last executing test programs: 8m16.923847883s ago: executing program 4 (id=2349): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x98, 0x0, 0x22, @empty, @mcast2, 0x7, 0x40, 0x30, 0x2}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x18c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_VFINFO_LIST={0xa8, 0x16, 0x0, 0x1, [{0xa4, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}, @IFLA_VF_TRUST={0xc, 0x9, {0x9, 0x400}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1000, 0x6}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4, 0x8, 0x2, 0x8100}}, {0x14, 0x1, {0x8, 0x462, 0xc4, 0x8100}}, {0x14, 0x1, {0x1, 0x6d9, 0x9, 0x88a8}}, {0x14, 0x1, {0xffffffff, 0xb7, 0xa9, 0x88a8}}, {0x14, 0x1, {0xbacd, 0xebe, 0x5, 0x88a8}}, {0x14, 0x1, {0x7fffffff, 0x945, 0xfffffff8, 0x8100}}]}]}]}, @IFLA_VF_PORTS={0xb4, 0x18, 0x0, 0x1, [{0x90, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xe}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ae669e91a9b635525feb52a36483db50"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'ip6gre0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b406517afe1d326c07dccef30534d677"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'ip6gre0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0ddc89985ae8bb5f8ff46fcaf8542e4b"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ff54ab90b7b64e5d43b7ae6448c906f8"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "eeb36d117558f53d83ca9a235ae5577e"}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "aeaea2e17e8ff9a5fc6a0cbbb7c5d700"}, @IFLA_PORT_VF={0x8, 0x1, 0xc1b}]}]}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_OPERSTATE={0x5}]}, 0x18c}}, 0x0) 8m16.786579214s ago: executing program 4 (id=2353): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000980), 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xf0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f00000006c0)=@raw={'raw\x00', 0x9, 0x3, 0x208, 0x90, 0xffffffff, 0xffffffff, 0x90, 0xffffffff, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@dev, @empty, 0x0, 0x0, 'nr0\x00', 'veth0_macvtap\x00', {}, {}, 0x73}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x0, 0x0, 0xffff, 0x0, "d747a3b2be34f8c0809a2d0e0c3e83db33055f35201078241f18c41298e8d27fae15db83081df04c2233cf6aeee560a70da700912dad2f5d5111750464582601"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000040)={0x11, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e23, 0x3, 'nq\x00', 0x8, 0x1b0e, 0x9}, 0x2c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x34}}, 0x0) 8m16.632392615s ago: executing program 4 (id=2354): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x1) shutdown(r0, 0x1) unshare(0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x8051}, 0x8000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x49, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500003000000000000190780a010102ac1414aa0400907800000000450000000000000000320000000000000052f192fdb996720a733fe3ea64f72cf4e300c0373e835c4468f798"], 0x0) 8m16.56183606s ago: executing program 4 (id=2358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000050000001f0800040001000000", 0x24) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x3d, 0x6, 0x1, 0x0, "7a10ed1a1e43c53845b7f56c8c5e35829c01bc88c852f37458943ea373cdbae68f62442ebf2e753b0ba133c71b1ea0d4cc5caf1c1238bc1aed"}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x20}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x10c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8m16.4666941s ago: executing program 4 (id=2361): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="b900000004f66cbd06018400000000400000000300000009e5afa5bbd9e62fa8000000090002005c797a3100ffff00"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20004050) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904ff80000000fe280000000000000800040001000000", 0x24) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x20}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) (async) connect$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x1, @private0, 0x80000001, 0x1}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000010004b0400000000000059ae32ea0000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800600270000200000"], 0x3c}}, 0x0) 8m16.3754907s ago: executing program 4 (id=2363): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x2b, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @binary="2a0aa32f9d5c778d"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r2) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4010}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040044}, 0x4080) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x4, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) r6 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:462'], 0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r7) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="f5af24bd7000000000000e"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 8m1.260482797s ago: executing program 32 (id=2363): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x2b, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @binary="2a0aa32f9d5c778d"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r2) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4010}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040044}, 0x4080) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x4, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) r6 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:462'], 0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r7) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="f5af24bd7000000000000e"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 6m55.477084965s ago: executing program 3 (id=3232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001bc0), 0x10042, 0x0) write$tun(r0, &(0x7f0000001c00)=ANY=[@ANYBLOB="00000805aaaaaaaa5f5fe74e35d0a5aaaabbbba0bbbbbb81003000080600010800065bf903bbbbbbbbbbbb64010102aaaaaa"], 0x32) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079103000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) pipe(0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001d00)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) (async) close(0x3) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001600)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000000340)=""/61, 0x3d, 0x0, &(0x7f0000001540)=""/156, 0x9c}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000003700000000000000a6a000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b40)={&(0x7f00000016c0)=ANY=[@ANYBLOB="840418de", @ANYRES16=r7, @ANYBLOB="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"], 0x464}}, 0x80) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001d40)={@map, r8, 0xf}, 0x20) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r9, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r10, r8, 0x4, r8}, 0x10) (async) poll(&(0x7f0000001e80)=[{}, {}], 0x20000000000000c8, 0x0) (async) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08004500452c00004000002f9078ac1e0001e0000001000065580018947804000000d30000000086ddffff000000"], 0xfdef) (async) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x0, [0x0, 0x4, 0x888]}, &(0x7f0000000000)=0x44) 6m55.16737928s ago: executing program 3 (id=3238): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xfffffffffffff61e, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@loopback, 0xfffffffd, 0x33}, 0xa, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) r2 = socket(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e00010400000000000000000a0000003f00000000000000080001"], 0x24}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x5, 0x9fd, 0x84, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, r7}, 0x38) r8 = socket(0x25, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r8, 0x10f, 0x7f, &(0x7f00000000c0), 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) close(r9) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) 6m54.990821383s ago: executing program 3 (id=3241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000010000000c000000ad"], 0x14}, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r4, &(0x7f0000000000)={0x1, @read_remote_features={{0x41b, 0x2}, {0xc9}}}, 0x6) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000000)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) splice(r2, 0x0, r7, 0x0, 0x1000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="350000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002140000001100010000000000000000000000000a"], 0x64}}, 0x0) 6m54.598528121s ago: executing program 3 (id=3247): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket(0x1d, 0x2, 0x6) unshare(0x26020480) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x2, 0x9, 0x0, 0x0, 0x0, 0xfd, 0x5}, 0xe) shutdown(r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xc, 0x13012, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000feffffff18a27dd9a1529aeb46c8b831d5995fda64000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800e1ffb70300006fbd00008500000006000000850000007d0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000280)='skb_copy_datagram_iovec\x00', r6}, 0x18) r7 = socket(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f00000007c0)={{r3}, "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"}) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={r8}, 0x8) ppoll(&(0x7f00000004c0)=[{r1, 0x1}], 0x1, &(0x7f0000000540), 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003480)=[{{&(0x7f0000000640)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000001000000001400000000000000290000000b000000000000f800000000054e0df09069c0a78ef059c777f151c9ed268f231f82bf3f9f17c1c1c9c6391667248d8e6fc8c92ed8bd6351eddad861e1e8403af74ace458582b2c1b8acdf93ccfd6b8ead87ac65fdabf005087316d2bea3511a05cf2ac61d2354a35f"], 0x30}}], 0x1, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) recvmmsg(r9, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000240)={'raw\x00', 0x0, [0x401, 0x1, 0x3, 0x3, 0x3]}, &(0x7f00000000c0)=0x54) 6m53.981168246s ago: executing program 1 (id=3252): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d4000000240001002abd7000fedbdf2544000000bd000e80ff"], 0xd4}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c00)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@mcast2, 0x0, 0x6c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x47}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x80) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x44, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x14000040) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x20) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 6m53.702793624s ago: executing program 3 (id=3254): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x4, 0x56}, &(0x7f00000003c0)=0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x22}, 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) (async, rerun: 64) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@private=0xa010101, @rand_addr=0x64010101}, 0x8) (async, rerun: 64) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$nci(r6, &(0x7f0000000040)=""/149, 0x95) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x91}]}, 0x44}}, 0x0) 6m53.464509135s ago: executing program 0 (id=3256): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) 6m53.301616111s ago: executing program 0 (id=3258): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r0, 0x1, 0x3c, 0x0, &(0x7f0000000500)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x70, 0x0, 0xc, 0xc, 0x0, 0xf9e78fc95245f17b}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000000c0), 0x40) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd00028008000340000001", @ANYRESHEX=r11], 0xe4}, 0x1, 0x0, 0x0, 0x40004}, 0x20050840) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_RENAME(r11, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x5, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x4004801) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}]}, 0x48}}, 0x0) 6m53.301012701s ago: executing program 1 (id=3259): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000140)=0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r3}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) r4 = accept$ax25(0xffffffffffffffff, &(0x7f0000000080)={{}, [@null, @remote, @bcast, @remote, @bcast, @rose]}, &(0x7f0000000180)=0x48) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x114}, {&(0x7f0000000580)={0x252c, 0x10, 0x420, 0x70bd26, 0x25dfdbfc, "", [@generic="027b7d8d", @generic="4323358dcdea1be380fc0d2aee0fee95edbd780838fde76182ef396153e344a37c16844a32ca5fe32db2981fb2e9e947ad4b2604db516e2da74c67039f648f973d24fdd04787e0036796d228021b", @typed={0xc, 0x5, 0x0, 0x0, @u64=0x7ff}, @nested={0x126d, 0xaf, 0x0, 0x1, [@nested={0x1c, 0xd0, 0x0, 0x1, [@nested={0x4, 0x95}, @nested={0x4, 0x32}, @nested={0x4, 0x1d}, @typed={0x8, 0x70, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x40}}, @nested={0x4, 0x48}]}, @generic="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", @nested={0x156, 0x7e, 0x0, 0x1, [@generic="23a18cb5f33adb2dc1724a2f3fa8ec798644ad0ec5b4a7006776f9e3bf36374257e32af5cc257602afddc695f55bc2f86d68be79139a9e7353ce38a9c6a7d4ad82ecf82b9c815ad8b7bcc4aa2e819016cf1ceeb9c30133435a4a32cd9289875ef49abb069d8cd251b48de95941042f1497", @typed={0x8, 0x2d, 0x0, 0x0, @fd=r4}, @generic="32a69a327456a3bd5a97a4b1eb2324eba3ec9c6d84685a7980bf6e3ece5d8098e0851748f9020d4202a68024e7b861374bedf3046091923a84ba3384e2e4d4f75139a4f5a6dfb2137f5f6422f030cbb6bd2e6f12a7f950c94039c3740f0828b4e9d7abeb2a3a07195f88f840f78dd380557a1d742595e142771cf65701cd480fcaf7efd72f75f1b9e1c6e083b814a408404ab33633671d595bdfb9acd5834362f5d43c7836d11bfc6657d8b01dfae6bcce9832faec2c878f7fa979e15da452de00070e6fa01278c1a11bed42df0bf3b1019754292adeb42e56"]}, @typed={0x8, 0x19, 0x0, 0x0, @fd=r0}, @generic="9f6a4bca78a3b274b650d099503c4e11ee3f8e191617d60ab4e64f02cf58407421911482b605537cefedac8e443450d24fed403b549d68c70890754c760af9d929fd16c18012904efcd38baf22766dc13e3d90ac01cebae7163ecea2d2dbc3b7b341d573975f20bfa9c7a58f71a6002b9bcf25ec44920f1c104544c55e4da6ee3a92b47b40a8b0bf9b7b11f5f2d0ac9accac810d5c823c8fbf54d4892ef1a33b041092fdb7cb5f65d1123527f1231dc3aeaee0ca7e42fa91fdc95d791c544d216b4e97de0169270bb1df97c2d013d9c4a949976817a74feebf965a0820967995cf17675312446258a16ea50248"]}, @nested={0x1149, 0x138, 0x0, 0x1, [@typed={0x8, 0x11, 0x0, 0x0, @uid=r1}, @generic="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", @generic="e230f3fcfeb78ae43d4c07a608b079793eb101d89e11d4e9d456b9c47bf7e7ca88cce1c12e1e49a41030bd78d39e16fe70a3aa8f5eb10ab0c762a6dfc98e8eace7dd72ed61cdba34e56f89925d12c42536d50c41a5ef6200b56ed30a0040690f1fe802d425aaa7460f94b054af9d2cab2882e51f180fb8d71d8003d593f5bf574ea2a7e4976dfdd41310077dc32ab3b8e9b98b43e1e4a5d7a1fb96d6b391ac968fb465bc0de416f264ce8f581ace5a2c4d8aeb820fecb5bb758d5a71e2f43587ad", @nested={0x79, 0x1e, 0x0, 0x1, [@nested={0x4, 0x92}, @nested={0x4, 0x4c}, @nested={0x4, 0x39}, @generic="a68125fa43cb59335b87bc9af8fc26bc24a9265e904d757ac28faccf3c64d0a89b23dfd0dd50bcfbbe36c2c7b59e683f6f789a661204bb6289312ca309ba", @generic="a996b9b5a55f9412332d97920e411c64028ce0b9667d1d64ec4911cad6be96", @typed={0x8, 0xc7, 0x0, 0x0, @uid=r3}, @nested={0x4, 0x84}]}]}, @generic="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"]}, 0x252c}], 0x2}, 0x0) r5 = accept4(r4, &(0x7f00000001c0)=@nl=@unspec, &(0x7f0000000240)=0x80, 0x800) bind$netrom(r5, &(0x7f0000000280)={{0x3, @default, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @bcast, @null]}, 0x48) r6 = socket(0x10, 0x80000, 0x6) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 6m52.436504819s ago: executing program 1 (id=3261): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="53194e748cdc0e3fbd823802317c98d641e56d8951db5efa76a8fd2e7da8d75ed96d9d8b5793642e"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000180009000000000001131a0002000000ff00ff01002a0000"], 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0xa, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001200230b000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000000000000080012800400"], 0x28}}, 0x0) 6m52.172675269s ago: executing program 0 (id=3264): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100005ff28bd7000000000000000004a", @ANYRES32=0x0, @ANYBLOB="c042000000000000140012800700000040000000000000000400b937e33300000000000094b5042c9cc6ac1678de24dc9378e4d158c72063719654e8b7b846dfb0532b47df589d51f3935b090e3ad477fd829142322f44a48fd070013281c94558af609287b80e5c9dc607f3513d25802210a3af187d4256e6c4d8836038970ce3cb454d196738aa5bbb0b4c0798f222d3110ca41b26473a84ec02bd7ab9e3e80de5f2db7e030c6daa045f706a19a18ab0a121"], 0x3c}}, 0x0) 6m52.172246307s ago: executing program 1 (id=3265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x0, 0x5, 0xfffffffe}, @NL80211_ATTR_DFS_CAC_TIME={0xffffffffffffff4f}]}]}]}, 0x30}}, 0x4000890) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r2, &(0x7f0000000180)={&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000080)=""/8, 0x8}], 0x2, &(0x7f0000000100)=""/115, 0x73}, 0x40000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4f000007267905001201002ac0894b59000000005c700b7eee9e85702f678257089c20dce01a27e5bb889c9e452d2ce808ad1e4d7a5301fd5c201e32f4042f4ed28d12751f03f604ea63b27911e69045f31d9110f3ee0697e186b359a91bdbc091e9df256d858d8988c0ed1e3ec85b650ff5084d25f4e0302272e3ecbadbd75c06fa0c211f0e8eab27d14b1c21425434c7ac198406058e4d0475229f1e2722541ca78de3a7a7411d0501e0a92b1659b00a0e405603b9d9fb06b5e13842d28535244b06023378af6c87cfd4cacf1caf5ad0", @ANYRES32=0x0, @ANYBLOB="0000000040010000200012800b0001006d61637365630000100002800c000100ffffffffffffffff08000500", @ANYRES32=r4, @ANYRESDEC=r5], 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4f000007267905001201002ac0894b59000000005c700b7eee9e85702f678257089c20dce01a27e5bb889c9e452d2ce808ad1e4d7a5301fd5c201e32f4042f4ed28d12751f03f604ea63b27911e69045f31d9110f3ee0697e186b359a91bdbc091e9df256d858d8988c0ed1e3ec85b650ff5084d25f4e0302272e3ecbadbd75c06fa0c211f0e8eab27d14b1c21425434c7ac198406058e4d0475229f1e2722541ca78de3a7a7411d0501e0a92b1659b00a0e405603b9d9fb06b5e13842d28535244b06023378af6c87cfd4cacf1caf5ad0", @ANYRES32=0x0, @ANYBLOB="0000000040010000200012800b0001006d61637365630000100002800c000100ffffffffffffffff08000500", @ANYRES32=r4, @ANYRESDEC=r5], 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 6m52.005599018s ago: executing program 0 (id=3267): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000080)={0x53, 0x0, 0xb, 0xa, 0x7ff}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}, [@map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$sock_int(r2, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f0000000100)={0x1, @write_eir={{0xc52, 0xf1}, {0x0, "11eae9ea98e2d94a02bd84e5e5f7483c9bead338e1481bfccf2ef790de070cab3cd675d35752591dde0140fe2b4ea766c73583fcd47d51b1ea3924d794359eef7173bbc6bb49dd35de6fb02ea0a0471e9e638c5f503236f4f1c7490901a1f511bdc033ce13e327780f60979369f34e9d0d39a0e7b9f0e478242018386c62409453eabb9266308d3547ce2534e2cc5eef01991852cb5dd14884ba2f5592351bf7823935161cb846794f25f19214f9240472edb9dc7e514863efcf4339b316eb4accac83a1c620e9a355818a1374ddfda0f00976dae5fb4570d4de1ed961ed831c2e7eccab6ee95b9a2f0b74e5aa0966e4"}}}, 0xf5) 6m51.82833933s ago: executing program 1 (id=3268): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r1, @ANYBLOB="14000100ff05000000000000dfce000000000001"], 0x34}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000951}, 0x4040800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x24048058) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xffff, 0xffff}, {0x5, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010fd884728bd7000fcdbff25000080f0af7169f5faf4f9929aaf1ea524f8e7407b36195861b84d", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r6) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r7, @ANYBLOB="0000000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES64=r8], 0x48}, 0x1, 0x0, 0x0, 0x2400008c}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000004000180ac000280"], 0xc4}}, 0x0) 6m51.826207028s ago: executing program 0 (id=3269): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0xf, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000000)=0x400, 0x4) (async) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa550aaaaa86dd60e0ffac00142cf8fe8000000000000000000000000000bbe62e97627375a23986a3ace9275afe8000000000", @ANYRESHEX=r1, @ANYRESDEC=r0, @ANYBLOB="5000000090780000"], 0x0) 6m51.637865202s ago: executing program 3 (id=3257): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x58, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 6m51.044029793s ago: executing program 33 (id=3257): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x58, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 6m51.000377667s ago: executing program 0 (id=3272): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000120001000000000000000000100000000c40000000000000000000000c001d"], 0x2c}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket(0x23, 0x805, 0x0) connect$vsock_stream(r1, 0x0, 0x0) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2}, 0xa) 6m50.688622822s ago: executing program 34 (id=3272): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000120001000000000000000000100000000c40000000000000000000000c001d"], 0x2c}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket(0x23, 0x805, 0x0) connect$vsock_stream(r1, 0x0, 0x0) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2}, 0xa) 6m50.663137477s ago: executing program 1 (id=3273): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x0, 0x5, 0x3}, 0x14}}, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x9, 0x400, 0x8001, 0x1, 0x3, 0x1c, 0x4}}]}}]}, 0x148}}, 0x0) (async) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x3, 0x4) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r7, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) 6m50.652147169s ago: executing program 35 (id=3273): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x0, 0x5, 0x3}, 0x14}}, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x9, 0x400, 0x8001, 0x1, 0x3, 0x1c, 0x4}}]}}]}, 0x148}}, 0x0) (async) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x3, 0x4) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r7, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) 8.482297406s ago: executing program 6 (id=6944): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) (async) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940001000000fcffc50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x40010, 0xffffffffffffffff, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000dcf646381c001280090001006970693baa7f600089000000a2dda4a1704b3963c7876d7d905c5faf8a7117050725e6e4fd41935b64b595aba822d2578b484e7d647dac776c3a14e11fdeb13777f885ba4d49a6cd3c2e7994813d47c5a9cef486f682cb1d534108cee4bc0d28fd2eab4ae06eb8bda353c93a733ea63e34f06ecb1044d1e51c6367b7479fd4a2aa40fd2a6b4a80f8544177607e537be89522c27006efde057559f1013a8c0288b08fc11e73bf00"/198], 0x3c}}, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000300), &(0x7f0000000340)=r4}, 0x20) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0x80000001}, {0x6, 0x40}]}, 0x10) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0x7d, &(0x7f0000000700)={r7, 0xfffff801, 0x11e2000, 0x62c, 0x100, 0x2, 0x2, 0x4, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x3, 0xfffffffb, 0x3, 0x1000, 0x1}}, &(0x7f00000007c0)=0xb0) (async) sendto(r2, 0x0, 0x0, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32, @ANYBLOB="000000000000000073000c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 8.372384162s ago: executing program 6 (id=6948): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x5, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x5, 0x0, @void}, 0x10) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1, 0x6, 0x3, 0x1, r3, 0x9, '\x00', r6, r7, 0x0, 0x1, 0x1, 0xc}, 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a"], 0x50}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvmmsg(r8, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x6) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000003f0000040042800c0001800800108004000780"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000003f0000040042800c0001800800108004000780"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x38, 0x2100) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=ANY=[@ANYBLOB="580000000206050000000012b7df7d59ef49a81de400000000000000000005200400000000000900020073797a32000000000c00078008000640000000000500050002000000050001000600000011000300686173683a6e"], 0x58}}, 0x0) 7.415522253s ago: executing program 6 (id=6969): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406040c5c0009003f0006180a0200000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f5090", 