last executing test programs: 5m1.076819328s ago: executing program 3 (id=40): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410000000000000001000603000014000300060a000409f100f006e8ffff00000000080007003a3a0809140002"], 0x44}, 0x1, 0x1000000}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa4, r2, 0x480, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:udev_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040081}, 0x20040000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x36}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 5m0.976468573s ago: executing program 2 (id=41): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x80047441, 0x20000000) 5m0.902422474s ago: executing program 3 (id=43): r0 = socket$packet(0x11, 0xa, 0x300) unshare(0x8040480) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async, rerun: 64) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@remote, r3}, 0x14) (async) r4 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001140)=ANY=[], 0x420}}, 0x2008004) (async) ppoll(&(0x7f0000000040)=[{r4, 0x8004}], 0x1, 0x0, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x18000}, 0xc) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @multicast, @val={@val={0x88a8, 0x4, 0x1, 0x2}, {0x8100, 0x5}}, {@canfd={0xd, {{0x1}, 0x16, 0x2, 0x0, 0x0, "c46f457c7c7a7b22d95f386b3bd3a7c4e77d5aeb60e92ad43295a92fdfcfa64d9dcafab9ed7031035b28330803ec84f7c82e9ec1ceca27de85e60fc6fcd6c121"}}}}, &(0x7f0000000080)={0x1, 0x1, [0xedb, 0xcf8, 0xe3, 0x5d0]}) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001640)={0x6, 0x4, &(0x7f0000001340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 32) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@empty, @broadcast, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, '\x00', 0x10, 0x2b, 0x0, @private1, @local, {[@dstopts={0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x7}]}]}}}}}, 0x0) 5m0.725957768s ago: executing program 1 (id=45): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000050000000300000000000008000000000030005f00af6e0766989e0b1c2ca7e78a6ebbf70a002e03f7b03c9e311db0367b93baa3b15fef24eb317fa51ed5f77d7189d9fc221c5fdd331beaf67dd2acccdbb4cda3368960e4a555ce73554d3e41aa812f8ae8bb707d3f0ed71bdc2a3e18a6341a6db47eb6741e7cdc1e6c9eecdb896fb1c902f73f5bf0"], 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x50, 0x0, 0x1, 0x801, 0x0, 0x0, {0x2}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4a700000}]}, 0x50}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000002180014000000080000000008000100ac1414e000"/36], 0x24}}, 0x0) socket$kcm(0x10, 0x3, 0x10) r6 = socket$phonet(0x23, 0x2, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$SIOCPNDELRESOURCE(r6, 0x89ef, &(0x7f0000000080)=0xb9f2) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e21, 0xe3, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000d000000028000001294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f00000000c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x9, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 4m59.457347611s ago: executing program 3 (id=46): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='mm_lru_activate\x00', r2, 0x0, 0x5}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x13d, 0x13d, 0x7, [@type_tag={0xf, 0x0, 0x0, 0x12, 0x2}, @union={0x0, 0x5, 0x0, 0x5, 0x0, 0x5, [{0xe, 0x0, 0x40}, {0x2, 0x5, 0x1000}, {0x0, 0x2, 0x91}, {0x3, 0x4, 0x8}, {0x7, 0x5, 0x8}]}, @volatile={0xe, 0x0, 0x0, 0x9, 0x1}, @volatile={0x7, 0x0, 0x0, 0x9, 0x1}, @datasec={0x7, 0x7, 0x0, 0xf, 0x1, [{0x5, 0x55}, {0x2, 0xa, 0xf}, {0x5, 0x7, 0x5}, {0x2, 0x8000, 0x9}, {0x4, 0x4, 0xbf3}, {0x5, 0x4, 0x1}, {0x1, 0x4, 0x8}], '\a'}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x4, 0x4}, @enum64={0xc, 0x7, 0x0, 0x13, 0x1, 0x0, [{0x4, 0xffffffff, 0xb5a0}, {0xc, 0xffffffff, 0x9}, {0x3, 0x5, 0xfffffff7}, {0xc, 0xbb, 0xd5}, {0x6, 0x9, 0x7}, {0xb, 0x4, 0x10000}, {0x6, 0x7, 0x179}]}]}, {0x0, [0x0, 0x61, 0x2e, 0x0, 0x5f]}}, &(0x7f0000000040)=""/46, 0x15f, 0x2e, 0x1, 0x3, 0x10000, @value=r4}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x2f, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @map_val={0x18, 0x5, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xe9a}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x2}, @call={0x85, 0x0, 0x0, 0x91}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000b8fdffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m59.400488668s ago: executing program 4 (id=47): r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64) socket$kcm(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @broadcast}, {0x0, @random="9f444415c302"}, 0xffffff7f, {0x2, 0x0, @broadcast}}) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000800)="240000001e005f031420000000000000000000000100000000000800080008c013000000", 0x24) 4m59.344568903s ago: executing program 1 (id=48): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b 75:', @ANYRESOCT], 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x6c, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x6}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @connlimit={{0x14}, @val={0x4}}}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 4m59.329535221s ago: executing program 2 (id=49): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001500192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000224e0000", 0x58}], 0x1) 4m59.224289001s ago: executing program 3 (id=50): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xffffffffffffbf3d}, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x3, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) 4m59.129443265s ago: executing program 4 (id=51): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0x6, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x4, 0xff21, &(0x7f000000cf3d)=""/193, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f00000000000000c7dc9da2122eeb3b4f076d9cc0f47100000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="fdfef2412d", 0x5}], 0x1}}], 0x1, 0x4000811) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map, 0x1, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240)='\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240)='\x00'}, 0x30) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000002c0)={@initdev, @multicast1}, &(0x7f0000000340)=0xc) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000002c0)={@initdev, @multicast1, 0x0}, &(0x7f0000000340)=0xc) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000500)=ANY=[@ANYRES32=r6, @ANYRES32=r1, @ANYBLOB="2f0000001800000004000000", @ANYRES32, @ANYBLOB="c99983cde7ba80069b614abca57ef8d14c5e626b1e3bdbc73f71b7cb9f5a3ed8cd4323864e87ed9579eb709e2cb9783c48f03a2b9792067d359501590a1f28ac197dcf3e3c9d39e7c727edac67844b8321afc3c4fd290a63163ec7d9e5faa5a9150acd2471c268d08713eec8405bd5c11702bfe0e6e1dd692e4cfac9fded2b009ceb8e4ab48714ae554e3490a7aaed4090df6dcf58458475210be6fbce7fe4f2f5", @ANYRES64=r5], 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x80, 0xd81, 0x15c7250a, 0x2020a, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0xa, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x80, 0xd81, 0x15c7250a, 0x2020a, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0xa, @void, @value, @void, @value}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001a001fff"], 0x24}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001a001fff"], 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) (async) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 4m59.11119355s ago: executing program 2 (id=52): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close(r0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x480000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0x80, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x5a, 0x33, @beacon={{{}, {}, @broadcast, @device_a, @from_mac}, 0xfffffffffffffffd, @default, 0x2, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a, {0x0, 0x2, 0x4, 0x0, {0x1fc, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, 0x7cfadfd09456c782, 0x401, 0x7}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0x0, 0x1, 0xff}}, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x4, 0x7]}]}, 0x80}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) write(0xffffffffffffffff, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc028020", 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r6, @ANYRES32=0x1, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="000000f5"], 0xfdef) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000040)="f2d2706da1ff72deeb68fa621c175d38d914b0c06d576846b275fc1b4f35912a6c7f", 0x22) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r10 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r10, 0x0, 0xcc, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r9, @ANYRES32, @ANYBLOB="070000000000000000000000630d54425a1aafabac42c471324aa137019015f93b46af511e20cb4ddc809d80023f2f66c6ab5c9936bf02", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x2}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="2e95b8ee3807b3ad72afce7afc714f53be52c82e065b83b6f2034661da3d6b1db34089cc4b0c4205070000000000000077a5f548e163e61a7841c9ff1be3ec217aa3e1fa217bc52380a7dcf2d76bab7580a184c889e17019f4996b03da948275fa156f681662679bd68518be9b7a79696835d809da961e0a9d000000000000000000008bcc002f5c18f17b1b52d419bcb9f1395fba8ce0d621f5be343ec62dbc9a6e2f9c3b8b71937f7f5ebb60b4e576db6eaa3cdda553a670000000046236b0bd59ca1bd25e675ca6f7ed029ef64266e9e4520eb4416dfbc7df0dc2b0bedf20e4e3873f9ccea451", 0x1}], 0x1}}], 0x2, 0x20008000) 4m59.068075819s ago: executing program 0 (id=53): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002100110000000000000000000a07000000b458dc26ea60e874b41a00000000000919447fce8e97ded24f78b5d02b3d05191d3c36b7b5f0f9760185febe5afef5c855e908ae065107acb14d975fddc910f603558c83373020b13a15eb0d6418dc6a75416229806a1234be2b65a8225eef06214f5b"], 0x24}, 0x1, 0x0, 0x0, 0x400}, 0x0) 4m59.063137252s ago: executing program 3 (id=54): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) unshare(0x22020400) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000080), 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket(0x1, 0x5, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000100), r3) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xfffffffc}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4m58.882502322s ago: executing program 3 (id=55): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="18001800000000001001aaa3e5f21042f99bc4ebda68d600f168ad35e27b9b6daf5ebf6cd1402b192a9ccc3281c1581398cf00c82737feebd133a8709dfb8dcd26309b20df9a4d34927b3caed0186276ac04f7fa020a6cc8dac2f5b781bd5439d1064a38b8b921ea241c1a1fe4ae27522b696442088d12e781ddd0f43555749499"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3000}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000380), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r6}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000cc0)="02"}, 0x20) r7 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1}}}], 0x20}, 0x4008804) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000100)="3b7515cc09e556e3ef2fc358", 0xc, 0x40080, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x200000}, 0x1c) connect$inet6(r8, &(0x7f0000000340)={0xa, 0x0, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r8, 0x1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000380), &(0x7f00000003c0)=0x8) 4m58.820277959s ago: executing program 1 (id=56): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000b000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000040)=0x3) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000004c0)) close(r0) 4m58.815520011s ago: executing program 4 (id=57): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt(r0, 0x3, 0x3, &(0x7f0000000000)=""/11, &(0x7f0000000040)=0xb) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x8000, 0x789e, 0x7, 0x7, {{0x11, 0x4, 0x2, 0x7, 0x44, 0x67, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010102, {[@rr={0x7, 0x1f, 0xea, [@empty, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}, @empty, @empty, @multicast1]}, @noop, @end, @timestamp_prespec={0x44, 0xc, 0x4f, 0x3, 0x6, [{@remote, 0x10}]}]}}}}}) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="25d8702bb5c3a59c24886fe304396926597bb55153dbcbf9cd129aa98ae4039dfffd303d7df606d4a5fb454c0a0a781ca4f73520e4e6334fa1916f62c6948b187aa65298ea8f128a42290b86e597eef789", 0x51}, {&(0x7f0000000100)="3e4914bca3d44fb197c2878a44ac2c8436ae711ab8d2f110e25ff412cdc4dfe31ebd4dd1adcc7ba1b59cb1922be65a6a11591876072803a949ce253fede3dfbe25dc5814a0eed8d8cb4ab07ad4a8f098298e941ae8aa2132fe09eff9e16f09292cd591596d411203c80ccf33153962299b4ba0476f37675f0d1c321e9d74107cba820c9cbb1f05895db22ed8529eea3d14dcaaa0b6fd900f9427f89f88513f9ee72f44d120bb8973a877586a84d9ba6a20629c51ad1d835da498e91b10da362fa23c71684ad8c83bd5ab4fe9181494c87f50383249b52599150c82fba90f10789ce60901e7e0e9c67d2e6739024e6958a7372df7bb051c06c0", 0xf9}, {&(0x7f0000000200)="d7a24e18b3d1d0fb1cf5591994fbabbe4f42c8a7738990a81cfa44f296e727d0c02e6728eb76fc97912f4d49c5fc092502958e2881c8f0921164cf99d63ac3740df9b3965ff86cea8f9f951910901b7d2a55ada9c393c5d3fa4d65b62e7af03de061553c0d955eb7cdeea39a8b64c4234e850ee075dc04676c48bccd569de939f9fb5252ffe6b1af51a0f84801eed798b7dbb57a", 0x94}, {&(0x7f00000002c0)="88d617adb4412bce609729168cd9a8f1fcaaa0f12fc2795cc3c75ae8bf51e3b0a7b9ef92d3b93c569880f68b25e9d22edf7b6e852363b899aa1503ba33f04fbe4d07fceb7f4bc935ccfb29d84a87174fdfa2f98492dbea0b11e1a16e6ae95cd11944ea9a0b4816b8a6600e19c2cc311f76ff405b993318eb836c48cd03db586ef5848cd85e52fe22053905941b823f835dbbb6a4ced79a8427cdf16be51ef24aa192d67c57543d18ae1c38b5730eb418912480c7952d62533e1b60929e267282ae139b267b", 0xc5}], 0x4, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @broadcast}}}], 0x70}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xf, 0x48}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="816c63ec3c95"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="02e7164046d7"}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008885}, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r5, 0x89e1, &(0x7f00000007c0)={@local, @dev={0xac, 0x14, 0x14, 0x10}}) r6 = accept4(r4, &(0x7f0000000800)=@can, &(0x7f0000000880)=0x80, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r9 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r10 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r11 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a40)='ns/user\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xf0, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x91) recvmsg$unix(r6, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c00)=""/189, 0xbd}, {&(0x7f0000000cc0)=""/120, 0x78}, {&(0x7f0000000d40)=""/72, 0x48}, {&(0x7f0000000dc0)=""/4096, 0x1000}], 0x4, &(0x7f0000001e00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}, 0x40000001) r20 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r20, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x4c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008044}, 0x0) r21 = syz_genetlink_get_family_id$batadv(&(0x7f00000020c0), r17) sendmsg$BATADV_CMD_GET_HARDIF(r15, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x3c, r21, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008841}, 0x4) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r14, 0x84, 0x12, &(0x7f00000021c0), &(0x7f0000002200)=0x4) sendmsg$NL80211_CMD_SET_MCAST_RATE(r18, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x38, r3, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x1d}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8080) r22 = syz_genetlink_get_family_id$devlink(&(0x7f0000002380), r19) sendmsg$DEVLINK_CMD_RELOAD(r17, &(0x7f00000024c0)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002480)={&(0x7f00000023c0)={0xa8, r22, 0x320, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r16}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r16}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r12}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x84}, 0x80) recvmsg$unix(r13, &(0x7f0000003600)={0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000002500)=""/143, 0x8f}, {&(0x7f00000025c0)=""/4096, 0x1000}], 0x2}, 0x40) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000036c0)={&(0x7f0000003680)={0x28, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x684d, 0x2b}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80c0) 4m58.77522991s ago: executing program 0 (id=58): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000100)=0x41) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xbc, &(0x7f000000cf3d)=""/188, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @default, 0x8, 0x2, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) close(r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x3c}, 0xb}, 0x1c) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000ed7a4783d8867737319a907f7287cbdd5503381c11baaa7f3bf7b88ed23c", @ANYRES16=r5, @ANYBLOB="00022abd7000fddbdf25790000000400f400"], 0x18}}, 0xc000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500), &(0x7f0000000540)=r4}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) close(0x4) 4m58.66013165s ago: executing program 2 (id=59): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x5f, 0x0, 0x5f]}}, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}, 0x0, r5}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x20, &(0x7f0000002540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xc4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x81, 0x3, 0x2, 0x80, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x6, 0xff, &(0x7f0000000340)=""/255, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x9, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r8, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) r9 = socket$xdp(0x2c, 0x3, 0x0) writev(r9, &(0x7f0000001cc0), 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffff5fa4, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x4, 0x4, 0x4, 0x1, 0x800, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f00000009c0)={'bridge_slave_0\x00'}) r11 = socket$alg(0x26, 0x5, 0x0) r12 = accept$alg(r11, 0x0, 0x0) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) r13 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r13, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x5, 0x51c35f83cdfc8b77, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{0x4, 0x1, 0x1, 0x1}, 0x39, 0x0, 0x0, 0x0, "c7a7ed886a287d1eceaaf47e1b80cfd7f8f830d023435be95ab2612af04e0d76d0c396455d243d8df97762e9ab96997f44dca3ee64fec2804727153e26d6f4c4"}}, 0x80}}, 0x0) recvmmsg(r12, &(0x7f0000002200)=[{{&(0x7f0000002380)=@rc={0x1f, @none}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/178, 0xb2}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000180)=""/43, 0x2b}], 0x3, &(0x7f0000000200)=""/97, 0x61}, 0x3}, {{&(0x7f0000000300)=@nfc, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)=""/249, 0xf9}, {&(0x7f0000000480)=""/22, 0x16}, {&(0x7f00000004c0)=""/224, 0xe0}, {&(0x7f00000005c0)=""/186, 0xba}], 0x4, &(0x7f00000006c0)=""/231, 0xe7}, 0x4}, {{&(0x7f00000007c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000840)=""/3, 0x3}], 0x1, &(0x7f00000008c0)=""/102, 0xae}, 0x9}, {{&(0x7f0000000940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000002400)=""/85, 0x55}, {&(0x7f0000000a00)=""/139, 0x8b}], 0x2, &(0x7f0000000b00)=""/9, 0x9}, 0x80000000}, {{&(0x7f0000000b40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000bc0)=""/33, 0x21}, {&(0x7f0000000c00)=""/186, 0xba}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000002480)=""/166, 0xa6}, {&(0x7f0000001d80)=""/18, 0x12}, {&(0x7f0000001dc0)=""/228, 0xe4}, {&(0x7f0000001ec0)=""/235, 0xeb}, {&(0x7f0000001fc0)=""/39, 0x27}, {&(0x7f0000002000)=""/112, 0x70}], 0x9, &(0x7f0000002140)=""/129, 0x81}, 0x7}], 0x5, 0x100, 0x0) 4m58.613560736s ago: executing program 0 (id=60): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'wg0\x00', 0x400}) 4m58.593803802s ago: executing program 4 (id=61): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'netpci0\x00', 0x2}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x101001, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00'/20, @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="01000000ffffffff00000000000000000000000086dd0000"], 0x38}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r6], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000240)=""/206) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000001040)) 4m58.383007884s ago: executing program 0 (id=62): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00'}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa0100fd, @multicast1}, {0x3f01, 0x88be, 0xc, 0x0, @opaque="944523b3"}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRESDEC=r2, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) 4m58.350291646s ago: executing program 1 (id=63): r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000080001007800000008000300", @ANYRES32=r2, @ANYBLOB="0c001780040003000400020008000500060000001400040070696d3672656725"], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000d80)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffc}]}}}]}, 0x3c}}, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) 4m58.26948854s ago: executing program 0 (id=64): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xffffffffffffbf3d}, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) 4m58.133478135s ago: executing program 2 (id=65): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xf51) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/115, 0x73}], 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000001000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000be000000000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000fff1000000000000000000007e509525", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400000000000000000000008000"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="f0a30c0a9a729cde02de9d1e67737939d7b6dd8e1c0348991920e0ed1d8766dca9d7ba8f0f6259f2116a7c09dfa73dbb861222f237c25b3979a41d6f689bfb3282d8acfb1d9e02ec4a0e186d43e80ecfee35cb9f6a", @ANYBLOB="322581a8827c10a0b1f6d50dfcd97c5d2fa953563ab625296710f3d3e22476952b7c28e4104a5e6a05c0af2dd0fa39241d1af0ab7c843914d169d598e09c62371901db446e0f133f094fa3602b0b3f50", @ANYRESDEC=r0, @ANYRES16=r1], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r8}, 0x10) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r6, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x134}}, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x7, 0x2}, 0xc) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfe70}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a00000000000004000000000000000000000021000000000001000000000000020001000100"], 0x70}}, 0x0) sendmmsg(r10, &(0x7f0000000180), 0x3ef, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800b2a6905a99f73bb94ab52ea3af5749b5f1d9f1df18ebac19f9a560001007461722400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a0000000000"], 0x8c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000780)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @empty, @broadcast, @random="957896444146", @dev={0xac, 0x14, 0x14, 0x2d}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=r5, @ANYRES32, @ANYBLOB="000000000000000000000000e2ff001000000000ce82b11ccf732bd28a3b16ad23174bc70b64cfbea78374814b4dc2221a99db6eb773f514d599c487dd5865ef310c82cc6b7c1b11a13ec89504896e226da11b3329ed3c6b109a8097cf2a1b6a74b51ddeffb3d05de7ac07b41c844110e72269af8b3ddd67038a8e0f11722faf0d5d576c625b6e459bd5154a038e9e4cb1f5b5079e869a349e638649736e3fabd7edc737d5f6c87b2ede18335e5ff39a5c4b4d726dc8aaa7f04899c53a618b6225710939287c91431a90ca35b1000018a0daf40b25aa6e104206ad3ebb21aedf69ebf694b387cb6a29975488a456fc9c8a3600000000", @ANYRES32=0x0, @ANYRES8=r4, @ANYRES8=r9], 0x48) socket$nl_route(0x10, 0x3, 0x0) 4m58.131731786s ago: executing program 4 (id=66): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x4, 0x300, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) unshare(0x20020480) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000000)={0xfffffffc, 0x40}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000002bc0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002c00)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000080), &(0x7f0000000380)}, 