347] bridge_slave_1: entered promiscuous mode [ 305.774257][T12412] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1696'. [ 305.818457][ T5861] Bluetooth: hci12: command tx timeout [ 305.830849][T12347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.909454][T12414] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 305.943974][T12347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.033025][T12177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.094310][T12347] team0: Port device team_slave_0 added [ 306.145690][T12177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.167946][T12347] team0: Port device team_slave_1 added [ 306.250856][T12177] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.265920][T12425] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1702'. [ 306.275090][T12177] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.275129][T12177] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.275161][T12177] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.287158][T12232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.318642][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1701'. [ 306.349254][T12347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.356270][T12347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.383833][T12347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.397898][T12347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.405033][T12347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.431839][T12347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.464320][T12429] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1703'. [ 306.680102][T12347] hsr_slave_0: entered promiscuous mode [ 306.687169][T12347] hsr_slave_1: entered promiscuous mode [ 306.724454][T12347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.768989][T12347] Cannot create hsr debugfs directory [ 306.783990][T12232] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.968831][ T8602] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.976065][ T8602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.131289][T12448] netlink: 'syz.6.1708': attribute type 10 has an invalid length. [ 307.202293][T12448] batman_adv: batadv0: Adding interface: team0 [ 307.221473][T12448] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.263067][T12448] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 307.310957][ T8599] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.318281][ T8599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.737262][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.757981][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.898817][ T5861] Bluetooth: hci12: command tx timeout [ 307.927412][T12347] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.079034][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.086935][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.142796][T12347] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.400076][T12347] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.566821][T12488] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1713'. [ 308.663423][T12347] netdevsim netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.740763][T12496] netlink: 'syz.6.1715': attribute type 1 has an invalid length. [ 308.848531][T12232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.187833][T12347] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 309.205844][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1717'. [ 309.248682][T12507] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1717'. [ 309.298111][T12347] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 309.366645][T12347] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 309.434975][T12347] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 309.981519][ T5861] Bluetooth: hci12: command tx timeout [ 310.213709][T12552] gtp0: entered promiscuous mode [ 310.300889][T12347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.320705][T12559] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 310.359373][T12232] veth0_vlan: entered promiscuous mode [ 310.455534][T12232] veth1_vlan: entered promiscuous mode [ 310.527607][T12347] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.627394][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.634695][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.709362][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.716579][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.819872][T12571] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1730'. [ 310.825381][T12232] veth0_macvtap: entered promiscuous mode [ 310.841859][T12571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1730'. [ 310.916023][T12232] veth1_macvtap: entered promiscuous mode [ 310.934006][T12567] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1728'. [ 310.967806][T12567] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1728'. [ 311.043383][T12232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.083259][T12232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.112701][T12232] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.124928][T12232] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.141834][T12232] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.155508][T12232] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.411785][ T8604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.435345][ T8604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.444513][T12584] C: entered promiscuous mode [ 311.480839][T12584] tunl0: entered promiscuous mode [ 311.490173][T12584] gre0: entered promiscuous mode [ 311.533515][T12584] gretap0: entered promiscuous mode [ 311.579060][T12584] erspan0: entered promiscuous mode [ 311.587911][T12584] ip_vti0: entered promiscuous mode [ 311.630949][T12584] ip6_vti0: entered promiscuous mode [ 311.661008][T12584] sit0: entered promiscuous mode [ 311.687054][T12584] ip6tnl0: entered promiscuous mode [ 311.707547][T12584] ip6gre0: entered promiscuous mode [ 311.739251][T12584] syz_tun: entered promiscuous mode [ 311.764079][T12584] ip6gretap0: entered promiscuous mode [ 311.792956][T12584] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.837599][T12584] bridge0: entered promiscuous mode [ 311.859889][T12584] vcan0: entered promiscuous mode [ 311.907210][T12584] bond0: entered promiscuous mode [ 311.928232][T12584] bond_slave_1: entered promiscuous mode [ 311.934262][T12584] bridge_slave_1: entered promiscuous mode [ 311.951794][T12584] team0: entered promiscuous mode [ 311.956889][T12584] team_slave_0: entered promiscuous mode [ 311.989438][T12584] team_slave_1: entered promiscuous mode [ 312.004201][T12584] dummy0: entered promiscuous mode [ 312.032614][T12584] nlmon0: entered promiscuous mode [ 312.046436][T12584] caif0: entered promiscuous mode [ 312.054206][T12584] batadv0: entered promiscuous mode [ 312.060765][ T5861] Bluetooth: hci12: command tx timeout [ 312.078378][T12584] vxcan0: entered promiscuous mode [ 312.093833][T12584] vxcan1: entered promiscuous mode [ 312.107506][T12584] veth0: entered promiscuous mode [ 312.130412][T12584] veth1: entered promiscuous mode [ 312.166488][T12584] wg0: entered promiscuous mode [ 312.185674][T12584] wg1: entered promiscuous mode [ 312.216888][T12584] wg2: entered promiscuous mode [ 312.231196][T12584] veth0_to_bridge: entered promiscuous mode [ 312.281527][T12584] veth1_to_bridge: entered promiscuous mode [ 312.303129][T12584] veth1_to_bond: entered promiscuous mode [ 312.315423][T12584] veth0_to_team: entered promiscuous mode [ 312.329069][T12584] veth1_to_team: entered promiscuous mode [ 312.342605][T12584] veth0_to_batadv: entered promiscuous mode [ 312.361674][T12584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.380621][T12584] batadv_slave_0: entered promiscuous mode [ 312.407297][T12584] veth1_to_batadv: entered promiscuous mode [ 312.434092][T12584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.449640][T12584] batadv_slave_1: