last executing test programs: 9m0.994266722s ago: executing program 4 (id=5): socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='GPL\x00', 0x2, 0x8d, &(0x7f0000000680)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="a71b8109eeabc176b372d9293399510000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000020000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x37, 0x0, &(0x7f0000000080)="f6f4e9a100000000002a8bc686ddb7dbfc007024f8082d130827533e0000000000009b012e480883d6a056df64133990ed509361350702", 0x0, 0x4, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x29, &(0x7f00000009c0)=ANY=[], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x30908, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[0x1, 0x1, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x8, 0x6}], 0x10, 0x1, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket(0x10, 0x803, 0x0) 9m0.345931438s ago: executing program 32 (id=5): socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='GPL\x00', 0x2, 0x8d, &(0x7f0000000680)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="a71b8109eeabc176b372d9293399510000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000020000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x37, 0x0, &(0x7f0000000080)="f6f4e9a100000000002a8bc686ddb7dbfc007024f8082d130827533e0000000000009b012e480883d6a056df64133990ed509361350702", 0x0, 0x4, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x29, &(0x7f00000009c0)=ANY=[], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x30908, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[0x1, 0x1, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x8, 0x6}], 0x10, 0x1, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket(0x10, 0x803, 0x0) 9m0.304668619s ago: executing program 0 (id=1): syz_open_procfs$namespace(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0xfffffffb, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x1, 0x10, 0x1, 0x4, {{0x1e, 0x4, 0x3, 0x4, 0x78, 0x67, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x25}, {[@timestamp_prespec={0x44, 0x34, 0x4e, 0x3, 0xc, [{@rand_addr=0x64010101, 0xd}, {@empty}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x40}, {@loopback, 0x10}, {@private=0xa010101, 0x7}]}, @end, @timestamp_prespec={0x44, 0x14, 0xae, 0x3, 0x5, [{@empty, 0x9}, {@broadcast, 0x400}]}, @end, @rr={0x7, 0x13, 0x6b, [@loopback, @dev={0xac, 0x14, 0x14, 0x14}, @empty, @broadcast]}, @ra={0x94, 0x4}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x28000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x54, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) shutdown(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000740)={'filter\x00', 0x0, 0x4, 0x44, [0x9, 0x9, 0x8, 0x80000001, 0x3, 0x5], 0x5, &(0x7f0000000580)=[{}, {}, {}, {}, {}], &(0x7f0000000680)=""/68}, &(0x7f0000000300)=0x78) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) listen(r6, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "300600", 0x14, 0x6, 0xff, @private1, @local, {[], {{0x100, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x200, 0x0, 0x9}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00'}, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 9m0.152161888s ago: executing program 33 (id=1): syz_open_procfs$namespace(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0xfffffffb, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x1, 0x10, 0x1, 0x4, {{0x1e, 0x4, 0x3, 0x4, 0x78, 0x67, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x25}, {[@timestamp_prespec={0x44, 0x34, 0x4e, 0x3, 0xc, [{@rand_addr=0x64010101, 0xd}, {@empty}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x40}, {@loopback, 0x10}, {@private=0xa010101, 0x7}]}, @end, @timestamp_prespec={0x44, 0x14, 0xae, 0x3, 0x5, [{@empty, 0x9}, {@broadcast, 0x400}]}, @end, @rr={0x7, 0x13, 0x6b, [@loopback, @dev={0xac, 0x14, 0x14, 0x14}, @empty, @broadcast]}, @ra={0x94, 0x4}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x28000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x54, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) shutdown(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000740)={'filter\x00', 0x0, 0x4, 0x44, [0x9, 0x9, 0x8, 0x80000001, 0x3, 0x5], 0x5, &(0x7f0000000580)=[{}, {}, {}, {}, {}], &(0x7f0000000680)=""/68}, &(0x7f0000000300)=0x78) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) listen(r6, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "300600", 0x14, 0x6, 0xff, @private1, @local, {[], {{0x100, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x200, 0x0, 0x9}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00'}, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 9m0.12401397s ago: executing program 1 (id=2): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)=@newtaction={0x5c, 0x30, 0x0, 0x0, 0x0, {}, [{0x48, 0x1, [@m_skbedit={0x44, 0x0, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd}}]}, {0x8, 0x6, "3564489b"}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000104000010000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 9m0.119805811s ago: executing program 34 (id=2): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)=@newtaction={0x5c, 0x30, 0x0, 0x0, 0x0, {}, [{0x48, 0x1, [@m_skbedit={0x44, 0x0, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd}}]}, {0x8, 0x6, "3564489b"}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000104000010000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 9m0.09978017s ago: executing program 2 (id=3): socket$vsock_stream(0x28, 0x1, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 9m0.095391325s ago: executing program 35 (id=3): socket$vsock_stream(0x28, 0x1, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 7m38.500680678s ago: executing program 3 (id=552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYBLOB="623281e9a7bddd26c60c674dbc5945129486dcb77e4acc058f3f40b7d92a091eff9178150e56428b98822c3137e515d8f646f4e5e37a6a9d5a37a6fe466bb4def811c71cbaf3508bbca49cc6f0b7a0fff216fc21609d9f9f3ebcb94d70bc54b86c2b6794e172fc909a8f033621de6b7432eaa347c354b9034880ca04f077ca088b035b9e17d18be248ce8a87da46e535597472030392773091526050bd312d332b4694debc6b78504b45e5b70780de76b94d", @ANYRESOCT=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0x3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r1}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000940)=@gettaction={0x14, 0x32, 0x300, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004000) socket$inet6(0xa, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x10000, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'dummy0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e000000030000000500000007001e0011000000e97e14e44514712d64319185e38d2ad62dc4c8f56c503c6107000000000000006cc6739feba8e9d211dbdd24d0d5420c2b6b1df5", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000000000000500"/28], 0x50) r8 = socket(0x28, 0x5, 0x0) connect$unix(r8, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000280), 0x4e, r7, 0x0, 0x1c000000007400}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 7m38.187635654s ago: executing program 3 (id=560): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x12000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x188c0}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="3878887ef1b9"}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x0) 7m38.126184705s ago: executing program 3 (id=562): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 7m38.020826306s ago: executing program 3 (id=563): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x12000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x188c0}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0) 7m38.016083705s ago: executing program 3 (id=564): socket$vsock_stream(0x28, 0x1, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 7m37.848588767s ago: executing program 3 (id=566): socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{0x10da2, 0x0, 0x0, 0x0, 0x0, 0x800}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x3ff, 0xb70c}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x48}, @TCA_NETEM_RATE={0x14, 0x6, {0x3, 0xfffffff7, 0x0, 0x2}}, @TCA_NETEM_LOSS={0x4}]}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb, 0x8, 0x5, 0x3, 0x2, 0x7fff, 0x5}}, {0x4}}]}]}, 0xa0}}, 0x4000000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYRES64], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg$inet6(r2, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="03", 0x1}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmmsg$inet6(r2, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@empty, @private2, @dev={0xfe, 0x80, '\x00', 0x27}, 0x2000000, 0x0, 0x3, 0x200, 0x0, 0x970350}) socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x6, 0x800000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000040)={r9, @in={{0x2, 0x4e22, @loopback}}, [0x0, 0x2, 0x4, 0x5, 0x1, 0x2e, 0x8f, 0x29, 0xe9c8, 0x7, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x1]}, &(0x7f0000000140)=0x100) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) 7m37.526463947s ago: executing program 36 (id=566): socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{0x10da2, 0x0, 0x0, 0x0, 0x0, 0x800}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x3ff, 0xb70c}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x48}, @TCA_NETEM_RATE={0x14, 0x6, {0x3, 0xfffffff7, 0x0, 0x2}}, @TCA_NETEM_LOSS={0x4}]}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb, 0x8, 0x5, 0x3, 0x2, 0x7fff, 0x5}}, {0x4}}]}]}, 0xa0}}, 0x4000000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYRES64], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg$inet6(r2, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="03", 0x1}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmmsg$inet6(r2, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@empty, @private2, @dev={0xfe, 0x80, '\x00', 0x27}, 0x2000000, 0x0, 0x3, 0x200, 0x0, 0x970350}) socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x6, 0x800000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000040)={r9, @in={{0x2, 0x4e22, @loopback}}, [0x0, 0x2, 0x4, 0x5, 0x1, 0x2e, 0x8f, 0x29, 0xe9c8, 0x7, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x1]}, &(0x7f0000000140)=0x100) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) 1m56.191778925s ago: executing program 8 (id=1688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300), 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300), 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x18, 0x24, 0x301, 0x0, 0x0, {0x1}, [@typed={0x4, 0x138, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000e00)) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x1}, 0xc) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_eeprom={0xb, 0x2, 0x6}}) r7 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x100000) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)={0x84, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4001}, 0x40850) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000dc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x20, r9, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd, 0x71}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010004) sendmmsg$inet(r7, &(0x7f0000001080)=[{{&(0x7f0000000440)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000480)="f56e71be736fe1ca", 0x8}, {&(0x7f00000004c0)="a59752ea76302b003c6851d8794a685c385576b1e46815874f8b39d463f4932ce101bb2247e8cc56b93de3a015255b4f6f537a2673c38ac960de3867b4bfc809ac", 0x41}, {&(0x7f0000000580)="126bf1f74eb60cebba2c85481c5a4d367555319cd6dfd196c394fa49322cd70ce84c01777d8c321fdab9faffd38b6d3f875387841b7aa2495801d13dc2890ff646ae4a44cfa024c224fb3ed3b6e90ad701c065dfe6e14a4d11834701f7738e1309bf753b097444f323f18ab886e9b3c03958776a58622ea18b8eb726a21f7538c2d3d18c84cbe0d1", 0x88}, {0x0}, {&(0x7f0000000700)="5f1e99b9492598aa9ebb02c3c83cbc", 0xf}], 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x160}}, {{0x0, 0x0, &(0x7f0000000e80), 0x0, &(0x7f0000000a80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4696}}, @ip_retopts={{0x80, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x8c, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd02}, {@private=0xa0100ff, 0x8}, {@multicast2, 0x9}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x5}, {@empty, 0x200}, {@empty, 0xe}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6}, @lsrr={0x83, 0x1f, 0xa, [@local, @broadcast, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}]}}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0xc8}}], 0x2, 0x8800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000a40)={'ip_vti0\x00', 0x0, 0x1, 0x80bf, 0x404, 0x6, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0x7, 0x4, 0x0, @private=0xa010101, @multicast2}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000a40)={'ip_vti0\x00', 0x0, 0x1, 0x80bf, 0x404, 0x6, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0x7, 0x4, 0x0, @private=0xa010101, @multicast2}}}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xf, '\x00', r10, r11, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xf, '\x00', r10, r11, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r12 = socket(0x2, 0x3, 0xff) bind$inet(r12, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r12, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r12, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)="18fcae977278aeffab01b11015896dd2979391ede335535b8440ca4f71a0665a", 0x20}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x1}}], 0x2, 0x0) ioctl$IMCTRLREQ(r12, 0x80044945, &(0x7f0000000e40)={0x4000, 0x6, 0xdd6, 0x8}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000038000000080a01010000000000000000020000000900020073797a32000000000900010073797a3000"], 0x8c}}, 0x0) 1m36.608635831s ago: executing program 5 (id=2728): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095000000000000002d55715f11e961"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x118, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x118}], 0x1}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newtfilter={0x3c, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r10, {0xd, 0x9}, {0x6}, {0x3, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_EMATCHES={0x8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x3c}}, 0x4000) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x4) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a", @ANYRESDEC=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="0000000000000000b70300000000000085000000bb000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r13 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r13, 0x0, 0x48a, &(0x7f0000000040)={0x2, 0x4, 0x7fffffff}, 0xc) 1m30.167810034s ago: executing program 8 (id=1688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300), 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300), 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x18, 0x24, 0x301, 0x0, 0x0, {0x1}, [@typed={0x4, 0x138, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000e00)) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x1}, 0xc) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_eeprom={0xb, 0x2, 0x6}}) r7 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x100000) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)={0x84, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4001}, 0x40850) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000dc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x20, r9, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd, 0x71}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010004) sendmmsg$inet(r7, &(0x7f0000001080)=[{{&(0x7f0000000440)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000480)="f56e71be736fe1ca", 0x8}, {&(0x7f00000004c0)="a59752ea76302b003c6851d8794a685c385576b1e46815874f8b39d463f4932ce101bb2247e8cc56b93de3a015255b4f6f537a2673c38ac960de3867b4bfc809ac", 0x41}, {&(0x7f0000000580)="126bf1f74eb60cebba2c85481c5a4d367555319cd6dfd196c394fa49322cd70ce84c01777d8c321fdab9faffd38b6d3f875387841b7aa2495801d13dc2890ff646ae4a44cfa024c224fb3ed3b6e90ad701c065dfe6e14a4d11834701f7738e1309bf753b097444f323f18ab886e9b3c03958776a58622ea18b8eb726a21f7538c2d3d18c84cbe0d1", 0x88}, {0x0}, {&(0x7f0000000700)="5f1e99b9492598aa9ebb02c3c83cbc", 0xf}], 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x160}}, {{0x0, 0x0, &(0x7f0000000e80), 0x0, &(0x7f0000000a80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4696}}, @ip_retopts={{0x80, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x8c, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd02}, {@private=0xa0100ff, 0x8}, {@multicast2, 0x9}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x5}, {@empty, 0x200}, {@empty, 0xe}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6}, @lsrr={0x83, 0x1f, 0xa, [@local, @broadcast, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}]}}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0xc8}}], 0x2, 0x8800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000a40)={'ip_vti0\x00', 0x0, 0x1, 0x80bf, 0x404, 0x6, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0x7, 0x4, 0x0, @private=0xa010101, @multicast2}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000a40)={'ip_vti0\x00', 0x0, 0x1, 0x80bf, 0x404, 0x6, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0x7, 0x4, 0x0, @private=0xa010101, @multicast2}}}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xf, '\x00', r10, r11, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xf, '\x00', r10, r11, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r12 = socket(0x2, 0x3, 0xff) bind$inet(r12, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r12, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r12, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)="18fcae977278aeffab01b11015896dd2979391ede335535b8440ca4f71a0665a", 0x20}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x1}}], 0x2, 0x0) ioctl$IMCTRLREQ(r12, 0x80044945, &(0x7f0000000e40)={0x4000, 0x6, 0xdd6, 0x8}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000038000000080a01010000000000000000020000000900020073797a32000000000900010073797a3000"], 0x8c}}, 0x0) 1m19.726775378s ago: executing program 5 (id=2728): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095000000000000002d55715f11e961"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x118, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x118}], 0x1}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newtfilter={0x3c, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r10, {0xd, 0x9}, {0x6}, {0x3, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_EMATCHES={0x8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x3c}}, 0x4000) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x4) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a", @ANYRESDEC=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="180600ee02000ef8ff0000000000000028091ab0c6a04c33224db51bbd9d774e9e534efcb1f48141d0779e4b77c88525e4b6a97100768526293e189eca1ee8c21ffad3c2189af65ea1b2b2b22e47ae06673c03363c9e37bf819bbd948f873eac660f23c3aff6f9f86a15683484ce11c4e93a90e3f50b5ba38ad6c5fdef6ef1a2902813ac33c405b7a66b70d8fd227e962757124ba5cf13cb47519a22280cba581b9225d9781749e657d10970b1f4b1e6bf83cfe6d0d55f0aeec08cd61f14fabf75a17b9eedabc8ac8f0970f6284e382c7c82efcc8e420b82d536f21750fe4643da688be6c7b300fa4ab0f59136e78da85b16bc96fbf5f990de2ae51f605da3c03517e9438634c9aef20d640e22eabe4126642233bae0b245e65f38994f37fe5253925a63a702aff270544fd1a52c33cd44005e637c32abceecfc", @ANYRES32=r12, @ANYBLOB="0000000000000000b70300000000000085000000bb000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r13 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r13, 0x0, 0x48a, &(0x7f0000000040)={0x2, 0x4, 0x7fffffff}, 0xc) 1m10.870799376s ago: executing program 8 (id=1688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300), 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300), 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x18, 0x24, 0x301, 0x0, 0x0, {0x1}, [@typed={0x4, 0x138, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000e00)) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x1}, 0xc) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_eeprom={0xb, 0x2, 0x6}}) r7 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x100000) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)={0x84, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4001}, 0x40850) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000dc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x20, r9, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd, 0x71}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010004) sendmmsg$inet(r7, &(0x7f0000001080)=[{{&(0x7f0000000440)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000480)="f56e71be736fe1ca", 0x8}, {&(0x7f00000004c0)="a59752ea76302b003c6851d8794a685c385576b1e46815874f8b39d463f4932ce101bb2247e8cc56b93de3a015255b4f6f537a2673c38ac960de3867b4bfc809ac", 0x41}, {&(0x7f0000000580)="126bf1f74eb60cebba2c85481c5a4d367555319cd6dfd196c394fa49322cd70ce84c01777d8c321fdab9faffd38b6d3f875387841b7aa2495801d13dc2890ff646ae4a44cfa024c224fb3ed3b6e90ad701c065dfe6e14a4d11834701f7738e1309bf753b097444f323f18ab886e9b3c03958776a58622ea18b8eb726a21f7538c2d3d18c84cbe0d1", 0x88}, {0x0}, {&(0x7f0000000700)="5f1e99b9492598aa9ebb02c3c83cbc", 0xf}], 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x160}}, {{0x0, 0x0, &(0x7f0000000e80), 0x0, &(0x7f0000000a80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4696}}, @ip_retopts={{0x80, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x8c, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd02}, {@private=0xa0100ff, 0x8}, {@multicast2, 0x9}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x5}, {@empty, 0x200}, {@empty, 0xe}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6}, @lsrr={0x83, 0x1f, 0xa, [@local, @broadcast, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}]}}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0xc8}}], 0x2, 0x8800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000a40)={'ip_vti0\x00', 0x0, 0x1, 0x80bf, 0x404, 0x6, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0x7, 0x4, 0x0, @private=0xa010101, @multicast2}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000a40)={'ip_vti0\x00', 0x0, 0x1, 0x80bf, 0x404, 0x6, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0x7, 0x4, 0x0, @private=0xa010101, @multicast2}}}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xf, '\x00', r10, r11, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xf, '\x00', r10, r11, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r12 = socket(0x2, 0x3, 0xff) bind$inet(r12, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r12, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r12, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)="18fcae977278aeffab01b11015896dd2979391ede335535b8440ca4f71a0665a", 0x20}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x1}}], 0x2, 0x0) ioctl$IMCTRLREQ(r12, 0x80044945, &(0x7f0000000e40)={0x4000, 0x6, 0xdd6, 0x8}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000038000000080a01010000000000000000020000000900020073797a32000000000900010073797a3000"], 0x8c}}, 0x0) 1m1.458278423s ago: executing program 5 (id=2728): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095000000000000002d55715f11e961"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x118, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x118}], 0x1}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newtfilter={0x3c, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r10, {0xd, 0x9}, {0x6}, {0x3, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_EMATCHES={0x8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x3c}}, 0x4000) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x4) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a", @ANYRESDEC=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="180600ee02000ef8ff0000000000000028091ab0c6a04c33224db51bbd9d774e9e534efcb1f48141d0779e4b77c88525e4b6a97100768526293e189eca1ee8c21ffad3c2189af65ea1b2b2b22e47ae06673c03363c9e37bf819bbd948f873eac660f23c3aff6f9f86a15683484ce11c4e93a90e3f50b5ba38ad6c5fdef6ef1a2902813ac33c405b7a66b70d8fd227e962757124ba5cf13cb47519a22280cba581b9225d9781749e657d10970b1f4b1e6bf83cfe6d0d55f0aeec08cd61f14fabf75a17b9eedabc8ac8f0970f6284e382c7c82efcc8e420b82d536f21750fe4643da688be6c7b300fa4ab0f59136e78da85b16bc96fbf5f990de2ae51f605da3c03517e9438634c9aef20d640e22eabe4126642233bae0b245e65f38994f37fe5253925a63a702aff270544fd1a52c33cd44005e637c32abceecfc", @ANYRES32=r12, @ANYBLOB="0000000000000000b70300000000000085000000bb000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r13 