0x20) 4m58.131515413s ago: executing program 1 (id=67): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) unshare(0x68040200) (async) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x10, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket$inet(0x2b, 0x801, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003680)=ANY=[@ANYBLOB="3800000002020300000000000000000002000004240002800c0002800500c7c03282000014000180080001006401010208000200"], 0x38}, 0x1, 0x0, 0x0, 0xc010}, 0x18) (async, rerun: 32) r7 = socket(0x10, 0x3, 0x0) (rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8}, @TCA_CAKE_ATM={0x8}]}}]}, 0x44}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000040040000000030a01020000000000000000010000000900010073797a30000000000900030073797a2900000000140004800800024000000000080001"], 0xe0}}, 0x0) (async, rerun: 64) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="140100002c0001ffffe000000000000001"], 0x114}], 0x1}, 0x0) (rerun: 64) 4m58.045630673s ago: executing program 1 (id=68): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) unshare(0x967e0413f2e1ce5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x480, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0x6, {{0x2, 0x4e24, @private=0xa010101}}}, 0x88) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000200)="27fe6da9b9cebbb18bafd9ccd79f0efca7a903c7a6fb41ecbd409f1a3db49cc612de34d4e9a8af95005aee32dbf7b63362533b67d254", 0x36}, {0x0}], 0x2}}], 0x1, 0x4008095) 4m58.044777724s ago: executing program 0 (id=69): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000180)=0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x4, @multicast1}, {0x4e24, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0xfc}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002740)={'tunl0\x00', 0x0}) sendto$packet(r3, &(0x7f0000002b40)="f4", 0x1, 0x0, &(0x7f0000002780)={0x11, 0x8847, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f00000001c0)=0x70bf4d4b, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0xce2, 0x4) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r7, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$WPAN_SECURITY(r7, 0x0, 0x1, &(0x7f00000002c0)=0x1, 0x4) sendmsg$802154_dgram(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000000000000000000000090", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) 4m57.984290188s ago: executing program 4 (id=70): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETOFFLOAD(r0, 0x5421, 0x110e22fff7) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0xf, 0x0, 0x41, 0x0, 0x0, 0xc77c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) accept$nfc_llcp(r1, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0xfffffed1, &(0x7f00000010c0)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602574c00000e160e000f00000002800000121f", 0x2e}, {&(0x7f0000001100)="f96fab0925adcdcb341af8e1eeb80600042ec548998898382fbb824b9613a064ab1c86ec78629f3e0c29e08d68d9981f49ad8f55023aa94c5fd49ba280b597d97e3bbc4827c52706ddb8d4f439637765e1b2e83372295385bfa3aad4de3544f1241dce82e306b032da1dcc69359349be48bdc67eb2630d2f6fdfa0288c7466de78742a2e5c66f65fdca56805a6e6c0a3ced88527a6ca4f42bfcd839f6534e36f4fd76fa8df4b15165e9bcb7741841a2880d574715d8c5d575e0b19219f46b0f9eb1e4e12dfe5973bc62ea1e524f942e664b2eb078b49988abc9979e1d7bf0b3d6df3c6e9bf31db1d4b0dafd33aa154b7b7516345e842ab5977b73842a811dc2b4f3561a4537fc02d02a9a1fcd349279a344c2c238b98081879797e6c8a2cdf1b3bc30667f17c0601d73df12dabd4d8e3ecdc7db4019aa67aac5b0d8c419fd1edb01695579ff312e6e2b1a9b8e2c3caf6cfe6224ed861f5221c586248e9c4448bfa803cfbd1529a27faf1a59a2eae9c8b31749b5d537ef77dba170cc4653296c37e3a87ddfd32c64692b6783911a8ef8bca2cd5dfb806c6739c489ffe4290f099e5c8808bcfac89fa36d5789d03d5c1fe0992e218f3974ae3ecb924c73683a480a4010e02fcf017f6f9c5d5b12540ca54e0ef227465f17660936e286801dffd8b7c3ed7a4f7074cabc0ea9f1553c8fd8959b3ea061fbe616d573dd12091434e771c25037f98522b5478490afff4d8f474e310e63608fe4f1f26acd10f3f7c95179f3bbe64a6f1d0349b0f55310cccfd0ce26c5482f5d1884627b97f6b180eb1465ec315443e3b6a0f5342d96d88c6ca803af3d4041855a6c8fa4b94bb50f900c3657bf048fba52c293c153a5000efc549bac0c9d5846a8acae27c3d3caece1247a7b86014bff3bd04a79ba5749dfe51df700d8f8a17a77f261b2d58f9efa8816dc78775fda4200da32b703cd861baf5d14bcdfcf3b52232489de1aa56d348c7e51bd814c51ea4ca2401b9235a5b7f41ed3e6b80c165091f87d59aee61268c1f43ae0a1d7fdb5b515305fc73ce4fc283cc6402667e6e474a0c79438a054a36374d60c95bc95234d5bf0923b413a4ac6bcf4c9196600bf5aa8960916baa46a5d2df923123c61ba039154ec791f5098262f9c98b4249ad3e7c8ccd14f02df0180a6affa95613b4d1eed353d68cba0c6cc66897c208fe86e995e2c78b85827e65f11ab59c972784d882a9729b47680477943510929f7be004bea6a3bb82c57ce00b000dc027ba528a6c6207d4aae81186b1ff24256c61ae666d6960b427e7136feb02f506652f7e2a8d61d8c5e53bbcb99e5054ead64d5e9a4229fc8db9269da546f05288c8cd45504a2c3a437cd8046fd3f859b73668441522843c0e7d898cf143c028c5487ef42c50b23d4dd4ff091517ea6f9ee9d585a1ceed9ca4fab65e3f5c6894e58e352bf74181e2f1e08eda0b3441df43e14f619c18c2792deaea96492d0fd15b93935023eba44e354390eb11fab2ceb4a588b79200cc84763092d5060ddf38a12f3a51faea3c776d2a44f5eea1631eeaaf75d2153f451125f71efd5ae4e38d9a42a051b23e0e2cd18b795a72d9d52b9cd2a025d3f8a95543ab87e4998f3470cef6456db13859b5f9ec8e9179ecee6d61421c8bdad0931c873fc2f7c2cc10c23a6aab9d1975c1ab3921b0addeef26f5ca0b7e8425f288ad6c803635bd7c03cc4433d2f38bc37e3f36ddb91562ef00b11b5e4c38d01a2da8777f2ba717b77bb1bacbf55b011ac91fe2821b87ded0b3ceb84f5f2573526cdf9647c3a78b83de71e59b8ef59344fa5dd87d5c715411a73591d843585d40de638c47b3d6a2f15019f409fff42bc11a7b9c88456ad8376b7a511df89c70aac03e3c97691c0a54c3bdec3380e409e506c9f7447f5458d271e19e209e819c06637f0172747a2d3b022c79b301aaa7d44868c5389ccb682a307424fa4d96fb3b9e9f987bd11f2d526b064e63ed415ee94670e739b409469359bfb318a484e93d066ea626dca79be4ec97c374f6ee7aae246aa9424c2ebe2a64d3cb38f19432fc3c4d30bca0169ef9a5c28df18f5707ce6424f5d484aec9f28c966bc013d6b131663ac1fc5a9a2063fcc0d8d6b0d6a4332201536090b15916dca01d1b7a5bc96b7a7d47c9968a73e1c6b933e7cd89b3d52a32c5d1047c46dcd8c94732fa2838bd418717ff1a01b7456330fe5e1e93a28a7b22df654c23aa9a4b07505c4d1516affd28f9251436ad985f30c2cf1124ed22e80e133ba17e34f5c461a7c1b921b3f681aac3aea3beb0c167566fd34b96c31de8555f904d80af6e1a450ec9149ec3694d7652b0cfe6f878fb8c07b74b71819f8ad4e32967e319df2020acd71b7f422b6dbda17a0fba1725cbfbefee699e6f25b57399ea1cca48ff02d64638460b2dbfbf4a62c73fa712a1b8ff156c89a3d340280ed8aa1613ef742441952e17634fb024a8cf7cb81e3dfd635b8cb12dc50e0be75f26508dd4870ed05d03f5628ba7384faa411558527e69d8160bc8b894d18a16b49ff77675799ad690c5b26cf27c3b8297b2fb06c1f94aa81cfc1a2685ecb7fc7765d1147df1b7f67f8e4b97eeaecf33f2a20a0c63db264b05d346b84f30dfcfe0ab14adf3076166188022f485775a017e56d6e32c021366a9fd35b74d66ad545a271f1ff7d058f7f82fb32ba9d6a281759c1367ef7200880f4e0dbd405fdde5eafe981aa71e64f24ca9ff54bb1b42dec66b4c457137dc9c0d542dbb246548f5650120cf678d8907691b8d6f06a5d2a4b7e60e6549054b2c7c8a48e3eee075288482fe93a8d14315ddf9630285df72e0c089aac943655b7a72a5826f764c96210ce18386ffb197bd167331361602147a8d8603f729b974a693d2f9e3dc39cba2f8ec8d43167de23da44ffc5deb900ed847703f0d156e1e5d6482540974c1e05f776b37aad0b486e014dd10f0d7b753f1bd74c06b35e0ed77ce563e223c21d1d1865332bc6579b8c669214da181baab5d16a9419e20d4cd1b9aff4eaca75aa28cc74f5a532908dadcaedcf75ef00aa7356b594221d63d3488f5574d47ce3351c461dae937118abd08d86c9c23d4ef5d06de1013cfc83f7e95b51bbb2442dd0351f1020dcb7a66fb3e43cf0e4f6e1ae7f3b814a5df7f29f4e0773d672333248d270447338e14b820913a469fe7a6582eeb7b3552e58b20ccd01c9445d484256946c3e9f08de323867c274ac002b100ba53c286f03e9e257c92ac04ddd0a53cb8881378a3ce4029bc4beccc1905119cf81504c02c3456b736e15210d9a0312cb81cb0f28753fd899260f29299b75824e6882ef42456e8ce17e16cc60ad5ffe39eb3170e0194f244b14b7bc3b8c9c974717c129bab853bcf52ced232dae2730cd15ffc0e20b118bbab5de04c6c4128e3dd393fc2561b4c73b0f6d8c8027d4aa7061f9a3c6ebf138e33b41740ee3bf69d6644666be74c1337d6c2db1e25ec54b3be3db1f2bd06d629a69615d810409c9cdf82a7c8e639cd8dcda43c79865bb61c6f421bd8339dafd820ed0f2a6910fad5a502c418ae2201154030e04804df46843d18ea134ff903f013187a1ce900f0c70330b20f2f62c5bfc093d05505e567f9971f55e35558cb272ce6ae3a74e37577e06f6e22ddecd38b5538d535b008e687c47d980353d50599cd14dbb5135f7fa30d79a65bbccbb85804050574011004ef45f26ab27a23077f8c2d549dfc21d7145d2c391a052b4e66ea441e75a79503951769689fdfc1031e0cf61ece90c57281e419d03c1b3525371810df3555e003094254a5766d26cfd253c5d4e8b9da349e98c4935ba8a4a00006020a56622b5dc86eec9799284dc5cbfe40e329c0a7a7ff11d5e6f391dedba34440956484b89b3e29a6d1021b0f41a76a7c8133d777655d51da9c5dfa0adae46115445d7237444c9906ddad50c0adbe1d199c7c6cd8cfa38a1c28fde218398185c93435412bdef419f533bfdba9c9c0fe0462dfa473ff4fed5033fac3d582c008a423155da707029fe5b6a2b1f2a5f41d8f7f741c5660147240b2eae9dff5d16aeaa8218a9784e9e9d06296e99fef3fd52c4fc677b3b2be4208795bf0194984123832316da15d909c71a4dce846550ab2d711377ab931fbab1c2995d435793a005f06f86ec1f22b9d950b579019bfb8970aa279ecae04e9927149c9cc55f5e6b3c08bdebeb8bdd351b0d295f09be8514c81c6c21f2c9fce448187421f631c179ad072bd0b34b3785e0ee307aaa9998700258c01a5ad9b78786869281d6783f29e424583b1221e6c7dec170a1d0d980d987856339968d5aa900072c4f963f78381f938c169c08c8ee03c0fe604b942df179ba14575dec8bd76c1bd19f8a83797653a7ee93a5a8f6f910828679772ada2ae18cf8c26587cad0564fd65c5b207e624fdd7835463da9e2c5d5302e4eccf09eae40792217b5f87199be092f9ae5fafd3a58155abdfad4ade98ecceb4bc41766ac073a614e3193eff0b9381c9bcd2aa43870dc13f6140f67843207d6ad9cf474edb151957ee65ffa443f1c8224872c4bd9d7fa489f19d4adcfd24c4edd4d58114085e880096cc1aff8bcbd8c13e02d3966af66d5722c1b738ad2067042381290eb89f03837eb598912f4bff3cd0e0b197e05ae1e2a9b6decd1ddfd64eed3ad7b8722bfe5ee6c0b6301147bfafbe0e9f0fa2ceb95ff6304497279a9a11bf2ef6c36422f96810bf9d63c730a0c4df5c871fadff26fd101df16348c3d8293a4fa114e66e5560a0b8e1492d65237172570fb7f37541c46ba416b3e3124e25727024ffc179435b230665ba555a361a1e6e54d21e1949beff6f787c4d5bbb3cc36e5db4368425c9ab2e9a9a1193afa4367d491a8dd6d14e1ce6b924b5ae44746eb1ef3ac2fc2918a075b3362b2e095d60ab3931f7fc9fb1dbd74ed007dada67118847f00d64f6573cafe053565815dd3658e7ba4739cc2a5d26698ba368b41e1648b4aba7a27127891e6cd36242f59c7e5d818814b10ec575a9532d9d86db18fc8878bc395a478fe793495016e7ab2c44d4ee984351e9b71bb9116703a7375b970f5a20d664eee5fec575c51f6ab9fe2ed7c9c635222e2d1c881eac46ceda4a5e675dacacafa5d399899559cc70e140ad2deee4596a1f787f0c35cd613883300a80ef880e270eaa9915351725a70bb11cf5f11e3882e204e8b2e7a2ca3c5eef5cfd85f074648f2786bce5393a675364745bd497321fbf80591ac0a2c3792b2252d82b62e91afd29cbc9eb1d221b73f67b54d6ec1145508cf33ea2108a2d13f52d69951d39891e1a1063f1eab099d489c7c15bed71620fd504868e783f240cd21eacc3a82dee4eaf439c25751e253171f1c18c3bb869e2d2677f97b0f3dfacce6cc5ac5d9d2e08fc2a754d961f65a9248ac046163bdee3382d31704675dad58001c5e9f6f6cc51808336b89c32db68755d6ba6c51743bc11a6b6fd22e6866fdc8057e5826639a6ace3b41a4df7460bab2b10fe3d068d914e8a7856b338a3bfce7a84e5601058c80538353d471421e7413eaa909157c78605dbddad5cb1c0b9cbe012b8564031ebf2c38516afd26a003d4ce31d33ef9a61a04477202dfc12908db3156fba0588805f383a64ee08e6eb9d7961901ed82bde68cde27ccf2f7040e566a054986555a1749358f9f86ac1483164813cb43682471e8a89e03f456cd697f824759171972bbb049f219f0ceec9434f68c7517ffe3c6a95fdc0db236299a023e0fb4e38e18183471ab5c2dffc3d0d79a5f7a35a2f019411972df533b8bacd3a78b6142846e7064735cb25083a8043b4242acdc231bf26e6b5af9c250db9cfb1ad88a1509fd0f82fa360cdf4b530bac3f4ef205c8d47e530f0006576a04f27af6357d522b2e42125dda6b795490f62c869588202f4e8117c7359c6219c01efef650f5a80f3ae22e38629bbd1517267545480b4a0774ff4940df778a1eb0a93d83cf67a5726f729441c702e26139cd827415b24a042a20dc24a852211cfc01cd257462a5d86c1c3a87f8b4acb30eb724a119eeca56c9870e544915ddb1b691238f5ccbfbbd99d5a1aed3a51ef9e81b7308468d805005038b0715cb3b12f7c46b37e"}], 0x1}, 0x8000) 4m57.976854389s ago: executing program 2 (id=71): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f00000001c0)={0x24, @none={0x0, 0x2}}, 0x14) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600628f0000000000000000850000004100000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0x8005, 0x44, &(0x7f0000000180)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x48) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x80a, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f00000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x13c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x14}}, 0x8c}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x28, 0x6, 0x0, @remote, @remote, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "4ccccf03f600"}]}}}}}}}}, 0x0) r8 = socket$inet(0x2, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r8, 0x89b0, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000000)=@ethtool_channels}) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x41000, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x9, 0x201, 0x0, 0x0, {0xa}, [@NFCTH_TUPLE={0x4}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x4008085) 4m30.860748414s ago: executing program 32 (id=69): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000180)=0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x4, @multicast1}, {0x4e24, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0xfc}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002740)={'tunl0\x00', 0x0}) sendto$packet(r3, &(0x7f0000002b40)="f4", 0x1, 0x0, &(0x7f0000002780)={0x11, 0x8847, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f00000001c0)=0x70bf4d4b, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0xce2, 0x4) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r7, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$WPAN_SECURITY(r7, 0x0, 0x1, &(0x7f00000002c0)=0x1, 0x4) sendmsg$802154_dgram(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000000000000000000000090", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) 4m30.751085451s ago: executing program 33 (id=68): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) unshare(0x967e0413f2e1ce5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x480, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0x6, {{0x2, 0x4e24, @private=0xa010101}}}, 0x88) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000200)="27fe6da9b9cebbb18bafd9ccd79f0efca7a903c7a6fb41ecbd409f1a3db49cc612de34d4e9a8af95005aee32dbf7b63362533b67d254", 0x36}, {0x0}], 0x2}}], 0x1, 0x4008095) 4m30.694771103s ago: executing program 34 (id=71): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f00000001c0)={0x24, @none={0x0, 0x2}}, 0x14) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600628f0000000000000000850000004100000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0x8005, 0x44, &(0x7f0000000180)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x48) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x80a, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f00000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x13c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x14}}, 0x8c}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x28, 0x6, 0x0, @remote, @remote, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "4ccccf03f600"}]}}}}}}}}, 0x0) r8 = socket$inet(0x2, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r8, 0x89b0, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000000)=@ethtool_channels}) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x41000, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x9, 0x201, 0x0, 0x0, {0xa}, [@NFCTH_TUPLE={0x4}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x4008085) 4m30.586033677s ago: executing program 35 (id=55): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="18001800000000001001aaa3e5f21042f99bc4ebda68d600f168ad35e27b9b6daf5ebf6cd1402b192a9ccc3281c1581398cf00c82737feebd133a8709dfb8dcd26309b20df9a4d34927b3caed0186276ac04f7fa020a6cc8dac2f5b781bd5439d1064a38b8b921ea241c1a1fe4ae27522b696442088d12e781ddd0f43555749499"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3000}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000380), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r6}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000cc0)="02"}, 0x20) r7 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1}}}], 0x20}, 0x4008804) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000100)="3b7515cc09e556e3ef2fc358", 0xc, 0x40080, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x200000}, 0x1c) connect$inet6(r8, &(0x7f0000000340)={0xa, 0x0, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r8, 0x1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000380), &(0x7f00000003c0)=0x8) 4m30.510445277s ago: executing program 36 (id=70): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETOFFLOAD(r0, 0x5421, 0x110e22fff7) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0xf, 0x0, 0x41, 0x0, 0x0, 0xc77c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) accept$nfc_llcp(r1, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0xfffffed1, &(0x7f00000010c0)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602574c00000e160e000f00000002800000121f", 0x2e}, {&(0x7f0000001100)="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"}], 0x1}, 0x8000) 1m20.952038538s ago: executing program 5 (id=492): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x3d}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000380)=0x7f, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYRES16=r3], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000003a00290200000000000000000004000000000000"], 0x18}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000180003800800040000000000080002002000000004000100080005"], 0x4c}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c0000000", @ANYBLOB, @ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x40488c8}, 0x20008800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x28, 0x3c, 0x9, 0x0, 0x0, {0x2}, [@typed={0x4, 0x200}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xb3bc}]}]}, 0x28}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(0x3) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) 1m8.543473607s ago: executing program 5 (id=492): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x3d}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000380)=0x7f, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYRES16=r3], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000003a00290200000000000000000004000000000000"], 0x18}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000180003800800040000000000080002002000000004000100080005"], 0x4c}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c0000000", @ANYBLOB, @ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x40488c8}, 0x20008800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x28, 0x3c, 0x9, 0x0, 0x0, {0x2}, [@typed={0x4, 0x200}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xb3bc}]}]}, 0x28}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(0x3) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) 50.152649261s ago: executing program 5 (id=492): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x3d}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000380)=0x7f, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYRES16=r3], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000003a00290200000000000000000004000000000000"], 0x18}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000180003800800040000000000080002002000000004000100080005"], 0x4c}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c0000000", @ANYBLOB, @ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x40488c8}, 0x20008800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x28, 0x3c, 0x9, 0x0, 0x0, {0x2}, [@typed={0x4, 0x200}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xb3bc}]}]}, 0x28}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(0x3) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) 32.063430786s ago: executing program 5 (id=492): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x3d}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000380)=0x7f, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYRES16=r3], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000003a00290200000000000000000004000000000000"], 0x18}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000180003800800040000000000080002002000000004000100080005"], 0x4c}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c0000000", @ANYBLOB, @ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x40488c8}, 0x20008800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x28, 0x3c, 0x9, 0x0, 0x0, {0x2}, [@typed={0x4, 0x200}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xb3bc}]}]}, 0x28}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(0x3) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) 18.570513118s ago: executing program 5 (id=492): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x3d}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000380)=0x7f, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYRES16=r3], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000003a00290200000000000000000004000000000000"], 0x18}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000180003800800040000000000080002002000000004000100080005"], 0x4c}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c0000000", @ANYBLOB, @ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x40488c8}, 0x20008800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x28, 0x3c, 0x9, 0x0, 0x0, {0x2}, [@typed={0x4, 0x200}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xb3bc}]}]}, 0x28}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(0x3) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) 7.733874018s ago: executing program 5 (id=492): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x3d}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000380)=0x7f, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYRES16=r3], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000003a00290200000000000000000004000000000000"], 0x18}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000180003800800040000000000080002002000000004000100080005"], 0x4c}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c0000000", @ANYBLOB, @ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x40488c8}, 0x20008800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x28, 0x3c, 0x9, 0x0, 0x0, {0x2}, [@typed={0x4, 0x200}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xb3bc}]}]}, 0x28}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(0x3) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) 4.38086674s ago: executing program 7 (id=2154): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x58}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x28}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0x803, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0xb, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)={0x58, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x58}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000640)={'erspan0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x8, 0x10, 0x1, 0x2, {{0x20, 0x4, 0x0, 0x39, 0x80, 0x65, 0x0, 0x1, 0x29, 0x0, @loopback, @broadcast, {[@timestamp={0x44, 0x1c, 0x46, 0x0, 0xb, [0x7, 0x1, 0x1000, 0xa529, 0x1, 0x3ff]}, @timestamp_prespec={0x44, 0x4c, 0x66, 0x3, 0x4, [{@multicast2, 0xdc0}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffb}, {@empty, 0x4}, {@remote, 0x6}, {@multicast2, 0x7}, {@rand_addr=0x64010102, 0x3}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x99e0}, {@local, 0x6}, {@remote, 0x3}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f00000000c0)="064e96400899309e38709a1d6f6534ec09348eec7033f2c0e078a746ab5e2333340239ea01b54f854ce3249ca718a0ac215523870d4f58726a0dbfa72f7921668ac95742d4367a812e3af7aa1049e6b119aab65fcbdcfc075e5975ee571c4f1e79f1940f68ace66ff4e064e57f095d107cf4459d2ff2a325356b07f5a63f5d2f3f2a28153701c41532121a179d2aaac00c924b2b36b9418169716da7c210c753d1f1f15894", 0xa5}, {&(0x7f0000000040)="83ca5d0c831476ac66c0e07ac58e9f7000dc5df05e3115d244e892c03fcceb96a6e69cff3cba268e2002", 0x2a}, {&(0x7f0000000180)="66aaa445cc1566e6e3ab669d1a3cacc3e9e17aaadae1c5e3", 0x18}, {&(0x7f0000000300)="088076a1d1b588443762af6be53b932727713e77ff15a9906d0c4fb531197330ed18d3dfc69925b9013d96d88c3a6469c776d191c6713256cfa9b4988a764d3747a71a56cf98dc8278b9319e93d226f5b9c0e4051a13f27e56144d9551e20deb0b45a40434b1465ef1bb41a6ca553ff3c9f4c168d69e8d3b8d6f02d510416fa8012f4765905e9c345859c6e7271bd5b5514b2adc998123ed2df10c061efa178a8682895214aaf6f78f248cb8d077b243e1d34c714ac0c0cb07ff9a2b87887032ccac5510626fec29e37618e63ebb1b3ea72537d55944e9f421badaa3", 