last executing test programs: 1.888367543s ago: executing program 0 (id=695): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r1, 0x3}, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071118200000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=@newtaction={0x48, 0x5a, 0x1, 0x0, 0x0, {0x2}, [{0x34, 0x1, [@m_pedit={0x30, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x7d, &(0x7f0000000080)={r4}, 0x8) 1.887319882s ago: executing program 1 (id=697): r0 = socket$netlink(0x10, 0x3, 0x7674d6a4c30ad483) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x20000084) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000200)={@empty, 0x0}, &(0x7f0000000240)=0x14) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000180)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffff5}], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x5, '\x00', r3, 0x0, r4, 0x8, &(0x7f00000002c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x7, 0x8000, 0x422f}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x4, 0x4, 0x6, 0x7}, {0x2, 0x5, 0x7, 0xa}], 0x10, 0x3, @void, @value}, 0x94) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, 0x0, "e64ab4658bd952d66f5d65d911be03260c91c771d9a097ef239d33d41c824cef", 0x5, 0xfff, 0xfff, 0x3c}, 0x3c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000480)) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000004c0)={r5, 0x1ff, 0xc, 0xd0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r5}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0xd, 0x7f, 0x3, 0x20, 0xffffffffffffffff, 0x3, '\x00', r3, r4, 0x3, 0x4, 0x0, 0x1, @void, @value, @void, @value}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000880)={r4, 0x7, 0xfffffffffffffff9, 0x3}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)=r5}, 0x20) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0xfffffffb, '\x00', 0x0, r4, 0x2, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0xffffffffffffffff, 0x3, 0x18}, 0xc) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xdf07, '\x00', r3, r4, 0x2, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40)=@o_path={&(0x7f0000000b00)='./file0\x00', 0x0, 0x4010, r5}, 0x18) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x7fffffff, '\x00', r3, r4, 0x5, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r17 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x0, 0x25, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x9}, @jmp={0x5, 0x1, 0x0, 0x8, 0x2, 0x100, 0xffffffffffffffff}, @map_fd={0x18, 0xa, 0x1, 0x0, r8}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000780)='syzkaller\x00', 0xdca5, 0x6, &(0x7f00000007c0)=""/6, 0x1e00, 0xa, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x9, 0xffff, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000c00)=[r9, r10, r11, r12, r13, r14, r15, r16], &(0x7f0000000c40)=[{0x4, 0x2, 0x0, 0xc}, {0x0, 0x2, 0x9, 0x4}, {0x2, 0x1, 0xb, 0x2}, {0x2, 0x4, 0xe}, {0x2, 0x2, 0x2, 0x6}, {0x2, 0x4, 0xf, 0x7}, {0x4, 0x2, 0xd, 0x5}], 0x10, 0x1, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d80)=r17, 0x4) setsockopt$netrom_NETROM_N2(r6, 0x103, 0x3, &(0x7f0000000dc0)=0xffff, 0x4) r18 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f00)={0x3, 0x4, 0x4, 0xa, 0x0, r13, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0x4, &(0x7f0000000e00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcb83, 0x0, 0x0, 0x0, 0xa2}, [@exit]}, &(0x7f0000000e40)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x2, '\x00', r3, 0x25, r6, 0x8, &(0x7f0000000e80)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000ec0)={0x2, 0xd, 0x7ff, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000f80)=[r7, r18, r15], &(0x7f0000000fc0)=[{0x0, 0x5, 0x4, 0x5}, {0x0, 0x3, 0x3, 0x7}, {0x0, 0x1, 0xb, 0x9}, {0x5, 0x3, 0x6, 0xa}, {0x5, 0x2, 0xa, 0x3}, {0x1, 0x5, 0x8, 0x8}], 0x10, 0x4d29, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001100)={'tunl0\x00'}) socket$pppl2tp(0x18, 0x1, 0x1) socket$pptp(0x18, 0x1, 0x2) r19 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r19, 0x6628) 1.779553702s ago: executing program 1 (id=700): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x4) ppoll(&(0x7f0000000200)=[{r3, 0x2008}], 0x1, &(0x7f0000000280), 0x0, 0x0) r4 = getgid() r5 = getpid() r6 = getuid() r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x1a8, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r10}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x11, 0x10d, 0x0, 0x1, [@generic="905176c518740da397a9423603"]}]}]}, 0x3c}], 0x1}, 0x0) r11 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000000b00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000b80)="cd5208f733cff40ba51619a6e50933482673c412f9da85f20ce679c9e489e696586cbbaeeb17cd122f5aca4a19722ab254a08ef306d6a1178bf021f8fe2d452773c873ed766b226d56a411e6f8ae9d017c58044b314eb53bb4aa7d4f63f0c5dffcfc14f69fa33116b1f4ba788b9d532af61ee897389240a18822a19c3988fc2d0fbc19ad6c0177a2854488a9078519347ca5949bb77147dd7fc10a7164c1e53370", 0xa1}, {&(0x7f0000000c40)="c178286114f9f824247dedea6209c5c6daa2131dca53ca584f7249cbff0e0925119cca0bab958c3b3b894e6a27c8432127cfbac7198d34655d3d", 0x3a}, {&(0x7f0000000c80)="ae9e272669bcf612cdb27142fb0145d40ad5de0c2e172aefeb95dbc45aa89f7bb603edbaea0159fb2a1f0b83585fa3bba9982452eaf2d69247338b3f830935e915fed3d78d7b75554b327a030e8f7fa448e2320328ea700c5babeb3d3b12f3efc9d5563baeb8d1cc0c502b9844d2d492d5307046e58b96ebe04e54819030ece286b49092e7f44ad7559f7a01ffc3988ebfefbfa04172d90aacbff92d1558405aa8b4ec7f5efddb185ae0169dbb18c261e657656fdd748bd43756c29b0f479ceb0c0fc13c1d11410d1c5daff6333b34516c64bc41c67f84fdf861adf408d40ffd0fd70e6ce8e845cd2c36be830cb3de37679088abf8aed146ab89f384131bea3d1e2a95c61810a3af1981416df98ace82740e85455dcf16ca805de6dd2f3e6d0ed428793971eade4f849698f736db295567673911f0dd6a822f99fca334705ff721836f42dbf3361a3df1e131310a6d57597aeb3fa3d8f444235aa187575047f1fa3bd181c843b2111ff65bc91413abb6f0ebacd27ac7032674d83ae31ee69f279acc64403bf030ac0587345eb4d85660a698ae6b18da0031501f8403e7951b044a6ddbd66e54a234d4f7d86b58c8ade1e99bbac3207588cc3952de43e3e28b8bd4d4cdd0924bca30e61d4e703811c3f4f057400ff258c6eb8b6cc0a0bb1237306662046073dd3179b871ed4b4833ca2ee5a610a0ac8970686fc87046803ac29a5114fd89239b3415cf5591789d489890d1bae2060df68f65ba8be502532cfa1f51aed0fe6dbee410c2a58263ca1aa077d39b031c4d8fb43119dde50a4002db385e8c78d6dcfc89ff0e6bd486f19f97283a42aa3ffda20dc34ea24f1f6caed51cf681a155fb9aeac2f7949d9c899d2552c6d848ff99f3329ea6fabab672b48e62b9dda696d4d4c22e46805c9342c2a148bfbf1f4f33128378df91c6b867eac26c5e7a703be68d304c63ca239293663963e67d7003c1de61fde0bf35147e4bb777b640d7697bf241951c65eb2215b77461bc451bb35b2837ab7e3b9fdea125f34aa881e928043d301c8b056ebf6353a1f620250345d34de7de38b19e02a4898e72e2d1266e9e88a1cb4885662c5e439ba9f2b684dbfdaf706b6c91f0a1c03a34a49f93f600184f03acc26981193e877d67840df0967ef1bbdd716f9a8a38da17af4fe107eb04925ce168d861f1be1f3a42c9e6377184ad43358802f0e7a2dcdcb653cf09c34fa0522644901048a93b31492a7cc6fe2512646b20de71ccdbf6abfa7a3f12baea7742b7343ef1f1919b09f5c9f3ef96743e56f2c743239003a2bac3cb2f01fa42692cc069c1c2f7c2d5411ce74ab91413dad253a604527be3da58339eb8fe394673ef80f33c894a272a02a763631252307f19b66e57480a08b5df0f2e218656a38cd43d32b39953b7f7859ae356ec0202046e813c100855547e58ec64fbfc71997581bbd5111cf7ca526a770e9d9547e32654db1d27c9490eeace6f7dc0871627c8df5788bb0229b2842f24fcdfa3e858de3b8e18820a3d2b75b8e4ca886e6373af6a734e5ebbe2be0209fc565f82b47475fbccaad81fe12c81ba8b57c6705b0db8c3128a197b8e303a6cae7036d617b9de060cb22a926374a45a82f8fa7a34bc0a222711a2413ce67b6e7f957d5c5f499ea85c94194932f36dd3678242c9cb93fd3d655e9cc915309bcbf506766eff9d502d7b63b9e02fa597f1389e88a0b5affe9dc9e743a0db18082c1e0ce7b8972c7911957baef2fbfeb68cbb8509f9e626f3ad5f36caea8bccaafe9ecf4d70b9692605b4cef86b013e7964e3145391d28f3250d24c5fa29bbc8ee23f69d4febd50fa73627b0a259b4282c920b8e506103925bc7140094adf01834b8ab59973e33e5e735e932899a34ea6cfd7a5e608a72588fbc69387426e91cd6cd809cdcd41b05b8da324ec615f6c4c75ecce7ccd203c1640445110047d25c72aad42dca26e0a7d232fa37bbb3bc864df0b416637ee66bd8ac8763343d0ebf20bde90e891f82678e79496ac2d7a16fd2bbd619c6960f2a57f1135f60b07522db09c4ebab34d79d632c6674e846cf20c511fc40f3abda0ef76710b73018a6ad6e11cb46587c5c7136abda759107cd2c402a75e1fa1a20e6f3045d46d9f849608ab56af75a06e247de575a25a5bed2e876ec9cdd147b32296e76e7590ef2ed67f954c2ece68a5ad6185f7d69eda867614c181f7670d45313f7b669f04544dc5442a2c84ca38378f52db2ac989135394e09379ab3bf01770139ba5122c7c519bd440b22e91e80aab940a37d79cdc96ede9b9d0d3063e67b6321663b541e42cb1d6c4848963c3b14791f15e6b1b5a1368f337a86dc9f2c936ead4aceaa5a56dc0f788dbebe44f8fcda14ba34a80716f46a3d6d567fe4b05a891ec35f3528feb7d20fa811de351ddd5ed7229e954d837880cb90863be15c0063de8bce0e2dcb4a75ebac1569b26f49ca6fb299c9ed6762ec558d9172e9943d0ea3a7b60e996f6f841449825ba7eea40b7cbc55f1d9f93f26a702d987941336b62e244116c6f8b89fa7c74403cd0e40350114a2855bf95c6c8b834d4ce8317a34a2a6d3b777af38fa333ce68afff3abf42d5f61592ff53035200b0357eb15e2a3db212f5b314e0fe927f62c71cf4593e75c76a9e7d2ebacaffb75506c064773cfc6656967a389924cf2922a5d2c48e622a94916ddbdd26ae7bf77c6a9074fcd603033167b5fa5b97b47eec41e1ad3128a94967d48449f3138fcf2ec2f38b7518c868df2a8dee023cb37ce0a2343ffb603634112255b1fb37f30cc9feea048ef31531c33aeed2fdfeb2b9fbe4052c203e2a6d8c389b1ea419866afc288d898cb1276e715cdf6fc2693aa4e8c1a827bfbcb77ed1278d63adf423ffa5348e1b7090c0c800bc6a25f1c0a207bee84cc6bb0a9d28499295d86298da1941837bf970d37ac11dbd29df2a6ba7e46c995c944a2b0d08d2c74cf34db8924a92ed0a510ea9f088a963b516955bafa9b025d6ecd6dc10b3546c51a143676c5c4d330ecf17ef26e43cfa8eab043a604ce5236e6612d9c2f43df47100aeaee650218ab318f5cedd903496c228a26bd9a77b47a2c8044fb12dccbb7b098f3b2a2e2a2831f91d44c34f5b9451d5e4c75441fec0aafe370a22ff3f7b0723dbecf58450e7e19cf62e7799e952068163d2fb77962cc19c4b1fe5739ddf94023af1365b27c5d7ce620b13d65732dd08de9ca26256e0771d562efdcbb9f2cd4eb5663f0f0be60daed050a8ed7223b679e0cdeea51c89866cf05e02eab25494a2adfe79aa6a7cfd0dcdf8f35a082c6e4a80c1539b6fdca96f9616cfa35dbb94a00eefc481fb9b329f6434668968bb5d42eb8efc2a704d6cf592c675b6e7c703480900cbdd412967095738be54c5c0dcdd2a3de3e09d8904f3d36701700c92ba2371cdf29421b4a685095d043030b46f648f52e2b5b9d189eed837a4d3a6c695162cf56c89ddf9f901f34201c42380cf5c0721bb8df5461c8a38920b2deed9c20ba0e47fa947bf24223b34707896b9b4a148ab15172922ab70fe20c20907c52f2d30dec978e127a0be724f2317db52d9ef99ee6f229c087208f60c547babdc7bd11c6d6cd0244a6bed351f96ddf646e1d08b69e220b24026080f0685b910c7d5b2b0d3d9b7a3078e145f068fc624a12791a160b7758f70a91e4bf7657f92a34a1363072b4fc3fc663621bd8541003d2b57094894ad43a4c3f15c1bb337b1f61f0a370f8da25ffe68dc85528f767252ecf508ab078ac58ef02214f56108e75a993e7504562463188375c74d291e2e3671e48f19b15e2d7d48f1b11765d6f87ca8bc1d219c74a2c3229797c8bf4e375bdd2b71db9e1cafb3e5cfdd03f55630742112c3737e08c10416347a5e7648287c84c745013065ccb52536fbfe28ad6d07ba634f2ffb36a2dd3ba03fdcb1f79fcaedd2990a8645bf84efa50d237cefd2565b682bc41c994ace028f4dba5cb010fcb25f9870ae6a90cf48a3f7581ed658fd6abcbc80ed320793dc1c3686a06f0c16493884ac4b6fe464a3da34457a2ca5b9a36182d7bbdf3a663e0c295fcebdb26fab28b0056982303b19bc651e883e33ce8ce1bd49589f93505293420408265b676f00d726b5aa2ce56a593a883d41cb06f49af382567106c29bbd1a084f693455a519ffc9a0c6010d87198b96f187dac3d680d4539aacf9601cac2617a0ce9256bf944b194b0cc10eb8b55d0d7ea7153ba3e62b3db8e04517bd3d089c58ba170d514c50a7531b91c5f7e99c7bcf83dae29ff69437955119733b2e94ff2e5962dc6c49b531e4b4072bcb13d7e3b057bd34e019c80593633fb885e2e70fe8a06fa1b2638ae65112e067593a2258e84a89d30852431819f529b5f183d767d1b5900d9fb368d1981755b304db3cf990a7343c447a164e242c9685231529575c567f7fa93c50f2fa58e8ac6f35187eda79992d40c8951cd68ecc9b284fdbfcfb7e85149e174a9f6a0ae0b959629ac7be18ee301a20d4b1de59b1baf9ca60ca4f62e3f29895faabf7e6e1b0e0e7b58087e20c7f6908202b1863c26744a8d611d8f1c4051ae0c86800dd51bd5279c7d94f51c4b260f6a3d9bbaa0b2aeb3e08ec83f0f90230ac9232c77e6e3539d23269a43f15b04cc750a6ccb734153abe36c699fdb94cc72f104696c3ce6265ed46f9d627d50a99896b51a687782ac363db9732e7b29a5f52f566214317258863e6dc66181491b476d609ef1316f69cd39899a011c60e9a4d53747ee6ab4eeced8100153fbc4a70eee263083af4915343b7edf02f72220fdd849c94e3b1862a3139a6472eacdbe8d4006d8c4426ea3cbcf0742eea764c8cd9384486675d153e1fa8fad2547cefd15a9837d2719ebdd590e83a36cb2f37699ecc1f21c2be54942e0fdbf7f51b86531b6cb68a324c20bc0a47833d3951b8a7190e8aad489edc24a9c75f500bbf51e6d7292008942ea450947dd000aab934b2381c5883e790768426c6452e4ef7ed9c242fe9a4ce410af354da81d3d995baca4c90f06dcdc5bb2ec655284d73c190cc9c82abf29023eb0e8b04e6c8697d949ee4a3b75e689631e021705a3f482256818b8fae47675ad56290ff3e967d2665dd041e2a2480d90ddf384e681c7bf466042f85e9c5975ae77d80edb059771c29942520c7180f66c0a52b276744ae64523bd7e21800d39c376811412146b6d05f3e73bb527f6cac7f245f15d9beb8bd7e9fd0f2523ab01c4f9816877aaf63611ba2392c314e2825a298128a78e26a0773b17fedf14cb848e16abd856c317674c5c3a40d660f72debc56d48821fdd76792803d36e4187ae4c72c00a6c3ddd5205e693077932be84e8706ea5c3ce9eedbd45486eafbb135a28a41e4f015a81240908297cf26cf857e22f2a8d46263df58fec3eb77a95430350a6405d82e191279db7095048389444d7664d66553388c1bde8b42be5f626a92816fe80ef44b384a520213bd572cb69d94a795faa37eac2e732d2eabeae2589613cc16fee865d6c7bb9515751cad94fabfd4c37ac3d72e82b5b3ff76c64e913a2a2481c3594ff748c4a4313e045b18f8249a4feea73a5a4884d6157caa6595634953bdf8b6ea85c658ccf3447039e6ff093c1a169cb96cadd10a859d346c43b978e64fff7aa8548d1651361c81d5fd3e7312a363cc9ade515d9ac41199ab355d1b784649b60c7323f36cb982bd4b768f23e6d4fa79175ac5f1b802684a05caa52417ef2592071826447321a50bbe6f8936b851c0e70bc49894abee4e5a581ca6", 