last executing test programs: 3.718407724s ago: executing program 3 (id=4): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x40000080) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c40)=@filter={'filter\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0x0, 0x188, 0x188, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, &(0x7f0000000300), {[{{@ip={@multicast1, @multicast2, 0xff000000, 0xffffffff, 'wg1\x00', 'ipvlan0\x00', {}, {}, 0x62, 0x0, 0x4}, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x5, 0x0, [0x2a, 0x0, 0x3c, 0x14, 0x28, 0x3d, 0x1b, 0x2b, 0x3e, 0x12, 0x3, 0x34, 0x3c, 0x12, 0x34, 0x20], 0x0, 0x5, 0x8000000000000001}}}, {{@ip={@empty, @private=0xa010102, 0xff000000, 0xffffffff, 'bond_slave_1\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x66, 0x2, 0x6}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast1, @remote, 0xffffff00, 0xffffff00, 'bridge0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x7, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800000000bdca4100000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f00000001c0)=0x2) mmap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x1000001, 0x810, r5, 0x16804000) ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtfilter={0x174, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r7, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x144, 0x2, [@TCA_CGROUP_EMATCHES={0x18, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0xfffe}, {0x0, 0x5}}}]}]}, @TCA_CGROUP_ACT={0xfffffffffffffdf1, 0x1, [@m_csum={0x124, 0x7, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x2, 0x2, 0x8, 0xfffffbdd}, 0x7a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x40, 0x2, 0x5, 0x80000000}, 0x3b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x400, 0x1, 0x4, 0xd2}, 0x12}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0xfffffffe, 0x1, 0x3, 0x4}, 0x2a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xf44e, 0xffff, 0x8, 0x401, 0x7}, 0x35}}]}, {0x6c, 0x6, "dff028e911395100f4ef3682694b451bd573b7b28a8596e705fb0fe955a173e6d4b67fdb34425e3c14b48103574e851b5aacec501460904fdaf9af645061a57e3bc2d1d001aa44d2d21dbfc421a73ab34a572ae5998bbb5f39d75bdd7ae6c8588b729b8598b0e61cad103ed0ae897990fa9216510d9ef6fc83f959ddff4e72fccd9568126f827348ba7b687cc899dff11eb5dd09ce5f7f2ced9bf8811d19c38ee3b584dce65904223951bcd225af0d149d0946c9c098a47a70"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x174}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001"], 0xd0}}, 0x80c4) 3.24830145s ago: executing program 3 (id=6): unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x77, 0xfffff038}, {0x20}]}, 0x10) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000300)={0x10000011}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB='/\x00\x00\x00\x00>\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x20) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000080), 0x4) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={0x0, 0x74}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r7) 2.649706058s ago: executing program 4 (id=5): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7fffffff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcef, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7fffffff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcef, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) 2.495302212s ago: executing program 0 (id=1): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000fedbdf2500"/20, @ANYRES32=0x0, @ANYBLOB="40000000000000000c002b800800030000000000"], 0x2c}}, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) unshare(0x22020600) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x82, &(0x7f0000000240)={r8, @in6={{0xa, 0x4e23, 0x4e, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc2}}, [0x4, 0x8000000000000001, 0x5d07, 0x2c82, 0x26, 0x8, 0x101, 0x5, 0x6, 0x8, 0x4, 0x793, 0x4, 0x5, 0x4]}, &(0x7f00000001c0)=0x100) (async) bind$l2tp(r5, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff0700070026093a0914000600626f6e643000"/94], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 2.231992298s ago: executing program 4 (id=7): r0 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x8, 0x11, 0x0, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r7, 0x1000}, {r0, 0x4270}, {r4, 0x2}], 0x3, &(0x7f0000000180)={r9, r10+10000000}, &(0x7f00000001c0)={[0x50e4]}, 0x8) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r11) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r13, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r14}, 0x4) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x6a, 0x4, 0x0, 0x3) 2.124328909s ago: executing program 0 (id=8): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x268, 0x180, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x88}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000001030101000002000000000000000000"], 0x20}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) syz_emit_ethernet(0x1f6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x1c0, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x0, [{0x3, 0x9, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b"}, {0x0, 0x1, "000000050000000026000400"}, {0x19, 0x9, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/54}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb01ed1800000000009c9a0000000200000000000000000000002b11c42762ef5b7513"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2, 0x0, 0x0, @void, @value}, 0x20) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000001800410000000000000000000a00000000000000000000000800", @ANYRES32=r6, @ANYBLOB="06001500070000000c"], 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r8, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x38}, 0x4000880) (async) openat$cgroup_ro(r4, &(0x7f0000000780)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x38, r9, 0x513, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x40004) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x2, 0x4, 0x3c8, 0x108, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xff, 0x4, 0x0, {@empty, {[0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x8, 0x5, 0x6, 0xfff9, 0x2, 0x3, 'syzkaller0\x00', 'ipvlan1\x00', {0xff}, {}, 0x0, 0x124}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0xfe, 0x4db, {0x4000000000000000}}}}, {{@arp={@empty, @broadcast, 0x0, 0xffffffff, 0x7, 0x2, {@mac, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x4, 0x3, 0x54c, 0x1, 0x3, 0xd, 'veth1\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x0, 0x1}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x108}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 1.989951557s ago: executing program 2 (id=3): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x9c}, {0x6}]}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) 1.93205951s ago: executing program 4 (id=9): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0xfffffffffffffffc, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0xc3b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xc0}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x40}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x4}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.858444304s ago: executing program 0 (id=10): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800007a3300080000000000010000002020207b1af8ff00000000bfa100000000000007010000f3a551da0000b7030000ffffff7f850000000000000000000000000000000000000000000000000000000000000000000000000000000000002eebad59b39305ed88c85f08b41881c555d09e7a71b8f31de2b700319c158d0b939ae0b69ca584f6c80156f87a7e8a88bd5e99fa5e1e0e7beed62df694711b12aeaa939029114f2586be8edb11777ca4d8b842e6090b9b81e7dad95f16ff0fcd70ab3fa56b"], &(0x7f0000000240)='syzkaller\x00', 0x251a, 0x23, &(0x7f0000000280)=""/35, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0xc, 0x3, 0x12}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000180)='afs_cell\x00', r1, 0x0, 0x7}, 0x18) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) write$ppp(r0, &(0x7f0000000100)="7e01b0ff4a13465af7cadfb06da39becd34f5129f3dd8958d68546e3430f283f756b471b0c18d09bcb59c78a3290344762c718c369aa69d35ae4086e53c9d1c24d2374cb13a7995a162175cb04728a1cc62dc08c9183b431fa167515bb5995ec407941cad62b6f5a557f", 