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r13, 0x0, 0x48a, &(0x7f0000000040)={0x2, 0x4, 0x7fffffff}, 0xc) 53.307635102s ago: executing program 8 (id=1688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300), 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300), 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x18, 0x24, 0x301, 0x0, 0x0, {0x1}, [@typed={0x4, 0x138, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000e00)) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x1}, 0xc) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_eeprom={0xb, 0x2, 0x6}}) r7 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x100000) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)={0x84, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4001}, 0x40850) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000dc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x20, r9, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd, 0x71}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010004) sendmmsg$inet(r7, &(0x7f0000001080)=[{{&(0x7f0000000440)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000480)="f56e71be736fe1ca", 0x8}, {&(0x7f00000004c0)="a59752ea76302b003c6851d8794a685c385576b1e46815874f8b39d463f4932ce101bb2247e8cc56b93de3a015255b4f6f537a2673c38ac960de3867b4bfc809ac", 0x41}, {&(0x7f0000000580)="126bf1f74eb60cebba2c85481c5a4d367555319cd6dfd196c394fa49322cd70ce84c01777d8c321fdab9faffd38b6d3f875387841b7aa2495801d13dc2890ff646ae4a44cfa024c224fb3ed3b6e90ad701c065dfe6e14a4d11834701f7738e1309bf753b097444f323f18ab886e9b3c03958776a58622ea18b8eb726a21f7538c2d3d18c84cbe0d1", 0x88}, {0x0}, {&(0x7f0000000700)="5f1e99b9492598aa9ebb02c3c83cbc", 0xf}], 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x160}}, {{0x0, 0x0, &(0x7f0000000e80), 0x0, &(0x7f0000000a80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4696}}, @ip_retopts={{0x80, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x8c, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd02}, {@private=0xa0100ff, 0x8}, {@multicast2, 0x9}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x5}, {@empty, 0x200}, {@empty, 0xe}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6}, @lsrr={0x83, 0x1f, 0xa, [@local, @broadcast, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}]}}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0xc8}}], 0x2, 0x8800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000a40)={'ip_vti0\x00', 0x0, 0x1, 0x80bf, 0x404, 0x6, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0x7, 0x4, 0x0, @private=0xa010101, @multicast2}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000a40)={'ip_vti0\x00', 0x0, 0x1, 0x80bf, 0x404, 0x6, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0x7, 0x4, 0x0, @private=0xa010101, @multicast2}}}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xf, '\x00', r10, r11, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xf, '\x00', r10, r11, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r12 = socket(0x2, 0x3, 0xff) bind$inet(r12, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r12, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r12, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)="18fcae977278aeffab01b11015896dd2979391ede335535b8440ca4f71a0665a", 0x20}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x1}}], 0x2, 0x0) ioctl$IMCTRLREQ(r12, 0x80044945, &(0x7f0000000e40)={0x4000, 0x6, 0xdd6, 0x8}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000038000000080a01010000000000000000020000000900020073797a32000000000900010073797a3000"], 0x8c}}, 0x0) 39.624015325s ago: executing program 5 (id=2728): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095000000000000002d55715f11e961"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x118, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x118}], 0x1}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newtfilter={0x3c, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r10, {0xd, 0x9}, {0x6}, {0x3, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_EMATCHES={0x8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x3c}}, 0x4000) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x4) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a", @ANYRESDEC=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="180600ee02000ef8ff0000000000000028091ab0c6a04c33224db51bbd9d774e9e534efcb1f48141d0779e4b77c88525e4b6a97100768526293e189eca1ee8c21ffad3c2189af65ea1b2b2b22e47ae06673c03363c9e37bf819bbd948f873eac660f23c3aff6f9f86a15683484ce11c4e93a90e3f50b5ba38ad6c5fdef6ef1a2902813ac33c405b7a66b70d8fd227e962757124ba5cf13cb47519a22280cba581b9225d9781749e657d10970b1f4b1e6bf83cfe6d0d55f0aeec08cd61f14fabf75a17b9eedabc8ac8f0970f6284e382c7c82efcc8e420b82d536f21750fe4643da688be6c7b300fa4ab0f59136e78da85b16bc96fbf5f990de2ae51f605da3c03517e9438634c9aef20d640e22eabe4126642233bae0b245e65f38994f37fe5253925a63a702aff270544fd1a52c33cd44005e637c32abceecfc", @ANYRES32=r12, @ANYBLOB="0000000000000000b70300000000000085000000bb000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r13 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r13, 0x0, 0x48a, &(0x7f0000000040)={0x2, 0x4, 0x7fffffff}, 0xc) 30.776326s ago: executing program 8 (id=1688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300), 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300), 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x18, 0x24, 0x301, 0x0, 0x0, {0x1}, [@typed={0x4, 0x138, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000e00)) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x1}, 0xc) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_eeprom={0xb, 0x2, 0x6}}) r7 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x100000) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)={0x84, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4001}, 0x40850) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000dc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x20, r9, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd, 0x71}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010004) sendmmsg$inet(r7, &(0x7f0000001080)=[{{&(0x7f0000000440)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000480)="f56e71be736fe1ca", 0x8}, {&(0x7f00000004c0)="a59752ea76302b003c6851d8794a685c385576b1e46815874f8b39d463f4932ce101bb2247e8cc56b93de3a015255b4f6f537a2673c38ac960de3867b4bfc809ac", 0x41}, {&(0x7f0000000580)="126bf1f74eb60cebba2c85481c5a4d367555319cd6dfd196c394fa49322cd70ce84c01777d8c321fdab9faffd38b6d3f875387841b7aa2495801d13dc2890ff646ae4a44cfa024c224fb3ed3b6e90ad701c065dfe6e14a4d11834701f7738e1309bf753b097444f323f18ab886e9b3c03958776a58622ea18b8eb726a21f7538c2d3d18c84cbe0d1", 0x88}, {0x0}, {&(0x7f0000000700)="5f1e99b9492598aa9ebb02c3c83cbc", 0xf}], 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x160}}, {{0x0, 0x0, &(0x7f0000000e80), 0x0, &(0x7f0000000a80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4696}}, @ip_retopts={{0x80, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x8c, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd02}, {@private=0xa0100ff, 0x8}, {@multicast2, 0x9}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x5}, {@empty, 0x200}, {@empty, 0xe}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6}, @lsrr={0x83, 0x1f, 0xa, [@local, @broadcast, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}]}}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0xc8}}], 0x2, 0x8800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000a40)={'ip_vti0\x00', 0x0, 0x1, 0x80bf, 0x404, 0x6, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0x7, 0x4, 0x0, @private=0xa010101, @multicast2}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000a40)={'ip_vti0\x00', 0x0, 0x1, 0x80bf, 0x404, 0x6, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0x7, 0x4, 0x0, @private=0xa010101, @multicast2}}}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xf, '\x00', r10, r11, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xf, '\x00', r10, r11, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r12 = socket(0x2, 0x3, 0xff) bind$inet(r12, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r12, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r12, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)="18fcae977278aeffab01b11015896dd2979391ede335535b8440ca4f71a0665a", 0x20}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x1}}], 0x2, 0x0) ioctl$IMCTRLREQ(r12, 0x80044945, &(0x7f0000000e40)={0x4000, 0x6, 0xdd6, 0x8}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000038000000080a01010000000000000000020000000900020073797a32000000000900010073797a3000"], 0x8c}}, 0x0) 23.938278826s ago: executing program 5 (id=2728): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095000000000000002d55715f11e961"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x118, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x118}], 0x1}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newtfilter={0x3c, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r10, {0xd, 0x9}, {0x6}, {0x3, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_EMATCHES={0x8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x3c}}, 0x4000) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x4) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a", @ANYRESDEC=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="0000000000000000b70300000000000085000000bb000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r13 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r13, 0x0, 0x48a, &(0x7f0000000040)={0x2, 0x4, 0x7fffffff}, 0xc) 11.524176237s ago: executing program 8 (id=1688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300), 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300), 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x18, 0x24, 0x301, 0x0, 0x0, {0x1}, [@typed={0x4, 0x138, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000e00)) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x1}, 0xc) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_eeprom={0xb, 0x2, 0x6}}) r7 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x100000) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)={0x84, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4001}, 0x40850) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000dc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x20, r9, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd, 0x71}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010004) sendmmsg$inet(r7, &(0x7f0000001080)=[{{&(0x7f0000000440)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000480)="f56e71be736fe1ca", 0x8}, {&(0x7f00000004c0)="a59752ea76302b003c6851d8794a685c385576b1e46815874f8b39d463f4932ce101bb2247e8cc56b93de3a015255b4f6f537a2673c38ac960de3867b4bfc809ac", 0x41}, {&(0x7f0000000580)="126bf1f74eb60cebba2c85481c5a4d367555319cd6dfd196c394fa49322cd70ce84c01777d8c321fdab9faffd38b6d3f875387841b7aa2495801d13dc2890ff646ae4a44cfa024c224fb3ed3b6e90ad701c065dfe6e14a4d11834701f7738e1309bf753b097444f323f18ab886e9b3c03958776a58622ea18b8eb726a21f7538c2d3d18c84cbe0d1", 0x88}, {0x0}, {&(0x7f0000000700)="5f1e99b9492598aa9ebb02c3c83cbc", 0xf}], 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x160}}, {{0x0, 0x0, &(0x7f0000000e80), 0x0, &(0x7f0000000a80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4696}}, @ip_retopts={{0x80, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x8c, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd02}, {@private=0xa0100ff, 0x8}, {@multicast2, 0x9}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x5}, {@empty, 0x200}, {@empty, 0xe}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6}, @lsrr={0x83, 0x1f, 0xa, [@local, @broadcast, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}]}}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0xc8}}], 0x2, 0x8800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000a40)={'ip_vti0\x00', 0x0, 0x1, 0x80bf, 0x404, 0x6, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0x7, 0x4, 0x0, @private=0xa010101, @multicast2}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000a40)={'ip_vti0\x00', 0x0, 0x1, 0x80bf, 0x404, 0x6, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0x7, 0x4, 0x0, @private=0xa010101, @multicast2}}}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xf, '\x00', r10, r11, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xf, '\x00', r10, r11, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r12 = socket(0x2, 0x3, 0xff) bind$inet(r12, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r12, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r12, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)="18fcae977278aeffab01b11015896dd2979391ede335535b8440ca4f71a0665a", 0x20}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x1}}], 0x2, 0x0) ioctl$IMCTRLREQ(r12, 0x80044945, &(0x7f0000000e40)={0x4000, 0x6, 0xdd6, 0x8}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000038000000080a01010000000000000000020000000900020073797a32000000000900010073797a3000"], 0x8c}}, 0x0) 6.527246514s ago: executing program 5 (id=2728): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095000000000000002d55715f11e961"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x118, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x118}], 0x1}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newtfilter={0x3c, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r10, {0xd, 0x9}, {0x6}, {0x3, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_EMATCHES={0x8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x3c}}, 0x4000) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x4) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a", @ANYRESDEC=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="0000000000000000b70300000000000085000000bb000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r13 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r13, 0x0, 0x48a, &(0x7f0000000040)={0x2, 0x4, 0x7fffffff}, 0xc) 4.991769286s ago: executing program 6 (id=3662): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}]}, 0x34}}, 0x40) (async, rerun: 32) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) (async) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'macvlan0\x00', {0x2, 0x4e20, @empty}}) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 3.972517126s ago: executing program 6 (id=3663): socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfc}, 0xa) recvmmsg(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x40000102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000003140100000000000000000009000200739b7a30000000000800410073697700140033006c6f000000000000006ebd6dce74c0dda600010000000000d236083e2714c335e6a30608b11150d07a0194e1969929c3c8d6a77a2fb56a9ac11a1beeaf9a"], 0x38}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r1, 0x1, 0x19, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010"], 0x44}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4800}}], 0x1, 0x20008098) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r7, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 3.665609739s ago: executing program 6 (id=3666): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) close(0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3103efff00000000000408000000080003002771"], 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x5, 0x2}, {0x0, 0x3}}}, 0x24}}, 0x40) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000005) (async) close(0xffffffffffffffff) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/3112], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b076859268cb89e14f088a847", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r5, &(0x7f0000000480)={0x2, 0xfffe, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 3.359132561s ago: executing program 6 (id=3669): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) unshare(0x60480) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0080000000000900"/25, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3, r6, 0x4}, 0x38) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0xfc, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0xfc}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007000b00000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000129bd700005007f00000108000400ac141433"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r2, 0x8b1b, &(0x7f0000000040)) ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYRES8=r10], 0x10) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r10, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r9}, 0x20) close(r11) 1.739925242s ago: executing program 6 (id=3671): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180100001c00000008000000000000000c38206211b0c6f4ea03c417d2118500336a07e600006d000000957028cc266018785cf91e24f80a63dcaf105f4be2ef573b6e63c0124caf00b6b7d4d5392660ddb83a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}}, 0x440c4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011"], 0xb4}}, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000e40)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="07ad0000000000000000010000000000000002410000001000137564703a73797a3000000000"], 0x2c}}, 0x0) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r10, 0x89e4) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) sendmsg$NFT_BATCH(r7, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x24000081}, 0x8000) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000140)=""/14, &(0x7f0000000080)=0xe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, 0xffffffffffffffff, 0x0, 0xffffffffffffff8f, &(0x7f00000000c0)='\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r0}, 0x18) nanosleep(&(0x7f0000000bc0)={0x0, 0x3938700}, &(0x7f0000000040)) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) 1.62347289s ago: executing program 9 (id=3673): socket(0x25, 0x80000, 0x3) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmmsg$sock(r2, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000500)="a7", 0x1}, {0x0, 0x80000}], 0x2}}], 0x1, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x8}, @void, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x804) (async) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x30, r6, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x77}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0xa2ce, 0x4) 1.513610744s ago: executing program 7 (id=3674): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xfa}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4008010) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x300}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r5, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040000}, 0x88040) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x28}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0xc084) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r3) sendmsg$NLBL_MGMT_C_LISTALL(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r9, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, ']-%.//&$&[\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000884}, 0x40) socket$inet6_sctp(0xa, 0x0, 0x84) r10 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000780)="daf4b04d706e19a6e0742909fd73e1ac26dddfea5f0cc1fb6794caa71d42995f2492953b4749ea9b927206b0dabf248d957bae92ab9ada587e80580ad260d02e9565f063d99709ad636fdfbf02c79a73fa809ad989d8cb1d1b79f181942199d812745cbe837f4e25835bc2d6e2b81fbfb8edf9d70d33f933e751546e9121690ba68f73c3a4360ee70e6131b927c7cadf14b3148da89fe293be4f69ee2a4beff1cda798d59e", 0xa5}, {&(0x7f0000000840)="d7387dd915607e170a92c2df62bd48449feebc0f72b3d87b55ce4e946e22f22ff8f9eb17a4ec9fc72541f7d5eb41efe55655f5", 0x33}, {&(0x7f0000000880)="64bbd3744b7e9ebaf18c123fdaddde0780a80d46a8f6d53f075ec531d40ad5bbda355506b7d67572a348ad92505ae7b491b61ea6078ff321abb341f37c0427f17344d43124f159d5bd544199f0ddf6b70bdb16c63c16f87b2068cd93a38052b8", 0x60}], 0x3) getsockopt$bt_hci(r10, 0x0, 0x1, &(0x7f0000000940)=""/237, &(0x7f0000000a40)=0xed) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r11, &(0x7f0000000a80)="d4325de0b8b8ebf7ac6dbdd015e6dfd802b801cae73efc05ccba0b04b860094a2e78977049bbd526a6fa777756c367161a686c266da355e5ffb1ab38d8d140125e1a2852b686873bb913f7abab1bb9d2277f1798f0eb4699eed16c93f1ffccf65cb2be3bd19c9dbb40728e306e198ffa7f9825c7c7522ff7d8783e6aed40ad3a584d58511b9547e0726fecf48a66015fe35e29862caa1f9d13371627d8f16f34f6fac7a5e6fa8f9b", 0xa8, 0x40484c9, &(0x7f0000000b40)={0xa, 0x4e21, 0x5cf1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r5, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x41) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048084}, 0x4004) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000d80), 0x8) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r12, 0x111, 0x2, 0x1, 0x4) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r8) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r13, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NL80211_CMD_GET_INTERFACE(r12, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, r5, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200040d1}, 0x40) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) 1.200003328s ago: executing program 9 (id=3675): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1200000000010102000000000000000002000000240004001400018008000100e000000108000200e00000010c777e222d47900002800500014e58680ec56debd2bf5e72500000000000b7f8c19397228d9d91e31af0296a06c581787c29d6cb5a87e19e2c2915c39df23fbec30f88f085907ab24404f4744ee2f93120935b43ef7aacf2c383"], 0x38}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'erspan0\x00', {0x4}, 0x2}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1200000000010102000000000000000002000000240004001400018008000100e000000108000200e00000010c777e222d47900002800500014e58680ec56debd2bf5e72500000000000b7f8c19397228d9d91e31af0296a06c581787c29d6cb5a87e19e2c2915c39df23fbec30f88f085907ab24404f4744ee2f93120935b43ef7aacf2c383"], 0x38}}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'erspan0\x00', {0x4}, 0x2}) (async) 1.198938284s ago: executing program 7 (id=3676): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="180200002f72ffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x4c) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000280)=@name={0x1e, 0x2, 0x2, {{0x4aea0e1467b3f6c6, 0x1}, 0x1}}, 0x10) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004081}], 0x1, 0x0) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r6, 0x3}, &(0x7f0000000180)=0xc) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f0000000080)={0x9, {{0x2, 0x0, @rand_addr=0x64010102}}, {{0x2, 0x0, @broadcast}}}, 0x108) (async) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="09000000000000000200fffee0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e237f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000397bda26c7cd1ca4452a07520d0e26f32b111b28fb329d2e1d5c24cf1508fe49c887b30704d983ebfe5dd91885d518c99066a61375956ab04b5e71625265e502f4b01f28f1e3a0929c009606a98d941ecc75b4d68dcb370c8e613233f653dd9f4634e277a586eeb0bc4159f84e57432b3da167afcd5167659688f27dd7fa42feb1dbc43df74bff1fe3e04dc88b9bee"], 0x110) 1.167096695s ago: executing program 7 (id=3677): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) (async) listen(r1, 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/50, 0x32}, {&(0x7f0000000240)}, {&(0x7f0000000280)=""/98, 0x62}], 0x3, 0x4, 0x10001) ppoll(&(0x7f0000000100)=[{r3, 0x1000}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 1.046100097s ago: executing program 7 (id=3678): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r0, 0x0, 0x0}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x42031, 0xffffffffffffffff, 0x80000000) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x80, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0x4}, {0x4}, {0x47}, {0xc}}}]}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="b400000000000000731132000000000016640000000001009500740000000000ba56e23690a87d00935e6c02bdc1aa666714e5893645da93e92b81970ec728049d1618f945f85aa85afd888737bebe99ffad26e40d5f670b0ec3cbef5d93d53eb84e246f0c4cf0c170e8f424"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @mcast2, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x238}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)=@ethtool_gfeatures}) close(r4) 