0x1000}, {&(0x7f0000001c80)="2b129cb5980018d27525f2f30c59b42c642839d96360b39ab60d17b7e89e0ae2a665fef2c1cd17a89b4147f2e017a8362e3d424225e77731fc", 0x39}], 0x4, &(0x7f0000001d00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r3, r0, r3, r0, r7]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r11}}}], 0x90, 0x44880}, 0x4080) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@private, @dev, 0x0}, &(0x7f0000000040)=0xc) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e000000000000000000140000001100", @ANYRES16], 0x80}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0e88a83c00810000000800"], 0x0) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r15, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40050) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000006c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000740)={0x390, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3ff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8c0d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x205}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x90}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x76f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4ce8e137}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9aa}]}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "1e9524e883469efcd6ea6a49999343f0f1395694d16fce27ad45ea82f1bb733c4ea9"}}, @TIPC_NLA_NODE_ID={0xc, 0x3, "c1a4551fa2ed3fd8"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe53}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa20000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010101}}}}]}]}, 0x390}, 0x1, 0x0, 0x0, 0x1}, 0x20000090) setsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x40}, @local, r12}, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r13, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xec, 0x3, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x9, 0x939d, 0x7]}, @CTA_STATUS={0x8}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0xa8, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x28}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010102}}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4041}, 0x8010) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x30, r1, 0x101, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.777698511s ago: executing program 3 (id=701): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x1a, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)={0x1c, r1, 0x48212b8952c3aff5, 0x70bd22, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) 1.680753521s ago: executing program 1 (id=703): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x97}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0xc, 0xb}, {0x1, 0xb}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0xa, 0xd, 0xe, 0x7, 0x10, 0x10, 0x5, 0x9, 0xa, 0xa, 0x5, 0xb, 0x1, 0x11, 0xa, 0x10], 0x0, [0x2, 0x200, 0x9, 0xc810, 0x2, 0xc082, 0x7, 0x5, 0x5, 0x0, 0x401, 0x1, 0x0, 0xb, 0x80, 0xf479], [0x0, 0x5, 0x8, 0x0, 0x8, 0x2, 0xa, 0x8, 0x2, 0x1, 0x7, 0x7, 0x1, 0x944f, 0xe4, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl0\x00', r5, 0x0, 0x8, 0x8, 0x7f, 0x42, @mcast2, @remote, 0x0, 0x20, 0x8, 0xffffff3f}}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x3c, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c181}, 0x0) 1.617893145s ago: executing program 3 (id=704): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x34, r0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x850}, 0xc000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000002140)=@delchain={0xa18, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_fw={{0x7}, {0x8bc, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'vlan0\x00'}, @TCA_FW_POLICE={0x428, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd9, 0x6, 0x3, 0x80, 0x1, 0x8b55, 0x100, 0x7, 0x0, 0x5, 0x5, 0x0, 0x3, 0xfffffffc, 0x7ff, 0x7, 0x15, 0x80000000, 0x1000, 0x7f, 0x4, 0x80000001, 0x3, 0x9, 0xb3, 0x7, 0x9384, 0x7fffffff, 0x5, 0x6, 0x9a1, 0x95b, 0x8000, 0x37c9, 0xfff, 0x800, 0x8, 0xffffffff, 0x1, 0xfffffffc, 0x7, 0x9, 0x2, 0x0, 0xa, 0x588c01df, 0x6, 0x80000000, 0x800, 0x8, 0x2, 0x6, 0x5, 0x1, 0x2, 0xaf0, 0x9, 0x41, 0xc, 0xffffffff, 0x3, 0x4, 0x9, 0x1, 0x2, 0x401, 0xffff0001, 0x49, 0x0, 0x4, 0x71fd2c24, 0x9, 0x775, 0xa26, 0x9, 0x4, 0x0, 0x7f, 0x7f, 0x2, 0xa9b, 0xe, 0x43, 0xa, 0x8, 0x7, 0x8, 0x1, 0x4, 0xc2, 0x401, 0xffff1896, 0x750c, 0x2, 0x7e472521, 0x7, 0x8, 0x4, 0x9, 0x4, 0x2, 0x4, 0x3, 0x7b, 0x2, 0x7fffffff, 0x1, 0x3ff, 0x1, 0x3, 0x5, 0x24, 0xf0d, 0xda, 0x3, 0x5, 0x0, 0x400, 0x4, 0x7b3, 0xfffffffe, 0x4, 0x6, 0x1, 0x71, 0x1000, 0x3, 0x8, 0x8, 0xda, 0x3, 0x1, 0xfffffff5, 0xb52, 0x4, 0x2, 0x1, 0x10, 0x80000001, 0x2, 0x8, 0x0, 0x1, 0x8000, 0x6, 0x10, 0x9, 0x8, 0x2, 0x9, 0x1, 0xfff, 0x80000000, 0x40, 0xf7, 0x6, 0x3, 0x2, 0x8001, 0xfff, 0x4, 0x4, 0x10001, 0x101, 0xcb74, 0x4, 0x98, 0xae, 0x7, 0x9, 0x7, 0x5, 0xf9b, 0x1, 0x6, 0x4, 0x3, 0x2, 0x400, 0x8, 0xff, 0x4, 0x1, 0x8, 0x0, 0xfffffff9, 0x7f, 0x1, 0x8, 0x1, 0xc, 0x9, 0x10001, 0x9, 0xc35, 0x1, 0x10, 0x5, 0x5383, 0x6, 0x35f, 0xf9a, 0x1, 0x0, 0x2, 0x4, 0x549, 0x87, 0x0, 0x8, 0x0, 0xff, 0x74c, 0x6, 0x2, 0xe52, 0x7, 0x1, 0x1, 0x10001, 0x0, 0xec9, 0xffffffff, 0x5, 0x321, 0x9, 0x1, 0x80, 0xa, 0x7, 0x3, 0x6, 0x0, 0xffffffff, 0x2, 0x80000000, 0x0, 0x9, 0x9, 0x48, 0x0, 0x0, 0x5, 0xfffffffa, 0x80, 0x0, 0x80000000, 0x4010000, 0x9, 0xffff, 0xfffffc01, 0x5, 0xab0, 0xa, 0x4, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}, @TCA_FW_INDEV={0x14, 0x3, 'vxcan1\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x5, 0x3}}, @TCA_FW_POLICE={0x4}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_POLICE={0x454, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x80000000, 0x101, 0xfffff001, {0x4, 0x0, 0x2, 0x3, 0x8001, 0xfffffff8}, {0x3c, 0x1, 0x3, 0x81, 0x3, 0x9}, 0x1283cff5, 0x6, 0x1}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x92}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x17c000, 0xe979, 0x6, 0x9, 0x2, 0x2, 0x1ff, 0xe00ab945, 0xb0, 0x81, 0x401, 0x32e, 0x8000, 0xfff, 0x2a, 0x2, 0x8, 0x0, 0x0, 0x69, 0x2, 0x2, 0x7, 0x0, 0x8, 0x2, 0x2, 0x2, 0x0, 0x5, 0x7, 0x8, 0x5, 0x1, 0x6, 0x38, 0x1d1, 0x179a89c2, 0x3, 0x9, 0x7, 0x7, 0x9, 0x5, 0x5, 0x0, 0x9, 0x2, 0xc7, 0xffffffff, 0x0, 0x20000000, 0x20a8, 0x38, 0x4, 0x4, 0x1, 0x7, 0x200, 0x2, 0x6, 0x100, 0xfffffffb, 0x6, 0xd, 0x4, 0x10, 0x10000, 0x2a3392e1, 0x59fb, 0x168, 0xe6, 0x80000000, 0x6, 0x100, 0x8, 0x7, 0x1, 0x4, 0xc0000000, 0x9, 0x0, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x9, 0xd0, 0x4, 0x1, 0x10, 0x5, 0xffffffff, 0x0, 0x0, 0x5, 0x6, 0x4, 0x2a1a, 0x0, 0x12dc16a7, 0xfffffffc, 0xfffffffe, 0x3, 0x5, 0x9, 0x40, 0x7, 0x5, 0x9, 0x9, 0x1, 0x6, 0x5, 0x1ff, 0x2, 0x0, 0x2, 0x3, 0x80000001, 0x8, 0x400, 0xd, 0x3, 0x9, 0x8, 0xfffffff7, 0x401, 0x32, 0xa, 0x80, 0x71b9, 0xfffffffe, 0x2, 0x1, 0x7fff, 0x8, 0x5, 0xfffffff0, 0x3, 0x7, 0x0, 0x8, 0x7, 0x2, 0x4, 0x6, 0xd63, 0x3, 0x172, 0x6, 0x400, 0x8001, 0xfffffff8, 0x7, 0xffffff49, 0x4, 0xf, 0xff8, 0x8, 0xe, 0x3, 0xbb, 0x6bb47233, 0x9, 0x3ff, 0x7fffffff, 0x1, 0x19f2, 0xee, 0xe8d, 0xfffff001, 0xa3, 0xff, 0x81, 0x6, 0x32d3, 0xfffffffd, 0x4, 0x7, 0x5, 0x0, 0xc84c, 0x68, 0x1, 0x6, 0x80000001, 0x7, 0x2, 0x6, 0x80000001, 0x5d8e, 0x0, 0x8a3, 0x7, 0x6, 0x0, 0x401, 0xffffff81, 0x8, 0xfffffffe, 0x2, 0xe03, 0x7, 0x5, 0x9, 0x0, 0x58, 0x85, 0x1, 0x3, 0xde9e, 0xb, 0x7fff, 0x7, 0x70474db0, 0x1, 0x5, 0x4, 0x7fffffff, 0x7, 0x4, 0x401, 0x1, 0x50, 0x3, 0x101, 0x2, 0x3, 0x81, 0x1, 0xe, 0x7, 0x4, 0x10d7b04c, 0x5, 0xffffffff, 0x10, 0x0, 0x17, 0x6, 0x7b59, 0x4, 0xff, 0x1, 0xc, 0x2, 0x4, 0x8, 0x2, 0x2, 0xf000, 0x8001]}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x108, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0xf4, 0x6, [@m_mirred={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x31, 0x6, "05e6cb745efb5818279b291a7d56a99d728d0d3c5750442cdd89714a7135052ff6aa167b6d47ccb82042677f3f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x90, 0x20, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x5, 0x10000000, 0x3, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3, 0x10000000, 0x8, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1336e5ff, 0x9, 0x6, 0x0, 0x1}, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0xa18}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000000)=0xb88, &(0x7f0000000040)=0x2) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x7ff}, 0x8) 1.554209078s ago: executing program 2 (id=706): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) sendto(r3, &(0x7f0000000080)="378e32609c3481d535ae90fed8163bb268a0dbbee5", 0x15, 0x2004008d, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x6, @empty, 0x7}}, 0x80) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x1f8, 0x1f8, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x35}}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="3ff825ec284a", @mac=@broadcast, @private=0xa010102, @rand_addr=0x64010101, 0x5, 0x11}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=ANY=[@ANYRES8=r4], 0xdd12}], 0x1, 0x0, 0x0, 0x24000004}, 0x4c050) 1.445954248s ago: executing program 4 (id=707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r1, 0xb97534d5fe9700cf, 0x4, 0x25dfdbff, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x36}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaacaaaaaaaaaaabb0800450000300003000000019078ffffffffac1414bb08009078ac14140045080001006600ff00730000ac1414bbac1414bb466c73734cb5ab3d370c50404b1f9b6b6af94cf6826b6d538d8987c168db021b5b40021caccad0e0a3633518b175d2d95b9581fb416a4c4cef86a0a48ea85e882b43f1963768ff0a454d73f99a775c9c4adf0f4bfb0c41c3f244896d7dcec50000b480446e74dc78746b1098518f2926c62c65545c5f78fe088c9f9411a21436b62b8a1e99f8bc5d316ce15e2494131cc2171538f1a212e01f5aabb980f7f027a7ecf1d2bbcb6843a5a7b233"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) unshare(0x20000400) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r8}, 0x10) vmsplice(r9, &(0x7f0000000280)=[{&(0x7f0000000240)="80", 0x1}], 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=r7, @ANYBLOB="00f2000000000000240012800b0001006272696467650000140002800800080088a8"], 0x44}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r6) accept4$unix(r4, 0x0, 0x0, 0x800) 1.43413908s ago: executing program 3 (id=708): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000000034e85000000bb0000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000000800130000170000080014"], 0x4c}}, 0x0) (async) unshare(0x8040480) (async, rerun: 32) pipe(&(0x7f0000000040)={0xffffffffffffffff}) (rerun: 32) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x5760, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async, rerun: 32) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) (async, rerun: 32) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000100)=0x8, 0x4) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001b00)=ANY=[@ANYBLOB="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", @ANYRES8=r0, @ANYRES8=r1, @ANYRESOCT=r4, @ANYRESDEC=r1, @ANYRESOCT=r1], 0x48}, 0x1, 0x0, 0x0, 0x804}, 0xc004) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a00)={0x24, r7, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200000}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.23698506s ago: executing program 2 (id=709): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000020c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, r2}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r2}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$netlink(0x10, 0x3, 0xb) r5 = socket(0x22, 0x2, 0x24) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r6, 0x0, 0x10, &(0x7f0000000000)="170000000a00020000ffbe8c5ee17688a2002b00010100000057fc5ad90200fb6a880000d6c9db0000db15d088bd8b7002300e00d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c805bbf9315033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e60500", 0x105) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000003f9f0fbd4af7817ff7b41fc87b8934a05161b90fe38f3471c11dc45b32a27568279eff7c1dbcc91976f164996777d1070892428bc3bbc2f6877db69dfb898dfd68e78c75239b1ae84e0fbdbfcc059df3"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x2000000000000284, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000001818200000", @ANYRES32=r7, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) 1.161996954s ago: executing program 0 (id=710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0xf) (async, rerun: 64) socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) (async) shutdown(r1, 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xffffdffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x67, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4020) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r4, &(0x7f0000000340)="08000000010000", 