0x52, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x49) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180), 0x4) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), 0x4) 7.313751659s ago: executing program 6 (id=6971): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x3502, 0x2}, [@offload={0xc, 0x1c, {r1, 0x6}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0) 7.175066715s ago: executing program 6 (id=6973): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x8, 0x0, 0x8000) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r3, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={r3, 0x48, "c1ba4bc967a57a0bf25476a3c012a7814f4a2813e3b7a2f0bff68de8ed5253e35c2e60c61b616e24bd515a714b9f538bdd14ce868027dedf258c6fad3d12541d5da1b508eaa2efd7"}, &(0x7f0000000100)=0x50) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x4e20, 0x3, 'none\x00', 0x11, 0x3}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket(0x8, 0x0, 0x8000) (async) close(0xffffffffffffffff) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r3, 0x3}, 0x8) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={r3, 0x48, "c1ba4bc967a57a0bf25476a3c012a7814f4a2813e3b7a2f0bff68de8ed5253e35c2e60c61b616e24bd515a714b9f538bdd14ce868027dedf258c6fad3d12541d5da1b508eaa2efd7"}, &(0x7f0000000100)=0x50) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x4e20, 0x3, 'none\x00', 0x11, 0x3}, 0x2c) (async) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) (async) 6.875960435s ago: executing program 6 (id=6978): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) sendto$packet(r1, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r5 = socket$kcm(0xa, 0x922000000003, 0x11) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r8, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x37}]}, &(0x7f0000002100)=0x55) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c805}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1f, 0x2, &(0x7f0000000100)=ANY=[@ANYRES64=r10], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) 6.600021794s ago: executing program 36 (id=6978): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) sendto$packet(r1, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r5 = socket$kcm(0xa, 0x922000000003, 0x11) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r8, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x37}]}, &(0x7f0000002100)=0x55) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c805}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1f, 0x2, &(0x7f0000000100)=ANY=[@ANYRES64=r10], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) 3.937848502s ago: executing program 5 (id=7023): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="000000000000000045abffff00000000183800000800"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r1, r1, r1, 0xffffffffffffffff, r1], 0x0, 0x10, 0xfffffffe}, 0x94) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @local, 0x7}, 0x1c) socketpair(0x5, 0x5, 0x7, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(r3, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x51}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80101, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000540)=ANY=[@ANYBLOB='+cpu'], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r8, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f0000000200), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 2.335644602s ago: executing program 7 (id=7024): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b64f9f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'veth0_to_team\x00', 0x200}) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000280), 0x0, 0x0) shutdown(r1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) (async) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000180)=0x800001, 0x20) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x4dcea4da87952290) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) (async) ioctl$SIOCAX25DELFWD(r5, 0x89eb, &(0x7f00000001c0)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e22, 0xfffffffa, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, 0x1c) (async) listen(r3, 0x3) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) shutdown(r3, 0x0) (async) setsockopt(r1, 0x84, 0x71, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42400, 0x0) close(r7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}) (async) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="40eef8175aca46"], 0x7) 2.157442362s ago: executing program 5 (id=7029): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}]}}}]}, 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a0000000000006f0000000005001b003a00000008000300", @ANYRESOCT], 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25250000000e005dc36e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 2.051809802s ago: executing program 7 (id=7030): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) sendmmsg(r1, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0xd, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003f0009000000000000000000030000000400fd0008000900", @ANYRES32=0x0, @ANYBLOB="383cb2b11cd84c676c825f0e070f2fcbc5f6f1aa4e31f2b24de2e2499dd6970c7ab604fce5ddfc7097180179d4ecc096ea5281000000000000008698fbbeae3fe2c2c2b6e6f06338cc40326966c9784cd5b00091b53bb9406c4b2e61291732b6d21d02687089df564a71ad20a1fa719483489ba804da07029569ba5f71cd45e407f03699701ddb6e3ad75c093129062aca3d7e195ee29a6b3d97560a3c6b47659b5c3cd3e03e38942748"], 0x20}}, 0x0) 1.9896148s ago: executing program 7 (id=7032): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), r0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%-010d \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r2, &(0x7f0000000f00)="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", &(0x7f0000001f00)=""/4096}, 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x138) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000240)={{r2}, 0x80, 0x316, 0x3}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan4\x00'}) syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x20, 0x2b, 0x0, @remote, @local, {[@dstopts={0x89}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000480)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x24048006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x14}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) 1.766989995s ago: executing program 8 (id=7034): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x28, r2, 0x1, 0x470bd27, 0xa, {{}, {@val={0x8, 0x3, r3}, @void}}, [@crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}], @NL80211_ATTR_SSID={0x5, 0x34, @random='\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) write(r0, &(0x7f0000000040)="103f048f834f8be253a0b56e73b177e9797edc345647a72214b58d9a9e3cd274654ab089dbbce704aef3e162cdd1047890bbb34cceb5b89bb7d6aef7b9c4cf42454d94659d92bdfd90c7e9e6963c8958eca72eb57c85df91cc30dd00a3693838d94dbe451887b00ea061a2b3bda3f2a2ef", 0x71) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000180)="50c62f717527b307c96f45ecb70e42698c5c8672178414b25704783d64def8df98d1e19fb461ea4b", 0x28, 0x24000005, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r4, 0x0, 0x0, 0x20775, 0x0, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000000)) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100), 0x8) 1.747056195s ago: executing program 7 (id=7035): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8919, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x24, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc014}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @btf_id={0x18, 0x0, 0x3, 0x0, 0xc0000000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff973}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0xa08, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x2, 0x0, 0x5}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000500)=[{0x3, 0x1, 0xd, 0xa}, {0x0, 0x2, 0x8, 0xa}, {0x2, 0x4, 0x8, 0x5}, {0x2, 0x5, 0x5, 0x6}, {0x3, 0x4, 0x3, 0x3}, {0x1, 0xffffffff, 0x6, 0x2}, {0x5, 0x5, 0x2, 0x1}, {0x5, 0x1, 0x1, 0x9}, {0x0, 0x3, 0x10, 0x6}, {0x3, 0x5, 0x1, 0x3}], 0x10, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='reclaim_retry_zone\x00', r3, 0x0, 0x5}, 0x18) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000140)={r4, 0x400000000000000, 0x7, 0x8}) sendmsg$NL80211_CMD_SET_MPATH(r6, 0x0, 0x20000000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r7, 0x1) close(r5) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_SET_OP_GET_FNAME(r8, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz0\x00'}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7d5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) 1.611207566s ago: executing program 5 (id=7037): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1a, 0x0, 0x0, 0x0, 0x3866, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r4], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r5 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r5, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1}}], 0x1, 0x40000000) 1.317182031s ago: executing program 7 (id=7039): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000640), &(0x7f0000000680)=r3}, 0x20) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf2523090000", @ANYRES32=r5, @ANYBLOB="140002"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x40800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206010200000000000000000c00000024a31ad4f96dc39be176b0911c7100078008001250000600000500010006000000050005000a00000005000400000000000900d81474e4d2582c41000016000300686173683a6e65"], 0x5c}}, 0x0) 1.210752785s ago: executing program 2 (id=7040): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'lo\x00'}) r0 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x40}}, 0x4000010) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r1, &(0x7f0000000040)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r3, 0x0, 0x9}, 0x18) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x25, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x7, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r7, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) 1.167302656s ago: executing program 7 (id=7041): socket$netlink(0x10, 0x3, 0x10) (async) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf07f}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf07f}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000050a05000000000000000000020000060c00024000000000000000020b00070066696c74657200000c000240000000000000000108000b40000000040900010073797a30000000000900010073797a300000000020000000080a05000000000000000000020000000900010073797a30"], 0x1ce0}}, 0x40000) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000050a05000000000000000000020000060c00024000000000000000020b00070066696c74657200000c000240000000000000000108000b40000000040900010073797a30000000000900010073797a300000000020000000080a05000000000000000000020000000900010073797a30"], 0x1ce0}}, 0x40000) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4005800}, 0x40000) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r3, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) (async) recvfrom(r3, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 843.423003ms ago: executing program 8 (id=7042): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0x270, 0x138, 0x1d8, 0x138, 0x1d8, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x3, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5112], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x60) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x1, 0x129e, [0x0, 0x200000000b80, 0x200000000bb0, 0x200000000be0], 0x0, &(0x7f0000000000), &(0x7f0000000b80)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x2, 0x9300, 'nicvf0\x00', 'geneve0\x00', 'veth1_to_hsr\x00', 'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0xff, 0xff, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x114e, 0x11c6, 0x120e, [@among={{'among\x00', 0x0, 0x8d0}, {{@offset=0xc, @zero, 0x0, {[0x3, 0xfffffff7, 0x2, 0x10000, 0x2, 0x8, 0x0, 0x56, 0x7f, 0xffffff09, 0x3, 0x6, 0xff, 0x4, 0x2b, 0x10, 0x7, 0x319f, 0x7, 0xe6, 0x1000, 0xfff, 0x7fff, 0x1, 0x2, 0x400, 0x800, 0xbe, 0xffff, 0x30000000, 0x7, 0x2, 0xffff0912, 0xffffffff, 0x7, 0x8, 0x8, 0x3, 0x44cf459f, 0x9, 0xfff, 0x59, 0x8000, 0xbf, 0x9, 0x4, 0x3, 0x1, 0x8, 0x6, 0xf, 0x1000, 0x800, 0xfffffffc, 0x62b9, 0x0, 0x0, 0x1, 0x5, 0x6, 0x11df, 0x4, 0x69e, 0x2, 0x1ff, 0x8, 0x9, 0x2, 0x4, 0x10, 0x2, 0x4, 0x0, 0x1, 0xe, 0x2, 0x200, 0x4, 0x4, 0x100, 0x4, 0xc2, 0x6, 0x738, 0x7ff, 0x4, 0x8001, 0x0, 0x8, 0x2, 0x401, 0x9, 0x83, 0x9, 0x6, 0x5, 0x3284, 0x6, 0x0, 0x9, 0x5, 0x9, 0x5, 0x53e, 0x0, 0x1000, 0x7, 0x7, 0x7f, 0x0, 0xbfa7, 0x1, 0x7, 0x400, 0xfffffff9, 0x4, 0x9, 0x2, 0x4, 0x3, 0x0, 0x7, 0x6, 0x59, 0x2, 0x0, 0xfffffff7, 0x2, 0x7fffffff, 0xdc18, 0x7ff, 0x5, 0x101, 0x6, 0x0, 0x10000, 0x1e7f, 0x10, 0x6, 0x8001, 0x0, 0x67, 0x5, 0x5, 0x2f3, 0x791, 0x5, 0x2, 0x800, 0x80000000, 0x5, 0x2, 0x0, 0x6, 0xd1e, 0xfff, 0x3e, 0x1, 0x0, 0x7ff, 0xd, 0x1000, 0x3, 0x2c, 0x3, 0xa222, 0x5, 0xe, 0x9, 0x2, 0x6, 0x0, 0x100, 0x10000, 0xf2c4, 0x2, 0x6, 0x6, 0x400, 0x3, 0x3, 0x200, 0x5, 0x0, 0x101, 0x543, 0xd7, 0x9, 0x4, 0x101, 0x1378, 0xd04, 0x3, 0x400, 0x3, 0x4, 0x7fff, 0x8b7, 0xf7f1, 0x300, 0x0, 0x3, 0x8, 0x7fff, 0x9, 0x8, 0xffff, 0x3bd, 0x377c8478, 0x7fff, 0x9, 0xa, 0x0, 0x2, 0xffffffff, 0xa5c8, 0x9, 0xac9d, 0x6fd499ac, 0x7, 0x6, 0x7ff, 0x1, 0x512, 0x5, 0x7, 0x7, 0xe64, 0x1, 0x8, 0x8, 0x7, 0x6, 0x10000, 0x4, 0x0, 0x4, 0x6, 0x2, 0xc95, 0x1c0000, 0xffff, 0x9, 0xffffffff, 0x80, 0xde0, 0x0, 0x4, 0xfffffff7, 0x8, 0x7, 0x3, 0x6, 0xb74, 0xb, 0x8000, 0x9], 0x7, [{[0x8, 0xf], @dev={0xac, 0x14, 0x14, 0x1c}}, {[0x200, 0x401], @multicast2}, {[0xf0f, 0x278e], @private=0xa010102}, {[0x6, 0x10000], @dev={0xac, 0x14, 0x14, 0x3a}}, {[0x51, 0x7], @multicast1}, {[0x0, 0x8], @multicast2}, {[0x3ff, 0x1000], @multicast2}]}, {[0x80000000, 0x4b1, 0x7, 0x6e90, 0x3c, 0xea86, 0x3, 0x7f4, 0x7f, 0x79, 0x4e, 0x8, 0x627, 0x7, 0xa21, 0x7, 0x26e, 0x4, 0x2, 0xfee3, 0x3, 0x9, 0x800, 0x0, 0x7, 0x83f, 0xe, 0x1, 0x40, 0xc, 0x3, 0x9, 0x9, 0x2, 0x5, 0x4, 0xc, 0x1229, 0x6, 0x3, 0x6, 0xf, 0x9, 0x819, 0x1856, 0x0, 0x3, 0x7fffffff, 0x20, 0x2, 0xef, 0x7ff, 0x0, 0x9, 0x8, 0x6, 0x5, 0x9, 0x0, 0x6, 0x3, 0x7, 0x0, 0xf, 0x1, 0x4, 0x4, 0x14c, 0x6, 0x4000000, 0x6, 0x51, 0x4, 0x6, 0x5, 0x7fffffff, 0x6, 0x3, 0xfff, 0x8, 0x54, 0x7, 0x1, 0x9, 0x7, 0x4, 0x100, 0x101, 0x2, 0x2, 0x0, 0x5, 0x6, 0x0, 0xa00, 0x4294, 0x7, 0x200, 0x0, 0x9, 0x2, 0x7, 0x1, 0x2, 0xfffffff9, 0xfc, 0xf, 0x0, 0x3, 0x4, 0xb, 0x5, 0x6, 0x7fff, 0xa, 0xb011, 0x0, 0x0, 0x3789, 0x9, 0x3, 0x80000001, 0xd871, 0x9, 0x7b1, 0x4c, 0x5, 0x6, 0x0, 0xfffffffb, 0x3, 0x3, 0x4, 0x4, 0x0, 0xf203, 0xffff6fae, 0x4, 0x4, 0x8, 0xd, 0x8001, 0x0, 0x0, 0x7f, 0x1, 0xfffffffd, 0x7f3d, 0x7fff, 0x7, 0x10, 0x6, 0x0, 0x40, 0x3, 0x3d5, 0x7, 0x0, 0x4, 0x78, 0x6, 0xb3, 0x0, 0x6, 0x80000000, 0xa, 0x5, 0x5, 0xffff, 0x35, 0x10000, 0x9, 0x1, 0x1010, 0x8, 0xa, 0x200, 0x3, 0x9, 0x9, 0x5, 0x4, 0x0, 0x3, 0xf, 0x2, 0x8, 0x4, 0x2, 0x7, 0x6, 0x8b9, 0x6, 0x3, 0x5, 0x1, 0x76, 0x1, 0x2, 0x8, 0x9, 0x4, 0xfd0f, 0xfffffff2, 0x5, 0x4000, 0x9d, 0x3, 0xfffffff6, 0x400, 0x5, 0x3, 0x7ff, 0xb, 0x123, 0x4, 0x9, 0x9, 0xdf6, 0x4, 0x7, 0x0, 0x8, 0xe, 0xc, 0xad06, 0x6, 0x81, 0x9, 0x15df8038, 0x9, 0x80, 0x3, 0x5, 0xd7, 0xd18, 0x3, 0x1000, 0x9, 0x80000001, 0x9, 0xffff, 0x4, 0x3ff, 0xd, 0x5, 0x2, 0x0, 0x3, 0x5, 0x5, 0xfffffffb, 0x5, 0x6, 0x1ff, 0xe, 0x20], 0x8, [{[0x5, 0x6], @multicast1}, {[0x7, 0x8fb], @remote}, {[0x9, 0xfffffff8], @multicast1}, {[0x6, 0x8], @local}, {[0x4, 0xc], @remote}, {[0x3, 0x8], @private=0xa010102}, {[0x6, 0x7fffffff], @rand_addr=0x64010100}, {[0xa, 0x5], @loopback}]}}}}, @u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x3, 0x3}, {0x5, 0x1}, {0x7, 0x3}, {0x7}, {0xfffffc01, 0x1}, {0x4, 0x2}, {0xd, 0x2}, {0x8001, 0x62d8316d0c2a7168}, {0x3, 0x3}, {0x81, 0x3}, {0x8, 0x2}], [{0x6acf, 0x6}, {0x3ff, 0x615f}, {0x3, 0x9}, {0xbd4e, 0x5c0d5c9}, {0xd465, 0x9}, {0x6e6f}, {0x3, 0x5}, {0x4, 0x7fff}, {0x5, 0x9328}, {0x302b, 0x200}, {0x90, 0x3}], 0x7, 0x6}, {[{0x9, 0x1}, {0x7b, 0x3}, {0x4b1, 0x1}, {0x8, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x200}, {0x0, 0x1}, {0x7ff, 0x3}], [{0x4, 0x7}, {0x1, 0x7}, {0x3, 0x2}, {0x4, 0xed}, {0x0, 0xdfb}, {0x7f, 0x80000001}, {0x3, 0x1}, {0x401, 0xf95}, {0x1, 0x54ecb31b}, {0x2, 0x9}, {0x0, 0x3}], 0x1, 0xa}, {[{0x8, 0x3}, {0x7fffffff}, {0x0, 0x2}, {0x8, 0x3}, {0x5}, {0x3, 0x2}, {0x4, 0x2}, {0x37f, 0x1}, {0x4a}, {0xffffffff, 0x3}, {0x55e6, 0x1}], [{0x0, 0xa}, {0x6e, 0xb3}, {0x8, 0x4}, {0x8, 0x6}, {0x7, 0x8}, {0x7, 0x100}, {0x8, 0x2}, {0x17, 0x4}, {0x0, 0xfff}, {0x3}, {0x4, 0xe8}], 0xb, 0xa}, {[{0xfffffffd, 0x2}, {0xef3, 0x3}, {0x7ff, 0x1}, {0x4, 0x2}, {0xf78d, 0x1}, {0x81, 0x2}, {0x3, 0x1}, {0x44a5, 0x2}, {0x3, 0x1}, {0xa, 0x2}, {0x0, 0x3}], [{0x7, 0x800}, {0x7b, 0x2}, {0x40, 0x7}, {0x4, 0x3}, {0x10, 0x9}, {0x100, 0x80000001}, {0xd5e2, 0x7ff9}, {0x10001, 0x4}, {0x6, 0xe5}, {0x2, 0x6}, {0x6, 0x7}], 0xb, 0x7}, {[{0x6, 0x2}, {0xb, 0x2}, {0x7fff, 0x2}, {0x800, 0x3}, {0x6}, {0x8fe0, 0x2}, {0x9, 0x3}, {0x3, 0x1}, {0xd19, 0x1}, {0xffff74de}], [{0xfffffffb, 0x3}, {0x3}, {0x1ff, 0xc9}, {0x9}, {0x3fae, 0x5}, {0x2, 0x5}, {0x3da5}, {0x7, 0x2}, {0x8001, 0x7}, {0x7f, 0xaad}, {0x8001, 0xbb}], 0x5}, {[{0x85, 0x3}, {0x8, 0x1}, {0x9}, {0x5, 0x1}, {0x200, 0x3}, {0x2, 0x2}, {0x7, 0x2}, {0x515, 0x2}, {0x9e, 0x3}, {0x0, 0x2}, {0x88a}], [{0x0, 0x800}, {0x1, 0xc563}, {0x0, 0x7}, {0x1, 0x9}, {0xffffffff, 0x7ff}, {0xdde, 0x8}, {0x5, 0xa6a9}, {0x8e7, 0x2}, {0x76}, {0x400000, 0x760}, {0x9, 0x3}], 0x3, 0x7}, {[{0x1}, {0xfffffbff}, {0xba}, {0x9}, {0x56c, 0x3}, {0xffffffff, 0x3}, {0x6, 0x1}, {0x7, 0x2}, {0x1, 0x3}, {0x7, 0x3}, {0x9}], [{0x5d, 0x6}, {0xffb, 0x7}, {0x0, 0x369c}, {0x5, 0x417}, {0x3, 0x5}, {0x2, 0xd}, {0x6, 0x5}, {0x1, 0x8}, {0x401, 0x6}, {0x0, 0x9}, {0x4, 0x2}], 0x6, 0x9}, {[{0x100, 0x2}, {0x334e, 0x2}, {0x1, 0x2}, {0x1, 0x1}, {0x4807, 0x1}, {0x4}, {0x9}, {0x80000000, 0x3}, {0x1, 0x1}, {0xba, 0x1}, {0x0, 0x2}], [{0x10, 0x4}, {0x5, 0x13}, {0x5, 0x4}, {0x8, 0x9}, {0xbb2, 0x2}, {0xb9, 0x8001}, {0x3, 0x2}, {0x8, 0x8}, {0x216, 0x3d}, {0x10, 0x6e6}, {0x800, 0xfffffffe}], 0x9}, {[{0x9, 0x3}, {0x7, 0x3}, {0x8, 0x3}, {0xffffffff, 0x2}, {0xff}, {0x1, 0x3}, {0xffffffff, 0x2}, {0x7ff, 0x2}, {0x4, 0x2}, {0x7eb, 0x1}, {0xa3, 0x3}], [{0xe6a, 0x9}, {0x4, 0x400}, {0xc21, 0x7}, {0x3, 0xf}, {0x8, 0x5}, {0xde4, 0x9}, {0x3, 0x11ff}, {0x8, 0x8}, {0x1, 0x98}, {0x6, 0xb41b}, {0x6, 0xd3}], 0x5, 0xb}, {[{0xee5, 0x3}, {0x9}, {0x2, 0x3}, {0xb3}, {0x7, 0x3}, {0x6, 0x194efad94710ac6a}, {0xe, 0x2}, {0x9, 0x2}, {0x3, 0x2}, {0x656a, 0x2}, {0x3, 0x3}], [{0x7, 0x5}, {0x8000, 0x8001}, {0x3, 0x9}, {0x2, 0x3}, {0x45d00000, 0x3}, {0x5, 0x1}, {0x1ff}, {0x8, 0x40}, {0x8, 0x4}, {0xec97, 0x10001}, {0x4, 0x74d}], 0x3, 0x4}, {[{0x9, 0x2}, {0x8}, {0x3ef3}, {0x1}, {0x2}, {0x1}, {0x8c, 0x3}, {0x80000000}, {0xfb6, 0x2}, {0x1}, {0x4, 0x3}], [{0x5, 0x6}, {0xc82, 0x5}, {0xd1982fa1, 0x3}, {0x0, 0x3}, {0x8, 0x7}, {0xfff, 0x10000}, {0x2000000, 0x4}, {0x3d, 0x5}, {0x200, 0x7}, {0xfffffffe, 0x8b}, {0x2, 0x100}], 0x0, 0xb}], 0xb}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x1000, 0x3ff, 0x10, 0x1, 0x0, "eb941759670bfab9f0a24033d04c254575d06f8896f49415a7d4afc178738034fa1dad739c14449dd8d2ce53a1fd315559bdb1d34507c385b92ca9d7a6ba2dbb"}}}], @common=@ERROR={'ERROR\x00', 0x20, {"04799fbfcf49f423ec1ecd21e334b2aa9327560d60db8bd0169fdebb651b"}}}]}]}, 0x1316) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9b}]}, &(0x7f00000001c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 764.412525ms ago: executing program 2 (id=7043): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) (async) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async, rerun: 64) r7 = socket(0x2d, 0x2, 0x0) (rerun: 64) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r7, 0x11d, 0x70, 0x0, 0x0) (async) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r9 = socket(0x15, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x271f, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) (async, rerun: 32) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async, rerun: 32) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) (async) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r11, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r12, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae714de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe7630a33b6deca160d8c2fbff48eb96428300"}, 0xd8) 711.563296ms ago: executing program 8 (id=7044): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r2, &(0x7f0000000080)={{0x3, @null, 0x1}, [@default, @bcast, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="340000003f000701feffffff00000000017c0000040042800c00018006000600800a0000100002800c0008000000ab"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000002000000400000000000000000200000000000000000000000800060000000080cb8b862ae9da0c9f75f3db49e683800217c8b98a2cc0d477a87868d181ee352b75b1dab80462909670ae6924e37a501185b010df790a99f689f4f5d5518a4e8f0a6fdd14f5452428fa1543abbfde7e6f4ff56509b91cb857b28761c13b0b5ddad24ec0f47a4f8d3f864aec0ecda2253e0146c7e137e8b05d3fd1907d61234d6566a13b4236605e295c2d899adef71b4f69e615cc28d2cd99"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x48850) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$ax25(0x3, 0x5, 0x0) (async) bind$ax25(r2, &(0x7f0000000080)={{0x3, @null, 0x1}, [@default, @bcast, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="340000003f000701feffffff00000000017c0000040042800c00018006000600800a0000100002800c0008000000ab"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000002000000400000000000000000200000000000000000000000800060000000080cb8b862ae9da0c9f75f3db49e683800217c8b98a2cc0d477a87868d181ee352b75b1dab80462909670ae6924e37a501185b010df790a99f689f4f5d5518a4e8f0a6fdd14f5452428fa1543abbfde7e6f4ff56509b91cb857b28761c13b0b5ddad24ec0f47a4f8d3f864aec0ecda2253e0146c7e137e8b05d3fd1907d61234d6566a13b4236605e295c2d899adef71b4f69e615cc28d2cd99"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x48850) (async) 650.898758ms ago: executing program 5 (id=7045): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtfilter={0x4c, 0x2c, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xfff0, 0x3}, {0xd, 0xffe0}, {0x8, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x14}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_CHAIN={0x8}]}, 0x4c}}, 0x0) 563.605618ms ago: executing program 2 (id=7046): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1a, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x1, 0x3, 0x9, 0x5, 0x2, 0x8}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc6, &(0x7f0000000440)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1000}, 0x8, 0x10, &(0x7f0000000000), 0x10, r1}, 0x94) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x8804) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={0xfffffffffffffffc, 0x0, 0x1000, 0x3}, 0x20) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f00000007c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) (async) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000000)=0x30) (async) r7 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e25, 0xeb, @initdev={0xfe, 0x88, '\x00', 0x21, 0x0}, 0x5b56}, 0x1c) (async) sendto$inet6(r7, &(0x7f00000000c0)="800037e92208a19e", 0x8, 0x40094, &(0x7f0000000040)={0xa, 0x1000, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc}, 0x1c) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000019c0)={0x222c, r8, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x94}, @NL80211_ATTR_CSA_IES={0xf90, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x14, 0x7]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0xa5, 0xf, [@ssid={0x0, 0x6, @random="ca05084f51b5"}, @perr={0x84, 0x4f, {0x2, 0x5, [{{}, @broadcast, 0x3, @void, 0x14}, {{0x0, 0x1}, @broadcast, 0x1aee9c83, @value=@device_b, 0x6}, {{}, @broadcast, 0x6fb, @void, 0x30}, {{0x0, 0x1}, @device_a, 0x2, @value, 0x36}, {{}, @broadcast, 0xf, @void, 0xd}]}}, @preq={0x82, 0x36, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0xae, 0x9, 0x5, @device_b, 0x9, @value=@device_b, 0x101, 0x9, 0x2, [{{0x0, 0x0, 0x1}, @device_a, 0x1ff}, {{}, @device_a, 0x81}]}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_PROBE_RESP={0x276, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x67, 0xf, [@erp={0x2a, 0x1, {0x1}}, @preq={0x82, 0x36, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x4, 0x7f, 0xfff, @device_b, 0xfffffffa, @value, 0x734d, 0x3, 0x2, [{{}, @device_b, 0x9}, {{0x1}, @broadcast, 0xfffffff4}]}}, @chsw_timing={0x68, 0x4, {0x2, 0x5}}, @ssid={0x0, 0x6, @default_ap_ssid}, @measure_req={0x26, 0x4, {0xfc, 0x1, 0x3, '['}}, @supported_rates={0x1, 0x8, [{0xc}, {0x30, 0x1}, {}, {0x2}, {0x9, 0x1}, {0x30}, {0x24}, {0x36, 0x1}]}, @peer_mgmt={0x75, 0x8, {0x1, 0x1ff, @val=0x3, @val=0x34, @void}}]}, @NL80211_ATTR_PROBE_RESP={0x15e, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x100, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xfc, 