0xdc}, {&(0x7f0000000400)="e9899f2fecf5f6922dabb408c56e3a45abfff80ef96dd2fdcf8e1c0ccf2a4578ddb8c0bd82e1a0c9b78d75b176e848b293307519da391e64eb6cada5e6470211cba65ac8279f888c6f7922acebc883f5a36d0c48d88db16cecb479b082ae595305fd446828a9f8ec0a5ace9052535473cf4998928f3678676817e569e0caa24bd4fc312ae6f5b4b90c88104cbfcbb687133aa185ad9e65507ecf8cd9b10bfe41492857e0319cc95f6eb434b6ad343474a3ab3a1a491bdfe4e9187cf66e00c7c7f60b75d2382cf2f38efaec993c7f4061a154dd", 0xd3}, {&(0x7f0000000200)="8f2c243186ce9d01b729cbee9833174e47c71f257cedf147d7a6ea2461bcbebd48dfe109485c98ef9bcb9832ecc366c8fc6a1e5f28af81e232651213b2b566edba0bc540c6cca6f018fa523d4b2445b3af546641fcc4cfe0f2984acfaa19510306cb4c81ea82358a5ef5195311efde69d88f64c7ca9d03175cd556b3391a08f38b1f32551622e8a6ee", 0x89}], 0x6, &(0x7f0000000a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0xb377}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x59}}, @ip_retopts={{0x0, 0x0, 0x7, {[@generic={0x82, 0x0, "aaa8ad0edd"}, @lsrr={0x83, 0x0, 0x4b, [@multicast1]}, @noop, @timestamp={0x44, 0x0, 0x68, 0x0, 0xb, [0x2, 0xfffffffe, 0x9, 0x25e, 0x5, 0x0, 0x1ff]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @dev={0xac, 0x14, 0x14, 0x2b}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x32}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0xfffffffffffffeda, 0x0, 0x1, 0xc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}], 0x118}, 0x8850) 3.38122869s ago: executing program 7 (id=2157): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x668, 0x140, 0x370, 0x370, 0x370, 0x140, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, &(0x7f0000000180), {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@private1, 0x1e, 0x7, 0x80}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffff00, 0x0, 0xffffff00], [0xff000000, 0xff000000, 0x0, 0xff], 'hsr0\x00', 'nr0\x00', {0xff}, {}, 0x16, 0xc, 0x4, 0x20}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@multicast1, 0x12, 0x3f, 0x6d02}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x44}, @mcast1, [0xffffff00, 0x0, 0xffffff00, 0xff], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'veth1_vlan\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x2b, 0x4, 0x2, 0x23}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@remote, 0xe, 0x0, 0x2}}}, {{@ipv6={@mcast1, @mcast1, [0x0, 0xffffff00, 0xffffff00, 0xffffff00], [0xff, 0xff000000, 0xff000000], 'wlan1\x00', 'wlan0\x00', {}, {0xff}, 0x1, 0x2, 0x3, 0x4}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x401, 0x10000, @ipv4=@broadcast, 0x4e22}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv4=@multicast1, 0x10, 0x37, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) accept$nfc_llcp(r2, 0x0, 0x0) 3.256386438s ago: executing program 8 (id=2159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, r3}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000b40)={0x600, 0x12, 0x36, 0x70bd2c, 0x25dfdbfe, {0x25, 0x80, 0x6, 0x1, {0x4e24, 0x4e22, [0x3, 0x1, 0xffffffff, 0x200], [0x3ff, 0x1, 0x9, 0x7fff], 0x0, [0x3ff, 0x4]}, 0x9, 0x5b8e}, [@INET_DIAG_REQ_BYTECODE={0xfffffffffffffcb6}, @INET_DIAG_REQ_BYTECODE={0x6d, 0x1, "358d176b3f294f7663257dc41df00d24a0aea0fd56b383b8cc8c41f6b8c89b2d7028a3ff5b3f13665f51200ae49d73afd66d74b2a43266c77a6a5f93d1885f8797fdce96e10c9e35dba1d96b678906dce58f745634b5d7f7e19798fc3adfd442f2db57fbbba4e5a795"}, @INET_DIAG_REQ_BYTECODE={0xda, 0x1, "75e30915a2555d9ec0eb0a5fe7809cb72a92392258b03d911a1b1694819481ce30f62fd5916f36b989df964d30242ba53af4b798c66124a2b3ebc268750573cdbdbbfe5b574fdefb4ddd50f1eae995c811620475233818073d9daf127b08bfc01a13eba26c09756c92be0e708db406a846ba01c99c953b7d27febb08d5f2d8389398154e5f20f772f8ec1b824d596214f5ccdd616ebc8be06f68e99d185a2e8b588db2675da512c99c63b88aa987dfa5eb5f3f8ef929a6eca8170879beb57f766fcc567ff4d9832de998ba3de48798da64737c30b6ca"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "03e33e7c8b938771ae6dd9e424fa0994e9e54d42b32d32153e3007b2e91c76007d34713283e8f8f8cf13ca36520880234dce723c1ea06df254b87f1ed8b3a874e0ab69595da1c932c4fd7275502d54cdc872ed933b4669b0a8b7efbbe527afd8e2c3379dfb80a4b43c87819c23baa124db0cbc5b7233dd0a9dd964c82625054871ae8b1a2e0172e50412089be27774e2e3bfd07ad42151cc9f147c"}, @INET_DIAG_REQ_BYTECODE={0x34, 0x1, "dc793809359f9afe18872118a6c56657df10294f67e353f90b5ec13836607a114999a1dc978c3ce8d6998cae653e321c"}, @INET_DIAG_REQ_BYTECODE={0xf6, 0x1, "a684923ac3a51412c6b612780a91ba34aaeeb941cc9fc8d14b4ed2e0d10afe597c990e463140cbe0c95b2e706be54ae4374ddb5ae81b1989db5457d1a8b118aaf3b1d8bc4f474978cdb2daf372e362ce306cf1b3bf7f755e6db946cf9fa2ab8bf8540e263195a4298a07eb4122138b151f97861f479942123c45680af0f05a705f14d09ca751f206c0345179c978cbbbc0e45d8fe79d7dc0ac12c2977a90d6d79f70e06d283221015ef8f5e3323e7c498060fa7724b33185edc80e66b5ac6823cb9642a323b6f90cf677658d007003f6e33cd6ce05a740f031405b82b32cc1ce66fc23ba3b0ddb0f3a6ccaaccee44dc33ba2"}, @INET_DIAG_REQ_BYTECODE={0x2c, 0x1, "4a64a612ab03e00db07401ded7295d78ba3bdc07a776016a5faff9fecd81b485a07bbcbbbfc49283"}, @INET_DIAG_REQ_BYTECODE={0xcf, 0x1, "5ad0a63e270a746a204cb99c91803f1e5c4d2d22bd426538c3ab52f3d9bcca5105b6a13683e32a3563800899c3a158b300d42254927fdfd122f0c85a13de5cd787ef1d2238bd3f6cf92b7fd2d83b10c94fe20d12a0c6a69590bbccea56b431e02fde162084e5958477cc1ecceeb4c0a25b86f0a682942df7abe1f9f0ec0f7803137d3ee084f41b6289cfa7b33a17c031b3444e2c6b3201d3ac6e9d38df1950d85ca566983267c357769be7c908b8f4500bc6d46964f8c946d9b39f9a2b91b42d5718d2f477f87d33d1750a"}, @INET_DIAG_REQ_BYTECODE={0xb2, 0x1, "00ea4728261f01c258611507a010d2a4d09af8efc140ac76c611c27d9dc14e9e405c790c56dbc8c7cd0a742bc1a86f81cfb57df5f4c5f4642d82e9c74c4f1090c128854e515adb4e7346c4fb52b8757ed75f77bc5e1efdc4ff93298d656a2f8f38d3e8c3e6f9f2280a049bd386466dc6c78a34cd9c119906cddf829be07d24a8d33eef020ac73ec675c58d180a7cdcaa193d3c820cacf079c709a8533fd04a6a0b336df22c97ae2f6b7df6893efc"}, @INET_DIAG_REQ_BYTECODE={0xe8, 0x1, "f4778fc6db4deba3ac8fee61813685b02397c6ed8124b5d96cac655b3e4c3a6e8d458ce8cb06235726b393eb99eacfa323571ec7d5b0b865b00ae657ccfb26e22e7195029a98fd2a122f31ed032b948cf288540b70e5eb5ca7f2fff60df8df2a5a659b4b42b85c8d2c535f579199a85fa56ea9d0425d5466a054bb5a94b8c1070cc6dfbfab09e0423168e85fb31011ffa82186c3ca2aa5a30262ff0a74739408648fc7a84a73afef6a5cfb5d88bafd9aa108faf3664246f08d61a41cd70c09b905abd8f54f1166fa7675e88a7f12560e5728d92ad83cfb7fe8446f9bccbbe2640e90d500"}]}, 0x600}}, 0x844) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a29040000000000000000020000000900010073797a30000000000900020073797a32000000003800048034000180090001007866726d00000000240002800800014000000000050003000000000008000240000000040800040000000006"], 0x8c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, r3}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000b40)={0x600, 0x12, 0x36, 0x70bd2c, 0x25dfdbfe, {0x25, 0x80, 0x6, 0x1, {0x4e24, 0x4e22, [0x3, 0x1, 0xffffffff, 0x200], [0x3ff, 0x1, 0x9, 0x7fff], 0x0, [0x3ff, 0x4]}, 0x9, 0x5b8e}, [@INET_DIAG_REQ_BYTECODE={0xfffffffffffffcb6}, @INET_DIAG_REQ_BYTECODE={0x6d, 0x1, "358d176b3f294f7663257dc41df00d24a0aea0fd56b383b8cc8c41f6b8c89b2d7028a3ff5b3f13665f51200ae49d73afd66d74b2a43266c77a6a5f93d1885f8797fdce96e10c9e35dba1d96b678906dce58f745634b5d7f7e19798fc3adfd442f2db57fbbba4e5a795"}, @INET_DIAG_REQ_BYTECODE={0xda, 0x1, "75e30915a2555d9ec0eb0a5fe7809cb72a92392258b03d911a1b1694819481ce30f62fd5916f36b989df964d30242ba53af4b798c66124a2b3ebc268750573cdbdbbfe5b574fdefb4ddd50f1eae995c811620475233818073d9daf127b08bfc01a13eba26c09756c92be0e708db406a846ba01c99c953b7d27febb08d5f2d8389398154e5f20f772f8ec1b824d596214f5ccdd616ebc8be06f68e99d185a2e8b588db2675da512c99c63b88aa987dfa5eb5f3f8ef929a6eca8170879beb57f766fcc567ff4d9832de998ba3de48798da64737c30b6ca"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "03e33e7c8b938771ae6dd9e424fa0994e9e54d42b32d32153e3007b2e91c76007d34713283e8f8f8cf13ca36520880234dce723c1ea06df254b87f1ed8b3a874e0ab69595da1c932c4fd7275502d54cdc872ed933b4669b0a8b7efbbe527afd8e2c3379dfb80a4b43c87819c23baa124db0cbc5b7233dd0a9dd964c82625054871ae8b1a2e0172e50412089be27774e2e3bfd07ad42151cc9f147c"}, @INET_DIAG_REQ_BYTECODE={0x34, 0x1, "dc793809359f9afe18872118a6c56657df10294f67e353f90b5ec13836607a114999a1dc978c3ce8d6998cae653e321c"}, @INET_DIAG_REQ_BYTECODE={0xf6, 0x1, "a684923ac3a51412c6b612780a91ba34aaeeb941cc9fc8d14b4ed2e0d10afe597c990e463140cbe0c95b2e706be54ae4374ddb5ae81b1989db5457d1a8b118aaf3b1d8bc4f474978cdb2daf372e362ce306cf1b3bf7f755e6db946cf9fa2ab8bf8540e263195a4298a07eb4122138b151f97861f479942123c45680af0f05a705f14d09ca751f206c0345179c978cbbbc0e45d8fe79d7dc0ac12c2977a90d6d79f70e06d283221015ef8f5e3323e7c498060fa7724b33185edc80e66b5ac6823cb9642a323b6f90cf677658d007003f6e33cd6ce05a740f031405b82b32cc1ce66fc23ba3b0ddb0f3a6ccaaccee44dc33ba2"}, @INET_DIAG_REQ_BYTECODE={0x2c, 0x1, "4a64a612ab03e00db07401ded7295d78ba3bdc07a776016a5faff9fecd81b485a07bbcbbbfc49283"}, @INET_DIAG_REQ_BYTECODE={0xcf, 0x1, "5ad0a63e270a746a204cb99c91803f1e5c4d2d22bd426538c3ab52f3d9bcca5105b6a13683e32a3563800899c3a158b300d42254927fdfd122f0c85a13de5cd787ef1d2238bd3f6cf92b7fd2d83b10c94fe20d12a0c6a69590bbccea56b431e02fde162084e5958477cc1ecceeb4c0a25b86f0a682942df7abe1f9f0ec0f7803137d3ee084f41b6289cfa7b33a17c031b3444e2c6b3201d3ac6e9d38df1950d85ca566983267c357769be7c908b8f4500bc6d46964f8c946d9b39f9a2b91b42d5718d2f477f87d33d1750a"}, @INET_DIAG_REQ_BYTECODE={0xb2, 0x1, "00ea4728261f01c258611507a010d2a4d09af8efc140ac76c611c27d9dc14e9e405c790c56dbc8c7cd0a742bc1a86f81cfb57df5f4c5f4642d82e9c74c4f1090c128854e515adb4e7346c4fb52b8757ed75f77bc5e1efdc4ff93298d656a2f8f38d3e8c3e6f9f2280a049bd386466dc6c78a34cd9c119906cddf829be07d24a8d33eef020ac73ec675c58d180a7cdcaa193d3c820cacf079c709a8533fd04a6a0b336df22c97ae2f6b7df6893efc"}, @INET_DIAG_REQ_BYTECODE={0xe8, 0x1, "f4778fc6db4deba3ac8fee61813685b02397c6ed8124b5d96cac655b3e4c3a6e8d458ce8cb06235726b393eb99eacfa323571ec7d5b0b865b00ae657ccfb26e22e7195029a98fd2a122f31ed032b948cf288540b70e5eb5ca7f2fff60df8df2a5a659b4b42b85c8d2c535f579199a85fa56ea9d0425d5466a054bb5a94b8c1070cc6dfbfab09e0423168e85fb31011ffa82186c3ca2aa5a30262ff0a74739408648fc7a84a73afef6a5cfb5d88bafd9aa108faf3664246f08d61a41cd70c09b905abd8f54f1166fa7675e88a7f12560e5728d92ad83cfb7fe8446f9bccbbe2640e90d500"}]}, 0x600}}, 0x844) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a29040000000000000000020000000900010073797a30000000000900020073797a32000000003800048034000180090001007866726d00000000240002800800014000000000050003000000000008000240000000040800040000000006"], 0x8c}}, 0x0) (async) 2.892354393s ago: executing program 8 (id=2160): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000840)='GPL\x00', 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.816140376s ago: executing program 8 (id=2161): r0 = socket$inet(0x2, 0x802, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xffe6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000069006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmsg$can_j1939(r5, &(0x7f0000000740)={&(0x7f0000000380)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000400)=""/91, 0x5b}, {&(0x7f0000000480)=""/187, 0xbb}, {&(0x7f0000000680)=""/192, 0xc0}], 0x3, &(0x7f0000000300)=""/37, 0x25}, 0x40010000) sendmmsg$inet(r7, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f00000002c0)="9c13b9a84e61d7b213cef3de213fe0cbd2", 0x11}, {&(0x7f0000001d80)="2bccab8fcae8c999eb7d2e33b4fb8a238eaad53aa05746dcc0f503566d9bae", 0x1f}], 0x2}}], 0x1, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r5}, 0x8) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x2, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x21b}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="60900000000000002c001280090001007866726d000000001c00028008000100020000000800010000000000080002000300000008000a00", @ANYRES32=r8, @ANYBLOB="c36ecc7ed9fffe1c0f513a7fd4e14ad73eafcf53f9a8a28ff56303c46985e44f9c4940d685924f4f53bfa1732f2ef161737a1594de90321313865aabfba246cfeba51d00ef5897908d4bbf9d63b2df5132c0746bfa25a7e12b31cd72fef756d88e1621eab3ab2ac9be1ec48c5d5702c380283a21825966ca6f30bc98f532200e6ab1bccf826224671656bfea84e4c93205096d280f9bf7da8ff4e35e16dc6354da11d9ccfc2e08c8d79d9f542d388ee0b9385bbf00ce54412951b4a049431534eba36213c8ece42b210c3f105d5fb88a503d4ad258215985f5b90e4fb76c473f8f0f3cf8fc5c2acae5623d8c0e9ff9f29d3f6c33c2968f73d70ffd2aff2446e5d6249190d69c2e59de293eb851c54f8a191038e8c54401ed8f37826ef779e59f7ffd109864de1e9599b6a89b38787b51fd2f31be6aa771dcc94264e2f894854feef64954d2fe9d6830737a07bd62cd60fe7f320a63cb43b94705620124bf238aaffd6954902afa825ec6bf28fc96ba7f284b9197dda70e1cab55f588904a1c03e05048c2b7d755a9e7516aaf03d99416bd935baceca7a9a9727195a351aec86bd44c094308fb0a149df2924b145d94a8e1745b7970ff5bf44a96acb9555c0009af2b567a87fd28e5eaca63fd9c83d263"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 2.524565585s ago: executing program 8 (id=2165): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r3, 0x2, 0x0, 0x3ff, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000080)={0x3, 0x20, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f0000000080)={0x1, 0x5}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a0025bd7000000a00009a38bdc29109117d52f7b2ebbe0300000003000000054cd55f269f7e", @ANYRES64=r4, @ANYBLOB="0000840014000300070000000000000000000000000000001400010000000000000000000002000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x24008080}, 0x0) 2.262820235s ago: executing program 8 (id=2166): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ff7afedf}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x44}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x206, 0x7fffffff, 0xf, 0x0}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={r4, @in={{0x2, 0x4e20, @empty}}, 0x9, 0x2, 0x6, 0x7, 0x48, 0x3, 0x7}, 0x9c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6], 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newlink={0x160, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x138, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x128, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x70, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa512, 0x8b}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40400, 0x582}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xfffff121}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xb51, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x5ac}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x834, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000, 0x1000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x67}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1, 0x10}}, @IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x68, 0xfffffffa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x407, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xff, 0x1}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x89b}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffff56b, 0x64b}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xf, 0x1000004}}]}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x160}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r7) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r12, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r13, 0x800, 0x70bd24, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000055}, 0x48010) sendmsg$NL80211_CMD_SET_INTERFACE(r7, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)={0x160, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x3d80, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x9, 0xf, [@tim={0x5, 0x3, {0xb, 0x73}}]}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x2e, 0x115, "676d11f1b965d263db67e966f1beefd074768d7b627d963ea040e7eed437092f2f0775f865ca42534da7"}, @NL80211_ATTR_SAE_PASSWORD={0x77, 0x115, "e36905c3e9928452f7a3112bb9d74f49f4cd5ebeabc0b45d2cdc2617ec7ed0f58ab22050fbd72a19381dea27f80c9360721103a99ab7fda82d75a65acadbd54ba35a46eeabd046a11ff5f4d5e5a379a7ca50feda432e2c07d6d99d5690e9457e36d8ab96c3e5f152c405dfbf486238b25ff548"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xf5}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac01, 0xfac0d, 0xfac0b, 0xfac05]}, @NL80211_ATTR_PMK={0x3a, 0xfe, "953dc867032cb74c6b8263ef18757fe239f9af75655514b37329cae5eacb2d3613ea362c0b6c9364a614b1e39b6e217aee0c754562a6"}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x160}}, 0x8002) 2.016542969s ago: executing program 7 (id=2169): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r0, 0x8919, 0x0) 1.949154302s ago: executing program 6 (id=2170): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x2f, &(0x7f0000000000), 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x81, 0x4, 0xffffffff, 0x16, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="90000000", @ANYRESDEC=r5, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="10680df6a4e6a0d4fa74ab57c472ae48ebebed7f6b56927beafa87ec68f1b77cf5262eb04127425f791fefa758edc2501fce1f8c27af64de2e2f4921f74cf375", @ANYRES32, @ANYBLOB="0800f4687a509a06af79490100", @ANYRES64=0x0, @ANYRES64=r4], 0x90}}, 0x4008861) 1.859614021s ago: executing program 8 (id=2172): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket(0x8000000010, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) (rerun: 32) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendmmsg$inet(r5, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="110000000000000000000000010000000700000000000000140000000000000000000000010000005c000000000000001400000000000000000000000100000006000000000000001c0000000000000000000000080000007c74d2ad83c31f7a1787667f800d4533dc"], 0xa8}}], 0x2, 0x20004000) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x40c0}, 0x8000) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xb, 0xd, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcb, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x1, 0xa, 0xb, 0xb, 0x40, 0xfffffffffffffff3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x769}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000080)='syzkaller\x00', 0x10, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0xf, 0x8, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000a00)=[{0x5, 0x2, 0x10}, {0x5, 0x4, 0x5}, {0x1, 0x5, 0xf, 0x6}, {0x1, 0x4, 0x10, 0xb}, {0x2, 0x4, 0x7ff, 0x2}, {0x1, 0x1, 0x5, 0x5}], 0x10, 0x7, @void, @value}, 0x94) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async, rerun: 64) sendmmsg$inet6(r1, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 64) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x9, 0x0, 0x1, 0x1, 0x6, @link_local}, 0x14) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000006c0)=0x6, 0x4) (async) r6 = socket(0x840000000002, 0x3, 0x100) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x2c8) (async, rerun: 64) syz_emit_ethernet(0x42, &(0x7f0000000580)={@dev, @link_local, @val={@void, {0x8100, 0x3, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @remote, @remote}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local}}}}}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 1.730652193s ago: executing program 6 (id=2173): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@can_delroute={0x24, 0x19, 0x51, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8880}, 0x0) 1.675893846s ago: executing program 6 (id=2174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000c50000009e00101f95"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r1, 0x0, 0x28, 0x0, &(0x7f0000000a40)="92c68db2000000000000b75586dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x0, 0x3, [@local, @link_local, @empty]}) 1.326428667s ago: executing program 6 (id=2176): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000700)=@ethtool_gstrings={0x1b, 0x1}}) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff83d40100000e8aa800008100000086dd604d4628"], 0x4e) 1.288103047s ago: executing program 9 (id=2177): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}]}, 0x1c}}, 0x0) (rerun: 32) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async, rerun: 64) r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0) (async, rerun: 32) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x400c1}, 0x88) (async, rerun: 32) r4 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, 0x0, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008"], 0x38}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x40040c0) (async) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) (async) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0), 0x1) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) sendto$inet6(r0, &(0x7f0000000080)="e9", 0x1, 0x4008080, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.075983249s ago: executing program 7 (id=2178): unshare(0x24020400) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001880)=@ipv6_deladdr={0x34, 0x15, 0x1, 0x70bd2c, 0x25dfdbff, {0xa, 0x1f, 0x0, 0xfe}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x8000000) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f0000000380)={{0x6, @rose, 0x1}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FIONCLEX(r4, 0x5450) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 32) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000400)={@mcast2}, &(0x7f0000000440)=0x14) (async) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fddbdf251600000008000300", @ANYRES32=r6, @ANYBLOB="0a001a0008026fd7000000000a00eaff080211000001000002166eda5431337c78fff4e1"], 0x34}, 0x1, 0x0, 0x0, 0x854}, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0x1}, &(0x7f0000000000), &(0x7f00000002c0)='%pB \x00'}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r8], 0xa8}, 0x1, 0x0, 0x0, 0x20001040}, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={0x0}, 0x18) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000280)={0x6, 'veth0_to_bond\x00', {}, 0x7}) pipe(&(0x7f0000000480)={0xffffffffffffffff}) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000cb0000009500000000f70a08"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x4, 0x8, 0x7fffffff, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) 998.246276ms ago: executing program 7 (id=2179): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) shutdown(r2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000002b00)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000002b00)=0x1, 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "ccf963e8902b35ea", "e612f26e188c538e82de3d72ae22cdd38874be7cae784cd3c8cf72945f1adc0d", "9c104dc9", "f609fd75755d9279"}, 0x38) sendto$inet6(r2, &(0x7f00000002c0)='\x00', 0x1, 0x0, 0x0, 0x0) (async) sendto$inet6(r2, &(0x7f00000002c0)='\x00', 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/61, 0x3d}], 0x1}}], 0x1, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/61, 0x3d}], 0x1}}], 0x1, 0x0, 0x0) 977.312129ms ago: executing program 9 (id=2180): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000600)={@remote, @rand_addr=0x64010101, r3}, 0xc) (async) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000600)={@remote, @rand_addr=0x64010101, r3}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000140)={@multicast2, @loopback, r3}, 0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'gre0\x00', r3, 0x40, 0x7, 0x2, 0x7, {{0xc, 0x4, 0x2, 0x8, 0x30, 0x65, 0x0, 0xb2, 0x29, 0x0, @remote, @loopback, {[@ra={0x94, 0x4}, @end, @timestamp={0x44, 0x14, 0xd6, 0x0, 0x3, [0x1, 0x9, 0x1, 0xcc9d]}]}}}}}) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000001980)=""/35, &(0x7f00000019c0)=0x23) (async) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000001980)=""/35, &(0x7f00000019c0)=0x23) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r2, 0x20, &(0x7f0000000540)={&(0x7f0000000780)=""/4096, 0x1000, 0x0, &(0x7f0000000500)=""/4, 0x4}}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="010000002500000001000000000000e456f8e96b3076fc08ae0f43f3"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xe, 0x1e, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6, 0x1, 0xe, 0x8, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x17}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x26ecf62c}}, @generic={0xf5, 0xc, 0x6, 0x9, 0x9}, @alu={0x7, 0x0, 0xc, 0x8, 0x2, 0x30, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000280)='syzkaller\x00', 0x101, 0xc2, &(0x7f00000002c0)=""/194, 