0x7) 1.137856125s ago: executing program 1 (id=711): socket$netlink(0x10, 0x3, 0x8000000004) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x8000}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x800, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x1b, 0x5, 0x600, 0x238, 0x238, 0xffffffff, 0x0, 0x148, 0x530, 0x530, 0xffffffff, 0x530, 0x530, 0x5, &(0x7f00000002c0), {[{{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x22}, [0x0, 0xff000000, 0xff, 0xff], [0xff000000, 0x0, 0x0, 0xff000000], 'macvlan1\x00', 'wlan1\x00', {0xff}, {0xff}, 0x6c, 0x80, 0x2, 0x8}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@eui64={{0x28}}, @common=@frag={{0x30}, {[0x1, 0x9], 0x2, 0x3b}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x4, @ipv4=@loopback, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x66, @icmp_id=0x68}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0x0, 0xffffffff], [0x0, 0x0, 0xffffffff], 'sit0\x00', 'ip6gretap0\x00', {}, {0xff}, 0x2c, 0x81, 0x0, 0x29}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv4=@loopback, @ipv4=@loopback, @gre_key=0x3ff, @icmp_id=0x64}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@srh1={{0x90}, {0x5e, 0x3, 0xfa, 0x9, 0x4, @mcast2, @private2, @private2, [0x0, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xff, 0xffffff00], [0xff, 0xff, 0x0, 0xffffff00], 0x40, 0x40}}, @common=@ah={{0x30}, {[0x4d2, 0x4d3], 0x7, 0x7f, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv4=@dev={0xac, 0x14, 0x14, 0x37}, @ipv4=@private=0xa010102, @gre_key=0x7, @icmp_id=0x64}}}, {{@ipv6={@local, @empty, [0x0, 0x0, 0xffffffff, 0xff000000], [0xffffffff, 0x0, 0xff], 'vlan0\x00', 'netdevsim0\x00', {}, {0xff}, 0x2b, 0x9, 0x1, 0x1}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x1, 0x3fa3], 0x6, 0x12, 0xa8347d594b10ff55}}, @common=@eui64={{0x28}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@private=0xa010100, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @port=0x4e23, @icmp_id=0x66}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x30, r4, 0xb97534d5fe9704cf, 0x70bd28, 0xfffffffc, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7}]}, 0x30}}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x9, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}}, 0x0) epoll_create1(0x80000) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x8, 0x5, 0x6, 0x80}, {0xe0a1, 0x1, 0x8, 0x2159}, {0x1, 0x6, 0xfa, 0xd9b}, {0x3ff, 0xc5, 0x4, 0xffffffff}]}}, @TCA_BPF_ACT={0x4}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xd}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8050}, 0x20040054) 1.137611104s ago: executing program 3 (id=712): r0 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1={0xff, 0x3}}, 0x1c) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)={0x1c, 0x1a, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x300}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) 1.090914268s ago: executing program 4 (id=713): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x58, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_KEYS={0x28, 0x51, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "dba06c8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT={0x4}]}]}]}, 0x58}}, 0x4800) 902.083287ms ago: executing program 3 (id=714): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000080)=@ipv4_newaddr={0x3c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x4, 0x2, @dev}, @IFA_BROADCAST={0x8, 0xb, @loopback}, @IFA_CACHEINFO={0x14}]}, 0x3c}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r2, 0x0, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40048c1}, 0x95) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000160a0397af07580000000000020000000900020073797a31000000000c00054000000000000000020900020073797a3100000000140000001100010000000000000000000000000a"], 0x60}, 0x1, 0x0, 0x0, 0x4040841}, 0x4040000) 901.449398ms ago: executing program 2 (id=715): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$ppp(r1, &(0x7f00000000c0)="2788900fae8f24187c63abed21b9c4e9cde43ca15b54fade3c8317d88b452cb2e6da9e4bd8cc58ed4a4c6880ea55bf09e1f28650eec4d25004778553093c173a56d79ecd53c90a9cd6949c2872ca41cb9652097f5c21c64e03a5cad40ac9d7af52835e889df8c04ab1cdb4fd842aa2e54626884d244b94e3b78ed576aa51bc9d57866cb47b35292d646020473f8277df0e5d09b5d6eeef2816807868cc1d1430eed1ffae76d4e7638d7b41546505aef9154ee2e2099111e7f5bfacd82b2cfac6b68561324edc6fdafa1e79e44345268b64abefb6f559450cd5ecf575ad", 0xdd) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000001c0)=0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xc0, 0x9, 0x5, 0x3, 0x70bd27, 0x25dfdbfb, {0x5, 0x0, 0xa}, [@nested={0xaa, 0x4c, 0x0, 0x1, [@typed={0x4c, 0x1f, 0x0, 0x0, @binary="6f315e77493a57ae790ec4b790c0ef455b393758a1883f2eae86d48c5f976b6e9699f41c3b4bf0cb45315bd4b98760a046868db1612f203ea1b8be1b261f86a1681354a77edb1527"}, @generic="5e0aad0250813d033f2df817bd1b3819852bd9779d9f961d0ea987af550ca9adeec5f2f478f98537fc335415cf1363c58002ebd98b542f725b5d5de27138e4ec05d63408914ccd7e0f11b2d6b8d2e707ff0ee4dac98a8a1ba0e5"]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8040040}, 0x20004014) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000380)=0x452e9a3c) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f00000003c0)) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x10, r2}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r3, &(0x7f0000000480)="8608ada4fe26f87e16c1f354b8ea63abcd94d9eca1df1851fff4ea5d4fd505342c50684bbe5a44d30dcaeb93d259bf63c9568a5d0dba9325ac7813df7afbad98a128f678c7fd19a6d78f2ce5a4acf6616830c86be6562ef92b5d760ded57d19f68a0c3", &(0x7f0000000500)=@udp}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xc8, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x40}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x4b2}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x75, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xc1}, @broadcast, @device_b, @random="8ef328d7589e", {0xc, 0x5}}, 0x1000, 0x59, @default, @void, @val={0x2d, 0x1a, {0xd0aad61219d24fd1, 0x3, 0x0, 0x0, {0x7fffffffffffffff, 0x7, 0x0, 0x180, 0x0, 0x1, 0x1, 0x2}, 0x6, 0x4, 0x1}}, [{0xdd, 0x35, "ceaf7597004eee7550b8201df9b99e7c17793893062e130f25408cbfcd53fdf19c15f3cb908eb2769aded5df2bb6e17bdeec4a21e4"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0xff, 0x10, 0x4, 0x401, 0x5]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x181}, 0x8000) preadv(r0, &(0x7f0000000880)=[{&(0x7f0000000780)=""/137, 0x89}, {&(0x7f0000000840)=""/4, 0x4}], 0x2, 0xfffffff9, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, 0x0, 0x8, 0x800, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x201}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x883e}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000000}, 0x4044000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000a80)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r5, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/66, 0x42}) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000c80)={'nr0\x00', {0x2, 0x4e21, @multicast2}}) r7 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r7, &(0x7f0000000cc0)="0c18601538074c6feacfa3af9f7ac4e8e94131caac49f9bb81a933532a310953a4a2c8cfa885dd3490390d052b36755379a5c190c11b0c29ad0f6fa3b3faa6273210843a44cd67f909045c09eb17f9ba132f90", 0x53, 0x0, &(0x7f0000000d40)={0x2, 0x4e23, @loopback}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x30, r8, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x61}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x20}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24000080}, 0x4004000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000fc0)={&(0x7f0000000ec0), 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)=@getchain={0x5c, 0x66, 0x162, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x7, 0xb}, {0xf, 0xfff3}, {0x1, 0x1}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xa}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f0000001000)=0x80, 0x4) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x44, 0xe, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0xc0480c0) socket$inet6_tcp(0xa, 0x1, 0x0) 900.434866ms ago: executing program 0 (id=716): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) r2 = socket$caif_seqpacket(0x25, 0x5, 0x5) sendmsg$inet(r2, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x80}, 0x40001) (async) sendmsg$inet(r2, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x80}, 0x40001) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) read(r2, &(0x7f0000000380)=""/180, 0xb4) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.sectors\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x40, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x40, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) 851.999089ms ago: executing program 4 (id=717): syz_init_net_socket$ax25(0x3, 0x5, 0xca) (async, rerun: 64) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f000000a940)={0x23, 0x9, 0xfd, 0x82}, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8ec245d2", @ANYRES16=r2, @ANYBLOB="270e000000000000000004070200"], 0x14}, 0x1, 0x40030000000000}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r7, 0x89e4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) (async) r9 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x4e22, 0x37004000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x600005}}}, 0x88) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001100010100000000000000000000000083e90ffad3f3758f5d2854daf570d57c503f48d2142b56fbfb862588137ab16188b18e810bc9497929898f3909e92386573d2cf14bc91386a35a7fda47e54af2a3f07c6e5f759b6929416a068588cbe81b1164310a7dbca2bbdc337999b550e4605f7cd0843324f221d8fe5e4f2cbdc73f1ae4d2f7934348c21d285c28f89f067e78cea23818893126ee4f5c9c1ce6a807cb7a86bd4cbac3569de998d83b", @ANYRES32=r8, @ANYBLOB="000000002140000008002900c12a0000"], 0x28}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40000) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) ioctl$sock_netdev_private(r10, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000580)={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2000000, 0x0, 0x7d, 0xa80, 0x0, 0x930210}) 696.750415ms ago: executing program 3 (id=718): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x4010, 0xffffffffffffffff, 0x3dd53000) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280040018"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000340)="7155b506edb24822da43f6c2a0b5ce2b40b0ec718aca10ae53cc28d1450e844eb4ec512f6968cb25f7c89e54f319df5a500000a467048e926b327c99c786d163734c9ded0be5ea02e4fcc7bb7b6bd0fd2fca27a4e17c3ac1a71c19bfd6770cedd6df3172c534213f8afd48cf028b9188dcc2fb1d9abadccdd4e6b964e249507921d2236e34735722ea7130954ee997f67950c1d7477fee42cb0fdb885c8b18258ba79d179eba5279ce1fd01e325e2516af7096b27ed72b6706d973a76622ee87229dee597ca72a5375427806ab1e487a72461a29b59ee5a37dab21e4ba03a7c7e94500"/241, 0x155) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r3, 0xffffffffffffffff}, &(0x7f0000001840), &(0x7f0000000100)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000008000000b7080000000000007b8af8ff00000000b7080000000039007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$HCIINQUIRY(r2, 0x800448f0, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080)={0xff, [0x200, 0x2]}, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)) mmap(&(0x7f000048b000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x9a665000) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, 0x0, 0x310) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r9, 0x894b, &(0x7f0000000200)) ioctl$PPPIOCGFLAGS1(r7, 0x8004745a, &(0x7f0000000240)) read(r2, 0x0, 0x4b) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611494000000000005000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@fallback=r10, 0x6, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 645.924073ms ago: executing program 1 (id=719): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004800)=@newtfilter={0x14b8, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r3, {0xfff3, 0x6}, {}, {0x4, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x1488, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_BASIC_EMATCHES={0x1464, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xc4, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5, 0x8, 0x7f}, {0x1, 0x5, 0x5}}}, @TCF_EM_CONTAINER={0x6c, 0x1, 0x0, 0x0, {{0x4, 0x0, 0x2}, "3572d83a1a0f166ff6642131c74fad5e14b30db0e501ed01f1b82e7ee218f92e8ab2e7f6ee7fb5f80908226fbff3359b2da52da28d4035dbde700c648b30c850546b36d7b6fbd6b49b8f4eb11601691f0d482b0639cf4948a01b9ee361c70b"}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x9}, {0x0, 0x2, 0x3}}}, @TCF_EM_META={0x34, 0x1, 0x0, 0x0, {{0xc, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_VAR="6f2d60fff846e2", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x7, 