entered promiscuous mode [ 312.484188][T12584] xfrm0: entered promiscuous mode [ 312.545617][T12584] veth0_to_hsr: entered promiscuous mode [ 312.577722][T12584] veth1_to_hsr: entered promiscuous mode [ 312.634860][T12584] hsr0: entered promiscuous mode [ 312.659685][T12584] veth1_virt_wifi: entered promiscuous mode [ 312.682236][T12584] veth0_virt_wifi: entered promiscuous mode [ 312.702118][T12584] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 312.753523][T12584] vlan0: entered promiscuous mode [ 312.773568][T12584] vlan1: entered promiscuous mode [ 312.789217][T12584] macvlan0: entered promiscuous mode [ 312.812082][T12584] macvlan1: entered promiscuous mode [ 312.840386][T12584] ipvlan0: entered promiscuous mode [ 312.845769][T12584] ipvlan1: entered promiscuous mode [ 312.871428][T12584] macvtap0: entered promiscuous mode [ 312.900183][T12584] macsec0: entered promiscuous mode [ 312.919383][T12584] geneve0: entered promiscuous mode [ 312.937458][T12584] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.958027][T12584] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.972296][T12584] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.982539][T12584] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.994185][T12584] geneve1: entered promiscuous mode [ 313.008968][T12584] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 313.027419][T12584] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 313.042131][T12584] netdevsim netdevsim6 netdevsim3: entered promiscuous mode [ 313.082504][T12584] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 313.099837][T12584] mac80211_hwsim hwsim31 wlan1: entered promiscuous mode [ 313.118022][T12584] syztnl2: entered promiscuous mode [ 313.123791][T12584] wireguard0: entered promiscuous mode [ 313.131441][T12584] syztnl1: entered promiscuous mode [ 313.136857][T12584] vxcan2: entered promiscuous mode [ 313.143621][T12584] vxcan3: entered promiscuous mode [ 313.154698][T12584] ipip0: entered promiscuous mode [ 313.170519][T12584] erspan1: entered promiscuous mode [ 313.176138][T12584] bridge1: entered promiscuous mode [ 313.184040][T12584] gre1: entered promiscuous mode [ 313.193210][T12584] ip6tnl1: entered promiscuous mode [ 313.202452][T12584] veth2: entered promiscuous mode [ 313.207718][T12584] veth4: entered promiscuous mode [ 313.213639][T12584] mac80211_hwsim hwsim30 pim6reg0: entered promiscuous mode [ 313.223150][T12584] vxlan0: entered promiscuous mode [ 313.380928][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.414941][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.445273][T12347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.473563][T12599] netlink: 'syz.6.1737': attribute type 11 has an invalid length. [ 313.734319][T12347] veth0_vlan: entered promiscuous mode [ 313.872474][T12610] netlink: 'syz.5.1742': attribute type 1 has an invalid length. [ 313.967963][T12610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.994628][T12347] veth1_vlan: entered promiscuous mode [ 314.025917][T12615] tipc: Started in network mode [ 314.066680][T12615] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 314.100618][T12621] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1743'. [ 314.129544][T12615] tipc: Enabled bearer , priority 10 [ 314.223078][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.425700][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.496124][T12347] veth0_macvtap: entered promiscuous mode [ 314.530579][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.551990][T12347] veth1_macvtap: entered promiscuous mode [ 314.574588][T12347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.591126][T12347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.612692][T12347] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.622964][T12347] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.636032][T12347] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.645222][T12347] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.676819][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.785635][ T8614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.811949][ T8614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.876732][ T8602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.884884][ T8602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.987961][ T13] bridge_slave_1: left allmulticast mode [ 314.996833][ T13] bridge_slave_1: left promiscuous mode [ 315.010696][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.024526][ T13] bridge_slave_0: left allmulticast mode [ 315.030824][ T13] bridge_slave_0: left promiscuous mode [ 315.036612][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.250845][ T6290] tipc: Node number set to 10463914 [ 315.463529][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.474796][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.486048][ T13] bond0 (unregistering): Released all slaves [ 315.803368][T12631] netlink: 'syz.5.1746': attribute type 21 has an invalid length. [ 315.839379][T12631] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1746'. [ 315.904456][ T13] hsr_slave_0: left promiscuous mode [ 315.930682][ T13] hsr_slave_1: left promiscuous mode [ 315.944087][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.961089][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.972016][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.985001][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.057052][ T13] veth1_macvtap: left promiscuous mode [ 316.077034][ T13] veth0_macvtap: left promiscuous mode [ 316.086615][ T13] veth1_vlan: left promiscuous mode [ 316.099905][ T13] veth0_vlan: left promiscuous mode [ 316.246526][ T5863] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 316.256954][ T5863] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 316.270163][ T5863] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 316.279267][ T5863] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 316.287210][ T5863] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 316.810146][ T13] team0 (unregistering): Port device team_slave_1 removed [ 316.862194][ T13] team0 (unregistering): Port device team_slave_0 removed [ 317.531127][T12647] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1749'. [ 317.558004][T12640] lo speed is unknown, defaulting to 1000 [ 317.600023][T12650] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1750'. [ 317.989239][T12664] ipt_REJECT: ECHOREPLY no longer supported. [ 318.023047][T12664] sctp: [Deprecated]: syz.0.1756 (pid 12664) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.023047][T12664] Use struct sctp_sack_info instead [ 318.045395][T12667] netlink: 'syz.1.1757': attribute type 16 has an invalid length. [ 318.095557][T12667] netlink: 'syz.1.1757': attribute type 17 has an invalid length. [ 318.379368][ T5863] Bluetooth: hci10: command tx timeout [ 318.445413][T12640] chnl_net:caif_netlink_parms(): no params data found [ 318.779172][T12693] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci10/hci10:200/input7 [ 319.093689][T12712] xt_hashlimit: overflow, try lower: 4294967295/0 [ 319.130150][T12640] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.147448][T12712] tipc: Failed to remove unknown binding: 66,1,1/0:3123489236/3123489238 [ 319.170032][T12640] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.177457][T12640] bridge_slave_0: entered allmulticast mode [ 319.190245][T12640] bridge_slave_0: entered promiscuous mode [ 319.223975][T12640] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.239633][T12640] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.247041][T12640] bridge_slave_1: entered allmulticast mode [ 319.283318][T12640] bridge_slave_1: entered promiscuous mode [ 319.502430][T12640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.527602][T12640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.541490][T12726] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1772'. [ 