0x6a) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000804) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800c0001007061796c6f6164002c0002800800024000000000080007400000000d08000440000000ba0800054000000017080003400000005d0900010073797a30000000000900020073797a32"], 0x94}}, 0x4048010) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x3f) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r6, 0x422e3000) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000005500e50125bd70000000000007000000", @ANYRES32=r10, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01010300ff"], 0x38}, 0x1, 0xf0}, 0x0) (async) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0xb0) (async) sendmsg$inet6(r8, &(0x7f0000000c80)={&(0x7f0000000700)={0xa, 0x4e23, 0xf, @loopback, 0x2}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000740)="7fe8b2cd57547f9b3225decc35476c9b80c41e0d9e7756cafd2ef6a05b354eaa6dca38f4b903f11859ea4da753f4c601b1540ad58e1eba4bc62a9df607216a8d1b22a37b5db60d9277d2342e30eb5f0d836255c55201e3062f1af0716b25502202d6267418754faacc92ec4ec1ee32f4e5fd8c38bda8ad41b815d95b9e44d09281446b64d79e711981e7d56b6a029e0351ece8ecf4c45bb7a5d7f548720d6a945d62d6e53413e90f3e425712292f32a2597684deb27e39c96e4d", 0xba}, {&(0x7f0000000800)="91c6fda1fd381d0795089d0487921c247c639cd24be4f20c486652c1c4823ee31e0277810aacbdc8a69033985003796f006f1fc44dee649ec1143f7bbec646c28067cb4ebf629121c696395292a10d6746dd983688b58ebce489d1e18fdd2d7a44630a9ea3bc0792e586773de9ae1abe3d2da1f93205", 0x76}, {&(0x7f0000000880)="d3b9e942ce57a4170e2c83e6420c6c8a361ecfebc8ca7dda72aa04f95fe922002e73cfaed091f00d20b8ef6d149baa297b853a36af41c87ff48d31e895df33396eba08a7fddff312c8512b28fc902b5b30992ef3bb4c87d94ae1564c7357113151051e6f709dca72b6b7851641b98a6e3513aac3baac49a3a97f2169f570c6eaaf8f94", 0x83}, {&(0x7f0000000940)="6822aab02de233e277acdd57d8e93bb2656d253819b4ace2b197be1aed290e50abff8edb1977249c35f25272ee42ab5d17423401874e7a56fc6e1279a6a10cdfe2419697802d345af6ced54bf93d69539935069fd6aa3b65", 0x58}, {&(0x7f00000009c0)="23b4f9a161176e2be803e7ca26ca9e4bf8d442e019245da4bc4e2252165a5b1512b715d530dcaf9b8e56fbd197735215f13754d379b0a31eb7ef21886ed39da4b7b3991cc6910795f292b7c7b73da19b6198ae7b06d85ca8a17c0d7ab31200f379b430d60a77162a615769dd4ee32451c7a4554f51d4ba1379a535fe8bafe5a6f6c3cce9c36df2676604f9c8d10d1ec3c9d7539da1892a7f", 0x98}, {&(0x7f0000000a80)="dc94bb6d75652d9b3525d199c6ac5647dd0ee515947c218083cc479a168faeb91af18a24ee956db144daf735ffa77c8518838022b14002c29479524a03dfc70163186090aaf74ae38b1e6a81d692635d34ae6ae57d50bbfeb3350f14e3f00d050be7d930984498d675e0e45f33a89d0fc742fb1fa89cab4616c5de7b0bfe34e8dad66f31f10dbc5781c33726d425c6fbe01bbdeb8ead63bb8f45304bce60dc445f7058889190b0fe9a96fa186f6c7751b3aa346ad7f64a54a7840c6ea0cb7b4845839bc7737df076dcf54b3c66474438140d9898773063634a95", 0xda}], 0x6, &(0x7f0000000c00)=[@hoplimit={{0x14, 0x29, 0x34, 0x9}}, @rthdr={{0x48, 0x29, 0x39, {0x89, 0x6, 0x2, 0x3, 0x0, [@private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2]}}}], 0x60}, 0x10) (async) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) (async) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f00000001c0)={0x3, [0x75a, 0x4, 0x3]}, &(0x7f00000006c0)=0xa) sendto$inet6(r7, 0x0, 0x0, 0x10, 0x0, 0x0) (async) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/61, 0x3d}], 0x1) 1.725100401s ago: executing program 1 (id=2): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0x32}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x31, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0x32}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x31, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x2c, r2, 0xc4fc9e906872338b, 0x70bd29, 0x0, {{0x5}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000078c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x9, 0x2}, {0x9, 0xffff}, {0x6}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) socket$igmp6(0xa, 0x3, 0x2) (async) r8 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r8, &(0x7f00000012c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x48000, @dev={0xfe, 0x80, '\x00', 0x36}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="ea732ce5b0f148ca2b5be348e8d7c04428e46a83ba42e54994fbd67a45a70a2d486b17bd141f6e199e00ed6b7d214d59e32417e11fbfbcdaf19a957ffa1d6fb7718b43d143347fb49c62b3c00cbaef759c9b125136a1640964f9b90bfd95168feec00d503575f3204533cff81429cb2ab0fd613260d6c66872cbe1ebae1d60ba609012efd5784e87b3bae2504530e110e5147a1975bf713a3492253deab904abc8bac452fa204503a3b4556b478507906aaf921df50ee05e8f16662f936e3963157128b3dd1c8d2d7645421ba8fac62b7cc3b995", 0xd4}, {&(0x7f0000000140)="d10381e3b4387a834517575d8dfe1dddc17c341041c48b0fd3fe18fccb020ac9343d58d4c59282bd3f17e5169f302ac95c454093954788a5092de9275f7041709f7dc68bdbc3be6675b274b77a15c31a9499b5df20e4e0686fd54ecac96772c0f23401d35043f66dd65cb203884bdab8b229d4900dfbcb4e0b2dd272b6ffc832e29bbdff250116374e72a3749221a5ecfb0c6ff427d9969e6c04e5144c0316587707b4aa633d581dba444df9fa2d3a7e5c", 0xb1}, {&(0x7f0000000200)="20bdadae2838182948ca62e7b1cdcc7a5f9ae9c668e2c0c58f49a1a555491061fc1bfcc42a44990226b24ecf0d437bbd4274ec3dedebd28ed763758f7b3cf285d75ce860ea91d541ab6b56db85648b30a9ef43f0514a373e550add0c31d633d3800de4daf68d494d29d832554d9b829bc54f1851ff9f18bbe823bcace545a1a5b07952f027024607b2388cfebc12cf0ca357c94d14c90fb4b5420eec35ece45584bdce9217657f3f9749c8dad6f76a75b0ad7ebf151c60eeb563db17693691df439b21e2cab894b540a4c02f0e3a9b315fb2889f397e59b722a748935d3d7e06e8fdc25a5f32dc262fd5", 0xea}, {&(0x7f0000000300)="f6e3ea3acee4c3e7d81ca3286c7130f777f52028848ab201de5b2e19baea1470f641f4e53e2d641fb47bea6c7d49178414808c861a8a5e6203f411fc31aeaa094e021c5e91318cb3ea52e9379ca56f15411273d16c3f17edeb4c04eeae29de01471ede34f4bca3c17ba3c41724badd8f4047dc75dad053d566c551b4147b1840", 0x80}, {&(0x7f0000000380)="be3a1190a2b1519c484a1e36f801f1eee34b57a9bbaf3135b1f7031b3bfbacd1381eb2b606982bf9e5cfc6b9750154eab59d1df4cad783a4ca18f3e0f0b7d0998dff4114a96fc30c3db52689560a08ac3a3bbc51bd2e182cf1c02d1054c10b5771c65961f9b0cf34e56a6d1d754ece3179", 0x71}, {&(0x7f0000000400)="cc22a5b9286318e81123c859caa663370cd4ea563bf2f09b8836d603ce1a37539935a2e60a9b2c6464f94b45641ff1610eb3e2e379f4729c3d44874fefb08c3891f22632ea35b02bb24213a58e9c51d8d106788732a11da9b779432af5f42f9e9098ff9eec4df41d77c9ec75b0298afa5b3ae54732282d858a76313e9be1a3e5dbdaa5ec8f7a0c6caa5bbaa6775ea03935", 0x91}], 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1b0}}, {{&(0x7f0000000700)={0xa, 0x4e23, 0x8, @local, 0x7}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000740)="a727864900c320646d8389be47b2272725ea14f4062f6d8ce790a0a2e77631e1922bb7c20588c6750cb6", 0x2a}, {&(0x7f0000000780)="4019eba0f2fa20193a8c65dea7d9aa4c63d50452cbed2bc065e9b396488bb7037ce8f38f043703a6027615c7891853fc486b220b9af853c9a90e02c89fda827abc198e399d50332bde2c842f110ea738ff44de81a273ef174005a58e064c58ade2ea60995136c68d23d19b9fe5c16d9f977b8826161876f70857a54d4a543be7fb6ce8d74f8df65799d0a40bf0ce5a091ce95ca5d2acf11cda31328a13a206880384f404689a4cd619d4779e3397312d524d199347c437c2e2e4e0b24e34eb9cea3fbb9ae3", 0xc5}, {&(0x7f0000000880)="7be2031c5ac70902d8b5c089ae47190543d394d077dc12d98e09b5b1dac9a4f2b73d638f6378b95dd84a26c5123708117df9590198ba2a9c43b11629c554e44790fef8b4a7971bd0a11abed72f6c068cc496460c55057ae482f90059ed21a7fc22b70fab23048af3d8b89b6bde9b51302076344a295aa19891d5a82ba4c17fd321d79086f7c15a1fc297f4649fd9fc7f49e05e83090b9c1677015bb7304a9814ce658ff63579258f4fd5a74d7ec1403bb2fc77689b384e2890", 0xb9}], 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="5600ff000000000000"], 0x18}}, {{&(0x7f00000009c0)={0xa, 0x4e21, 0x4c3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x889}, 0x1c, &(0x7f0000000d40)=[{&(0x7f0000000a00)="909876a46c6813690c80fd4e80727e9d4d7271dc2d77cd5dd8bd6e94d436a7b68da8de231d", 0x25}, {&(0x7f0000000a40)="5559ea1ed217cfb8c35f0963e210276e741c9073c8d3c2e33c365d0e145a429352a2e0883e31d0d385874fcf71b5f4a5eae36efbd396b675fa1b142be29282c45d690f3171dede6af8dfd04009fd970cee7e87cd56c27d21ada128df36216b1c86259335e24b3c1affdd857fd2a2819dac5ec5eacb4117ca7368d4e366c7079997e346fee2869a39ad38e65fbff2360b", 