last executing test programs: 2.507202604s ago: executing program 1 (id=11): pipe(0x0) shutdown(0xffffffffffffffff, 0x1) r0 = socket$packet(0x11, 0x0, 0x300) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe8050001000600000005000500020000000500040000000000090002"], 0x5c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002100000009001f0070687930000000000c0005000000000000000000050020"], 0x34}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e23, 0x33, @loopback, 0xe68}}, 0x0, 0x0, 0x5, 0x0, "2cb4dc53455d71aa67000b90023847db64bee2d8e7d5f49448ab9c35260cda343fa3d3af413189d2726a972603a87c9554f79e73defc23d4cbd98dd5f567bb406037b4251506748db4d6497b639e5f38"}, 0xd8) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) socket$inet6(0xa, 0x6, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f7000280050001"], 0x58}}, 0x0) r5 = socket(0x840000000002, 0x3, 0x7) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2c8, 0x3, 0x2d0, 0x140, 0x229, 0x240, 0x140, 0x4c000000, 0x238, 0x328, 0x328, 0x238, 0x328, 0x3, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge0\x00'}, 0x0, 0xd8, 0x140, 0x0, {0x0, 0x700}, [@common=@set={{0x40}, {{0x0, [0x6, 0x1, 0x4, 0x0, 0x5], 0x1}}}, @common=@inet=@ecn={{0x28}, {0x11}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x400, 0x71a5, 0x40, 'syz1\x00', 'syz1\x00', {0x401}}}}, {{@ip={@loopback, @empty, 0xff000000, 0xff, 'dvmrp1\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x21}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "41e9"}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', r6, 0x4, 0x9, 0xaf, 0x7, 0x20, @empty, @mcast1, 0x760, 0x20, 0xf0, 0xffff}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000b640000000c0a03000000000000000000070000000900020073797a31000000000900010073797a300000000038000380340000800800034000000002280002802400028008000180fffffffb08000180fffffffb08"], 0xf8}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) vmsplice(r8, &(0x7f0000000680), 0x10000000000000ef, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'syztnl0\x00', r9, 0x4, 0x9, 0xd, 0x10000, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x1, 0x20, 0x9, 0x1ff}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40400c1}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000001600)={0x29, 0x7, 0x7f, 0x8, 0x81, 0x1, 0x3, 0x21, 0x5, 0x0, 0xd, 0x5, 0xd, 0x1f}, 0xe) 1.965823536s ago: executing program 3 (id=16): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$phonet(0x23, 0x2, 0x1) sendmmsg(r4, &(0x7f0000008500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8d1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r3, 0x121, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x24}}, 0x4010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x10}}]}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x30c, r8, 0x200, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x14c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x12c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x5c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @disassoc={{{}, {0x9}, @device_b, @device_a, @from_mac, {0x8, 0x44}}, 0x18, @val={0x8c, 0x18, {0x401, "9dae95044405", @long="8e80ca53f89013e0eb491492f166a144"}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x630}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.707833209s ago: executing program 3 (id=18): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket(0x40000000002, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000000)=0x10004, 0xfe90) r4 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000001380)=0x2, 0x4) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="01fb412268828d88"], 0xa7) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x20, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x4}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x44}}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func_proto]}, {0x0, [0x2e, 0x2e, 0x30]}}, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x4, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, r7, 0x0, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1200000004000000040000000e"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) 1.593038164s ago: executing program 4 (id=20): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x0, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) connect$netrom(r1, &(0x7f0000000000)={{0x3, @null, 0x1}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) 