319.704770][T12640] team0: Port device team_slave_0 added [ 319.770138][T12738] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 319.792885][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'. [ 319.830052][T12640] team0: Port device team_slave_1 added [ 319.894784][T12742] xt_recent: Unsupported userspace flags (00000061) [ 319.929428][T12640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.930507][T12742] netlink: 'syz.6.1775': attribute type 1 has an invalid length. [ 319.936619][T12640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.974343][T12640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.091954][T12742] 8021q: adding VLAN 0 to HW filter on device bond1 [ 320.140137][T12743] ip6erspan0: entered promiscuous mode [ 320.149765][T12749] netlink: 'syz.0.1777': attribute type 24 has an invalid length. [ 320.162485][T12743] bond1: (slave ip6erspan0): making interface the new active one [ 320.182220][T12743] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 320.201948][T12640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.212459][T12640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.240184][T12640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.395462][T12640] hsr_slave_0: entered promiscuous mode [ 320.429692][T12640] hsr_slave_1: entered promiscuous mode [ 320.446612][T12640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.460166][ T5863] Bluetooth: hci10: command tx timeout [ 320.515644][T12640] Cannot create hsr debugfs directory [ 320.620518][T12758] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1780'. [ 320.640760][T12762] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1782'. [ 320.668721][T12762] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1782'. [ 320.722666][T12762] netlink: 'syz.5.1782': attribute type 6 has an invalid length. [ 320.749006][T12762] netlink: 'syz.5.1782': attribute type 5 has an invalid length. [ 320.767828][T12762] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1782'. [ 320.963753][T12773] netlink: 192 bytes leftover after parsing attributes in process `syz.6.1786'. [ 321.068466][T12777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1788'. [ 321.099272][T12777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1788'. [ 321.131579][T12780] netlink: zone id is out of range [ 321.146659][T12780] netlink: zone id is out of range [ 321.153073][T12780] netlink: zone id is out of range [ 321.180154][T12780] netlink: zone id is out of range [ 321.207941][T12780] netlink: zone id is out of range [ 321.215783][T12783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.224984][T12780] netlink: zone id is out of range [ 321.238712][T12780] netlink: zone id is out of range [ 321.243905][T12780] netlink: zone id is out of range [ 321.303834][T12785] netlink: 'syz.6.1791': attribute type 21 has an invalid length. [ 321.372469][T12787] netlink: 'syz.0.1792': attribute type 29 has an invalid length. [ 321.705002][T12803] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1795'. [ 322.229200][T12827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1804'. [ 322.264046][T12827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1804'. [ 322.270827][T12640] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 322.300829][T12640] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 322.350103][T12833] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1805'. [ 322.385215][T12640] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 322.402980][T12640] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 322.539340][ T5863] Bluetooth: hci10: command tx timeout [ 322.562476][T12846] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1806'. [ 322.603031][T12845] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1806'. [ 322.618019][T12640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.742236][T12640] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.796140][ T8599] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.803415][ T8599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.861525][T12857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1808'. [ 322.927800][ T8604] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.935060][ T8604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.585343][T12881] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 323.643784][T12885] netlink: 'syz.0.1817': attribute type 11 has an invalid length. [ 323.673462][T12885] block nbd1: Unsupported socket: shutdown callout must be supported. [ 323.805131][T12640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.191424][T12900] netlink: 'syz.6.1823': attribute type 33 has an invalid length. [ 324.620709][ T5863] Bluetooth: hci10: command tx timeout [ 324.811686][T12640] veth0_vlan: entered promiscuous mode [ 324.849020][T12640] veth1_vlan: entered promiscuous mode [ 325.007243][T12640] veth0_macvtap: entered promiscuous mode [ 325.033345][T12640] veth1_macvtap: entered promiscuous mode [ 325.125459][T12640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.155301][T12938] netlink: 'syz.0.1837': attribute type 2 has an invalid length. [ 325.215992][T12640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.262316][T12640] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.299160][T12640] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.328287][T12640] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.356309][T12640] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.515022][T12950] delete_channel: no stack [ 325.725124][ T8599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.762903][ T8599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.877666][ T8603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.917612][ T8603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.082567][T12972] netlink: 'syz.0.1849': attribute type 1 has an invalid length. [ 326.171911][T12972] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.246537][T12977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.296911][T12977] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 326.345380][T12977] bond1: (slave vti0): Error -95 calling set_mac_address [ 327.023305][ T8604] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.165074][ T8604] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.260697][ T8604] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.347557][ T8604] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.504413][ T8604] bridge_slave_1: left allmulticast mode [ 327.511416][ T8604] bridge_slave_1: left promiscuous mode [ 327.517167][ T8604] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.529858][ T8604] bridge_slave_0: left allmulticast mode [ 327.537403][ T8604] bridge_slave_0: left promiscuous mode [ 327.543749][ T8604] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.944655][ T8604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.956084][ T8604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.970525][ T8604] bond0 (unregistering): Released all slaves [ 328.252160][ T8604] hsr_slave_0: left promiscuous mode [ 328.259225][ T8604] hsr_slave_1: left promiscuous mode [ 328.265180][ T8604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.272965][ T8604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.282031][ T8604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.293468][ T8604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.322965][ T8604] veth1_macvtap: left promiscuous mode [ 328.328739][ T8604] veth0_macvtap: left promiscuous mode [ 328.334476][ T8604] veth1_vlan: left promiscuous mode [ 328.341766][ T8604] veth0_vlan: left promiscuous mode [ 328.660232][T13017] __nla_validate_parse: 7 callbacks suppressed [ 328.660256][T13017] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1857'. [ 329.252817][ T5861] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 329.263381][ T5861] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 329.298690][ T5861] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 329.330070][ T5861] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 329.358924][ T5861] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 329.591452][T13040] netlink: 'syz.6.1863': attribute type 3 has an invalid length. [ 329.663068][ T8604] team0 (unregistering): Port device team_slave_1 removed [ 329.717906][ T8604] team0 (unregistering): Port device team_slave_0 removed [ 330.382338][T13035] lo speed is unknown, defaulting to 1000 [ 330.492630][T13043] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 330.964816][T13068] netlink: 'syz.6.1870': attribute type 3 has an invalid length. [ 331.051698][T13069] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1871'. [ 331.130666][T13076] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1873'. [ 331.230263][T13079] netlink: 'syz.5.1875': attribute type 2 has an invalid length. [ 331.301659][T13035] chnl_net:caif_netlink_parms(): no params data found [ 331.349128][T13084] net_ratelimit: 44 callbacks suppressed [ 331.349148][T13084] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 331.429494][ T5861] Bluetooth: hci10: command tx timeout [ 331.527857][T13089] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1877'. [ 331.881901][T13111] netlink: 'syz.1.1879': attribute type 11 has an invalid length. [ 331.897584][T13035] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.928304][T13035] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.937216][T13111] netlink: 'syz.1.1879': attribute type 11 has an invalid length. [ 331.958461][T13111] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1879'. [ 331.961874][T13035] bridge_slave_0: entered allmulticast mode [ 332.006328][T13035] bridge_slave_0: entered promiscuous mode [ 332.030501][T13035] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.052059][T13035] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.066067][T13035] bridge_slave_1: entered allmulticast mode [ 332.097802][T13035] bridge_slave_1: entered promiscuous mode [ 332.309298][T13118] netlink: 'syz.5.1881': attribute type 1 has an invalid length. [ 332.328725][T13118] netlink: 'syz.5.1881': attribute type 1 has an invalid length. [ 332.423616][T13035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.464251][T13124] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 332.490226][T13035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.556147][T13126] bond2: entered promiscuous mode [ 332.563054][T13126] bond2: entered allmulticast mode [ 332.570084][T13126] 8021q: adding VLAN 0 to HW filter on device bond2 [ 332.924156][T13126] bond2 (unregistering): Released all slaves [ 333.056649][T13128] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1887'. [ 333.139626][T13035] team0: Port device team_slave_0 added [ 333.161669][T13035] team0: Port device team_slave_1 added [ 333.284642][T13141] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1889'. [ 333.309489][T13035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.337134][T13035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.377484][T13035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.444129][T13035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.455302][T13035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.491774][T13035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.509409][ T5861] Bluetooth: hci10: command tx timeout [ 333.651992][T13150] No such timeout policy "syz0" [ 333.720299][T13155] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1893'. [ 333.801861][T13157] netlink: 'syz.6.1894': attribute type 1 has an invalid length. [ 333.829823][T13035] hsr_slave_0: entered promiscuous mode [ 333.869935][T13035] hsr_slave_1: entered promiscuous mode [ 333.882192][T13035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.897665][T13035] Cannot create hsr debugfs directory [ 333.967431][T13157] 8021q: adding VLAN 0 to HW filter on device bond2 [ 333.991716][T13164] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1895'. [ 334.012237][T13158] bond2: (slave veth7): Enslaving as an active interface with a down link [ 334.045001][T13164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.112051][T13157] bond2: (slave veth9): Enslaving as an active interface with a down link [ 334.257005][T13161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.331892][T13161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.913556][T13187] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1903'. [ 335.025644][T13192] openvswitch: netlink: Actions may not be safe on all matching packets [ 335.082800][T13194] sock: sock_set_timeout: `syz.5.1904' (pid 13194) tries to set negative timeout [ 335.288434][T13201] netlink: 'syz.6.1907': attribute type 8 has an invalid length. [ 335.320288][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1907'. [ 335.346172][T13035] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 335.411384][T13201] bridge0: left promiscuous mode [ 335.418387][T13201] bridge0: entered allmulticast mode [ 335.448286][T13035] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 335.584699][ T5861] Bluetooth: hci10: command tx timeout [ 335.637554][T13035] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 335.739546][T13035] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 336.136477][T13035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.206704][T13035] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.247005][ T8614] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.254296][ T8614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.368062][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.375335][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.753875][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1919'. [ 336.780448][T13253] syzkaller0: MTU too low for tipc bearer [ 336.787738][T13253] tipc: Enabling of bearer rejected, failed to enable media [ 337.323978][T13284] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1925'. [ 337.392023][T13035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.647259][T13294] FAULT_INJECTION: forcing a failure. [ 337.647259][T13294] name failslab, interval 1, probability 0, space 0, times 1 [ 337.669620][ T5863] Bluetooth: hci10: command tx timeout [ 337.700811][T13294] CPU: 1 UID: 0 PID: 13294 Comm: syz.6.1929 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 337.700843][T13294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 337.700872][T13294] Call Trace: [ 337.700881][T13294] [ 337.700891][T13294] dump_stack_lvl+0x189/0x250 [ 337.700933][T13294] ? __pfx____ratelimit+0x10/0x10 [ 337.700965][T13294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.700999][T13294] ? __pfx__printk+0x10/0x10 [ 337.701030][T13294] ? __pfx___might_resched+0x10/0x10 [ 337.701063][T13294] ? fs_reclaim_acquire+0x7d/0x100 [ 337.701095][T13294] should_fail_ex+0x414/0x560 [ 337.701129][T13294] should_failslab+0xa8/0x100 [ 337.701155][T13294] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 337.701183][T13294] ? __alloc_skb+0x112/0x2d0 [ 337.701213][T13294] __alloc_skb+0x112/0x2d0 [ 337.701242][T13294] netlink_ack+0x146/0xa50 [ 337.701264][T13294] ? __pfx_genl_rcv_msg+0x10/0x10 [ 337.701294][T13294] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 337.701322][T13294] ? __pfx_nl80211_post_doit+0x10/0x10 [ 337.701370][T13294] netlink_rcv_skb+0x28c/0x470 [ 337.701396][T13294] ? __pfx_genl_rcv_msg+0x10/0x10 [ 337.701430][T13294] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 337.701476][T13294] ? down_read+0x1ad/0x2e0 [ 337.701501][T13294] genl_rcv+0x28/0x40 [ 337.701530][T13294] netlink_unicast+0x75b/0x8d0 [ 337.701566][T13294] netlink_sendmsg+0x805/0xb30 [ 337.701604][T13294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.701634][T13294] ? aa_sock_msg_perm+0x94/0x160 [ 337.701664][T13294] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 337.701692][T13294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.701718][T13294] __sock_sendmsg+0x219/0x270 [ 337.701756][T13294] ____sys_sendmsg+0x505/0x830 [ 337.701791][T13294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.701829][T13294] ? import_iovec+0x74/0xa0 [ 337.701855][T13294] ___sys_sendmsg+0x21f/0x2a0 [ 337.701885][T13294] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.701957][T13294] ? __fget_files+0x2a/0x420 [ 337.701980][T13294] ? __fget_files+0x3a0/0x420 [ 337.702017][T13294] __x64_sys_sendmsg+0x19b/0x260 [ 337.702048][T13294] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 337.702087][T13294] ? __pfx_ksys_write+0x10/0x10 [ 337.702105][T13294] ? rcu_is_watching+0x15/0xb0 [ 337.702144][T13294] ? do_syscall_64+0xbe/0x3b0 [ 337.702169][T13294] do_syscall_64+0xfa/0x3b0 [ 337.702193][T13294] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.702223][T13294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.702245][T13294] ? clear_bhb_loop+0x60/0xb0 [ 337.702270][T13294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.702291][T13294] RIP: 0033:0x7f003278e929 [ 337.702309][T13294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.702328][T13294] RSP: 002b:00007f0033530038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.702352][T13294] RAX: ffffffffffffffda RBX: 00007f00329b5fa0 RCX: 00007f003278e929 [ 337.702367][T13294] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000004 [ 337.702381][T13294] RBP: 00007f0033530090 R08: 0000000000000000 R09: 0000000000000000 [ 337.702393][T13294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.702405][T13294] R13: 0000000000000000 R14: 00007f00329b5fa0 R15: 00007fff479456b8 [ 337.702440][T13294] [ 338.114590][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1930'. [ 338.166706][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1930'. [ 338.347021][T13309] No such timeout policy "syz0" [ 338.639307][T13314] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20001 [ 338.783359][T13323] netlink: 'syz.5.1936': attribute type 10 has an invalid length. [ 338.808402][T13323] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1936'. [ 338.837863][T13323] dummy0: entered promiscuous mode [ 338.845075][T13323] bridge0: port 3(dummy0) entered blocking state [ 338.852386][T13323] bridge0: port 3(dummy0) entered disabled state [ 338.910199][T13323] dummy0: entered allmulticast mode [ 338.943269][T13327] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1936'. [ 338.960229][T13323] netlink: 'syz.5.1936': attribute type 10 has an invalid length. [ 339.067504][T13334] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20001 [ 339.099612][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1938'. [ 339.119811][T13336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1940'. [ 339.322623][T13343] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1940'. [ 339.334767][T13345] netlink: 'syz.5.1942': attribute type 2 has an invalid length. [ 339.500737][T13035] veth0_vlan: entered promiscuous mode [ 339.545778][T13355] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 339.555963][T13035] veth1_vlan: entered promiscuous mode [ 339.596378][T13354] bond0: entered promiscuous mode [ 339.607901][T13354] bond_slave_0: entered promiscuous mode [ 339.628822][T13354] bond_slave_1: entered promiscuous mode [ 339.647190][T13354] batadv0: entered promiscuous mode [ 339.661321][T13354] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 339.673907][T13354] Cannot create hsr debugfs directory [ 339.680633][T13354] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 339.690286][T13354] bond0: left promiscuous mode [ 339.695246][T13354] bond_slave_0: left promiscuous mode [ 339.702219][T13354] bond_slave_1: left promiscuous mode [ 339.714685][T13354] batadv0: left promiscuous mode [ 339.873562][T13035] veth0_macvtap: entered promiscuous mode [ 339.895452][T13035] veth1_macvtap: entered promiscuous mode [ 339.951805][T13370] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1950'. [ 339.976270][T13035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.027780][T13035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.077462][T13035] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.108007][T13035] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.123398][T13035] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.148528][T13035] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.449390][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.457292][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.586450][T13386] bond0: entered promiscuous mode [ 340.616727][T13386] bond_slave_0: entered promiscuous mode [ 340.627869][T13386] bond_slave_1: entered promiscuous mode [ 340.644365][T13386] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 340.650561][T13392] netlink: 71 bytes leftover after parsing attributes in process `syz.5.1957'. [ 340.655189][T13386] team0: Port device macvlan2 added [ 340.770851][ T8602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.795306][ T8602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.639423][ T8599] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.781697][ T8599] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.911271][ T8599] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.975259][ T8599] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.140824][ T8599] bridge_slave_1: left allmulticast mode [ 342.146572][ T8599] bridge_slave_1: left promiscuous mode [ 342.156698][ T8599] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.171510][ T8599] bridge_slave_0: left allmulticast mode [ 342.180083][ T8599] bridge_slave_0: left promiscuous mode [ 342.185927][ T8599] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.674965][ T8599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.691369][ T8599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.703005][ T8599] bond0 (unregistering): Released all slaves [ 343.023004][ T8599] hsr_slave_0: left promiscuous mode [ 343.033479][ T8599] hsr_slave_1: left promiscuous mode [ 343.040278][ T8599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.047742][ T8599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.056989][ T8599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.065362][ T8599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.096844][ T8599] veth1_macvtap: left promiscuous mode [ 343.102920][ T8599] veth0_macvtap: left promiscuous mode [ 343.110201][ T8599] veth1_vlan: left promiscuous mode [ 343.115531][ T8599] veth0_vlan: left promiscuous mode [ 343.362165][T13429] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1966'. [ 343.469539][ T30] audit: type=1107 audit(1750161666.521:3): pid=13430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 343.856693][T13447] x_tables: duplicate entry at hook 3 [ 344.155617][ T5861] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 344.167142][ T5861] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 344.188437][ T5861] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 344.207633][ T5861] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 344.217543][ T5861] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 344.267987][T13455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1975'. [ 344.293722][T13455] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 344.315932][T13455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.373260][ T8599] team0 (unregistering): Port device team_slave_1 removed [ 344.431575][ T8599] team0 (unregistering): Port device team_slave_0 removed [ 345.174338][T13460] netlink: 'syz.1.1977': attribute type 8 has an invalid length. [ 345.290664][T13451] lo speed is unknown, defaulting to 1000 [ 345.515513][T13468] batadv0: entered promiscuous mode [ 345.551741][T13468] team0: entered promiscuous mode [ 345.555834][T13479] nbd: must specify at least one socket [ 345.589588][T13468] team_slave_0: entered promiscuous mode [ 345.609996][T13468] team_slave_1: entered promiscuous mode [ 345.618746][T13468] macvlan2: entered