0x90}, {&(0x7f0000000b00)="5cb45700eb", 0x5}, {&(0x7f0000000b40)="a45b0bfdfe82fbd882ec7ca1784265ac85826843b1c8c30181ee349693b279ff82ca8e2e9751", 0x26}, {&(0x7f0000000b80)="9f88c7d6d975c2bb77ecd54d0b0d3e243b6c030c4279622b90213d45975eb1ccf95abc6c8629e9ac6bf98ce404ab65bfbb1f09fa2674888a53257f24", 0x3c}, {&(0x7f0000000bc0)="c3cfbb32149e65", 0x7}, {&(0x7f0000000c00)="74b0c6356049b879db34b8156832b555feea58a0fe2f327a50", 0x19}, {&(0x7f0000000c40)="419ef85bea73160af0d578ba6b841eed18ce13063497d9869c31a3e77081f53095fe07a09b0d64c779c4d63a73b6942b828e17590e416aa0bff664df305187d65f7bf18329d9a97f15880cee3f238741c4f0bd88e3207af7aef67f156884c9e09c2d28c7ae5806914b8bde1ab327b5f7846852664bb6cc52ba130bd798daf9ecd441484c582db50d2d1fdc0de0555913ae4347d6b288bae612ed5b2287c56c3cde1ec1019db00527d7be2096bf4b5fca3e149bb7f635b5ab8f1749c152e40467f9aaadc3a4efa3d58e932bf189a99213d4a8abeda7ac895c", 0xd8}], 0x8, &(0x7f0000000dc0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @dstopts_2292={{0x120, 0x29, 0x4, {0x11, 0x20, '\x00', [@ra={0x5, 0x2, 0x80}, @hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x30, {0x0, 0xa, 0x5c, 0xc, [0xca, 0xfffffffffffffffe, 0x82f, 0x7f, 0x0]}}, @generic={0x3, 0xb8, "1c1e962c63bdb19796ee0a2c79f434e67028817db5863133be38a2148dbd346d904cc5bc2b4b609ec63dbf13a80e919461737d890a5e66aaca16cbdd7fe4f5c80fba4972b56fa17cfcbcf91e2094c7c57150fd57a54bda876acd54b9879b15b47769b774b3daa062012849fb5437992e15e958503519abfcb99d395138d410c18588083747e86ed5a1a631f9f897b09dd38eed02e373b1eccba0c13e5f588e9e06b8c1a3719fad117fa89301ecf7bf592b133158744c5def"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @dstopts={{0x108, 0x29, 0x37, {0x33, 0x1d, '\x00', [@jumbo={0xc2, 0x4, 0x7fffffff}, @pad1, @enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0x8}, @generic={0x65, 0xda, "8718b5ec9936c967fd91cafb5104ec53582afcc8fa74f4332f4519e948210af895969db700c10ca4c574957bd190ce5d61c3076a117222c241e226ea3c6e12da1eb4b563ad0f0fe9ecce5c2cc97abfdcc71c20d95932c2dd00c0dda59b950a570fa68f09913b97c00e14e2fc68abc8ae3a2e3378b76f728d49a322df1f809268f865413e669a1edc90e6160737a14360f4c963ad51404bd03d182857b7f909d247e3102b1121220332d501388833e10fc993734cf054cee7f07dff03041e44ba559e87bcc3647bbb2a3499d6ea5ee576b19fbe8a1e60fded159b"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7f}}], 0x270}}, {{&(0x7f0000001040)={0xa, 0x4e23, 0x800, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000001140)=[{&(0x7f0000001080)="b27b3182cec5b47c5189bc3e4c92af16abe1de23df5c7bd13975e8f8b075b0c6709ad6df236c92df3067f8259588dcfad9b3868cc77bddce1e4ede0b8c5c50acb9842751b24f3c0eec629cd15eccde3e549170a98576ca3bb5678d38ce3e73cf5b75c4913b936d5fb5d9306f277bed04d795e42161a65e1ecdfe1bffd72b6bebc6ca66c19bec827d8a9207a0fd47ee2998ff7608aeac", 0x96}], 0x1, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x140}}], 0x4, 0x4080) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)) socket(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r10 = socket$xdp(0x2c, 0x3, 0x0) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r12, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r12, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) setsockopt$XDP_RX_RING(r12, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r12, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r12, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) 1.628478217s ago: executing program 2 (id=11): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004011, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r4, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x78, r4, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x51}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "02ef96af"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 1.617634918s ago: executing program 4 (id=12): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) syz_emit_ethernet(0x82, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527e004c3c0000000000000000000000000000000100ff02000000000000000000000000000133"], 0x0) 1.440060614s ago: executing program 4 (id=13): socket(0x840000000002, 0x3, 0xff) socket(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$isdn(0x22, 0x3, 0x23) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000500)={0x0, 0x6}, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0xe9d8, 0x1, 0xc4, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x80000001}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000048000000ac1e000100000000000000000000000000040000000000000a0040"], 0xb8}}, 0x4000) 1.296175834s ago: executing program 1 (id=14): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000001f00)=""/4090, 0x4}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c0000000000851000000200000085023a000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb950368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 1.275949273s ago: executing program 0 (id=15): socket$netlink(0x10, 0x3, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000080)="922b22c06d1ff7de1259c2df5ae341dbac30653a130057a4cddc7c7e153f6c8fa49896613e0dbe5e8183be97ea9486821fa12ed926f35a8b42e55079654448773f4dff0000000000000000", 0x13) getsockopt$inet_int(r1, 0x10d, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x1c) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r7) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8d00"}) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="48009200", @ANYRES16=r3, @ANYRESOCT=r6, @ANYRES8], 0x48}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="00d40000", @ANYRES16=r8, @ANYBLOB="00082cbd7000fedbdf250300000008000200030000004c000480050003000600000005000300050000000500030000000000050003000500000005000300020000000500030007000000050003000500000005000300010000000500030000000000200008801c000780080005005693df5b080006003c0000000800050059809a4c080001000300000008000200020000000800010002000000"], 0xa0}, 0x1, 0x0, 0x0, 0x2004811}, 0x40000) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @local}}, 0x80000, 0x9, 0x300, 0x0, 0x55}, 0x9c) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x59}, 0x0, &(0x7f0000000240)={0x8, 0x0, 0x0, 0x9, 0x0, 0x9, 0x7fffdfff}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) 1.230787405s ago: executing program 2 (id=16): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r3, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x3, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0xa}, {0x4, 0x9, 0x8, 0x873}]}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmsg$alg(r8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000008c0)=ANY=[], 0x8c0}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) recvmmsg$unix(r8, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x12040, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x30, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @ndisc_redir={0x89, 0x2, 0x0, '\x00', @private0, @remote}}}}}, 0x66) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) close(r3) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000003a0600ac141430e0000003808a8972bd0b72e4108296a3d206163944f8afc1bf505602da9168d6f9ce320068ff1f7e345a170d1423c2e18c8ed410c8aab9a20b514d2b583b90a86da4483488c0fdc6c2"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1) 1.063566184s ago: executing program 1 (id=17): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00') ioctl$NS_GET_NSTYPE(r0, 0x8008b705, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendto$inet6(r3, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000400000000000e1362037a4107998b4dfb0034a7a43d03ad72df7a93e3e14558b2a2c263dd92f3ebb4bece3ca2d027cbe", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r6, 0x1000) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r7, 0xd568b000) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtaction={0x154, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x140, 0x1, [@m_mirred={0x13c, 0x1f, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x6, 0x10000000, 0x0, 0xffe0000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x2, 0x6, 0x6}, 0x4, r4}}]}, {0xcd, 