1.579781534s ago: executing program 0 (id=21): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, r1, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) (async) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000001c0)={'ip6erspan0\x00'}) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x1c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f0000000040)=r4, 0x4) (async, rerun: 64) setsockopt$sock_attach_bpf(r5, 0x1, 0x44, &(0x7f00000000c0), 0x4) (async, rerun: 64) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x68, 0x30, 0xc808e8d6fcb00ba1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async, rerun: 64) r9 = socket$kcm(0x10, 0x3, 0x10) (rerun: 64) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.528533704s ago: executing program 1 (id=22): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)='1', 0x1}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7ffbc72b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.487281353s ago: executing program 4 (id=23): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x4, 0x12) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x20, 0x1410, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x844) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)={0x1ac, r7, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1186ccd3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "ed0a794d3c7844fc6f3ed475f9ab01fad5c1a8c3eff17484bdedb40e2aaef6"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x59, 0x3, "03d05126b8983d61f4440abde3beaac6ffb045ef53404a8107ec80c38eebadb41bbcd581d99319a473fdd4dbf288cc34acbb4ff2cecaec4d0a2e7e39ec0f47ebf3e9ebe17c290a332704a7e9afd79731b5bcd7e222"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x30}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}]}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4004}, 0x40000c1) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000003180)=@req3={0x801000, 0xfffff4e7, 0x1000, 0x3a, 0x178, 0xf84, 0x3}, 0x1c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r8}, &(0x7f0000000400), &(0x7f0000000440)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r8}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000071112b00000000008510000002000000850000002e00000095000007000000009500a50500000000", @ANYRES16, @ANYRESOCT], &(0x7f0000000080)='GPL\x00', 0x9, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) 1.3535072s ago: executing program 1 (id=25): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a0067412abd7000ffdbdf250a0000000000000008"], 0x28}, 0x1, 0x4c00000000000000}, 0x24000080) accept4(r0, &(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f00000001c0)=0x80, 0x0) recvmmsg(r1, &(0x7f00000009c0), 0x0, 0x3, 0x0) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05000000270000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xb8bd, 0x5, 0x3ff, 0x1806, r0, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0xc, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f00000000c0), 0x20000000}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0) 1.301389453s ago: executing program 0 (id=26): connect$caif(0xffffffffffffffff, &(0x7f0000000100)=@util={0x25, "482223ceb7f899bb9ae0c0a083a88124"}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000300)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x6e}, @ringbuf_query, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x1e, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.147517725s ago: executing program 2 (id=27): r0 = socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e00000002"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000400)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) r2 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$sock_netdev_private(r2, 0x89f4, &(0x7f0000000300)="86794928ce0fd5cdf6be9791a2f3b8bb9f04c8c94542f42aad215ab49899c2b7a985cf647aaa6fd2ca255a29a4cd595382b9d5b719856526fd678d70fc80a008cabcf896d23b88b9e00c7af75fbe4910b1f8311e4dbfeada05a67cd12bdea7da64bcbdb2ebfa39bcde22851b599a6ea4e1713f81c5fc6b3e65731d") (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="3103000000000000000008000000050003"], 0x1c}}, 0x0) (async) listen(r2, 0x0) socket$tipc(0x1e, 0x5, 0x0) (async) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x448c0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYRES16=r2, @ANYRES16=r1, @ANYBLOB="010000002000ffdbdf251400000018000180140002006e657464657673696d3000000000000005001800010000000500190000000000080005007706"], 