promiscuous mode [ 345.717619][T13468] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 345.740770][T13468] Cannot create hsr debugfs directory [ 345.763206][T13468] hsr1: entered promiscuous mode [ 345.775320][T13468] hsr1: entered allmulticast mode [ 345.784014][T13468] batadv0: entered allmulticast mode [ 345.797367][T13468] team0: entered allmulticast mode [ 345.804496][T13468] team_slave_0: entered allmulticast mode [ 345.820017][T13484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1982'. [ 345.849021][T13468] team_slave_1: entered allmulticast mode [ 345.863916][T13468] macvlan2: entered allmulticast mode [ 345.882552][T13468] bond0: entered allmulticast mode [ 345.895627][T13468] bond_slave_0: entered allmulticast mode [ 345.917182][T13468] bond_slave_1: entered allmulticast mode [ 345.926795][T13488] netlink: 352 bytes leftover after parsing attributes in process `syz.5.1984'. [ 346.181984][T13500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1987'. [ 346.200148][T13501] SET target dimension over the limit! [ 346.399884][ T5861] Bluetooth: hci10: command tx timeout [ 346.513322][T13451] chnl_net:caif_netlink_parms(): no params data found [ 346.829683][T13522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.854650][T13518] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1989'. [ 346.915072][T13513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.946287][T13522] syzkaller1: entered promiscuous mode [ 346.959075][T13522] syzkaller1: entered allmulticast mode [ 347.174032][T13451] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.218526][T13451] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.233189][T13451] bridge_slave_0: entered allmulticast mode [ 347.246591][T13451] bridge_slave_0: entered promiscuous mode [ 347.312365][T13451] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.322401][T13451] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.339191][T13451] bridge_slave_1: entered allmulticast mode [ 347.356564][T13451] bridge_slave_1: entered promiscuous mode [ 347.432888][T13534] lo speed is unknown, defaulting to 1000 [ 347.494634][T13451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.544535][T13545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2000'. [ 347.588963][T13545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2000'. [ 347.600068][T13451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.905804][T13554] netlink: 'syz.1.2004': attribute type 1 has an invalid length. [ 347.967113][T13558] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2002'. [ 348.164761][T13451] team0: Port device team_slave_0 added [ 348.189574][T13451] team0: Port device team_slave_1 added [ 348.262692][T13572] sctp: [Deprecated]: syz.6.2007 (pid 13572) Use of int in maxseg socket option. [ 348.262692][T13572] Use struct sctp_assoc_value instead [ 348.459208][ T5863] Bluetooth: hci10: command tx timeout [ 348.467709][T13572] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2007'. [ 348.550520][T13451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.570432][T13451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.650618][T13451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.691731][T13451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.732510][T13451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.766381][T13451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.841051][T13588] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2012'. [ 348.906540][T13451] hsr_slave_0: entered promiscuous mode [ 348.922398][T13451] hsr_slave_1: entered promiscuous mode [ 348.943566][T13451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.952626][T13451] Cannot create hsr debugfs directory [ 349.534462][T13615] __nla_validate_parse: 1 callbacks suppressed [ 349.534483][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2020'. [ 349.663343][T13623] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2022'. [ 349.711373][T13625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2023'. [ 350.280575][T13646] netlink: 'syz.0.2029': attribute type 4 has an invalid length. [ 350.464493][ T5863] Bluetooth: hci7: command 0x0406 tx timeout [ 350.538764][ T5861] Bluetooth: hci10: command tx timeout [ 350.818942][T13451] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 350.850507][T13451] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 350.964233][T13451] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 351.007432][T13451] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 351.304753][T13451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.372889][T13451] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.416172][ T8602] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.423422][ T8602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.513537][ T8603] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.520817][ T8603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.070637][T13708] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2048'. [ 352.227910][T13717] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2051'. [ 352.246025][T13714] lo speed is unknown, defaulting to 1000 [ 352.539138][T13451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.632527][ T5861] Bluetooth: hci10: command tx timeout [ 353.279254][ T6278] IPVS: starting estimator thread 0... [ 353.431775][T13743] IPVS: using max 29 ests per chain, 69600 per kthread [ 353.813379][T13451] veth0_vlan: entered promiscuous mode [ 353.854376][T13451] veth1_vlan: entered promiscuous mode [ 353.976588][T13451] veth0_macvtap: entered promiscuous mode [ 354.003804][T13451] veth1_macvtap: entered promiscuous mode [ 354.072224][T13775] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2066'. [ 354.092801][T13451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.133020][T13451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.192155][T13779] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2067'. [ 354.210215][T13451] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.231972][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2067'. [ 354.258271][T13451] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.267052][T13451] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.318289][T13451] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.653828][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.662106][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.708249][ T8599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.716234][ T8599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.034984][ T8599] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.153850][ T8599] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.246089][ T8599] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.308793][ T8599] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.520581][ T8599] bridge_slave_1: left allmulticast mode [ 355.526291][ T8599] bridge_slave_1: left promiscuous mode [ 355.535318][ T8599] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.545499][ T8599] bridge_slave_0: left allmulticast mode [ 355.551705][ T8599] bridge_slave_0: left promiscuous mode [ 355.557584][ T8599] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.004289][ T8599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.015923][ T8599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.027267][ T8599] bond0 (unregistering): Released all slaves [ 356.283467][ T8599] hsr_slave_0: left promiscuous mode [ 356.289917][ T8599] hsr_slave_1: left promiscuous mode [ 356.295891][ T8599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.306428][ T8599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.316080][ T8599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.325503][ T8599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.355836][ T8599] veth1_macvtap: left promiscuous mode [ 356.361803][ T8599] veth0_macvtap: left promiscuous mode [ 356.369511][ T8599] veth1_vlan: left promiscuous