944.691065ms ago: executing program 9 (id=3679): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) tee(r0, r0, 0x2341, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002a80), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x2, &(0x7f0000000400)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x0, 0x0, 0xf6, 0x0, &(0x7f0000000300)=""/246, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r0, 0x1, 0x25, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r5) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r5) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002b027000ffdbdf25210000000a0001007770616e31000000050020000000000009001f0070687931000000000a0001007770616e330000000500200081"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 502.035806ms ago: executing program 7 (id=3680): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4) socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/14], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x5, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x57, 0x0, 0x66, 0x7}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @enum64={0xe, 0x5, 0x0, 0x13, 0x0, 0x2, [{0x5, 0x10001, 0x7d}, {0x10, 0x8001, 0x7}, {0x2, 0xf, 0x8}, {0xf, 0x7, 0x4}, {0x4, 0x7, 0x8}]}]}, {0x0, [0x30, 0x2e, 0x0]}}, &(0x7f0000000a40)=""/208, 0x81, 0xd0, 0x0, 0xfc5b, 0x10000, @value=r0}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb}, 0x38) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000c80)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000000000180000000000000000000000000000009500000000000000360a020000001000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 440.517937ms ago: executing program 9 (id=3681): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @rand_addr, @dev}, &(0x7f0000000080)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_newroute={0x38, 0x18, 0x800, 0x70bd2a, 0x100, {0xa, 0x14, 0x4, 0x1, 0xfc, 0x0, 0xff, 0x4}, [@RTA_EXPIRES={0x8, 0x17, 0x431}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0xc, 0x77, r0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004184}, 0x40) r1 = epoll_create(0x6) epoll_pwait(r1, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0x8, &(0x7f00000001c0)={[0x5]}, 0x8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x10, r1, 0xe1fe8000) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000200)={0x23, 0x18, 0xd, 0x3}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000240)={0x0, @initdev, @multicast2}, &(0x7f0000000280)=0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELTABLE={0xc8, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x66, 0x6, "c432fd5de1421333f86ed3c39487657f4b324a3389c058e1c7f0b9d72ade529d888c92f0abd0f884803fa67af3beeb0c1edd2e823d15f9af1e8ddfaa81c98a4e42ded75af938e5fdbb4d3ec18b8309eab61157393f5c0d28b6143c8460841b2b9491"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x88, 0x18, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5e0ac985}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_DELRULE={0x90, 0x8, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1f8df}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8864}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x104, 0x18, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0xd0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'pimreg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x328}, 0x1, 0x0, 0x0, 0x4050}, 0x4004000) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000740)={'broute\x00', 0x0, 0x0, 0x0, [0x5, 0x0, 0x400, 0x9, 0x9, 0xece], 0x2, &(0x7f00000006c0)=[{}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x11, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @map_idx={0x18, 0xf, 0x5, 0x0, 0x1}]}, &(0x7f00000008c0)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x0, 0x8, 0x40, 0xb}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], &(0x7f0000000980)=[{0x4, 0x4, 0x10, 0xb}, {0x0, 0x3, 0xb, 0x1}, {0x2, 0x4, 0x8, 0x8}, {0x3, 0x5, 0x9, 0x6}, {0x5, 0x3, 0x1, 0xb}, {0x2, 0x2, 0x7, 0xa}, {0x1, 0x4, 0x6, 0x9}, {0x0, 0x3, 0x9, 0xc}, {0x3, 0x4, 0x3, 0x3}, {0x0, 0x3, 0xc, 0x9}], 0x10, 0x1b, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c00)={@map=0xffffffffffffffff, 0xf, 0x1, 0x7, &(0x7f0000000b00)=[0x0], 0x1, 0x0, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000c80)='syz1\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c40)={@fallback=r2, r5, 0x2d, 0x2c, 0x0, @void, @void, @void, @value=r8, r7}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000d40), r4) sendmsg$SMC_PNETID_ADD(r9, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, r10, 0x10, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000e40)=0x7, 0x4) socket$kcm(0x29, 0x0, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r11, 0x84, 0xc, &(0x7f0000000e80), &(0x7f0000000ec0)=0x4) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x80000, 0x0) pipe(&(0x7f0000002080)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002140)={0x18, 0x20, &(0x7f0000000f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001040)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000001080)=""/4096, 0x40f00, 0x50, '\x00', 0x0, 0x0, r13, 0x8, &(0x7f00000020c0)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000002100)=[{0x1, 0x2, 0x10}], 0x10, 0x7, @void, @value}, 0x94) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000002200)={'ipvlan0\x00', 0x100}) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002280), r13) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x24, r14, 0x110, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x6c6ef962c493f91f}, 0x40000) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x5c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}]}, 0x5c}}, 0x4000084) 164.659995ms ago: executing program 7 (id=3682): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r3, 0x89fa, &(0x7f0000000000)) (async) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={r2, 0x9}, 0x8) 97.817113ms ago: executing program 6 (id=3683): setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000000)=0x108c, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x2ec, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x7a, 0x6, "bd308beff8519e035be1ff3acde75095137477a8e86eb91cbd5ed4d1ee89250c52921bad1af3b269e22cdb0880ff55f1a8e04c859a0f0fc75d86c8e4594ee5e3b55f6ebef74ff50f0a70f6f545e1b6b64ba333717c1ef03f1d1228e8ec26631241f7e4659d3603e79c5b170f2e06d386f86255975e7f"}, @NFTA_TABLE_USERDATA={0xd5, 0x6, "cc006c578f80c83aa25515f97462ad30b96b4e7ba37665bb0613b56772737dcd88bc037058b9e959bd732540a0f94e541a441443aee635268b4409fa81e3b5adfeacd0fdd6aeab4f72285cb23d8bb8e7c5c5f03e9bf0895c61f0f8c51d732a452464fc1edb5cc9abcab70d7d04b67e0afc62d8762e179c875ad5af094c7e3f98cde683b37b61b18bbb29bcb30fb3d305011103bf7958014a458d6442b5e2a727a497013b24b168f0f624934ee4a89a855a90f1b98d014ddd15618c35ac8b95a0f75664c510e6887fefc817fbdac49adcfa"}, @NFTA_TABLE_USERDATA={0x4c, 0x6, "603c3929157d9abc9fda27ec6a09510e3fb0b48ed8eda025f7bdc03347adc67f53c8866dd8db573b74a0c7f849b54a250097f452b16fa60c10d674a6a854f833445cee84d6afb83b"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xf3, 0x6, "1b32a5e163cdb6a9946f9e4414791fadf0ef54b398c8495bf2622f4f1dc71025c03ba31c9cc215e41e08aadf07946809bf4769dfe3f5597be33933f20ee2eac4edb7d9e17b12432ab0a1c1cf66087afe32688bb64443bf03ec5e9add18298839b117a29f0c850913f0fe5032cbab6da952f25b32530a718b705eca97269a6ab22489e2e3cf4a91a70fa411a4b3a1bf96f767d48a5fc8c4a40e13bb33b9622bc1eb80fc623feaa8a00663971b28504b810d35ee9c6413f1bfc75c6d1363aadc294b040f534ef5c8ba32bdabb349e05c56916548a745cf505a35c8f47a1a95c9f4f1f38bd414674c472953665e7acbf5"}, @NFTA_TABLE_USERDATA={0x17, 0x6, "24d3d363f7e52f472e07cab7689163463fa0ba"}]}, @NFT_MSG_DELTABLE={0xb0, 0x2, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x5f, 0x6, "caf7ca900fb74693027d1bf8d4701c538462f1c6c3b7c198cc4e17ef0979d4eb5d36050901fb88c7b139cf6fb99c43b31cb679aa03656264f093322b4811d868d1104dffa1553d9096e16a04e9c46ea6f6f1910d4f11368e1db63c"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x13}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2fc, 0x18, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x13c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'nr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x13c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x323}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000001}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x401, 0x0, 0x0, {0xfb8bcad5f04746ba, 0x0, 0x6}}, @NFT_MSG_DELOBJ={0x224, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0xdd, 0x8, "f716578674be9aaffe06fc4804f713a5f455aa131bb805eeb109178e3cb5be80f2a5dfa3a33e3aa9e88128974c3ef263b6195a81b3964a9630c36bd2bf7902afe4eb5f2d9afc8deffe49f9964387e040e951f57dc273d4e3cb1c506500c6749038c7c17a0088a2ef4a5a47e73d72941a76a52c5c0d063c2a8142321d179b705b6a955025de3f89f04011b104bdc7ba9ab41fe2dd2f580eb0ed4468eafc8619f3abcfe1d4fb9af1227d4075928dc451bfad1bf9b8d3c0a1308b8598338af1f4d6d06c9a75d2402919a9670a99984a4c83a64126a51b3240b669"}, @NFTA_OBJ_USERDATA={0x22, 0x8, "77020695e732e46c445753a9e5b3f5e97132d577e5ffb7426b33ffd23622"}, @NFTA_OBJ_USERDATA={0xda, 0x8, "fea2b791e99f101f93dbc0d47b7a2633f822172bda1b85dd7a11e82302e36c78a041f7be85d984b5013fa93031cea5360b8012196e9f43039fdf8cd873997aad81c5199fc22e31f8819b059f1e17f475e29c192152b3fec1d578f938d899da1fb83faeb32b513b6c1827b6299cca454a13c75c38e9f3ab3875207779cc22872a4c143adb3d15fcc4809b275994439bab729a211fdf8ba8d5476a798db4c55ddda307d77cf053689bd5fd48e8d6b87a6d7010600b2e79de24acb32f3ad059903b62fe3045f22389a17ff925366319aeb6b1a8d2f99dd7"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWFLOWTABLE={0x33c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x150, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4e}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x15ed}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x11c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1000000}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc98}, 0x1, 0x0, 0x0, 0x4}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000dc0)="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", 0x1000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001e80)={'ip_vti0\x00', &(0x7f0000001e00)={'erspan0\x00', 0x0, 0x20, 0x8, 0x4, 0x9, {{0xb, 0x4, 0x1, 0x8, 0x2c, 0x67, 0x0, 0x5, 0x2f, 0x0, @multicast2, @local, {[@timestamp_prespec={0x44, 0xc, 0xed, 0x3, 0x3, [{@multicast1, 0x1}]}, @generic={0x89, 0xa, "70b9719bac97f5fb"}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000001f80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)=@newtfilter={0x4c, 0x2c, 0x4, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x3}, {0xffef, 0xe}, {0x1, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0xa}}]}}, @TCA_RATE={0x6, 0x5, {0x5a, 0xb}}, @TCA_RATE={0x6, 0x5, {0x7, 0x3}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000}, 0x40008810) vmsplice(r0, &(0x7f0000002040)=[{&(0x7f0000001fc0)="9e3a71c8a3ee2caa149eefe4ec134934db3fec4d59fadee51958a3d7d2bb4918ba07864a186df8ea0fadd8f8b5f2f1f785d1e60c22f1a10ef8ae2785d4f45878fb6796d60a9021428ec6a845712ebef5e1f410228124f8bca3c58a5cfcd8202217f15966e03a234d8440d1ad702373b9797175120009abcbb52834", 0x7b}], 0x1, 0x3) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002080), r3) r5 = socket$packet(0x11, 0x3, 0x300) r6 = accept$packet(r5, &(0x7f00000020c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002100)=0x14) sendmmsg$inet(r0, &(0x7f0000003b00)=[{{&(0x7f0000002140)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f00000031c0)=[{&(0x7f0000002180)="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", 0x1000}, {&(0x7f0000003180)="5e2ac1ebe74c5633711e45863d3cc217e1", 0x11}], 0x2, &(0x7f0000003200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_retopts={{0x44, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0xb7, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x22}, 0x7}, {@private=0xa010100, 0x4}, {@dev={0xac, 0x14, 0x14, 0x27}, 0xa}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x36}}, {@private=0xa010102, 0x147}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}], 0xf0}}, {{&(0x7f0000003300)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000003440)=[{&(0x7f0000003340)="5c321344023dbf12b34afcc73b00aca3d258185f415bf912039f1e5f423034c3fd4f679488827eb3537f49035892f825f9277b140c3cfbc89b5128929469515520c3f530f8ec83357489f68c0c664d71b9ea1aced332196c9899190ba33d7fbdce7fa4954ed1900fbf773357d7ddc5b3121ede3c9a41247fa873b0b3c5da1022112c38c67eec124ff4cafec9a07d079485838a8f05501918f1755dd099abef29066e18fa1e2788faa6940d64d28d20933c979d105d1f4ba7f94481cdf114fac16a6d13c8", 0xc4}], 0x1, &(0x7f0000003480)=[@ip_retopts={{0xa8, 0x0, 0x7, {[@rr={0x7, 0x13, 0xb9, [@remote, @broadcast, @remote, @private=0xa010100]}, @timestamp_addr={0x44, 0x14, 0xda, 0x1, 0xe, [{@local, 0x7f}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_addr={0x44, 0xc, 0x8c, 0x1, 0x4, [{@empty, 0x8e6}]}, @cipso={0x86, 0x27, 0xffffffffffffffff, [{0x1, 0x11, "35ebb4d627fab7143246a39d5654c8"}, {0x7, 0x10, "ac83bd594c845ecaf0e02120a726"}]}, @timestamp_prespec={0x44, 0x34, 0xb4, 0x3, 0x2, [{@loopback, 0x9}, {@empty, 0x9}, {@broadcast, 0x40}, {@private=0xa010101, 0x200}, {@rand_addr=0x64010102, 0xfd1}, {@multicast1, 0x5}]}, @timestamp={0x44, 0x8, 0xbb, 0x0, 0x1, [0x8]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5847}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff8}}], 0x108}}, {{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f00000035c0)="153f37a2bf684362d277a9bad777ad3c6162332761de3acad7265c51d297989752069e1b01c0c94bcad030a5e20a63a4f9a19cad0e976a22ea657f6ebd7b085088716a242542943b9d8586b3717328b3532a6bfff2984ce0688b4edaf40f381056809adb70fdd079f5eb4ecb6a7ced89164b745d6e46c1a3f589ade66857bdb2ba362077a9d920e92f4a846de4e26222673f338d25f2de2e1ce4f6c36835edeb7cc0717972946e78337f6b737b4ef5608f956b3e673567ccd63160bdec180d97a6818fd06c50364c5aa2581c32f2f7e20839c85c26d2373afa10cf29c70543703b82c6d69798b51cd5de11ac", 0xec}, {&(0x7f00000036c0)="78194bfcf480c51a8af0f948a72af97a1966561af3f15ba9736d3d6bc083cccdddff331e743d018cc30b45275c7fb288d04d8e9bf9a64ef18abea22526f2509f2c1dd6912d2151d9e13d3f2d013f8ef98dab67b997cc351f65c97f72e4414a9b9b8d200f7b82458e3c34e20753a4856de91dc13e34d468ca8cd4b689f63c6037badaf7891383941eae64a6ef55697d2874a10cbadbf5e9046863f04c443de29037983d97248bc7ab09728c54584076b365d34413fd09b7bc7a1fa0625e40233603c5e9e5527f1bfee43c54565bd3522c6bb4c4801f148f2f1fe10978035b436dd631c917c9532dc9e2d018", 0xeb}, {&(0x7f00000037c0)="91bce8c32a596f820ac415a2394a46f0ef25d1ce70f11d85fd19ea8b811e60f48fb128cbf871d6623a97accb4ea33080fea2ac41a23ae8ab8a63cc828617cabf40dbdf29464eb4afae604b6aa278c24e9acd47a0f32c462b8daf46a6de69b3c3f9af000e4283242f3ea93910d9c6eafc9a25d003090943af31e3e59c322a61ec6a36b0dbc4c3cfe3c5a760b3dd9cdfcb52c1cf4c51e89f130e32a1b230085b8e", 0xa0}, {&(0x7f0000003880)="c078128ad44de0e97e954cd15fcc2121153db9c973600cefcee35f09c0453219a80361bc672003498ff940c6cb682907903f440695569825056e7b566e79348c8460c5564f4f95f3cf8a20c0d7c0dc42b62922ef66d63325a98eefe05a19f5280d5241c0a27416f92d5586e08602b32428f6b77e616138e0f999fcb37cdedaa19240e964b1f4754d69f6", 0x8a}, {&(0x7f0000003940)="eaf040bd3636d90cca076ede2c0c90498e95482ed173a639e1d6bd6fdaa249bdb722e318f1a37486e6e95a5c3acc40c8920a09c966cac4dfe1a98424b78a3ba8ae71c94c0b3604e949c899335881f1e376b48b271dfcfa9f59a4502207f3ae2eba4835e4f93800d07089b2a6db3a1c9153220f5de74b8eed0499f144d856faac2e01156052a534dcad2f1d28ac968b5f595acd89cfd586ff93c6d56e40c7a0545be1bf39b77ee301f65d372c974ce5", 0xaf}, {&(0x7f0000003a00)="46c8ce73186e5fe26cdb8f64b7b7a6330e840d7448ea6efdfa9abee0893d00357e4e710418d86a3e9715f5d32cc3eb508e65a477cd884e7d898582adc6563a6886683bf3c1361edc58815cf73dd7b3e1a0", 0x51}], 0x6}}], 0x3, 0x40044) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003c00), r3) sendmsg$NLBL_UNLABEL_C_STATICLIST(r8, &(0x7f0000003d80)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003d40)={&(0x7f0000003c40)={0xfc, r9, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:apt_var_log_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:lirc_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:audisp_remote_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apt_lock_t:s0\x00'}]}, 0xfc}}, 0x801) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000003dc0)={0x2, 'ipvlan1\x00', {0x9}, 0x8}) socket$key(0xf, 0x3, 0x2) socket$igmp6(0xa, 0x3, 0x2) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000003f00)={'syztnl2\x00', &(0x7f0000003e40)={'tunl0\x00', r7, 0x1, 0x8, 0xffffff80, 0x1, {{0x25, 0x4, 0x0, 0x1, 0x94, 0x66, 0x0, 0x9, 0x29, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0x7d, 0x1, 0x2, [{@empty, 0x8}, {@empty, 0x3}, {@rand_addr=0x64010102, 0x7}, {@rand_addr=0x64010100, 0x3}, {@local, 0x9}]}, @timestamp={0x44, 0x18, 0x2d, 0x0, 0x8, [0x5, 0x7fff, 0x0, 0xb, 0x4]}, @timestamp_addr={0x44, 0x3c, 0xd4, 0x1, 0x5, [{@rand_addr=0x64010102, 0x800}, {@broadcast, 0x40}, {@multicast1, 0x10000}, {@broadcast, 0x2}, {@loopback, 0x2}, {@empty, 0x9}, {@private=0xa010100, 0x5d5a3e39}]}]}}}}}) sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000005180)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000005140)={&(0x7f0000003f40)={0x11e0, 0x12, 0x100, 0x70bd29, 0x25dfdbfd, {0xb, 0x40, 0x5, 0xc, {0x4e21, 0x4e23, [0x40, 0x9, 0x5, 0x8], [0x4, 0x7, 0xefe, 0x6f], r11, [0x8, 0x3]}, 0x7f, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x9d, 0x1, "b850b50f3e661d4bbc2abf486c7dd23f0526603476894a93fa75d158441591208e8bb9738274a922a240ae140603d08627e16310ac511dcd31b07cab1a6eabcca0e51de9e6f57ec3cca2bf609fd1c943012a4e2f662af05c3b89f44be1966168db434d0196ff80bc5e0a0bf7fb23c445267fca241fbfaedd8e537f9be11ead1e100524fa28b40fd9b48e9fa3e639fe2828e014cf07f2217bcf"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x85, 0x1, "6b4c70973d618719298bd20f6b98a4cf480b8e2bf1df008a25bbc085686a1ef9576778967776ef9de498bb97b371b21b30d5f483112ae8d98eba226c65c8b83861b37dfe7e67afaa140d1f874cd72a0e5048ce2507039e520c81b4a42415e8e7fdf1d7b6c534786361c86d375ccdaabe5b0a75936d91eb2030f6be034c09c59b86"}, @INET_DIAG_REQ_BYTECODE={0x64, 0x1, "452eff292338d8b4db7374ef4a60e5142467b55bec75055368cc9feaae7434072a6ba225f82de725181c8492b1e3be5a459a3179ecfc441ba7f62ca365a66bbd6df97467dea4128c43bd4e8044af979b61ebd549255d6d90dadede5bed1794fe"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x11e0}, 0x1, 0x0, 0x0, 0x24004045}, 0x400c0) pipe(&(0x7f00000051c0)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r12, 0x6, 0x15, &(0x7f0000005200)=0x7, 0x4) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000005240)={'gretap0\x00', {0x2, 0x4e21, @broadcast}}) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000052c0), r8) sendmsg$NLBL_MGMT_C_VERSION(r8, &(0x7f0000005380)={&(0x7f0000005280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005340)={&(0x7f0000005300)={0x2c, r13, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '+\x00'}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '(\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) socket$phonet(0x23, 0x2, 0x1) socket$packet(0x11, 0x3, 0x300) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f00000054c0)={&(0x7f00000053c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000005480)={&(0x7f0000005440)={0x34, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004811) 96.88533ms ago: executing program 9 (id=3684): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000001c0)=[{0x0, 0x4, 0x2, 0x6}, {0x1, 0x5, 0x9, 0x7}, {0x3, 0x2, 0xc}], 0x10, 0x4f, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0x3, 0xd}, {0x8, 0x2}}}, 0x24}}, 0x40004) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) pwrite64(r0, 0x0, 0x0, 0x40008001) r2 = socket$inet_sctp(0x2, 0x1, 0x84) accept4$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x80000) 0s ago: executing program 9 (id=3685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x21, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xe}, {0x10, 0x110, 0xe}], 0x20}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x101, 0x4) sendmmsg$inet6(r2, &(0x7f0000000980)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x4004000) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe8, r4, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x35}}}}, [@NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="11a7f77f52ff5fe9ab19913cec4f0a2e0e08932685e552f5"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7cfb7aac1b9b8051"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f1d2b30fd85a99e117f710582afc9605a42d2fd17bc21225ea34b607dd97a6cc"}]}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x40}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f20d389d726ca29a"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c4c0f870eef6ad910287e0dd58274430"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7ccd357d3d64181eab7eb33bc2d075ad"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1de7dc8ae62d76d7ea2ee11bcfa08ccc"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}]}]}, 0xe8}}, 0x4000) kernel console output (not intermixed with test programs): .131269][T17683] rdma_op ffff888035b4c1f0 conn xmit_rdma 0000000000000000 [ 525.138614][T17647] bridge_slave_1: entered promiscuous mode [ 525.361684][T17647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.503618][T17690] syzkaller0: entered promiscuous mode [ 525.526438][T17690] syzkaller0: entered allmulticast mode [ 525.550033][T17672] lo speed is unknown, defaulting to 1000 [ 525.560533][T17647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.692513][T17647] team0: Port device team_slave_0 added [ 525.748093][ T5839] Bluetooth: hci4: command tx timeout [ 525.770084][T17647] team0: Port device team_slave_1 added [ 525.905520][T17705] __nla_validate_parse: 2 callbacks suppressed [ 525.905542][T17705] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3130'. [ 525.954296][T17647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.961856][T17647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.990274][T17647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.013927][T17647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.027033][T17647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.055110][T17647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.077771][T17710] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3130'. [ 526.165585][T17703] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3128'. [ 526.262582][T17725] netlink: del zone limit has 4 unknown bytes [ 526.430389][ T7920] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.520286][T17647] hsr_slave_0: entered promiscuous mode [ 526.527638][T17647] hsr_slave_1: entered promiscuous mode [ 526.534112][T17647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 526.544452][T17647] Cannot create hsr debugfs directory [ 526.558660][ T5839] Bluetooth: hci1: command tx timeout [ 526.604527][ T7920] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.720086][ T7920] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.794527][T17733] lo speed is unknown, defaulting to 1000 [ 527.028352][ T7920] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.349718][T17754] ip6gretap2: entered promiscuous mode [ 527.439476][T17758] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3133'. [ 527.632538][T17672] chnl_net:caif_netlink_parms(): no params data found [ 527.828967][ T5839] Bluetooth: hci4: command tx timeout [ 527.919515][T17766] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 527.935404][ T7920] bridge_slave_1: left allmulticast mode [ 527.954041][ T7920] bridge_slave_1: left promiscuous mode [ 527.964970][ T7920] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.990418][ T7920] bridge_slave_0: left allmulticast mode [ 528.012312][ T7920] bridge_slave_0: left promiscuous mode [ 528.022370][ T7920] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.045398][T17776] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3144'. [ 528.541552][ T7920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.554444][ T7920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.566429][ T7920] bond0 (unregistering): Released all slaves [ 528.616250][T17766] syzkaller1: entered promiscuous mode [ 528.622143][T17766] syzkaller1: entered allmulticast mode [ 528.636053][ T5839] Bluetooth: hci1: command tx timeout [ 528.841034][T17672] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.853766][T17672] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.861987][T17672] bridge_slave_0: entered allmulticast mode [ 528.872928][T17672] bridge_slave_0: entered promiscuous mode [ 528.890607][T17776] lo speed is unknown, defaulting to 1000 [ 528.901914][T17672] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.919020][T17672] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.926322][T17672] bridge_slave_1: entered allmulticast mode [ 528.935966][T17672] bridge_slave_1: entered promiscuous mode [ 529.108186][T17672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.155010][T17672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.198737][ T7920] hsr_slave_0: left promiscuous mode [ 529.214235][ T7920] hsr_slave_1: left promiscuous mode [ 529.223401][ T7920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.237299][ T7920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.254425][ T7920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.272370][ T7920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.335247][ T7920] veth1_macvtap: left promiscuous mode [ 529.346358][ T7920] veth0_macvtap: left promiscuous mode [ 529.354848][ T7920] veth1_vlan: left promiscuous mode [ 529.362639][ T7920] veth0_vlan: left promiscuous mode [ 529.907616][ T5839] Bluetooth: hci4: command tx timeout [ 529.965273][ T7920] team0 (unregistering): Port device team_slave_1 removed [ 530.014238][ T7920] team0 (unregistering): Port device team_slave_0 removed [ 530.624074][T17672] team0: Port device team_slave_0 added [ 530.667130][T17672] team0: Port device team_slave_1 added [ 530.713115][ T5839] Bluetooth: hci1: command tx timeout [ 530.801590][T17796] netlink: 'syz.6.3148': attribute type 7 has an invalid length. [ 530.847377][T17797] netlink: 'syz.7.3149': attribute type 11 has an invalid length. [ 530.921695][T17672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.929968][T17672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.958183][T17672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.997623][T17803] netlink: 180 bytes leftover after parsing attributes in process `syz.7.3150'. [ 531.007466][T17803] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3150'. [ 531.016444][T17803] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3150'. [ 531.027644][T17803] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3150'. [ 531.049837][T17672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.057422][T17672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.084620][T17672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.133701][T17647] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 531.152067][T17647] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 531.174869][T17647] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 531.246068][T17647] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 531.349884][T17672] hsr_slave_0: entered promiscuous mode [ 531.359236][T17672] hsr_slave_1: entered promiscuous mode [ 531.367915][T17672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 531.375823][T17672] Cannot create hsr debugfs directory [ 531.624671][ T7920] batadv0: left allmulticast mode [ 531.640027][ T7920] batadv0: left promiscuous mode [ 531.653162][ T7920] bridge0: port 6(batadv0) entered disabled state [ 531.680044][ T7920] bridge_slave_1: left allmulticast mode [ 531.685816][ T7920] bridge_slave_1: left promiscuous mode [ 531.692120][ T7920] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.720109][ T7920] bridge_slave_0: left allmulticast mode [ 531.730082][ T7920] bridge_slave_0: left promiscuous mode [ 531.736036][ T7920] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.938117][T17821] Bluetooth: MGMT ver 1.23 [ 531.987592][ T5839] Bluetooth: hci4: command tx timeout [ 532.025344][ T7920] bond1 (unregistering): (slave ip6gre2): Releasing backup interface [ 532.049123][ T7920] batman_adv: batadv0: Removing interface: ip6gretap1 [ 532.272645][ T7920] team0: Port device geneve0 removed [ 532.860052][ T7920] bond1 (unregistering): Released all slaves [ 532.884671][ T7920] bond2 (unregistering): Released all slaves [ 533.060289][ T7920] bond3 (unregistering): Released all slaves [ 533.083838][ T7920] bond0 (unregistering): Released all slaves [ 533.100566][ T7920] bond4 (unregistering): Released all slaves [ 533.212615][T17821] lo speed is unknown, defaulting to 1000 [ 533.312367][T17824] netlink: 'syz.6.3157': attribute type 1 has an invalid length. [ 533.320338][T17824] netlink: 'syz.6.3157': attribute type 3 has an invalid length. [ 533.331811][T17824] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3157'. [ 533.612549][T17831] smc: net device veth1_to_team applied user defined pnetid SYZ2 [ 533.619539][T17647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.652682][T17647] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.674416][T17829] lo speed is unknown, defaulting to 1000 [ 533.735332][ T6840] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.742579][ T6840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.757877][ T6840] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.765114][ T6840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.940088][T17837] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3160'. [ 533.969101][T17837] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3160'. [ 536.279681][T17853] FAULT_INJECTION: forcing a failure. [ 536.279681][T17853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.291062][T17647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.293239][T17853] CPU: 0 UID: 0 PID: 17853 Comm: syz.7.3164 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 536.293271][T17853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 536.293286][T17853] Call Trace: [ 536.293295][T17853] [ 536.293305][T17853] dump_stack_lvl+0x241/0x360 [ 536.293348][T17853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 536.293380][T17853] ? __pfx__printk+0x10/0x10 [ 536.293424][T17853] should_fail_ex+0x424/0x570 [ 536.293456][T17853] _copy_to_user+0x31/0xb0 [ 536.293493][T17853] simple_read_from_buffer+0xc4/0x170 [ 536.293531][T17853] proc_fail_nth_read+0x1ef/0x260 [ 536.293568][T17853] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 536.293606][T17853] ? rw_verify_area+0x246/0x630 [ 536.293635][T17853] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 536.293671][T17853] vfs_read+0x21f/0xb90 [ 536.293727][T17853] ? __pfx___mutex_lock+0x10/0x10 [ 536.293749][T17853] ? __pfx_vfs_read+0x10/0x10 [ 536.293782][T17853] ? __fget_files+0x2a/0x420 [ 536.293804][T17853] ? __fget_files+0x39d/0x420 [ 536.293824][T17853] ? __fget_files+0x2a/0x420 [ 536.293855][T17853] ksys_read+0x19d/0x2d0 [ 536.293887][T17853] ? __pfx_ksys_read+0x10/0x10 [ 536.293932][T17853] ? do_syscall_64+0xb6/0x210 [ 536.293958][T17853] do_syscall_64+0xf3/0x210 [ 536.293979][T17853] ? clear_bhb_loop+0x45/0xa0 [ 536.294007][T17853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.294028][T17853] RIP: 0033:0x7f011138cb7c [ 536.294049][T17853] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 536.294068][T17853] RSP: 002b:00007f010f1f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 536.294093][T17853] RAX: ffffffffffffffda RBX: 00007f01115b5fa0 RCX: 00007f011138cb7c [ 536.294110][T17853] RDX: 000000000000000f RSI: 00007f010f1f60a0 RDI: 0000000000000004 [ 536.294124][T17853] RBP: 00007f010f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 536.294137][T17853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.294150][T17853] R13: 0000000000000000 R14: 00007f01115b5fa0 R15: 00007ffd52c8a7e8 [ 536.294186][T17853] [ 536.347460][T17854] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3163'. [ 536.646852][ T7920] tipc: Disabling bearer [ 536.658868][T17861] netlink: 452 bytes leftover after parsing attributes in process `syz.7.3165'. [ 536.660916][ T7920] tipc: Left network mode [ 536.804646][T17856] lo speed is unknown, defaulting to 1000 [ 536.811614][T17672] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 536.965842][T17672] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 537.140431][T17672] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 537.279172][T17672] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 537.571211][ T7920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.588752][ T7920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.062656][ T7920] team0 (unregistering): Port device team_slave_1 removed [ 538.117403][ T7920] team0 (unregistering): Port device team_slave_0 removed [ 538.640053][T17870] lo speed is unknown, defaulting to 1000 [ 538.896031][T17647] veth0_vlan: entered promiscuous mode [ 538.912358][T17647] veth1_vlan: entered promiscuous mode [ 539.028573][T17647] veth0_macvtap: entered promiscuous mode [ 539.040125][T17647] veth1_macvtap: entered promiscuous mode [ 539.062950][T17647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.076715][T17647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.124662][T17647] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.134910][T17647] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.144641][T17647] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.154338][T17647] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.189955][ T7920] IPVS: stop unused estimator thread 0... [ 539.388162][T17672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.423914][ T6840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.447473][ T6840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.465290][T17878] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3168'. [ 539.541895][T17672] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.551383][ T7913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.570323][T17880] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3170'. [ 539.581031][ T7913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.604169][ T7920] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.611406][ T7920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.649732][T17882] netlink: 'syz.6.3169': attribute type 1 has an invalid length. [ 539.673445][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.680722][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.781417][ T2152] hid-generic 0005:07C0:0A0F.0001: item fetching failed at offset 0/3 [ 539.794333][T17885] batman_adv: batadv0: Removing interface: dummy0 [ 539.808253][ T30] audit: type=1107 audit(1744967347.730:70): pid=17884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 539.810302][ T2152] hid-generic 0005:07C0:0A0F.0001: probe with driver hid-generic failed with error -22 [ 540.033880][T17672] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 540.226078][T17903] wg1: left promiscuous mode [ 540.233059][T17903] wg1: left allmulticast mode [ 540.245565][T17903] veth0_macvtap: left allmulticast mode [ 540.252316][T17903] macvtap0: left promiscuous mode [ 540.268881][T17903] ip6erspan0: left promiscuous mode [ 540.275194][T17903] vlan0: left allmulticast mode [ 540.283423][T17903] batadv0: left allmulticast mode [ 540.296000][T17903] ip6gretap2: left promiscuous mode [ 540.305820][T17903] ip6gretap2: left allmulticast mode [ 540.323288][T17903] geneve2: left promiscuous mode [ 540.336318][T17903] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.345393][T17903] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.354432][T17903] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.363578][T17903] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.372649][T17903] geneve3: left promiscuous mode [ 540.380948][T17903] geneve3: left allmulticast mode [ 540.394921][T17903] syzkaller0: left promiscuous mode [ 540.401044][T17903] syzkaller0: left allmulticast mode [ 540.414105][T17903] gtp1: left promiscuous mode [ 540.420178][T17903] gtp1: left allmulticast mode [ 540.457732][T17905] bridge0: port 1(gretap0) entered blocking state [ 540.464382][T17905] bridge0: port 1(gretap0) entered disabled state [ 540.473457][T17905] gretap0: entered allmulticast mode [ 540.486114][T17905] gretap0: entered promiscuous mode [ 540.497195][T17909] gretap0: left allmulticast mode [ 540.502889][T17909] gretap0: left promiscuous mode [ 540.524956][T17909] bridge0: port 1(gretap0) entered disabled state [ 540.983740][ T6840] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.131235][T17672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.330529][ T6840] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.473939][ T6840] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.589614][ T6840] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.750415][T17672] veth0_vlan: entered promiscuous mode [ 541.819282][T17672] veth1_vlan: entered promiscuous mode [ 541.854061][ T6840] bridge_slave_1: left allmulticast mode [ 541.861946][ T6840] bridge_slave_1: left promiscuous mode [ 541.873552][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.895362][ T6840] bridge_slave_0: left allmulticast mode [ 541.903994][ T6840] bridge_slave_0: left promiscuous mode [ 541.956416][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.090212][T17945] netlink: 173244 bytes leftover after parsing attributes in process `syz.7.3182'. [ 542.100935][T17945] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 542.567210][T17957] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3185'. [ 542.842134][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 542.853976][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 542.862891][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 542.873673][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 542.881711][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 543.094162][ T6840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.106280][ T6840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.119957][ T6840] bond0 (unregistering): Released all slaves [ 543.142246][T17945] netlink: 'syz.7.3182': attribute type 15 has an invalid length. [ 543.151290][T17945] netlink: 666 bytes leftover after parsing attributes in process `syz.7.3182'. [ 543.163728][T17949] netlink: 'syz.7.3182': attribute type 13 has an invalid length. [ 543.298025][T17672] veth0_macvtap: entered promiscuous mode [ 543.335473][T17967] lo speed is unknown, defaulting to 1000 [ 543.470983][T17976] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3189'. [ 543.481905][T17978] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3189'. [ 543.496503][T17672] veth1_macvtap: entered promiscuous mode [ 543.728063][T17987] netlink: 'syz.7.3192': attribute type 10 has an invalid length. [ 543.851068][T17672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.864630][T17672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.878151][T17672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.900095][ T6840] hsr_slave_0: left promiscuous mode [ 543.906194][ T6840] hsr_slave_1: left promiscuous mode [ 543.913313][ T6840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.921144][ T6840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.933301][ T6840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.941907][ T6840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.972093][ T6840] veth1_macvtap: left promiscuous mode [ 543.978104][ T6840] veth0_macvtap: left promiscuous mode [ 543.983833][ T6840] veth1_vlan: left promiscuous mode [ 543.989539][ T6840] veth0_vlan: left promiscuous mode [ 544.318657][T18001] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3195'. [ 544.738709][ T6840] team0 (unregistering): Port device team_slave_1 removed [ 544.796177][ T6840] team0 (unregistering): Port device team_slave_0 removed [ 544.948409][ T5839] Bluetooth: hci1: command tx timeout [ 545.479112][T17672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.564973][T17672] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.576481][T17672] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.586390][T17672] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.597722][T17672] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.833951][T17967] chnl_net:caif_netlink_parms(): no params data found [ 546.066335][T18032] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3202'. [ 546.080436][T18032] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3202'. [ 546.091370][T18032] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3202'. [ 546.102098][T18032] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3202'. [ 546.128487][T18032] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 546.295896][T17967] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.307717][T17967] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.315048][T17967] bridge_slave_0: entered allmulticast mode [ 546.323587][T17967] bridge_slave_0: entered promiscuous mode [ 546.332496][T17967] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.344388][T17967] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.351774][T17967] bridge_slave_1: entered allmulticast mode [ 546.359709][T17967] bridge_slave_1: entered promiscuous mode [ 546.454877][ T7914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.463636][ T7914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.483477][T17967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.530071][T17967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.638003][T17967] team0: Port device team_slave_0 added [ 546.651119][ T7917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.659394][ T7917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.674131][T17967] team0: Port device team_slave_1 added [ 546.807408][T17967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.823345][T17967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.852296][T17967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.873263][T17967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.913885][T17967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.984238][T17967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.028345][ T5839] Bluetooth: hci1: command tx timeout [ 547.215744][T17967] hsr_slave_0: entered promiscuous mode [ 547.249669][T17967] hsr_slave_1: entered promiscuous mode [ 547.278156][T17967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.285783][T17967] Cannot create hsr debugfs directory [ 547.431274][ T7907] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.644460][ T7907] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.830172][ T7907] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.897745][ T7907] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.025476][ T7907] bridge_slave_1: left allmulticast mode [ 548.031546][ T7907] bridge_slave_1: left promiscuous mode [ 548.038695][ T7907] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.049759][ T7907] bridge_slave_0: left allmulticast mode [ 548.055474][ T7907] bridge_slave_0: left promiscuous mode [ 548.062471][ T7907] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.440717][ T7907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.452475][ T7907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.464383][ T7907] bond0 (unregistering): Released all slaves [ 548.650980][T17967] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 548.663473][T17967] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 548.682560][T17967] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 548.735375][T17967] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 548.806252][ T7907] hsr_slave_0: left promiscuous mode [ 548.818539][ T7907] hsr_slave_1: left promiscuous mode [ 548.825687][ T7907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.833417][ T7907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.842400][ T7907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.850123][ T7907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.876326][ T7907] veth1_macvtap: left promiscuous mode [ 548.882211][ T7907] veth0_macvtap: left promiscuous mode [ 548.888369][ T7907] veth1_vlan: left promiscuous mode [ 548.893993][ T7907] veth0_vlan: left promiscuous mode [ 549.112517][ T5839] Bluetooth: hci1: command tx timeout [ 549.484678][T18105] __nla_validate_parse: 65 callbacks suppressed [ 549.484705][T18105] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3222'. [ 549.604948][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 549.617374][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 549.626011][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 549.636683][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 549.657654][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 549.863950][T18115] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3223'. [ 549.924719][T18111] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3223'. [ 550.086320][ T7907] team0 (unregistering): Port device team_slave_1 removed [ 550.141231][ T7907] team0 (unregistering): Port device team_slave_0 removed [ 550.806078][T18118] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3224'. [ 551.126195][T18108] lo speed is unknown, defaulting to 1000 [ 551.186775][ T5842] Bluetooth: hci1: command tx timeout [ 551.315626][T17967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.432719][T18126] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 551.714137][T18130] lo speed is unknown, defaulting to 1000 [ 551.718748][T17967] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.747822][ T5842] Bluetooth: hci4: command tx timeout [ 551.856352][ T7914] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.863594][ T7914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.882298][ T7914] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.889610][ T7914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.947615][T18138] xt_CT: No such helper "snmp" [ 551.955595][T18137] xt_CT: No such helper "snmp" [ 552.250131][T18108] chnl_net:caif_netlink_parms(): no params data found [ 552.502503][T17967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.544540][T18157] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3233'. [ 552.640928][T18162] netlink: 'syz.7.3235': attribute type 1 has an invalid length. [ 552.649375][T18162] netlink: 244 bytes leftover after parsing attributes in process `syz.7.3235'. [ 552.763573][T18169] netlink: 'syz.6.3236': attribute type 1 has an invalid length. [ 552.782439][T18169] netlink: 208 bytes leftover after parsing attributes in process `syz.6.3236'. [ 552.811586][T18108] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.825194][T18108] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.834024][T18108] bridge_slave_0: entered allmulticast mode [ 552.843078][T18108] bridge_slave_0: entered promiscuous mode [ 552.897426][T18108] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.907586][T18108] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.915464][T18173] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3239'. [ 552.927507][T18108] bridge_slave_1: entered allmulticast mode [ 552.935111][T18108] bridge_slave_1: entered promiscuous mode [ 553.005163][T18177] netlink: 71 bytes leftover after parsing attributes in process `syz.6.3240'. [ 553.054789][T18108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.081187][T18108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.116368][T18180] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20003 [ 553.211951][T18177] warn_alloc: 2 callbacks suppressed [ 553.211976][T18177] syz.6.3240: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null) [ 553.220645][T18170] lo speed is unknown, defaulting to 1000 [ 553.243110][T18177] ,cpuset=/,mems_allowed=0-1 [ 553.264290][T18177] CPU: 0 UID: 0 PID: 18177 Comm: syz.6.3240 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 553.264325][T18177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 553.264340][T18177] Call Trace: [ 553.264348][T18177] [ 553.264359][T18177] dump_stack_lvl+0x241/0x360 [ 553.264398][T18177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 553.264429][T18177] ? __pfx__printk+0x10/0x10 [ 553.264462][T18177] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 553.264489][T18177] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 553.264512][T18177] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 553.264539][T18177] warn_alloc+0x27c/0x410 [ 