0x4c}}, 0x4000) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa"], 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000011850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0x4, 0x0, &(0x7f00000002c0)="0000f4d3", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) accept4(r2, 0x0, 0x0, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r7, &(0x7f0000000280)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100), 0xffffffae}], 0x1}}], 0x1, 0x4000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100fffffffffcdbdf251200000008000300", @ANYRES32=r9, @ANYBLOB="0a00060008021100000100008000000ec2a200000600bd00feff000004008100"], 0x3c}}, 0x0) 1.146917481s ago: executing program 0 (id=28): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0xb}, @map_fd={0x18, 0x6}], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xc, 0x0, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x1, 0x1, 0x9, 0x5}, {0x5, 0x3, 0xd, 0xa}, {0x0, 0x1, 0x0, 0x5}, {0x5, 0x3, 0xf, 0x1}], 0x10, 0x7, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex, 0x32, 0x1, 0x85, &(0x7f0000000180)=[0x0], 0x1, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0}, 0x40) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000ac0)={0x0, 0xffff, 0x1, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000ec0)={r4, 0x5, 0x1, [0x5d0, 0x9, 0x100, 0x6, 0x2], [0x5, 0xffffffffffffffff, 0x3, 0xffff, 0x6, 0xdf, 0x6, 0x2, 0x1, 0x5, 0x100000000, 0x6, 0x9, 0x10, 0x3, 0x2, 0x1, 0x8, 0xff, 0x1, 0xfff, 0x3ff, 0x5, 0xfffffffffffffffb, 0xe3, 0xd, 0x2, 0x2, 0x7, 0x3ff, 0x100, 0xdd8e, 0x8, 0xb, 0x9, 0xbc38, 0x9, 0xfffffffffffffff7, 0xb, 0x9, 0x7, 0xfffffffffffffffa, 0x8, 0x9, 0x51, 0x1f, 0x8000000000000001, 0x40, 0x9, 0xd419, 0xfffffffffffffffc, 0x0, 0x8001, 0x0, 0x3, 0x3, 0x9c7, 0x2, 0x100, 0x2, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffbff, 0x8000, 0x0, 0xfffffffffffffff8, 0x8, 0x4, 0x7, 0xd30, 0x8000000000000000, 0x92b, 0x8001, 0x2, 0xffc2, 0x8, 0x10001, 0x5, 0x6, 0x6, 0x400, 0x4, 0x2f6, 0x8, 0x4, 0x2, 0x4, 0x7, 0x54e5, 0x200000, 0x7ff, 0x8, 0x8, 0x800, 0x9, 0x87fa, 0x0, 0x6, 0x7fff, 0x1, 0x1000, 0x0, 0x5, 0x200, 0x7, 0xbe8, 0x80000000, 0x6, 0x6, 0x8, 0x80000000, 0x101, 0x100000001, 0x7, 0x6, 0x20000786, 0x1, 0x100000000, 0x2]}) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000280), 0x2, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@cgroup=r5, r2, 0x17, 0x22, r2, @void, @void, @void, @value, r3}, 0x20) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000000800130000170000080014"], 0x4c}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)}], 0x1}, 0x0) close(r6) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f0000000140)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, r12, 0x325, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}]}]}, 0x28}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='thermal_power_allocator_pid\x00', r1, 0x0, 0x9}, 0x18) (async) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x6, &(0x7f0000000300)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_fd={0x18, 0xa}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x82, &(0x7f0000000380)=""/130, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000004c0)=[{0x5, 0x1, 0xd, 0xb}, {0x3, 0x1, 0xd, 0xb}, {0x3, 0x4, 0x4, 0x9}, {0x1, 0x3, 0x3, 0x2}, {0x4, 0x1, 0xb, 0x1}], 0x10, 0xc2c, @void, @value}, 0x94) (async) ppoll(&(0x7f0000000040)=[{}, {0xffffffffffffffff, 0x110}, {0xffffffffffffffff, 0x2210}, {0xffffffffffffffff, 0x40c9}, {}, {0xffffffffffffffff, 0x8031}, {0xffffffffffffffff, 0x1040}], 0x7, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x4]}, 0xfffffcc9) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@fallback=r0, r1, 0x24, 0x14, 0x0, @void, @value=r13, @void, @void, r3}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x400}]}}}, {0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xe8}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) 1.146131149s ago: executing program 4 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) pipe(&(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x400, 0x6101, 0x0, {0x0, 0x0, 0x0, r3, 0x56760003ded1ddd3, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x20000899}, 0x4040000) 1.133393217s ago: executing program 1 (id=30): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000002000000000000000000000000000095000000000000008f5733bbd5f8b4101fda52fb19ffffffff2069ff594ca1a7c697596205794d5ea4"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000280)='>', 0x1}, {&(0x7f0000001780)="8bca76bf4595a166db752b8b8e0003a832b42a1df43c02f0e18218726fb877a6a1fdb24c907419e865374e2cc5cf5d59ec8db598c7306f2d3e4930751c04a8c3c9bac93ca7ae9fc6465644c2e2f301513fcbd81cba8fbdab24f01cf34391977841ad8a1bdd395bf3e9636449dddecbb080eb7eeb434297d8b3aeacea6af19b533429c9397989c4cfd61052cad6bee79eb9bfccd9906be09d4e8ef8b6ee7436c96c437562b996fb6c2b27e33ffba59533e0ff336f5c8b415ebbb069eedf853bd7b02543e2ce165b8ed6365d0d4887e9f88662c380d4dd0bec7f65cbc5b1e9ffc6b5d421ce761b0849c0e03c7174853ce1edae0c6026517853f7f5e917c5a21f9c3ecfc3eab8b623f1572b926cc8c986f16eefa2bff0d504c1ac377fd8881358eb5778a6b20935088f1a71586bcffecfbfeaafecabc4fefd34493b6c29eab658e1a8ffa0d735bcfd0391daba396b00585d520ee91700471d4bfacfd9f109220ae98a518bb44a7e1b4373152291b3a6935bf9d1a222e6eb368fbf687a7386808202e7a23076b80b17833676ed50674ea0f90a61360db110e1e88fd8653013cdd6f68f10abf1348c9941f07889bfa51f829706243ec943e50d672960715a8375424a28e1f69e33bad1d5306771b05a63fcbac8600fbf27b95b7ef344214dc5157075a07dedd1625f177b45b39a1cfc49c63cc9aabffd4c9f83129687e4e473f9f7a19ad624dec300e69bc32d8deb596112fe6fc89f3a1855067ed5c3bfa1465311dd8a8fad34a8aa01a77141ef667dfe89b5dc830e476af4b584731c62430e7f865dca212bfb7e7dba398e0021bee96bf389cf74e273cde9a1aa44607164abf68de428c8cd2fada1aef9c0265a67f20cca3d9eb56f7ff14c6ffcc68c8792492b4d3459ab1d3297ffd49bc60e954043e3d96e8f9d3af7a6283855cd67eb0a5510126ab3d49eddbc51d7273ed39a4823151e15c2682c6681f238bd320d6bcd513c97c34490401c039fd8f6cb8daa4e394f25c235a7cc39e1ca928584dc52dca2f5b731e492998948eb88328e460ff70cadb329346c577d3d42fc660a3e698890321332803e0c7893470baf3a79c6e08a082dd7a0ce45806a055fa24c2d1b6c709539c323b3aa6e5173e3ddb532d00728304b983f4d0f8211b496800d3c07a04f7cc53e89fd528562723d7664b08ed7c94b60740bd682514df7d1b22f7818e66009073158925e9a29f0dbf9d6d7cd392d31e8fbd3ca87be05b1625a313fffe27a4af822b5446778b5f9dc8a6e1ef7569018ea37e44657e23095341dd632377ff79bc4826d307570b3a42cca3087a0570aae6d64799dec9e24da9cd2f718c5a36a2effa9674d1c76e59c36acd2559e1f73e4989195e7b32607392e985e460130cfbb510d65661d8545f84ec8fb722db92b43eec2931a9f4b9a2ad3180af47623c5e2a34339e05e8c0ad684edde94fd0ea813c91957be084f5ea0af3410abd44a55cc5356b8976c783a3cdb8f09bede75d06d4f02233273d127acf2d721d680951c99a5eb152c1f72e1292fdc34a75903ea15b98fe849fb9e24e684d3fd499502d1c0edfa4a2fb54551339395dfbc647247730777faf8cd77ef2f6fb0bc9579138c3f0f728b81fe30690659d39c20a67ce104ffd4a6c48bd16d6a7d50a6d16205d51675b4590f41d560ebcec31ef7f121ebea2493f64fa34359554f712aa1ec4b4e9792952d47cd9940d3d35df8517fb7af356b9d5ed6cc0dc35498fc3859e7e74ac019f23db3194a25dbd4f4a7f3864414a82ae1ab9f5ec4ae7e4e1b30e77c82ca3dada29732f75c9c715211eba43c9a38e4f865ab6646df7e4393b6fa49614f4b40d60eaa97da0cef36977bc2bafa0e997a8f89fd85d04d43ccc15f6c5c9a806a889f3394bdbcbcbdb0df811d31ce8c42d0c2da586daa5cb4de8f3a1a9e30ea36fe4839cdf5c28fe63096bf4dc4291f0afe988dc890af1f4bb1d6dfc2fa29d50780362b2aa5671eebd30c24e38c9da244d8d74ec09b0310e400876610a4c1f6f9a74389d2f84aee44abe0e20035a82b51368a818bdb608fcc319efe3b37de512af21c7d2655e9cc34344e2549f7db1a7c36936660b505d24ba22d049cf734fa01a75721e1c54f8107a0de071b2fb0770034f8fd3894954adf5af9ab27df737edfd92b981120101168da497ea3d03e873037a2274083d01c363943492ab048a6c8388d5fb2c8dc2b7bb5ef660b9969d534e3d26cf55ebde1451dcff5c1c3ebc9caeb88f4ef1b0b16469295bcd19916c5c4594a334e340856e690c9e9759454946fe514fcbab7f9b53338cb6ece18add9fd00189ff8d64420309564a66a220e7eec5e5450243509ea5b2641e09da070fa4257825a5d9e778fcbddaa2efb6322ba3beac4ed7bdf0de53914dcbb0e69a8ab0cb3362cd2ce976fd5c97fde2c953779eb3e31d5b14021b2c360c67ebb9fa926c5326a1775f4cdd9fca4e50abbc30b68598ca81fe75ee56ed8a576ca24437416ff017cfee66d97bdec85f085d87d35868e76e9510c7a6af536ae1d18a318005e68046d21e7b4646a67b74c7320901b8c1ec2cdd06e0d1d10ef09963c9ba968f7dc33d5ec367ed6a07f14b227bff381b3954dd50f1f0fa9e3bd1a1276e84807ff72f4cc33944ddfb99594aec5a44e1ce00372fce1654590a5c739a2b48db22e8d78674abf63009678f8c6efc6b72f67f81ad40ec336d2e23457c71027616531a8f97ce752d6f5834db61d85ae3c3821da82e28a17171a5a3440aa5fc860caf0658afec41d5a263cc2c4c94ef6593f53deaa54ed0421955d7d9f6b88cda355b5427883ccfa6660606c63993f8978e474b0a6fb5d95bddd13b8ac08c9c8975866504030db68baeb6eca6f5f0b876ee5396ebd428b4ff6305bdb68cd68f1ba80a887bc19f7752d6c0a3727d4ac594f816a2b5185819376d181989fb5dd956bfbaa98c2b2282d8574df68b31d0e3333cfa46a9f3455b6b18600dd405d1bcd57706a81e88e4a0ea3b55a893eb6c539565cc6e7d89e8cdd54a55f4893de135296e2d54c18a6993c653661c6df0b83cc65d559f6c506c6fd87402c112de72cfb5f20049bdcec400421f4b4285126bdd2ea4c2ffb938171d76de10cc9df4cd9574852fde534cd16d84b207041c40994d45db55e5f4b9efb7fd453db6ffb8f371d0e061851dec2f3e5db66b58d130312f3efb2d4a1a1cdd4f12f6f4bbc92a47add29e8deb7072956bb33346cdf965737c52cba12a23a051e5648c8d1a8df4b1b1af017914621f46e5e1d8d9f31a5e7ab9486f2fa94c6edeea8b64e1fcd97ee5267f9f8a72f5dbb9cf78844ab7e3c84c09858776403246ad110", 