0x40f00, 0x0, '\x00', r4, @fallback=0x1b, r2, 0x8, &(0x7f0000000480)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xd, 0x2, 0x8}, 0x10, r5, r2, 0x9, &(0x7f00000005c0)=[r1, r2, r2, r1, r6, 0xffffffffffffffff], &(0x7f0000001800)=[{0x0, 0x4, 0xd, 0x6}, {0x2, 0x5, 0x4, 0x3}, {0x2, 0x2, 0xd, 0x8}, {0x2, 0x4, 0xa, 0x8}, {0x4, 0x5, 0xf, 0x1}, {0x0, 0x5, 0x7, 0x1}, {0x3, 0x1, 0x1, 0x2}, {0x1, 0x3, 0x4, 0x8}, {0x1, 0x4, 0xb, 0xa}], 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xe, 0x1e, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6, 0x1, 0xe, 0x8, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x17}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x26ecf62c}}, @generic={0xf5, 0xc, 0x6, 0x9, 0x9}, @alu={0x7, 0x0, 0xc, 0x8, 0x2, 0x30, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000280)='syzkaller\x00', 0x101, 0xc2, &(0x7f00000002c0)=""/194, 0x40f00, 0x0, '\x00', r4, @fallback=0x1b, r2, 0x8, &(0x7f0000000480)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xd, 0x2, 0x8}, 0x10, r5, r2, 0x9, &(0x7f00000005c0)=[r1, r2, r2, r1, r6, 0xffffffffffffffff], &(0x7f0000001800)=[{0x0, 0x4, 0xd, 0x6}, {0x2, 0x5, 0x4, 0x3}, {0x2, 0x2, 0xd, 0x8}, {0x2, 0x4, 0xa, 0x8}, {0x4, 0x5, 0xf, 0x1}, {0x0, 0x5, 0x7, 0x1}, {0x3, 0x1, 0x1, 0x2}, {0x1, 0x3, 0x4, 0x8}, {0x1, 0x4, 0xb, 0xa}], 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r9 = socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}}}]}, 0x70}, 0x1, 0x7}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r8, 0x118, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) pipe(&(0x7f0000000000)) 822.752398ms ago: executing program 9 (id=2181): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x34, r1, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xffffffffffffbf3d}, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB], 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) 698.653585ms ago: executing program 9 (id=2182): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc491c6170000501d0000be7ba9bd"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') pipe(&(0x7f0000000100)) listen(r1, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) socket$packet(0x11, 0x2, 0x300) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)={r6}) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xfffffeef) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7, @ANYBLOB="08000a00f0b76ef5e492ba85a26af40cfaed7301ed9c2663831cbf5aa6f163b37549625039e48291b1a0cdb2838bd2a81e2a0cdd25d7d2db42aaa725008878b313b13c2bf5f0972186ce37bd21d8be3af96ba5eb803d631fa2b0aa1b8cd5b564b212f07323958d1b7bdd6e89b6d0", @ANYRES32=r7, @ANYBLOB="0a000100aaaaaaaaaa000000"], 0x58}}, 0x0) 390.035838ms ago: executing program 9 (id=2183): r0 = socket$isdn(0x22, 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x33, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xb0, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xdcb}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x44}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x280000}]}, 0xb0}, 0x1, 0x0, 0x0, 0x7f7f8de552e049c2}, 0x4000000) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r4) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r5, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740), 0x200002, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) (async) r8 = getpid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000700)=r8) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000740)=0xb, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r10, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000480)={0x3c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "677a747f68d5bc46961888b601453dd5"}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}}, 0x48040) (async) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r7, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x71d5, 0x13}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x10008001) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=@bridge_delvlan={0x90, 0x71, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0xb1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x31, 0xa7}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x48, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x26, 0x1}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4c000}, 0x2400c004) r12 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0x2710}, 0x10, 0x800) sendfile(r12, r1, &(0x7f0000000440)=0x101, 0x3) (async, rerun: 32) openat$cgroup_subtree(r6, 0x0, 0x2, 0x0) (async, rerun: 32) r13 = socket$inet(0x2, 0x80001, 0x84) sendmsg$inet_sctp(r13, &(0x7f00000008c0)={&(0x7f00000001c0)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000a00)=[{&(0x7f00000023c0)="a4", 0x1}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="3000000000000000840000000100000000000000000000000000000000002000"/44, @ANYRES32=0x0, @ANYBLOB="20000000000000008400000008000000ff010000000000000000000000000001"], 0x50}, 0x0) 243.859502ms ago: executing program 6 (id=2184): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x21}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x39}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x24}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1e}]}, 0x50}, 0x1, 0x0, 0x0, 0x80d0}, 0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x13, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000018}, 0x24044050) 195.889871ms ago: executing program 7 (id=2185): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000040)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x10000000, 0x1001}, 0xc) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x10000000000, 0x0, 0x9, 0x3, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x3ff, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}}}, 0xe8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) read$alg(r5, &(0x7f0000000600)=""/228, 0xe4) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000001000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) 79.087146ms ago: executing program 9 (id=2186): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 32) r1 = socket$inet(0xa, 0x801, 0x84) (rerun: 32) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0x8) (async, rerun: 64) r2 = accept4(r1, 0x0, 0x0, 0x0) (rerun: 64) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000140)={0x0, 0x7}, 0x8) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x63) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 0s ago: executing program 6 (id=2187): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x7c, 0x30, 0x9, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000080009000d000300", 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="28010000000000000100000001", @ANYRES16=r2, @ANYRES16=r0, @ANYRES16=r1], 0x128}, 0x24000084) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x4}}, 0x26) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000100)) syz_emit_ethernet(0x4c, &(0x7f0000000340)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x2}, "0a790cc55a8e"}}}}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, r4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}]}, &(0x7f00000001c0)='syzkaller\x00', 0xb, 0x36, &(0x7f0000000300)=""/54, 0x40f00, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000015c0)={0x3, 0x11, 0x9, 0xa}, 0x10, 0x143b9, 0xffffffffffffffff, 0x0, &(0x7f0000001980)=[0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x400, @void, @value}, 0x94) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) r11 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f0000000140)={r6, r8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): th2 [ 246.915766][T11002] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 247.009006][ T5839] Bluetooth: hci0: command tx timeout [ 247.096162][T11002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.154608][T11002] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.175100][ T7212] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.182285][ T7212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.264191][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.271370][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.283568][T11233] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1290'. [ 247.467380][T11002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.902710][T11275] netlink: 'syz.7.1303': attribute type 2 has an invalid length. [ 247.950354][T11002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.977437][T11275] netlink: 'syz.7.1303': attribute type 2 has an invalid length. [ 248.238465][T11288] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1306'. [ 248.389212][T11002] veth0_vlan: entered promiscuous mode [ 248.441004][T11002] veth1_vlan: entered promiscuous mode [ 248.497949][T11002] veth0_macvtap: entered promiscuous mode [ 248.521424][T11002] veth1_macvtap: entered promiscuous mode [ 248.647179][T11308] pim6reg1: entered promiscuous mode [ 248.669411][T11308] pim6reg1: entered allmulticast mode [ 250.652422][T11002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.681822][T11002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.694237][T11002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.704815][T11002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.753671][T11002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.765897][T11002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.804721][T11002] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.834473][T11002] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.856102][T11002] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.873694][T11002] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.937245][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1323'. [ 251.095169][ T7212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.119944][ T7212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.144950][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.162271][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.189171][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1329'. [ 251.389206][T11374] netlink: 'syz.8.1333': attribute type 10 has an invalid length. [ 251.417216][T11374] mac80211_hwsim hwsim17 wlan1: left allmulticast mode [ 251.446078][T11374] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 251.513518][T11376] pim6reg1: entered promiscuous mode [ 251.521529][T11376] pim6reg1: entered allmulticast mode [ 253.275219][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 253.296056][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 253.307091][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 253.331709][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 253.342998][ T5849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 253.356361][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 253.826028][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.847541][T11387] tap0: tun_chr_ioctl cmd 2147767507 [ 254.006181][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.072351][T11392] lo speed is unknown, defaulting to 1000 [ 254.095206][T11410] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1343'. [ 254.106415][T11412] vlan3: entered promiscuous mode [ 254.115972][T11412] xfrm0: entered promiscuous mode [ 254.130446][T11412] vlan3: entered allmulticast mode [ 254.140444][T11412] xfrm0: entered allmulticast mode [ 254.160432][T11412] team0: Device vlan3 is up. Set it down before adding it as a team port [ 254.217632][T11412] xfrm0: left allmulticast mode [ 254.224359][T11412] xfrm0: left promiscuous mode [ 254.438478][T11427] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1350'. [ 254.485262][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.664391][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.707060][T11438] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1354'. [ 254.708355][T11442] netlink: 'syz.6.1354': attribute type 3 has an invalid length. [ 254.898037][T11392] chnl_net:caif_netlink_parms(): no params data found [ 255.072929][T11453] lo speed is unknown, defaulting to 1000 [ 255.398523][ T5839] Bluetooth: hci0: command tx timeout [ 255.546197][T11392] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.559723][T11392] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.566995][T11392] bridge_slave_0: entered allmulticast mode [ 255.574450][T11392] bridge_slave_0: entered promiscuous mode [ 255.585553][ T12] bridge_slave_1: left allmulticast mode [ 255.591482][ T12] bridge_slave_1: left promiscuous mode [ 255.600002][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.625338][ T12] bridge_slave_0: left allmulticast mode [ 255.646423][ T12] bridge_slave_0: left promiscuous mode [ 255.660724][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.046344][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.145737][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.157003][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.167091][T11480] netlink: 'syz.8.1364': attribute type 4 has an invalid length. [ 256.179425][ T12] bond0 (unregistering): Released all slaves [ 256.194221][T11467] macsec0: entered promiscuous mode [ 256.225180][T11392] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.233587][T11392] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.241314][T11392] bridge_slave_1: entered allmulticast mode [ 256.249423][T11392] bridge_slave_1: entered promiscuous mode [ 256.290778][T11470] macsec0 (unregistering): left promiscuous mode [ 256.472337][T11485] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1366'. [ 256.530850][T11392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.545114][T11392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.567192][T11485] netlink: 'syz.8.1366': attribute type 21 has an invalid length. [ 256.712361][T11501] FAULT_INJECTION: forcing a failure. [ 256.712361][T11501] name failslab, interval 1, probability 0, space 0, times 0 [ 256.771464][T11501] CPU: 0 UID: 0 PID: 11501 Comm: syz.8.1370 Not tainted 6.12.0-rc5-syzkaller-01056-gf07a6e6ceb05 #0 [ 256.782272][T11501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 256.792330][T11501] Call Trace: [ 256.795608][T11501] [ 256.798536][T11501] dump_stack_lvl+0x241/0x360 [ 256.803232][T11501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.808456][T11501] ? __pfx__printk+0x10/0x10 [ 256.813078][T11501] ? fs_reclaim_acquire+0x93/0x130 [ 256.818212][T11501] ? __pfx___might_resched+0x10/0x10 [ 256.823520][T11501] should_fail_ex+0x3b0/0x4e0 [ 256.828214][T11501] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 256.833950][T11501] should_failslab+0xac/0x100 [ 256.838635][T11501] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 256.844357][T11501] __kmalloc_noprof+0xd8/0x400 [ 256.849125][T11501] tomoyo_realpath_from_path+0xcf/0x5e0 [ 256.854679][T11501] tomoyo_path_number_perm+0x23a/0x880 [ 256.860141][T11501] ? tomoyo_path_number_perm+0x208/0x880 [ 256.865771][T11501] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 256.871778][T11501] ? __fget_files+0x29/0x470 [ 256.876408][T11501] ? __fget_files+0x3f3/0x470 [ 256.881179][T11501] security_file_ioctl+0xc6/0x2a0 [ 256.886203][T11501] __se_sys_ioctl+0x47/0x170 [ 256.890811][T11501] do_syscall_64+0xf3/0x230 [ 256.895320][T11501] ? clear_bhb_loop+0x35/0x90 [ 256.900006][T11501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.905911][T11501] RIP: 0033:0x7f43dc17e719 [ 256.910332][T11501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.930145][T11501] RSP: 002b:00007f43dcffc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.938585][T11501] RAX: ffffffffffffffda RBX: 00007f43dc335f80 RCX: 00007f43dc17e719 [ 256.946583][T11501] RDX: 0000000020000040 RSI: 0000000000008b2a RDI: 0000000000000003 [ 256.954579][T11501] RBP: 00007f43dcffc090 R08: 0000000000000000 R09: 0000000000000000 [ 256.962643][T11501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.970623][T11501] R13: 0000000000000000 R14: 00007f43dc335f80 R15: 00007ffcfe3b3bf8 [ 256.978614][T11501] [ 256.990923][T11501] ERROR: Out of memory at tomoyo_realpath_from_path. [ 257.086469][T11392] team0: Port device team_slave_0 added [ 257.098845][T11392] team0: Port device team_slave_1 added [ 257.235989][ T12] hsr_slave_0: left promiscuous mode [ 257.246579][ T12] hsr_slave_1: left promiscuous mode [ 257.255409][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.263889][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.273021][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.281362][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.324070][ T12] veth1_macvtap: left promiscuous mode [ 257.330986][ T12] veth0_macvtap: left promiscuous mode [ 257.339130][ T12] veth1_vlan: left promiscuous mode [ 257.344523][ T12] veth0_vlan: left promiscuous mode [ 257.372757][T11520] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1377'. [ 257.477989][ T5849] Bluetooth: hci0: command tx timeout [ 257.850176][ T12] team0 (unregistering): Port device team_slave_1 removed [ 257.896593][ T12] team0 (unregistering): Port device team_slave_0 removed [ 258.382576][T11392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.408016][T11392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.435502][T11392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.447228][T11513] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1375'. [ 258.463189][T11514] netlink: 'syz.8.1375': attribute type 10 has an invalid length. [ 258.480299][T11514] netdevsim netdevsim8 netdevsim0: left promiscuous mode [ 258.489479][T11514] netdevsim netdevsim8 netdevsim0: left allmulticast mode [ 258.502423][T11514] team0: Port device netdevsim0 removed [ 258.509240][T11514] bond0: (slave netdevsim0): no link monitoring support [ 258.517181][T11514] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 258.540036][T11514] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 258.599891][T11392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.606914][T11392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.653522][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1379'. [ 258.665648][T11392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.769139][T11392] hsr_slave_0: entered promiscuous mode [ 258.779465][T11392] hsr_slave_1: entered promiscuous mode [ 258.837117][T11536] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1382'. [ 258.847504][T11536] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1382'. [ 258.871900][T11536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1382'. [ 258.906881][T11536] netlink: 'syz.6.1382': attribute type 1 has an invalid length. [ 258.918721][T11538] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1383'. [ 258.973010][T11536] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 258.987098][T11536] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 259.010275][T11536] bond3: (slave xfrm1): making interface the new active one [ 259.025683][T11536] bond3: (slave xfrm1): Enslaving as an active interface with an up link [ 259.084484][T11543] bond3 (unregistering): (slave xfrm1): Releasing backup interface [ 259.119377][T11543] bond3 (unregistering): Released all slaves [ 259.314539][T11558] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1389'. [ 259.414335][T11553] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1387'. [ 259.457619][T11553] netlink: 'syz.7.1387': attribute type 11 has an invalid length. [ 259.558162][ T5849] Bluetooth: hci0: command tx timeout [ 259.653986][T11392] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 259.718584][T11392] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 259.738586][T11392] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 259.790487][T11392] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 259.876251][T11578] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 259.909901][T11392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.939218][T11392] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.959552][ T7211] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.966741][ T7211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.999972][ T7211] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.007219][ T7211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.422381][T11392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.846887][T11617] lo speed is unknown, defaulting to 1000 [ 260.942412][T11392] veth0_vlan: entered promiscuous mode [ 260.988635][T11392] veth1_vlan: entered promiscuous mode [ 261.067257][T11392] veth0_macvtap: entered promiscuous mode [ 261.100423][T11392] veth1_macvtap: entered promiscuous mode [ 261.145959][T11392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.197972][T11392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.215918][T11392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.277599][T11392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.301606][T11392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.329357][T11392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.345732][T11640] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 261.354680][T11640] macvlan5: entered allmulticast mode [ 261.361178][T11640] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 261.391775][T11640] mac80211_hwsim hwsim16 wlan0: left promiscuous mode [ 261.494840][T11392] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.510217][T11392] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.532935][T11392] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.542951][T11392] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.567013][T11642] netlink: 'syz.8.1413': attribute type 4 has an invalid length. [ 261.638113][ T5849] Bluetooth: hci0: command tx timeout [ 261.731978][T11651] __nla_validate_parse: 4 callbacks suppressed [ 261.731998][T11651] netlink: 188 bytes leftover after parsing attributes in process `syz.8.1417'. [ 261.964570][T11660] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 262.056406][ T7224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.065633][ T7214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.073726][ T7214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.088260][ T7224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.180004][T11663] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1419'. [ 262.214972][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.241917][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.828291][T11688] netlink: 84 bytes leftover after parsing attributes in process `syz.9.1425'. [ 262.893832][T11691] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1426'. [ 263.096259][ T7214] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.195406][T11700] pim6reg1: entered promiscuous mode [ 263.200923][T11700] pim6reg1: entered allmulticast mode [ 263.232094][T11696] lo speed is unknown, defaulting to 1000 [ 263.324206][ T7214] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.555276][T11701] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1428'. [ 264.591786][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 264.611652][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 264.639954][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 264.665629][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 264.683873][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 264.697262][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 265.661854][ T7214] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.706695][T11713] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1432'. [ 265.731133][T11713] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1432'. [ 265.804879][ T7214] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.846171][T11720] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1434'. [ 265.885690][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1435'. [ 265.899526][T11714] lo speed is unknown, defaulting to 1000 [ 266.023859][T11731] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1438'. [ 266.330804][T11743] netlink: 'syz.6.1441': attribute type 28 has an invalid length. [ 266.385054][ T7214] bridge_slave_1: left allmulticast mode [ 266.396283][ T7214] bridge_slave_1: left promiscuous mode [ 266.403551][ T7214] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.417498][ T7214] bridge_slave_0: left allmulticast mode [ 266.424909][ T7214] bridge_slave_0: left promiscuous mode [ 266.430787][ T7214] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.767811][ T5849] Bluetooth: hci0: command tx timeout [ 266.803350][T11765] __nla_validate_parse: 2 callbacks suppressed [ 266.803368][T11765] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1446'. [ 267.009835][ T7214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.021742][ T7214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.033126][ T7214] bond0 (unregistering): Released all slaves [ 267.047591][T11714] chnl_net:caif_netlink_parms(): no params data found [ 267.368164][T11778] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.692161][T11714] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.708267][T11714] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.725802][T11714] bridge_slave_0: entered allmulticast mode [ 267.750130][T11714] bridge_slave_0: entered promiscuous mode [ 267.867814][T11795] lo speed is unknown, defaulting to 1000 [ 267.888057][T11714] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.895470][T11714] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.917570][T11819] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1460'. [ 267.932437][T11714] bridge_slave_1: entered allmulticast mode [ 267.954339][T11714] bridge_slave_1: entered promiscuous mode [ 268.035259][T11714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.056000][T11819] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1460'. [ 268.110100][T11714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.193915][T11799] lo speed is unknown, defaulting to 1000 [ 268.227308][T11714] team0: Port device team_slave_0 added [ 268.258918][T11714] team0: Port device team_slave_1 added [ 268.361133][T11714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.378190][T11714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.410665][T11714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.424251][T11714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.467764][T11714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.512001][T11714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.537525][T11839] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.544721][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1467'. [ 268.578017][T11838] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20003 [ 268.619953][T11838] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 268.730885][T11836] lo speed is unknown, defaulting to 1000 [ 268.767614][T11849] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1471'. [ 268.839715][ T5849] Bluetooth: hci0: command tx timeout [ 268.859558][T11849] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1471'. [ 268.888075][T11714] hsr_slave_0: entered promiscuous mode [ 268.899512][T11714] hsr_slave_1: entered promiscuous mode [ 268.907592][T11714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.916100][T11714] Cannot create hsr debugfs directory [ 269.119746][ T7214] hsr_slave_0: left promiscuous mode [ 269.137281][ T7214] hsr_slave_1: left promiscuous mode [ 269.150048][ T7214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.176514][ T7214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.190824][ T7214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.207283][ T7214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.231837][ T7214] veth1_macvtap: left promiscuous mode [ 269.237632][ T7214] veth0_macvtap: left promiscuous mode [ 269.243676][ T7214] veth1_vlan: left promiscuous mode [ 269.250880][ T7214] veth0_vlan: left promiscuous mode [ 269.868965][ T7214] team0 (unregistering): Port device team_slave_1 removed [ 269.915159][ T7214] team0 (unregistering): Port device team_slave_0 removed [ 270.416994][T11855] netlink: 'syz.8.1473': attribute type 2 has an invalid length. [ 270.431305][T11851] lo speed is unknown, defaulting to 1000 [ 270.447446][T11858] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1472'. [ 270.921039][ T5849] Bluetooth: hci0: command tx timeout [ 271.103331][T11866] pim6reg1: entered promiscuous mode [ 271.112710][T11866] pim6reg1: entered allmulticast mode [ 273.004851][ T5849] Bluetooth: hci0: command tx timeout [ 273.705426][T11888] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1483'. [ 273.740167][T11714] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 273.760978][T11714] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 273.775989][T11714] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 273.794273][T11714] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 273.880490][T11892] xt_CT: You must specify a L4 protocol and not use inversions on it [ 273.966457][T11714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.020096][T11714] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.069303][ T7202] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.076899][ T7202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.169922][T11714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 274.191626][T11714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.206049][ T7203] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.213426][ T7203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.268017][ T7202] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.556287][T11714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.568115][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1496'. [ 274.578800][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1496'. [ 274.608017][T11933] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1496'. [ 274.659315][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1498'. [ 274.690950][T11944] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1498'. [ 274.715606][T11947] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1497'. [ 275.133723][T11714] veth0_vlan: entered promiscuous mode [ 275.169202][T11714] veth1_vlan: entered promiscuous mode [ 275.214798][T11714] veth0_macvtap: entered promiscuous mode [ 275.248930][T11714] veth1_macvtap: entered promiscuous mode [ 275.285312][T11714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.318057][T11714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.349393][T11714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.380852][T11714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.402256][T11714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.419359][T11714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.451928][T11714] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.479333][T11714] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.510756][T11714] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.537509][T11714] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.555244][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1511'. [ 275.558402][T11994] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 275.625937][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1511'. [ 275.644845][T11991] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1511'. [ 275.763243][ T7211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.780958][ T7211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.859737][ T7203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.875426][ T7203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.161155][T12018] xt_CT: No such helper "pptp" [ 277.170320][T12047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.189237][T12047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.208640][T12047] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 277.227329][T12047] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 277.240528][T12047] bridge0: port 3(team0) entered disabled state [ 277.247770][T12047] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.264199][T12047] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 277.283777][T12047] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 277.298489][T12047] bond0 (unregistering): Released all slaves [ 277.438599][T12055] pim6reg1: entered promiscuous mode [ 277.444020][T12055] pim6reg1: entered allmulticast mode [ 277.502715][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.645469][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.667437][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.678663][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.691699][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.712297][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.720174][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.205119][T12088] __nla_validate_parse: 4 callbacks suppressed [ 279.205139][T12088] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1533'. [ 280.036769][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.103373][T12079] lo speed is unknown, defaulting to 1000 [ 280.298040][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.343672][T12098] netdevsim netdevsim7: Direct firmware load for À/ failed with error -2 [ 280.385748][T12098] netdevsim netdevsim7: Falling back to sysfs fallback for: À/ [ 280.432507][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.636548][ T11] bridge_slave_1: left allmulticast mode [ 280.642928][ T11] bridge_slave_1: left promiscuous mode [ 280.649977][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.660921][ T11] bridge_slave_0: left allmulticast mode [ 280.666697][ T11] bridge_slave_0: left promiscuous mode [ 280.673063][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.838124][ T5849] Bluetooth: hci0: command tx timeout [ 281.299296][T12130] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1545'. [ 281.464112][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.476697][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.502643][ T11] bond0 (unregistering): Released all slaves [ 281.545726][T12123] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1544'. [ 281.596865][T12125] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 37532 - 0 [ 281.606052][T12125] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 37532 - 0 [ 281.615992][T12125] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 37532 - 0 [ 281.627817][T12125] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 37532 - 0 [ 281.648217][T12125] netdevsim netdevsim6 eth0: set [1, 2] type 2 family 0 port 45006 - 0 [ 281.656509][T12125] netdevsim netdevsim6 eth1: set [1, 2] type 2 family 0 port 45006 - 0 [ 281.677837][T12125] netdevsim netdevsim6 eth2: set [1, 2] type 2 family 0 port 45006 - 0 [ 281.686186][T12125] netdevsim netdevsim6 eth3: set [1, 2] type 2 family 0 port 45006 - 0 [ 281.708006][T12125] geneve5: entered promiscuous mode [ 281.724507][T12125] geneve5: entered allmulticast mode [ 282.105994][T12079] chnl_net:caif_netlink_parms(): no params data found [ 282.351399][T12166] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1554'. [ 282.389459][T12166] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1554'. [ 282.429616][T12160] lo speed is unknown, defaulting to 1000 [ 282.522222][ T11] hsr_slave_0: left promiscuous mode [ 282.529050][ T11] hsr_slave_1: left promiscuous mode [ 282.535870][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.545189][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.553988][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.562464][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.616569][ T11] veth1_macvtap: left promiscuous mode [ 282.627333][ T11] veth0_macvtap: left promiscuous mode [ 282.633760][ T11] veth1_vlan: left promiscuous mode [ 282.639624][ T11] veth0_vlan: left promiscuous mode [ 282.918256][ T5849] Bluetooth: hci0: command tx timeout [ 283.301259][ T11] team0 (unregistering): Port device team_slave_1 removed [ 283.354867][ T11] team0 (unregistering): Port device team_slave_0 removed [ 283.928875][T12079] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.936105][T12079] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.956197][T12079] bridge_slave_0: entered allmulticast mode [ 283.969853][T12186] x_tables: duplicate underflow at hook 3 [ 283.977969][T12079] bridge_slave_0: entered promiscuous mode [ 284.005772][T12184] veth3: entered promiscuous mode [ 284.016193][T12079] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.043818][T12079] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.056172][T12079] bridge_slave_1: entered allmulticast mode [ 284.079018][T12079] bridge_slave_1: entered promiscuous mode [ 284.126584][T12192] netlink: 'syz.8.1561': attribute type 1 has an invalid length. [ 284.185902][T12192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.261745][T12198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.279839][T12198] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 284.293524][T12198] bond0: (slave vti0): Error -95 calling set_mac_address [ 284.409528][T12079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.447049][T12079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.556140][T12079] team0: Port device team_slave_0 added [ 284.590479][T12205] netlink: 'syz.8.1564': attribute type 10 has an invalid length. [ 284.611547][T12205] team0: Device bridge0 is already an upper device of the team interface [ 284.623028][T12079] team0: Port device team_slave_1 added [ 284.655225][T12079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.662414][T12079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.689543][T12079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.719007][T12079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.726325][T12079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.761722][T12079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.843639][T12079] hsr_slave_0: entered promiscuous mode [ 284.852311][T12079] hsr_slave_1: entered promiscuous mode [ 284.884414][T12217] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 284.895027][T12215] xt_CT: No such helper "syz1" [ 284.903545][T12217] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 284.923297][T12217] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 284.998077][ T5849] Bluetooth: hci0: command tx timeout [ 285.188921][T12239] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1571'. [ 285.292344][T12237] vlan0: entered promiscuous mode [ 285.300666][T12237] vlan0: left promiscuous mode [ 285.436786][T12079] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 285.460757][T12079] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 285.488987][T12079] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 285.520940][T12079] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 285.681651][T12079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.698593][T12253] netlink: 144 bytes leftover after parsing attributes in process `syz.7.1577'. [ 285.733360][T12256] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1577'. [ 285.743944][T12079] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.772395][ T7213] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.779702][ T7213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.831077][ T7213] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.838472][ T7213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.874510][T12079] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 285.893366][T12258] dccp_invalid_packet: P.Data Offset(4) too small [ 285.900996][T12079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.088193][ T5883] IPVS: starting estimator thread 0... [ 286.120117][T12269] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 286.165881][T12273] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1583'. [ 286.177966][T12270] IPVS: using max 22 ests per chain, 52800 per kthread [ 286.195419][T12273] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1583'. [ 286.225135][T12273] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1583'. [ 286.293918][T12079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.371952][T12286] netlink: 'syz.6.1584': attribute type 3 has an invalid length. [ 286.608653][T12296] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 286.661908][T12296] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1588'. [ 286.812562][T12079] veth0_vlan: entered promiscuous mode [ 286.826954][T12079] veth1_vlan: entered promiscuous mode [ 286.881126][T12079] veth0_macvtap: entered promiscuous mode [ 286.890559][T12079] veth1_macvtap: entered promiscuous mode [ 286.905458][T12079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.916068][T12079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.927934][T12079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.939850][T12079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.950621][T12079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.961885][T12079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.976322][T12308] netlink: 'syz.7.1591': attribute type 1 has an invalid length. [ 287.028900][T12079] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.038439][T12079] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.047366][T12079] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.063786][T12079] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.094021][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1593'. [ 287.094801][ T5849] Bluetooth: hci0: command tx timeout [ 287.128854][T12319] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1593'. [ 287.168139][T12319] vlan3: entered allmulticast mode [ 287.187044][T12319] bridge_slave_0: entered allmulticast mode [ 287.383055][T12336] lo speed is unknown, defaulting to 1000 [ 287.394030][T12328] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1596'. [ 287.548215][ T7211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.556118][ T7211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.656870][T12354] pimreg3: entered allmulticast mode [ 287.674510][ T7224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.693890][ T7224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.015891][T12370] netlink: 'syz.8.1608': attribute type 10 has an invalid length. [ 288.058471][T12370] team0: left allmulticast mode [ 288.068438][T12370] team_slave_0: left allmulticast mode [ 288.077266][T12370] team_slave_1: left allmulticast mode [ 288.083339][T12370] team0: left promiscuous mode [ 288.089510][T12370] team_slave_0: left promiscuous mode [ 288.095159][T12370] team_slave_1: left promiscuous mode [ 288.127634][T12370] bridge0: port 3(team0) entered disabled state [ 288.163384][T12384] netlink: 'syz.8.1608': attribute type 10 has an invalid length. [ 288.173268][T12384] bridge0: port 3(team0) entered blocking state [ 288.180646][T12384] bridge0: port 3(team0) entered disabled state [ 288.187434][T12384] team0: entered allmulticast mode [ 288.193215][T12384] team_slave_0: entered allmulticast mode [ 288.205389][T12384] team_slave_1: entered allmulticast mode [ 288.214197][T12384] team0: entered promiscuous mode [ 288.222922][T12384] team_slave_0: entered promiscuous mode [ 288.229201][T12384] team_slave_1: entered promiscuous mode [ 288.235592][T12386] tipc: MTU too low for tipc bearer [ 288.468051][T12398] vlan0: mtu less than device minimum [ 288.496091][T12398] syzkaller0: entered allmulticast mode [ 289.151191][T12445] netlink: 'syz.8.1632': attribute type 11 has an invalid length. [ 289.160223][T12446] netlink: 'syz.8.1632': attribute type 11 has an invalid length. [ 289.180606][T12445] sctp: [Deprecated]: syz.8.1632 (pid 12445) Use of int in max_burst socket option deprecated. [ 289.180606][T12445] Use struct sctp_assoc_value instead [ 289.511369][ T7202] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.180201][ T7202] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.255230][ T7202] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.335894][ T7202] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.464289][ T7202] bridge_slave_1: left allmulticast mode [ 290.470098][ T7202] bridge_slave_1: left promiscuous mode [ 290.475771][ T7202] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.485175][ T7202] bridge_slave_0: left allmulticast mode [ 290.491698][ T7202] bridge_slave_0: left promiscuous mode [ 290.497437][ T7202] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.118848][T12489] __nla_validate_parse: 8 callbacks suppressed [ 291.118868][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1642'. [ 291.122628][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 291.145265][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 291.156072][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 291.156649][ T7202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.168272][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 291.181991][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 291.190293][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 291.210460][ T7202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.222395][ T7202] bond0 (unregistering): Released all slaves [ 291.595626][T12510] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1646'. [ 291.657988][T12488] lo speed is unknown, defaulting to 1000 [ 291.873583][T12523] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1651'. [ 292.223433][ T7202] hsr_slave_0: left promiscuous mode [ 292.229916][ T7202] hsr_slave_1: left promiscuous mode [ 292.236482][ T7202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.244229][ T7202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.253409][ T7202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.261126][ T7202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.290011][ T7202] veth1_macvtap: left promiscuous mode [ 292.295689][ T7202] veth0_macvtap: left promiscuous mode [ 292.301781][ T7202] veth1_vlan: left promiscuous mode [ 292.311667][ T7202] veth0_vlan: left promiscuous mode [ 292.340466][T12517] Bluetooth: MGMT ver 1.23 [ 292.918015][ T5850] Bluetooth: hci6: command 0x0405 tx timeout [ 293.015062][ T7202] team0 (unregistering): Port device team_slave_1 removed [ 293.069622][ T7202] team0 (unregistering): Port device team_slave_0 removed [ 293.250387][ T5849] Bluetooth: hci0: command tx timeout [ 293.549271][T12527] ip6gretap1: entered promiscuous mode [ 293.555148][T12527] ip6gretap1: entered allmulticast mode [ 293.709087][T12488] chnl_net:caif_netlink_parms(): no params data found [ 293.746975][T12557] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 293.901164][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1662'. [ 293.909286][T12570] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1663'. [ 293.938837][T12488] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.948184][T12488] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.955449][T12488] bridge_slave_0: entered allmulticast mode [ 293.986621][T12488] bridge_slave_0: entered promiscuous mode [ 294.009239][T12488] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.029938][T12488] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.043681][T12488] bridge_slave_1: entered allmulticast mode [ 294.063548][T12488] bridge_slave_1: entered promiscuous mode [ 294.127094][T12488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.141081][T12488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.180561][T12574] gtp0: entered promiscuous mode [ 294.186063][T12574] gtp0: entered allmulticast mode [ 294.245094][T12488] team0: Port device team_slave_0 added [ 294.267299][T12488] team0: Port device team_slave_1 added [ 294.352122][T12488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.364370][T12586] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1669'. [ 294.366309][T12488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.420253][T12488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.435371][T12488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.442966][T12488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.471905][T12488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.523573][T12589] netlink: 156 bytes leftover after parsing attributes in process `syz.9.1669'. [ 294.624521][T12599] x_tables: ip_tables: tcpmss match: only valid for protocol 6 [ 294.698222][T12488] hsr_slave_0: entered promiscuous