0x2, "14907e7623773d78bab60b4dd33c9ee4f9b9e449101237034635aff8c5f697e23260f1c0ba1bdaa90913f1e269dd1242e0315b4217c4131cbfca725085696154316de4a35e1e06ebadd664a4d6a4351fc1e65db543fa4f951723bb90db72707e5f620c9d3e0f9408ad0e5541c6a1384bb6b0a8b6c182b24678122c14160c6e7a9e953b70be41f5b28fbce726e349759b8dbb25b69b158df9a53cbcf1cbf533ee15532ee4d2fa3d9aca905f4677b0cf7c8d008c6b9e7ef310f2588642625d5f6f97306844495708aab84c4ece749c8c4e6a51a00b2986b532428b301388af5d53dead86bbd3ccc07edbc8fcad8b843c79c593ef47f3e8b459"}]}, @NL80211_ATTR_PROBE_RESP={0x85, 0x91, "431501c54bfd2e57c3d87ad449c1d33222fef9a8798bfc65b048c6bdf99a4df5b4f27423b97f32d985e5428c65ec7e087c8bbfdbb237302f1a9a1f5a894d8c9ab8249def4837e2abb72102d5fd794a57f27e911ad91371f006e26abadb847e368d55ee2c16cdfe7c3e482236f9b592340c841ecd73de25e824f7d8e14de712f810"}, @NL80211_ATTR_BEACON_HEAD={0x3ea, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @broadcast, @initial, {0x7, 0x2}, @value=@ver_80211n={0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x1}}, 0x8, @default, 0x21b8, @void, @void, @val={0x3, 0x1, 0x3c}, @val={0x4, 0x6, {0xa2, 0x6, 0x545, 0x400}}, @void, @val={0x5, 0x31, {0x7, 0x5b, 0x7, "6088a476548d7d9d3340320ef566fa72d3c7700f1cb3e906f4a841e1aa77a721f672dc6eda96d37b0e43efde4f7d"}}, @val={0x25, 0x3, {0x0, 0x2, 0x5}}, @void, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x6, 0x0, {0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x6, 0x80, 0x40}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xd, 0x4, 0xa, 0x100}}, [{0xdd, 0x3c, "16e6069584dbbcfe68a6ff926249f693adaebb687312ceda645aece8ca1afffe302653e12c0586cf77b1978eacdea1be3d1bd59140987a171257cd30"}, {0xdd, 0x6a, "9d9246a8b4643b8fa8a8fe0cdfea8327ec58903c201252f4b92a325d0c89fad5a24c7f985401530ba9dfac210cdacc6ca7ddbe5d5fb79a7dfd4d25425e3f191a7d579f3488252dddca3f9cecb65fd0299ac72b5814117a4861ffe1f7e2980439dae222852ab814be3fa5"}, {0xdd, 0xea, "f31bb7ddc6b4f2a2442bc8c7be6f5a8ff979c6049719a3eccaf155f3c021a562378893b790a5a69634920fb5a25230a6ac0cb1e9e95e38afc8d092d717ed98e17e81810212ef66af6d65b2776873b9c015c9229d3b24e323344389479aa1c616fbda8178ea109b98ca9160dacbdb84247a8641cf75fb95ce6084f31bbc7759d99881a28b0e142da4231d802533ef9e721e5682cb437aebab356928249979d04af6266e5e25c96877d32393a19f8c520094b88f9e5c0953a6372b349b5e9aea4bf8711e8d7b8f16626a1389c68ddf9d1788b4c012e1e143d024339748d1d936505511b72d37f6b04133fb"}, {0xdd, 0x66, "54f61097d378ea5a593e1e9c2c2587ae19116a75d8f459039ff371f0199c63b6f92e0daa275ceaebbb1aec1518f339d7db234396ed2207e541904b0ec16431619bb879de45cc8295e0233097a2a93d5205206416e0742bf051f4095906b0e76af589f0c0e173"}, {0xdd, 0x14, "016f793c7ca946fb06823e53a242a6dbfa2185b3"}, {0xdd, 0x87, "caffc9c36fdec133033cb11dc05800d34258763a451416bb9829ae3c9aab977dbb4a233998be9578722aa0d8096c1acb831461b151d7cc2ae878a1df8fd7b31db2f86b834cda84442c5eec539022fc479e1fb44a8b4b3d4c1871c7b9060698f54b83b465f86f4eb4cf704368f1e30077246e49f52973fe2eb77383699e4aaa9f9e09831b3eaf4a"}, {0xdd, 0x43, "147cc3a4849b4934e193bec0d07a977a517191e550b90c269b654a7a41d99bf3f5c5fcc27c10d80608d916cf39a8491bd2879215405e1939625db06b7aa61ac9b678eb"}, {0xdd, 0x6b, "4d51174a07e093aeedf434abe003a81f49e7b96950ba564d767bad1d18465587fa027d0c78be39a02582469b41033a18a08b00fc0457395b4ac8c512dba7a213122c365257276f67d99a70432d75fb5303e90582ec2ffd74f448f17fcf72c285159cc9a4ba9bd085de2297"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0xf4, 0x80, [@peer_mgmt={0x75, 0x6, {0x0, 0xb155, @val, @void, @void}}, @ibss={0x6, 0x2, 0x7}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @random_vendor={0xdd, 0xdf, "61e81617f015968ca078f4b7781963a8ed92c3e4236fe8ffa9899cd513dc567f3810644311ee4ac999235c1ddacd3eb27da52c44eba3571f0c83d7f6d0effe5e094ec2505badef8ebd9928b11bec193f061fdbe619956a8f7414dea271565bfdb15489c8f8c45ee9ebc2f13beded0c9160d167b2c230b45c915ea9bef641e76bc6ba7bfd4fb507aca56862aaf5bb12975e8e7ada153be421ee1f0b3c7aec95d787760c083dcc8c0b7c1fdabc4f8a0a3113ec6ac7017368ffe5f7171f4f68fea1f82fb6ddb80e065dab17a6ceb1864e9bd38334c6d09406827dcd1796eeeb2f"}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x0, 0x1, 0x6, 0x4]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x3]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x9]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x162, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0xab, 0x3}}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}, @link_id={0x65, 0x12, {@random="e561a9354c94", @device_a, @device_b}}, @fast_bss_trans={0x37, 0x57, {0x5, 0x1, "7cd18bc54033664fec4f3a75c9f6e5b8", "698e6f83de50c97a84231885cd235e52811c6bd8c056d825122da6f1a8ab936b", "7e22462120bee9cb19a70c9f825ae937ac6888378bd556bde0c274a20bf3108d", [{0x1, 0x3, "b25644"}]}}, @mesh_id={0x72, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x1, 0x0, 0x2, 0x20}}, @perr={0x84, 0xb5, {0x6, 0xb, [{{0x0, 0x1}, @device_a, 0x1ff, @value=@broadcast, 0x25}, {{}, @device_a, 0x1, @void, 0x37}, {{0x0, 0x1}, @device_b, 0xb, @value=@device_b, 0x1c}, {{0x0, 0x1}, @broadcast, 0xffffffff, @value=@broadcast, 0xd}, {{0x0, 0x1}, @broadcast, 0xd, @value=@device_b, 0xd}, {{}, @broadcast, 0xc1, @void, 0xb}, {{}, @broadcast, 0x374, @void, 0x7}, {{}, @device_a, 0x8, @void, 0x2f}, {{0x0, 0x1}, @device_a, 0x89c, @value, 0x3b}, {{0x0, 0x1}, @device_a, 0x7fff, @value=@broadcast, 0x17}, {{}, @device_b, 0x8, @void, 0x1d}]}}, @mesh_chsw={0x76, 0x6, {0xf9, 0xb9, 0x1f, 0x3}}, @rann={0x7e, 0x15, {{}, 0x7, 0xf7, @device_a, 0x101, 0xfffffffc, 0xd867}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x31, 0x80, [@prep={0x83, 0x1f, {{}, 0x0, 0x8, @device_a, 0x9, @void, 0x3, 0x10001, @device_b, 0x4}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0xae, 0x9}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xf, 0xa, 0x6}}]}, @NL80211_ATTR_IE={0xd, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0x8, 0x4}}, @challenge={0x10, 0x1, 0x29}]}, @NL80211_ATTR_IE_PROBE_RESP={0x18, 0x7f, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x40}}, @mesh_chsw={0x76, 0x6, {0x0, 0x7, 0x1b, 0x1000}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1c, 0x7f, [@mesh_chsw={0x76, 0x6, {0xfd, 0x0, 0xf, 0xc}}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_IE={0x52, 0x2a, [@preq={0x82, 0x4c, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0xf9, 0xd, 0x6, @broadcast, 0x40, @value, 0x8, 0x5, 0x4, [{{0x0, 0x0, 0x1}, @device_b, 0x6}, {{0x1, 0x0, 0x1}, @device_b}, {{}, @broadcast, 0x5}, {{0x1, 0x0, 0x1}, @device_a, 0xffff8001}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x176, 0x7f, [@challenge={0x10, 0x1, 0x2c}, @preq={0x82, 0x25, {{0x0, 0x1, 0x1}, 0x6, 0x0, 0x4e3, @broadcast, 0x5, @void, 0x7fff, 0x6a4, 0x1, [{{0x1}, @device_a, 0x6}]}}, @random={0x4, 0xad, "304af3152f273155c41872274423844b3785bb26439aa97b226f5a46f0b55f9e485e7b6ccd3eee10771f26c93ea1fad7102c3815cddb3b15a8245bfdfa30a0050238e5ffd9c84d1a0955e69d26e7f31aaeed538bfc72bca9fd96171f35acbdfd0167ad6119500e419d71fd31c89ada73959748874ec7081b78a189e3829de2984c3c937991f806babf0959251374ad904f85938f47c021b6090ae6320ac191a4ab653c8ee31959dee59c6fdc29"}, @ssid={0x0, 0x6, @default_ap_ssid}, @channel_switch={0x25, 0x3, {0x1, 0x95, 0x8}}, @preq={0x82, 0x72, {{0x0, 0x0, 0x1}, 0x1, 0x40, 0x6, @broadcast, 0xa, @void, 0xd, 0x1ff, 0x8, [{{0x0, 0x0, 0x1}, @device_b, 0xc0}, {{0x0, 0x0, 0x1}, @device_b, 0x2}, {{0x1}, @broadcast, 0x4}, {{0x0, 0x0, 0x1}, @device_a, 0xffffcedb}, {{0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x2}, {{0x0, 0x0, 0x1}, @broadcast, 0x8000}, {{0x1, 0x0, 0x1}, @device_a, 0x2}]}}, @mesh_chsw={0x76, 0x6, {0xcd, 0x9, 0x7, 0x1}}, @cf={0x4, 0x6, {0x62, 0x5, 0x5}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x2e, 0x80, [@chsw_timing={0x68, 0x4, {0x8, 0x16}}, @mesh_id={0x72, 0x6}, @ht={0x2d, 0x1a, {0x20, 0x0, 0x1, 0x0, {0x4, 0x8, 0x0, 0x3f7, 0x0, 0x1, 0x0, 0x3}, 0x1, 0x74a28a07, 0xbc}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x61}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x8b60, 0x0, 0x5]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x163, 0xfb8, 0x7]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x800, 0x6, 0x8, 0x10, 0x3]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0xb, 0x8, 0x268, 0x4, 0xf]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x98}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x1268, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x144, 0x80, [@sec_chan_ofs={0x3e, 0x1}, @channel_switch={0x25, 0x3, {0x1, 0x2, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x8, 0x107, 0x3}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x4, 0xd, 0x8}}, @ssid={0x0, 0x6, @default_ap_ssid}, @preq={0x82, 0x3b, {{}, 0x5, 0x9, 0x2cf, @device_a, 0x3ff, @void, 0xf34, 0x2, 0x3, [{{0x1, 0x0, 0x1}, @device_a, 0xd6}, {{0x1}, @device_a, 0x1}, {{}, @device_a, 0x5}]}}, @tim={0x5, 0x69, {0x8, 0x77, 0x2, "23c8cf5d8226f1802c0482cf9ee369afcbee6e1d66938ef6f5f6a694cd9d5541d296a95eb1055a0333a2ac1636838eb52e686aa8139fc7f9eb153ddc1670b0a69e4a0accb9d55c46be903ea65529211e5e4b5404c3dc2a1f8869d6351b6ed44c510b18f1545a"}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @random={0x4, 0x63, "fb2b085ca2162880bb2a1daa5ccdd4275111b6a762cf6da48c3688d19d12c105d6cbd7fa7d35202e30b94ecdf929a298e949a859061fd2b016b65c0b97ee000e19f4c64c63dafbd816c7b0498718b557e70ddaf6497d7b0baa49746dc2f9ecced9e0b0"}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_b}}]}, @NL80211_ATTR_BEACON_HEAD={0x1b1, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x35}, @device_a, @device_b, @random="5bc437bb51c2", {0x5, 0x8}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0xe, @default, 0xa001, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x99}, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x4, 0xb, 0x3}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x3, 0x0, 0x34, 0xfff0}}, [{0xdd, 0x44, "d0b9c8c5a49629bf7663fb2fba00e4f59cd6c19e188d7e7508736d87fb9ddab4f55b804a11ffceeb1657fa58ca0ae1288ea13a3a029cbf0fef08b42c31576e58cb21b61c"}, {0xdd, 0x2d, "d9a63349928d24f728faedb2d46f1642c5730d7fda1024e45903a2ebb85fdff66426bc16c3d90e3b8f5d589653"}, {0xdd, 0xed, "51c66f0285cab6428b8db16a2c5a942df34c8880bad6e6cc560eed86da2d71f5ad8d4d2e18ab224046082fee68023c2ef68d5a16dd3295b8154c8396cc6429cb7422f6cdff8b7bb52245b55cb046f615f089b750e25817382f78e7985035a50d228f82cf82ebbca721938673f30d0d3b3693a92cb49c6cb17b9e1458e993ef6a0ab5f070848b3d12a7fff715afaeda42c09cdfa431675591d2f9a5160f8434d4d0159f841a8d0554e8b97901e1268263b3907747b9d906b6cc0950938f51dd95f74e9e206051499b73c5e32a3e6a5a48718e1d2022275d5fcafbe24a37d8d8689f35730871e39eda9e8ac95a57"}]}}, @NL80211_ATTR_PROBE_RESP={0x517, 0x91, "84b1dcfcdfd739c219e9192dc35e4f5faeac22b694957c2a476a987cd6e9b570119fbf7d8eef68ad42422245767a653ed7a2e4c0c2a08c69918577e6626f8639fcf28bd3ea395493b18324e0221e58aee966670cec494f6d9f4da9c6d9b8de7501c0ac4b0ab38dc8e7fae11577254be473a5e7cc94f4afa3e913a18cb0c07fe7af74c70943642ebd34589fde18f36a6983805d9acda82d2632e9a979c812796c68a7c55f29b7603f01f98316ed0e9014f39a394b5378caafb79ad7257335e8bf5252913347cdb6911876c8476f8a03411cc0f6f3c4caefb1e04c455c02d81dfcf4095035f3c27ca6f0434fe0b76518e72ba92d9d2f84c3a7eecd0197de0231a3c272c89477754c6873e5df1aa887d00cc9228c91f23b5784d418b705441a58a729b98e4b4535d0b72ce429a86cdf9de2a1680d1749afa5855a8d37fbebaac4f7cbfc9a0cbab05261d8a8c73c596fef614a21d7e5d78c240df390798907df341c87f7a1f66944e0a24fbf19fb8d49ba6340b70338d9bb1dba227c28d462ffa606bb5a723ddb827a8ad15b094f19fdee9792d2b40e12725396bf7087956c720a489c183873e6503efa8b5cb41d9bbedf78f7e45de7a4de131085f70e73a0a45f736c0ad369c33a101be45ca8f9b5f6056baa0ffab3c6cd40aa9f26b1feda19b6b7de88727292d922d944cfb75012f349a188321bf835ead82c54ca850f7d960a494e813aff96d59bd22b22a2d1ac7d874b30c8c7b14df0762e8ff54992ab1fce89e6d0d8589a43cfe7d5b2aeaf53e23ab8f87254011128600f21872c9b368a00bf0affc7d8122bf9dc5d32f6d7315fb236db6ad63997840aaac17e48dc9fde3e7312271db6bc114f3df60dbe3de7563ee3c9aaae358ce66f270ce83cf0e443b9cb0200359127426860fc45c19f4fc73d7ea99f1a35de68eb0c0f48416bbfa037eb8a1ea59f476706041ae451aab3c521f3ae032425bd35bede4834228ed57934e139a42f679a32a7fb0b660c8699eb89d21954d7675d73defa2f86e858ba35ddb5e071193d17f58a74033f05c9f145833a383c22401ac0ff55c3ed497f628c5fb1494d9144af9529d926d8e0721e0eabfee488cd8d786184526d03481607943dda9ec2fb0e7e04818fa4573cb91daf60eb4adcc49c228af4af341a0eb08870de2fc149a847c38ecf50527067e3014e712c68379cf65cd6d2e7aa5fcad4da620275a8a4fe4eaee3ec7d8fa099f0636feb08959eb80ff114952455ae1202573ffe679c58f5f36b5d9d9c0c3690a8d082255b3310187e41cdc7c3ee3440ad4a14bf097a43abd5e531c9c4b4d7849adbae01820c61037d2b6b74fa94936d5889e8e2a9ea50fa8e6a9dd70e9d612fafd78fdd75983cdc0923b8ecca78343b6e863ff1452d8b92b2e9d8fdaf5538d60256a8cd708894802bb06a8b4ae48bd4723cfc8e1f5370af089159ba8ab1770ae43e41055796a6343523c2a6afd0344b81177d821808b7f290c8887c69af15fcfe0c0c00e7e99875c2dbbeae21b5565517d2d4673f74bc4e56764564387feb6b21a4d1126761dd41dd329cba241ad880e57a0b98c0ada33733ccf7a8fe0a4d30765261ae333d6f554c3e25117b72d833450f32f9d1d86df65252c0fc6ad6035e66e592f7f7daf05a061ccb6cbe2338d1c732d0422f5afae82aa93baa25f5e40b710cfd4a9a73507c4259efdb8a43fcb32479192214a92917c08e7ba86b0853d054afc8cbac5398858774d9c5e4f7d95214f2905be075cece044b8b19e90f3ad38b36c3bd9be447c0701ad5e40df796a396a38d94578f2d34c792b66fa52e363588375eef3c237896"}, @NL80211_ATTR_IE_PROBE_RESP={0xc, 0x7f, [@cf={0x4, 0x6, {0x7, 0x7, 0x0, 0x4}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x12c, 0x7f, [@mesh_chsw={0x76, 0x6, {0xa9, 0x7f, 0x15, 0xc194}}, @challenge={0x10, 0x1, 0x1a}, @chsw_timing={0x68, 0x4, {0xfffd, 0x6}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0x4d, {0x3, 0x7, 0x6, "15015363380b8f3b4cf5397ed451c0b4b6d2af9250f4701e43ad9c0a19dd46703085e4b4e7d7c4c2b94182381e94eb1cbf2f8b1cd215a4fcab67f6f144017c225585bfb9e6d40e72f33f"}}, @random_vendor={0xdd, 0xa4, "456d6b2bdcec17946422b7b2613909d4239ffe1a1a552893ae306704498cf0e41276d11a8781229618eb8ff08d4c10d1134e071d50e71d9ff5cd37de901ca5a1e49998e47c317e45a50fa0b893ab5f3207b104399c8fbf711a07da8c1d06000b155ed565ef84dd703ce8bb7bd7ce3188539636e6514c41245ee67d26fe9208280155d8e3c69ac45f005a4a75d92e86f843b0183d352d5d43eb75620f2b9f8ec3d2004d9f"}, @mic={0x8c, 0x18, {0x897, "4516487d631c", @long="3c0bf93810baf92bfe516f450b7725e5"}}]}, @NL80211_ATTR_PROBE_RESP={0x5e8, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x334, 0x91, "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"}]]}]}, 0x222c}, 0x1, 0x0, 0x0, 0x40000040}, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000002c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x14) 561.971321ms ago: executing program 8 (id=7047): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40800000000000073116c00000000008510000002000000b7000000000000009500c2006a2000009500bc4dca72c25060cf59a47ba0c5b5f70dd6f3e4"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x3, {0xa, 0x4e21, 0x6, @remote, 0x2}}}, 0x80, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1013b52513a5cb7", 0x19}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r0, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14, &(0x7f0000000180)={&(0x7f0000000200)="c09581a76e6afbd54ed35d944915ccbded212696484bd857681d5567daa449f36054dcaf3079134a2f8a95a4a5e318b8931cfad891b44a94a1b0821bc36a6c73ca93dae52344b3482c6f200af6cdb5eb80ede918f1b70c0089ca30bb7827c97ac8eb576002906830cd16edbae9d646c4cf5c7b4bc1f2dc0eb039d763b6078d84b56162a6c1e04925f45ea98b2ee85ef83ebbe3e50d0410459d9fe12ed51a8f666e574cec9224bc694962225a811a557a127784642c25e40af830e23ac5ea62edd8", 0xc1}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, 0x0, &(0x7f0000000180)=0x2c) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000080000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001e000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00T'], 0x24}}, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r6, 0x0, 0x0}, 0x10) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010023010000fcdbdf250200000008000100", @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYRES16=r8], 0x1e) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x0) 385.090422ms ago: executing program 2 (id=7048): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x20000000ed071, r0, 0xfffff000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) 379.428315ms ago: executing program 8 (id=7049): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x52) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x18, 0x14, 0x400, 0x0, 0x0, {0x23}}, 0x62}}, 0x0) 291.211793ms ago: executing program 2 (id=7050): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="07000000010001", 0x7) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000370400000000efffffff00000000", @ANYRES32=r4, @ANYBLOB="8704050044800000240012800b000100677265746170000014000280060010004e21000008000700ac"], 0x44}}, 0x20008884) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x6, @local, 0xa}, 0x1c, 0x0}}], 0x1, 0x2008c0c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0xf}}}, 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x40}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000240)={0xfffb, 0x5, 0x4, 0x6, 0x9, 0x8001, 0x0, 0x4, r9}, 0x20) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000580)={r9, @in={{0x2, 0x4e23, @multicast1}}}, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r10, 0x29, 0x18, 0x0, &(0x7f0000000200)) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r11 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r11, &(0x7f00000040c0)=[{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="816154c6e71d9c750363f342744911ca45e32f393e977df3b37b8f315e8271e2", 0x20}, {&(0x7f0000002780)="1412db33722627433eac166190a979b24a252d244af8b27292b4576fc3b3806e0347778024e08aeabd5095bcb6435b0784bc039c894fdbad65262479b27ec7824d174849499dfdd7339b8a7aa1af2aa9354c0987bfc33778c11962190161c89b", 0x60}], 0x2, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40088d5}], 0x1, 0x40) recvmmsg(r11, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)=""/116, 0x74}, {&(0x7f00000003c0)=""/129, 0x81}], 0x2}, 0x9}], 0x2, 0x10000, 0x0) 220.299802ms ago: executing program 8 (id=7051): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x1, 0x400, "a590d8", 0x7, 0x6}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000080)=0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0xffff, @remote, 0xcb68}}, 0x3, 0xffffff5e, 0xbd, 0x400, 0x3}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000001c0)={r3, 0x69, "3fbcadbc5276687cbad122da17032897d19105891b535e97218a09bb615a08f9bd7c0da0ee12f4a6794b77b050ac987e60ccaca64ac7912257bff36d6dbe6caf1565545a0f673d1dfc26f39379a3f76f4673761ef7d341df9730088139a19ec60a7b81d1d9a04b7a66"}, &(0x7f0000000240)=0x71) r5 = socket$kcm(0x29, 0x7, 0x0) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @multicast1}, &(0x7f00000002c0)=0x10, 0x80800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f00000003c0)={@multicast1, @dev={0xac, 0x14, 0x14, 0x17}, r7}, 0xc) r8 = socket$inet(0x2, 0xa, 0x7) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'gre0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000440)={0x0, 0x9}, &(0x7f0000000480)=0x8) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000500)={'batadv_slave_0\x00', &(0x7f00000004c0)=@ethtool_gfeatures={0x3a, 0x3, [{}, {}, {}]}}) setsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f0000000540)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r11, 0x10e, 0x8, &(0x7f00000005c0)=0x3, 0x4) r12 = socket$inet6(0xa, 0x6, 0x6) sendto$inet6(r12, &(0x7f0000000600)="db9ac64ce98f2d171b6028824ff5c48b5ad08065d44db287ff56743e1fab52b2fc69b080c04655aa5703f74e0139e873ad8b8489a05ba5d63796b1826401c405667f6edb839e7b4086854351901f39606d276f053d2811b600a48b922fee772942bfb21d869a61f9c91ba817cc5830555701e998b398203cb56593d9be2d3e937c0e76fa5c12ad0e79a56a27ca54ed3e8157a4bc951f307aa4bdd171535b5d80088c278c7db6cc4f7d8be917bedbc683ac6d9bdb71d46465e07d15c6b4b96027802fd9f85b07fe6fb54270db0bc77e62ce46b3af743e013743012bead6020e168860e459e78ef58d67905dc53b8c", 0xee, 0x44880, &(0x7f0000000700)={0xa, 0x4e22, 0x400, @mcast1}, 0x1c) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000740), 0x4) ioctl$sock_SIOCDELDLCI(r11, 0x8981, &(0x7f0000000780)={'geneve1\x00', 0x50}) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000800)={0x3, 0x40, [0x8001, 0x80000000, 0x4, 0x3], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r12, 0x84, 0x7b, &(0x7f0000000840)={r4, 0x4}, &(0x7f0000000880)=0x8) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', r9, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a40)={r13, &(0x7f0000000940)="17da4398f7584901e39c74d3884dc47dde5d003b5e0b02cd1472c4228b69ba8cf01a43c501956cd3783b588730e8f0ad5af45a05ebae406c52bd1de4df8f66dad8485452a1f4d5da2b5fd5bc864b346b0dbcf624ca4efabe6d730b510ab7055615a6e2b8fd61e42fae29b64aeb3d8fbdd9698bcdbbb94f0dcc4eb1072bc575e1048a4b193e3a3cf6dc43e7387a79cff14556616d4f0f2f", &(0x7f0000000a00)}, 0x20) ioctl$sock_inet_SIOCDELRT(r10, 0x890c, &(0x7f0000000ac0)={0x0, {0x2, 0x4e22, @private=0xa010102}, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x120, 0x0, 0x0, 0x0, 0xd, &(0x7f0000000a80)='veth0\x00', 0x1, 0x80, 0x10}) 218.875086ms ago: executing program 5 (id=7052): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x409d64d8}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x17, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ldst={0x3, 0x0, 0x1, 0xa, 0x6, 0x7fffffffffffffff, 0x4}, @alu={0x0, 0x0, 0x6, 0xb, 0x1, 0x100, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0xcc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="b01200002d00010000000000000000000400008004001d009712098008"], 0x12b0}], 0x1}, 0x300) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x409d64d8}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x17, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ldst={0x3, 0x0, 0x1, 0xa, 0x6, 0x7fffffffffffffff, 0x4}, @alu={0x0, 0x0, 0x6, 0xb, 0x1, 0x100, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0xcc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="b01200002d00010000000000000000000400008004001d009712098008"], 0x12b0}], 0x1}, 0x300) (async) 183.961362ms ago: executing program 2 (id=7053): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="8978adcc71b70e015df89f7ba2fc10899d2c9951c1a2e77fc5abb9169f53d4613ede56178273c7a24d443629a6bf606fe999bb05ae90404b9a1fd5dd70e2aa48fd3e3acf2711deefb25a71bcb131a9ee13eff7d0fd5f29c6", @ANYRES16=r2, @ANYBLOB="040026bd7000ffdbdf2507000000dc000480440007800800030009000000080001001100000008000400010000800800040005000000080002000200000008000400040000000800020001000000080001001f0000000900010073797a31000000003c0007800800020001000000080001000a00000008000200040000000800030089a0870a08000300ffffff7f080004000d00000008000300090000000000010073797a310000000014000780080001000100000008000200090000001300010062726f6164636173742d6c696e6b00000900010073797a31000000000900010073797a3000000000100006800400050000000500"], 0x100}, 0x1, 0x0, 0x0, 0x15}, 0x0) 0s ago: executing program 5 (id=7054): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008804}, 0x24040041) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd70000700000004000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\a'], 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): syz.7.5246'. [ 522.823016][T24806] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5248'. [ 522.854317][T24806] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5248'. [ 523.129348][T24823] Bluetooth: hci0: unsupported parameter 512 [ 523.135636][T24823] Bluetooth: hci0: unsupported parameter 57307 [ 523.146938][T24824] netlink: 'syz.6.5252': attribute type 19 has an invalid length. [ 523.155384][T24823] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 523.174759][T24824] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5252'. [ 523.267692][T24829] tipc: Enabled bearer , priority 0 [ 523.275333][T24829] syzkaller0: entered promiscuous mode [ 523.289303][T24829] syzkaller0: entered allmulticast mode [ 523.414897][T24829] tipc: Resetting bearer [ 523.467505][T24830] tipc: Enabling of bearer rejected, failed to enable media [ 523.477747][T24837] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 523.486675][T24837] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 523.511993][T24830] tipc: Enabling of bearer rejected, failed to enable media [ 523.616250][T24830] tipc: Enabling of bearer rejected, failed to enable media [ 523.633977][T24847] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5260'. [ 523.919590][T24830] tipc: Enabling of bearer rejected, failed to enable media [ 524.130391][T24825] tipc: Resetting bearer [ 524.270734][T24825] tipc: Disabling bearer [ 524.702740][T24882] ip6t_srh: unknown srh match flags 5F28 [ 524.757642][T24886] dvmrp1: entered allmulticast mode [ 525.422792][T24916] sctp: [Deprecated]: syz.7.5277 (pid 24916) Use of struct sctp_assoc_value in delayed_ack socket option. [ 525.422792][T24916] Use struct sctp_sack_info instead [ 526.234309][T24954] netlink: 'syz.7.5287': attribute type 9 has an invalid length. [ 