0x940}], 0x2}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x4d, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) r3 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000000)={'pimreg0\x00', {0x2, 0x0, @broadcast}}) close(r2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r3) 1.039533751s ago: executing program 2 (id=31): ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e", @ANYRES32=r2, @ANYRES32, @ANYRES16=r1, @ANYRES64=r0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[], 0x68}}, 0x20040800) 899.51659ms ago: executing program 0 (id=32): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080029bd700000dbdf2511000000050030000100000005002a000100000008002c007d050000050038000000000008000b0007000000080034000900007762d7e3c4acf2700008000b00fbffffff"], 0x54}, 0x1, 0x0, 0x0, 0x85}, 0x80) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="500100009000000200000000000000007f00f7010000206a33d10000000000002001fdffffffffffffff0000000000000000f8ebae6302870e31a2734b933f6cce9e79110d5be7174ff94a357c8ae518d5f0b86bbd48bb4e17d755d753ce7d203d3ef15b74f1d843d3a5f54fe663f8d0c33cd6a856ca95884ccbfd17db5beaa9891fa7f1918533f34f3a1c9eb24c17704dab7a65aa754da9bafeecd9c3f4cc00000000000000005cfe362e6766808a5ced2130dc911703e2d5be8e2c069fdc221b6c038de136a2ffa02df16811855268e0c7cd808fe3a352e435917fb5a6965263600770ec5d2aa8ed01b300"/249, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000000fe320000000a01010200000000000000000000000000000000000000000000000000000000000000000000000002000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000006000000025cac5216d1c8af0a976902918bf448c5d9f5459"], 0x150}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) accept4(r4, 0x0, 0x0, 0x80000) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x4000000) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00001d7000/0x4000)=nil, 0x4000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2f25000) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r7, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4b0c02, 0x0) close(r6) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x16, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x2005c0c4}, 0x4048841) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) 898.903087ms ago: executing program 2 (id=33): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)={0x3c, r6, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x881}, 0x4010) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}, {0x0}], 0x2}}], 0x1, 0x24008094) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="034886dd090032000300300000006000000001002f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022ebc2"], 0xfdef) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10040064}, 0x4044841) accept4(r0, &(0x7f00000006c0)=@x25, &(0x7f0000000040)=0x80, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3f8, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_DESC={0x3bc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0xb8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0x118, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x974d}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x84, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0x9c, 0x2, 0x0, 0x1, [{0x4}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}]}]}]}], {0x14, 0x10}}, 0x440}}, 0x0) 805.340804ms ago: executing program 3 (id=34): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f000083b000/0x13000)=nil, 0x13000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xffffc000) mmap(&(0x7f00008e6000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1300000010000000020000000000000000000000ab364208c3989845f460d1019e2c9b3bb26902b75182b52f360350052260bcf4885cb619813021c77e2af5c49f69f2472a830693fabff357906fee2f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0xf, 