mode [ 294.731304][T12488] hsr_slave_1: entered promiscuous mode [ 294.749514][T12603] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1673'. [ 294.776551][T12603] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1673'. [ 295.210820][T12628] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 295.229716][T12625] pim6reg1: entered promiscuous mode [ 295.235097][T12625] pim6reg1: entered allmulticast mode [ 295.333498][ T5849] Bluetooth: hci0: command tx timeout [ 295.661696][T12642] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 297.398513][ T5849] Bluetooth: hci0: command tx timeout [ 297.556504][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1682'. [ 297.779722][T12488] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 297.791035][T12488] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 297.829395][T12488] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 297.843152][T12488] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 297.874648][T12674] netlink: 92 bytes leftover after parsing attributes in process `syz.9.1693'. [ 298.032918][T12679] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1695'. [ 298.047884][T12679] netlink: 88 bytes leftover after parsing attributes in process `syz.8.1695'. [ 298.094394][T12488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.139978][T12686] netlink: 'syz.9.1697': attribute type 1 has an invalid length. [ 298.183544][T12488] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.206922][ T7211] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.214130][ T7211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.250129][ T7211] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.257321][ T7211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.296470][T12488] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 298.306986][T12488] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 298.408702][T12702] netlink: 'syz.7.1701': attribute type 23 has an invalid length. [ 298.432837][T12702] netlink: 244 bytes leftover after parsing attributes in process `syz.7.1701'. [ 298.560667][T12488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.617984][T12708] team0: Device veth0_vlan failed to register rx_handler [ 298.748982][T12721] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 298.985401][T12488] veth0_vlan: entered promiscuous mode [ 299.021025][T12488] veth1_vlan: entered promiscuous mode [ 299.066453][T12488] veth0_macvtap: entered promiscuous mode [ 299.083479][T12488] veth1_macvtap: entered promiscuous mode [ 299.127512][T12488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.148542][T12488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.165633][T12488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.181572][T12488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.199400][T12488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.215382][T12488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.243996][T12488] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.259006][T12488] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.278541][T12488] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.287430][T12488] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.307873][T12743] lo speed is unknown, defaulting to 1000 [ 299.325396][T12746] gretap0: entered promiscuous mode [ 299.348138][T12746] macsec1: entered promiscuous mode [ 299.353615][T12746] macsec1: entered allmulticast mode [ 299.368348][T12746] gretap0: entered allmulticast mode [ 299.474544][T12746] gretap0: left allmulticast mode [ 299.479995][ T5849] Bluetooth: hci0: command tx timeout [ 299.488515][T12746] gretap0: left promiscuous mode [ 299.633580][T12747] gretap0: entered promiscuous mode [ 299.648188][T12747] macsec1: entered promiscuous mode [ 299.663944][T12747] macsec1: entered allmulticast mode [ 299.673943][T12747] gretap0: entered allmulticast mode [ 299.695154][T12747] gretap0: left allmulticast mode [ 299.701167][T12747] gretap0: left promiscuous mode [ 299.746377][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1714'. [ 299.756267][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1714'. [ 299.780632][T12757] tipc: Started in network mode [ 299.788053][T12757] tipc: Node identity ffffffff, cluster identity 4711 [ 299.796074][T12757] tipc: Node number set to 4294967295 [ 300.116531][T12764] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.135825][T12764] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.171669][ T7224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.180058][ T7224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.305155][T12764] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.321652][T12764] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.358249][ T7202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.366400][ T7202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.392029][T12777] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1721'. [ 300.406620][T12777] vlan1: entered promiscuous mode [ 300.465312][T12764] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.495932][T12764] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.581029][T12788] bridge0: port 4(syz_tun) entered blocking state [ 300.597167][T12788] bridge0: port 4(syz_tun) entered disabled state [ 300.645874][T12788] syz_tun: entered promiscuous mode [ 300.711898][T12764] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.722938][T12764] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.855092][T12764] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.878594][T12764] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.939506][T12764] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.939567][T12796] netlink: 'syz.6.1728': attribute type 1 has an invalid length. [ 300.951954][T12793] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 300.963342][T12764] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.989813][T12764] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.007045][T12764] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.028574][T12764] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.040802][T12764] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.474382][T12826] syzkaller0: entered promiscuous mode [ 301.480956][T12826] syzkaller0: entered allmulticast mode [ 303.335728][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.358537][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.377744][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.422487][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.441721][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 303.452041][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 304.067437][T12836] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1742'. [ 304.076743][T12836] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1742'. [ 304.097797][T12826] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1739'. [ 304.144531][T12844] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1743'. [ 304.183109][T12847] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1744'. [ 304.208228][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1744'. [ 304.241919][T12848] vlan4: entered allmulticast mode [ 304.247314][T12848] macvtap0: entered allmulticast mode [ 304.259721][T12848] veth0_macvtap: entered allmulticast mode [ 304.361479][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.446496][T12869] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1750'. [ 304.873868][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.104380][T12850] lo speed is unknown, defaulting to 1000 [ 305.252264][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.383086][T12895] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1757'. [ 305.411125][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.474590][T12900] netlink: 'syz.9.1758': attribute type 4 has an invalid length. [ 305.523816][T12898] sit0: entered promiscuous mode [ 305.549340][T12898] netlink: 'syz.9.1758': attribute type 1 has an invalid length. [ 305.565373][T12898] netlink: 1 bytes leftover after parsing attributes in process `syz.9.1758'. [ 305.566545][ T5850] Bluetooth: hci0: command tx timeout [ 305.576588][T12910] Unknown options in mask 1f4 [ 305.632529][T12908] vlan2: entered promiscuous mode [ 305.646961][T12908] veth1: entered promiscuous mode [ 305.689425][T12908] vlan2: entered allmulticast mode [ 305.694601][T12908] veth1: entered allmulticast mode [ 305.719349][T12908] team0: Port device vlan2 added [ 305.752918][T12916] lo speed is unknown, defaulting to 1000 [ 305.796697][T12914] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1762'. [ 305.868018][ T11] bridge_slave_1: left allmulticast mode [ 305.894785][ T11] bridge_slave_1: left promiscuous mode [ 305.925943][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.958228][T12925] FAULT_INJECTION: forcing a failure. [ 305.958228][T12925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.978752][ T11] bridge_slave_0: left allmulticast mode [ 305.981999][T12925] CPU: 1 UID: 0 PID: 12925 Comm: syz.8.1766 Not tainted 6.12.0-rc5-syzkaller-01056-gf07a6e6ceb05 #0 [ 305.995784][T12925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 305.996148][ T11] bridge_slave_0: left promiscuous mode [ 306.006023][T12925] Call Trace: [ 306.006040][T12925] [ 306.006050][T12925] dump_stack_lvl+0x241/0x360 [ 306.006083][T12925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.006108][T12925] ? __pfx__printk+0x10/0x10 [ 306.006133][T12925] ? __pfx_lock_release+0x10/0x10 [ 306.024287][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.027814][T12925] should_fail_ex+0x3b0/0x4e0 [ 306.027847][T12925] _copy_from_user+0x2f/0xc0 [ 306.027873][T12925] copy_msghdr_from_user+0xae/0x680 [ 306.059040][T12925] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 306.064871][T12925] __sys_sendmsg+0x22d/0x380 [ 306.069467][T12925] ? __pfx___sys_sendmsg+0x10/0x10 [ 306.074584][T12925] ? __pfx_vfs_write+0x10/0x10 [ 306.079460][T12925] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 306.085793][T12925] ? do_syscall_64+0x100/0x230 [ 306.090646][T12925] ? do_syscall_64+0xb6/0x230 [ 306.095323][T12925] do_syscall_64+0xf3/0x230 [ 306.099823][T12925] ? clear_bhb_loop+0x35/0x90 [ 306.104500][T12925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.110394][T12925] RIP: 0033:0x7f43dc17e719 [ 306.114809][T12925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.134420][T12925] RSP: 002b:00007f43dcffc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.142835][T12925] RAX: ffffffffffffffda RBX: 00007f43dc335f80 RCX: 00007f43dc17e719 [ 306.150809][T12925] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 306.158781][T12925] RBP: 00007f43dcffc090 R08: 0000000000000000 R09: 0000000000000000 [ 306.166921][T12925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.175012][T12925] R13: 0000000000000000 R14: 00007f43dc335f80 R15: 00007ffcfe3b3bf8 [ 306.182997][T12925] [ 306.713245][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.724917][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.736249][ T11] bond0 (unregistering): Released all slaves [ 307.230080][T12850] chnl_net:caif_netlink_parms(): no params data found [ 307.406832][ T11] hsr_slave_0: left promiscuous mode [ 307.416310][ T11] hsr_slave_1: left promiscuous mode [ 307.426935][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.434716][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.448657][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.456135][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.481905][ T11] veth1_macvtap: left promiscuous mode [ 307.487496][ T11] veth0_macvtap: left promiscuous mode [ 307.493374][ T11] veth1_vlan: left promiscuous mode [ 307.498957][ T11] veth0_vlan: left promiscuous mode [ 307.642325][ T5849] Bluetooth: hci0: command tx timeout [ 308.131292][ T11] team0 (unregistering): Port device team_slave_1 removed [ 308.187102][ T11] team0 (unregistering): Port device team_slave_0 removed [ 308.825796][T12986] netlink: 'syz.7.1782': attribute type 1 has an invalid length. [ 309.011336][T12992] netlink: 'syz.7.1782': attribute type 10 has an invalid length. [ 309.037272][T12992] mac80211_hwsim hwsim14 wlan1: left allmulticast mode [ 309.076223][T12992] team0: Port device wlan1 added [ 309.087559][T12850] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.097065][T12850] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.109938][T12850] bridge_slave_0: entered allmulticast mode [ 309.123697][T12850] bridge_slave_0: entered promiscuous mode [ 309.141184][T12997] netlink: 'syz.7.1782': attribute type 1 has an invalid length. [ 309.214636][T12850] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.257902][T12850] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.265184][T12850] bridge_slave_1: entered allmulticast mode [ 309.297655][T12850] bridge_slave_1: entered promiscuous mode [ 309.335512][T13020] netlink: 'syz.8.1788': attribute type 32 has an invalid length. [ 309.370434][T13021] __nla_validate_parse: 7 callbacks suppressed [ 309.370454][T13021] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1786'. [ 309.474841][T13025] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1790'. [ 309.521288][T12850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.537478][T13025] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1790'. [ 309.553323][T12850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.587063][T13025] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1790'. [ 309.608161][T13025] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1790'. [ 309.625567][T13025] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1790'. [ 309.635590][T13025] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1790'. [ 309.667341][T13025] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1790'. [ 309.718087][T13025] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1790'. [ 309.721581][ T5849] Bluetooth: hci0: command 0x040f tx timeout [ 309.769539][T13025] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1790'. [ 309.832394][T13028] dvmrp8: entered allmulticast mode [ 309.859239][T13036] dvmrp8: left allmulticast mode [ 309.980084][T12850] team0: Port device team_slave_0 added [ 310.005620][T12850] team0: Port device team_slave_1 added [ 310.098712][T12850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.128602][T12850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.208907][T12850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.270925][T12850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.309631][T12850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.412522][T12850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.643863][T12850] hsr_slave_0: entered promiscuous mode [ 310.680419][T12850] hsr_slave_1: entered promiscuous mode [ 310.784043][T13106] netlink: 'syz.8.1804': attribute type 3 has an invalid length. [ 310.824051][T13104] netlink: 'syz.8.1804': attribute type 3 has an invalid length. [ 311.274267][T13143] netlink: 'syz.7.1811': attribute type 10 has an invalid length. [ 311.304870][T13143] team0: Port device wlan1 removed [ 311.326676][T13143] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 311.342213][T13143] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 311.798963][ T5850] Bluetooth: hci0: command 0x040f tx timeout [ 313.783299][T13166] netlink: 'syz.6.1820': attribute type 10 has an invalid length. [ 313.877874][ T5850] Bluetooth: hci0: command 0x040f tx timeout [ 313.930916][T12850] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 313.992326][T12850] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 314.014066][T12850] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 314.154004][T12850] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 314.445409][T13212] __nla_validate_parse: 66 callbacks suppressed [ 314.445427][T13212] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1833'. [ 314.486325][T12850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.618589][T13217] lo speed is unknown, defaulting to 1000 [ 314.636811][T12850] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.691071][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.698296][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.724349][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.731612][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.768155][T13223] netlink: 'syz.9.1835': attribute type 4 has an invalid length. [ 314.803703][T13230] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1836'. [ 315.294350][T12850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.473083][T13257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.805327][T13284] dvmrp1: entered allmulticast mode [ 315.855670][T13286] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1846'. [ 315.870391][T12850] veth0_vlan: entered promiscuous mode [ 315.879171][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1845'. [ 315.902902][T12850] veth1_vlan: entered promiscuous mode [ 315.959311][T12850] veth0_macvtap: entered promiscuous mode [ 315.984962][T12850] veth1_macvtap: entered promiscuous mode [ 316.012931][T12850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.048360][T12850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.066547][T13288] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 316.098977][T12850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.121350][T12850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.142746][T12850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.189423][T12850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.218461][T12850] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.227209][T12850] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.248821][T12850] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.268286][T12850] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.492452][T13297] netlink: 'syz.6.1850': attribute type 2 has an invalid length. [ 316.524283][T13316] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1852'. [ 316.534376][T13297] netlink: 'syz.6.1850': attribute type 1 has an invalid length. [ 316.572703][T13315] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1853'. [ 316.608259][ T7224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.616807][ T7224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.652451][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1850'. [ 316.666946][ T7224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.701210][ T7224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.759159][T13319] can: request_module (can-proto-0) failed. [ 316.938720][T13330] syz.9.1856: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 316.980344][T13330] CPU: 0 UID: 0 PID: 13330 Comm: syz.9.1856 Not tainted 6.12.0-rc5-syzkaller-01056-gf07a6e6ceb05 #0 [ 316.991200][T13330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 317.001263][T13330] Call Trace: [ 317.004568][T13330] [ 317.007501][T13330] dump_stack_lvl+0x241/0x360 [ 317.012221][T13330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.017455][T13330] ? __pfx__printk+0x10/0x10 [ 317.022097][T13330] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 317.028545][T13330] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 317.035098][T13330] warn_alloc+0x278/0x410 [ 317.039467][T13330] ? __pfx_warn_alloc+0x10/0x10 [ 317.044358][T13330] ? hash_ipport_create+0x801/0x1670 [ 317.049687][T13330] ? __get_vm_area_node+0x23d/0x270 [ 317.054926][T13330] __vmalloc_node_range_noprof+0x691/0x13f0 [ 317.060856][T13330] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 317.066891][T13330] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 317.073253][T13330] ? rcu_is_watching+0x15/0xb0 [ 317.078048][T13330] ? trace_kmalloc+0x1f/0xd0 [ 317.082675][T13330] ? __kmalloc_node_noprof+0x247/0x440 [ 317.088250][T13330] ? __kvmalloc_node_noprof+0x72/0x190 [ 317.093755][T13330] __kvmalloc_node_noprof+0x142/0x190 [ 317.099168][T13330] ? hash_ipport_create+0x801/0x1670 [ 317.104568][T13330] hash_ipport_create+0x801/0x1670 [ 317.109696][T13330] ? __pfx_lock_acquire+0x10/0x10 [ 317.114749][T13330] ? __pfx_hash_ipport_create+0x10/0x10 [ 317.120308][T13330] ? __nla_parse+0x40/0x60 [ 317.124723][T13330] ? __pfx_hash_ipport_create+0x10/0x10 [ 317.130273][T13330] ip_set_create+0xa5c/0x1900 [ 317.134953][T13330] ? ip_set_create+0x45e/0x1900 [ 317.139805][T13330] ? __mutex_trylock_common+0xa/0x2e0 [ 317.145180][T13330] ? __pfx_ip_set_create+0x10/0x10 [ 317.150291][T13330] ? trace_contention_end+0x3c/0x120 [ 317.155595][T13330] ? nfnetlink_rcv_msg+0x225/0x1180 [ 317.160798][T13330] nfnetlink_rcv_msg+0xbec/0x1180 [ 317.165821][T13330] ? nfnetlink_rcv_msg+0x225/0x1180 [ 317.171034][T13330] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 317.176515][T13330] ? __netlink_deliver_tap+0x54d/0x7c0 [ 317.181971][T13330] ? netlink_deliver_tap+0x19d/0x1b0 [ 317.187258][T13330] ? netlink_unicast+0x7c4/0x990 [ 317.192194][T13330] ? netlink_sendmsg+0x8e4/0xcb0 [ 317.197126][T13330] ? __sock_sendmsg+0x221/0x270 [ 317.201982][T13330] ? ____sys_sendmsg+0x52a/0x7e0 [ 317.206917][T13330] ? __sys_sendmsg+0x292/0x380 [ 317.211678][T13330] ? do_syscall_64+0xf3/0x230 [ 317.216349][T13330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.222427][T13330] netlink_rcv_skb+0x1e3/0x430 [ 317.227188][T13330] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 317.232821][T13330] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 317.238124][T13330] ? apparmor_capable+0x13b/0x1b0 [ 317.243152][T13330] ? bpf_lsm_capable+0x9/0x10 [ 317.247927][T13330] ? security_capable+0x7e/0x2d0 [ 317.252894][T13330] nfnetlink_rcv+0x297/0x2ab0 [ 317.257608][T13330] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 317.263353][T13330] ? __dev_queue_xmit+0x2da/0x3f30 [ 317.268491][T13330] ? __dev_queue_xmit+0x1758/0x3f30 [ 317.273701][T13330] ? kasan_save_track+0x51/0x80 [ 317.278671][T13330] ? do_syscall_64+0xf3/0x230 [ 317.283347][T13330] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 317.288461][T13330] ? __dev_queue_xmit+0x2da/0x3f30 [ 317.293574][T13330] ? __pfx___dev_queue_xmit+0x10/0x10 [ 317.298955][T13330] ? ref_tracker_free+0x643/0x7e0 [ 317.303986][T13330] ? __asan_memcpy+0x40/0x70 [ 317.308577][T13330] ? __pfx_ref_tracker_free+0x10/0x10 [ 317.313967][T13330] ? netlink_deliver_tap+0x2e/0x1b0 [ 317.319163][T13330] ? skb_clone+0x240/0x390 [ 317.323583][T13330] ? __pfx_lock_release+0x10/0x10 [ 317.328608][T13330] ? __netlink_deliver_tap+0x77e/0x7c0 [ 317.334097][T13330] ? netlink_deliver_tap+0x2e/0x1b0 [ 317.339310][T13330] netlink_unicast+0x7f6/0x990 [ 317.344146][T13330] ? __pfx_netlink_unicast+0x10/0x10 [ 317.349448][T13330] ? __virt_addr_valid+0x183/0x530 [ 317.354569][T13330] ? __check_object_size+0x48e/0x900 [ 317.359951][T13330] netlink_sendmsg+0x8e4/0xcb0 [ 317.364729][T13330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.370017][T13330] ? aa_sock_msg_perm+0x91/0x160 [ 317.374971][T13330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.380337][T13330] __sock_sendmsg+0x221/0x270 [ 317.385101][T13330] ____sys_sendmsg+0x52a/0x7e0 [ 317.389869][T13330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.395258][T13330] __sys_sendmsg+0x292/0x380 [ 317.399854][T13330] ? __pfx___sys_sendmsg+0x10/0x10 [ 317.405087][T13330] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 317.411420][T13330] ? do_syscall_64+0x100/0x230 [ 317.416184][T13330] ? do_syscall_64+0xb6/0x230 [ 317.420857][T13330] do_syscall_64+0xf3/0x230 [ 317.425363][T13330] ? clear_bhb_loop+0x35/0x90 [ 317.430045][T13330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.435946][T13330] RIP: 0033:0x7fa31897e719 [ 317.440360][T13330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.460060][T13330] RSP: 002b:00007fa319780038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.468483][T13330] RAX: ffffffffffffffda RBX: 00007fa318b35f80 RCX: 00007fa31897e719 [ 317.476451][T13330] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 317.484432][T13330] RBP: 00007fa3189f132e R08: 0000000000000000 R09: 0000000000000000 [ 317.492518][T13330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.500503][T13330] R13: 0000000000000000 