0xa, "7cc731406b7a322fc95a132bd1617fc66e1101371ad39ee2c00998aa8c2a5f7bd1f2be1b777a74af938da340ea59aa6e594330453d3fea4699f40acab29f0da72eff30ea08b34e0ba88cf870183b1f3f70f6030cd169f4d7e6c89bfa72ae137a523daf8e672260ed39f0f15a0e04081b104abc9ede81fc1a77d1a1c0f04907c2a6967082904026cfc37401c97b4b637b30eb24c1c61d86a852a621a1dfb78fbf60d01bf4b7b47b72af34c1aef7b55b1833b22de7769fc1ac4ebe3abac6145f9079d000186184506fa5"}, {0xc}, {0xc}}}]}]}, 0x154}}, 0x2000a804) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x2}}, 0x10) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x46, 0x2, 0x9}]}) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r9, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) 957.849175ms ago: executing program 3 (id=18): r0 = socket$netlink(0x10, 0x3, 0x13) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0x3) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000c000000480005800800010065756800070002"], 0x5c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r5, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f0000000600)={0x80, 0xe}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000000"], 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000010000108000000000000000000000000b195171df323e0a2d183d360f7a8e84f0333f286c99b6233ca49b09a3b8739e517760ac3223ef8759380462eed6c1bc2287edb63e6b4caa8a419388afc84ea983f96e6997123a41c91327bdd0694dc87a9e01e981da8208cf9cc078aa347fd1c6179deaa083892a502748786a69bdcaf2e664921972482a21ce04971adebe2b01d86fba3820804008867c2c9df8c537cd8ac8c6f59bc233d707715d03394ca31e5", @ANYRES32=0x0, @ANYBLOB="008000000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$can_j1939(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x1d, r5, 0x2, {0x0, 0x1, 0x4}, 0x2}, 0x18, &(0x7f00000006c0)={&(0x7f0000000640)="f9dc6e65e9f2a50532581db317d9d3983cc91a15f8bb556e59223cf947a301208a48c762378f60b471404a6a721c6c0f30b08cf7f2244bbc17c6e76eab6c2ce496a5882c11f20962b35390c37e6e118446564df6afa9d5af6009863bacc52e676903fcddaaa15d0be3adffb3f654af37e4844a1e", 0x74}, 0x1, 0x0, 0x0, 0x8801}, 0x4840) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0], 0x10}}, 0x20000000) r8 = socket$key(0xf, 0x3, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$unix(0x1, 0x2, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x4c, r11, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x42}, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x9, 0x32}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r11, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5}]}, 0x30}}, 0x4041) sendmsg$key(r8, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x80}}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @rand_addr=0x64010102}]}}}]}, 0x3c}}, 0x0) 398.359279ms ago: executing program 4 (id=19): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x4c}}, 0x2) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00006600}, 0x8000000, 0x0, 0x1, 0x1}, 0x29) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x10, 0x6, 0x5c0, 0x1f8, 0xd0, 0x0, 0xd0, 0x1f8, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}]}, @common=@unspec=@NFQUEUE3={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x40000000}, @NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00') ioctl$BTRFS_IOC_RM_DEV(r9, 0x8004b709, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003700010324bd7002f8dbdf2507"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) recvmmsg(r10, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, &(0x7f0000000000)={r10, 0x2, 0x0, 0x401}) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='GPL\x00', 0x2, 0x8d, &(0x7f0000000680)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 192.168574ms ago: executing program 3 (id=20): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000004000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001400000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 176.859767ms ago: executing program 0 (id=21): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000c00)=@gettaction={0x1e8, 0x32, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x54c}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3d7}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}]}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x48e}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1c}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x41c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004000) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x30}}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) (async) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000280)={0x1, &(0x7f0000001240)=[{@none}]}) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000002540)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x108, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @remote, [0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x1, 0xcc60, 0x5a, 0x7, 0x10}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0xfffffffc, 0x0, 0xffe, 0x6, 0x3}}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0xc4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x5411, &(0x7f00000007c0)={'team0\x00', 0x0}) (async) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x4008000}, 0x44) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000911071000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000000d0a010e00000000000000000100000009000100", @ANYRESDEC=r9], 0x2c}}, 0x0) 169.70667ms ago: executing program 1 (id=22): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x23, 0x80805, 0x2) getsockopt$inet6_tcp_buf(r1, 0x6, 0x6, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='\t\x00'/20, @ANYRES32, @ANYBLOB="0000000004a10100050027"], 0x28}}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0xf, 0x9, 0x40, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x20, 0xfff, 0x9}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x3, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6, 0x0, 0x200000}, 0x4}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c00080008"], 0x178}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x3a, 0x9, 0x0, 0x25dfdbfb, {0x1}}, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x1, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x0, 0x0, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x840) 0s ago: executing program 3 (id=23): syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @random="07a24f79ee3f", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, ' \x00', 0x30, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0x883e, 0x30, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "aaf43bbacf0d7d4dd62d252269d4c77febb30ee631ad1be1a15e592d3678edb6aaec874e"}}}}}}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x1020, &(0x7f0000001200)=""/4128, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01030000000000af9d00030000000900010073797a3000000000080002400000000228000000200a01040000000000000000030000000900010073797a3000000000080002"], 0x78}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01030000000000af9d00030000000900010073797a3000000000080002400000000228000000200a01040000000000000000030000000900010073797a3000000000080002"], 0x78}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0xa, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x6}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000030000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002400000000308000140000000120800034000000000080003400000000a"], 0x122}}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.135' (ED25519) to the list of known hosts. [ 73.566345][ T5823] cgroup: Unknown subsys name 'net' [ 73.721201][ T5823] cgroup: Unknown subsys name 'cpuset' [ 