mode [ 356.374905][ T8599] veth0_vlan: left promiscuous mode [ 356.811610][T13800] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2074'. [ 356.824392][T13800] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2074'. [ 357.075913][T13814] xt_CT: You must specify a L4 protocol and not use inversions on it [ 357.349807][ T5863] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 357.359837][ T5863] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 357.383634][ T5863] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 357.393661][ T5863] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 357.404998][ T5863] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 357.414740][ T8599] team0 (unregistering): Port device team_slave_1 removed [ 357.486638][ T8599] team0 (unregistering): Port device team_slave_0 removed [ 357.979031][ T31] INFO: task syz.0.1152:10122 blocked for more than 143 seconds. [ 357.987282][ T31] Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 [ 358.005651][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 358.025284][ T31] task:syz.0.1152 state:D stack:27192 pid:10122 tgid:10119 ppid:5848 task_flags:0x400140 flags:0x00004004 [ 358.062001][ T31] Call Trace: [ 358.066970][ T31] [ 358.082444][ T31] __schedule+0x16f5/0x4d00 [ 358.087058][ T31] ? __lock_acquire+0xab9/0xd20 [ 358.093841][ T31] ? schedule+0x165/0x360 [ 358.099117][ T31] ? __pfx___schedule+0x10/0x10 [ 358.150239][ T31] ? schedule+0x91/0x360 [ 358.154595][ T31] schedule+0x165/0x360 [ 358.191292][ T31] schedule_preempt_disabled+0x13/0x30 [ 358.196854][ T31] __mutex_lock+0x724/0xe80 [ 358.238284][ T31] ? __mutex_lock+0x51b/0xe80 [ 358.243085][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 358.288279][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 358.293419][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 358.308536][ T31] ? __nlmsg_put+0xef/0x1b0 [ 358.313140][ T31] ? genlmsg_put+0x137/0x2e0 [ 358.317783][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 358.324157][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 358.329735][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 358.336151][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 358.342601][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 358.349081][ T31] genl_rcv_msg+0x60e/0x790 [ 358.355327][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 358.361072][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 358.366153][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 358.373705][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 358.379462][ T31] netlink_rcv_skb+0x208/0x470 [ 358.384289][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 358.389421][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 358.394772][ T31] ? down_read+0x1ad/0x2e0 [ 358.399458][ T31] genl_rcv+0x28/0x40 [ 358.403497][ T31] netlink_unicast+0x75b/0x8d0 [ 358.408414][ T31] netlink_sendmsg+0x805/0xb30 [ 358.413256][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.419010][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 358.424016][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 358.429441][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.434784][ T31] __sock_sendmsg+0x219/0x270 [ 358.439672][ T31] ____sys_sendmsg+0x505/0x830 [ 358.444498][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.449889][ T31] ? import_iovec+0x74/0xa0 [ 358.454446][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 358.460812][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.466150][ T31] ? __fget_files+0x2a/0x420 [ 358.470963][ T31] ? __fget_files+0x3a0/0x420 [ 358.475702][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 358.480944][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 358.486470][ T31] ? rcu_is_watching+0x15/0xb0 [ 358.491527][ T31] ? do_syscall_64+0xbe/0x3b0 [ 358.496253][ T31] do_syscall_64+0xfa/0x3b0 [ 358.501473][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.506719][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.513339][ T31] ? clear_bhb_loop+0x60/0xb0 [ 358.518079][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.524549][ T31] RIP: 0033:0x7f786198e929 [ 358.529496][ T31] RSP: 002b:00007f78627df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.538006][ T31] RAX: ffffffffffffffda RBX: 00007f7861bb5fa0 RCX: 00007f786198e929 [ 358.546850][ T31] RDX: 0000000024000100 RSI: 0000200000001740 RDI: 0000000000000006 [ 358.556113][ T31] RBP: 00007f7861a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 358.565785][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.573895][ T31] R13: 0000000000000000 R14: 00007f7861bb5fa0 R15: 00007ffdc9f0d3d8 [ 358.582224][ T31] [ 358.587930][ T31] [ 358.587930][ T31] Showing all locks held in the system: [ 358.609294][ T31] 3 locks held by kworker/u8:1/13: [ 358.614487][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 358.678270][ T31] #1: ffffc90000127bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 358.710906][ T31] #2: ffffffff8f50f988 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 358.738441][ T31] 1 lock held by khungtaskd/31: [ 358.743404][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 358.775940][ T31] 2 locks held by getty/5597: [ 358.787601][ T31] #0: ffff88814c6d20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 358.808215][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 358.833181][ T31] 3 locks held by kworker/u9:9/5863: [ 358.846512][ T31] #0: ffff88801179a148 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 358.867270][ T31] #1: ffffc900049afbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 358.885295][ T31] #2: ffff888024a40d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 358.906691][ T31] 2 locks held by syz.1.653/8257: [ 358.914647][ T31] #0: ffffffff8f575b30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 358.927638][ T31] #1: ffffffff8e41cd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 358.938185][ T31] 5 locks held by kworker/u8:16/8599: [ 358.943602][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 358.954975][ T31] #1: ffffc9000210fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 358.965722][ T31] #2: ffffffff8f502d90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 358.977269][ T31] #3: ffffffff8f50f988 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 358.987563][ T31] #4: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 358.998772][ T31] 2 locks held by syz.0.1152/10122: [ 359.004136][ T31] #0: ffffffff8f575b30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 359.013181][ T31] #1: ffffffff8e41cd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 359.023534][ T31] 2 locks held by syz.2.1202/10333: [ 359.029256][ T31] #0: ffffffff8f575b30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 359.037588][ T31] #1: ffffffff8e41cd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 359.048754][ T31] 2 locks held by syz.3.1203/10335: [ 359.054015][ T31] #0: ffffffff8f575b30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 359.062743][ T31] #1: ffffffff8e41cd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 359.074603][ T31] 2 locks held by syz.3.1203/10336: [ 359.080370][ T31] #0: ffffffff8f575b30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 359.088757][ T31] #1: ffffffff8e41cd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 359.099375][ T31] 2 locks held by syz.7.1409/11219: [ 359.105086][ T31] #0: ffffffff8f575b30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 359.113533][ T31] #1: ffffffff8e41cd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 359.124387][ T31] 2 locks held by syz.8.1556/11800: [ 359.129835][ T31] #0: ffffffff8f575b30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 359.138165][ T31] #1: ffffffff8e41cd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 359.148863][ T31] 2 locks held by syz.9.1596/12020: [ 359.154132][ T31] #0: ffffffff8f575b30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 359.164786][ T31] #1: ffffffff8e41cd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 359.176920][ T31] 2 locks held by syz.0.2075/13803: [ 359.182853][ T31] #0: ffffffff8fa2ea58 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 359.192680][ T31] #1: ffffffff8f50f988 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 359.202004][ T31] 2 locks held by syz.1.2076/13809: [ 359.207234][ T31] #0: ffff88802fee16d0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 359.217929][ T31] #1: ffffffff8f50f988 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 359.226933][ T31] 1 lock held by syz.5.2078/13816: [ 359.232408][ T31] #0: ffffffff8f50f988 (rtnl_mutex){+.