553.264580][T18177] ? __pfx_warn_alloc+0x10/0x10 [ 553.264615][T18177] ? htable_create+0x10c/0x890 [ 553.264637][T18177] ? __get_vm_area_node+0x1c8/0x2d0 [ 553.264659][T18177] ? __get_vm_area_node+0x25c/0x2d0 [ 553.264691][T18177] __vmalloc_node_range_noprof+0x634/0x1390 [ 553.264752][T18177] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 553.264780][T18177] ? __kasan_kmalloc_large+0x1a/0xa0 [ 553.264819][T18177] ? htable_create+0x10c/0x890 [ 553.264842][T18177] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 553.264867][T18177] ? htable_create+0x10c/0x890 [ 553.264888][T18177] ? htable_create+0x10c/0x890 [ 553.264908][T18177] ? hashlimit_pernet+0x23/0x240 [ 553.264936][T18177] htable_create+0x10c/0x890 [ 553.264967][T18177] hashlimit_mt_check_common+0x763/0xa50 [ 553.265001][T18177] hashlimit_mt_check_v1+0x2ec/0x550 [ 553.265027][T18177] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 553.265054][T18177] ? xt_find_match+0x1e5/0x240 [ 553.265090][T18177] ? __mutex_unlock_slowpath+0x229/0x800 [ 553.265117][T18177] xt_check_match+0x36a/0xa40 [ 553.265154][T18177] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 553.265177][T18177] ? __pfx_xt_check_match+0x10/0x10 [ 553.265226][T18177] ? xt_find_match+0x1e5/0x240 [ 553.265268][T18177] translate_table+0x162a/0x2390 [ 553.265297][T18177] ? do_syscall_64+0xf3/0x210 [ 553.265317][T18177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.265372][T18177] ? __pfx_translate_table+0x10/0x10 [ 553.265433][T18177] ? copy_from_sockptr_offset+0x60/0xb0 [ 553.265466][T18177] do_ipt_set_ctl+0xb70/0x1180 [ 553.265501][T18177] ? __pfx___mutex_trylock_common+0x10/0x10 [ 553.265523][T18177] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 553.265579][T18177] ? __mutex_unlock_slowpath+0x229/0x800 [ 553.265611][T18177] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 553.265631][T18177] ? aa_sk_perm+0x96f/0xac0 [ 553.265666][T18177] ? __pfx_aa_sk_perm+0x10/0x10 [ 553.265695][T18177] nf_setsockopt+0x295/0x2c0 [ 553.265723][T18177] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 553.265755][T18177] do_sock_setsockopt+0x3b1/0x710 [ 553.265787][T18177] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 553.265807][T18177] ? __fget_files+0x2a/0x420 [ 553.265830][T18177] ? __fget_files+0x39d/0x420 [ 553.265848][T18177] ? __fget_files+0x2a/0x420 [ 553.265879][T18177] __x64_sys_setsockopt+0x187/0x210 [ 553.265911][T18177] do_syscall_64+0xf3/0x210 [ 553.265933][T18177] ? clear_bhb_loop+0x45/0xa0 [ 553.265959][T18177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.265981][T18177] RIP: 0033:0x7f76bb38e169 [ 553.266001][T18177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.266020][T18177] RSP: 002b:00007f76bc1c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 553.266043][T18177] RAX: ffffffffffffffda RBX: 00007f76bb5b5fa0 RCX: 00007f76bb38e169 [ 553.266060][T18177] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 553.266075][T18177] RBP: 00007f76bb410a68 R08: 0000000000000448 R09: 0000000000000000 [ 553.266089][T18177] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 553.266103][T18177] R13: 0000000000000000 R14: 00007f76bb5b5fa0 R15: 00007fff35ee4bf8 [ 553.266137][T18177] [ 553.664792][T18177] Mem-Info: [ 553.668678][T18177] active_anon:6508 inactive_anon:0 isolated_anon:0 [ 553.668678][T18177] active_file:1872 inactive_file:38529 isolated_file:0 [ 553.668678][T18177] unevictable:768 dirty:156 writeback:0 [ 553.668678][T18177] slab_reclaimable:11115 slab_unreclaimable:124683 [ 553.668678][T18177] mapped:31624 shmem:4344 pagetables:662 [ 553.668678][T18177] sec_pagetables:0 bounce:0 [ 553.668678][T18177] kernel_misc_reclaimable:0 [ 553.668678][T18177] free:1312704 free_pcp:592 free_cma:0 [ 553.687579][ T5842] Bluetooth: hci1: command tx timeout [ 553.737907][T18177] Node 0 active_anon:26132kB inactive_anon:0kB active_file:7488kB inactive_file:154044kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126496kB dirty:620kB writeback:0kB shmem:15840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10996kB pagetables:2648kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 553.791719][T18108] team0: Port device team_slave_0 added [ 553.796149][T18177] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 553.830352][T18177] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 553.830656][ T5842] Bluetooth: hci4: command tx timeout [ 553.861565][T18177] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 553.870649][T18108] team0: Port device team_slave_1 added [ 553.880826][T18177] Node 0 DMA32 free:1322416kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:26124kB inactive_anon:0kB active_file:7488kB inactive_file:153952kB unevictable:1536kB writepending:616kB present:3129332kB managed:2547444kB mlocked:0kB bounce:0kB free_pcp:1672kB local_pcp:80kB free_cma:0kB [ 553.913908][T18177] lowmem_reserve[]: 0 0 0 0 0 [ 553.918902][T18177] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 553.945995][T18177] lowmem_reserve[]: 0 0 0 0 0 [ 553.950855][T18177] Node 1 Normal free:3913528kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 553.980178][T18177] lowmem_reserve[]: 0 0 0 0 0 [ 553.984972][T18177] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 553.998140][T18177] Node 0 DMA32: 4*4kB (UME) 34*8kB (UME) 95*16kB (UME) 608*32kB (UME) 1401*64kB (UME) 696*128kB (UME) 211*256kB (UME) 48*512kB (UM) 51*1024kB (UM) 8*2048kB (UME) 238*4096kB (UM) = 1322064kB [ 554.018009][T18177] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 554.030199][T18177] Node 1 Normal: 240*4kB (UME) 61*8kB (UME) 39*16kB (UME) 227*32kB (UME) 93*64kB (UME) 31*128kB (UME) 18*256kB (UM) 9*512kB (UME) 4*1024kB (UME) 5*2048kB (UE) 945*4096kB (M) = 3913528kB [ 554.049465][T18177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 554.059161][T18177] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 554.073934][T18177] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 554.093440][T18177] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 554.118849][T18177] 44758 total pagecache pages [ 554.125261][T18177] 0 pages in swap cache [ 554.131761][T18177] Free swap = 124996kB [ 554.136242][T18177] Total swap = 124996kB [ 554.142162][T18177] 2097051 pages RAM [ 554.146160][T18177] 0 pages HighMem/MovableOnly [ 554.152062][T18177] 428532 pages reserved [ 554.156313][T18177] 0 pages cma reserved [ 554.328568][T18108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.347471][T18108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.391351][T18108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.482382][T18108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.507049][T18108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.556069][T18108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.734585][T18108] hsr_slave_0: entered promiscuous mode [ 554.752365][T18108] hsr_slave_1: entered promiscuous mode [ 554.764681][T18108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 554.783257][T18108] Cannot create hsr debugfs directory [ 554.888508][T17967] veth0_vlan: entered promiscuous mode [ 555.079638][T17967] veth1_vlan: entered promiscuous mode [ 555.312714][T18217] netlink: 'syz.9.3249': attribute type 5 has an invalid length. [ 555.351792][T18219] netlink: 'syz.7.3250': attribute type 1 has an invalid length. [ 555.361277][T18219] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3250'. [ 555.370707][T18219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.386116][T17967] veth0_macvtap: entered promiscuous mode [ 555.518071][T17967] veth1_macvtap: entered promiscuous mode [ 555.860802][T18234] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3254'. [ 555.895906][T17967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.907533][ T5842] Bluetooth: hci4: command tx timeout [ 555.966557][T17967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.065257][T17967] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.109450][T17967] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.149769][T17967] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.185390][T17967] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.202522][T18236] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3255'. [ 556.314474][T18238] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3256'. [ 556.660470][T18249] xt_connbytes: Forcing CT accounting to be enabled [ 556.695656][T18249] --map-set only usable from mangle table [ 556.719401][T18108] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 556.765373][T18108] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 556.775656][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.809548][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.846350][T18108] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 556.906332][T18108] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 556.936565][ T7914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.979036][ T7914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.284881][T18108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.371978][T18108] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.388955][ T7907] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.396166][ T7907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.490550][ T7907] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.497819][ T7907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.581749][T18273] IPVS: length: 208 != 24 [ 557.608117][T18273] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3265'. [ 557.900699][ T7907] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.934245][T18288] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3269'. [ 557.988061][ T5842] Bluetooth: hci4: command tx timeout [ 558.074780][ T7907] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.194336][ T7907] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.282778][ T7907] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.364782][T18108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.557857][ T7907] bridge_slave_1: left allmulticast mode [ 558.563657][ T7907] bridge_slave_1: left promiscuous mode [ 558.578984][ T7907] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.599645][ T7907] bridge_slave_0: left allmulticast mode [ 558.605355][ T7907] bridge_slave_0: left promiscuous mode [ 558.632928][ T7907] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.319949][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 559.346274][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 559.363398][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 559.395602][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 559.404220][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 559.509761][ T7907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.521982][ T7907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.535075][ T7907] bond0 (unregistering): Released all slaves [ 559.762216][T18315] xt_cluster: node mask cannot exceed total number of nodes [ 559.766882][T18316] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3272'. [ 559.895716][T18310] lo speed is unknown, defaulting to 1000 [ 560.004321][T18318] lo speed is unknown, defaulting to 1000 [ 560.122924][T18325] team0: left promiscuous mode [ 560.129071][T18325] team0: left allmulticast mode [ 560.153496][T18325] ip6gretap2: left promiscuous mode [ 560.218740][T18335] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3276'. [ 560.400675][ T7907] hsr_slave_0: left promiscuous mode [ 560.485569][T18343] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3278'. [ 560.495275][ T7907] hsr_slave_1: left promiscuous mode [ 560.503556][ T7907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.511456][ T7907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.520401][ T7907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.529371][ T7907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.563260][ T7907] veth1_macvtap: left promiscuous mode [ 560.589366][ T7907] veth0_macvtap: left promiscuous mode [ 560.595176][ T7907] veth1_vlan: left promiscuous mode [ 560.601612][ T7907] veth0_vlan: left promiscuous mode [ 561.506744][ T5839] Bluetooth: hci1: command tx timeout [ 561.543808][ T7907] team0 (unregistering): Port device team_slave_1 removed [ 561.600114][ T7907] team0 (unregistering): Port device team_slave_0 removed [ 562.144092][T18348] lo: left allmulticast mode [ 562.216031][T18348] geneve1: left promiscuous mode [ 562.246280][T18348] vxcan3: left allmulticast mode [ 562.260480][T18348] tipc: Resetting bearer [ 562.278614][T18348] syzkaller0: left promiscuous mode [ 562.283884][T18348] syzkaller0: left allmulticast mode [ 562.301644][T18348] bond3: left promiscuous mode [ 562.529899][T18354] lo speed is unknown, defaulting to 1000 [ 562.633714][T18108] veth0_vlan: entered promiscuous mode [ 562.680593][T18310] chnl_net:caif_netlink_parms(): no params data found [ 562.758533][ T6840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.776327][ T6840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.785998][T18108] veth1_vlan: entered promiscuous mode [ 563.148835][T18384] netlink: 'syz.7.3289': attribute type 7 has an invalid length. [ 563.161705][T18384] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20000 [ 563.210262][T18310] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.225416][T18310] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.233637][T18310] bridge_slave_0: entered allmulticast mode [ 563.243950][T18310] bridge_slave_0: entered promiscuous mode [ 563.252607][T18388] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3290'. [ 563.265526][T18310] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.274181][T18310] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.282473][T18310] bridge_slave_1: entered allmulticast mode [ 563.291321][T18310] bridge_slave_1: entered promiscuous mode [ 563.393479][T18310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.485104][T18108] veth0_macvtap: entered promiscuous mode [ 563.503043][T18108] veth1_macvtap: entered promiscuous mode [ 563.519936][T18310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.598690][ T5839] Bluetooth: hci1: command tx timeout [ 563.791621][T18310] team0: Port device team_slave_0 added [ 563.869876][T18108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.895769][T18310] team0: Port device team_slave_1 added [ 563.912207][T18415] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3297'. [ 563.980190][T18108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.083940][T18422] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 564.213573][T18310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.256660][T18310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.306418][T18310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.319299][T18108] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.332314][T18108] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.341237][T18108] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.350849][T18108] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.368763][T18310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.407668][T18310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.474327][T18310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.609332][T18432] team0: Mode changed to "loadbalance" [ 564.650286][T18432] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3302'. [ 564.978887][T18436] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3300'. [ 565.058618][T18310] hsr_slave_0: entered promiscuous mode [ 565.071930][T18310] hsr_slave_1: entered promiscuous mode [ 565.095231][T18310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 565.132412][T18310] Cannot create hsr debugfs directory [ 565.142191][T18448] lo: entered allmulticast mode [ 565.160634][T18448] lo: left allmulticast mode [ 565.551315][T18466] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3311'. [ 565.594593][ T7914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.625794][ T7914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.677571][ T5839] Bluetooth: hci1: command tx timeout [ 565.774534][T18473] lo speed is unknown, defaulting to 1000 [ 565.794830][T18474] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 565.992080][ T6840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.020293][ T6840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.075852][T18484] netlink: 'syz.9.3313': attribute type 7 has an invalid length. [ 566.147420][ T5839] Bluetooth: hci0: command tx timeout [ 566.745331][ T7914] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.805732][T18510] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3321'. [ 567.071025][ T7914] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.403667][ T7914] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.757401][ T5839] Bluetooth: hci1: command tx timeout [ 567.844331][ T7914] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.876379][T18310] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 567.889590][T18310] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 567.901263][T18310] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 567.919291][T18310] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 567.992018][ T7914] bridge_slave_1: left allmulticast mode [ 567.998093][ T7914] bridge_slave_1: left promiscuous mode [ 568.003849][ T7914] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.014101][ T7914] bridge_slave_0: left allmulticast mode [ 568.021146][ T7914] bridge_slave_0: left promiscuous mode [ 568.028735][ T7914] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.446996][ T7914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.461658][ T7914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.472985][ T7914] bond0 (unregistering): Released all slaves [ 568.622962][T18310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.704044][T18310] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.720045][ T7920] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.727351][ T7920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.757537][ T6840] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.764824][ T6840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.785451][ T7914] hsr_slave_0: left promiscuous mode [ 568.794131][ T7914] hsr_slave_1: left promiscuous mode [ 568.805371][ T7914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.813487][ T7914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.822118][ T7914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.830035][ T7914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.856490][ T7914] veth1_macvtap: left promiscuous mode [ 568.862810][ T7914] veth0_macvtap: left promiscuous mode [ 568.869571][ T7914] veth1_vlan: left promiscuous mode [ 568.874956][ T7914] veth0_vlan: left promiscuous mode [ 569.821811][ T7914] team0 (unregistering): Port device team_slave_1 removed [ 569.893559][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 569.903455][ T7914] team0 (unregistering): Port device team_slave_0 removed [ 569.911275][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 569.912988][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 569.935900][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 569.943916][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 570.606466][T18538] lo speed is unknown, defaulting to 1000 [ 570.709554][T18550] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 570.813022][T18545] pimreg3: entered allmulticast mode [ 571.229634][T18574] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3335'. [ 571.559429][T18589] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3340'. [ 571.569305][T18589] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3340'. [ 571.581704][T18589] netlink: 'syz.7.3340': attribute type 1 has an invalid length. [ 571.591148][T18589] netlink: 10 bytes leftover after parsing attributes in process `syz.7.3340'. [ 571.651063][T18589] nbd: socks must be embedded in a SOCK_ITEM attr [ 571.654187][T18310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.659418][T18589] block nbd0: shutting down sockets [ 571.732354][T18538] chnl_net:caif_netlink_parms(): no params data found [ 571.750467][T18595] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3342'. [ 571.754307][T18597] sctp: [Deprecated]: syz.7.3342 (pid 18597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 571.754307][T18597] Use struct sctp_sack_info instead [ 571.762963][T18595] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3342'. [ 571.787848][T18598] sctp: [Deprecated]: syz.7.3342 (pid 18598) Use of struct sctp_assoc_value in delayed_ack socket option. [ 571.787848][T18598] Use struct sctp_sack_info instead [ 571.805761][T18599] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3341'. [ 571.873320][T18602] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3341'. [ 572.067447][ T5842] Bluetooth: hci4: command tx timeout [ 572.220929][T18538] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.257973][T18538] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.275723][T18538] bridge_slave_0: entered allmulticast mode [ 572.294575][T18538] bridge_slave_0: entered promiscuous mode [ 572.323565][T18538] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.361843][T18538] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.392530][T18538] bridge_slave_1: entered allmulticast mode [ 572.402732][T18538] bridge_slave_1: entered promiscuous mode [ 572.484628][T18633] sctp: [Deprecated]: syz.6.3349 (pid 18633) Use of int in max_burst socket option deprecated. [ 572.484628][T18633] Use struct sctp_assoc_value instead [ 572.571682][T18538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.629437][T18635] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3345'. [ 572.713858][T18538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.925509][T18538] team0: Port device team_slave_0 added [ 572.944283][T18538] team0: Port device team_slave_1 added [ 573.067296][T18538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.086515][T18538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.187420][T18538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.200716][T18538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.216774][T18538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.276829][T18538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.341367][T18664] netlink: 'syz.7.3354': attribute type 10 has an invalid length. [ 573.472161][T18671] x_tables: duplicate underflow at hook 4 [ 573.484781][T18671] netlink: 612 bytes leftover after parsing attributes in process `syz.6.3356'. [ 573.605137][T18538] hsr_slave_0: entered promiscuous mode [ 573.612026][T18538] hsr_slave_1: entered promiscuous mode [ 573.618683][T18538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.626326][T18538] Cannot create hsr debugfs directory [ 573.685645][T18310] veth0_vlan: entered promiscuous mode [ 573.888010][T18310] veth1_vlan: entered promiscuous mode [ 574.148028][ T5842] Bluetooth: hci4: command tx timeout [ 574.172078][T18310] veth0_macvtap: entered promiscuous mode [ 574.198741][T18310] veth1_macvtap: entered promiscuous mode [ 574.272254][T18310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.318878][T18310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.410612][T18310] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.430914][T18699] netlink: 'syz.6.3362': attribute type 1 has an invalid length. [ 574.446689][T18310] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.469084][T18310] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.485675][T18310] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.597593][T18700] bond5: (slave ip6gretap3): Enslaving as a backup interface with an up link [ 574.644955][T18699] veth7: entered promiscuous mode [ 575.020063][ T7913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.052758][ T7913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.138205][ T7914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.186530][ T7914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.221478][T18538] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 575.329206][T18538] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 575.374799][T18729] vlan0: entered promiscuous mode [ 575.381170][T18729] dummy0: entered promiscuous mode [ 