73.729927][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.350268][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.733870][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.742514][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.752774][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.760646][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.768809][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.776962][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.797577][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.801737][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.805370][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.826293][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.838580][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.853381][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.861023][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.869122][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.876291][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.880913][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.885522][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.892074][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.898205][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.905371][ T5852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.915930][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.920053][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.928283][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.933236][ T5852] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.941038][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.948236][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.956829][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.962268][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.975926][ T5852] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.987971][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.479006][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 78.499899][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 78.548081][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 78.592639][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 78.682819][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 78.776891][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.786261][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.794366][ T5847] bridge_slave_0: entered allmulticast mode [ 78.801802][ T5847] bridge_slave_0: entered promiscuous mode [ 78.823224][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.830618][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.838043][ T5840] bridge_slave_0: entered allmulticast mode [ 78.844779][ T5840] bridge_slave_0: entered promiscuous mode [ 78.851881][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.862058][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.870465][ T5843] bridge_slave_0: entered allmulticast mode [ 78.880779][ T5843] bridge_slave_0: entered promiscuous mode [ 78.889720][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.896889][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.904283][ T5843] bridge_slave_1: entered allmulticast mode [ 78.911134][ T5843] bridge_slave_1: entered promiscuous mode [ 78.919335][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.926452][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.934350][ T5847] bridge_slave_1: entered allmulticast mode [ 78.941307][ T5847] bridge_slave_1: entered promiscuous mode [ 78.975635][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.983068][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.990708][ T5840] bridge_slave_1: entered allmulticast mode [ 78.999513][ T5840] bridge_slave_1: entered promiscuous mode [ 79.065249][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.093151][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.104363][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.118159][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.146877][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.156948][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.165042][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.172315][ T5833] bridge_slave_0: entered allmulticast mode [ 79.179482][ T5833] bridge_slave_0: entered promiscuous mode [ 79.188499][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.207960][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.215089][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.223416][ T5834] bridge_slave_0: entered allmulticast mode [ 79.231440][ T5834] bridge_slave_0: entered promiscuous mode [ 79.241595][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.249069][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.256324][ T5834] bridge_slave_1: entered allmulticast mode [ 79.263981][ T5834] bridge_slave_1: entered promiscuous mode [ 79.281240][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.288523][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.295690][ T5833] bridge_slave_1: entered allmulticast mode [ 79.302905][ T5833] bridge_slave_1: entered promiscuous mode [ 79.379354][ T5840] team0: Port device team_slave_0 added [ 79.387565][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.400789][ T5843] team0: Port device team_slave_0 added [ 79.422175][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.435676][ T5847] team0: Port device team_slave_0 added [ 79.443985][ T5840] team0: Port device team_slave_1 added [ 79.452269][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.473342][ T5843] team0: Port device team_slave_1 added [ 79.491768][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.512730][ T5847] team0: Port device team_slave_1 added [ 79.559727][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.566741][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.593890][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.623161][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.632230][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.660970][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.675110][ T5833] team0: Port device team_slave_0 added [ 79.682093][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.690337][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.717605][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.731452][ T5834] team0: Port device team_slave_0 added [ 79.740711][ T5834] team0: Port device team_slave_1 added [ 79.755990][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.763217][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.789285][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.802116][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.809606][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.835590][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.854747][ T5833] team0: Port device team_slave_1 added [ 79.884730][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.891890][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.917924][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.965077][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.972830][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.999455][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.012126][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.019578][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.046155][ T5852] Bluetooth: hci3: command tx timeout [ 80.046160][ T5841] Bluetooth: hci1: command tx timeout [ 80.046707][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.052514][ T5852] Bluetooth: hci2: command tx timeout [ 80.052711][ T5852] Bluetooth: hci4: command tx timeout [ 80.099973][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.107400][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.111099][ T5841] Bluetooth: hci0: command tx timeout [ 80.139810][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.154495][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.162586][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.189950][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.220773][ T5840] hsr_slave_0: entered promiscuous mode [ 80.227506][ T5840] hsr_slave_1: entered promiscuous mode [ 80.245362][ T5843] hsr_slave_0: entered promiscuous mode [ 80.251965][ T5843] hsr_slave_1: entered promiscuous mode [ 80.258594][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.266414][ T5843] Cannot create hsr debugfs directory [ 80.331645][ T5847] hsr_slave_0: entered promiscuous mode [ 80.338672][ T5847] hsr_slave_1: entered promiscuous mode [ 80.344700][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.353148][ T5847] Cannot create hsr debugfs directory [ 80.403101][ T5833] hsr_slave_0: entered promiscuous mode [ 80.410412][ T5833] hsr_slave_1: entered promiscuous mode [ 80.416397][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.424903][ T5833] Cannot create hsr debugfs directory [ 80.434574][ T5834] hsr_slave_0: entered promiscuous mode [ 80.441488][ T5834] hsr_slave_1: entered promiscuous mode [ 80.447818][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.455407][ T5834] Cannot create hsr debugfs directory [ 80.829204][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.853993][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.871173][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.886276][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.919847][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.932845][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.963991][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.984348][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.029053][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.049774][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.081747][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.110173][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.135022][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.164540][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.189727][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.209573][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.263931][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.306224][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.325300][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.335622][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.356284][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.376014][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.423774][ T3475] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.431066][ T3475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.454409][ T3475] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.461588][ T3475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.473901][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.529036][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.575472][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.582689][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.619566][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.645953][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.653155][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.721371][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.744076][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.761041][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.812159][ T3475] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.819304][ T3475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.846262][ T3475] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.853487][ T3475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.879985][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.926826][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.942658][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.949830][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.961323][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.968476][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.004004][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.011246][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.052628][ T3475] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.059837][ T3475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.090662][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.108388][ T5841] Bluetooth: hci1: command tx timeout [ 82.114083][ T5841] Bluetooth: hci4: command tx timeout [ 82.120007][ T5852] Bluetooth: hci2: command tx timeout [ 82.125613][ T5852] Bluetooth: hci3: command tx timeout [ 82.142567][ T5840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.173414][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.188121][ T5852] Bluetooth: hci0: command tx timeout [ 82.313686][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.559071][ T5847] veth0_vlan: entered promiscuous mode [ 82.622632][ T5847] veth1_vlan: entered promiscuous mode [ 82.683699][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.773498][ T5843] veth0_vlan: entered promiscuous mode [ 82.787840][ T5847] veth0_macvtap: entered promiscuous mode [ 82.806446][ T5847] veth1_macvtap: entered promiscuous mode [ 82.821517][ T5840] veth0_vlan: entered promiscuous mode [ 82.831718][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.856088][ T5840] veth1_vlan: entered promiscuous mode [ 82.869917][ T5843] veth1_vlan: entered promiscuous mode [ 82.894487][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.921091][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.949806][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.964626][ T5847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.975667][ T5847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.984553][ T5847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.993513][ T5847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.035147][ T5840] veth0_macvtap: entered promiscuous mode [ 83.043180][ T5843] veth0_macvtap: entered promiscuous mode [ 83.083603][ T5843] veth1_macvtap: entered promiscuous mode [ 83.092012][ T5840] veth1_macvtap: entered promiscuous mode [ 83.163793][ T5833] veth0_vlan: entered promiscuous mode [ 83.188801][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.204102][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.215559][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.228631][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.243833][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.253761][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.267338][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.279573][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.287040][ T5834] veth0_vlan: entered promiscuous mode [ 83.330852][ T5833] veth1_vlan: entered promiscuous mode [ 83.343908][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.353284][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.360231][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.371797][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.382911][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.391011][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.401714][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.411728][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.422338][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.434070][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.444744][ T5834] veth1_vlan: entered promiscuous mode [ 83.465683][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.476908][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.490639][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.500364][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.528129][ T5843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.536876][ T5843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.546076][ T5843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.557661][ T5843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.600649][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.617972][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.682815][ T5833] veth0_macvtap: entered promiscuous mode [ 83.744156][ T5833] veth1_macvtap: entered promiscuous mode [ 83.769800][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.770502][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.786149][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.821370][ T5834] veth0_macvtap: entered promiscuous mode [ 83.840882][ T5834] veth1_macvtap: entered promiscuous mode [ 