0x2}, {0xd4aa, 0x5, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8}, {0xfffd, 0xf4, 0x1}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x1158, 0x2, 0x0, 0x1, [@TCF_EM_META={0x40, 0x2, 0x0, 0x0, {{0x1, 0x4, 0x800}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x6, 0x3}, {0xc, 0x40, 0x1}}}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="e4c44e24f9839aed5d", @TCF_META_TYPE_VAR="b3d65c4ba1e39b76", @TCF_META_TYPE_VAR="cc"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1000, 0xff}, {0xff23, 0x7}}}]}}, @TCF_EM_IPT={0x10e4, 0x2, 0x0, 0x0, {{0x2, 0x9, 0xff00}, [@TCA_EM_IPT_MATCH_DATA={0xbb, 0x5, "7accac2925e2258071a14ad6851bfd7d53a9f3d62818b8d23b3f87e9e23ff53973137d69aaa6bcfffabcbdfe0d71e382818ff9d39608bfd76d01db935105bfcabddbe364a75693db4950aef29fdea7d347e50bf59b2ed71c9e9c2e0a6418283b7e21466bcfbd778d1f85ad815d9353b6aae5434df32b5b1331ce9d64c9f01e796b57c5cf2896a292bd56b60d47368219131ff2ca8fbdd3d8e7e01f9d75129c16f81b62c4e84acfb3f37c971051d47bf828336662d24a40"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "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"}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8, 0x7, 0xa}, {{0x1}, {0x3, 0x0, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x4, 0x3, 0x2}, {0x4, 0x1110, 0x401, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0xd8, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x5}, {0xfffd, 0x5, 0x1, "2e4f874551"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x2, 0x7, 0xff}, {{0x1, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0x14, 0x3, 0x0, 0x0, {{0x1, 0x0, 0x40}, "40428a47593f52f8"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x0, 0x8, 0xba89}, {0xffffffffffffffff, 0x3, 0x1}}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x6, 0x9, 0xb}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x5, 0x2, 0x3}, {0x6, 0x6, 0x2, "a0d666cc0181"}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x6, 0x2, 0x9d}, {0x4, 0x8, 0x1, "5be1c2cdf560eec1"}}}, @TCF_EM_CONTAINER={0x40, 0x3, 0x0, 0x0, {{0x3, 0x0, 0x5}, "6e76ad962fab333827aad63f17cba19da25d78c85c0f4d10d7c54287c66e6f1c660d94d746893ed669d88a08d244a5de16e0f7f5"}}]}, @TCA_EMATCH_TREE_LIST={0x110, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x0, 0x1, 0x2}, {0xff, 0xf55, 0xfffd, 0x4, 0x4, 0x0, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x1, 0x2, 0x5}, {0x9, 0x5, 0x0, "fbb88c4623"}}}, @TCF_EM_META={0xa0, 0x2, 0x0, 0x0, {{0x77b, 0x4, 0x101}, [@TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="0e87be64090e5f0c", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0xf}}}, @TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="9dbacecde222ac", @TCF_META_TYPE_VAR="c342dbbd", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="eb419872"]}, @TCA_EM_META_RVALUE={0x30, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="badb", @TCF_META_TYPE_VAR="7351f3b49ac5ae277a", @TCF_META_TYPE_VAR="15", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="1cf7606a2b63f426c4", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="9fff63380e0585"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xa, 0x97c90ec8be94a68c}, {0xfff8, 0x2, 0x2}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x7, 0x2, 0x1}, {0x5, 0x2, 0x2, "ea60"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x229, 0x7, 0x9}, {{0x2}, {0x0, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x1a0e, 0x2, 0xfffe}, {0x7, 0x3, 0x1, "18ac7f"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x74, 0x2, 0x7fff}, {0xfffb, 0x5, 0x0, "1dfd1ecf56"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x452, 0x1, 0x1}, {0xffff, 0x0, 0x9, 0x7, 0x3, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2f}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5486}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x9}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0}}]}}]}, 0x14b8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 643.627568ms ago: executing program 2 (id=720): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x801) (async) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}]}}]}, 0x8c}, 0x1, 0x7a00}, 0x0) 557.669258ms ago: executing program 4 (id=721): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x4}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1d000000100000000000007a0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021007d00000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 544.732286ms ago: executing program 0 (id=722): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000080)=@ipv4_newaddr={0x3c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x4, 0x2, @dev}, @IFA_BROADCAST={0x8, 0xb, @loopback}, @IFA_CACHEINFO={0x14}]}, 0x3c}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000000000001"], 0x114}], 0x1}, 0x0) 358.038007ms ago: executing program 4 (id=723): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x5}, 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349f7f2}) writev(r2, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c98864", 0xffbf}], 0x7) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000080)={@empty, @empty, 0x0, "90fc37852a192ea1b376efee14a7aa1c3009929129c42d06f5e30377f2428d08", 0x2c0b, 0x6, 0x1, 0x400}, 0x3c) ioctl$SIOCGETSGCNT_IN6(r4, 0x89e1, &(0x7f0000000200)={@empty, @private1={0xfc, 0x1, '\x00', 0x1}}) setsockopt$inet_opts(r1, 0x0, 0x80000000000008, &(0x7f0000000180)="0f", 0x1) getsockopt$inet_opts(r1, 0x0, 0x9, 0x0, &(0x7f0000000080)) bind$alg(r0, &(0x7f0000000d00)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r5 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) r6 = socket$inet6(0xa, 0x1, 0x7) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_delrule={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6}, [@FRA_DST={0x14, 0x7, @private0}]}, 0x30}}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001c0000000000000000000000711207000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) r8 = accept4(r0, 0x0, 0x0, 0x0) recvfrom(r8, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x0, 0x0, 0xffffffffffffff54) 357.663509ms ago: executing program 2 (id=724): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRESHEX=r2, @ANYBLOB="0000000095280500400012800c0001006d6163766c616e003000028008000100100000791c000580fffe0400aaaaaaaaaa3bdb11594e10827cda86fb127700000a000400aaaaaaaaaabb000008000300030000000800050072d07153c338fd071c8c74d62790db7bc112c1c8cce7aba4bfa2cd0b5b11ab70c9ea3337150fe938af98a240f36eab2cf5f2e17c1471bbd956edd3a80663228fff0dbf9a17f9f26b3f3730ff564691c26a02de92202deed060ce9f0d643802938ecd70eb39f9555c148f375cbcb2cc648dd60064622f7061825b99a03d1b06b8604086dd2a792be758bb69d1dfa132434814fbf745d1", @ANYRES32=r2, @ANYRESOCT=r0], 0x68}}, 0x0) 345.511492ms ago: executing program 0 (id=725): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$netlink(0x10, 0x3, 0x17) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x7, @none, 0x9}, 0xe) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000003d0007ff0f00000000000000037c000004"], 0x18}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x40, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r6, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x200}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) 210.806978ms ago: executing program 2 (id=726): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f00000002c0)=0x5f53, 0x4) (async) bind$inet6(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x58}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x42c5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40000) 140.986349ms ago: executing program 1 (id=727): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0x2, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x30, r2, 0x921, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x4f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xfb}]}]}, 0x30}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x28, 0x4, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8088001}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 41.736835ms ago: executing program 0 (id=728): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000c43732c42234c681080000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="18000000010005", 0x7) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r1, 0x89e2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x20000005}, 0x8090) syz_emit_ethernet(0x52, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a37f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa06000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800b9"], 0x0) 0s ago: executing program 4 (id=729): r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, r0, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback={0xe0ffff00000000}}]}, 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0xfffffffffffffe8c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}]}, &(0x7f0000000180)=0x10) (async) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) (rerun: 64) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000000)={0x5c, 0x3, 0x0, 0x0, 0x0, 0xf0}) (async) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) (async, rerun: 32) getsockopt$inet6_mreq(r4, 0x29, 0x1, 0x0, 0x0) (rerun: 32) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={r3, 0x2c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, @in={0x2, 0x4e23, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r9, 0x0, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) (rerun: 64) close(r11) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$SIOCSIFHWADDR(r11, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="09000000008d"}) (async, rerun: 64) writev(r10, &(0x7f0000000780)=[{&(0x7f0000000640)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) (async, rerun: 64) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400cc00) (async) recvmsg(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.191' (ED25519) to the list of known hosts. [ 82.819889][ T5818] cgroup: Unknown subsys name 'net' [ 82.960300][ T5818] cgroup: Unknown subsys name 'cpuset' [ 82.969135][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.578979][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.264841][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.303771][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.313847][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.325491][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.363721][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.416730][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.424588][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.432192][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.445023][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.452829][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.513575][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.523562][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.531226][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.542002][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.551039][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.605279][ T5140] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.619554][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.632276][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.641370][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.649894][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.676638][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.685369][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.693710][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.713703][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.724581][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.002704][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 89.210449][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 89.373232][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.380752][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.388241][ T5834] bridge_slave_0: entered allmulticast mode [ 89.395625][ T5834] bridge_slave_0: entered promiscuous mode [ 89.408432][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.415658][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.422794][ T5834] bridge_slave_1: entered allmulticast mode [ 89.430181][ T5834] bridge_slave_1: entered promiscuous mode [ 89.471589][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 89.537070][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.559089][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 89.580718][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.710307][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.719137][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.728941][ T5838] bridge_slave_0: entered allmulticast mode [ 89.738005][ T5838] bridge_slave_0: entered promiscuous mode [ 89.747172][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.754859][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.762059][ T5838] bridge_slave_1: entered allmulticast mode [ 89.769549][ T5838] bridge_slave_1: entered promiscuous mode [ 89.798791][ T5834] team0: Port device team_slave_0 added [ 89.813058][ T5834] team0: Port device team_slave_1 added [ 89.852230][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 89.915576][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.965646][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.972613][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.998686][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.012870][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.090486][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.097509][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.123846][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.159779][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.167564][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.175360][ T5841] bridge_slave_0: entered allmulticast mode [ 90.182456][ T5841] bridge_slave_0: entered promiscuous mode [ 90.192019][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.201556][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.208784][ T5841] bridge_slave_1: entered allmulticast mode [ 90.216170][ T5841] bridge_slave_1: entered promiscuous mode [ 90.262845][ T5838] team0: Port device team_slave_0 added [ 90.273243][ T5838] team0: Port device team_slave_1 added [ 90.279538][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.286881][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.294725][ T5843] bridge_slave_0: entered allmulticast mode [ 90.301902][ T5843] bridge_slave_0: entered promiscuous mode [ 90.374869][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.382051][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.389670][ T5843] bridge_slave_1: entered allmulticast mode [ 90.397796][ T5843] bridge_slave_1: entered promiscuous mode [ 90.407200][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.419821][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.424365][ T5140] Bluetooth: hci0: command tx timeout [ 90.457576][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.464789][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.491326][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.504062][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.504268][ T5140] Bluetooth: hci1: command tx timeout [ 90.511076][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.543138][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.583953][ T5140] Bluetooth: hci2: command tx timeout [ 90.610841][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.618398][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.628955][ T5844] bridge_slave_0: entered allmulticast mode [ 90.636310][ T5844] bridge_slave_0: entered promiscuous mode [ 90.666652][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.692406][ T5834] hsr_slave_0: entered promiscuous mode [ 90.699414][ T5834] hsr_slave_1: entered promiscuous mode [ 90.706560][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.714332][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.721558][ T5844] bridge_slave_1: entered allmulticast mode [ 90.729750][ T5844] bridge_slave_1: entered promiscuous mode [ 90.744359][ T5140] Bluetooth: hci3: command tx timeout [ 90.747973][ T55] Bluetooth: hci4: command tx timeout [ 90.760735][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.786540][ T5841] team0: Port device team_slave_0 added [ 90.835995][ T5841] team0: Port device team_slave_1 added [ 90.845366][ T5843] team0: Port device team_slave_0 added [ 90.885460][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.922217][ T5843] team0: Port device team_slave_1 added [ 90.932779][ T5838] hsr_slave_0: entered promiscuous mode [ 90.942110][ T5838] hsr_slave_1: entered promiscuous mode [ 90.948291][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.956567][ T5838] Cannot create hsr debugfs directory [ 90.985231][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.009391][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.016906][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.043257][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.056534][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.063982][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.089944][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.182925][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.190098][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.216264][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.246366][ T5844] team0: Port device team_slave_0 added [ 91.260914][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.268131][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.294266][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.319582][ T5844] team0: Port device team_slave_1 added [ 91.437131][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.444365][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.470647][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.483852][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.490833][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.516876][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.547988][ T5841] hsr_slave_0: entered promiscuous mode [ 91.554514][ T5841] hsr_slave_1: entered promiscuous mode [ 91.560584][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.568192][ T5841] Cannot create hsr debugfs directory [ 91.717858][ T1214] cfg80211: failed to load regulatory.db [ 91.718063][ T5843] hsr_slave_0: entered promiscuous mode [ 91.730182][ T5843] hsr_slave_1: entered promiscuous mode [ 91.736870][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.744879][ T5843] Cannot create hsr debugfs directory [ 91.808475][ T5844] hsr_slave_0: entered promiscuous mode [ 91.815400][ T5844] hsr_slave_1: entered promiscuous mode [ 91.821484][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.829093][ T5844] Cannot create hsr debugfs directory [ 91.996961][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.027235][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.085379][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.121694][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.218002][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.255092][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.276959][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.309145][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.372060][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.382023][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.395399][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.429767][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.504027][ T55] Bluetooth: hci0: command tx timeout [ 92.525502][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.537628][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.548951][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.560610][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.583870][ T55] Bluetooth: hci1: command tx timeout [ 92.664565][ T55] Bluetooth: hci2: command tx timeout [ 92.689829][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.704849][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.716727][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.726823][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.740836][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.759523][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.809473][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.824576][ T5140] Bluetooth: hci4: command tx timeout [ 92.830125][ T55] Bluetooth: hci3: command tx timeout [ 92.836604][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.870767][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.878094][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.895174][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.902308][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.918700][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.935891][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.943018][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.976246][ T5001] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.983410][ T5001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.045465][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.120768][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.127975][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.149676][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.176379][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.195719][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.202823][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.297024][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.332168][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.358768][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.379430][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.386614][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.427662][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.434879][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.470465][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.477664][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.496179][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.503830][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.568468][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.789507][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.825916][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.025890][ T5838] veth0_vlan: entered promiscuous mode [ 94.039201][ T5834] veth0_vlan: entered promiscuous mode [ 94.098268][ T5834] veth1_vlan: entered promiscuous mode [ 94.121646][ T5838] veth1_vlan: entered promiscuous mode [ 94.255614][ T5838] veth0_macvtap: entered promiscuous mode [ 94.280332][ T5834] veth0_macvtap: entered promiscuous mode [ 94.289762][ T5838] veth1_macvtap: entered promiscuous mode [ 94.302123][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.317106][ T5834] veth1_macvtap: entered promiscuous mode [ 94.352989][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.375661][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.402935][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.417531][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.447477][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.464981][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.503384][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.515727][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.525857][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.534880][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.552422][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.561813][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.570977][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.579980][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.585274][ T55] Bluetooth: hci0: command tx timeout [ 94.665298][ T55] Bluetooth: hci1: command tx timeout [ 94.674805][ T5841] veth0_vlan: entered promiscuous mode [ 94.711550][ T5841] veth1_vlan: entered promiscuous mode [ 94.745620][ T55] Bluetooth: hci2: command tx timeout [ 94.857226][ T5843] veth0_vlan: entered promiscuous mode [ 94.875170][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.883159][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.892709][ T5843] veth1_vlan: entered promiscuous mode [ 94.904529][ T55] Bluetooth: hci3: command tx timeout [ 94.909970][ T55] Bluetooth: hci4: command tx timeout [ 94.946749][ T5841] veth0_macvtap: entered promiscuous mode [ 95.001633][ T5001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.008171][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.027584][ T5001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.028863][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.062180][ T5841] veth1_macvtap: entered promiscuous mode [ 95.086986][ T5001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.102006][ T5001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.146062][ T5843] veth0_macvtap: entered promiscuous mode [ 95.173071][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.188987][ T5843] veth1_macvtap: entered promiscuous mode [ 95.199954][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.211658][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.251448][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.263078][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.272358][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.281614][ T5841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.298512][ T5844] veth0_vlan: entered promiscuous mode [ 95.349732][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.382641][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.430613][ T5844] veth1_vlan: entered promiscuous mode [ 95.463845][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.472598][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.488249][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.497789][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.511680][ T5915] netlink: 'syz.0.1': attribute type 21 has an invalid length. [ 95.670721][ T5922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7'. [ 95.679811][ T5924] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.743214][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.762309][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.790835][ T5844] veth0_macvtap: entered promiscuous mode [ 95.838715][ T5844] veth1_macvtap: entered promiscuous mode [ 95.853350][ T5928] x_tables: duplicate underflow at hook 3 [ 95.864612][ T5928] IPVS: set_ctl: invalid protocol: 94 172.30.1.2:20002 [ 95.874778][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 95.885775][ T5928] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 95.899735][ T5928] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 95.925751][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.953393][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.963049][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.977838][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.987977][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.036288][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.127358][ T5844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.142242][ T5844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.161087][ T5844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.170112][ T5844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.188914][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.201891][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.442195][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.477575][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.603901][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 96.651675][ T5939] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 96.663952][ T55] Bluetooth: hci0: command tx timeout [ 96.681122][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.698722][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.701777][ T5939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.751786][ T55] Bluetooth: hci1: command tx timeout [ 96.825528][ T55] Bluetooth: hci2: command tx timeout [ 96.984103][ T55] Bluetooth: hci4: command tx timeout [ 96.989804][ T5140] Bluetooth: hci3: command tx timeout [ 97.260421][ T5960] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 97.307815][ T5960] hsr0: entered promiscuous mode [ 97.354416][ T5960] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 97.432871][ T5960] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 97.447560][ T5960] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 97.454943][ T5967] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.18'. [ 97.477604][ T5969] Zero length message leads to an empty skb [ 97.492007][ T5967] netlink: zone id is out of range [ 97.499025][ T5967] netlink: zone id is out of range [ 97.504554][ T5962] virt_wifi0 speed is unknown, defaulting to 1000 [ 97.511986][ T5967] netlink: zone id is out of range [ 97.521507][ T5962] virt_wifi0 speed is unknown, defaulting to 1000 [ 97.531982][ T5971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18'. [ 97.550115][ T5967] netlink: get zone limit has 8 unknown bytes [ 97.560274][ T5972] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.20'. [ 97.566044][ T5962] virt_wifi0 speed is unknown, defaulting to 1000 [ 97.659809][ T5962] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.724616][ T5978] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.823287][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 97.829041][ T5962] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 98.052616][ T5962] virt_wifi0 speed is unknown, defaulting to 1000 [ 98.165936][ T5992] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 98.208796][ T5962] virt_wifi0 speed is unknown, defaulting to 1000 [ 98.277458][ T5962] virt_wifi0 speed is unknown, defaulting to 1000 [ 98.312757][ T5962] virt_wifi0 speed is unknown, defaulting to 1000 [ 98.346932][ T6001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.28'. [ 98.365576][ T5962] virt_wifi0 speed is unknown, defaulting to 1000 [ 98.616049][ T6009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.32'. [ 98.805403][ T6022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.35'. [ 98.872023][ T6016] 8021q: VLANs not supported on wg1 [ 99.295178][ T6037] netlink: 'syz.1.41': attribute type 1 has an invalid length. [ 99.608455][ T6052] vxcan1: entered allmulticast mode [ 99.664007][ T6055] netlink: 'syz.3.48': attribute type 11 has an invalid length. [ 99.789879][ T6058] 8021q: VLANs not supported on caif0 [ 99.823873][ T6060] wg2: entered promiscuous mode [ 99.844419][ T6060] wg2: entered allmulticast mode [ 99.978633][ T6071] xt_TPROXY: Can be used only with -p tcp or -p udp [ 100.046350][ T6074] netlink: 'syz.0.55': attribute type 1 has an invalid length. [ 100.460749][ T6090] openvswitch: netlink: Multiple metadata blocks provided [ 100.591836][ T6055] warning: `syz.3.48' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.729245][ T6104] vlan2: entered allmulticast mode [ 100.746356][ T6104] veth0_virt_wifi: entered allmulticast mode [ 100.783903][ T6106] netlink: 'syz.2.65': attribute type 1 has an invalid length. [ 100.831662][ T6106] netlink: 'syz.2.65': attribute type 2 has an invalid length. [ 101.347946][ T6132] __nla_validate_parse: 5 callbacks suppressed [ 101.347964][ T6132] netlink: 100 bytes leftover after parsing attributes in process `syz.3.76'. [ 101.493789][ T6136] netlink: 88 bytes leftover after parsing attributes in process `syz.1.77'. [ 101.629056][ T6142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.80'. [ 102.032151][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 102.316311][ T6163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.88'. [ 102.367429][ T6166] netlink: 88 bytes leftover after parsing attributes in process `syz.2.87'. [ 102.442882][ T6166] netem: invalid attributes len -24 [ 102.473341][ T6166] netem: change failed [ 102.606983][ T6175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.616205][ T6174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.829485][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.96'. [ 103.535075][ T6224] vlan2: entered allmulticast mode [ 103.540356][ T6224] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 103.959501][ T6249] TCP: TCP_TX_DELAY enabled [ 104.018184][ T6252] pim6reg: entered allmulticast mode [ 104.239103][ T6261] IPv6: NLM_F_CREATE should be specified when creating new route [ 104.957089][ T6296] netlink: 20 bytes leftover after parsing attributes in process `syz.3.132'. [ 104.966318][ T6296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.132'. [ 105.409641][ T6315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.496297][ T6316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.518871][ T6321] vlan2: entered allmulticast mode [ 105.524732][ T6321] bond1: entered allmulticast mode [ 105.598102][ T6325] netlink: 'syz.3.141': attribute type 1 has an invalid length. [ 105.606918][ T6325] netlink: 228 bytes leftover after parsing attributes in process `syz.3.141'. [ 105.890060][ T6336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.146171][ T6349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.268870][ T6352] netlink: 'syz.1.152': attribute type 4 has an invalid length. [ 106.327492][ T6356] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 106.492554][ T6358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.863314][ T6381] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 106.918647][ T6379] virt_wifi0 speed is unknown, defaulting to 1000 [ 107.502404][ T6399] netlink: 'syz.0.167': attribute type 2 has an invalid length. [ 107.547188][ T6401] __nla_validate_parse: 1 callbacks suppressed [ 107.547209][ T6401] netlink: 18 bytes leftover after parsing attributes in process `syz.3.168'. [ 107.585173][ T6399] netlink: 244 bytes leftover after parsing attributes in process `syz.0.167'. [ 107.604081][ T6404] x_tables: duplicate underflow at hook 3 [ 107.881827][ T6409] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.049636][ T6415] vlan2: entered allmulticast mode [ 108.082879][ T6415] bond2: entered allmulticast mode [ 108.248007][ T6432] netlink: 20 bytes leftover after parsing attributes in process `syz.0.177'. [ 108.323962][ T6435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.357687][ T6436] netlink: 48 bytes leftover after parsing attributes in process `syz.1.178'. [ 108.381572][ T6436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.178'. [ 108.385913][ T6439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.564833][ T6438] virt_wifi0 speed is unknown, defaulting to 1000 [ 108.586623][ T6444] netlink: 'syz.0.182': attribute type 9 has an invalid length. [ 108.645042][ T6451] netlink: 'syz.0.182': attribute type 1 has an invalid length. [ 108.760398][ T6459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'. [ 108.795929][ T6451] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.817006][ T6455] bond2: (slave gretap1): making interface the new active one [ 108.826277][ T6455] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 108.836700][ T6457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.185'. [ 108.854915][ T6460] bond2: entered promiscuous mode [ 108.860129][ T6460] gretap1: entered promiscuous mode [ 108.867100][ T6460] bond2: entered allmulticast mode [ 108.872387][ T6460] gretap1: entered allmulticast mode [ 109.131956][ T6472] netlink: 24 bytes leftover after parsing attributes in process `syz.3.189'. [ 109.286440][ T6483] syz.2.192 uses obsolete (PF_INET,SOCK_PACKET) [ 109.529570][ T6488] sctp: [Deprecated]: syz.0.194 (pid 6488) Use of int in max_burst socket option deprecated. [ 109.529570][ T6488] Use struct sctp_assoc_value instead [ 110.183091][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'. [ 110.198814][ T6515] netlink: 'syz.0.201': attribute type 3 has an invalid length. [ 110.565361][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 110.700853][ T6540] netlink: 'syz.3.208': attribute type 4 has an invalid length. [ 110.922295][ T6546] ip6t_srh: unknown srh invflags 4449 [ 111.003021][ T6552] tipc: Started in network mode [ 111.033918][ T6552] tipc: Node identity 9e37291a5b63, cluster identity 4711 [ 111.041379][ T6552] tipc: Enabled bearer , priority 0 [ 111.067308][ T6555] xt_l2tp: unknown flags: 18 [ 111.106529][ T6558] syzkaller0: MTU too low for tipc bearer [ 111.112320][ T6558] tipc: Disabling bearer [ 111.278856][ T6564] netlink: 'syz.4.216': attribute type 11 has an invalid length. [ 112.660259][ T6627] __nla_validate_parse: 7 callbacks suppressed [ 112.660278][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 112.874675][ T6633] netlink: 'syz.0.236': attribute type 9 has an invalid length. [ 113.941962][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 114.202392][ T6670] team0: Port device team_slave_0 removed [ 114.314336][ T55] block nbd3: Receive control failed (result -32) [ 114.326538][ T6675] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 114.373585][ T6675] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 114.423584][ T6675] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 114.442886][ T6675] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 114.461087][ T6675] geneve2: entered promiscuous mode [ 114.503753][ T6675] geneve2: entered allmulticast mode [ 114.527110][ T6684] netlink: 1 bytes leftover after parsing attributes in process `syz.2.249'. [ 114.566857][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.249'. [ 114.861296][ T6708] vlan2: entered allmulticast mode [ 114.895231][ T6708] gretap0: entered allmulticast mode [ 114.944356][ T6713] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.255'. [ 115.890473][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.258'. [ 116.135452][ T6742] netlink: 20 bytes leftover after parsing attributes in process `syz.4.263'. [ 116.344965][ T6748] netlink: 'syz.2.264': attribute type 10 has an invalid length. [ 116.431512][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'. [ 116.432393][ T6748] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 116.710016][ T6759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.269'. [ 116.750945][ T6760] netlink: 'syz.3.271': attribute type 33 has an invalid length. [ 117.214717][ T6784] Bluetooth: MGMT ver 1.23 [ 117.236172][ T6786] dvmrp1: entered allmulticast mode [ 117.264181][ T6787] @ÿ: renamed from bond_slave_0 (while UP) [ 118.034750][ T6830] netlink: 80 bytes leftover after parsing attributes