R14: 00007fa318b35f80 R15: 00007ffc205e8d88 [ 317.508499][T13330] [ 317.522447][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.537889][T13330] Mem-Info: [ 317.541144][T13330] active_anon:7449 inactive_anon:0 isolated_anon:0 [ 317.541144][T13330] active_file:1685 inactive_file:38320 isolated_file:0 [ 317.541144][T13330] unevictable:768 dirty:221 writeback:0 [ 317.541144][T13330] slab_reclaimable:11030 slab_unreclaimable:115493 [ 317.541144][T13330] mapped:20999 shmem:3520 pagetables:1075 [ 317.541144][T13330] sec_pagetables:0 bounce:0 [ 317.541144][T13330] kernel_misc_reclaimable:0 [ 317.541144][T13330] free:1328255 free_pcp:1060 free_cma:0 [ 317.609049][T13330] Node 0 active_anon:29796kB inactive_anon:0kB active_file:6740kB inactive_file:153204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:83996kB dirty:884kB writeback:0kB shmem:12544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13100kB pagetables:4300kB sec_pagetables:0kB all_unreclaimable? no [ 317.697977][T13330] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 317.730417][T13330] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.774849][T13330] lowmem_reserve[]: 0 2463 2464 0 0 [ 317.780288][T13330] Node 0 DMA32 free:1394620kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:21760kB inactive_anon:0kB active_file:6740kB inactive_file:152624kB unevictable:1536kB writepending:880kB present:3129332kB managed:2550484kB mlocked:0kB bounce:0kB free_pcp:13400kB local_pcp:12652kB free_cma:0kB [ 317.811202][T13330] lowmem_reserve[]: 0 0 0 0 0 [ 317.815974][T13330] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:580kB unevictable:0kB writepending:4kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 317.842895][T13330] lowmem_reserve[]: 0 0 0 0 0 [ 317.847811][T13330] Node 1 Normal free:3904040kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:68kB local_pcp:0kB free_cma:0kB [ 317.879817][T13330] lowmem_reserve[]: 0 0 0 0 0 [ 317.884613][T13330] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 317.897493][T13330] Node 0 DMA32: 16*4kB (UME) 34*8kB (UME) 25*16kB (UME) 82*32kB (UE) 18*64kB (UME) 51*128kB (UME) 37*256kB (UM) 14*512kB (UME) 8*1024kB (UM) 4*2048kB (UM) 330*4096kB (UM) = 1395744kB [ 317.916089][T13330] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 317.927866][T13330] Node 1 Normal: 170*4kB (UE) 42*8kB (UME) 37*16kB (UME) 159*32kB (UME) 88*64kB (UME) 20*128kB (UME) 18*256kB (UME) 9*512kB (UME) 3*1024kB (UME) 5*2048kB (UE) 944*4096kB (M) = 3904040kB [ 317.946868][T13330] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.956927][T13330] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.966591][T13330] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.976347][T13330] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.985870][T13330] 41425 total pagecache pages [ 317.990745][T13330] 0 pages in swap cache [ 317.995018][T13330] Free swap = 124996kB [ 318.000243][T13330] Total swap = 124996kB [ 318.004448][T13330] 2097051 pages RAM [ 318.008363][T13330] 0 pages HighMem/MovableOnly [ 318.013061][T13330] 427644 pages reserved [ 318.017221][T13330] 0 pages cma reserved [ 320.000626][T13349] veth3: entered promiscuous mode [ 320.117831][T13357] sctp: [Deprecated]: syz.7.1865 (pid 13357) Use of struct sctp_assoc_value in delayed_ack socket option. [ 320.117831][T13357] Use struct sctp_sack_info instead [ 320.234963][ T7203] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.835045][ T7203] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.896669][ T7203] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.957253][ T7203] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.292286][ T7203] bridge_slave_1: left allmulticast mode [ 321.300132][ T7203] bridge_slave_1: left promiscuous mode [ 321.305828][ T7203] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.315327][ T7203] bridge_slave_0: left allmulticast mode [ 321.321500][ T7203] bridge_slave_0: left promiscuous mode [ 321.327204][ T7203] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.758680][T13372] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1868'. [ 322.052576][ T7203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.076224][ T7203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.104933][ T7203] bond0 (unregistering): Released all slaves [ 322.120806][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 322.131984][T13371] nr0: entered promiscuous mode [ 322.134658][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 322.150329][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 322.164677][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 322.174567][ T5849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 322.194448][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 322.253698][T13393] lo speed is unknown, defaulting to 1000 [ 322.290574][T13385] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1871'. [ 322.830553][T13412] pim6reg1: entered promiscuous mode [ 322.846902][T13412] pim6reg1: entered allmulticast mode [ 322.874030][T13418] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1883'. [ 322.907293][T13418] bond4: entered promiscuous mode [ 322.918582][T13418] 8021q: adding VLAN 0 to HW filter on device bond4 [ 323.118771][T13418] bond4 (unregistering): Released all slaves [ 324.283157][ T5849] Bluetooth: hci0: command tx timeout [ 325.597146][ T7203] hsr_slave_0: left promiscuous mode [ 325.613741][ T7203] hsr_slave_1: left promiscuous mode [ 325.622182][ T7203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.634528][ T7203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.648518][ T7203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.656297][ T7203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.677606][ T7203] veth1_macvtap: left promiscuous mode [ 325.685474][ T7203] veth0_macvtap: left promiscuous mode [ 325.691594][ T7203] veth1_vlan: left promiscuous mode [ 325.703492][ T7203] veth0_vlan: left promiscuous mode [ 326.371262][ T5849] Bluetooth: hci0: command tx timeout [ 326.401808][ T7203] team0 (unregistering): Port device team_slave_1 removed [ 326.454997][ T7203] team0 (unregistering): Port device team_slave_0 removed [ 327.002035][T13438] netlink: 'syz.7.1889': attribute type 4 has an invalid length. [ 327.015822][T13443] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1887'. [ 327.214530][T13464] lo speed is unknown, defaulting to 1000 [ 327.402236][T13393] chnl_net:caif_netlink_parms(): no params data found [ 327.651206][T13471] lo speed is unknown, defaulting to 1000 [ 327.651912][T13393] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.665015][T13393] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.674509][T13393] bridge_slave_0: entered allmulticast mode [ 327.687111][T13393] bridge_slave_0: entered promiscuous mode [ 327.727249][T13393] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.738886][T13393] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.746529][T13393] bridge_slave_1: entered allmulticast mode [ 327.768762][T13393] bridge_slave_1: entered promiscuous mode [ 327.820060][T13393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.850310][T13393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.863038][T13490] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1900'. [ 327.928211][T13393] team0: Port device team_slave_0 added [ 327.949960][T13393] team0: Port device team_slave_1 added [ 327.999757][T13393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.006738][T13393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.074063][T13393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.110659][T13393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.129126][T13393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.169408][T13393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.253576][T13505] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1904'. [ 328.286536][T13502] netlink: 'syz.9.1903': attribute type 1 has an invalid length. [ 328.341002][T13502] 8021q: adding VLAN 0 to HW filter on device bond3 [ 328.457646][ T5849] Bluetooth: hci0: command tx timeout [ 328.654609][T13505] lo speed is unknown, defaulting to 1000 [ 328.680220][T13393] hsr_slave_0: entered promiscuous mode [ 328.696466][T13393] hsr_slave_1: entered promiscuous mode [ 329.142806][T13515] lo speed is unknown, defaulting to 1000 [ 329.365514][T13519] syzkaller0: entered promiscuous mode [ 329.371391][T13519] syzkaller0: entered allmulticast mode [ 329.384170][T13525] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1909'. [ 329.994065][T13537] xt_cluster: you have exceeded the maximum number of cluster nodes (600 > 32) [ 330.518130][ T5849] Bluetooth: hci0: command tx timeout [ 332.322446][T13543] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 332.404590][T13554] netlink: 'syz.9.1915': attribute type 11 has an invalid length. [ 332.641031][T13564] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1917'. [ 334.929234][ T5850] Bluetooth: hci6: command 0x0405 tx timeout [ 335.026262][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1923'. [ 335.144445][T13393] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 335.306118][T13393] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 335.369842][T13595] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1927'. [ 335.387474][T13595] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1927'. [ 335.399204][T13393] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 335.413929][T13393] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 335.524068][T13393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.544470][T13393] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.562177][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.569552][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.580108][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.587291][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.762451][T13393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.892640][T13621] netlink: 632 bytes leftover after parsing attributes in process `syz.6.1931'. [ 335.987536][T13625] batadv_slave_1: left allmulticast mode [ 336.003969][T13393] veth0_vlan: entered promiscuous mode [ 336.019463][T13393] veth1_vlan: entered promiscuous mode [ 336.052712][T13393] veth0_macvtap: entered promiscuous mode [ 336.077537][T13393] veth1_macvtap: entered promiscuous mode [ 336.094496][T13393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.106388][T13393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.118493][T13393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.132133][T13393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.143505][T13393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.155406][T13393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.170792][T13393] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.179954][T13393] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.193720][T13393] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.204201][T13393] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.275297][ T7208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.284530][ T7208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.325502][T13608] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 336.335772][ T7208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.365992][ T7208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.879945][T13662] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1942'. [ 337.149769][T13675] netlink: 'syz.9.1947': attribute type 2 has an invalid length. [ 337.158806][T13675] netlink: 'syz.9.1947': attribute type 2 has an invalid length. [ 337.166656][T13675] netlink: 'syz.9.1947': attribute type 2 has an invalid length. [ 337.328395][T13686] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1950'. [ 337.426724][T13688] netlink: 'syz.9.1952': attribute type 15 has an invalid length. [ 337.449851][T13686] netlink: 'syz.7.1950': attribute type 2 has an invalid length. [ 337.855469][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1958'. [ 337.996630][T13731] netlink: 'syz.7.1964': attribute type 3 has an invalid length. [ 337.996963][T13728] SET target dimension over the limit! [ 338.008519][T13731] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1964'. [ 338.123035][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1967'. [ 338.163636][T13736] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1965'. [ 338.298066][ T7213] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.661766][ T7213] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.743436][ T7213] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.808752][ T7213] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.964135][T13783] netlink: 'syz.8.1970': attribute type 7 has an invalid length. [ 339.973487][ T7213] bridge_slave_1: left allmulticast mode [ 339.985514][ T7213] bridge_slave_1: left promiscuous mode [ 339.991654][T13783] netlink: 15 bytes leftover after parsing attributes in process `syz.8.1970'. [ 340.007992][ T7213] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.017531][T13783] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1970'. [ 340.037419][T13783] netlink: 872 bytes leftover after parsing attributes in process `syz.8.1970'. [ 340.054160][ T7213] bridge_slave_0: left allmulticast mode [ 340.060369][ T7213] bridge_slave_0: left promiscuous mode [ 340.066243][ T7213] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.127634][T13791] netlink: 'syz.8.1970': attribute type 1 has an invalid length. [ 340.236742][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.264323][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.294569][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.303505][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.317128][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 340.334337][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.631478][ T7213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.643833][ T7213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.655931][ T7213] bond0 (unregistering): Released all slaves [ 340.672912][T13787] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1971'. [ 340.706329][T13783] netlink: 'syz.8.1970': attribute type 7 has an invalid length. [ 340.715357][T13783] netlink: 15 bytes leftover after parsing attributes in process `syz.8.1970'. [ 340.863933][T13795] lo speed is unknown, defaulting to 1000 [ 341.267304][ T7213] hsr_slave_0: left promiscuous mode [ 341.322378][ T7213] hsr_slave_1: left promiscuous mode [ 341.334574][ T7213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.342596][ T7213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.352491][ T7213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.360943][ T7213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.383895][ T7213] veth1_macvtap: left promiscuous mode [ 341.390034][ T7213] veth0_macvtap: left promiscuous mode [ 341.395659][ T7213] veth1_vlan: left promiscuous mode [ 341.401959][ T7213] veth0_vlan: left promiscuous mode [ 342.104783][ T7213] team0 (unregistering): Port device team_slave_1 removed [ 342.164351][ T7213] team0 (unregistering): Port device team_slave_0 removed [ 342.370178][ T5849] Bluetooth: hci0: command tx timeout [ 342.802980][T13843] netlink: 'syz.9.1984': attribute type 27 has an invalid length. [ 342.844012][T13843] C: renamed from team_slave_0 [ 342.869118][T13851] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1986'. [ 342.971906][T13851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.208597][T13795] chnl_net:caif_netlink_parms(): no params data found [ 343.298962][T13862] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1990'. [ 343.327957][T13862] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1990'. [ 343.369546][T13871] vlan5: entered promiscuous mode [ 343.378876][T13871] vlan5: entered allmulticast mode [ 343.384640][T13871] xfrm0: entered allmulticast mode [ 343.417870][T13871] xfrm0: entered promiscuous mode [ 343.433573][T13871] team0: Port device vlan5 added [ 343.506970][T13876] xfrm0: left allmulticast mode [ 343.532271][T13876] xfrm0: left promiscuous mode [ 343.568272][T13865] lo speed is unknown, defaulting to 1000 [ 343.590139][T13877] xfrm0: entered allmulticast mode [ 343.595328][T13877] xfrm0: entered promiscuous mode [ 343.717276][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1995'. [ 343.779905][T13795] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.812950][T13795] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.828640][T13795] bridge_slave_0: entered allmulticast mode [ 343.838659][T13795] bridge_slave_0: entered promiscuous mode [ 343.854206][T13795] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.862064][T13795] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.869975][T13795] bridge_slave_1: entered allmulticast mode [ 343.877556][T13795] bridge_slave_1: entered promiscuous mode [ 343.947143][T13795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.980898][T13795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.126212][T13795] team0: Port device team_slave_0 added [ 344.153618][T13908] IPv6: Can't replace route, no match found [ 344.174758][T13795] team0: Port device team_slave_1 added [ 344.306034][T13795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.326399][T13795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.383425][T13795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.415221][T13795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.423087][T13795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.449864][ T5849] Bluetooth: hci0: command tx timeout [ 344.455524][T13795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.580265][T13795] hsr_slave_0: entered promiscuous mode [ 344.623093][T13795] hsr_slave_1: entered promiscuous mode [ 345.108283][T13939] netlink: 100 bytes leftover after parsing attributes in process `syz.8.2008'. [ 345.185102][T13947] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2010'. [ 345.235375][T13938] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2009'. [ 345.268230][T13947] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2010'. [ 345.332438][T13938] syzkaller0: entered promiscuous mode [ 345.338514][T13938] syzkaller0: entered allmulticast mode [ 345.436550][T13795] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 345.471329][T13795] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 345.493060][T13952] Bluetooth: MGMT ver 1.23 [ 345.493581][T13795] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 345.526673][T13795] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 345.693499][T13795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.753030][T13795] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.784434][ T7213] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.791679][ T7213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.818839][T13959] Bluetooth: MGMT ver 1.23 [ 345.986068][T13961] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2013'. [ 346.027882][T13961] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2013'. [ 346.518042][ T5849] Bluetooth: hci0: command tx timeout [ 348.344531][ T7213] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.351714][ T7213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.485566][T13981] ebt_among: src integrity fail: 100 [ 348.557573][T13795] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 348.568571][T13795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.598140][ T5849] Bluetooth: hci0: command tx timeout [ 348.666781][T13990] tls_set_device_offload: netdev not found [ 348.956348][T14017] netlink: 'syz.6.2025': attribute type 3 has an invalid length. [ 349.014258][T13795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.305601][T14042] netlink: 'syz.8.2030': attribute type 6 has an invalid length. [ 349.335990][T14042] netlink: 'syz.8.2030': attribute type 7 has an invalid length. [ 349.369481][T14042] netlink: 'syz.8.2030': attribute type 8 has an invalid length. [ 349.471278][T14051] lo speed is unknown, defaulting to 1000 [ 349.663564][T13795] veth0_vlan: entered promiscuous mode [ 349.706640][T13795] veth1_vlan: entered promiscuous mode [ 349.785032][T13795] veth0_macvtap: entered promiscuous mode [ 349.814322][T13795] veth1_macvtap: entered promiscuous mode [ 349.930685][T13795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.954296][T13795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.990680][T13795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.026317][T13795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.055132][T13795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.087544][T13795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.199900][T13795] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.222968][T13795] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.251416][T13795] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.264458][T13795] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.288767][T14068] __nla_validate_parse: 3 callbacks suppressed [ 350.288787][T14068] netlink: 1 bytes leftover after parsing attributes in process `syz.8.2035'. [ 350.466053][T14082] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2038'. [ 350.476030][T14082] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2038'. [ 350.486675][T14082] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 350.577603][T14079] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2037'. [ 350.895231][ T7224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.914630][ T7224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.953830][ T7224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.973087][ T7224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.033682][T14106] xt_CT: No such helper "syz0" [ 351.083395][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2044'. [ 351.232390][T14109] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2044'. [ 351.356511][T14117] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 351.374325][T14121] netlink: 11562 bytes leftover after parsing attributes in process `syz.8.2048'. [ 351.478524][ T5850] Bluetooth: hci0: command 0x0405 tx timeout [ 351.529430][T14128] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2049'. [ 351.825662][ T7213] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.850030][T14142] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2056'. [ 351.863946][T14142] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2056'. [ 351.940748][ T7213] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.047433][ T7213] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.241535][ T7213] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.379592][ T7213] bridge_slave_1: left allmulticast mode [ 352.385293][ T7213] bridge_slave_1: left promiscuous mode [ 352.397635][ T7213] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.415857][ T7213] bridge_slave_0: left allmulticast mode [ 352.422208][ T7213] bridge_slave_0: left promiscuous mode [ 352.434066][ T7213] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.021982][ T7213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.044301][ T7213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.055094][ T7213] bond0 (unregistering): Released all slaves [ 353.347281][ T7213] hsr_slave_0: left promiscuous mode [ 353.353868][ T7213] hsr_slave_1: left promiscuous mode [ 353.368859][ T7213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.376303][ T7213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.384526][ T7213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.392614][ T7213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.413553][ T7213] veth1_macvtap: left promiscuous mode [ 353.419562][ T7213] veth0_macvtap: left promiscuous mode [ 353.425089][ T7213] veth1_vlan: left promiscuous mode [ 353.431301][ T7213] veth0_vlan: left promiscuous mode [ 353.869455][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 353.881277][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 353.891709][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 353.913361][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 