526.514590][T24958] vxcan2: entered allmulticast mode [ 526.606135][T24963] vxcan2: entered allmulticast mode [ 526.807198][T24980] C: left promiscuous mode [ 526.815910][T24980] tunl0: left promiscuous mode [ 526.831289][T24980] gre0: left promiscuous mode [ 526.845661][T24980] gretap0: left promiscuous mode [ 526.851066][T24980] erspan0: left promiscuous mode [ 526.856299][T24980] ip_vti0: left promiscuous mode [ 526.870996][T24980] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 526.949240][T24980] geneve3: left allmulticast mode [ 527.019773][T24980] vlan2: left promiscuous mode [ 527.028211][T24980] bond3: left promiscuous mode [ 527.038383][T24980] gretap1: left promiscuous mode [ 527.050600][T24980] vlan2: left allmulticast mode [ 527.055710][T24980] bond3: left allmulticast mode [ 527.060761][T24980] gretap1: left allmulticast mode [ 527.126418][T24980] gretap2: left promiscuous mode [ 527.139521][T24980] gretap2: left allmulticast mode [ 527.243887][T24980] veth1: left allmulticast mode [ 527.345429][T24980] veth5: left promiscuous mode [ 527.352623][T24980] gtp0: left promiscuous mode [ 527.357329][T24980] gtp0: left allmulticast mode [ 527.436893][T24980] bond7: left allmulticast mode [ 527.488613][T24980] bond8: left promiscuous mode [ 527.667290][T20146] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.680702][T20146] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 527.711978][ T4173] bridge_slave_1: left allmulticast mode [ 527.717890][ T4173] bridge_slave_1: left promiscuous mode [ 527.726377][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.737172][ T4173] bridge_slave_0: left allmulticast mode [ 527.764553][ T4173] bridge_slave_0: left promiscuous mode [ 527.775681][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.049569][T25019] netlink: 'syz.7.5300': attribute type 9 has an invalid length. [ 530.022535][ T4173] bond8 (unregistering): (slave gretap1): Releasing active interface [ 530.123284][ T4173] dvmrp1 (unregistering): left allmulticast mode [ 530.244476][ T4173] team0: Port device geneve0 removed [ 530.495078][ T4173] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 530.503516][ T4173] bridge5 (unregistering): left promiscuous mode [ 530.813376][ T4173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.841459][ T4173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.866308][ T4173] bond0 (unregistering): Released all slaves [ 530.884132][ T4173] bond1 (unregistering): Released all slaves [ 531.034334][ T4173] bond2 (unregistering): Released all slaves [ 531.055285][ T4173] bond3 (unregistering): Released all slaves [ 531.082103][ T4173] bond4 (unregistering): Released all slaves [ 531.122816][ T4173] bond5 (unregistering): Released all slaves [ 531.297814][ T4173] bond6 (unregistering): Released all slaves [ 531.323439][ T4173] bond7 (unregistering): Released all slaves [ 531.355765][ T4173] bond8 (unregistering): Released all slaves [ 531.407115][T20146] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.416733][T20146] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 531.458454][T20146] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.467362][T20146] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 531.494765][T20146] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.507336][T20146] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 531.627584][T25021] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 531.785798][T25026] bond0: (slave rose0): Error: Device can not be enslaved while up [ 532.225417][T25039] netlink: 'syz.6.5307': attribute type 4 has an invalid length. [ 532.760108][T25061] netlink: 'syz.8.5313': attribute type 11 has an invalid length. [ 533.131972][ T4173] tipc: Disabling bearer [ 533.152069][ T4173] tipc: Left network mode [ 533.224097][T25080] __nla_validate_parse: 13 callbacks suppressed [ 533.224116][T25080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5321'. [ 533.245359][T25086] xt_TPROXY: Can be used only with -p tcp or -p udp [ 533.259098][T25080] netlink: 2 bytes leftover after parsing attributes in process `syz.6.5321'. [ 533.388840][T25086] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5324'. [ 533.500228][T25086] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 533.572433][T25086] bond5 (unregistering): Released all slaves [ 534.081525][T25087] netlink: 'syz.5.5316': attribute type 1 has an invalid length. [ 534.312071][T25133] x_tables: duplicate underflow at hook 4 [ 535.000198][ T5830] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 535.000369][ T5833] Bluetooth: hci0: command 0x0c20 tx timeout [ 535.592701][T25179] syz.6.5345 (25179) used obsolete PPPIOCDETACH ioctl [ 535.779757][T25188] netlink: zone id is out of range [ 535.798901][T25188] netlink: zone id is out of range [ 535.804054][T25188] netlink: zone id is out of range [ 535.804639][T25190] netlink: zone id is out of range [ 535.814425][T25190] netlink: zone id is out of range [ 535.837179][T25190] netlink: zone id is out of range [ 535.860892][T25190] netlink: zone id is out of range [ 535.866043][T25190] netlink: zone id is out of range [ 535.869096][T25188] netlink: zone id is out of range [ 535.871976][T25190] netlink: zone id is out of range [ 536.024162][T25146] lo speed is unknown, defaulting to 1000 [ 536.265024][T25203] tipc: New replicast peer: 255.255.255.255 [ 536.268203][T25205] netlink: 'syz.6.5353': attribute type 1 has an invalid length. [ 536.296920][T25203] tipc: Enabled bearer , priority 10 [ 536.328617][T25205] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 536.460895][T25213] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20003 [ 536.479389][T25214] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20003 [ 536.528345][T25215] netlink: 'syz.2.5356': attribute type 1 has an invalid length. [ 536.537605][T25215] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5356'. [ 536.587766][ T4173] batadv0: left promiscuous mode [ 536.663961][ T4173] hsr_slave_0: left promiscuous mode [ 536.694635][ T4173] hsr_slave_1: left promiscuous mode [ 536.701374][ T4173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.718201][ T4173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.757003][ T4173] veth0_macvtap: left promiscuous mode [ 537.385581][ T4173] team0 (unregistering): Port device team_slave_1 removed [ 537.471600][ T4173] team0 (unregistering): Port device team_slave_0 removed [ 538.007831][T25224] tipc: Resetting bearer [ 538.160562][ T6840] lo speed is unknown, defaulting to 1000 [ 538.830033][ T4173] IPVS: stop unused estimator thread 0... [ 538.879035][T25259] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5370'. [ 540.186249][T25312] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5381'. [ 540.954291][T25334] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5388'. [ 540.960666][T25339] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5389'. [ 540.973700][T25334] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5388'. [ 541.258343][T25347] netlink: 'syz.6.5391': attribute type 33 has an invalid length. [ 541.266214][T25347] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5391'. [ 541.285227][T25348] netlink: 'syz.8.5393': attribute type 3 has an invalid length. [ 541.294351][T25348] netlink: 'syz.8.5393': attribute type 3 has an invalid length. [ 541.496113][T25358] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5397'. [ 541.579518][T25363] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5395'. [ 541.715405][T25370] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5395'. [ 541.890374][T25374] pim6reg: entered allmulticast mode [ 541.902479][T25377] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5396'. [ 542.183183][T25389] pim6reg: left allmulticast mode [ 542.745696][T25410] tipc: Enabled bearer , priority 0 [ 542.821803][T25412] syzkaller0: entered promiscuous mode [ 542.827309][T25412] syzkaller0: entered allmulticast mode [ 542.856707][T25416] netlink: 'syz.7.5414': attribute type 11 has an invalid length. [ 542.866729][T25416] netlink: 'syz.7.5414': attribute type 11 has an invalid length. [ 542.880647][T25409] tipc: Resetting bearer [ 542.937951][T25409] tipc: Disabling bearer [ 543.334583][T25438] net_ratelimit: 41 callbacks suppressed [ 543.334603][T25438] IPVS: rr: FWM 3 0x00000003 - no destination available [ 543.959868][T25477] __nla_validate_parse: 11 callbacks suppressed [ 543.959885][T25477] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5432'. [ 543.997624][T25477] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5432'. [ 544.017387][T25478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5430'. [ 544.042856][T25478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5430'. [ 544.121083][T25478] netlink: 'syz.2.5430': attribute type 11 has an invalid length. [ 544.260500][T20146] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.261441][ T5833] block nbd3: Receive control failed (result -32) [ 544.269027][T20146] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.269067][T20146] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.357389][T20146] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.484866][T25500] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5435'. [ 544.825234][T25521] netlink: 'syz.7.5441': attribute type 1 has an invalid length. [ 545.026428][T25521] 8021q: adding VLAN 0 to HW filter on device bond6 [ 545.105762][T25533] netlink: 'syz.8.5446': attribute type 8 has an invalid length. [ 545.145279][T25530] netlink: 'syz.6.5445': attribute type 1 has an invalid length. [ 545.195992][T25530] bond9: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 545.218536][T25530] bond9: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 545.246063][T25530] bond9: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 545.275178][T25525] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5444'. [ 545.791600][T25564] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5455'. [ 545.853811][T25564] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5455'. [ 545.863185][T25567] netlink: 'syz.8.5456': attribute type 21 has an invalid length. [ 545.890967][T25568] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5454'. [ 545.904702][T25569] netlink: 'syz.8.5456': attribute type 21 has an invalid length. [ 545.961907][T25568] syzkaller1: entered promiscuous mode [ 545.981693][T25568] syzkaller1: entered allmulticast mode [ 546.330683][T25548] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 546.336756][T25548] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 546.476190][T25548] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 546.509161][T25548] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 546.537560][T25548] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 546.544835][T25548] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 546.577244][T25548] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 546.588273][T25548] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 546.620566][T25548] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 546.626507][T25548] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 547.154885][T25618] openvswitch: netlink: Tunnel attr 20 out of range max 16 [ 547.181082][T25618] openvswitch: netlink: Tunnel attr 20 out of range max 16 [ 547.238023][T25626] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5477'. [ 547.812874][T25648] netlink: 'syz.7.5482': attribute type 1 has an invalid length. [ 547.895710][T25650] bond10: entered promiscuous mode [ 547.929614][T25650] bond10: entered allmulticast mode [ 547.937545][T25650] 8021q: adding VLAN 0 to HW filter on device bond10 [ 548.043158][T25636] syzkaller0: entered promiscuous mode [ 548.123854][T25636] syzkaller0: entered allmulticast mode [ 548.181247][T25655] 8021q: adding VLAN 0 to HW filter on device bond7 [ 548.694012][T25689] Cannot find add_set index 65532 as target [ 548.710301][T25691] openvswitch: netlink: Actions may not be safe on all matching packets [ 549.476673][T25715] netlink: 'syz.5.5499': attribute type 21 has an invalid length. [ 549.485701][T25715] __nla_validate_parse: 3 callbacks suppressed [ 549.485721][T25715] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5499'. [ 549.546981][T25715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5499'. [ 549.905077][T25734] netlink: 'syz.7.5505': attribute type 1 has an invalid length. [ 550.101695][T25742] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 550.557654][T25771] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5517'. [ 550.564083][T25773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5518'. [ 550.871374][T25784] bond11: entered allmulticast mode [ 550.891040][T25784] 8021q: adding VLAN 0 to HW filter on device bond11 [ 551.089859][T25802] netlink: 'syz.8.5524': attribute type 1 has an invalid length. [ 551.097935][T25801] netlink: 'syz.8.5524': attribute type 1 has an invalid length. [ 551.189315][T25801] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 551.224369][T25802] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 551.257575][T25809] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5526'. [ 551.280298][T25785] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5512'. [ 551.326060][T25811] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5525'. [ 551.454851][T20146] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 551.482706][T20146] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 551.492142][T20146] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 551.501251][T20146] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 551.520251][T25819] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5529'. [ 551.620973][T25823] netlink: 'syz.7.5531': attribute type 1 has an invalid length. [ 551.714918][T25823] 8021q: adding VLAN 0 to HW filter on device bond8 [ 551.746624][T25830] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5532'. [ 551.761910][T25833] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5531'. [ 551.991081][T25841] bond0: entered allmulticast mode [ 552.318004][T25854] xt_cgroup: invalid path, errno=-2 [ 552.334393][T25854] netlink: 'syz.2.5540': attribute type 1 has an invalid length. [ 552.404184][T25856] bond0: (slave rose0): Error: Device can not be enslaved while up [ 552.726710][T25859] veth5: entered promiscuous mode [ 552.742803][T25859] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 552.957545][T25876] xt_ecn: cannot match TCP bits for non-tcp packets [ 553.545077][T25905] netlink: 'syz.2.5557': attribute type 10 has an invalid length. [ 553.587214][T25905] veth1_macvtap: left promiscuous mode [ 553.615659][T25905] team0: Device veth1_macvtap failed to register rx_handler [ 553.778633][T25918] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 554.166223][T25935] dvmrp0: entered allmulticast mode [ 554.195780][T25926] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 554.608765][T25951] bond10: left promiscuous mode [ 554.613685][T25951] bond10: left allmulticast mode [ 554.662090][T25951] bond11: left allmulticast mode [ 554.733994][T25951] __nla_validate_parse: 36 callbacks suppressed [ 554.734014][T25951] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5572'. [ 554.750143][T25952] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 554.765140][T25951] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5572'. [ 554.803715][T25969] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5573'. [ 555.003540][T25976] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5574'. [ 555.746122][T26000] netlink: 100 bytes leftover after parsing attributes in process `syz.8.5582'. [ 556.152138][T26017] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5587'. [ 556.444019][T26032] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5591'. [ 556.604291][T26038] tipc: Resetting bearer [ 556.618875][T26044] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5592'. [ 556.645578][T26030] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5581'. [ 556.692423][T26030] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5581'. [ 556.789641][T26049] can: request_module (can-proto-0) failed. [ 556.803422][T26038] `: (slave bond_slave_0): Releasing backup interface [ 556.822070][T26038] `: (slave bond_slave_1): Releasing backup interface [ 556.833908][T26038] team0: Port device C removed [ 556.849066][T26038] team0: Port device team_slave_1 removed [ 556.855545][T26038] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 556.908684][ T6840] lo speed is unknown, defaulting to 1000 [ 556.914488][ T6840] syz2: Port: 1 Link DOWN [ 556.914876][T26044] batadv_slave_1: entered promiscuous mode [ 556.948324][T26044] batadv_slave_1: left promiscuous mode [ 557.003228][T26056] netlink: 'syz.8.5596': attribute type 14 has an invalid length. [ 557.032767][T26056] netlink: 'syz.8.5596': attribute type 13 has an invalid length. [ 557.251268][T26062] bond12: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 557.284380][T26062] bond12 (unregistering): Released all slaves [ 557.306510][T26065] x_tables: duplicate underflow at hook 1 [ 557.949261][T26078] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 558.047599][T26110] macvtap1: entered promiscuous mode [ 558.058873][T26110] vlan0: entered promiscuous mode [ 558.069848][T26110] macvtap1: entered allmulticast mode [ 558.098187][T26110] vlan0: entered allmulticast mode [ 558.109254][T26110] veth0_vlan: entered allmulticast mode [ 558.170884][T26118] macvtap2: entered promiscuous mode [ 558.176345][T26118] macvtap2: entered allmulticast mode [ 558.363492][T26109] tipc: New replicast peer: 255.255.255.255 [ 558.371071][T26109] tipc: Enabled bearer , priority 10 [ 558.429239][T26127] macvtap1: entered promiscuous mode [ 558.448960][T26127] macvtap1: entered allmulticast mode [ 558.832344][T26152] x_tables: duplicate underflow at hook 2 [ 558.843539][T26153] x_tables: duplicate underflow at hook 2 [ 558.871222][T26156] netlink: zone id is out of range [ 558.876378][T26156] netlink: zone id is out of range [ 559.362904][T26193] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20000 [ 559.382846][T26193] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20000 [ 559.695568][T26207] xt_TCPMSS: Only works on TCP SYN packets [ 559.835011][T26217] IPVS: set_ctl: invalid protocol: 4 100.1.1.2:20003 [ 560.083258][T26237] __nla_validate_parse: 6 callbacks suppressed [ 560.083277][T26237] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5644'. [ 560.133534][T26240] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5644'. [ 560.146958][T26239] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5645'. [ 560.795801][T26266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5652'. [ 560.922062][T26269] gre1: entered promiscuous mode [ 560.937313][T26269] gre1: entered allmulticast mode [ 561.072533][T26272] sctp: [Deprecated]: syz.5.5647 (pid 26272) Use of int in max_burst socket option. [ 561.072533][T26272] Use struct sctp_assoc_value instead [ 561.175143][T26272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.337397][T26272] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5647'. [ 561.383715][T26295] dvmrp0: entered allmulticast mode [ 561.477990][T26277] SET target dimension over the limit! [ 561.725648][T26313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5664'. [ 562.442178][T26346] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5674'. [ 562.874878][T26370] netlink: 'syz.8.5683': attribute type 11 has an invalid length. [ 562.932719][T26374] vxcan1: entered promiscuous mode [ 563.102366][T26383] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5688'. [ 563.136928][T20128] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.149224][T20128] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.177896][T20128] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.190561][T20128] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.233442][T26387] mac80211_hwsim hwsim57 syzkaller0: entered promiscuous mode [ 563.258571][T26387] mac80211_hwsim hwsim57 syzkaller0: entered allmulticast mode [ 563.561697][T26399] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 563.902800][T26405] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 564.021597][T26408] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5697'. [ 564.117337][T26410] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5698'. [ 564.249228][T26420] netlink: 'syz.7.5702': attribute type 3 has an invalid length. [ 565.111733][T26462] __nla_validate_parse: 3 callbacks suppressed [ 565.111751][T26462] netlink: 14436 bytes leftover after parsing attributes in process `syz.8.5714'. [ 565.141366][T26462] openvswitch: netlink: Key type 30 is not supported [ 565.400434][T26472] netlink: 7 bytes leftover after parsing attributes in process `syz.7.5717'. [ 565.429652][T26472] netlink: 7 bytes leftover after parsing attributes in process `syz.7.5717'. [ 565.474372][T26472] netlink: 7 bytes leftover after parsing attributes in process `syz.7.5717'. [ 565.529458][T26472] netlink: 7 bytes leftover after parsing attributes in process `syz.7.5717'. [ 565.627307][T26481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5719'. [ 565.731807][T26472] netlink: 7 bytes leftover after parsing attributes in process `syz.7.5717'. [ 565.743666][T26472] netlink: 7 bytes leftover after parsing attributes in process `syz.7.5717'. [ 565.753781][T26472] netlink: 7 bytes leftover after parsing attributes in process `syz.7.5717'. [ 565.778958][T26472] netlink: 7 bytes leftover after parsing attributes in process `syz.7.5717'. [ 566.486475][T26511] netlink: 'syz.2.5727': attribute type 10 has an invalid length. [ 566.518018][T26511] hsr0: mtu greater than device maximum [ 566.867056][T26527] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 566.920088][T26530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.127209][T26537] tipc: Trying to set illegal importance in message [ 567.323607][T26548] tipc: Bearer : already 2 bearers with priority 10 [ 567.341969][T26548] tipc: Bearer : trying with adjusted priority [ 567.359400][T26548] tipc: Enabling of bearer rejected, failed to enable media [ 567.513085][T26555] netlink: 'syz.7.5744': attribute type 10 has an invalid length. [ 567.543807][T26555] Bluetooth: hci0: invalid length 39, exp 2 for type 29 [ 567.666528][T26561] geneve2: entered promiscuous mode [ 567.689411][T26561] geneve2: entered allmulticast mode [ 567.714863][ T281] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.748681][ T281] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.767510][ T281] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.796032][ T281] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.524233][T26585] infiniband syz0: set down [ 568.529965][T26585] infiniband syz0: added ipvlan1 [ 568.576982][T26590] wg2: entered promiscuous mode [ 568.587514][T26590] wg2: entered allmulticast mode [ 568.630748][T26585] RDS/IB: syz0: added [ 568.634897][T26585] smc: adding ib device syz0 with port count 1 [ 568.654867][T26585] smc: ib device syz0 port 1 has no pnetid [ 569.922941][T26647] ksmbd: Unknown IPC event: 3, ignore. [ 569.999998][T26650] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 570.205146][ T30] audit: type=1107 audit(1760585849.361:4): pid=26656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 571.042292][T26678] __nla_validate_parse: 41 callbacks suppressed [ 571.042317][T26678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5782'. [ 571.058877][T26678] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5782'. [ 571.352313][T26692] netlink: 'syz.2.5787': attribute type 1 has an invalid length. [ 571.650856][T26700] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5789'. [ 571.669407][T26700] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5789'. [ 571.745415][T26705] netlink: 9 bytes leftover after parsing attributes in process `syz.7.5791'. [ 571.755805][T26704] netlink: 9 bytes leftover after parsing attributes in process `syz.7.5791'. [ 571.755876][T26705] gretap0: entered promiscuous mode [ 571.807361][T26705] netlink: 5 bytes leftover after parsing attributes in process `syz.7.5791'. [ 571.822609][T26705] 0ªî{X¹¦: renamed from gretap0 [ 571.867273][T26705] 0ªî{X¹¦: left promiscuous mode [ 571.873696][T26705] 0ªî{X¹¦: entered allmulticast mode [ 571.890025][T26705] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 571.953293][T26704] 0ªî{X¹¦: entered promiscuous mode [ 571.967084][T26714] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5794'. [ 571.978334][T26712] netlink: 'syz.2.5794': attribute type 1 has an invalid length. [ 571.986363][T26704] 0ªî{X¹¦: left allmulticast mode [ 572.039006][T26710] lo: entered promiscuous mode [ 572.046037][T26710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 572.104949][T26712] 8021q: adding VLAN 0 to HW