0xa, &(0x7f00000008c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000900000000000000000018100000ad4295c22a40569bb9dd1967eb73ac0ceaf2fde176b7ec5fb6d1f2eb04e5c88ac3971ba5c54df6c05ef053f197514523", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000000)=0x5, 0x4) connect$bt_l2cap(r5, &(0x7f0000000180)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r6 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000200)=ANY=[@ANYBLOB="e33110495b1f1cb93300000186dd60cb653e00283aff00000000000000000000ffff00000000fe8000000000000000000000000000aa"], 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) socket$inet6(0xa, 0x80803, 0x84) r8 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0xffffffffffffffd2}}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x4}}, 0xe8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f0000000200007c7d99", 0x2e}], 0x1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000100000000000c0000001800058008000100756470000c000280080004"], 0x2c}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000b40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000002d40)=ANY=[@ANYBLOB="101200003109dcc5a68bf905a5fcce96ddf33fe9cc8bab1d2359940996ecdcd0a583749b42e0b1dda1bf69c2d125cddd913467842f9275baa0e6ea96a0cc62e769087c1e6e59778b05e2bb95b3fc6054fd4124223cc53700000000000000000000000000000002490aa9c73b4d8b07d57d1cabbe17976a37b9e903ff3c03fe12b8affe95441ef0a469fbe2dcb8d75098c5e5496edaf17dfb304f99056e01962f2b04ea7acc09b009503834dac1101e4735c9841a71cf2c24f8fd66ef3ec4f70671adbaf870e4d4687e1e40f2aa3882e92e82ff78f219cf689307e981efd59a1d97b3fa", @ANYRES16=r10, @ANYBLOB="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"], 0x1210}}, 0x4080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 773.153091ms ago: executing program 4 (id=35): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000008d080000711214000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=@dellink={0x28, 0x11, 0x1, 0xffffffff, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20002}, [@IFLA_GSO_MAX_SIZE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10) setsockopt$inet6_int(r5, 0x29, 0x35, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r10, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r10, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x120000}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000084) 551.509936ms ago: executing program 0 (id=36): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0xfc, r2, 0x2, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd4, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d79f71a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70066ff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda88}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10ea68e4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c64}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb3a4c30}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ccf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xffffffff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcd91}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4321e2cf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54a4ec21}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x457ee94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1c9d}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e693c5e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4bad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a6f1b8f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1bbc35e5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bc800c2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6fc2}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3959}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c107214}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x24da}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5000}, 0x24000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0xd}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES64=r3], 0x50}}, 0x0) splice(r0, &(0x7f0000000100)=0x5, r0, &(0x7f00000001c0)=0x4, 0x5, 0xb) 501.862495ms ago: executing program 1 (id=37): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x78, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x50, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cde2c01dd9b90ac10900000000000000b5e20b4b16d3d23f2cb03a8aa417dce6"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x78}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="e5ed000000000000000006000080"], 