575.398753][T18719] netlink: 'syz.6.3367': attribute type 12 has an invalid length. [ 575.413903][T18538] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 575.429308][T18538] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 575.524986][T18736] xt_hashlimit: size too large, truncated to 1048576 [ 576.122894][ T7907] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.170190][T18761] set match dimension is over the limit! [ 576.220318][T18754] tipc: Enabling of bearer rejected, failed to enable media [ 576.238469][ T5842] Bluetooth: hci4: command tx timeout [ 576.316215][ T7907] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.413021][T18538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.436158][ T7907] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.465871][T18538] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.502309][ T7907] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.523054][ T7913] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.530275][ T7913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.541769][ T7913] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.549037][ T7913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.667687][ T7907] bridge_slave_1: left allmulticast mode [ 576.673418][ T7907] bridge_slave_1: left promiscuous mode [ 576.680155][ T7907] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.690716][ T7907] bridge_slave_0: left allmulticast mode [ 576.696393][ T7907] bridge_slave_0: left promiscuous mode [ 576.702889][ T7907] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.104339][ T7907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.145565][ T7907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.185494][ T7907] bond0 (unregistering): Released all slaves [ 577.262733][T18777] __nla_validate_parse: 6 callbacks suppressed [ 577.262754][T18777] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3378'. [ 577.422973][T18783] netlink: 'syz.7.3381': attribute type 10 has an invalid length. [ 577.529689][T18785] netlink: 'syz.7.3383': attribute type 21 has an invalid length. [ 577.539024][T18785] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3383'. [ 577.548880][T18785] netlink: 'syz.7.3383': attribute type 5 has an invalid length. [ 577.557849][T18785] netlink: 'syz.7.3383': attribute type 6 has an invalid length. [ 577.565634][T18785] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3383'. [ 578.099385][T18538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.191950][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 578.203191][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 578.213167][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 578.230165][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 578.257362][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 578.307325][ T5842] Bluetooth: hci4: command tx timeout [ 578.518112][T18819] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3387'. [ 578.840923][ T7907] hsr_slave_0: left promiscuous mode [ 578.883171][ T7907] hsr_slave_1: left promiscuous mode [ 578.906301][ T7907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.924829][ T7907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.945273][ T7907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.967534][ T7907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.020715][ T7907] veth1_macvtap: left promiscuous mode [ 579.026365][ T7907] veth0_macvtap: left promiscuous mode [ 579.033354][ T7907] veth1_vlan: left promiscuous mode [ 579.039504][ T7907] veth0_vlan: left promiscuous mode [ 579.279461][T18840] netlink: 'syz.6.3391': attribute type 4 has an invalid length. [ 579.336204][T18841] netlink: 'syz.6.3391': attribute type 4 has an invalid length. [ 579.703249][ T7907] team0 (unregistering): Port device team_slave_1 removed [ 579.762965][ T7907] team0 (unregistering): Port device team_slave_0 removed [ 580.112337][T18850] netlink: 'syz.9.3394': attribute type 10 has an invalid length. [ 580.122743][T18850] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3394'. [ 580.308592][ T5842] Bluetooth: hci1: command tx timeout [ 580.425251][T18850] dummy0: entered promiscuous mode [ 580.450080][T18850] bridge0: port 1(dummy0) entered blocking state [ 580.463717][T18850] bridge0: port 1(dummy0) entered disabled state [ 580.497634][T18850] dummy0: entered allmulticast mode [ 580.554048][T18810] lo speed is unknown, defaulting to 1000 [ 580.572320][T18856] netlink: 'syz.7.3395': attribute type 10 has an invalid length. [ 581.065568][T18538] veth0_vlan: entered promiscuous mode [ 581.556204][T18538] veth1_vlan: entered promiscuous mode [ 581.678448][T18892] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3402'. [ 581.748628][T18894] Unsupported ieee802154 address type: 0 [ 581.777789][T18810] chnl_net:caif_netlink_parms(): no params data found [ 581.882236][T18538] veth0_macvtap: entered promiscuous mode [ 582.059566][T18538] veth1_macvtap: entered promiscuous mode [ 582.235472][T18538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 582.285622][T18810] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.304189][T18810] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.314667][T18810] bridge_slave_0: entered allmulticast mode [ 582.327147][T18810] bridge_slave_0: entered promiscuous mode [ 582.349017][T18922] tipc: Enabled bearer , priority 0 [ 582.356005][T18923] tipc: Enabling of bearer rejected, already enabled [ 582.387393][ T5842] Bluetooth: hci1: command tx timeout [ 582.410360][T18538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.430308][T18810] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.461013][T18810] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.479338][T18810] bridge_slave_1: entered allmulticast mode [ 582.488261][T18810] bridge_slave_1: entered promiscuous mode [ 582.552202][T18538] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.578982][T18538] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.588147][T18538] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.597301][T18538] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.690219][T18810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.916263][T18810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.990573][T18957] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3419'. [ 582.998124][T18934] lo speed is unknown, defaulting to 1000 [ 583.150089][T18810] team0: Port device team_slave_0 added [ 583.189641][T18810] team0: Port device team_slave_1 added [ 583.288137][ T7920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.308157][ T7920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.327912][T18810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.335672][T18810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.364082][T18810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.411362][T18810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.422501][T18810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.451513][T18810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.485126][ T7914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.505103][ T7914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.612874][T18810] hsr_slave_0: entered promiscuous mode [ 583.626197][T18810] hsr_slave_1: entered promiscuous mode [ 583.637256][T18810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.656424][T18810] Cannot create hsr debugfs directory [ 584.065318][T18972] batman_adv: batadv0: Adding interface: macvlan0 [ 584.075791][T18972] batman_adv: batadv0: Interface activated: macvlan0 [ 584.418309][T18982] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3425'. [ 584.425404][T18979] lo speed is unknown, defaulting to 1000 [ 584.477197][ T5842] Bluetooth: hci1: command tx timeout [ 584.720743][ T7909] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.812294][ T7909] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.898343][ T7909] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.980273][ T7909] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.100645][T18810] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 585.113304][T18810] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 585.134869][T18810] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 585.160206][T18810] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 585.200436][ T7909] bridge_slave_1: left allmulticast mode [ 585.206131][ T7909] bridge_slave_1: left promiscuous mode [ 585.212851][ T7909] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.224298][ T7909] bridge_slave_0: left allmulticast mode [ 585.230702][ T7909] bridge_slave_0: left promiscuous mode [ 585.238153][ T7909] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.647865][ T7909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.659875][ T7909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.675230][ T7909] bond0 (unregistering): Released all slaves [ 585.793475][T18810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.866155][T18810] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.896659][ T7914] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.903868][ T7914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.962590][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.969828][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.028582][ T7909] hsr_slave_0: left promiscuous mode [ 586.034593][ T7909] hsr_slave_1: left promiscuous mode [ 586.042014][ T7909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.050187][ T7909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.061001][ T7909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.069521][ T7909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.097563][ T7909] veth1_macvtap: left promiscuous mode [ 586.103164][ T7909] veth0_macvtap: left promiscuous mode [ 586.131261][ T7909] veth1_vlan: left promiscuous mode [ 586.138813][ T7909] veth0_vlan: left promiscuous mode [ 586.347920][T18996] netlink: 'syz.6.3429': attribute type 30 has an invalid length. [ 586.547501][ T5842] Bluetooth: hci1: command tx timeout [ 586.632803][T18998] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3432'. [ 586.719744][T19002] nbd: must specify at least one socket [ 586.952504][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 586.965381][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 586.977545][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 587.018549][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 587.037291][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 587.465311][ T7909] team0 (unregistering): Port device team_slave_1 removed [ 587.519385][ T7909] team0 (unregistering): Port device team_slave_0 removed [ 587.994343][T18996] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 588.218942][T19021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3434'. [ 588.288598][T19009] lo speed is unknown, defaulting to 1000 [ 588.634591][T19036] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3438'. [ 589.002579][T19051] netlink: 558 bytes leftover after parsing attributes in process `syz.9.3441'. [ 589.039077][T19053] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3443'. [ 589.105170][T19055] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3443'. [ 589.117109][ T5842] Bluetooth: hci4: command tx timeout [ 589.139761][T19009] chnl_net:caif_netlink_parms(): no params data found [ 589.180843][T18810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.194167][ T5842] Bluetooth: hci4: command tx timeout [ 591.522360][T19009] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.542655][T19009] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.575501][T19009] bridge_slave_0: entered allmulticast mode [ 591.585666][T19009] bridge_slave_0: entered promiscuous mode [ 591.609205][T19009] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.616618][T19009] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.624257][T19009] bridge_slave_1: entered allmulticast mode [ 591.642392][T19009] bridge_slave_1: entered promiscuous mode [ 591.759487][T19009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.809941][T19009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.910335][T19009] team0: Port device team_slave_0 added [ 591.921449][T19009] team0: Port device team_slave_1 added [ 592.011847][T19109] netlink: 21 bytes leftover after parsing attributes in process `syz.6.3455'. [ 592.041582][T19009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.060946][T19009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.105268][T19009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.140131][T19109] gretap0: entered promiscuous mode [ 592.149989][T19009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.177390][T19009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.238447][T19009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.256482][T18810] veth0_vlan: entered promiscuous mode [ 592.301972][T18810] veth1_vlan: entered promiscuous mode [ 592.330138][ T30] audit: type=1800 audit(1744967400.270:71): pid=19118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3458" name="memory.events" dev="tmpfs" ino=3909 res=0 errno=0 [ 592.388044][ T30] audit: type=1800 audit(1744967400.270:72): pid=19118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3458" name="memory.events" dev="tmpfs" ino=3909 res=0 errno=0 [ 592.410293][ T30] audit: type=1800 audit(1744967400.270:73): pid=19118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3458" name="memory.events" dev="tmpfs" ino=3909 res=0 errno=0 [ 592.432770][ T30] audit: type=1800 audit(1744967400.270:74): pid=19118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3458" name="memory.events" dev="tmpfs" ino=3909 res=0 errno=0 [ 592.499611][ T30] audit: type=1800 audit(1744967400.270:75): pid=19118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3458" name="memory.events" dev="tmpfs" ino=3909 res=0 errno=0 [ 592.538628][T19009] hsr_slave_0: entered promiscuous mode [ 592.549520][ T30] audit: type=1800 audit(1744967400.270:76): pid=19118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3458" name="memory.events" dev="tmpfs" ino=3909 res=0 errno=0 [ 592.571132][ T30] audit: type=1800 audit(1744967400.270:77): pid=19118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3458" name="memory.events" dev="tmpfs" ino=3909 res=0 errno=0 [ 592.579972][T19009] hsr_slave_1: entered promiscuous mode [ 592.594856][ T30] audit: type=1800 audit(1744967400.270:78): pid=19118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3458" name="memory.events" dev="tmpfs" ino=3909 res=0 errno=0 [ 592.622789][T19009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 592.632411][T19009] Cannot create hsr debugfs directory [ 592.667411][ T30] audit: type=1800 audit(1744967400.270:79): pid=19118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3458" name="memory.events" dev="tmpfs" ino=3909 res=0 errno=0 [ 592.692912][ T30] audit: type=1800 audit(1744967400.270:80): pid=19118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3458" name="memory.events" dev="tmpfs" ino=3909 res=0 errno=0 [ 592.723134][T19128] sctp: [Deprecated]: syz.7.3461 (pid 19128) Use of int in max_burst socket option. [ 592.723134][T19128] Use struct sctp_assoc_value instead [ 593.071688][T18810] veth0_macvtap: entered promiscuous mode [ 593.259333][T18810] veth1_macvtap: entered promiscuous mode [ 593.277380][ T5842] Bluetooth: hci4: command tx timeout [ 593.549933][T19158] netlink: 'syz.9.3470': attribute type 39 has an invalid length. [ 593.568715][T18810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.612130][T19160] netlink: 'syz.6.3469': attribute type 3 has an invalid length. [ 593.887514][T18810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.012068][T18810] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.072539][T18810] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.130918][T18810] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.188416][T18810] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.821719][ T7913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.855852][ T7913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.953430][T19009] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 594.981560][T19009] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 595.017929][T19009] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 595.090231][T19009] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 595.090237][ T7913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.090259][ T7913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.208471][T19204] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3483'. [ 595.347141][ T5842] Bluetooth: hci4: command tx timeout [ 595.422698][T19207] syzkaller0: entered promiscuous mode [ 595.429339][T19207] syzkaller0: entered allmulticast mode [ 595.453740][T19209] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3484'. [ 595.610618][T19216] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3488'. [ 595.620614][T19216] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3488'. [ 597.742714][T19214] lo speed is unknown, defaulting to 1000 [ 597.913252][ T7907] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.130571][ T7907] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.239740][T19224] lo speed is unknown, defaulting to 1000 [ 598.245571][T19009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.549040][ T7907] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.658559][ T7907] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.700889][T19009] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.721762][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.729014][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.771512][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.778727][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.927619][ T7907] bridge_slave_1: left allmulticast mode [ 598.938390][ T7907] bridge_slave_1: left promiscuous mode [ 598.949074][ T7907] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.000257][ T7907] bridge_slave_0: left allmulticast mode [ 599.005960][ T7907] bridge_slave_0: left promiscuous mode [ 599.037756][ T7907] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.555927][T19237] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3493'. [ 599.897451][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 599.916528][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 599.925403][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 599.933970][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 599.944045][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 599.985516][ T7907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.001513][ T7907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.013745][ T7907] bond0 (unregistering): Released all slaves [ 600.096441][T19255] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3496'. [ 600.165427][T19252] lo speed is unknown, defaulting to 1000 [ 600.581447][T19273] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3500'. [ 600.654589][T19275] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3500'. [ 600.733195][T19273] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 600.753703][T19273] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 600.780713][ T7907] hsr_slave_0: left promiscuous mode [ 600.788250][ T7907] hsr_slave_1: left promiscuous mode [ 600.794726][ T7907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.804804][ T7907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.814591][ T7907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.823080][ T7907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.860252][ T7907] veth1_macvtap: left promiscuous mode [ 600.865901][ T7907] veth0_macvtap: left promiscuous mode [ 600.872430][ T7907] veth1_vlan: left promiscuous mode [ 600.878833][ T7907] veth0_vlan: left promiscuous mode [ 601.635977][ T7907] team0 (unregistering): Port device team_slave_1 removed [ 601.699460][ T7907] team0 (unregistering): Port device team_slave_0 removed [ 601.987428][ T5839] Bluetooth: hci1: command tx timeout [ 602.369811][T19009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.404184][T19252] chnl_net:caif_netlink_parms(): no params data found [ 602.760889][T19252] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.789424][T19252] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.818043][T19252] bridge_slave_0: entered allmulticast mode [ 602.826229][T19252] bridge_slave_0: entered promiscuous mode [ 602.838029][T19252] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.845457][T19252] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.864273][T19252] bridge_slave_1: entered allmulticast mode [ 602.878455][T19252] bridge_slave_1: entered promiscuous mode [ 603.040315][T19252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.060705][T19252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.108235][T19312] No such timeout policy "syz0" [ 603.202305][T19252] team0: Port device team_slave_0 added [ 603.249640][T19252] team0: Port device team_slave_1 added [ 603.402397][T19322] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3509'. [ 603.439491][T19252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.450423][T19252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.477073][T19252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.505318][T19252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.533904][T19252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.576296][T19252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.796547][T19252] hsr_slave_0: entered promiscuous mode [ 603.815939][T19252] hsr_slave_1: entered promiscuous mode [ 603.826723][T19252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 603.834540][T19252] Cannot create hsr debugfs directory [ 603.972910][T19343] netlink: 'syz.7.3515': attribute type 1 has an invalid length. [ 604.050900][T19009] veth0_vlan: entered promiscuous mode [ 604.051515][T19344] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3515'. [ 604.077607][ T5839] Bluetooth: hci1: command tx timeout [ 604.084151][T19009] veth1_vlan: entered promiscuous mode [ 604.130883][T19347] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3517'. [ 604.261685][T19347] macvlan0: entered promiscuous mode [ 604.282415][T19347] bridge0: entered promiscuous mode [ 604.323392][T19353] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3518'. [ 604.368850][T19353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3518'. [ 604.632897][T19009] veth0_macvtap: entered promiscuous mode [ 604.718833][T19370] tun0: tun_chr_ioctl cmd 35111 [ 604.735544][T19009] veth1_macvtap: entered promiscuous mode [ 604.821745][T19372] netlink: 'syz.7.3524': attribute type 1 has an invalid length. [ 604.830242][T19372] netlink: 220 bytes leftover after parsing attributes in process `syz.7.3524'. [ 604.831233][T19373] netlink: 'syz.7.3524': attribute type 1 has an invalid length. [ 604.843667][T19372] netlink: 'syz.7.3524': attribute type 1 has an invalid length. [ 604.887898][T19373] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 604.934966][T19009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.042577][T19383] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3526'. [ 605.080851][T19383] IPv6: sit1: Disabled Multicast RS [ 605.099316][T19009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.169815][T19009] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.179518][T19009] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.189817][T19009] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.220073][T19009] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.480165][T19393] tipc: Resetting bearer [ 605.493447][T19393] bond5: (slave ip6gretap3): Releasing backup interface [ 605.533284][T19393] batman_adv: batadv0: Interface deactivated: macvlan0 [ 605.548184][T19393] batman_adv: batadv0: Removing interface: macvlan0 [ 605.579658][T19411] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3534'. [ 605.941576][ T7907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.950920][ T7907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.959214][T19419] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 606.111602][T19252] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 606.139037][ T7913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.139800][T19252] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 606.156025][ T5839] Bluetooth: hci1: command tx timeout [ 606.177351][ T7913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.177884][T19252] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 606.213131][T19252] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 606.243851][T19432] bridge_slave_0: entered promiscuous mode [ 606.261482][T19432] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3539'. [ 606.300547][T19431] bridge_slave_0: left promiscuous mode [ 606.571868][T19252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.635452][T19252] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.764194][ T7920] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.854141][ T6840] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.861432][ T6840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.970202][ T7920] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.019980][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.027247][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.139023][ T7920] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.233112][ T7920] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.403844][ T7920] bridge_slave_1: left allmulticast mode [ 607.417208][ T7920] bridge_slave_1: left promiscuous mode [ 607.423066][ T7920] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.449980][ T7920] bridge_slave_0: left allmulticast mode [ 607.456313][ T7920] bridge_slave_0: left promiscuous mode [ 607.470872][ T7920] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.914678][ T7920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.926169][ T7920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.942276][ T7920] bond0 (unregistering): Released all slaves [ 608.019265][T19252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.229216][ T5839] Bluetooth: hci1: command tx timeout [ 608.336231][ T7920] hsr_slave_0: left promiscuous mode [ 608.342391][ T7920] hsr_slave_1: left promiscuous mode [ 608.348598][ T7920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.356036][ T7920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.364290][ T7920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.374247][ T7920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.402731][ T7920] veth1_macvtap: left promiscuous mode [ 608.409023][ T7920] veth0_macvtap: left promiscuous mode [ 608.414754][ T7920] veth1_vlan: left promiscuous mode [ 608.421926][ T7920] veth0_vlan: left promiscuous mode [ 609.344090][T19484] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3546'. [ 609.433301][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 609.455994][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 609.480066][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 609.503240][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 609.515255][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 609.553170][ T7920] team0 (unregistering): Port device team_slave_1 removed [ 609.663547][ T7920] team0 (unregistering): Port device team_slave_0 removed [ 610.315122][T19252] veth0_vlan: entered promiscuous mode [ 610.400245][T19252] veth1_vlan: entered promiscuous mode [ 610.445517][T19486] lo speed is unknown, defaulting to 1000 [ 610.522107][T19498] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3548'. [ 610.720834][T19509] netlink: 'syz.7.3551': attribute type 31 has an invalid length. [ 610.734954][T19252] veth0_macvtap: entered promiscuous mode [ 610.761541][T19509] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3551'. [ 610.792994][T19252] veth1_macvtap: entered promiscuous mode [ 610.868187][T19516] netlink: 'syz.7.3553': attribute type 1 has an invalid length. [ 610.877785][T19516] netlink: 236 bytes leftover after parsing attributes in process `syz.7.3553'. [ 610.893196][T19516] NCSI netlink: No device for ifindex 813332851 [ 610.963821][T19520] netlink: 'syz.7.3555': attribute type 3 has an invalid length. [ 611.034910][T19252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.200303][T19252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.255669][T19532] macsec0: entered promiscuous mode [ 611.262133][T19532] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 611.271838][T19532] macsec0: entered allmulticast mode [ 611.277349][T19532] mac80211_hwsim hwsim17 wlan0: entered allmulticast mode [ 611.290045][T19252] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.300836][T19252] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.310929][T19252] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.320508][T19252] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.355915][T19535] macsec1: entered promiscuous mode [ 611.363119][T19535] macsec1: entered allmulticast mode [ 611.547761][T19486] chnl_net:caif_netlink_parms(): no params data found [ 611.587154][ T5839] Bluetooth: hci4: command tx timeout [ 611.609014][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3561'. [ 611.908569][ T7913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.929225][ T7913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.185153][T19566] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3566'. [ 612.196469][T19573] xt_hashlimit: max too large, truncated to 1048576 [ 612.215570][T19573] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 612.223777][T19486] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.232559][T19486] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.241731][T19486] bridge_slave_0: entered allmulticast mode [ 612.248080][T19567] FAULT_INJECTION: forcing a failure. [ 612.248080][T19567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.250438][T19486] bridge_slave_0: entered promiscuous mode [ 612.297029][T19567] CPU: 0 UID: 0 PID: 19567 Comm: syz.6.3566 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 612.297064][T19567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 612.297077][T19567] Call Trace: [ 612.297086][T19567] [ 612.297096][T19567] dump_stack_lvl+0x241/0x360 [ 612.297135][T19567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 612.297166][T19567] ? __pfx__printk+0x10/0x10 [ 612.297209][T19567] should_fail_ex+0x424/0x570 [ 612.297238][T19567] _copy_to_iter+0x1f6/0x1c90 [ 612.297285][T19567] ? __pfx__copy_to_iter+0x10/0x10 [ 612.297318][T19567] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 612.297348][T19567] ? skb_recv_datagram+0x26e/0x310 [ 612.297379][T19567] __skb_datagram_iter+0x101/0x940 [ 612.297410][T19567] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 612.297446][T19567] skb_copy_datagram_iter+0xd1/0x250 [ 612.297478][T19567] netlink_recvmsg+0x2d4/0x1180 [ 612.297522][T19567] ? __pfx_netlink_recvmsg+0x10/0x10 [ 612.297553][T19567] ? __lock_acquire+0xad5/0xd80 [ 612.297585][T19567] ? __pfx_aa_sk_perm+0x10/0x10 [ 612.297615][T19567] ? aa_sock_msg_perm+0x91/0x160 [ 612.297643][T19567] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 612.297667][T19567] ? __pfx_netlink_recvmsg+0x10/0x10 [ 612.297701][T19567] sock_recvmsg+0x22f/0x280 [ 612.297737][T19567] sock_read_iter+0x2c6/0x3e0 [ 612.297768][T19567] ? __pfx_sock_read_iter+0x10/0x10 [ 612.297813][T19567] ? __lock_acquire+0xad5/0xd80 [ 612.297847][T19567] do_iter_readv_writev+0x71f/0x9d0 [ 612.297885][T19567] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 612.297923][T19567] ? bpf_lsm_file_permission+0x9/0x10 [ 612.297953][T19567] ? rw_verify_area+0x246/0x630 [ 612.297985][T19567] vfs_readv+0x2b5/0xa80 [ 612.298026][T19567] ? __pfx_vfs_readv+0x10/0x10 [ 612.298070][T19567] ? __fget_files+0x2a/0x420 [ 612.298092][T19567] ? __fget_files+0x39d/0x420 [ 612.298110][T19567] ? __fget_files+0x2a/0x420 [ 612.298141][T19567] do_readv+0x1b8/0x360 [ 612.298168][T19567] ? __pfx_do_readv+0x10/0x10 [ 612.298196][T19567] ? do_syscall_64+0xb6/0x210 [ 612.298221][T19567] do_syscall_64+0xf3/0x210 [ 612.298242][T19567] ? clear_bhb_loop+0x45/0xa0 [ 612.298268][T19567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.298289][T19567] RIP: 0033:0x7f76bb38e169 [ 612.298310][T19567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.298334][T19567] RSP: 002b:00007f76bc1a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 612.298357][T19567] RAX: ffffffffffffffda RBX: 00007f76bb5b6080 RCX: 00007f76bb38e169 [ 612.298373][T19567] RDX: 0000000000000001 RSI: 0000200000002980 RDI: 0000000000000003 [ 612.298387][T19567] RBP: 00007f76bc1a2090 R08: 0000000000000000 R09: 0000000000000000 [ 612.298400][T19567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.298413][T19567] R13: 0000000000000001 R14: 00007f76bb5b6080 R15: 00007fff35ee4bf8 [ 612.298447][T19567] [ 612.298620][T19567] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3566'. [ 612.608373][T19486] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.623730][T19582] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 612.648331][T19486] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.655752][T19486] bridge_slave_1: entered allmulticast mode [ 612.703108][T19486] bridge_slave_1: entered promiscuous mode [ 612.721855][T19576] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3570'. [ 612.723432][ T7920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.740501][ T7920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.765865][T19587] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3572'. [ 612.820738][T19590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.890862][T19594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.907701][T19590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.971973][T19594] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3572'. [ 613.015125][T19486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.037905][T19486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.141250][T19486] team0: Port device team_slave_0 added [ 613.164934][T19486] team0: Port device team_slave_1 added [ 613.304128][T19592] lo speed is unknown, defaulting to 1000 [ 613.324526][T19600] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3575'. [ 613.335663][T19486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.343802][T19486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.394417][T19486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.461148][T19486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.473586][T19486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.501840][T19486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.677016][ T5839] Bluetooth: hci4: command tx timeout [ 613.717837][ T2953] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.947477][ T2953] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.020662][T19486] hsr_slave_0: entered promiscuous mode [ 614.027960][T19486] hsr_slave_1: entered promiscuous mode [ 614.034485][T19486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 614.042162][T19486] Cannot create hsr debugfs directory [ 614.064926][ T2953] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.160010][ T2953] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.374263][ T2953] bridge_slave_1: left allmulticast mode [ 614.380238][ T2953] bridge_slave_1: left promiscuous mode [ 614.386060][ T2953] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.398852][ T2953] bridge_slave_0: left allmulticast mode [ 614.404567][ T2953] bridge_slave_0: left promiscuous mode [ 614.420807][ T2953] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.856551][ T2953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.875298][ T2953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 614.939213][ T2953] bond0 (unregistering): Released all slaves [ 615.011179][T19617] netlink: 'syz.6.3578': attribute type 3 has an invalid length. [ 615.152818][T19616] 8021q: adding VLAN 0 to HW filter on device bond5 [ 615.159932][T19625] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3578'. [ 615.169852][T19616] bridge0: port 2(bond5) entered blocking state [ 615.176283][T19616] bridge0: port 2(bond5) entered disabled state [ 615.205856][T19616] bond5: entered allmulticast mode [ 615.231327][T19616] bond5: entered promiscuous mode [ 615.375021][T19629] gtp1: entered promiscuous mode [ 615.548915][T19637] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3583'. [ 615.570735][T19637] sctp: [Deprecated]: syz.9.3583 (pid 19637) Use of struct sctp_assoc_value in delayed_ack socket option. [ 615.570735][T19637] Use struct sctp_sack_info instead [ 615.602169][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 615.610995][T19637] sctp: [Deprecated]: syz.9.3583 (pid 19637) Use of struct sctp_assoc_value in delayed_ack socket option. [ 615.610995][T19637] Use struct sctp_sack_info instead [ 615.630209][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 615.651486][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 615.671137][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 615.681347][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 615.746939][ T5839] Bluetooth: hci4: command tx timeout [ 615.755404][ T2953] hsr_slave_0: left promiscuous mode [ 615.757801][T19643] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3585'. [ 615.770527][ T2953] hsr_slave_1: left promiscuous mode [ 615.787079][ T2953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.794532][ T2953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.809496][ T2953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.821489][ T2953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.858197][ T2953] veth1_macvtap: left promiscuous mode [ 615.863808][ T2953] veth0_macvtap: left promiscuous mode [ 615.870292][ T2953] veth1_vlan: left promiscuous mode [ 615.875651][ T2953] veth0_vlan: left promiscuous mode [ 616.480429][ T2953] team0 (unregistering): Port device team_slave_1 removed [ 616.531685][ T2953] team0 (unregistering): Port device team_slave_0 removed [ 617.034597][T19637] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.3583'. [ 617.293551][T19640] lo speed is unknown, defaulting to 1000 [ 617.637977][T19486] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 617.667694][T19486] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 617.694776][T19486] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 617.747566][ T5839] Bluetooth: hci1: command tx timeout [ 617.786503][T19486] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 617.828115][ T5839] Bluetooth: hci4: command tx timeout [ 618.083729][T19679] sctp: [Deprecated]: syz.9.3593 (pid 19679) Use of int in maxseg socket option. [ 618.083729][T19679] Use struct sctp_assoc_value instead [ 618.322908][T19640] chnl_net:caif_netlink_parms(): no params data found [ 618.565997][T19697] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3598'. [ 618.630842][T19697] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3598'. [ 618.801537][T19705] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3601'. [ 618.814829][T19640] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.838673][T19640] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.865939][T19640] bridge_slave_0: entered allmulticast mode [ 618.905693][T19640] bridge_slave_0: entered promiscuous mode [ 619.035734][T19640] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.043874][T19640] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.052138][T19640] bridge_slave_1: entered allmulticast mode [ 619.065899][T19640] bridge_slave_1: entered promiscuous mode [ 619.262218][T19640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.332542][T19486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.431619][T19640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.620559][T19640] team0: Port device team_slave_0 added [ 619.636450][T19640] team0: Port device team_slave_1 added [ 619.662221][T19486] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.749505][T19640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.775726][T19640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.817696][T19640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.827066][ T5839] Bluetooth: hci1: command tx timeout [ 619.831907][T19640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.850551][T19640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.894206][T19640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.924755][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.931977][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.065828][ T6840] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.073103][ T6840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.190837][T19486] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 620.259138][T19486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 620.409151][T19758] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.3613'. [ 620.466417][T19640] hsr_slave_0: entered promiscuous mode [ 620.494743][T19640] hsr_slave_1: entered promiscuous mode [ 620.507509][T19640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 620.515133][T19640] Cannot create hsr debugfs directory [ 620.534343][T19759] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.3613'. [ 620.879888][T19779] netlink: 196 bytes leftover after parsing attributes in process `syz.6.3618'. [ 620.925770][T19779] caif0: entered allmulticast mode [ 621.071560][T19784] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 621.086400][T19785] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3619'. [ 621.140003][T19785] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3619'. [ 621.391259][T19486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.532833][T19787] xt_hashlimit: size too large, truncated to 1048576 [ 621.908763][ T5839] Bluetooth: hci1: command tx timeout [ 622.082030][ T2152] hid-multitouch 0005:0457:0009.0002: unknown main item tag 0x0 [ 622.121810][ T2152] hid-multitouch 0005:0457:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 622.187623][T19807] netlink: 'syz.9.3623': attribute type 5 has an invalid length. [ 622.653924][T19486] veth0_vlan: entered promiscuous mode [ 622.667922][T19640] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 622.726173][T19486] veth1_vlan: entered promiscuous mode [ 622.836122][T19825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 622.858591][T19640] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 622.890116][T19826] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 622.978527][T19640] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 623.032478][T19640] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 623.103583][T19831] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3630'. [ 623.209503][T19486] veth0_macvtap: entered promiscuous mode [ 623.264896][T19840] dvmrp3: entered allmulticast mode [ 623.288511][T19486] veth1_macvtap: entered promiscuous mode [ 623.358753][T19840] dvmrp3: left allmulticast mode [ 623.462404][T19486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.479869][T19847] netlink: 'syz.7.3634': attribute type 1 has an invalid length. [ 623.485913][T19486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.488573][T19847] netlink: 'syz.7.3634': attribute type 2 has an invalid length. [ 623.513195][T19847] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3634'. [ 623.518166][T19486] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.576625][T19486] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.608526][T19849] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3635'. [ 623.618559][T19486] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.629642][T19486] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.638799][T19849] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3635'. [ 623.790216][T19640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.800917][T19857] netlink: 'syz.7.3637': attribute type 3 has an invalid length. [ 623.987255][ T5839] Bluetooth: hci1: command tx timeout [ 624.055619][T19640] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.123550][ T7920] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.130891][ T7920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.227893][ T6171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.241928][T19865] netlink: 'syz.9.3638': attribute type 16 has an invalid length. [ 624.273774][ T7920] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.281162][ T7920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.291071][T19865] netlink: 'syz.9.3638': attribute type 17 has an invalid length. [ 624.302742][ T6171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.518574][T19865] bridge0: port 1(dummy0) entered blocking state [ 624.525177][T19865] bridge0: port 1(dummy0) entered forwarding state [ 624.564524][ T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 624.628037][T19865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 624.696106][ T5892] lo speed is unknown, defaulting to 1000 [ 624.737445][ T5892] syz1: Port: 1 Link ACTIVE [ 624.851368][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.898002][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.932757][ T6171] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 624.985858][ T6171] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 625.079407][T19871] netlink: 'syz.6.3640': attribute type 10 has an invalid length. [ 625.140520][T19871] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3640'. [ 625.189052][ T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 625.277797][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 625.335799][T19871] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 625.493297][T19873] lo speed is unknown, defaulting to 1000 [ 625.889996][T19886] tipc: Enabled bearer , priority 0 [ 625.900882][T19886] syzkaller0: entered promiscuous mode [ 625.906411][T19886] syzkaller0: entered allmulticast mode [ 625.920171][T19886] tipc: Resetting bearer [ 626.181594][ T6171] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.269333][T19886] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3643'. [ 626.283613][T19888] ªªªªªª: renamed from lo (while UP) [ 626.299902][T19885] tipc: Resetting bearer [ 626.329443][T19885] tipc: Disabling bearer [ 626.490386][ T6171] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.603378][ T6171] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.645111][T19640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.769436][ T6171] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.938208][ T6171] bridge_slave_1: left allmulticast mode [ 626.943958][ T6171] bridge_slave_1: left promiscuous mode [ 626.966311][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.979653][ T6171] bridge_slave_0: left allmulticast mode [ 626.985446][ T6171] bridge_slave_0: left promiscuous mode [ 626.991599][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.416617][ T6171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.434830][ T6171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.445287][ T6171] bond0 (unregistering): Released all slaves [ 627.505701][T19640] veth0_vlan: entered promiscuous mode [ 627.529332][T19640] veth1_vlan: entered promiscuous mode [ 627.628788][T19640] veth0_macvtap: entered promiscuous mode [ 627.639453][T19640] veth1_macvtap: entered promiscuous mode [ 627.662375][T19640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.673852][T19640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.685727][T19640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.710951][T19640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.734480][T19640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.746600][T19640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.789413][T19640] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.799067][T19640] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.808315][T19640] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.819741][T19640] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.860042][ T6171] hsr_slave_0: left promiscuous mode [ 627.866212][ T6171] hsr_slave_1: left promiscuous mode [ 627.872656][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.882734][ T6171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.891304][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.898855][ T6171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.925058][ T6171] veth1_macvtap: left promiscuous mode [ 627.931017][ T6171] veth0_macvtap: left promiscuous mode [ 627.936930][ T6171] veth1_vlan: left promiscuous mode [ 627.942380][ T6171] veth0_vlan: left promiscuous mode [ 628.324616][T19909] netlink: 165 bytes leftover after parsing attributes in process `syz.7.3647'. [ 628.390686][T19912] netlink: 'syz.9.3646': attribute type 39 has an invalid length. [ 628.455300][T19915] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3644'. [ 628.861713][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 628.872688][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 628.881861][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 628.900976][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 628.910829][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 629.035218][ T6171] team0 (unregistering): Port device team_slave_1 removed [ 629.085538][ T6171] team0 (unregistering): Port device team_slave_0 removed [ 629.267035][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 629.613083][T19910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3644'. [ 629.631856][T19909] pim6reg: entered allmulticast mode [ 629.656194][T19919] pim6reg: left allmulticast mode [ 629.871393][T19925] lo speed is unknown, defaulting to 1000 [ 629.923757][T19932] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 629.986365][ T7909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.014638][ T7909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.183854][T19936] tun0: tun_chr_ioctl cmd 2147767520 [ 630.258167][ T7917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.266061][ T7917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.673138][T19925] chnl_net:caif_netlink_parms(): no params data found [ 630.855046][T19925] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.863015][T19925] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.874133][T19925] bridge_slave_0: entered allmulticast mode [ 630.884800][T19925] bridge_slave_0: entered promiscuous mode [ 630.902252][T19925] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.927419][T19925] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.934795][T19925] bridge_slave_1: entered allmulticast mode [ 630.958073][ T5839] Bluetooth: hci4: command tx timeout [ 630.968878][T19925] bridge_slave_1: entered promiscuous mode [ 631.189094][ T6171] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.229811][T19925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.345104][T19925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.391369][T19925] team0: Port device team_slave_0 added [ 631.410724][T19925] team0: Port device team_slave_1 added [ 631.453734][ T6171] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.484735][T19925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.491832][T19925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.519631][T19925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.534571][T19925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.543880][T19925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.570423][T19925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.596246][ T6171] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.654544][T19925] hsr_slave_0: entered promiscuous mode [ 631.663433][T19925] hsr_slave_1: entered promiscuous mode [ 631.670308][T19925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 631.678756][T19925] Cannot create hsr debugfs directory [ 631.702189][ T6171] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.889991][ T6171] bridge_slave_1: left allmulticast mode [ 631.895693][ T6171] bridge_slave_1: left promiscuous mode [ 631.902896][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.912475][ T6171] bridge_slave_0: left allmulticast mode [ 631.918655][ T6171] bridge_slave_0: left promiscuous mode [ 631.924414][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.321880][T19970] netlink: 'syz.9.3660': attribute type 9 has an invalid length. [ 633.027759][ T5839] Bluetooth: hci4: command tx timeout [ 633.160272][ T6171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.210531][ T6171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.244481][ T6171] bond0 (unregistering): Released all slaves [ 633.356449][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 633.374164][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 633.402949][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 633.434198][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 633.468764][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 633.634092][T20002] bpq0: entered promiscuous mode [ 633.642548][T20002] bpq0: entered allmulticast mode [ 633.835827][T19999] lo speed is unknown, defaulting to 1000 [ 634.121774][T20025] openvswitch: netlink: Actions may not be safe on all matching packets [ 634.167361][ T6171] hsr_slave_0: left promiscuous mode [ 634.178549][ T6171] hsr_slave_1: left promiscuous mode [ 634.184638][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.228993][ T6171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.260871][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.291919][ T6171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.355417][ T6171] veth1_macvtap: left promiscuous mode [ 634.366590][ T6171] veth0_macvtap: left promiscuous mode [ 634.372684][ T6171] veth1_vlan: left promiscuous mode [ 634.378334][ T6171] veth0_vlan: left promiscuous mode [ 634.985949][ T6171] team0 (unregistering): Port device team_slave_1 removed [ 635.040010][ T6171] team0 (unregistering): Port device team_slave_0 removed [ 635.107644][ T5842] Bluetooth: hci4: command tx timeout [ 635.507501][ T5842] Bluetooth: hci1: command tx timeout [ 635.704288][T20036] tipc: Enabling of bearer rejected, failed to enable media [ 635.841938][T20042] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3671'. [ 635.932777][T20045] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3673'. [ 636.280011][T19925] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 636.399041][T19925] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 636.441086][T20076] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 636.467162][T19925] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 636.520627][T19925] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 636.556075][T20079] netlink: 'syz.7.3678': attribute type 3 has an invalid length. [ 636.564888][T20079] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3678'. [ 636.574932][T20076] lo speed is unknown, defaulting to 1000 [ 636.580066][T19999] chnl_net:caif_netlink_parms(): no params data found [ 637.187689][ T5842] Bluetooth: hci4: command tx timeout [ 637.362770][T19999] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.393726][T20099] openvswitch: netlink: IP tunnel TTL not specified. [ 637.396358][T19999] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.422470][T19999] bridge_slave_0: entered allmulticast mode [ 637.442777][T19999] bridge_slave_0: entered promiscuous mode [ 637.462702][T19999] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.475965][T19999] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.480542][T20103] [ 637.484371][T19999] bridge_slave_1: entered allmulticast mode [ 637.485368][T20103] ====================================================== [ 637.493645][T19999] bridge_slave_1: entered promiscuous mode [ 637.498264][T20103] WARNING: possible circular locking dependency detected [ 637.498278][T20103] 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 Not tainted [ 637.498291][T20103] ------------------------------------------------------ [ 637.498301][T20103] syz.9.3685/20103 is trying to acquire lock: [ 637.531376][T20103] ffff88807ea99a18 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x240a/0x3f60 [ 637.543593][T20103] [ 637.543593][T20103] but task is already holding lock: [ 637.550964][T20103] ffff888032931158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x1a7/0x600 [ 637.560831][T20103] [ 637.560831][T20103] which lock already depends on the new lock. [ 637.560831][T20103] [ 637.571236][T20103] [ 637.571236][T20103] the existing dependency chain (in reverse order) is: [ 637.580255][T20103] [ 637.580255][T20103] -> #1 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}: [ 637.588556][T20103] lock_acquire+0x116/0x2f0 [ 637.593599][T20103] _raw_spin_lock+0x2e/0x40 [ 637.598638][T20103] sch_direct_xmit+0x1a7/0x600 [ 637.603941][T20103] __dev_queue_xmit+0x1a9c/0x3f60 [ 637.609496][T20103] ip6_finish_output2+0x1296/0x1750 [ 637.615230][T20103] ip6_finish_output+0x421/0x840 [ 637.620719][T20103] NF_HOOK+0xa0/0x440 [ 637.625345][T20103] mld_sendpack+0x84a/0xdc0 [ 637.630403][T20103] mld_ifc_work+0x7d9/0xd90 [ 637.635439][T20103] process_scheduled_works+0xac3/0x18e0 [ 637.641520][T20103] worker_thread+0x870/0xd50 [ 637.646677][T20103] kthread+0x7b7/0x940 [ 637.651288][T20103] ret_from_fork+0x4b/0x80 [ 637.656337][T20103] ret_from_fork_asm+0x1a/0x30 [ 637.661641][T20103] [ 637.661641][T20103] -> #0 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}: [ 637.672017][T20103] validate_chain+0xa69/0x24e0 [ 637.677314][T20103] __lock_acquire+0xad5/0xd80 [ 637.682521][T20103] lock_acquire+0x116/0x2f0 [ 637.687559][T20103] _raw_spin_lock+0x2e/0x40 [ 637.692598][T20103] __dev_queue_xmit+0x240a/0x3f60 [ 637.698242][T20103] ip6_finish_output2+0x1296/0x1750 [ 637.703980][T20103] ip6_finish_output+0x421/0x840 [ 637.709450][T20103] ip6_send_skb+0x1b1/0x3b0 [ 637.714487][T20103] icmp6_send+0x182e/0x23c0 [ 637.719517][T20103] ip6_link_failure+0x3c/0x4f0 [ 637.724807][T20103] ip_tunnel_xmit+0x186a/0x2560 [ 637.730186][T20103] __gre_xmit+0x1d1/0x260 [ 637.735044][T20103] erspan_xmit+0xac8/0x1320 [ 637.740077][T20103] dev_hard_start_xmit+0x2d9/0x830 [ 637.745727][T20103] sch_direct_xmit+0x2b2/0x600 [ 637.751026][T20103] __qdisc_run+0xc0d/0x2180 [ 637.756062][T20103] __dev_queue_xmit+0x10e2/0x3f60 [ 637.761660][T20103] ip6_finish_output2+0x1296/0x1750 [ 637.767421][T20103] ip6_finish_output+0x421/0x840 [ 637.772908][T20103] ipvlan_queue_xmit+0xb68/0x1460 [ 637.778466][T20103] ipvlan_start_xmit+0x4a/0x150 [ 637.783856][T20103] dev_hard_start_xmit+0x2d9/0x830 [ 637.789586][T20103] __dev_queue_xmit+0x1b80/0x3f60 [ 637.795145][T20103] ip6_finish_output2+0x1296/0x1750 [ 637.800887][T20103] ip6_finish_output+0x421/0x840 [ 637.806380][T20103] ip6_send_skb+0x1b1/0x3b0 [ 637.811418][T20103] udp_v6_send_skb+0xbee/0x1850 [ 637.816806][T20103] udpv6_sendmsg+0x21a4/0x3070 [ 637.822101][T20103] __sock_sendmsg+0xef/0x270 [ 637.827234][T20103] ____sys_sendmsg+0x523/0x860 [ 637.832538][T20103] __sys_sendmmsg+0x3a0/0x7b0 [ 637.837746][T20103] __x64_sys_sendmmsg+0xa0/0xb0 [ 637.843134][T20103] do_syscall_64+0xf3/0x210 [ 637.848163][T20103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.854604][T20103] [ 637.854604][T20103] other info that might help us debug this: [ 637.854604][T20103] [ 637.864920][T20103] Possible unsafe locking scenario: [ 637.864920][T20103] [ 637.872377][T20103] CPU0 CPU1 [ 637.877761][T20103] ---- ---- [ 637.883182][T20103] lock(&qdisc_xmit_lock_key#3); [ 637.888239][T20103] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2); [ 637.897892][T20103] lock(&qdisc_xmit_lock_key#3); [ 637.905460][T20103] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2); [ 637.912589][T20103] [ 637.912589][T20103] *** DEADLOCK *** [ 637.912589][T20103] [ 637.920742][T20103] 11 locks held by syz.9.3685/20103: [ 637.926026][T20103] #0: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: ip6_send_skb+0xfd/0x3b0 [ 637.935202][T20103] #1: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x1750 [ 637.945154][T20103] #2: ffffffff8ed3df80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f9/0x3f60 [ 637.955114][T20103] #3: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x1750 [ 637.965007][T20103] #4: ffffffff8ed3df80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f9/0x3f60 [ 637.974963][T20103] #5: ffff888032931158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x1a7/0x600 [ 637.985272][T20103] #6: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: icmp6_send+0x281/0x23c0 [ 637.994446][T20103] #7: ffff88814d3f0998 (k-slock-AF_INET6){+.-.}-{3:3}, at: icmp6_send+0xf12/0x23c0 [ 638.003866][T20103] #8: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: ip6_send_skb+0xfd/0x3b0 [ 638.013034][T20103] #9: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x1750 [ 638.022930][T20103] #10: ffffffff8ed3df80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f9/0x3f60 [ 638.032970][T20103] [ 638.032970][T20103] stack backtrace: [ 638.038864][T20103] CPU: 1 UID: 0 PID: 20103 Comm: syz.9.3685 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 638.038889][T20103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 638.038901][T20103] Call Trace: [ 638.038908][T20103] [ 638.038918][T20103] dump_stack_lvl+0x241/0x360 [ 638.038948][T20103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 638.038973][T20103] ? __pfx__printk+0x10/0x10 [ 638.039002][T20103] print_circular_bug+0x2e1/0x300 [ 638.039023][T20103] check_noncircular+0x142/0x160 [ 638.039044][T20103] validate_chain+0xa69/0x24e0 [ 638.039063][T20103] ? stack_trace_save+0x11a/0x1d0 [ 638.039090][T20103] __lock_acquire+0xad5/0xd80 [ 638.039118][T20103] lock_acquire+0x116/0x2f0 [ 638.039140][T20103] ? __dev_queue_xmit+0x240a/0x3f60 [ 638.039167][T20103] _raw_spin_lock+0x2e/0x40 [ 638.039189][T20103] ? __dev_queue_xmit+0x240a/0x3f60 [ 638.039210][T20103] __dev_queue_xmit+0x240a/0x3f60 [ 638.039238][T20103] ? __dev_queue_xmit+0x2f9/0x3f60 [ 638.039258][T20103] ? neigh_resolve_output+0x450/0x740 [ 638.039285][T20103] ? __pfx___dev_queue_xmit+0x10/0x10 [ 638.039306][T20103] ? neigh_resolve_output+0x450/0x740 [ 638.039331][T20103] ? read_seqbegin+0x15c/0x2c0 [ 638.039354][T20103] ? lockdep_hardirqs_on+0x9d/0x150 [ 638.039381][T20103] ? read_seqbegin+0x202/0x2c0 [ 638.039406][T20103] ? __pfx_read_seqbegin+0x10/0x10 [ 638.039430][T20103] ? neigh_resolve_output+0x2e5/0x740 [ 638.039455][T20103] ? eth_header+0x11c/0x1f0 [ 638.039473][T20103] ? __asan_memcpy+0x40/0x70 [ 638.039506][T20103] ip6_finish_output2+0x1296/0x1750 [ 638.039546][T20103] ? __lock_acquire+0xad5/0xd80 [ 638.039568][T20103] ? ip6_finish_output2+0x701/0x1750 [ 638.039598][T20103] ? __pfx_ip6_finish_output2+0x10/0x10 [ 638.039625][T20103] ? ip6_mtu+0x81/0x3f0 [ 638.039647][T20103] ? ip6_mtu+0x81/0x3f0 [ 638.039670][T20103] ip6_finish_output+0x421/0x840 [ 638.039696][T20103] ip6_send_skb+0x1b1/0x3b0 [ 638.039720][T20103] ? ip6_send_skb+0xfd/0x3b0 [ 638.039751][T20103] icmp6_send+0x182e/0x23c0 [ 638.039768][T20103] ? __lock_acquire+0xad5/0xd80 [ 638.039789][T20103] ? icmp6_send+0x281/0x23c0 [ 638.039814][T20103] ? __pfx_icmp6_send+0x10/0x10 [ 638.039830][T20103] ? __lock_acquire+0xad5/0xd80 [ 638.039860][T20103] ? ip6_neigh_lookup+0x158/0x5d0 [ 638.039882][T20103] ? ip6_neigh_lookup+0x158/0x5d0 [ 638.039901][T20103] ? __pfx_ip6_neigh_lookup+0x10/0x10 [ 638.039921][T20103] ip6_link_failure+0x3c/0x4f0 [ 638.039940][T20103] ? dst_link_failure+0x107/0x160 [ 638.039960][T20103] ip_tunnel_xmit+0x186a/0x2560 [ 638.039987][T20103] ? __pfx_hlock_conflict+0x10/0x10 [ 638.040006][T20103] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 638.040024][T20103] ? gre_build_header+0x384/0xbb0 [ 638.040044][T20103] ? __pfx_gre_build_header+0x10/0x10 [ 638.040065][T20103] __gre_xmit+0x1d1/0x260 [ 638.040082][T20103] ? __pfx___gre_xmit+0x10/0x10 [ 638.040097][T20103] ? __asan_memset+0x23/0x50 [ 638.040117][T20103] ? erspan_build_header+0x1a5/0x370 [ 638.040137][T20103] erspan_xmit+0xac8/0x1320 [ 638.040160][T20103] ? __pfx_erspan_xmit+0x10/0x10 [ 638.040188][T20103] dev_hard_start_xmit+0x2d9/0x830 [ 638.040213][T20103] sch_direct_xmit+0x2b2/0x600 [ 638.040240][T20103] ? __pfx_sch_direct_xmit+0x10/0x10 [ 638.040268][T20103] __qdisc_run+0xc0d/0x2180 [ 638.040290][T20103] ? do_raw_spin_lock+0x151/0x370 [ 638.040317][T20103] __dev_queue_xmit+0x10e2/0x3f60 [ 638.040344][T20103] ? __dev_queue_xmit+0x2f9/0x3f60 [ 638.040363][T20103] ? neigh_resolve_output+0x450/0x740 [ 638.040389][T20103] ? __pfx___dev_queue_xmit+0x10/0x10 [ 638.040408][T20103] ? neigh_resolve_output+0x450/0x740 [ 638.040432][T20103] ? read_seqbegin+0x15c/0x2c0 [ 638.040454][T20103] ? lockdep_hardirqs_on+0x9d/0x150 [ 638.040480][T20103] ? read_seqbegin+0x202/0x2c0 [ 638.040504][T20103] ? __pfx_read_seqbegin+0x10/0x10 [ 638.040527][T20103] ? neigh_resolve_output+0x2e5/0x740 [ 638.040551][T20103] ? eth_header+0x11c/0x1f0 [ 638.040567][T20103] ? __asan_memcpy+0x40/0x70 [ 638.040599][T20103] ip6_finish_output2+0x1296/0x1750 [ 638.040644][T20103] ? ip6_finish_output2+0x701/0x1750 [ 638.040675][T20103] ? __pfx_ip6_finish_output2+0x10/0x10 [ 638.040703][T20103] ? ip6_mtu+0x81/0x3f0 [ 638.040730][T20103] ? ip6_mtu+0x81/0x3f0 [ 638.040755][T20103] ip6_finish_output+0x421/0x840 [ 638.040781][T20103] ipvlan_queue_xmit+0xb68/0x1460 [ 638.040798][T20103] ? __lock_acquire+0xad5/0xd80 [ 638.040824][T20103] ? __pfx_ipvlan_queue_xmit+0x10/0x10 [ 638.040840][T20103] ? __pfx_skb_csum_hwoffload_help+0x10/0x10 [ 638.040862][T20103] ? netif_skb_features+0x930/0xca0 [ 638.040887][T20103] ipvlan_start_xmit+0x4a/0x150 [ 638.040906][T20103] dev_hard_start_xmit+0x2d9/0x830 [ 638.040932][T20103] __dev_queue_xmit+0x1b80/0x3f60 [ 638.040960][T20103] ? __dev_queue_xmit+0x2f9/0x3f60 [ 638.040984][T20103] ? __pfx___dev_queue_xmit+0x10/0x10 [ 638.041005][T20103] ? neigh_resolve_output+0x450/0x740 [ 638.041030][T20103] ? read_seqbegin+0x15c/0x2c0 [ 638.041052][T20103] ? lockdep_hardirqs_on+0x9d/0x150 [ 638.041079][T20103] ? read_seqbegin+0x202/0x2c0 [ 638.041104][T20103] ? __pfx_read_seqbegin+0x10/0x10 [ 638.041128][T20103] ? neigh_resolve_output+0x2e5/0x740 [ 638.041153][T20103] ? eth_header+0x11c/0x1f0 [ 638.041170][T20103] ? __asan_memcpy+0x40/0x70 [ 638.041204][T20103] ip6_finish_output2+0x1296/0x1750 [ 638.041232][T20103] ? ip6_finish_output2+0x701/0x1750 [ 638.041264][T20103] ? __pfx_ip6_finish_output2+0x10/0x10 [ 638.041293][T20103] ? ip6_mtu+0x81/0x3f0 [ 638.041317][T20103] ? ip6_mtu+0x81/0x3f0 [ 638.041340][T20103] ip6_finish_output+0x421/0x840 [ 638.041367][T20103] ip6_send_skb+0x1b1/0x3b0 [ 638.041393][T20103] ? ip6_send_skb+0xfd/0x3b0 [ 638.041419][T20103] udp_v6_send_skb+0xbee/0x1850 [ 638.041452][T20103] udpv6_sendmsg+0x21a4/0x3070 [ 638.041479][T20103] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 638.041506][T20103] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 638.041532][T20103] ? __lock_acquire+0xad5/0xd80 [ 638.041563][T20103] ? inet_send_prepare+0x1b7/0x260 [ 638.041583][T20103] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 638.041609][T20103] ? inet_send_prepare+0x1b7/0x260 [ 638.041629][T20103] ? do_raw_spin_unlock+0x13c/0x8b0 [ 638.041652][T20103] ? inet_send_prepare+0x1b7/0x260 [ 638.041676][T20103] __sock_sendmsg+0xef/0x270 [ 638.041702][T20103] ____sys_sendmsg+0x523/0x860 [ 638.041732][T20103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 638.041750][T20103] ? __fget_files+0x2a/0x420 [ 638.041767][T20103] ? __fget_files+0x2a/0x420 [ 638.041787][T20103] __sys_sendmmsg+0x3a0/0x7b0 [ 638.041812][T20103] ? __pfx___sys_sendmmsg+0x10/0x10 [ 638.041848][T20103] ? futex_hash+0x1e/0x1f0 [ 638.041866][T20103] ? futex_wait+0x287/0x370 [ 638.041889][T20103] ? __pfx_futex_wait+0x10/0x10 [ 638.041911][T20103] ? file_init_path+0x3b/0x570 [ 638.041935][T20103] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 638.041962][T20103] ? do_futex+0x37c/0x5a0 [ 638.041992][T20103] ? do_sock_setsockopt+0x3ea/0x710 [ 638.042024][T20103] __x64_sys_sendmmsg+0xa0/0xb0 [ 638.042045][T20103] do_syscall_64+0xf3/0x210 [ 638.042062][T20103] ? clear_bhb_loop+0x45/0xa0 [ 638.042081][T20103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.042099][T20103] RIP: 0033:0x7fb9c218e169 [ 638.042116][T20103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.042131][T20103] RSP: 002b:00007fb9c30c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 638.042152][T20103] RAX: ffffffffffffffda RBX: 00007fb9c23b5fa0 RCX: 00007fb9c218e169 [ 638.042165][T20103] RDX: 0000000000000001 RSI: 0000200000000980 RDI: 0000000000000006 [ 638.042177][T20103] RBP: 00007fb9c2210a68 R08: 0000000000000000 R09: 0000000000000000 [ 638.042189][T20103] R10: 0000000004004000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 638.042200][T20103] R13: 0000000000000000 R14: 00007fb9c23b5fa0 R15: 00007ffe2be26d48 [ 638.042220][T20103] [ 638.794424][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 638.804201][ T5842] Bluetooth: hci1: command tx timeout [ 640.667322][T20103] syz.9.3685 (20103) used greatest stack depth: 17456 bytes left [ 640.871114][ T5842] Bluetooth: hci1: command tx timeout [ 641.064397][ T6171] bridge_slave_1: left allmulticast mode [ 641.079605][ T6171] bridge_slave_1: left promiscuous mode [ 641.085371][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.095893][ T6171] bridge_slave_0: left allmulticast mode [ 641.102466][ T6171] bridge_slave_0: left promiscuous mode [ 641.108258][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.165047][ T6171] bond0 (unregistering): Released all slaves [ 642.086518][ T6171] bridge_slave_1: left allmulticast mode [ 642.092256][ T6171] bridge_slave_1: left promiscuous mode [ 642.098388][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.109403][ T6171] bridge_slave_0: left allmulticast mode [ 642.115051][ T6171] bridge_slave_0: left promiscuous mode [ 642.122159][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.133817][ T6171] bond5: left allmulticast mode [ 642.138853][ T6171] bond5: left promiscuous mode [ 642.143749][ T6171] bridge0: port 2(bond5) entered disabled state [ 642.151840][ T6171] dummy0: left allmulticast mode [ 642.157378][ T6171] bridge0: port 1(dummy0) entered disabled state [ 642.251792][ T6171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.262282][ T6171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.273958][ T6171] bond0 (unregistering): Released all slaves [ 642.797421][ T6171] tipc: Disabling bearer [ 642.956083][ T6171] bond1 (unregistering): Released all slaves [ 643.056452][ T6171] bond0 (unregistering): Released all slaves [ 643.066120][ T6171] bond2 (unregistering): Released all slaves [ 643.236252][ T6171] bond3 (unregistering): Released all slaves [ 643.245994][ T6171] bond4 (unregistering): Released all slaves [ 643.341961][ T6171] bond5 (unregistering): Released all slaves [ 643.586346][ T6171] tipc: Disabling bearer [ 643.994570][ T6171] bond1 (unregistering): Released all slaves [ 644.095734][ T6171] bond2 (unregistering): Released all slaves [ 644.200144][ T6171] bond3 (unregistering): Released all slaves [ 644.308073][ T6171] bond4 (unregistering): Released all slaves [ 644.320884][ T6171] bond0 (unregistering): Released all slaves [ 644.330664][ T6171] bond5 (unregistering): Released all slaves [ 644.413769][ T6171] : left promiscuous mode [ 644.458054][ T6171] tipc: Disabling bearer [ 644.463462][ T6171] tipc: Left network mode [ 644.484875][ T6171] tipc: Disabling bearer [ 644.497758][ T6171] tipc: Left network mode [ 644.575770][ T6171] mac80211_hwsim hwsim17 wlan0 (unregistering): left allmulticast mode [ 644.584301][ T6171] mac80211_hwsim hwsim17 wlan0 (unregistering): left promiscuous mode [ 644.830729][ T6171] hsr_slave_0: left promiscuous mode [ 644.836498][ T6171] hsr_slave_1: left promiscuous mode [ 644.842407][ T6171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.850144][ T6171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.862329][ T6171] hsr_slave_0: left promiscuous mode [ 644.869387][ T6171] hsr_slave_1: left promiscuous mode [ 644.982473][ T6171] team0 (unregistering): Port device team_slave_1 removed [ 645.013974][ T6171] team0 (unregistering): Port device team_slave_0 removed [ 645.147417][ T6171] pim6reg (unregistering): left allmulticast mode [ 645.669917][ T6171] pimreg3 (unregistering): left allmulticast mode [ 645.704657][ T6171] pim6reg9 (unregistering): left allmulticast mode [ 645.739326][ T6171] pim6reg (unregistering): left allmulticast mode [ 645.952229][ T6171] smc: removing net device veth1_to_team with user defined pnetid SYZ2 [ 646.139727][ T1206] lo speed is unknown, defaulting to 1000 [ 646.145587][ T1206] infiniband syz1: ib_query_port failed (-19) [ 646.697390][ T6171] IPVS: stop unused estimator thread 0... [ 646.704170][ T6171] IPVS: stop unused estimator thread 0...