filter on device bond5 [ 601.599503][T14349] Set syz1 is full, maxelem 65536 reached [ 602.046832][T20121] batadv2: left allmulticast mode [ 602.053010][T20121] batadv2: left promiscuous mode [ 602.058331][T20121] bridge0: port 2(batadv2) entered disabled state [ 602.066313][T20121] batadv1: left allmulticast mode [ 602.071420][T20121] batadv1: left promiscuous mode [ 602.076541][T20121] bridge0: port 1(batadv1) entered disabled state [ 602.086804][T20121] bond2: left allmulticast mode [ 602.092023][T20121] bond2: left promiscuous mode [ 602.096897][T20121] bridge2: port 2(bond2) entered disabled state [ 602.104811][T20121] gretap1: left allmulticast mode [ 602.110305][T20121] gretap1: left promiscuous mode [ 602.115364][T20121] bridge2: port 1(gretap1) entered disabled state [ 602.167129][T20121] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 602.689571][T20121] bond7 (unregistering): (slave bridge7): Releasing active interface [ 602.751910][T20121] bond0 (unregistering): Released all slaves [ 602.767843][T20121] bond1 (unregistering): Released all slaves [ 602.781718][T20121] bond2 (unregistering): Released all slaves [ 602.794495][T20121] bond3 (unregistering): Released all slaves [ 602.901806][T20121] bond4 (unregistering): Released all slaves [ 603.005077][T20121] bond5 (unregistering): Released all slaves [ 603.017497][T20121] bond6 (unregistering): Released all slaves [ 603.031516][T20121] bond7 (unregistering): Released all slaves [ 603.157245][T20121] : left promiscuous mode [ 603.249394][T20121] tipc: Disabling bearer [ 603.261709][T20121] tipc: Disabling bearer [ 603.267174][T20121] tipc: Left network mode [ 603.773916][T20121] hsr_slave_0: left promiscuous mode [ 603.782619][T20121] hsr_slave_1: left promiscuous mode [ 604.251668][T20121] wg0 (unregistering): left allmulticast mode [ 604.647591][T20121] IPVS: stop unused estimator thread 0... [ 629.592900][T20124] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.604393][T20124] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 629.678396][T20124] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.688856][T20124] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 629.742130][T20124] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.752494][T20124] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 629.816682][T20124] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.827213][T20124] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 629.907604][T20124] bridge_slave_1: left allmulticast mode [ 629.914815][T20124] bridge_slave_1: left promiscuous mode [ 629.921067][T20124] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.931032][T20124] bridge_slave_0: left allmulticast mode [ 629.936696][T20124] bridge_slave_0: left promiscuous mode [ 629.942576][T20124] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.104097][T20124] dvmrp0 (unregistering): left allmulticast mode [ 630.121231][T20124] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 630.342013][T20124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.352978][T20124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.363742][T20124] bond0 (unregistering): Released all slaves [ 630.376424][T20124] bond1 (unregistering): Released all slaves [ 630.464547][T20124] IPVS: stopping backup sync thread 17322 ... [ 630.809548][T20124] hsr_slave_0: left promiscuous mode [ 630.815942][T20124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.823392][T20124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.831247][T20124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.839186][T20124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.861944][T20124] veth1_macvtap: left promiscuous mode [ 630.867544][T20124] veth0_macvtap: left promiscuous mode [ 630.873208][T20124] veth1_vlan: left promiscuous mode [ 630.878828][T20124] veth0_vlan: left promiscuous mode [ 631.294927][T20124] team0 (unregistering): Port device team_slave_1 removed [ 631.332973][T20124] team0 (unregistering): Port device team_slave_0 removed [ 638.155355][T26731] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5798'. [ 638.228822][T26731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.428299][T26758] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5807'. [ 638.479365][T26763] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5808'. [ 638.646409][T26770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5811'. [ 638.750948][T26776] netlink: 'syz.6.5814': attribute type 1 has an invalid length. [ 638.826376][T26776] 8021q: adding VLAN 0 to HW filter on device bond13 [ 638.856980][T26787] sctp: [Deprecated]: syz.2.5818 (pid 26787) Use of int in max_burst socket option deprecated. [ 638.856980][T26787] Use struct sctp_assoc_value instead [ 638.916966][T26781] bond13: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 638.982734][T26781] bond13: entered allmulticast mode [ 639.330390][T26810] bond5: entered promiscuous mode [ 639.342017][T26810] bridge0: port 1(syz_tun) entered blocking state [ 639.349535][T26810] bridge0: port 1(syz_tun) entered disabled state [ 639.356160][T26810] syz_tun: entered allmulticast mode [ 639.365238][T26810] syz_tun: entered promiscuous mode [ 639.399903][T26810] netlink: 'syz.8.5824': attribute type 10 has an invalid length. [ 639.413243][T26810] bridge0: entered allmulticast mode [ 639.461813][T26814] rdma_rxe: rxe_newlink: failed to add syz_tun [ 639.500254][T26821] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5826'. [ 639.601576][T26824] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 639.763172][T26841] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5832'. [ 639.817631][T26844] xt_hashlimit: max too large, truncated to 1048576 [ 639.825594][T26839] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5833'. [ 639.838547][T26839] netlink: 43 bytes leftover after parsing attributes in process `syz.6.5833'. [ 639.842733][T26847] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5836'. [ 639.847508][T26839] netlink: 'syz.6.5833': attribute type 5 has an invalid length. [ 639.847527][T26839] netlink: 43 bytes leftover after parsing attributes in process `syz.6.5833'. [ 639.882863][T26839] tipc: MTU too low for tipc bearer [ 640.166933][T26864] netlink: 'syz.8.5841': attribute type 58 has an invalid length. [ 640.521402][T26882] netlink: 'syz.6.5845': attribute type 1 has an invalid length. [ 640.542599][T26882] netlink: 'syz.6.5845': attribute type 2 has an invalid length. [ 640.732759][T26888] pim6reg1: entered promiscuous mode [ 640.741720][T26888] pim6reg1: entered allmulticast mode [ 641.022936][T26911] tipc: Enabled bearer , priority 0 [ 641.031529][T26911] syzkaller0: entered promiscuous mode [ 641.037197][T26911] syzkaller0: entered allmulticast mode [ 641.077160][T26911] tipc: Resetting bearer [ 641.099441][T26910] tipc: Resetting bearer [ 641.161641][T26910] tipc: Disabling bearer [ 641.183174][T26917] netlink: 'syz.6.5857': attribute type 5 has an invalid length. [ 641.207225][T26917] geneve5: entered promiscuous mode [ 641.216754][T26917] geneve5: entered allmulticast mode [ 641.240633][T20129] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 641.249816][T20129] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 641.366751][T20129] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 641.386432][T20129] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 641.552939][T26944] netlink: 'syz.8.5866': attribute type 83 has an invalid length. [ 641.577200][T26951] syzkaller1: entered promiscuous mode [ 641.582836][T26951] syzkaller1: entered allmulticast mode [ 641.590916][T26951] syzkaller1: left promiscuous mode [ 641.596153][T26951] syzkaller1: left allmulticast mode [ 641.632667][T26954] netlink: 'syz.7.5868': attribute type 4 has an invalid length. [ 642.064765][T26983] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 642.089378][T26988] netlink: 'syz.2.5876': attribute type 1 has an invalid length. [ 642.290979][T27004] netlink: 'syz.2.5880': attribute type 11 has an invalid length. [ 642.570739][T27013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 642.892975][T27026] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 642.936482][T27018] delete_channel: no stack [ 642.960676][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 642.974024][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 642.975131][T27026] nbd: must specify a device to reconfigure [ 643.011928][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 643.028725][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 643.050722][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 643.074029][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 643.100788][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 643.109870][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 643.118744][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 643.127236][T17724] syz_tun (unregistering): left allmulticast mode [ 643.138327][T17724] syz_tun (unregistering): left promiscuous mode [ 643.144956][T17724] bridge0: port 1(syz_tun) entered disabled state [ 643.178388][T27038] __nla_validate_parse: 11 callbacks suppressed [ 643.178409][T27038] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5887'. [ 643.194169][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 643.296176][T27043] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5892'. [ 643.504490][T27051] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5897'. [ 643.685149][T27028] lo speed is unknown, defaulting to 1000 [ 643.733738][T27056] tipc: Bearer : already 2 bearers with priority 10 [ 643.741172][T27056] tipc: Bearer : trying with adjusted priority [ 643.748227][T27056] tipc: Enabling not permitted [ 643.753829][T27056] tipc: Enabling of bearer rejected, failed to enable media [ 643.810416][T27060] validate_nla: 2 callbacks suppressed [ 643.810434][T27060] netlink: 'syz.6.5901': attribute type 3 has an invalid length. [ 643.834624][T27060] netlink: 'syz.6.5901': attribute type 3 has an invalid length. [ 643.956327][T27065] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 644.256149][T27074] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 644.256382][T27078] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5905'. [ 644.262900][T27080] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 644.285797][T27028] chnl_net:caif_netlink_parms(): no params data found [ 644.394427][T27090] netlink: 'syz.5.5908': attribute type 3 has an invalid length. [ 644.447857][T27090] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5908'. [ 644.458575][T27095] netlink: 260 bytes leftover after parsing attributes in process `syz.7.5910'. [ 644.589965][T27028] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.597213][T27028] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.626794][T27028] bridge_slave_0: entered allmulticast mode [ 644.648308][T27028] bridge_slave_0: entered promiscuous mode [ 644.688451][T27028] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.695686][T27028] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.706866][T27028] bridge_slave_1: entered allmulticast mode [ 644.714962][T27028] bridge_slave_1: entered promiscuous mode [ 644.852506][T27028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.867775][T27028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.869776][T27127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5916'. [ 644.917392][T27028] team0: Port device team_slave_0 added [ 644.928990][T27028] team0: Port device team_slave_1 added [ 644.935349][T27127] netlink: zone id is out of range [ 644.943266][T27127] netlink: zone id is out of range [ 644.955788][T27127] netlink: zone id is out of range [ 644.986175][T27028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.993470][T27028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.019558][T27028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.032600][T27028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.039684][T27028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.066978][T27028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.142556][T27028] hsr_slave_0: entered promiscuous mode [ 645.150972][T27028] hsr_slave_1: entered promiscuous mode [ 645.157682][T27028] debugfs: 'hsr0' already exists in 'hsr' [ 645.165403][T27028] Cannot create hsr debugfs directory [ 645.239030][ T5830] Bluetooth: hci1: command tx timeout [ 645.368720][T27028] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.379844][T27028] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.455893][T27028] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.466072][T27028] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.542171][T27028] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.552114][T27028] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.612798][T27028] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.623284][T27028] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.833467][T27151] netlink: 1260 bytes leftover after parsing attributes in process `syz.7.5925'. [ 645.942806][T27158] netlink: 'syz.6.5928': attribute type 12 has an invalid length. [ 645.961534][T27028] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 645.997524][T27028] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 646.030588][T27028] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 646.115540][T27028] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 646.178909][T27180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5933'. [ 646.236869][T27183] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 646.362641][T27028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.393218][T27028] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.412458][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.419678][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.431400][T27191] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5936'. [ 646.450824][T20124] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.458102][T20124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.593047][T27028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 646.914350][T27028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.320691][ T5830] Bluetooth: hci1: command tx timeout [ 647.616252][T27028] veth0_vlan: entered promiscuous mode [ 647.657914][T27028] veth1_vlan: entered promiscuous mode [ 647.742619][T27028] veth0_macvtap: entered promiscuous mode [ 647.772144][T27028] veth1_macvtap: entered promiscuous mode [ 647.814916][T27028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.841904][T27028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.842150][T27248] sctp: [Deprecated]: syz.6.5951 (pid 27248) Use of int in max_burst socket option. [ 647.842150][T27248] Use struct sctp_assoc_value instead [ 647.897060][T20128] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.916709][T20128] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.947727][T20128] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.993550][T20128] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.036623][T27249] sctp: [Deprecated]: syz.6.5951 (pid 27249) Use of int in max_burst socket option. [ 648.036623][T27249] Use struct sctp_assoc_value instead [ 648.093071][ T4173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.111203][ T4173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.201543][T20128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.219497][T20128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.465739][T27263] netlink: 'syz.6.5954': attribute type 1 has an invalid length. [ 648.566588][T27263] bond14: entered promiscuous mode [ 648.593015][T27263] 8021q: adding VLAN 0 to HW filter on device bond14 [ 648.644953][T27265] bond14: (slave bridge6): making interface the new active one [ 648.652874][T27265] bridge6: entered promiscuous mode [ 648.659225][T27265] bond14: (slave bridge6): Enslaving as an active interface with an up link [ 648.704309][T27270] __nla_validate_parse: 4 callbacks suppressed [ 648.704326][T27270] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5955'. [ 648.721452][ T4173] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20002 - 0 [ 648.736985][ T4173] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20002 - 0 [ 648.842510][T27270] macvtap2: entered promiscuous mode [ 648.854840][T27270] macvtap2: entered allmulticast mode [ 648.860963][T27286] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5959'. [ 648.871857][ T4173] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20002 - 0 [ 648.891283][ T4173] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20002 - 0 [ 649.066158][T27290] IPVS: Error connecting to the multicast addr [ 649.330245][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 649.342481][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 649.361727][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 649.372183][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 649.383342][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 649.399705][ T5833] Bluetooth: hci1: command tx timeout [ 649.465703][T27307] xt_TCPMSS: Only works on TCP SYN packets [ 649.707918][T27317] netlink: 108 bytes leftover after parsing attributes in process `syz.5.5965'. [ 649.765890][T27302] lo speed is unknown, defaulting to 1000 [ 650.226192][T27345] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 650.319050][T27345] xt_cgroup: invalid path, errno=-2 [ 650.479070][T27356] netlink: 1196 bytes leftover after parsing attributes in process `syz.8.5982'. [ 650.527879][T27302] chnl_net:caif_netlink_parms(): no params data found [ 650.538412][T27352] nbd4: detected capacity change from 0 to 127 [ 650.546228][ T5830] block nbd4: Receive control failed (result -32) [ 650.608004][T27356] netlink: 'syz.8.5982': attribute type 2 has an invalid length. [ 650.625353][T27365] x_tables: unsorted underflow at hook 2 [ 650.631295][T27356] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5982'. [ 650.774176][T27373] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5987'. [ 650.831577][T27302] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.859671][T27302] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.867155][T27302] bridge_slave_0: entered allmulticast mode [ 650.878451][T27302] bridge_slave_0: entered promiscuous mode [ 650.907707][T27302] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.915257][T27302] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.933170][T27302] bridge_slave_1: entered allmulticast mode [ 650.950047][T27302] bridge_slave_1: entered promiscuous mode [ 651.015242][T27302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.035103][T27385] pim6reg1: entered promiscuous mode [ 651.044246][T27385] pim6reg1: entered allmulticast mode [ 651.065340][T27385] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5991'. [ 651.066594][T27392] netlink: 'syz.6.5994': attribute type 19 has an invalid length. [ 651.085460][T27302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.231743][T27302] team0: Port device team_slave_0 added [ 651.235746][T27398] netlink: 'syz.8.5997': attribute type 13 has an invalid length. [ 651.255983][T27398] veth0_macvtap: left promiscuous mode [ 651.266274][T27398] macvtap0: entered allmulticast mode [ 651.282889][T27398] macvtap0: refused to change device tx_queue_len [ 651.294056][T27302] team0: Port device team_slave_1 added [ 651.380557][T27302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.398294][ T5830] Bluetooth: hci2: command tx timeout [ 651.399290][T27302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.442222][T27302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.455642][T27404] tipc: Enabled bearer , priority 0 [ 651.478383][ T5830] Bluetooth: hci1: command tx timeout [ 651.478963][T27404] tipc: Resetting bearer [ 651.499937][T27302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.506928][T27302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.527734][T27412] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 651.533733][T27302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.667841][T27302] hsr_slave_0: entered promiscuous mode [ 651.675819][T27302] hsr_slave_1: entered promiscuous mode [ 651.690223][T27302] debugfs: 'hsr0' already exists in 'hsr' [ 651.696094][T27302] Cannot create hsr debugfs directory [ 651.738476][T27417] sch_fq: defrate 0 ignored. [ 652.091840][T27444] IPVS: Unknown mcast interface: netpci0 [ 652.208754][T27302] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.365713][T27302] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.390825][T27458] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6011'. [ 652.529368][T27302] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.590207][T27302] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.609315][T27473] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6013'. [ 652.619281][T27463] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6013'. [ 652.630182][T27458] syzkaller1: entered promiscuous mode [ 652.635739][T27458] syzkaller1: entered allmulticast mode [ 652.654071][T27472] macvlan0: entered promiscuous mode [ 652.663826][T27472] batadv0: entered promiscuous mode [ 652.672366][T27472] hsr1: entered allmulticast mode [ 652.677500][T27472] macvlan0: entered allmulticast mode [ 652.697727][T27472] veth1_vlan: entered allmulticast mode [ 652.703562][T27472] batadv0: entered allmulticast mode [ 652.713373][T27472] macvlan0: left promiscuous mode [ 652.721061][T27472] batadv0: left promiscuous mode [ 652.946281][T27302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 652.960807][T27302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 652.972115][T27302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 652.988413][T27302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 653.116831][T27302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.155339][T27302] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.166831][T27457] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 653.251603][T20129] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.258813][T20129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.274439][T20128] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.281702][T20128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.485038][ T5830] Bluetooth: hci2: command tx timeout [ 653.576219][T27533] syzkaller1: entered promiscuous mode [ 653.584200][T27533] syzkaller1: entered allmulticast mode [ 653.686947][T27302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.767254][T27539] tap0: tun_chr_ioctl cmd 1074025676 [ 653.773155][T27539] tap0: owner set to 0 [ 653.786058][T27302] veth0_vlan: entered promiscuous mode [ 653.808915][T27541] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20001 [ 653.813240][T27302] veth1_vlan: entered promiscuous mode [ 653.816281][T27541] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 653.863387][T27302] veth0_macvtap: entered promiscuous mode [ 653.877165][T27302] veth1_macvtap: entered promiscuous mode [ 653.923578][T27302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.947382][T27302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.974449][T20124] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.992257][T20124] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.002848][T20124] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.022810][T20124] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.096871][T27553] Cannot find add_set index 0 as target [ 654.124607][T27553] __nla_validate_parse: 2 callbacks suppressed [ 654.124625][T27553] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6035'. [ 654.143630][T20129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.152686][T20129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.197381][T20124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.209780][T20124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.298396][T27558] pim6reg: entered allmulticast mode [ 654.306361][T27558] pim6reg: left allmulticast mode [ 654.589776][T27582] : renamed from bridge_slave_0 (while UP) [ 654.666200][T27585] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6045'. [ 654.755626][T27595] netlink: 'syz.2.6047': attribute type 75 has an invalid length. [ 654.778727][T27594] netlink: 'syz.5.6049': attribute type 83 has an invalid length. [ 654.804417][T27597] blkio.reset_stats is deprecated [ 655.300124][T27607] bond10: Unable to set up delay as MII monitoring is disabled [ 655.311429][T27607] bond10 (unregistering): Released all slaves [ 655.330505][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 655.341059][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 655.356081][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 655.374913][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 