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x4e, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}}, 0x20}}, 0x0) 443.937793ms ago: executing program 4 (id=38): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180d00000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000007b030000faffffff8500000006000000943b00011000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.idle_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000002f00)='+%{^\x00', 0x5) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x0) (async) sendto$inet6(r2, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000001000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd602e2caa00100000fe80000000000000000000441a63706500000000bbff0200000000000000000000000000010001"], 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f00000003c0)=@abs={0x1}, 0x2) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x5}, 0x8) syz_emit_ethernet(0x185, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0) 367.599544ms ago: executing program 3 (id=39): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x6, 0x8}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r6, r7}, 0xc) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(r8, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001700)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x616bdbc7, 0x3, 0x6, 0x15, 0x18, 0x4, 0x1}}, @TCA_RED_MAX_P={0x8, 0x3, 0x900}]}}]}, 0x150}}, 0x0) 366.818271ms ago: executing program 2 (id=40): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206010400000000000000020000000505000400000000000900020073797a30000000000500010007000000050005000a0000000c00078008001200000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x3dafdaba29dfc255}, 0x0) 293.076065ms ago: executing program 0 (id=41): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, r1, 0x1, 0x0, 0x25dfdbfc}, 0x14}}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x57) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="67ebd71f5cb905491900000004040000080000000200200000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r3}, &(0x7f0000000740), &(0x7f0000000780)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000200000000009500"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448de, &(0x7f00000000c0)={0x0, 0x0, "a4cd91"}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000040)="05000000010000", 0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) epoll_create(0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) close(r6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) 233.810532ms ago: executing program 1 (id=42): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback, 0x4002}, 0x1c) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56361, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000b02000/0x2000)=nil, 0x2000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 233.459304ms ago: executing program 2 (id=43): unshare(0x400) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'wg2\x00', 0x800}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 190.79445ms ago: executing program 4 (id=44): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x17}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x0, 0x0, 0x0, 0x4c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="0201"], 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002e00)=@newtaction={0x1484, 0x30, 0xffff, 0x0, 0x0, {}, [{0x1470, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0xb0, 0x11, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0xd, 0x4, 0x5, 0x738}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0xed, 0x0, 0x6, 0xd}, 0x56}}]}, {0x4b, 0x6, "aa2fd70bead06957d31a639ed000312158278ac9875bb7277216f694f8749b89d75a0eb9d8de41af6945ef1c2c46d0cdd3a1582963e59b728995069b9a5dc466708cb8490c5463"}, {0xc, 0x7, {0x0, 0xd64cd6fac6010b37}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0xf4, 0x16, 0x0, 0x0, {{0x9}, {0x80, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x8, 0x2, 0x2e}, 0x1}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x4900d}, @TCA_MPLS_PROTO={0x6, 0x4, 0x201}, @TCA_MPLS_TTL={0x5, 0x7, 0xfb}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0xad, 0x6, 0x5, 0xfffffffe}, 0x4}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x81, 0x81, 0x6, 0x7f, 0x9}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8}, @TCA_MPLS_TC={0x5, 0x6, 0x5}]}, {0x49, 