83.906258][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.915132][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.933527][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.959294][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.970636][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.982195][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.992838][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.994168][ T5923] Zero length message leads to an empty skb [ 84.004386][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.021205][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 84.028695][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.044149][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.056234][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.068506][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.080170][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.091503][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.102746][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.113324][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.124566][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.135828][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.168198][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.173449][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 84.180980][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.201463][ T5852] Bluetooth: hci2: command tx timeout [ 84.206943][ T5852] Bluetooth: hci3: command tx timeout [ 84.207940][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.212599][ T5841] Bluetooth: hci4: command tx timeout [ 84.227062][ T5848] Bluetooth: hci1: command tx timeout [ 84.229107][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.244105][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.254867][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.268288][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.276697][ T5848] Bluetooth: hci0: command tx timeout [ 84.295482][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.306258][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.317529][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.322741][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.337045][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.348291][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.387136][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.403995][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.421268][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.432164][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.444757][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.477975][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.488220][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.496973][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.507403][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.519765][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.537573][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.553210][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.572086][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.587267][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.596038][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.730728][ T5933] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6'. [ 84.822745][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.860117][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.193817][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.212255][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.278563][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.298209][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.429265][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.452703][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.568374][ T5949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 86.014608][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 86.043628][ T5963] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 86.063390][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 86.110037][ T5963] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 86.136359][ T5963] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2'. [ 86.170658][ T5964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 86.267351][ T5848] Bluetooth: hci4: command tx timeout [ 86.272828][ T5848] Bluetooth: hci3: command tx timeout [ 86.278426][ T5841] Bluetooth: hci2: command tx timeout [ 86.286197][ T5852] Bluetooth: hci1: command tx timeout [ 86.347525][ T5848] Bluetooth: hci0: command tx timeout [ 86.603340][ T5983] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.636824][ T5983] warning: `syz.0.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.671326][ T5985] syz.2.16 uses obsolete (PF_INET,SOCK_PACKET) [ 87.030785][ T6005] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 87.057580][ T5982] team0 (unregistering): Port device team_slave_0 removed [ 87.087881][ T5982] team0 (unregistering): Port device team_slave_1 removed [ 87.169958][ T5990] bridge1: entered promiscuous mode [ 87.184628][ T5990] bridge1: entered allmulticast mode [ 87.241643][ T5990] team0: Port device bridge1 added [ 87.441342][ T6010] ip6t_srh: unknown srh invflags 4000 [ 87.614127][ T6020] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 87.679861][ T6017] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 87.701479][ T6025] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 87.772418][ T6020] [ 87.774794][ T6020] ====================================================== [ 87.781810][ T6020] WARNING: possible circular locking dependency detected [ 87.788844][ T6020] 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 Not tainted [ 87.795949][ T6020] ------------------------------------------------------ [ 87.802965][ T6020] syz.0.21/6020 is trying to acquire lock: [ 87.808767][ T6020] ffff88805e2e0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_change_mac+0xc6/0x1160 [ 87.818548][ T6020] [ 87.818548][ T6020] but task is already holding lock: [ 87.825912][ T6020] ffff8880293acd28 (&dev->lock){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50 [ 87.834893][ T6020] [ 87.834893][ T6020] which lock already depends on the new lock. [ 87.834893][ T6020] [ 87.845298][ T6020] [ 87.845298][ T6020] the existing dependency chain (in reverse order) is: [ 87.854309][ T6020] [ 87.854309][ T6020] -> #1 (&dev->lock){+.+.}-{4:4}: [ 87.861535][ T6020] lock_acquire+0x1ed/0x550 [ 87.866575][ T6020] __mutex_lock+0x19c/0x1010 [ 87.871718][ T6020] register_netdevice+0x12d8/0x1b70 [ 87.877451][ T6020] cfg80211_register_netdevice+0x149/0x2f0 [ 87.883801][ T6020] ieee80211_if_add+0x119d/0x1780 [ 87.889354][ T6020] ieee80211_register_hw+0x3708/0x42e0 [ 87.895438][ T6020] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 87.901690][ T6020] init_mac80211_hwsim+0x87a/0xb00 [ 87.907328][ T6020] do_one_initcall+0x248/0x930 [ 87.912618][ T6020] do_initcall_level+0x157/0x210 [ 87.918082][ T6020] do_initcalls+0x71/0xd0 [ 87.922934][ T6020] kernel_init_freeable+0x435/0x5d0 [ 87.929093][ T6020] kernel_init+0x1d/0x2b0 [ 87.933955][ T6020] ret_from_fork+0x4b/0x80 [ 87.938899][ T6020] ret_from_fork_asm+0x1a/0x30 [ 87.944324][ T6020] [ 87.944324][ T6020] -> #0 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 87.952066][ T6020] validate_chain+0x18ef/0x5920 [ 87.957443][ T6020] __lock_acquire+0x1397/0x2100 [ 87.962828][ T6020] lock_acquire+0x1ed/0x550 [ 87.967864][ T6020] __mutex_lock+0x19c/0x1010 [ 87.973418][ T6020] ieee80211_change_mac+0xc6/0x1160 [ 87.979679][ T6020] netif_set_mac_address+0x327/0x510 [ 87.985601][ T6020] dev_set_mac_address+0x38/0x50 [ 87.991754][ T6020] bond_enslave+0xff3/0x3910 [ 87.996877][ T6020] do_set_master+0x579/0x730 [ 88.002199][ T6020] do_setlink+0xfee/0x40f0 [ 88.007242][ T6020] rtnl_newlink+0x15a6/0x1d90 [ 88.012460][ T6020] rtnetlink_rcv_msg+0x791/0xcf0 [ 88.017936][ T6020] netlink_rcv_skb+0x206/0x480 [ 88.023238][ T6020] netlink_unicast+0x7f6/0x990 [ 88.028539][ T6020] netlink_sendmsg+0x8de/0xcb0 [ 88.033834][ T6020] __sock_sendmsg+0x221/0x270 [ 88.039042][ T6020] ____sys_sendmsg+0x53a/0x860 [ 88.044328][ T6020] __sys_sendmsg+0x269/0x350 [ 88.049443][ T6020] do_syscall_64+0xf3/0x230 [ 88.054563][ T6020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.060985][ T6020] [ 88.060985][ T6020] other info that might help us debug this: [ 88.060985][ T6020] [ 88.071217][ T6020] Possible unsafe locking scenario: [ 88.071217][ T6020] [ 88.078670][ T6020] CPU0 CPU1 [ 88.084030][ T6020] ---- ---- [ 88.089413][ T6020] lock(&dev->lock); [ 88.093409][ T6020] lock(&rdev->wiphy.mtx); [ 88.100612][ T6020] lock(&dev->lock); [ 88.107123][ T6020] lock(&rdev->wiphy.mtx); [ 88.111632][ T6020] [ 88.111632][ T6020] *** DEADLOCK *** [ 88.111632][ T6020] [ 88.119806][ T6020] 2 locks held by syz.0.21/6020: [ 88.124738][ T6020] #0: ffffffff8fed6e08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 88.133820][ T6020] #1: ffff8880293acd28 (&dev->lock){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50 [ 88.143413][ T6020] [ 88.143413][ T6020] stack backtrace: [ 88.149316][ T6020] CPU: 0 UID: 0 PID: 6020 Comm: syz.0.21 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 88.149335][ T6020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.149350][ T6020] Call Trace: [ 88.149356][ T6020] [ 88.149364][ T6020] dump_stack_lvl+0x241/0x360 [ 88.149399][ T6020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.149416][ T6020] ? __pfx__printk+0x10/0x10 [ 88.149436][ T6020] print_circular_bug+0x13a/0x1b0 [ 88.149456][ T6020] check_noncircular+0x36a/0x4a0 [ 88.149477][ T6020] ? __pfx_check_noncircular+0x10/0x10 [ 88.149496][ T6020] ? lockdep_lock+0x123/0x2b0 [ 88.149518][ T6020] ? validate_chain+0x11e/0x5920 [ 88.149539][ T6020] validate_chain+0x18ef/0x5920 [ 88.149566][ T6020] ? __pfx_validate_chain+0x10/0x10 [ 88.149584][ T6020] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 88.149606][ T6020] ? __pfx_validate_chain+0x10/0x10 [ 88.149624][ T6020] ? __pfx_validate_chain+0x10/0x10 [ 88.149648][ T6020] ? __pfx_validate_chain+0x10/0x10 [ 88.149665][ T6020] ? __pfx_validate_chain+0x10/0x10 [ 88.149685][ T6020] ? idr_get_free+0x91c/0xab0 [ 88.149704][ T6020] ? __pfx_validate_chain+0x10/0x10 [ 88.149722][ T6020] ? mark_lock+0x9a/0x360 [ 88.149738][ T6020] __lock_acquire+0x1397/0x2100 [ 88.149768][ T6020] lock_acquire+0x1ed/0x550 [ 88.149792][ T6020] ? ieee80211_change_mac+0xc6/0x1160 [ 88.149817][ T6020] ? __pfx_lock_acquire+0x10/0x10 [ 88.149842][ T6020] ? __pfx___might_resched+0x10/0x10 [ 88.149869][ T6020] __mutex_lock+0x19c/0x1010 [ 88.149890][ T6020] ? ieee80211_change_mac+0xc6/0x1160 [ 88.149912][ T6020] ? __pfx_lock_release+0x10/0x10 [ 88.149938][ T6020] ? ieee80211_change_mac+0xc6/0x1160 [ 88.149959][ T6020] ? __pfx___mutex_lock+0x10/0x10 [ 88.149982][ T6020] ? __pfx_vxlan_netdevice_event+0x10/0x10 [ 88.149999][ T6020] ? ib_device_get_by_netdev+0x85/0x5e0 [ 88.150025][ T6020] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 88.150050][ T6020] ? hsr_netdev_notify+0x295/0xb50 [ 88.150074][ T6020] ieee80211_change_mac+0xc6/0x1160 [ 88.150096][ T6020] ? ip6_route_dev_notify+0x99/0x600 [ 88.150116][ T6020] ? notifier_call_chain+0x15a/0x3f0 [ 88.150140][ T6020] ? notifier_call_chain+0x3cc/0x3f0 [ 88.150164][ T6020] netif_set_mac_address+0x327/0x510 [ 88.150186][ T6020] ? __pfx_netif_set_mac_address+0x10/0x10 [ 88.150210][ T6020] dev_set_mac_address+0x38/0x50 [ 88.150228][ T6020] bond_enslave+0xff3/0x3910 [ 88.150245][ T6020] ? __pfx_fib6_run_gc+0x10/0x10 [ 88.150272][ T6020] ? ip6_route_dev_notify+0x99/0x600 [ 88.150291][ T6020] ? notifier_call_chain+0x15a/0x3f0 [ 88.150316][ T6020] ? __pfx_bond_enslave+0x10/0x10 [ 88.150338][ T6020] ? __pfx___dev_change_flags+0x10/0x10 [ 88.150355][ T6020] ? validate_linkmsg+0x828/0xa40 [ 88.150377][ T6020] ? mutex_is_locked+0x17/0x50 [ 88.150397][ T6020] do_set_master+0x579/0x730 [ 88.150417][ T6020] do_setlink+0xfee/0x40f0 [ 88.150440][ T6020] ? mark_lock+0x9a/0x360 [ 88.150456][ T6020] ? __pfx_do_setlink+0x10/0x10 [ 88.150471][ T6020] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 88.150497][ T6020] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 88.150523][ T6020] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 88.150541][ T6020] ? lockdep_hardirqs_on+0x99/0x150 [ 88.150561][ T6020] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 88.150580][ T6020] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 88.150600][ T6020] ? rcu_is_watching+0x15/0xb0 [ 88.150619][ T6020] ? __mutex_lock+0xba3/0x1010 [ 88.150645][ T6020] ? __mutex_lock+0x602/0x1010 [ 88.150668][ T6020] ? rtnl_newlink+0xc4c/0x1d90 [ 88.150693][ T6020] ? __pfx___mutex_lock+0x10/0x10 [ 88.150718][ T6020] ? ns_capable+0x8a/0xf0 [ 88.150737][ T6020] ? rtnl_link_get_net_capable+0x168/0x340 [ 88.150755][ T6020] rtnl_newlink+0x15a6/0x1d90 [ 88.150779][ T6020] ? stack_depot_save_flags+0x37/0x940 [ 88.150810][ T6020] ? __pfx_rtnl_newlink+0x10/0x10 [ 88.150834][ T6020] ? __netlink_deliver_tap+0x561/0x7f0 [ 88.150859][ T6020] ? __pfx_validate_chain+0x10/0x10 [ 88.150875][ T6020] ? __sock_sendmsg+0x221/0x270 [ 88.150898][ T6020] ? ____sys_sendmsg+0x53a/0x860 [ 88.150916][ T6020] ? __sys_sendmsg+0x269/0x350 [ 88.150933][ T6020] ? do_syscall_64+0xf3/0x230 [ 88.150954][ T6020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.150984][ T6020] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 88.151009][ T6020] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 88.151037][ T6020] ? mark_lock+0x9a/0x360 [ 88.151053][ T6020] ? __lock_acquire+0x1397/0x2100 [ 88.151089][ T6020] ? __pfx_lock_release+0x10/0x10 [ 88.151118][ T6020] ? __pfx_rtnl_newlink+0x10/0x10 [ 88.151143][ T6020] rtnetlink_rcv_msg+0x791/0xcf0 [ 88.151167][ T6020] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 88.151193][ T6020] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 88.151221][ T6020] ? ref_tracker_free+0x643/0x7e0 [ 88.151239][ T6020] netlink_rcv_skb+0x206/0x480 [ 88.151263][ T6020] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 88.151288][ T6020] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 88.151320][ T6020] ? netlink_deliver_tap+0x2e/0x1b0 [ 88.151345][ T6020] netlink_unicast+0x7f6/0x990 [ 88.151370][ T6020] ? __pfx_netlink_unicast+0x10/0x10 [ 88.151392][ T6020] ? __virt_addr_valid+0x45f/0x530 [ 88.151407][ T6020] ? __phys_addr_symbol+0x2f/0x70 [ 88.151422][ T6020] ? __check_object_size+0x47a/0x730 [ 88.151446][ T6020] netlink_sendmsg+0x8de/0xcb0 [ 88.151475][ T6020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.151501][ T6020] ? aa_sock_msg_perm+0x91/0x160 [ 88.151528][ T6020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.151552][ T6020] __sock_sendmsg+0x221/0x270 [ 88.151577][ T6020] ____sys_sendmsg+0x53a/0x860 [ 88.151599][ T6020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.151617][ T6020] ? __fget_files+0x2a/0x410 [ 88.151649][ T6020] ? __fget_files+0x2a/0x410 [ 88.151675][ T6020] __sys_sendmsg+0x269/0x350 [ 88.151694][ T6020] ? vma_end_read+0x18/0x170 [ 88.151716][ T6020] ? __pfx___sys_sendmsg+0x10/0x10 [ 88.151746][ T6020] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 88.151774][ T6020] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 88.151798][ T6020] ? exc_page_fault+0x590/0x8b0 [ 88.151818][ T6020] ? do_syscall_64+0xb6/0x230 [ 88.151840][ T6020] do_syscall_64+0xf3/0x230 [ 88.151862][ T6020] ? clear_bhb_loop+0x35/0x90 [ 88.151886][ T6020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.151915][ T6020] RIP: 0033:0x7ff0ce18d169 [ 88.151933][ T6020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.151946][ T6020] RSP: 002b:00007ff0cf046038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.151963][ T6020] RAX: ffffffffffffffda RBX: 00007ff0ce3a6160 RCX: 00007ff0ce18d169 [ 88.151975][ T6020] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000008 [ 88.151985][ T6020] RBP: 00007ff0ce20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 88.151995][ T6020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.152005][ T6020] R13: 0000000000000001 R14: 00007ff0ce3a6160 R15: 00007ffdb6be98f8 [ 88.152021][ T6020] [ 88.852219][ T6020] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 88.917081][ T55] Bluetooth: hci4: command tx timeout [ 92.190224][ T26] cfg80211: failed to load regulatory.db