655.389470][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 655.399593][T27610] netlink: 'syz.7.6053': attribute type 29 has an invalid length. [ 655.408888][T27614] netlink: 'syz.7.6053': attribute type 29 has an invalid length. [ 655.453640][T27610] netlink: 500 bytes leftover after parsing attributes in process `syz.7.6053'. [ 655.558264][ T52] Bluetooth: hci2: command tx timeout [ 656.064028][T27636] syzkaller0: entered promiscuous mode [ 656.079185][T27636] syzkaller0: entered allmulticast mode [ 656.091744][T27612] lo speed is unknown, defaulting to 1000 [ 656.099975][T27642] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6062'. [ 656.110901][T27642] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6062'. [ 656.210258][T27646] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6063'. [ 656.241796][T27646] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 656.528490][T27658] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6068'. [ 656.549787][T27659] netlink: 'syz.7.6067': attribute type 3 has an invalid length. [ 656.576417][T27655] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6064'. [ 656.645070][T27665] atomic_op ffff88808212a198 conn xmit_atomic 0000000000000000 [ 656.841050][T27612] chnl_net:caif_netlink_parms(): no params data found [ 656.904319][T27676] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6072'. [ 657.154103][T27694] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6076'. [ 657.351008][T27694] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 657.371003][T27694] bond7 (unregistering): Released all slaves [ 657.423341][T27612] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.449570][T27612] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.460095][T27612] bridge_slave_0: entered allmulticast mode [ 657.469850][T27727] netlink: 'syz.7.6084': attribute type 10 has an invalid length. [ 657.470264][T27612] bridge_slave_0: entered promiscuous mode [ 657.486611][T27612] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.494350][ T52] Bluetooth: hci0: command tx timeout [ 657.501004][T27612] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.508630][T27612] bridge_slave_1: entered allmulticast mode [ 657.516516][T27612] bridge_slave_1: entered promiscuous mode [ 657.525426][T27724] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 657.544023][T27727] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 657.596755][T27612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.622122][T27612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.638244][ T52] Bluetooth: hci2: command tx timeout [ 657.673753][T27612] team0: Port device team_slave_0 added [ 657.691546][T27612] team0: Port device team_slave_1 added [ 657.783558][T27612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.793992][T27612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.826251][T27612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.864704][T27612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.874988][T27612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.901958][T27612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.915196][T27744] syzkaller0: entered promiscuous mode [ 657.920883][T27744] syzkaller0: entered allmulticast mode [ 657.934374][T27744] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 657.941649][T27744] IPv6: NLM_F_CREATE should be set when creating new route [ 658.056727][T27612] hsr_slave_0: entered promiscuous mode [ 658.065989][T27612] hsr_slave_1: entered promiscuous mode [ 658.073533][T27612] debugfs: 'hsr0' already exists in 'hsr' [ 658.079435][T27612] Cannot create hsr debugfs directory [ 658.129254][T27747] netlink: 'syz.2.6088': attribute type 3 has an invalid length. [ 658.385396][T27753] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 658.397532][T27752] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 658.417102][T27760] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 658.509599][T27612] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 658.643055][T27612] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 658.781211][T27612] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 658.867120][T27782] 8021q: adding VLAN 0 to HW filter on device bond1 [ 658.927425][T27612] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 659.156008][T27815] netlink: 'syz.7.6109': attribute type 1 has an invalid length. [ 659.178557][T27811] sctp: [Deprecated]: syz.2.6108 (pid 27811) Use of struct sctp_assoc_value in delayed_ack socket option. [ 659.178557][T27811] Use struct sctp_sack_info instead [ 659.217480][T27818] __nla_validate_parse: 4 callbacks suppressed [ 659.217499][T27818] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6107'. [ 659.289719][T27818] bridge_slave_1: left allmulticast mode [ 659.303576][T27818] bridge_slave_1: left promiscuous mode [ 659.318860][T27818] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.342253][T27818] bridge_slave_0: left allmulticast mode [ 659.353500][T27818] bridge_slave_0: left promiscuous mode [ 659.366931][T27818] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.530616][T27612] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 659.548545][T27612] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 659.561034][ T52] Bluetooth: hci0: command tx timeout [ 659.561713][T27612] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 659.583176][T27612] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 659.601622][T27828] netlink: 'syz.7.6112': attribute type 3 has an invalid length. [ 659.701542][T27612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.724267][T27612] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.742026][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.749265][ T4173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.789846][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.797064][ T4173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.360656][T27854] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6119'. [ 660.385939][T27856] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 660.416139][T27612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.479369][T27858] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6121'. [ 660.536811][T27866] delete_channel: no stack [ 660.580531][T27866] netlink: 'syz.8.6123': attribute type 2 has an invalid length. [ 660.726171][T27875] mac80211_hwsim hwsim79 ÿ: renamed from wlan1 (while UP) [ 661.333049][T27900] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6135'. [ 661.544248][T27886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.571670][T27886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.651310][ T52] Bluetooth: hci0: command tx timeout [ 661.726549][T27886] veth1_vlan: left allmulticast mode [ 661.857171][T27900] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6135'. [ 661.868334][T27900] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6135'. [ 661.888704][ T4173] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.914260][T27900] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6135'. [ 661.915469][ T4173] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.954761][T27900] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6135'. [ 661.959000][ T4173] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.988100][ T4173] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.002474][T27900] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6135'. [ 662.031499][T27900] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6135'. [ 662.037626][T27612] veth0_vlan: entered promiscuous mode [ 662.081760][T27612] veth1_vlan: entered promiscuous mode [ 662.281738][T27612] veth0_macvtap: entered promiscuous mode [ 662.338631][T27612] veth1_macvtap: entered promiscuous mode [ 662.373046][T27612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.393403][T27612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.452176][ T4173] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.465481][ T4173] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.520493][ T4173] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.571050][ T4173] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.723417][ T4173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.739228][ T4173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.803134][T20129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.824148][T20129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.326984][T27965] netlink: 'syz.6.6155': attribute type 1 has an invalid length. [ 663.721751][ T52] Bluetooth: hci0: command tx timeout [ 663.993646][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 664.007275][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 664.017508][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 664.033827][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 664.042431][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 664.323365][T27999] lo speed is unknown, defaulting to 1000 [ 664.575890][T28024] tipc: Started in network mode [ 664.593186][T28024] tipc: Node identity 222062a3b1d9, cluster identity 4711 [ 664.604157][T28024] tipc: Enabled bearer , priority 0 [ 664.624583][T28024] syzkaller0: entered promiscuous mode [ 664.631541][T28024] syzkaller0: entered allmulticast mode [ 664.692636][T28021] tipc: Resetting bearer [ 664.712282][T28021] tipc: Disabling bearer [ 664.880783][T28029] __nla_validate_parse: 60 callbacks suppressed [ 664.880810][T28029] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6174'. [ 664.972404][T28029] block nbd5: Unsupported socket: should be TCP or UNIX. [ 665.015884][T27999] chnl_net:caif_netlink_parms(): no params data found [ 665.096623][T28039] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6179'. [ 665.132893][T28039] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6179'. [ 665.237462][T28039] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6179'. [ 665.322544][T27999] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.323495][T28062] nbd: socks must be embedded in a SOCK_ITEM attr [ 665.331187][T27999] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.345273][T27999] bridge_slave_0: entered allmulticast mode [ 665.355168][T27999] bridge_slave_0: entered promiscuous mode [ 665.364446][T27999] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.374069][T27999] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.381563][T27999] bridge_slave_1: entered allmulticast mode [ 665.391229][T27999] bridge_slave_1: entered promiscuous mode [ 665.477403][T28067] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 665.505327][T27999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.515028][T28067] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6185'. [ 665.544115][T28069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6184'. [ 665.579206][T27999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.663745][T27999] team0: Port device team_slave_0 added [ 665.676076][T27999] team0: Port device team_slave_1 added [ 665.732778][T27999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.740286][T27999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.760789][T28077] siw: device registration error -23 [ 665.797967][T27999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.833332][T27999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.840565][T27999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.867676][T27999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.000072][T27999] hsr_slave_0: entered promiscuous mode [ 666.010375][T27999] hsr_slave_1: entered promiscuous mode [ 666.017177][T27999] debugfs: 'hsr0' already exists in 'hsr' [ 666.025149][T27999] Cannot create hsr debugfs directory [ 666.066061][T28084] bond1: entered allmulticast mode [ 666.074055][T28084] 8021q: adding VLAN 0 to HW filter on device bond1 [ 666.120838][ T52] Bluetooth: hci3: command tx timeout [ 666.246413][T28104] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6194'. [ 666.471828][T27999] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.495422][T27999] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 666.547157][T28116] dvmrp0: entered allmulticast mode [ 666.583056][T27999] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.596141][T28115] netlink: 240 bytes leftover after parsing attributes in process `syz.6.6199'. [ 666.609800][T27999] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 666.643841][T28115] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6199'. [ 666.653151][T28115] tipc: Invalid UDP bearer configuration [ 666.653207][T28115] tipc: Enabling of bearer rejected, failed to enable media [ 666.671209][T28124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 666.743274][T27999] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.754087][T28127] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6201'. [ 666.763866][T27999] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 666.816383][T28127] bond2 (unregistering): Released all slaves [ 666.891772][T28131] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 666.906804][T28131] bond1 (unregistering): Released all slaves [ 667.024727][T27999] bond0: (slave netdevsim0): Releasing backup interface [ 667.041845][T27999] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.060606][T27999] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 667.131262][T28149] Cannot find set identified by id 1 to match [ 667.280580][T27999] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 667.296509][T27999] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 667.316211][T27999] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 667.339445][T27999] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 667.462278][T28163] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 667.472405][T28163] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 667.484147][T28163] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 667.678602][T27999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.703963][T27999] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.725322][T20129] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.732553][T20129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.774202][T20121] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.781418][T20121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.029119][T28179] sctp: [Deprecated]: syz.5.6213 (pid 28179) Use of int in max_burst socket option. [ 668.029119][T28179] Use struct sctp_assoc_value instead [ 668.076153][T28203] netlink: 'syz.2.6220': attribute type 1 has an invalid length. [ 668.201235][ T52] Bluetooth: hci3: command tx timeout [ 668.250469][T27999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.621794][T28228] sctp: [Deprecated]: syz.8.6227 (pid 28228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 668.621794][T28228] Use struct sctp_sack_info instead [ 668.696741][T27999] veth0_vlan: entered promiscuous mode [ 668.722755][T27999] veth1_vlan: entered promiscuous mode [ 668.792964][T28232] tipc: Enabled bearer , priority 0 [ 668.804949][T27999] veth0_macvtap: entered promiscuous mode [ 668.817765][T27999] veth1_macvtap: entered promiscuous mode [ 668.820311][T28234] netlink: 'syz.2.6231': attribute type 1 has an invalid length. [ 668.835963][T28232] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 668.844326][T28232] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 668.856112][T28235] delete_channel: no stack [ 668.872889][T28234] bond2: entered promiscuous mode [ 668.878393][T28234] 8021q: adding VLAN 0 to HW filter on device bond2 [ 668.919909][T27999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.931987][T28238] tipc: Resetting bearer [ 668.947494][T27999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.972993][ T281] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.993204][ T281] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.014808][ T281] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.027566][ T281] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.172742][T28248] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 669.195711][T20124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.212519][T20124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.266277][T20129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.285260][T20129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.622672][T28282] netlink: 'syz.6.6241': attribute type 1 has an invalid length. [ 669.721334][T28287] sctp: [Deprecated]: syz.7.6245 (pid 28287) Use of int in max_burst socket option. [ 669.721334][T28287] Use struct sctp_assoc_value instead [ 669.840090][T28295] netlink: 'syz.7.6246': attribute type 2 has an invalid length. [ 669.917712][T28283] veth3: entered promiscuous mode [ 669.919660][T28296] __nla_validate_parse: 11 callbacks suppressed [ 669.919677][T28296] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6244'. [ 670.007655][T28299] netlink: 236 bytes leftover after parsing attributes in process `syz.5.6244'. [ 670.074072][T28282] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 670.283984][ T52] Bluetooth: hci3: command tx timeout [ 670.566895][T28312] net veth1_virt_wifi .: renamed from virt_wifi0 [ 670.760636][T28322] xt_CT: You must specify a L4 protocol and not use inversions on it [ 670.989064][T27491] IPVS: starting estimator thread 0... [ 671.009472][T28335] syzkaller0: entered promiscuous mode [ 671.015040][T28335] syzkaller0: entered allmulticast mode [ 671.088417][T28340] IPVS: using max 34 ests per chain, 81600 per kthread [ 671.189213][T28350] netlink: 'syz.8.6262': attribute type 24 has an invalid length. [ 671.263485][T28353] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6265'. [ 671.467093][T28360] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6268'. [ 671.486935][T28360] netlink: 'syz.6.6268': attribute type 1 has an invalid length. [ 671.491930][T28365] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6267'. [ 671.494880][T28360] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6268'. [ 671.522447][T28366] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6267'. [ 671.552061][T28366] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6267'. [ 671.574297][T28365] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6267'. [ 671.875002][T28381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6273'. [ 671.892564][T28381] geneve2: entered promiscuous mode [ 671.898201][T28381] geneve2: entered allmulticast mode [ 671.953952][T28386] Bluetooth: MGMT ver 1.23 [ 671.980881][T28386] : renamed from hsr0 (while UP) [ 672.150159][T28395] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 672.182694][T28395] netlink: 'syz.7.6280': attribute type 2 has an invalid length. [ 672.194736][T28398] netlink: 'syz.7.6280': attribute type 2 has an invalid length. [ 672.240400][T28403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 672.361665][T28412] netlink: 'syz.2.6283': attribute type 6 has an invalid length. [ 672.368070][ T52] Bluetooth: hci3: command tx timeout [ 673.324608][ T281] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.348309][ T281] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.361361][ T281] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.379244][ T281] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.464713][T28477] smc: net device geneve0 applied user defined pnetid SYZ0 [ 673.473292][T28477] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 673.499426][T28477] netlink: 'syz.7.6305': attribute type 1 has an invalid length. [ 673.532139][T28482] mac80211_hwsim hwsim78 wlan0: entered promiscuous mode [ 673.608857][T28486] veth3: entered promiscuous mode [ 673.692299][T28493] Cannot find add_set index 1 as target [ 674.928921][T28581] __nla_validate_parse: 13 callbacks suppressed [ 674.928940][T28581] netlink: 244 bytes leftover after parsing attributes in process `syz.8.6334'. [ 674.997758][T28583] dvmrp1: entered allmulticast mode [ 675.263703][T28603] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6344'. [ 675.410956][T28613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6348'. [ 675.447358][T28613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6348'. [ 675.476694][T28617] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6350'. [ 675.509417][T28617] macvlan0: entered promiscuous mode [ 675.527831][T28617] batadv0: entered promiscuous mode [ 675.548143][T28617] hsr1: entered allmulticast mode [ 675.558661][T28617] macvlan0: entered allmulticast mode [ 675.564148][T28617] veth1_vlan: entered allmulticast mode [ 675.581746][T28617] batadv0: entered allmulticast mode [ 675.596321][T28617] macvlan0: left promiscuous mode [ 675.603598][T28617] batadv0: left promiscuous mode [ 675.746238][T28632] netlink: 'syz.7.6356': attribute type 75 has an invalid length. [ 675.766705][T28633] 8021q: VLANs not supported on lo [ 675.829805][T28633] bond3: Unable to set up delay as MII monitoring is disabled [ 675.839896][T28633] bond3 (unregistering): Released all slaves [ 676.189282][T28664] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6364'. [ 676.455735][T28677] pim6reg1: entered promiscuous mode [ 676.461245][T28677] pim6reg1: entered allmulticast mode [ 676.834916][T28701] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6371'. [ 676.967881][T28708] openvswitch: netlink: Message has 4 unknown bytes. [ 677.164737][T28711] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 677.348454][T28734] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6382'. [ 677.560986][T28748] netlink: 'syz.6.6388': attribute type 1 has an invalid length. [ 677.604951][T28750] netlink: 'syz.8.6389': attribute type 5 has an invalid length. [ 677.634343][T28748] bond1: (slave gretap1): making interface the new active one [ 677.643716][T28748] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 677.654389][T28748] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6388'. [ 677.700717][T28748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 677.929403][T28774] netlink: 'syz.2.6394': attribute type 3 has an invalid length. [ 678.196908][T28755] lo speed is unknown, defaulting to 1000 [ 678.529340][T28796] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6401'. [ 678.833551][T28812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 679.499711][T28843] SET target dimension over the limit! [ 679.523292][T28845] SET target dimension over the limit! [ 679.733775][T28847] netlink: 'syz.5.6419': attribute type 3 has an invalid length. [ 679.746118][T28857] netlink: 'syz.7.6421': attribute type 6 has an invalid length. [ 679.757280][T28857] netlink: 'syz.7.6421': attribute type 1 has an invalid length. [ 679.968702][T28865] bond2 (unregistering): Released all slaves [ 679.995144][T28869] __nla_validate_parse: 9 callbacks suppressed [ 679.995164][T28869] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6427'. [ 680.015371][T28863] netlink: 72 bytes leftover after parsing attributes in process `syz.8.6424'. [ 680.134486][T28880] netlink: 'syz.8.6430': attribute type 1 has an invalid length. [ 680.140925][T28879] tc_dump_action: action bad kind [ 680.166566][T28883] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6431'. [ 680.179639][T28880] netlink: 232 bytes leftover after parsing attributes in process `syz.8.6430'. [ 680.190062][T28880] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6430'. [ 680.198940][T28883] xt_policy: neither incoming nor outgoing policy selected [ 680.236378][T28879] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6429'. [ 680.345509][T28892] netlink: 'syz.8.6435': attribute type 24 has an invalid length. [ 680.517522][T28908] netlink: 'syz.6.6440': attribute type 1 has an invalid length. [ 680.561241][T28908] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6440'. [ 680.574296][T28908] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6440'. [ 680.635575][T28913] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6441'. [ 680.647290][T28915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.771013][T28922] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 680.782879][T28924] Only authenc() type AEADs are supported by ESSIV [ 680.931730][T20129] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 681.114481][T20129] dvmrp0 (unregistering): left allmulticast mode [ 681.817244][T20129] bond0 (unregistering): Released all slaves [ 681.930413][T20129] bond1 (unregistering): Released all slaves [ 681.943592][T20129] bond2 (unregistering): Released all slaves [ 681.956459][T20129] bond3 (unregistering): Released all slaves [ 681.972040][T20129] bond4 (unregistering): Released all slaves [ 681.991079][T20129] bond5 (unregistering): Released all slaves [ 682.005156][T20129] bond6 (unregistering): Released all slaves [ 682.036224][T28943] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.044002][T28943] bridge0: port 1() entered disabled state [ 682.087527][T28945] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6448'. [ 682.268480][T28954] syzkaller0: entered promiscuous mode [ 682.288340][T28954] syzkaller0: entered allmulticast mode [ 682.326237][T20129] tipc: Disabling bearer [ 682.353180][T20129] tipc: Left network mode [ 682.634899][T28975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 683.459018][T29001] Bluetooth: hci0: invalid len left 70, exp >= 222 [ 683.502126][T29001] netlink: zone id is out of range [ 683.509102][T29001] netlink: zone id is out of range [ 683.514363][T29001] netlink: zone id is out of range [ 683.520045][T29001] netlink: zone id is out of range [ 683.538134][T29001] netlink: zone id is out of range [ 683.566043][T29001] netlink: zone id is out of range [ 683.584983][T29001] netlink: zone id is out of range [ 683.597832][T29015] x_tables: duplicate underflow at hook 1 [ 683.601156][T29006] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 683.665514][T29006] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 684.106457][T20129] hsr_slave_0: left promiscuous mode [ 684.136093][T20129] hsr_slave_1: left promiscuous mode [ 684.229580][T20129] pimreg (unregistering): left allmulticast mode [ 684.255965][T29051] netlink: 'syz.2.6480': attribute type 1 has an invalid length. [ 684.264104][T29051] netlink: 'syz.2.6480': attribute type 4 has an invalid length. [ 685.441569][T29086] SET target dimension over the limit! [ 685.492779][T29087] netlink: 'syz.7.6492': attribute type 1 has an invalid length. [ 685.537730][T29089] gtp1: entered promiscuous mode [ 685.550935][T29089] gtp1: entered allmulticast mode [ 685.568904][T29095] netlink: 'syz.6.6494': attribute type 1 has an invalid length. [ 685.588968][T29095] __nla_validate_parse: 8 callbacks suppressed [ 685.588985][T29095] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6494'. [ 685.633810][T29096] netlink: 'syz.2.6495': attribute type 1 has an invalid length. [ 685.642202][T29096] netlink: 784 bytes leftover after parsing attributes in process `syz.2.6495'. [ 685.700804][T20129] IPVS: stop unused estimator thread 0... [ 685.772849][T29104] tipc: Started in network mode [ 685.789976][T29104] tipc: Node identity ac14142f, cluster identity 4711 [ 685.797081][T29104] tipc: New replicast peer: 0.0.0.0 [ 685.804014][T29104] tipc: Enabled bearer , priority 10 [ 685.815653][T29104] tipc: New replicast peer: 255.255.255.255 [ 685.841107][T29104] vlan2: entered allmulticast mode [ 685.846283][T29104] bond0: entered allmulticast mode [ 685.858506][T29104] bond_slave_0: entered allmulticast mode [ 685.864370][T29104] bond_slave_1: entered allmulticast mode [ 685.891639][T29113] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6501'. [ 685.908142][T29113] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6501'. [ 685.917447][T29113] netlink: 'syz.6.6501': attribute type 6 has an invalid length. [ 685.936647][T29113] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6501'. [ 685.939932][T20129] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.955494][T29113] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6501'. [ 685.965392][T20129] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.965469][T20129] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.965535][T20129] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.996147][T29113] netlink: 'syz.6.6501': attribute type 6 has an invalid length. [ 686.174003][T29126] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6506'. [ 686.209698][T29126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6506'. [ 686.756424][T29167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6516'. [ 686.841151][T29173] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6515'. [ 686.920181][T13871] tipc: Node number set to 2886997039 [ 687.180063][T29200] netlink: 'syz.8.6525': attribute type 15 has an invalid length. [ 687.449822][T29218] netlink: 'syz.5.6531': attribute type 11 has an invalid length. [ 687.502638][T29218] netlink: 'syz.5.6531': attribute type 11 has an invalid length. [ 687.968215][T29258] sctp: [Deprecated]: syz.8.6540 (pid 29258) Use of struct sctp_assoc_value in delayed_ack socket option. [ 687.968215][T29258] Use struct sctp_sack_info instead [ 688.062955][T29263] tipc: Enabled bearer , priority 0 [ 688.072074][T29263] syzkaller0: entered promiscuous mode [ 688.083585][T29263] syzkaller0: entered allmulticast mode [ 688.156274][T29261] tipc: Resetting bearer [ 688.205071][T29261] tipc: Disabling bearer [ 688.218824][T29267] net_ratelimit: 18 callbacks suppressed [ 688.218843][T29267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.500388][T29294] syzkaller1: entered promiscuous mode [ 688.507454][T29294] syzkaller1: entered allmulticast mode [ 688.614004][T29303] x_tables: duplicate underflow at hook 4 [ 688.835221][T29319] bond2 (unregistering): Released all slaves [ 688.865701][T29325] ip6tnl2: entered promiscuous mode [ 688.871714][T29325] ip6tnl2: entered allmulticast mode [ 689.206800][T29339] dvmrp1: entered allmulticast mode [ 689.265593][T29345] validate_nla: 1 callbacks suppressed [ 689.265611][T29345] netlink: 'syz.6.6565': attribute type 10 has an invalid length. [ 689.305319][T29345] batman_adv: batadv0: Adding interface: team0 [ 689.320472][T29345] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.369459][T29345] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 689.701378][T29366] block nbd5: Unsupported socket: should be TCP or UNIX. [ 690.212055][T29405] netlink: 'syz.6.6578': attribute type 1 has an invalid length. [ 690.228316][T29405] netlink: 'syz.6.6578': attribute type 4 has an invalid length. [ 690.284587][T29410] netlink: 'syz.8.6579': attribute type 21 has an invalid length. [ 690.297034][T29396] netlink: 'syz.5.6566': attribute type 10 has an invalid length. [ 690.406516][T29413] vlan3: entered allmulticast mode [ 690.412825][T29413] bridge0: entered allmulticast mode [ 690.420009][T29413] bridge1: port 1(vlan3) entered blocking state [ 690.427094][T29413] bridge1: port 1(vlan3) entered disabled state [ 690.436757][T29413] vlan3: entered promiscuous mode [ 690.446108][T29413] bridge0: entered promiscuous mode [ 690.454981][T29419] netlink: 'syz.8.6581': attribute type 1 has an invalid length. [ 690.516022][T29419] bond2: (slave gretap1): making interface the new active one [ 690.525610][T29419] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 690.610004][T29424] ip6t_srh: unknown srh match flags 5F28 [ 690.694706][T29431] __nla_validate_parse: 19 callbacks suppressed [ 690.694725][T29431] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6585'. [ 690.794011][T29440] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6588'. [ 690.806204][T29436] tipc: Started in network mode [ 690.811456][T29436] tipc: Node identity ac14140f, cluster identity 4711 [ 690.819299][T29436] tipc: New replicast peer: 255.255.255.255 [ 690.825939][T29436] tipc: Enabled bearer , priority 10 [ 690.837162][T29436] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6587'. [ 690.916395][T29446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6591'. [ 691.199399][T29458] syzkaller1: entered promiscuous mode [ 691.217416][T29458] syzkaller1: entered allmulticast mode [ 691.584696][T29489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6603'. [ 691.623084][T29480] block nbd5: server does not support multiple connections per device. [ 691.645363][T29480] block nbd5: shutting down sockets [ 691.653793][T29495] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6605'. [ 691.776776][T29503] batadv_slave_1: entered allmulticast mode [ 691.816868][T29505] nbd: must specify a device to reconfigure [ 691.938570][ T6837] tipc: Node number set to 2886997007 [ 692.271826][T29524] netlink: 'syz.5.6613': attribute type 10 has an invalid length. [ 692.286499][T29523] netlink: 216 bytes leftover after parsing attributes in process `syz.7.6612'. [ 692.286691][T29524] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 692.306128][T29524] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 692.328026][T29527] IPv4: Oversized IP packet from 127.202.26.0 [ 692.387194][T29532] pim6reg1: entered promiscuous mode [ 692.398129][T29532] pim6reg1: entered allmulticast mode [ 692.548184][T29542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6616'. [ 693.092497][T29544] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.100351][T29544] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.342719][T29544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 693.374042][T29544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 693.814542][T29556] tipc: Enabled bearer , priority 0 [ 693.838977][T29560] syzkaller0: entered promiscuous mode [ 693.844499][T29560] syzkaller0: entered allmulticast mode [ 693.939294][T29570] tipc: Resetting bearer [ 693.954046][T20128] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.975179][T20128] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.990360][T29583] netlink: 'syz.7.6626': attribute type 1 has an invalid length. [ 693.990848][T20128] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.008133][T29583] netlink: 16150 bytes leftover after parsing attributes in process `syz.7.6626'. [ 694.010204][T20128] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.033535][T29547] tipc: Resetting bearer [ 694.055246][T29547] tipc: Disabling bearer [ 694.081358][T29588] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6625'. [ 694.137062][T29585] IPv6: sit1: Disabled Multicast RS [ 694.190083][T20128] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.208732][T20128] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.237775][T20128] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.247010][T20128] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.265329][T29592] netlink: 'syz.2.6629': attribute type 10 has an invalid length. [ 694.323091][T29592] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 694.452290][T29603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.471146][T29603] netlink: 'syz.6.6634': attribute type 11 has an invalid length. [ 694.479813][T29603] netlink: 'syz.6.6634': attribute type 5 has an invalid length. [ 695.245011][T29650] netlink: 'syz.6.6651': attribute type 1 has an invalid length. [ 695.259282][T29651] veth0_to_team: entered promiscuous mode [ 695.265233][T29651] veth0_to_team: entered allmulticast mode [ 695.779843][T29694] __nla_validate_parse: 16 callbacks suppressed [ 695.779863][T29694] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6666'. [ 695.810509][T29694] ipt_ECN: cannot use operation on non-tcp rule [ 695.946005][T29700] ip6gre1: entered allmulticast mode [ 696.058436][T29708] netlink: 'syz.6.6672': attribute type 1 has an invalid length. [ 696.068089][T29708] netlink: 232 bytes leftover after parsing attributes in process `syz.6.6672'. [ 696.077506][T29708] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6672'. [ 696.360925][T29724] netlink: 'syz.8.6678': attribute type 23 has an invalid length. [ 696.398355][T29722] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6677'. [ 696.410320][T29723] netlink: 'syz.8.6678': attribute type 23 has an invalid length. [ 696.594090][T29728] netlink: 'syz.7.6680': attribute type 2 has an invalid length. [ 696.604372][T29728] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6680'. [ 696.682636][T29733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6681'. [ 696.716977][T29735] IPVS: set_ctl: invalid protocol: 87 100.1.1.0:20004 [ 696.728245][T29735] tipc: Enabled bearer , priority 0 [ 696.736118][T29735] syzkaller0: entered promiscuous mode [ 696.747292][T29735] syzkaller0: entered allmulticast mode [ 696.769511][T29734] tipc: Resetting bearer [ 696.810163][T29740] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6684'. [ 696.820905][T29734] tipc: Disabling bearer [ 696.988691][T29749] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 697.072415][T29759] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6691'. [ 697.106442][T29760] dvmrp0: entered allmulticast mode [ 697.671360][T29794] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6701'. [ 698.161562][T29821] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 698.400501][T29836] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6713'. [ 698.570607][T29844] netlink: 'syz.6.6719': attribute type 27 has an invalid length. [ 698.586782][T29844] netlink: 'syz.6.6719': attribute type 6 has an invalid length. [ 698.661528][T29847] netlink: 'syz.7.6720': attribute type 11 has an invalid length. [ 698.670980][T29847] netlink: 'syz.7.6720': attribute type 11 has an invalid length. [ 698.718691][T29856] syzkaller1: entered promiscuous mode [ 698.724209][T29856] syzkaller1: entered allmulticast mode [ 698.984381][T29861] netlink: 'syz.7.6723': attribute type 1 has an invalid length. [ 699.093087][T29875] netlink: 'syz.7.6727': attribute type 1 has an invalid length. [ 699.669171][T29897] tipc: Started in network mode [ 699.680109][T29897] tipc: Node identity 6e8a50357041, cluster identity 4711 [ 699.693287][T29897] tipc: Enabled bearer , priority 0 [ 699.706668][T29897] syzkaller0: entered promiscuous mode [ 699.722506][T29897] syzkaller0: entered allmulticast mode [ 699.739084][T29897] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 699.769152][T29897] tipc: Resetting bearer [ 699.780272][T29896] tipc: Resetting bearer [ 699.802266][T29896] tipc: Disabling bearer [ 700.626355][T29947] veth1_macvtap: left promiscuous mode [ 700.637526][T29947] macsec0: entered promiscuous mode [ 700.653112][T29947] macsec0: entered allmulticast mode [ 700.673944][T29953] veth1_macvtap: entered promiscuous mode [ 700.680749][T29953] veth1_macvtap: entered allmulticast mode [ 700.687963][T29953] macsec0: left promiscuous mode [ 700.695067][T29953] macsec0: left allmulticast mode [ 700.701935][T29953] veth1_macvtap: left allmulticast mode [ 700.762907][T29955] netlink: 'syz.6.6751': attribute type 21 has an invalid length. [ 700.784804][T29959] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 700.991387][T29974] __nla_validate_parse: 20 callbacks suppressed [ 700.991408][T29974] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6757'. [ 701.006207][T29975] netlink: 'syz.8.6755': attribute type 1 has an invalid length. [ 701.059620][T29971] netlink: 'syz.8.6755': attribute type 1 has an invalid length. [ 701.084921][T29971] netlink: 'syz.8.6755': attribute type 2 has an invalid length. [ 701.188752][T29987] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6760'. [ 701.231298][T29989] Bluetooth: MGMT ver 1.23 [ 701.438285][T29999] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6763'. [ 701.540045][T30002] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6764'. [ 701.792180][T30014] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6766'. [ 701.980716][T30022] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6768'. [ 701.996608][T30022] netlink: 'syz.7.6768': attribute type 20 has an invalid length. [ 702.037355][T30022] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6768'. [ 702.049823][T30022] netlink: 'syz.7.6768': attribute type 20 has an invalid length. [ 702.052847][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 702.072713][T30025] netlink: 'syz.8.6770': attribute type 1 has an invalid length. [ 702.073213][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 702.099864][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 702.108080][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 702.115975][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 702.649557][T30040] team0 (unregistering): Port device team_slave_0 removed [ 702.670779][T30040] team0 (unregistering): Port device team_slave_1 removed [ 702.706890][T30029] lo speed is unknown, defaulting to 1000 [ 702.973224][T30064] tipc: Enabled bearer , priority 0 [ 702.982785][T30067] syzkaller0: entered promiscuous mode [ 702.989723][T30067] syzkaller0: entered allmulticast mode [ 703.097230][T30064] tipc: Resetting bearer [ 703.138720][T30063] tipc: Resetting bearer [ 703.306529][T30063] tipc: Disabling bearer [ 703.420825][T20121] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.448829][T20121] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 703.460672][T20121] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 703.805089][T20121] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.837153][T20121] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 703.868269][T20121] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 703.967431][T20121] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.012798][T20121] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 704.049973][T20121] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 704.198620][ T52] Bluetooth: hci4: command tx timeout [ 704.215769][T20121] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.230199][T20121] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 704.240337][T20121] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 704.481340][T30029] chnl_net:caif_netlink_parms(): no params data found [ 704.853976][T30146] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6801'. [ 704.863922][T20121] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 705.041430][T30154] netlink: 'syz.7.6803': attribute type 16 has an invalid length. [ 705.049993][T30154] netlink: 'syz.7.6803': attribute type 17 has an invalid length. [ 705.112682][T20121] bond4 (unregistering): (slave gretap1): Releasing active interface [ 705.142026][T20121] bond5 (unregistering): (slave gretap2): Releasing active interface [ 705.295357][T20121] batman_adv: batadv0: Removing interface: geneve2 [ 705.694696][T20121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.703840][T20121] bond_slave_0: left allmulticast mode [ 705.711427][T20121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.722863][T20121] bond_slave_1: left allmulticast mode [ 705.730274][T20121] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 705.740651][T20121] bridge_slave_1: left allmulticast mode [ 705.747421][T20121] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 705.756874][T20121] mac80211_hwsim hwsim38 wlan1: left allmulticast mode [ 705.770739][T20121] bond0 (unregistering): Released all slaves [ 705.784588][T20121] bond1 (unregistering): Released all slaves [ 705.902034][T20121] bond2 (unregistering): Released all slaves [ 705.915010][T20121] bond3 (unregistering): Released all slaves [ 705.929245][T20121] bond4 (unregistering): Released all slaves [ 705.942937][T20121] bond5 (unregistering): Released all slaves [ 705.961016][T20121] bond6 (unregistering): Released all slaves [ 706.072528][T30154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 706.219282][T30162] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6804'. [ 706.240946][T30166] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6806'. [ 706.265662][T30162] netlink: 2 bytes leftover after parsing attributes in process `syz.6.6804'. [ 706.278721][ T52] Bluetooth: hci4: command tx timeout [ 706.324148][T20121] tipc: Disabling bearer [ 706.357885][T20121] tipc: Disabling bearer [ 706.411438][T20121] tipc: Left network mode [ 706.458504][T30180] netlink: 'syz.8.6810': attribute type 12 has an invalid length. [ 706.516902][T30180] bond4: option primary_reselect: invalid value (255) [ 706.543262][T30180] bond4 (unregistering): Released all slaves [ 706.625345][T30190] SET target dimension over the limit! [ 706.789941][T30198] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 706.824360][T30029] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.844727][T30029] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.854713][T30029] bridge_slave_0: entered allmulticast mode [ 706.866242][T30029] bridge_slave_0: entered promiscuous mode [ 706.990042][T30029] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.997314][T30029] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.017634][T30029] bridge_slave_1: entered allmulticast mode [ 707.026825][T30029] bridge_slave_1: entered promiscuous mode [ 707.204001][T30217] netlink: 'syz.2.6819': attribute type 1 has an invalid length. [ 707.450583][T30246] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6825'. [ 707.520894][T30029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.589692][T30029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.715156][T30253] ip6t_srh: unknown srh match flags 5F28 [ 707.729614][T30253] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6828'. [ 707.911752][T30029] team0: Port device team_slave_0 added [ 708.004935][T30029] team0: Port device team_slave_1 added [ 708.105386][T30269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.151773][T30029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.171497][T30029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.202480][T30029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.244339][T20121] hsr_slave_0: left promiscuous mode [ 708.256640][T20121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.358504][ T52] Bluetooth: hci4: command tx timeout [ 708.376729][T30282] netlink: 14436 bytes leftover after parsing attributes in process `syz.6.6838'. [ 708.376956][T20121] pimreg (unregistering): left allmulticast mode [ 708.410604][T30282] openvswitch: netlink: Missing key (keys=40, expected=100) [ 708.423452][T30282] x_tables: duplicate underflow at hook 2 [ 708.536302][T30290] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6842'. [ 708.545034][T30289] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6842'. [ 708.824090][T20121] team0 (unregistering): Port device team_slave_1 removed [ 708.869801][T20121] team0 (unregistering): Port device team_slave_0 removed [ 709.272495][T20121] lo (unregistering): left allmulticast mode [ 709.282759][T30029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.290836][T30029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.317604][T30029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.507191][T30304] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20004 [ 709.572203][T30029] hsr_slave_0: entered promiscuous mode [ 709.579955][T30029] hsr_slave_1: entered promiscuous mode [ 709.587946][T30029] debugfs: 'hsr0' already exists in 'hsr' [ 709.594815][T30029] Cannot create hsr debugfs directory [ 709.693753][T30311] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6847'. [ 709.761299][T30312] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6846'. [ 709.861853][T30311] syzkaller0: entered promiscuous mode [ 709.867485][T30311] syzkaller0: entered allmulticast mode [ 710.413509][T30029] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 710.426518][T30029] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 710.439058][ T52] Bluetooth: hci4: command tx timeout [ 710.441572][T30029] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 710.457484][T30029] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 710.596091][T30029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.626925][T30029] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.647151][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.654436][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.684329][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.691615][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.119343][T30029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.521624][T30408] netlink: 'syz.7.6872': attribute type 1 has an invalid length. [ 711.568407][T30408] __nla_validate_parse: 1 callbacks suppressed [ 711.568426][T30408] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6872'. [ 711.777573][T30029] veth0_vlan: entered promiscuous mode [ 711.826191][T30029] veth1_vlan: entered promiscuous mode [ 711.886911][T30029] veth0_macvtap: entered promiscuous mode [ 711.904212][T30029] veth1_macvtap: entered promiscuous mode [ 711.997206][T30029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.033178][T30029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.082425][T20128] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.092908][T20128] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.134398][T20128] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.144172][T20128] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.396686][ T281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.429540][T30435] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 712.433461][ T281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.596744][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.616509][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.036011][T30464] netlink: 'syz.2.6888': attribute type 1 has an invalid length. [ 713.040017][T30466] x_tables: duplicate underflow at hook 2 [ 