353.930643][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 353.938300][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 354.314526][ T7213] team0 (unregistering): Port device team_slave_1 removed [ 354.364793][ T7213] team0 (unregistering): Port device team_slave_0 removed [ 354.892168][T14160] ipvlan2: entered promiscuous mode [ 354.899689][T14160] batman_adv: batadv0: Adding interface: ipvlan2 [ 354.906591][T14160] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.947046][T14160] batman_adv: batadv0: Interface activated: ipvlan2 [ 355.018669][T14171] FAULT_INJECTION: forcing a failure. [ 355.018669][T14171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.039305][T14171] CPU: 0 UID: 0 PID: 14171 Comm: syz.8.2063 Not tainted 6.12.0-rc5-syzkaller-01056-gf07a6e6ceb05 #0 [ 355.050121][T14171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 355.060192][T14171] Call Trace: [ 355.063542][T14171] [ 355.066470][T14171] dump_stack_lvl+0x241/0x360 [ 355.071166][T14171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.076378][T14171] ? __pfx__printk+0x10/0x10 [ 355.081070][T14171] ? __pfx_lock_release+0x10/0x10 [ 355.086114][T14171] should_fail_ex+0x3b0/0x4e0 [ 355.090794][T14171] _copy_from_user+0x2f/0xc0 [ 355.095390][T14171] copy_msghdr_from_user+0xae/0x680 [ 355.100594][T14171] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 355.106511][T14171] __sys_sendmsg+0x22d/0x380 [ 355.111105][T14171] ? __pfx___sys_sendmsg+0x10/0x10 [ 355.116233][T14171] ? __pfx_vfs_write+0x10/0x10 [ 355.121019][T14171] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 355.127378][T14171] ? do_syscall_64+0x100/0x230 [ 355.132158][T14171] ? do_syscall_64+0xb6/0x230 [ 355.136849][T14171] do_syscall_64+0xf3/0x230 [ 355.141355][T14171] ? clear_bhb_loop+0x35/0x90 [ 355.146039][T14171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.151946][T14171] RIP: 0033:0x7f43dc17e719 [ 355.156373][T14171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.176198][T14171] RSP: 002b:00007f43dcffc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.184626][T14171] RAX: ffffffffffffffda RBX: 00007f43dc335f80 RCX: 00007f43dc17e719 [ 355.192684][T14171] RDX: 0000000000008002 RSI: 00000000200001c0 RDI: 0000000000000003 [ 355.200654][T14171] RBP: 00007f43dcffc090 R08: 0000000000000000 R09: 0000000000000000 [ 355.208621][T14171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.216602][T14171] R13: 0000000000000000 R14: 00007f43dc335f80 R15: 00007ffcfe3b3bf8 [ 355.225739][T14171] [ 355.324051][T14167] lo speed is unknown, defaulting to 1000 [ 355.460371][T14189] __nla_validate_parse: 3 callbacks suppressed [ 355.460392][T14189] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2067'. [ 355.534339][T14189] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2067'. [ 355.685757][T14200] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2072'. [ 355.734490][T14202] netlink: 'syz.7.2071': attribute type 10 has an invalid length. [ 355.817357][T14209] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2070'. [ 355.830455][T14205] netlink: 'syz.8.2073': attribute type 27 has an invalid length. [ 355.839199][T14205] C: renamed from team_slave_0 (while UP) [ 355.958134][ T5849] Bluetooth: hci0: command tx timeout [ 356.225108][T14221] syz_tun: left promiscuous mode [ 356.233999][T14221] bridge0: port 4(syz_tun) entered disabled state [ 356.273483][T14221] batadv0: left promiscuous mode [ 356.286579][T14221] bridge0: port 3(batadv0) entered disabled state [ 356.310427][T14221] bridge_slave_0: left promiscuous mode [ 356.316147][T14221] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.335433][T14229] FAULT_INJECTION: forcing a failure. [ 356.335433][T14229] name failslab, interval 1, probability 0, space 0, times 0 [ 356.350679][T14221] bridge_slave_1: left promiscuous mode [ 356.356732][T14221] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.357559][T14229] CPU: 0 UID: 0 PID: 14229 Comm: syz.9.2077 Not tainted 6.12.0-rc5-syzkaller-01056-gf07a6e6ceb05 #0 [ 356.374731][T14229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 356.384824][T14229] Call Trace: [ 356.388125][T14229] [ 356.391081][T14229] dump_stack_lvl+0x241/0x360 [ 356.395798][T14229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.401037][T14229] ? __pfx__printk+0x10/0x10 [ 356.405678][T14229] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 356.411799][T14229] ? __pfx___might_resched+0x10/0x10 [ 356.417236][T14229] should_fail_ex+0x3b0/0x4e0 [ 356.421954][T14229] should_failslab+0xac/0x100 [ 356.426664][T14229] ? __alloc_skb+0x1c3/0x440 [ 356.431305][T14229] kmem_cache_alloc_node_noprof+0x71/0x320 [ 356.437162][T14229] __alloc_skb+0x1c3/0x440 [ 356.441626][T14229] ? __pfx___alloc_skb+0x10/0x10 [ 356.446599][T14229] ? netlink_autobind+0xd6/0x2f0 [ 356.451560][T14229] ? netlink_autobind+0x2b0/0x2f0 [ 356.456706][T14229] netlink_sendmsg+0x638/0xcb0 [ 356.461493][T14229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.466800][T14229] ? aa_sock_msg_perm+0x91/0x160 [ 356.471839][T14229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.477124][T14229] __sock_sendmsg+0x221/0x270 [ 356.481816][T14229] ____sys_sendmsg+0x52a/0x7e0 [ 356.486627][T14229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 356.491962][T14229] __sys_sendmsg+0x292/0x380 [ 356.496696][T14229] ? __pfx___sys_sendmsg+0x10/0x10 [ 356.501955][T14229] ? __pfx_vfs_write+0x10/0x10 [ 356.506874][T14229] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 356.513249][T14229] ? do_syscall_64+0x100/0x230 [ 356.518151][T14229] ? do_syscall_64+0xb6/0x230 [ 356.522869][T14229] do_syscall_64+0xf3/0x230 [ 356.527400][T14229] ? clear_bhb_loop+0x35/0x90 [ 356.532202][T14229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.538142][T14229] RIP: 0033:0x7fa31897e719 [ 356.542676][T14229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.562314][T14229] RSP: 002b:00007fa31975f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.571126][T14229] RAX: ffffffffffffffda RBX: 00007fa318b36058 RCX: 00007fa31897e719 [ 356.579212][T14229] RDX: 0000000000008002 RSI: 00000000200001c0 RDI: 0000000000000003 [ 356.587218][T14229] RBP: 00007fa31975f090 R08: 0000000000000000 R09: 0000000000000000 [ 356.595223][T14229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.603229][T14229] R13: 0000000000000000 R14: 00007fa318b36058 R15: 00007ffc205e8d88 [ 356.611247][T14229] [ 356.634858][T14221] bond0: (slave bond_slave_0): Releasing backup interface [ 356.684242][T14221] bond0: (slave bond_slave_1): Releasing backup interface [ 356.704052][T14221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.722911][T14221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.752939][T14221] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 356.768735][T14221] batman_adv: batadv0: Removing interface: ipvlan2 [ 356.789333][T14223] wg2: entered promiscuous mode [ 356.798622][T14223] wg2: left allmulticast mode [ 356.823989][T14225] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2074'. [ 356.876825][T14167] chnl_net:caif_netlink_parms(): no params data found [ 357.129670][T14215] lo speed is unknown, defaulting to 1000 [ 357.445492][T14167] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.476180][T14167] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.499210][T14289] netlink: 92 bytes leftover after parsing attributes in process `syz.9.2089'. [ 357.518165][T14167] bridge_slave_0: entered allmulticast mode [ 357.525324][T14167] bridge_slave_0: entered promiscuous mode [ 357.570070][T14167] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.583363][T14167] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.598980][T14167] bridge_slave_1: entered allmulticast mode [ 357.606663][T14167] bridge_slave_1: entered promiscuous mode [ 357.787629][T14167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.811588][T14297] lo speed is unknown, defaulting to 1000 [ 357.819848][T14167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.943471][T14167] team0: Port device team_slave_0 added [ 357.983239][T14167] team0: Port device team_slave_1 added [ 358.037956][ T5849] Bluetooth: hci0: command tx timeout [ 358.073201][T14167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.088890][T14167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.137733][T14167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.160435][T14167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.167407][T14167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.222821][T14167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.335627][T14167] hsr_slave_0: entered promiscuous mode [ 358.346663][T14167] hsr_slave_1: entered promiscuous mode [ 358.780543][T14327] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2097'. [ 359.136351][T14348] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2104'. [ 359.161143][T14348] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2104'. [ 359.172445][T14348] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2104'. [ 359.356914][T14167] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 359.390488][T14167] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 359.434032][T14167] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 359.484795][T14167] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 359.725778][T14167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.776244][T14167] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.803530][ T7203] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.810860][ T7203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.835894][ T7203] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.843122][ T7203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.003656][T14374] syz.9.2111[14374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 360.003773][T14374] syz.9.2111[14374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 360.033318][T14374] syz.9.2111[14374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 360.122458][ T5849] Bluetooth: hci0: command tx timeout [ 360.196428][T14167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.213458][T14384] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 360.228099][T14384] syzkaller0: linktype set to 804 [ 360.599906][T14408] __nla_validate_parse: 5 callbacks suppressed [ 360.599924][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2119'. [ 360.659149][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2121'. [ 360.683334][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2121'. [ 360.686367][T14422] netlink: 207496 bytes leftover after parsing attributes in process `syz.7.2122'. [ 360.743156][T14167] veth0_vlan: entered promiscuous mode [ 360.786356][T14167] veth1_vlan: entered promiscuous mode [ 360.828852][T14427] netlink: 'syz.9.2123': attribute type 33 has an invalid length. [ 360.851120][T14427] netlink: 152 bytes leftover after parsing attributes in process `syz.9.2123'. [ 360.861540][T14429] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2125'. [ 360.886494][T14427] infiniband syz0: set active [ 360.904856][ T46] lo speed is unknown, defaulting to 1000 [ 360.991959][T14167] veth0_macvtap: entered promiscuous mode [ 361.031048][T14167] veth1_macvtap: entered promiscuous mode [ 361.065414][T14167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.096473][T14167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.120965][T14167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.151003][T14167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.173397][T14167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.195497][T14167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.211496][T14167] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.221316][T14167] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.234606][T14167] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.249809][T14167] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.305142][T14446] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2128'. [ 361.345881][T14446] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2128'. [ 361.357552][ T7211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.371740][ T7211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.395102][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.403664][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.667515][T14459] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2131'. [ 361.806149][T14464] lo speed is unknown, defaulting to 1000 [ 361.815743][T14466] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2134'. [ 362.714748][ T7224] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.631106][ T7224] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.724679][ T7224] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.793549][ T7224] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.871140][ T7224] bridge_slave_1: left allmulticast mode [ 363.876949][ T7224] bridge_slave_1: left promiscuous mode [ 363.884144][ T7224] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.895525][ T7224] bridge_slave_0: left allmulticast mode [ 363.901604][ T7224] bridge_slave_0: left promiscuous mode [ 363.907356][ T7224] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.303723][ T7224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.315286][ T7224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.326856][ T7224] bond0 (unregistering): Released all slaves [ 364.723734][T14513] lo speed is unknown, defaulting to 1000 [ 364.854628][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.872029][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.882337][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.893016][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.904159][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 364.913294][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.027517][T14522] lo speed is unknown, defaulting to 1000 [ 365.135784][ T7224] hsr_slave_0: left promiscuous mode [ 365.144662][ T7224] hsr_slave_1: left promiscuous mode [ 365.151823][ T7224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.165436][ T7224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.174318][ T7224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.182570][ T7224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.212051][ T7224] veth1_macvtap: left promiscuous mode [ 365.218314][ T7224] veth0_macvtap: left promiscuous mode [ 365.224093][ T7224] veth1_vlan: left promiscuous mode [ 365.229873][ T7224] veth0_vlan: left promiscuous mode [ 365.920540][T14551] netlink: 'syz.7.2154': attribute type 11 has an invalid length. [ 366.034918][ T7224] team0 (unregistering): Port device team_slave_1 removed [ 366.092379][ T7224] team0 (unregistering): Port device team_slave_0 removed [ 366.666482][T14551] netlink: 'syz.7.2154': attribute type 1 has an invalid length. [ 366.693307][T14551] netlink: 'syz.7.2154': attribute type 4 has an invalid length. [ 366.718058][T14551] __nla_validate_parse: 3 callbacks suppressed [ 366.718079][T14551] netlink: 188 bytes leftover after parsing attributes in process `syz.7.2154'. [ 366.755270][T14551] NCSI netlink: No device for ifindex 458760 [ 366.796300][T14557] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2156'. [ 367.028850][ T5849] Bluetooth: hci0: command tx timeout [ 367.047075][T14567] x_tables: duplicate underflow at hook 1 [ 367.454786][T14522] chnl_net:caif_netlink_parms(): no params data found [ 367.707234][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2163'. [ 367.883995][T14522] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.900154][T14522] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.917567][T14522] bridge_slave_0: entered allmulticast mode [ 367.935000][T14522] bridge_slave_0: entered promiscuous mode [ 367.979317][T14522] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.986576][T14522] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.016726][T14522] bridge_slave_1: entered allmulticast mode [ 368.072840][T14522] bridge_slave_1: entered promiscuous mode [ 368.159620][T14604] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2168'. [ 368.259636][T14522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.291783][T14522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.396118][T14612] bridge5: entered promiscuous mode [ 368.408361][T14612] bridge5: entered allmulticast mode [ 368.417637][T14612] team0: Port device bridge5 added [ 368.500968][T14522] team0: Port device team_slave_0 added [ 368.507549][T14614] netlink: 'syz.9.2171': attribute type 10 has an invalid length. [ 368.524815][T14522] team0: Port device team_slave_1 added [ 368.567289][T14612] bridge0: port 1(ip6gretap0) entered blocking state [ 368.588564][T14612] bridge0: port 1(ip6gretap0) entered disabled state [ 368.600833][T14612] ip6gretap0: entered allmulticast mode [ 368.619134][T14612] ip6gretap0: entered promiscuous mode [ 368.646152][T14522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.657812][T14522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.700722][T14522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.734549][T14522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.753528][T14522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.814058][T14522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.841498][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 368.857377][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 368.869764][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 368.885401][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 368.902827][ T5850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 368.921189][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 368.929739][T14624] syz_tun: refused to change device tx_queue_len [ 368.937059][T14624] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 368.997543][T14522] hsr_slave_0: entered promiscuous mode [ 369.019998][T14522] hsr_slave_1: entered promiscuous mode [ 369.081696][ T5849] Bluetooth: hci0: command tx timeout [ 369.118151][T14627] lo speed is unknown, defaulting to 1000 [ 369.463693][T14648] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2181'. [ 369.500421][T14623] lo speed is unknown, defaulting to 1000 [ 369.688784][T14650] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2182'. [ 369.879263][T14522] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 369.891267][T14522] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 370.089198][T14522] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 370.106820][T14522] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 370.361572][T14671] [ 370.363945][T14671] ============================================ [ 370.370185][T14671] WARNING: possible recursive locking detected [ 370.376340][T14671] 6.12.0-rc5-syzkaller-01056-gf07a6e6ceb05 #0 Not tainted [ 370.383783][T14671] -------------------------------------------- [ 370.389998][T14671] syz.9.2186/14671 is trying to acquire lock: [ 370.396040][T14671] ffff88805c302a00 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x96/0x6a0 [ 370.404911][T14671] [ 370.404911][T14671] but task is already holding lock: [ 370.412261][T14671] ffff88805c302a00 (&trie->lock){....}-{2:2}, at: trie_update_elem+0xc8/0xc00 [ 370.421139][T14671] [ 370.421139][T14671] other info that might help us debug this: [ 370.429187][T14671] Possible unsafe locking scenario: [ 370.429187][T14671] [ 370.436619][T14671] CPU0 [ 370.439880][T14671] ---- [ 370.443154][T14671] lock(&trie->lock); [ 370.447235][T14671] lock(&trie->lock); [ 370.451555][T14671] [ 370.451555][T14671] *** DEADLOCK *** [ 370.451555][T14671] [ 370.459936][T14671] May be due to missing lock nesting notation [ 370.459936][T14671] [ 370.468262][T14671] 3 locks held by syz.9.2186/14671: [ 370.473452][T14671] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x3c4/0x540 [ 370.483357][T14671] #1: ffff88805c302a00 (&trie->lock){....}-{2:2}, at: trie_update_elem+0xc8/0xc00 [ 370.492654][T14671] #2: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x244/0x590 [ 370.502122][T14671] [ 370.502122][T14671] stack backtrace: [ 370.508091][T14671] CPU: 0 UID: 0 PID: 14671 Comm: syz.9.2186 Not tainted 6.12.0-rc5-syzkaller-01056-gf07a6e6ceb05 #0 [ 370.518936][T14671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 370.529083][T14671] Call Trace: [ 370.532367][T14671] [ 370.535291][T14671] dump_stack_lvl+0x241/0x360 [ 370.539971][T14671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.545157][T14671] ? __pfx__printk+0x10/0x10 [ 370.549733][T14671] ? lockdep_unlock+0x16a/0x300 [ 370.554668][T14671] print_deadlock_bug+0x483/0x620 [ 370.559707][T14671] validate_chain+0x15e2/0x5920 [ 370.564565][T14671] ? __pfx_validate_chain+0x10/0x10 [ 370.569835][T14671] ? __pfx_validate_chain+0x10/0x10 [ 370.575137][T14671] ? __pfx_validate_chain+0x10/0x10 [ 370.580362][T14671] ? 0xffffffffa0000954 [ 370.584609][T14671] ? is_bpf_text_address+0x285/0x2a0 [ 370.589911][T14671] ? is_bpf_text_address+0x26/0x2a0 [ 370.595237][T14671] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 370.601391][T14671] ? kernel_text_address+0xa7/0xe0 [ 370.606489][T14671] ? __pfx_validate_chain+0x10/0x10 [ 370.611674][T14671] ? __pfx_validate_chain+0x10/0x10 [ 370.616856][T14671] ? mark_lock+0x9a/0x360 [ 370.621166][T14671] __lock_acquire+0x1384/0x2050 [ 370.626008][T14671] lock_acquire+0x1ed/0x550 [ 370.630516][T14671] ? trie_delete_elem+0x96/0x6a0 [ 370.635443][T14671] ? __pfx_lock_acquire+0x10/0x10 [ 370.640457][T14671] ? __lock_acquire+0x1384/0x2050 [ 370.645490][T14671] _raw_spin_lock_irqsave+0xd5/0x120 [ 370.650773][T14671] ? trie_delete_elem+0x96/0x6a0 [ 370.655744][T14671] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 370.661631][T14671] ? __pfx_lock_acquire+0x10/0x10 [ 370.666932][T14671] trie_delete_elem+0x96/0x6a0 [ 370.671700][T14671] ? __pfx___cant_migrate+0x10/0x10 [ 370.676906][T14671] ? bpf_trace_run4+0x244/0x590 [ 370.681758][T14671] bpf_prog_8c8ab8634bca3061+0x43/0x4d [ 370.687388][T14671] bpf_trace_run4+0x334/0x590 [ 370.692055][T14671] ? __pfx_bpf_trace_run4+0x10/0x10 [ 370.697524][T14671] ? percpu_ref_get_many+0x19/0x140 [ 370.702743][T14671] ? __memcg_kmem_charge_page+0xdb/0x1d0 [ 370.708409][T14671] __alloc_pages_noprof+0x6dc/0x710 [ 370.713699][T14671] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 370.719415][T14671] ? bpf_map_get_memcg+0x4e/0x5c0 [ 370.724439][T14671] ? do_raw_spin_lock+0x14f/0x370 [ 370.729539][T14671] ? __pfx_lock_release+0x10/0x10 [ 370.734589][T14671] ___kmalloc_large_node+0x8b/0x1d0 [ 370.739803][T14671] __kmalloc_large_node_noprof+0x1a/0x80 [ 370.745429][T14671] __kmalloc_node_noprof+0x2d2/0x440 [ 370.750873][T14671] ? bpf_map_kmalloc_node+0xd3/0x1c0 [ 370.756141][T14671] bpf_map_kmalloc_node+0xd3/0x1c0 [ 370.761238][T14671] trie_update_elem+0x1cd/0xc00 [ 370.766075][T14671] ? __pfx___might_resched+0x10/0x10 [ 370.771348][T14671] bpf_map_update_value+0x4d3/0x540 [ 370.776550][T14671] map_update_elem+0x51a/0x6f0 [ 370.781304][T14671] __sys_bpf+0x76f/0x810 [ 370.785546][T14671] ? __pfx___sys_bpf+0x10/0x10 [ 370.790290][T14671] ? __sys_connect+0x165/0x300 [ 370.795035][T14671] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 370.800997][T14671] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 370.807312][T14671] ? do_syscall_64+0x100/0x230 [ 370.812074][T14671] __x64_sys_bpf+0x7c/0x90 [ 370.816485][T14671] do_syscall_64+0xf3/0x230 [ 370.821127][T14671] ? clear_bhb_loop+0x35/0x90 [ 370.826076][T14671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.831981][T14671] RIP: 0033:0x7fa31897e719 [ 370.836476][T14671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.858281][T14671] RSP: 002b:00007fa319780038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 370.866773][T14671] RAX: ffffffffffffffda RBX: 00007fa318b35f80 RCX: 00007fa31897e719 [ 370.874737][T14671] RDX: 0000000000000020 RSI: 0000000020000740 RDI: 0000000000000002 [ 370.882697][T14671] RBP: 00007fa3189f132e R08: 0000000000000000 R09: 0000000000000000 [ 370.890676][T14671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.898888][T14671] R13: 0000000000000000 R14: 00007fa318b35f80 R15: 00007ffc205e8d88 [ 370.906866][T14671]