+.}-{4:4}, at: wext_ioctl_dispatch+0xa2/0x410 [ 359.242483][ T31] 1 lock held by syz-executor/13817: [ 359.247806][ T31] #0: ffffffff8f50f988 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 359.257365][ T31] 5 locks held by syz.6.2081/13827: [ 359.263072][ T31] #0: ffff88806d27cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 359.276816][ T31] #1: ffff88806d27c078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 359.286748][ T31] #2: ffffffff8f6779e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 359.296934][ T31] #3: ffff888057fb7b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 359.306735][ T31] #4: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 359.317773][ T31] [ 359.320327][ T31] ============================================= [ 359.320327][ T31] [ 359.329202][ T31] NMI backtrace for cpu 0 [ 359.329219][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 359.329243][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 359.329256][ T31] Call Trace: [ 359.329265][ T31] [ 359.329274][ T31] dump_stack_lvl+0x189/0x250 [ 359.329310][ T31] ? __wake_up_klogd+0xd9/0x110 [ 359.329339][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.329372][ T31] ? __pfx__printk+0x10/0x10 [ 359.329410][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 359.329440][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 359.329464][ T31] ? _printk+0xcf/0x120 [ 359.329492][ T31] ? __pfx__printk+0x10/0x10 [ 359.329518][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 359.329549][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 359.329580][ T31] watchdog+0xfee/0x1030 [ 359.329612][ T31] ? watchdog+0x1de/0x1030 [ 359.329651][ T31] kthread+0x70e/0x8a0 [ 359.329680][ T31] ? __pfx_watchdog+0x10/0x10 [ 359.329706][ T31] ? __pfx_kthread+0x10/0x10 [ 359.329733][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.329762][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.329791][ T31] ? __pfx_kthread+0x10/0x10 [ 359.329816][ T31] ret_from_fork+0x3fc/0x770 [ 359.329851][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 359.329888][ T31] ? __switch_to_asm+0x39/0x70 [ 359.329909][ T31] ? __switch_to_asm+0x33/0x70 [ 359.329929][ T31] ? __pfx_kthread+0x10/0x10 [ 359.329965][ T31] ret_from_fork_asm+0x1a/0x30 [ 359.330006][ T31] [ 359.330014][ T31] Sending NMI from CPU 0 to CPUs 1: [ 359.493435][ C1] NMI backtrace for cpu 1 [ 359.493452][ C1] CPU: 1 UID: 0 PID: 8602 Comm: kworker/u8:18 Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 359.493473][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 359.493485][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 359.493509][ C1] RIP: 0010:rcu_is_watching+0x55/0xb0 [ 359.493539][ C1] Code: 6c ba 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 dc af 7c 00 48 c7 c3 58 0f 9e 92 49 03 1e 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 89 b9 f5 10 74 11 83 e0 [ 359.493555][ C1] RSP: 0018:ffffc9001b9c7620 EFLAGS: 00000806 [ 359.493569][ C1] RAX: 1ffff110170e65eb RBX: ffff8880b8732f58 RCX: c246bd7308534300 [ 359.493583][ C1] RDX: 0000000000000000 RSI: ffffffff8be282e0 RDI: ffffffff8be282a0 [ 359.493595][ C1] RBP: ffffffff84c78174 R08: 0000000000000001 R09: 0000000000000000 [ 359.493607][ C1] R10: dffffc0000000000 R11: fffffbfff1f4207f R12: 0000000000000000 [ 359.493619][ C1] R13: ffffffff99c7a9d8 R14: ffffffff8dba6c68 R15: dffffc0000000000 [ 359.493632][ C1] FS: 0000000000000000(0000) GS:ffff888125d52000(0000) knlGS:0000000000000000 [ 359.493646][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 359.493658][ C1] CR2: 00007fa7dd133e9c CR3: 000000000df38000 CR4: 00000000003526f0 [ 359.493673][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 359.493684][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 359.493695][ C1] Call Trace: [ 359.493701][ C1] [ 359.493711][ C1] lock_acquire+0x5f/0x360 [ 359.493743][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 359.493766][ C1] ? debug_object_assert_init+0xb4/0x380 [ 359.493787][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 359.493810][ C1] ? kasan_save_free_info+0x46/0x50 [ 359.493833][ C1] ? __kasan_slab_free+0x62/0x70 [ 359.493853][ C1] debug_object_assert_init+0xb4/0x380 [ 359.493879][ C1] __mod_timer+0x4a/0xf30 [ 359.493898][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 359.493933][ C1] ieee80211_ibss_work+0x5af/0x1060 [ 359.493958][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.493985][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 359.494010][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 359.494033][ C1] ? kcov_remote_stop+0x17e/0x6d0 [ 359.494056][ C1] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 359.494083][ C1] ? skb_dequeue+0x10e/0x150 [ 359.494110][ C1] ? ieee80211_iface_work+0xcd4/0xfe0 [ 359.494139][ C1] ? ieee80211_iface_work+0xf39/0xfe0 [ 359.494176][ C1] cfg80211_wiphy_work+0x2dc/0x460 [ 359.494195][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 359.494223][ C1] process_scheduled_works+0xae1/0x17b0 [ 359.494266][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 359.494303][ C1] worker_thread+0x8a0/0xda0 [ 359.494346][ C1] kthread+0x70e/0x8a0 [ 359.494367][ C1] ? __pfx_worker_thread+0x10/0x10 [ 359.494394][ C1] ? __pfx_kthread+0x10/0x10 [ 359.494414][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.494438][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.494462][ C1] ? __pfx_kthread+0x10/0x10 [ 359.494481][ C1] ret_from_fork+0x3fc/0x770 [ 359.494508][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 359.494535][ C1] ? __switch_to_asm+0x39/0x70 [ 359.494553][ C1] ? __switch_to_asm+0x33/0x70 [ 359.494570][ C1] ? __pfx_kthread+0x10/0x10 [ 359.494590][ C1] ret_from_fork_asm+0x1a/0x30 [ 359.494617][ C1] [ 359.495721][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 359.495741][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00103-g1224b218a4b9 #0 PREEMPT(full) [ 359.495771][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 359.495787][ T31] Call Trace: [ 359.495799][ T31] [ 359.495810][ T31] dump_stack_lvl+0x99/0x250 [ 359.495854][ T31] ? __asan_memcpy+0x40/0x70 [ 359.495891][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.495930][ T31] ? __pfx__printk+0x10/0x10 [ 359.495975][ T31] panic+0x2db/0x790 [ 359.496020][ T31] ? __pfx_panic+0x10/0x10 [ 359.496056][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 359.496102][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 359.496136][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 359.496188][ T31] watchdog+0x102d/0x1030 [ 359.496226][ T31] ? watchdog+0x1de/0x1030 [ 359.496270][ T31] kthread+0x70e/0x8a0 [ 359.496303][ T31] ? __pfx_watchdog+0x10/0x10 [ 359.496336][ T31] ? __pfx_kthread+0x10/0x10 [ 359.496368][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.496401][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.496436][ T31] ? __pfx_kthread+0x10/0x10 [ 359.496465][ T31] ret_from_fork+0x3fc/0x770 [ 359.496505][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 359.496548][ T31] ? __switch_to_asm+0x39/0x70 [ 359.496572][ T31] ? __switch_to_asm+0x33/0x70 [ 359.496597][ T31] ? __pfx_kthread+0x10/0x10 [ 359.496628][ T31] ret_from_fork_asm+0x1a/0x30 [ 359.496674][ T31] [ 359.975263][ T31] Kernel Offset: disabled [ 359.979599][ T31] Rebooting in 86400 seconds..