713.062474][T30467] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6887'. [ 713.071981][T30464] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6888'. [ 713.260045][T30485] netlink: 'syz.6.6893': attribute type 10 has an invalid length. [ 713.281199][T30487] netlink: 'syz.6.6893': attribute type 10 has an invalid length. [ 714.193298][T30551] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6911'. [ 714.209667][T30551] netlink: 272 bytes leftover after parsing attributes in process `syz.8.6911'. [ 714.219551][T30551] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6911'. [ 714.539441][T30573] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6921'. [ 714.617541][T30582] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6923'. [ 714.630057][T30582] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6923'. [ 714.650221][T30582] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6923'. [ 714.761279][T30589] lo: entered promiscuous mode [ 714.775981][T30589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 715.056136][ T60] syzkaller0: tun_net_xmit 76 [ 715.062498][ T60] syzkaller0: tun_net_xmit 48 [ 715.089088][ T6838] syzkaller0: tun_net_xmit 76 [ 715.097836][T30604] syzkaller0: create flow: hash 2479789289 index 2 [ 715.312768][T30609] syzkaller0: delete flow: hash 2479789289 index 2 [ 717.049124][T30643] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 717.050088][T30647] __nla_validate_parse: 3 callbacks suppressed [ 717.050106][T30647] netlink: 2 bytes leftover after parsing attributes in process `syz.6.6940'. [ 717.410973][T30681] openvswitch: netlink: Message has 4 unknown bytes. [ 717.496782][T30686] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6950'. [ 717.671640][T30695] veth3: entered allmulticast mode [ 717.805381][T30702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6956'. [ 717.885604][T30715] netlink: 'syz.2.6961': attribute type 5 has an invalid length. [ 718.081271][T30723] sctp: [Deprecated]: syz.8.6964 (pid 30723) Use of int in maxseg socket option. [ 718.081271][T30723] Use struct sctp_assoc_value instead [ 718.404913][T30744] netlink: 'syz.2.6970': attribute type 1 has an invalid length. [ 718.453784][T30744] 8021q: adding VLAN 0 to HW filter on device bond4 [ 718.466309][T30744] bond4: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 718.491667][T30744] bond4: entered allmulticast mode [ 718.508850][T30755] pim6reg1: entered promiscuous mode [ 718.515494][T30755] pim6reg1: entered allmulticast mode [ 718.604207][T30761] set match dimension is over the limit! [ 718.739491][T30765] netlink: 'syz.2.6977': attribute type 1 has an invalid length. [ 718.752754][T30765] netlink: 172 bytes leftover after parsing attributes in process `syz.2.6977'. [ 718.919972][T30776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6980'. [ 718.966244][T30777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6980'. [ 718.976693][T30776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6980'. [ 718.994787][T30777] macsec2: entered promiscuous mode [ 719.004791][T30777] macsec2: entered allmulticast mode [ 719.411450][T30792] netlink: 'syz.2.6986': attribute type 29 has an invalid length. [ 719.439214][T30792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6986'. [ 719.484221][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 719.495548][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 719.503836][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 719.512480][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 719.520951][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 719.609343][T30781] lec:lec_atm_close: lec0: Shut down! [ 719.723617][T30797] netlink: 'syz.5.6987': attribute type 1 has an invalid length. [ 719.749456][T30801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6988'. [ 719.780760][T30801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6988'. [ 719.874769][T30794] lo speed is unknown, defaulting to 1000 [ 720.025850][T30814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 720.054764][T30816] syzkaller1: entered promiscuous mode [ 720.061578][T30816] syzkaller1: entered allmulticast mode [ 720.072816][T30816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.080741][T30816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.096027][T30814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 720.110278][T30818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 720.122487][T30816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.144757][T30816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.484592][T30794] chnl_net:caif_netlink_parms(): no params data found [ 720.654008][T30794] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.665940][T30794] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.676565][T30794] bridge_slave_0: entered allmulticast mode [ 720.687459][T30794] bridge_slave_0: entered promiscuous mode [ 720.701624][T30794] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.710738][T30794] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.719474][T30794] bridge_slave_1: entered allmulticast mode [ 720.729010][T30794] bridge_slave_1: entered promiscuous mode [ 720.793246][T30794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.809533][T30794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.886147][T30794] team0: Port device team_slave_0 added [ 720.896325][T30794] team0: Port device team_slave_1 added [ 720.951228][T30794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.958838][T30794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.015976][T30794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.030049][T30794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.037822][T30794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.064693][T30794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.193208][T30794] hsr_slave_0: entered promiscuous mode [ 721.200376][T30794] hsr_slave_1: entered promiscuous mode [ 721.207032][T30794] debugfs: 'hsr0' already exists in 'hsr' [ 721.213725][T30794] Cannot create hsr debugfs directory [ 721.444347][T30891] syzkaller0: create flow: hash 2479789289 index 2 [ 721.559788][ T52] Bluetooth: hci0: command tx timeout [ 721.586087][T30898] x_tables: duplicate underflow at hook 2 [ 721.597123][T20128] syzkaller0: tun_net_xmit 76 [ 721.604450][T20128] syzkaller0: tun_net_xmit 48 [ 721.618377][T27491] syzkaller0: tun_net_xmit 76 [ 721.657003][T30880] syzkaller0: delete flow: hash 2479789289 index 2 [ 723.532708][T30794] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 723.555556][T30794] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 723.650011][ T52] Bluetooth: hci0: command tx timeout [ 723.713059][T30794] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 723.754846][T30794] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 723.829649][T30945] bond4: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 723.876492][T30954] geneve2: entered promiscuous mode [ 723.888107][T30954] geneve2: entered allmulticast mode [ 723.895532][T30962] __nla_validate_parse: 9 callbacks suppressed [ 723.895551][T30962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7033'. [ 723.945799][T30951] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 723.959368][ T60] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 723.968422][ T60] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 723.989985][ T60] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 724.002379][ T60] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 724.224725][T30971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7036'. [ 724.241787][T30794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.330737][T30794] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.406328][T30985] netlink: 'syz.7.7039': attribute type 2 has an invalid length. [ 724.418891][T30985] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7039'. [ 724.437612][T30794] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 724.452370][T30985] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7039'. [ 724.482622][T30986] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7037'. [ 724.494791][T30794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 724.622424][T20128] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.629641][T20128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.640476][T20128] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.647876][T20128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.747795][T30994] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.761339][T30994] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.930750][T31004] netlink: 'syz.2.7043': attribute type 1 has an invalid length. [ 724.953478][T30994] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.959721][T31004] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7043'. [ 724.965231][T30994] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.993907][T31009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.022363][T31011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.027935][T30794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.129701][T30994] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.150988][T30994] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.341871][T30994] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.353518][T30994] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.431294][T31033] Bluetooth: MGMT ver 1.23 [ 725.539710][ T60] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.547938][ T60] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.566827][T31040] netlink: 'syz.5.7052': attribute type 9 has an invalid length. [ 725.576384][T20128] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.584896][T20128] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.596682][T31040] netlink: 'syz.5.7052': attribute type 9 has an invalid length. [ 725.622472][ T60] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.635506][ T60] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.673747][ T60] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.685095][ T60] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.705609][T30995] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.716519][T30995] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.719445][ T52] Bluetooth: hci0: command tx timeout [ 725.737450][ T60] ================================================================== [ 725.745564][ T60] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 725.753124][ T60] Read of size 8 at addr ffff8880280592b0 by task kworker/u8:4/60 [ 725.760922][ T60] [ 725.763249][ T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 725.763270][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 725.763282][ T60] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 725.763309][ T60] Call Trace: [ 725.763317][ T60] [ 725.763326][ T60] dump_stack_lvl+0x189/0x250 [ 725.763345][ T60] ? __kasan_check_byte+0x12/0x40 [ 725.763372][ T60] ? __pfx_dump_stack_lvl+0x10/0x10 [ 725.763388][ T60] ? lock_release+0x4b/0x3e0 [ 725.763407][ T60] ? __virt_addr_valid+0x4a5/0x5c0 [ 725.763430][ T60] print_report+0xca/0x240 [ 725.763450][ T60] ? __mutex_lock+0x147/0x1350 [ 725.763470][ T60] kasan_report+0x118/0x150 [ 725.763484][ T60] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 725.763503][ T60] ? __mutex_lock+0x147/0x1350 [ 725.763526][ T60] __mutex_lock+0x147/0x1350 [ 725.763548][ T60] ? __mutex_lock+0x5bb/0x1350 [ 725.763569][ T60] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 725.763590][ T60] ? __pfx___mutex_lock+0x10/0x10 [ 725.763612][ T60] ? __lock_acquire+0xab9/0xd20 [ 725.763631][ T60] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 725.763653][ T60] ? process_scheduled_works+0x9ef/0x17b0 [ 725.763671][ T60] ? process_scheduled_works+0x9ef/0x17b0 [ 725.763688][ T60] process_scheduled_works+0xae1/0x17b0 [ 725.763717][ T60] ? __pfx_process_scheduled_works+0x10/0x10 [ 725.763741][ T60] worker_thread+0x8a0/0xda0 [ 725.763768][ T60] kthread+0x711/0x8a0 [ 725.763791][ T60] ? __pfx_worker_thread+0x10/0x10 [ 725.763807][ T60] ? __pfx_kthread+0x10/0x10 [ 725.763829][ T60] ? _raw_spin_unlock_irq+0x23/0x50 [ 725.763845][ T60] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.763864][ T60] ? __pfx_kthread+0x10/0x10 [ 725.763884][ T60] ret_from_fork+0x4bc/0x870 [ 725.763902][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 725.763921][ T60] ? __switch_to_asm+0x39/0x70 [ 725.763939][ T60] ? __switch_to_asm+0x33/0x70 [ 725.763956][ T60] ? __pfx_kthread+0x10/0x10 [ 725.763982][ T60] ret_from_fork_asm+0x1a/0x30 [ 725.764007][ T60] [ 725.764014][ T60] [ 725.966566][ T60] Allocated by task 30994: [ 725.971001][ T60] kasan_save_track+0x3e/0x80 [ 725.975677][ T60] __kasan_kmalloc+0x93/0xb0 [ 725.980265][ T60] __kmalloc_noprof+0x411/0x7f0 [ 725.985121][ T60] udp_tunnel_nic_netdevice_event+0x4c3/0x1810 [ 725.991269][ T60] notifier_call_chain+0x1b6/0x3e0 [ 725.996375][ T60] register_netdevice+0x1608/0x1ae0 [ 726.001568][ T60] nsim_create+0xae8/0xf10 [ 726.005974][ T60] __nsim_dev_port_add+0x6b6/0xb10 [ 726.011077][ T60] nsim_dev_port_add_all+0x37/0xf0 [ 726.016179][ T60] nsim_dev_reload_up+0x451/0x780 [ 726.021203][ T60] devlink_reload+0x4e9/0x8d0 [ 726.025866][ T60] devlink_nl_reload_doit+0xb35/0xd50 [ 726.031229][ T60] genl_family_rcv_msg_doit+0x212/0x300 [ 726.036770][ T60] genl_rcv_msg+0x60e/0x790 [ 726.041270][ T60] netlink_rcv_skb+0x205/0x470 [ 726.046111][ T60] genl_rcv+0x28/0x40 [ 726.050083][ T60] netlink_unicast+0x82c/0x9e0 [ 726.054839][ T60] netlink_sendmsg+0x805/0xb30 [ 726.059598][ T60] __sock_sendmsg+0x21c/0x270 [ 726.064288][ T60] ____sys_sendmsg+0x505/0x830 [ 726.069058][ T60] ___sys_sendmsg+0x21f/0x2a0 [ 726.073742][ T60] __x64_sys_sendmsg+0x19b/0x260 [ 726.078766][ T60] do_syscall_64+0xfa/0xfa0 [ 726.083277][ T60] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.089164][ T60] [ 726.091474][ T60] Freed by task 30995: [ 726.095522][ T60] kasan_save_track+0x3e/0x80 [ 726.100198][ T60] __kasan_save_free_info+0x46/0x50 [ 726.105426][ T60] __kasan_slab_free+0x5c/0x80 [ 726.110278][ T60] kfree+0x19a/0x6d0 [ 726.114172][ T60] udp_tunnel_nic_netdevice_event+0x11ab/0x1810 [ 726.120406][ T60] notifier_call_chain+0x1b6/0x3e0 [ 726.125506][ T60] unregister_netdevice_many_notify+0x1860/0x2390 [ 726.131921][ T60] unregister_netdevice_queue+0x33c/0x380 [ 726.137632][ T60] nsim_destroy+0x1dd/0x670 [ 726.142124][ T60] __nsim_dev_port_del+0x14d/0x1b0 [ 726.147226][ T60] nsim_dev_reload_destroy+0x288/0x490 [ 726.152676][ T60] nsim_dev_reload_down+0x8a/0xc0 [ 726.157789][ T60] devlink_reload+0x1b6/0x8d0 [ 726.162471][ T60] devlink_nl_reload_doit+0xb35/0xd50 [ 726.167944][ T60] genl_family_rcv_msg_doit+0x212/0x300 [ 726.174027][ T60] genl_rcv_msg+0x60e/0x790 [ 726.178803][ T60] netlink_rcv_skb+0x205/0x470 [ 726.183652][ T60] genl_rcv+0x28/0x40 [ 726.187635][ T60] netlink_unicast+0x82c/0x9e0 [ 726.192394][ T60] netlink_sendmsg+0x805/0xb30 [ 726.197164][ T60] __sock_sendmsg+0x21c/0x270 [ 726.201878][ T60] ____sys_sendmsg+0x505/0x830 [ 726.206731][ T60] ___sys_sendmsg+0x21f/0x2a0 [ 726.211401][ T60] __x64_sys_sendmsg+0x19b/0x260 [ 726.216865][ T60] do_syscall_64+0xfa/0xfa0 [ 726.221472][ T60] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.227362][ T60] [ 726.229674][ T60] Last potentially related work creation: [ 726.235377][ T60] kasan_save_stack+0x3e/0x60 [ 726.240050][ T60] kasan_record_aux_stack+0xbd/0xd0 [ 726.245236][ T60] insert_work+0x3d/0x330 [ 726.249564][ T60] __queue_work+0xbaf/0xfb0 [ 726.254073][ T60] queue_work_on+0x181/0x270 [ 726.258656][ T60] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 726.264284][ T60] udp_tunnel_push_rx_port+0x17d/0x200 [ 726.269728][ T60] geneve_offload_rx_ports+0xd7/0x160 [ 726.275096][ T60] geneve_netdevice_event+0x6a/0x80 [ 726.280288][ T60] notifier_call_chain+0x1b6/0x3e0 [ 726.285409][ T60] call_netdevice_notifiers+0x88/0xc0 [ 726.290794][ T60] udp_tunnel_nic_netdevice_event+0xdff/0x1810 [ 726.296949][ T60] notifier_call_chain+0x1b6/0x3e0 [ 726.302057][ T60] register_netdevice+0x1608/0x1ae0 [ 726.307252][ T60] nsim_create+0xae8/0xf10 [ 726.311663][ T60] __nsim_dev_port_add+0x6b6/0xb10 [ 726.316766][ T60] nsim_dev_port_add_all+0x37/0xf0 [ 726.321869][ T60] nsim_dev_reload_up+0x451/0x780 [ 726.326892][ T60] devlink_reload+0x4e9/0x8d0 [ 726.331561][ T60] devlink_nl_reload_doit+0xb35/0xd50 [ 726.336933][ T60] genl_family_rcv_msg_doit+0x212/0x300 [ 726.342476][ T60] genl_rcv_msg+0x60e/0x790 [ 726.346976][ T60] netlink_rcv_skb+0x205/0x470 [ 726.351732][ T60] genl_rcv+0x28/0x40 [ 726.355703][ T60] netlink_unicast+0x82c/0x9e0 [ 726.360465][ T60] netlink_sendmsg+0x805/0xb30 [ 726.365230][ T60] __sock_sendmsg+0x21c/0x270 [ 726.369907][ T60] ____sys_sendmsg+0x505/0x830 [ 726.374668][ T60] ___sys_sendmsg+0x21f/0x2a0 [ 726.379419][ T60] __x64_sys_sendmsg+0x19b/0x260 [ 726.384430][ T60] do_syscall_64+0xfa/0xfa0 [ 726.388924][ T60] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.394804][ T60] [ 726.397113][ T60] Second to last potentially related work creation: [ 726.403682][ T60] kasan_save_stack+0x3e/0x60 [ 726.408354][ T60] kasan_record_aux_stack+0xbd/0xd0 [ 726.413541][ T60] insert_work+0x3d/0x330 [ 726.417853][ T60] __queue_work+0xcd2/0xfb0 [ 726.422344][ T60] queue_work_on+0x181/0x270 [ 726.426926][ T60] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 726.432550][ T60] udp_tunnel_push_rx_port+0x17d/0x200 [ 726.437999][ T60] vxlan_offload_rx_ports+0x139/0x200 [ 726.443376][ T60] vxlan_netdevice_event+0x111/0x470 [ 726.448655][ T60] notifier_call_chain+0x1b6/0x3e0 [ 726.453775][ T60] call_netdevice_notifiers+0x88/0xc0 [ 726.459140][ T60] udp_tunnel_nic_netdevice_event+0xdff/0x1810 [ 726.465296][ T60] notifier_call_chain+0x1b6/0x3e0 [ 726.470402][ T60] register_netdevice+0x1608/0x1ae0 [ 726.475597][ T60] nsim_create+0xae8/0xf10 [ 726.480000][ T60] __nsim_dev_port_add+0x6b6/0xb10 [ 726.485134][ T60] nsim_dev_port_add_all+0x37/0xf0 [ 726.490243][ T60] nsim_dev_reload_up+0x451/0x780 [ 726.495262][ T60] devlink_reload+0x4e9/0x8d0 [ 726.499931][ T60] devlink_nl_reload_doit+0xb35/0xd50 [ 726.505292][ T60] genl_family_rcv_msg_doit+0x212/0x300 [ 726.510837][ T60] genl_rcv_msg+0x60e/0x790 [ 726.515422][ T60] netlink_rcv_skb+0x205/0x470 [ 726.520184][ T60] genl_rcv+0x28/0x40 [ 726.524166][ T60] netlink_unicast+0x82c/0x9e0 [ 726.528926][ T60] netlink_sendmsg+0x805/0xb30 [ 726.533676][ T60] __sock_sendmsg+0x21c/0x270 [ 726.538345][ T60] ____sys_sendmsg+0x505/0x830 [ 726.543286][ T60] ___sys_sendmsg+0x21f/0x2a0 [ 726.547981][ T60] __x64_sys_sendmsg+0x19b/0x260 [ 726.552916][ T60] do_syscall_64+0xfa/0xfa0 [ 726.557415][ T60] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.563304][ T60] [ 726.565621][ T60] The buggy address belongs to the object at ffff888028059200 [ 726.565621][ T60] which belongs to the cache kmalloc-256 of size 256 [ 726.579662][ T60] The buggy address is located 176 bytes inside of [ 726.579662][ T60] freed 256-byte region [ffff888028059200, ffff888028059300) [ 726.593450][ T60] [ 726.595773][ T60] The buggy address belongs to the physical page: [ 726.602168][ T60] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28058 [ 726.610938][ T60] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 726.619427][ T60] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 726.626959][ T60] page_type: f5(slab) [ 726.630931][ T60] raw: 00fff00000000040 ffff88813ffa6b40 ffffea0000c6ae80 dead000000000002 [ 726.639503][ T60] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 726.648082][ T60] head: 00fff00000000040 ffff88813ffa6b40 ffffea0000c6ae80 dead000000000002 [ 726.656742][ T60] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 726.665400][ T60] head: 00fff00000000001 ffffea0000a01601 00000000ffffffff 00000000ffffffff [ 726.674234][ T60] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 726.682891][ T60] page dumped because: kasan: bad access detected [ 726.689391][ T60] page_owner tracks the page as allocated [ 726.695136][ T60] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5835, tgid 5835 (syz-executor), ts 77446932197, free_ts 77420145530 [ 726.716750][ T60] post_alloc_hook+0x240/0x2a0 [ 726.721697][ T60] get_page_from_freelist+0x2365/0x2440 [ 726.727229][ T60] __alloc_frozen_pages_noprof+0x181/0x370 [ 726.733024][ T60] alloc_pages_mpol+0x232/0x4a0 [ 726.737876][ T60] allocate_slab+0x96/0x3a0 [ 726.742397][ T60] ___slab_alloc+0xe94/0x18a0 [ 726.747067][ T60] __slab_alloc+0x65/0x100 [ 726.751471][ T60] __kmalloc_noprof+0x471/0x7f0 [ 726.756314][ T60] fib_create_info+0x172d/0x3210 [ 726.761764][ T60] fib_table_insert+0xc6/0x1b50 [ 726.766608][ T60] fib_magic+0x2c4/0x390 [ 726.770835][ T60] fib_add_ifaddr+0x3fb/0x5f0 [ 726.775500][ T60] fib_netdev_event+0x382/0x490 [ 726.780337][ T60] notifier_call_chain+0x1b6/0x3e0 [ 726.785437][ T60] __dev_notify_flags+0x18d/0x2e0 [ 726.790491][ T60] netif_change_flags+0xe8/0x1a0 [ 726.795421][ T60] page last free pid 5912 tgid 5912 stack trace: [ 726.801745][ T60] __free_frozen_pages+0xbc4/0xd30 [ 726.806876][ T60] __put_partials+0x146/0x170 [ 726.811559][ T60] put_cpu_partial+0x1f2/0x2e0 [ 726.816317][ T60] __slab_free+0x2b9/0x390 [ 726.820772][ T60] qlist_free_all+0x97/0x140 [ 726.825381][ T60] kasan_quarantine_reduce+0x148/0x160 [ 726.830874][ T60] __kasan_slab_alloc+0x22/0x80 [ 726.835739][ T60] kmem_cache_alloc_noprof+0x367/0x6e0 [ 726.841211][ T60] getname_flags+0xb8/0x540 [ 726.845710][ T60] do_sys_openat2+0xbc/0x1c0 [ 726.850306][ T60] __x64_sys_openat+0x138/0x170 [ 726.855173][ T60] do_syscall_64+0xfa/0xfa0 [ 726.859681][ T60] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.865567][ T60] [ 726.867877][ T60] Memory state around the buggy address: [ 726.873489][ T60] ffff888028059180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 726.881539][ T60] ffff888028059200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 726.889590][ T60] >ffff888028059280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 726.897644][ T60] ^ [ 726.903274][ T60] ffff888028059300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 726.911327][ T60] ffff888028059380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 726.919381][ T60] ================================================================== [ 726.936874][ T60] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 726.944117][ T60] CPU: 0 UID: 0 PID: 60 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 726.953408][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 726.963460][ T60] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 726.970755][ T60] Call Trace: [ 726.974039][ T60] [ 726.976966][ T60] dump_stack_lvl+0x99/0x250 [ 726.981548][ T60] ? __asan_memcpy+0x40/0x70 [ 726.986227][ T60] ? __pfx_dump_stack_lvl+0x10/0x10 [ 726.991419][ T60] ? __pfx__printk+0x10/0x10 [ 726.996006][ T60] vpanic+0x237/0x6d0 [ 726.999987][ T60] ? __pfx_vpanic+0x10/0x10 [ 727.004481][ T60] ? preempt_schedule+0xae/0xc0 [ 727.009322][ T60] ? __pfx_preempt_schedule+0x10/0x10 [ 727.014688][ T60] panic+0xb9/0xc0 [ 727.018405][ T60] ? __pfx_panic+0x10/0x10 [ 727.022815][ T60] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 727.028703][ T60] ? __mutex_lock+0x147/0x1350 [ 727.033465][ T60] check_panic_on_warn+0x89/0xb0 [ 727.038409][ T60] ? __mutex_lock+0x147/0x1350 [ 727.043181][ T60] end_report+0x78/0x160 [ 727.047437][ T60] kasan_report+0x129/0x150 [ 727.052040][ T60] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 727.057940][ T60] ? __mutex_lock+0x147/0x1350 [ 727.062710][ T60] __mutex_lock+0x147/0x1350 [ 727.067297][ T60] ? __mutex_lock+0x5bb/0x1350 [ 727.072060][ T60] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 727.078302][ T60] ? __pfx___mutex_lock+0x10/0x10 [ 727.083327][ T60] ? __lock_acquire+0xab9/0xd20 [ 727.088192][ T60] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 727.094257][ T60] ? process_scheduled_works+0x9ef/0x17b0 [ 727.099966][ T60] ? process_scheduled_works+0x9ef/0x17b0 [ 727.105674][ T60] process_scheduled_works+0xae1/0x17b0 [ 727.111222][ T60] ? __pfx_process_scheduled_works+0x10/0x10 [ 727.117285][ T60] worker_thread+0x8a0/0xda0 [ 727.121876][ T60] kthread+0x711/0x8a0 [ 727.125942][ T60] ? __pfx_worker_thread+0x10/0x10 [ 727.131043][ T60] ? __pfx_kthread+0x10/0x10 [ 727.135628][ T60] ? _raw_spin_unlock_irq+0x23/0x50 [ 727.140816][ T60] ? lockdep_hardirqs_on+0x9c/0x150 [ 727.146008][ T60] ? __pfx_kthread+0x10/0x10 [ 727.150601][ T60] ret_from_fork+0x4bc/0x870 [ 727.155193][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 727.160409][ T60] ? __switch_to_asm+0x39/0x70 [ 727.165198][ T60] ? __switch_to_asm+0x33/0x70 [ 727.170062][ T60] ? __pfx_kthread+0x10/0x10 [ 727.174761][ T60] ret_from_fork_asm+0x1a/0x30 [ 727.179553][ T60] [ 727.183158][ T60] Kernel Offset: disabled [ 727.187609][ T60] Rebooting in 86400 seconds..