in process `syz.3.296'. [ 118.124606][ T6827] netlink: 32 bytes leftover after parsing attributes in process `syz.0.294'. [ 118.288117][ T30] audit: type=1804 audit(1747927833.614:2): pid=6839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.299" name="/newroot/55/cgroup.controllers" dev="tmpfs" ino=297 res=1 errno=0 [ 118.398496][ T30] audit: type=1800 audit(1747927833.614:3): pid=6839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.299" name="cgroup.controllers" dev="tmpfs" ino=297 res=0 errno=0 [ 118.425738][ T6846] netlink: 40 bytes leftover after parsing attributes in process `syz.3.301'. [ 118.569109][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'. [ 118.824509][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 118.972113][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.981671][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.003436][ T6874] netlink: 'syz.3.311': attribute type 4 has an invalid length. [ 119.015971][ T6874] netlink: 152 bytes leftover after parsing attributes in process `syz.3.311'. [ 119.040404][ T6874] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 119.201677][ T6879] netlink: 20 bytes leftover after parsing attributes in process `syz.3.314'. [ 119.673163][ T6900] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 120.558810][ T6949] netlink: 'syz.1.340': attribute type 15 has an invalid length. [ 120.614805][ T6955] netlink: 'syz.1.340': attribute type 15 has an invalid length. [ 121.150118][ T6982] Cannot find add_set index 0 as target [ 121.181076][ T6982] netlink: 28 bytes leftover after parsing attributes in process `syz.4.350'. [ 121.190975][ T6982] netlink: 28 bytes leftover after parsing attributes in process `syz.4.350'. [ 121.332941][ T6992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.355'. [ 121.401071][ T6994] netlink: 28 bytes leftover after parsing attributes in process `syz.2.355'. [ 122.094666][ T7024] tipc: Started in network mode [ 122.101512][ T7024] tipc: Node identity 2211205e4566, cluster identity 4711 [ 122.121399][ T7024] tipc: Enabled bearer , priority 0 [ 122.189495][ T7024] syzkaller0: entered promiscuous mode [ 122.214408][ T7024] syzkaller0: entered allmulticast mode [ 122.272040][ T7041] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 3, id = 0 [ 122.272265][ T7040] IPVS: stopping backup sync thread 7041 ... [ 122.322264][ T7024] tipc: Resetting bearer [ 122.336240][ T7046] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 3, id = 0 [ 122.357756][ T7019] tipc: Resetting bearer [ 122.406146][ T7019] tipc: Disabling bearer [ 123.373192][ T7090] __nla_validate_parse: 5 callbacks suppressed [ 123.373210][ T7090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.384'. [ 123.520265][ T7095] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 123.681242][ T7102] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.690627][ T7102] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.700823][ T7102] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.716970][ T7102] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.793696][ T7102] vxlan0: entered promiscuous mode [ 123.815742][ T7102] vxlan0: entered allmulticast mode [ 123.847177][ T7106] netlink: 16 bytes leftover after parsing attributes in process `syz.3.388'. [ 124.176965][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.394'. [ 124.228961][ T7134] Bluetooth: MGMT ver 1.23 [ 124.372849][ T7141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.396'. [ 124.408705][ T7140] gre1: entered promiscuous mode [ 124.434890][ T7140] gre1: entered allmulticast mode [ 124.506955][ T7142] netlink: 56 bytes leftover after parsing attributes in process `syz.2.396'. [ 124.539785][ T7141] netlink: 40 bytes leftover after parsing attributes in process `syz.2.396'. [ 124.785364][ T7159] openvswitch: netlink: Missing key (keys=40, expected=80) [ 124.986679][ T7169] netlink: zone id is out of range [ 125.002871][ T7169] netlink: zone id is out of range [ 125.045507][ T7169] netlink: zone id is out of range [ 125.411327][ T7189] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 126.752670][ T7270] netlink: 28 bytes leftover after parsing attributes in process `syz.1.432'. [ 126.840340][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.432'. [ 127.006595][ T7284] netlink: 'syz.3.434': attribute type 33 has an invalid length. [ 127.033656][ T7284] netlink: 152 bytes leftover after parsing attributes in process `syz.3.434'. [ 127.222709][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.438'. [ 127.233781][ T7287] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 127.258599][ T7287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.399863][ T7299] netlink: 'syz.2.444': attribute type 11 has an invalid length. [ 127.434274][ T7301] x_tables: duplicate underflow at hook 2 [ 127.447600][ T7302] netlink: 'syz.4.443': attribute type 29 has an invalid length. [ 127.466341][ T7299] netlink: 'syz.2.444': attribute type 1 has an invalid length. [ 127.490823][ T7299] netlink: 'syz.2.444': attribute type 1 has an invalid length. [ 127.511741][ T7302] netlink: 'syz.4.443': attribute type 29 has an invalid length. [ 127.520160][ T7302] netlink: 'syz.4.443': attribute type 29 has an invalid length. [ 127.819628][ T7313] bridge_slave_0: left allmulticast mode [ 127.830345][ T7313] bridge_slave_0: left promiscuous mode [ 127.842174][ T7313] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.865043][ T7313] bridge_slave_1: left allmulticast mode [ 127.870832][ T7313] bridge_slave_1: left promiscuous mode [ 127.881947][ T7313] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.902604][ T7313] bond0: (slave bond_slave_0): Releasing backup interface [ 127.917406][ T7313] bond0: (slave bond_slave_1): Releasing backup interface [ 127.941297][ T7313] team0: Port device team_slave_0 removed [ 127.957557][ T7313] team0: Port device team_slave_1 removed [ 127.968791][ T7313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.977466][ T7313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.992228][ T7313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.005052][ T7313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.051367][ T7313] syz.1.448 (7313) used greatest stack depth: 19592 bytes left [ 128.280133][ T7331] netlink: 'syz.4.453': attribute type 62 has an invalid length. [ 128.440188][ T7339] __nla_validate_parse: 7 callbacks suppressed [ 128.440208][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'. [ 128.830600][ T7354] veth1_macvtap: left promiscuous mode [ 128.851909][ T7354] macsec0: entered allmulticast mode [ 128.913786][ T7366] veth1_macvtap: entered promiscuous mode [ 128.945853][ T7366] veth1_macvtap: entered allmulticast mode [ 128.981189][ T7366] macsec0: left allmulticast mode [ 129.002152][ T7366] veth1_macvtap: left allmulticast mode [ 129.699945][ T7408] netlink: 20 bytes leftover after parsing attributes in process `syz.1.475'. [ 130.332631][ T7440] netlink: 'syz.0.483': attribute type 11 has an invalid length. [ 130.343188][ T7440] netlink: 'syz.0.483': attribute type 11 has an invalid length. [ 130.361804][ T7440] netlink: 224 bytes leftover after parsing attributes in process `syz.0.483'. [ 130.529474][ T7460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.489'. [ 130.648492][ T7462] netlink: 240 bytes leftover after parsing attributes in process `syz.3.490'. [ 130.788276][ T7470] ip6erspan0: entered allmulticast mode [ 131.131072][ T7494] netlink: 'syz.4.499': attribute type 1 has an invalid length. [ 131.152960][ T7492] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 131.179809][ T7497] netlink: 'syz.2.500': attribute type 2 has an invalid length. [ 131.221077][ T7496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.502'. [ 131.657086][ T7505] gtp0: entered promiscuous mode [ 131.662198][ T7505] gtp0: entered allmulticast mode [ 131.826712][ T7517] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 131.998682][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. [ 132.600735][ T7570] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.669565][ T7574] netlink: 'syz.4.525': attribute type 1 has an invalid length. [ 132.683746][ T7575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.526'. [ 132.685672][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.703587][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.722712][ T7574] netlink: 'syz.4.525': attribute type 2 has an invalid length. [ 132.762309][ T7575] netlink: 152 bytes leftover after parsing attributes in process `syz.0.526'. [ 132.798516][ T7575] netlink: 152 bytes leftover after parsing attributes in process `syz.0.526'. [ 132.809098][ T7577] netlink: 'syz.1.527': attribute type 1 has an invalid length. [ 133.190516][ T7600] netlink: 'syz.3.534': attribute type 1 has an invalid length. [ 133.233934][ T7600] netlink: 'syz.3.534': attribute type 1 has an invalid length. [ 133.253318][ T7600] netlink: 'syz.3.534': attribute type 2 has an invalid length. [ 133.480332][ T7608] __nla_validate_parse: 1 callbacks suppressed [ 133.480349][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.537'. [ 133.506367][ T7613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.540'. [ 133.761696][ T7624] trusted_key: syz.3.542 sent an empty control message without MSG_MORE. [ 133.968984][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'. [ 134.016547][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'. [ 134.036935][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.543'. [ 134.236763][ T7636] nftables ruleset with unbound chain [ 134.257269][ T7639] netlink: 808 bytes leftover after parsing attributes in process `syz.0.548'. [ 134.304297][ T7639] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 134.519807][ T7644] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 134.556008][ T7644] team0: Device ipvlan2 is already an upper device of the team interface [ 134.638381][ T7647] syzkaller0: entered allmulticast mode [ 134.720150][ T7650] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 134.742320][ T7650] team0: Device ipvlan2 is already an upper device of the team interface [ 134.862652][ T7651] syzkaller0: left allmulticast mode [ 134.871195][ T7661] netlink: 32 bytes leftover after parsing attributes in process `syz.2.554'. [ 135.035417][ T7667] netlink: 'syz.3.556': attribute type 3 has an invalid length. [ 135.064793][ T7667] syz_tun: entered allmulticast mode [ 135.181537][ T7670] Cannot find add_set index 0 as target [ 135.199914][ T7664] syz_tun: left allmulticast mode [ 135.293299][ T7678] netlink: 'syz.4.560': attribute type 2 has an invalid length. [ 135.388281][ T7683] netlink: 'syz.2.562': attribute type 39 has an invalid length. [ 135.562003][ T7687] netlink: 'syz.3.563': attribute type 9 has an invalid length. [ 135.591820][ T7687] netlink: 211988 bytes leftover after parsing attributes in process `syz.3.563'. [ 135.739383][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.566'. [ 135.833201][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.567'. [ 136.058803][ T7714] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 136.076765][ T7714] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 136.085706][ T7714] gretap1: entered promiscuous mode [ 136.090953][ T7714] gretap1: entered allmulticast mode [ 136.505545][ T7727] bond1: (slave gretap2): making interface the new active one [ 136.530659][ T7727] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 136.593238][ T7730] bond3: entered promiscuous mode [ 136.599504][ T7730] bond3: entered allmulticast mode [ 136.606174][ T7730] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.102114][ T7761] bond0: (slave dummy0): Releasing backup interface [ 137.133017][ T7761] batman_adv: batadv0: Adding interface: dummy0 [ 137.173934][ T7761] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.230423][ T7761] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 137.502069][ T7773] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.509984][ T7773] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.320194][ T7832] validate_nla: 2 callbacks suppressed [ 138.320212][ T7832] netlink: 'syz.2.603': attribute type 1 has an invalid length. [ 138.424666][ T7832] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.475796][ T7837] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.484766][ T7837] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 138.496851][ T7837] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 138.520962][ T7835] __nla_validate_parse: 6 callbacks suppressed [ 138.520978][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.602'. [ 138.550776][ T7832] veth3: entered promiscuous mode [ 138.560794][ T7832] bond2: (slave veth3): Enslaving as an active interface with a down link [ 138.569800][ T7842] netlink: 44 bytes leftover after parsing attributes in process `syz.4.606'. [ 138.593270][ T7840] erspan0: entered allmulticast mode [ 138.629623][ T7840] bond2: (slave erspan0): making interface the new active one [ 138.680922][ T7840] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 138.864778][ T7854] netlink: 'syz.2.610': attribute type 10 has an invalid length. [ 138.885095][ T7854] macvlan0: entered promiscuous mode [ 138.890440][ T7854] macvlan0: entered allmulticast mode [ 138.920844][ T7854] veth1_vlan: entered allmulticast mode [ 138.949176][ T7854] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 139.060878][ T7861] netlink: 20 bytes leftover after parsing attributes in process `syz.1.612'. [ 139.171459][ T7868] netlink: 'syz.2.614': attribute type 1 has an invalid length. [ 139.317649][ T7868] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.367963][ T7880] No such timeout policy "syz0" [ 139.455210][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'. [ 139.455268][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'. [ 139.488677][ T7888] netlink: 104 bytes leftover after parsing attributes in process `syz.3.619'. [ 139.507621][ T7873] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.521749][ T7873] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 139.553277][ T7873] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 139.698113][ T7868] veth5: entered promiscuous mode [ 139.707552][ T7868] bond3: (slave veth5): Enslaving as an active interface with a down link [ 139.733162][ T7882] bond2: (slave erspan0): Releasing active interface [ 139.752394][ T7900] netlink: 9 bytes leftover after parsing attributes in process `syz.0.622'. [ 139.768910][ T7882] bond3: (slave erspan0): making interface the new active one [ 139.786003][ T7882] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 139.814346][ T7900] gretap0: entered promiscuous mode [ 139.876914][ T7896] netlink: 5 bytes leftover after parsing attributes in process `syz.0.622'. [ 139.890810][ T7896] 0ªî{X¹¦: renamed from gretap0 [ 139.922390][ T7896] 0ªî{X¹¦: left promiscuous mode [ 139.931492][ T7896] 0ªî{X¹¦: entered allmulticast mode [ 139.952694][ T7896] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 140.062529][ T7907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.624'. [ 140.090510][ T30] audit: type=1107 audit(1747927855.414:4): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 140.217311][ T7915] Cannot find add_set index 1 as target [ 140.234026][ T7919] netlink: 'syz.2.631': attribute type 23 has an invalid length. [ 140.312936][ T7917] netlink: 80 bytes leftover after parsing attributes in process `syz.0.629'. [ 140.422065][ T7921] netlink: 'syz.0.632': attribute type 1 has an invalid length. [ 140.469879][ T7926] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 140.582760][ T7932] netlink: 'syz.3.635': attribute type 1 has an invalid length. [ 140.599103][ T7921] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.622956][ T7921] netlink: 'syz.0.632': attribute type 4 has an invalid length. [ 140.765305][ T7936] vlan3: entered promiscuous mode [ 140.783276][ T7936] vlan3: entered allmulticast mode [ 140.802121][ T7936] hsr_slave_1: entered allmulticast mode [ 140.812652][ T7941] IPVS: set_ctl: invalid protocol: 64 172.20.20.187:20000 [ 140.837635][ T7942] IPVS: set_ctl: invalid protocol: 64 172.20.20.187:20000 [ 140.880917][ T7927] veth1: entered promiscuous mode [ 141.412246][ T7970] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 141.510129][ T7977] netlink: 'syz.4.648': attribute type 1 has an invalid length. [ 141.520199][ T7979] netlink: 'syz.2.650': attribute type 1 has an invalid length. [ 141.687923][ T7980] 8021q: adding VLAN 0 to HW filter on device bond5 [ 141.699393][ T7980] bond4: (slave bond5): making interface the new active one [ 141.708136][ T7980] bond4: (slave bond5): Enslaving as an active interface with an up link [ 141.779360][ T7990] netlink: 'syz.4.652': attribute type 1 has an invalid length. [ 141.966442][ T7997] syzkaller1: entered promiscuous mode [ 141.972090][ T7997] syzkaller1: entered allmulticast mode [ 142.102918][ T8006] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 142.187709][ T8012] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000 [ 142.621216][ T8034] veth1_to_team: entered promiscuous mode [ 142.634874][ T8036] sit0: entered promiscuous mode [ 142.808171][ T8033] veth1_to_team: left promiscuous mode [ 143.018059][ T8049] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20002 [ 143.290926][ T8068] Unknown options in mask 1f4 [ 143.386180][ T8070] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 143.423675][ T8070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.472748][ T8077] tunl0: entered promiscuous mode [ 143.486957][ T8077] validate_nla: 3 callbacks suppressed [ 143.486972][ T8077] netlink: 'syz.3.685': attribute type 3 has an invalid length. [ 143.523679][ T8077] __nla_validate_parse: 16 callbacks suppressed [ 143.523696][ T8077] netlink: 9 bytes leftover after parsing attributes in process `syz.3.685'. [ 143.587293][ T8081] netlink: 'syz.3.685': attribute type 3 has an invalid length. [ 143.617477][ T8081] netlink: 9 bytes leftover after parsing attributes in process `syz.3.685'. [ 143.748279][ T8091] netlink: 20 bytes leftover after parsing attributes in process `syz.0.691'. [ 143.899118][ T8101] netlink: 'syz.0.695': attribute type 1 has an invalid length. [ 144.174566][ T8119] xt_l2tp: missing protocol rule (udp|l2tpip) [ 144.227749][ T8123] x_tables: duplicate entry at hook 3 [ 144.501194][ T8138] netlink: 44 bytes leftover after parsing attributes in process `syz.2.706'. [ 144.543613][ T8138] netlink: 43 bytes leftover after parsing attributes in process `syz.2.706'. [ 144.592280][ T8138] netlink: 'syz.2.706': attribute type 6 has an invalid length. [ 144.618760][ T8138] netlink: 'syz.2.706': attribute type 5 has an invalid length. [ 144.643670][ T8138] netlink: 43 bytes leftover after parsing attributes in process `syz.2.706'. [ 144.668141][ T8143] netlink: 'syz.4.707': attribute type 8 has an invalid length. [ 144.698162][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.707'. [ 144.717835][ T8143] bridge0: entered allmulticast mode [ 144.758990][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.707'. [ 144.951431][ T8153] delete_channel: no stack [ 145.178107][ T8173] netlink: 'syz.3.714': attribute type 2 has an invalid length. [ 145.362546][ T8184] netlink: 252 bytes leftover after parsing attributes in process `syz.3.718'. [ 145.494960][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.721'. [ 145.529405][ T8197] netlink: 'syz.0.722': attribute type 2 has an invalid length. [ 145.996176][ T8219] [ 145.998554][ T8219] ====================================================== [ 146.005574][ T8219] WARNING: possible circular locking dependency detected [ 146.012596][ T8219] 6.15.0-rc6-syzkaller-00207-g3fab2d2d901a #0 Not tainted [ 146.019700][ T8219] ------------------------------------------------------ [ 146.026710][ T8219] syz.0.728/8219 is trying to acquire lock: [ 146.032593][ T8219] ffffffff8f44d798 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 146.041764][ T8219] [ 146.041764][ T8219] but task is already holding lock: [ 146.049120][ T8219] ffff88814b8c0e70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 146.058402][ T8219] [ 146.058402][ T8219] which lock already depends on the new lock. [ 146.058402][ T8219] [ 146.068814][ T8219] [ 146.068814][ T8219] the existing dependency chain (in reverse order) is: [ 146.077827][ T8219] [ 146.077827][ T8219] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 146.085842][ T8219] lock_acquire+0x120/0x360 [ 146.090892][ T8219] _raw_spin_lock_bh+0x36/0x50 [ 146.096178][ T8219] nr_rt_ioctl+0x193/0xd50 [ 146.101125][ T8219] sock_do_ioctl+0xd9/0x300 [ 146.106148][ T8219] sock_ioctl+0x576/0x790 [ 146.110998][ T8219] __se_sys_ioctl+0xf9/0x170 [ 146.116120][ T8219] do_syscall_64+0xf6/0x210 [ 146.121147][ T8219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.127561][ T8219] [ 146.127561][ T8219] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 146.135493][ T8219] lock_acquire+0x120/0x360 [ 146.140541][ T8219] _raw_spin_lock_bh+0x36/0x50 [ 146.145847][ T8219] nr_rt_device_down+0xa9/0x720 [ 146.151244][ T8219] nr_device_event+0x137/0x150 [ 146.156623][ T8219] notifier_call_chain+0x1b3/0x3e0 [ 146.162263][ T8219] __dev_notify_flags+0x18d/0x2e0 [ 146.167824][ T8219] netif_change_flags+0xe8/0x1a0 [ 146.173309][ T8219] dev_change_flags+0x130/0x260 [ 146.178677][ T8219] dev_ioctl+0x7b4/0x1150 [ 146.183527][ T8219] sock_do_ioctl+0x22c/0x300 [ 146.188637][ T8219] sock_ioctl+0x576/0x790 [ 146.193486][ T8219] __se_sys_ioctl+0xf9/0x170 [ 146.198594][ T8219] do_syscall_64+0xf6/0x210 [ 146.203624][ T8219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.210036][ T8219] [ 146.210036][ T8219] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 146.217949][ T8219] validate_chain+0xb9b/0x2140 [ 146.223340][ T8219] __lock_acquire+0xaac/0xd20 [ 146.228544][ T8219] lock_acquire+0x120/0x360 [ 146.233575][ T8219] _raw_spin_lock_bh+0x36/0x50 [ 146.238860][ T8219] nr_rt_ioctl+0x390/0xd50 [ 146.243801][ T8219] sock_do_ioctl+0xd9/0x300 [ 146.248819][ T8219] sock_ioctl+0x576/0x790 [ 146.253662][ T8219] __se_sys_ioctl+0xf9/0x170 [ 146.258774][ T8219] do_syscall_64+0xf6/0x210 [ 146.263799][ T8219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.270210][ T8219] [ 146.270210][ T8219] other info that might help us debug this: [ 146.270210][ T8219] [ 146.280435][ T8219] Chain exists of: [ 146.280435][ T8219] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 146.280435][ T8219] [ 146.294265][ T8219] Possible unsafe locking scenario: [ 146.294265][ T8219] [ 146.301792][ T8219] CPU0 CPU1 [ 146.307150][ T8219] ---- ---- [ 146.312509][ T8219] lock(&nr_node->node_lock); [ 146.317272][ T8219] lock(nr_node_list_lock); [ 146.324380][ T8219] lock(&nr_node->node_lock); [ 146.331662][ T8219] lock(nr_neigh_list_lock); [ 146.336342][ T8219] [ 146.336342][ T8219] *** DEADLOCK *** [ 146.336342][ T8219] [ 146.344490][ T8219] 2 locks held by syz.0.728/8219: [ 146.349511][ T8219] #0: ffffffff8f44d7f8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 146.359024][ T8219] #1: ffff88814b8c0e70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 146.368695][ T8219] [ 146.368695][ T8219] stack backtrace: [ 146.374620][ T8219] CPU: 0 UID: 0 PID: 8219 Comm: syz.0.728 Not tainted 6.15.0-rc6-syzkaller-00207-g3fab2d2d901a #0 PREEMPT(full) [ 146.374642][ T8219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.374657][ T8219] Call Trace: [ 146.374671][ T8219] [ 146.374679][ T8219] dump_stack_lvl+0x189/0x250 [ 146.374729][ T8219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.374754][ T8219] ? __pfx__printk+0x10/0x10 [ 146.374771][ T8219] ? print_lock_name+0xde/0x100 [ 146.374801][ T8219] print_circular_bug+0x2ee/0x310 [ 146.374822][ T8219] check_noncircular+0x134/0x160 [ 146.374843][ T8219] validate_chain+0xb9b/0x2140 [ 146.374870][ T8219] __lock_acquire+0xaac/0xd20 [ 146.374898][ T8219] ? nr_rt_ioctl+0x390/0xd50 [ 146.374922][ T8219] lock_acquire+0x120/0x360 [ 146.374946][ T8219] ? nr_rt_ioctl+0x390/0xd50 [ 146.374973][ T8219] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 146.374996][ T8219] ? nr_rt_ioctl+0x390/0xd50 [ 146.375020][ T8219] _raw_spin_lock_bh+0x36/0x50 [ 146.375038][ T8219] ? nr_rt_ioctl+0x390/0xd50 [ 146.375062][ T8219] nr_rt_ioctl+0x390/0xd50 [ 146.375093][ T8219] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 146.375123][ T8219] ? apparmor_capable+0x137/0x1b0 [ 146.375152][ T8219] ? capable+0x89/0xe0 [ 146.375168][ T8219] ? nr_ioctl+0x1b1/0x3b0 [ 146.375190][ T8219] sock_do_ioctl+0xd9/0x300 [ 146.375209][ T8219] ? __pfx_sock_do_ioctl+0x10/0x10 [ 146.375225][ T8219] ? __lock_acquire+0xaac/0xd20 [ 146.375256][ T8219] sock_ioctl+0x576/0x790 [ 146.375272][ T8219] ? __pfx_sock_ioctl+0x10/0x10 [ 146.375288][ T8219] ? __fget_files+0x3a0/0x420 [ 146.375312][ T8219] ? __fget_files+0x2a/0x420 [ 146.375337][ T8219] ? bpf_lsm_file_ioctl+0x9/0x20 [ 146.375360][ T8219] ? __pfx_sock_ioctl+0x10/0x10 [ 146.375375][ T8219] __se_sys_ioctl+0xf9/0x170 [ 146.375394][ T8219] do_syscall_64+0xf6/0x210 [ 146.375418][ T8219] ? clear_bhb_loop+0x60/0xb0 [ 146.375437][ T8219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.375460][ T8219] RIP: 0033:0x7f504d38e969 [ 146.375480][ T8219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.375495][ T8219] RSP: 002b:00007f504e223038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.375513][ T8219] RAX: ffffffffffffffda RBX: 00007f504d5b5fa0 RCX: 00007f504d38e969 [ 146.375526][ T8219] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000006 [ 146.375537][ T8219] RBP: 00007f504d410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 146.375547][ T8219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.375557][ T8219] R13: 0000000000000000 R14: 00007f504d5b5fa0 R15: 00007ffe804ce068 [ 146.375576][ T8219] [ 146.675932][ T8183] caif:caif_disconnect_client(): nothing to disconnect