0x6, "5b53a8bd62060cad3e16b828e0027b4523752a1646b89eae395f3b52ab0b30020b7ddb70090ff07ae883d6a4ffa0f5c7bd66ce82315c5976a82bfcf2df012b9946ef9fdeb2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x1298, 0x6, 0x0, 0x0, {{0xb}, {0x1178, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000001}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x5, 0x3, 0x1, {0x9, 0x1, 0x80, 0xf, 0x6, 0x2}, {0x6, 0x1, 0x1, 0xffff, 0xd, 0x1}, 0x200, 0x4, 0xbd}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x9, 0xe, 0x7, 0xfffffffd, 0x8, 0x7, 0x2, 0xb764, 0x4, 0x7f, 0x426b, 0x0, 0xffffffff, 0xc65, 0x6, 0x0, 0xffff, 0x3ff, 0x8, 0x0, 0x10, 0xdc34, 0x56ba97eb, 0x3, 0xfffffff2, 0x10003, 0x7, 0x9, 0x2, 0xb, 0x5dd, 0x1, 0x4, 0x4, 0x8, 0x3, 0x7, 0x2, 0x8, 0x5, 0xffffff6f, 0x9, 0x0, 0x1, 0x7, 0x7fffffff, 0x9, 0x4, 0x0, 0xfffffff9, 0x8, 0x0, 0x0, 0x8001, 0x7, 0x2, 0x3c5, 0x7, 0x1, 0xfffffffd, 0x7, 0x6800, 0x1000, 0x5, 0xa, 0x2, 0x4, 0x8, 0x26e, 0x3, 0xa765, 0x8, 0x7042, 0x6, 0xc8de, 0x6, 0x1, 0x9, 0x4, 0x3, 0x7, 0x9, 0x0, 0x81, 0xd60, 0x80000001, 0x800, 0x6, 0x5f9a, 0xd459, 0x0, 0x3, 0xfffffffd, 0x7, 0x5, 0x1, 0xfffffeff, 0x0, 0x87c, 0x2, 0x1, 0xa, 0x8, 0x4, 0x1, 0x7, 0xa335, 0x5, 0x11e, 0x2, 0xa, 0x80000001, 0x3, 0x6, 0x2, 0xfd9a, 0x7ff, 0x401, 0x6, 0x5, 0x7f, 0x10, 0x3, 0x0, 0x4, 0x0, 0xfffffff9, 0x1, 0x2, 0xf, 0x80000000, 0x6, 0x2, 0x2, 0xeb6e, 0x3, 0x9, 0x9, 0x6c122a4, 0x3, 0x1ff, 0x800, 0xc42, 0x429a4000, 0x990, 0x0, 0x4, 0x4, 0x7a, 0xc000000, 0xffffffff, 0x9, 0x0, 0x9, 0x9, 0x9, 0xea3, 0x5, 0x1, 0x7, 0x100, 0x0, 0x3, 0x200, 0x8, 0xa07, 0x5, 0x100, 0x27, 0x37c, 0x7bd5, 0x2, 0x5, 0x9, 0x8, 0xd6c, 0x8, 0x5, 0x2bb4, 0x3, 0x4, 0x1, 0x7, 0x7fff, 0x4, 0x135, 0x10001, 0x959, 0x9, 0x9, 0x5, 0x9f, 0xe32, 0x8001, 0xce, 0x3f, 0xc, 0x0, 0x2, 0x4, 0x53fe, 0x0, 0x81, 0x1, 0xfffffffc, 0x80, 0x0, 0x1ff, 0x7, 0x7, 0x2, 0x100, 0xba, 0x3, 0x1, 0x18f, 0x14, 0x3, 0x54cd, 0x1000, 0x5, 0x2, 0x2, 0x5, 0x6, 0xe8, 0x8, 0x5, 0x6, 0x5, 0x2, 0xe17, 0x6, 0x1, 0x0, 0x9, 0x7fff, 0x17, 0xc3, 0x5607, 0x5, 0x80000001, 0x7, 0x248, 0x18e, 0x0, 0x8, 0x0, 0xfffffeff, 0x8000, 0x0, 0x8001, 0x8, 0x1, 0x80]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x0, 0xfff, 0xfffffffd, 0x1, {0x40, 0x1, 0xa, 0xfffb, 0x6, 0x6}, {0x0, 0x2, 0xffff, 0x3, 0x6, 0x38c90fac}, 0x7, 0x4, 0x9d4}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x80000000, 0x6, 0x5d, 0xff, 0x4, 0x284714fd, 0x4, 0x80, 0xffff0001, 0x2, 0x5, 0x6, 0x9, 0x0, 0xffff, 0x4, 0x0, 0xef4, 0x7, 0x5, 0x0, 0x80000000, 0x92, 0x9, 0x8, 0x7, 0x80000000, 0x8, 0x6, 0x8, 0x0, 0x5, 0xfffffff9, 0x3, 0x569, 0xff, 0x8e37, 0x8, 0x2cc8, 0x3, 0x5, 0x8e0, 0x7, 0xd, 0x9, 0xd, 0x28c3, 0x80000001, 0x9, 0x5, 0x7fffffff, 0xbd1, 0x2, 0x7ff, 0x1, 0x6, 0x4ff8, 0x9, 0xd, 0x8000, 0x5, 0xfff, 0x259a, 0x2, 0x0, 0xfffffff8, 0xc6, 0x7, 0x4888, 0xba3, 0x8, 0x8, 0xffffffff, 0x4, 0x4, 0x8402, 0xa545, 0xe, 0x9, 0x10000, 0xfff, 0x7, 0xf, 0xffffffff, 0x6, 0x3, 0x5, 0x2d, 0x1, 0xe24f, 0x10000, 0xf, 0xaa, 0x4, 0x2, 0xfffffe00, 0x9, 0x6, 0x1, 0x7fffffff, 0x72ec, 0x400, 0x400, 0x6, 0xd, 0xaaf6, 0x8, 0x6fd, 0xffffffff, 0x7, 0x0, 0x0, 0xfffffff8, 0xffff7fff, 0x8, 0x0, 0x0, 0x6, 0x0, 0x6, 0x1, 0x1f, 0x51, 0x9, 0xfffffff7, 0x6, 0x80000001, 0x0, 0x4183, 0x3ff, 0x0, 0x9, 0xbc37a47, 0x444, 0x9, 0xfff, 0x2, 0xa28, 0x49, 0x10001, 0x4, 0x40, 0x9, 0x80000001, 0x766, 0x8, 0x5, 0xfffffff9, 0x1, 0x36dc56c, 0x2, 0xb9a, 0xdd2d, 0x3, 0x9, 0x1, 0x101, 0x7, 0x7fff, 0x3, 0xf, 0xfff, 0x3, 0x4, 0xc9, 0x2, 0x401, 0x6, 0x3, 0x2, 0x0, 0x1, 0x81, 0x10001, 0x5, 0x3ff, 0x1, 0x0, 0x0, 0x9, 0xd, 0x0, 0x8, 0x2, 0x5d9e32e9, 0x1ca00, 0x2, 0x0, 0xb52, 0x2c0000, 0x4, 0x7, 0x1, 0xc, 0x800, 0x4, 0xf, 0x1ff, 0x6, 0x20, 0x8, 0x5, 0x6de8, 0xf, 0x3, 0x58404ab0, 0x2, 0x0, 0xfffffff2, 0xd4, 0xa, 0x60, 0x9, 0x0, 0x2, 0x4a, 0xd2, 0x6bb, 0x7, 0x6, 0x6, 0x4, 0xfd, 0x4, 0x4, 0xd9, 0x2, 0x6, 0x2, 0xf, 0x6, 0x7ff, 0x8, 0x246, 0x8, 0x18000, 0x3, 0x0, 0x7, 0x7, 0x6cbb, 0x99e2, 0x6, 0x9, 0x4, 0x8, 0x6, 0x7, 0x7fff, 0x80000000, 0x1, 0x80000000, 0x1b6, 0x1, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6, 0xff, 0x1000, 0x6, 0x0, 0xe01, 0xfff, 0x0, 0x1400, 0x3, 0xa26d, 0xffffcfbd, 0x4, 0x3, 0x6, 0x7, 0x9, 0x9, 0x18000000, 0x9f4953c5, 0x4, 0x71c, 0xfffff217, 0xfffffff8, 0x1000, 0x4, 0x8, 0x3, 0x3, 0x2, 0x7, 0xd, 0xfffffffd, 0x6, 0x8, 0x8, 0x1, 0xffff, 0xffffffa4, 0x6, 0x800, 0x4, 0x9c0, 0x8001, 0x6, 0x9, 0x2, 0x8, 0x1, 0xfffffffd, 0x9, 0x101, 0x4, 0xe, 0x7, 0xfffff296, 0x9, 0xffffff7f, 0x4, 0x3, 0x8, 0x9, 0xfff, 0x9, 0x101, 0x65, 0xc7d2, 0x0, 0xf, 0x7, 0x7, 0x8000, 0x1, 0x8c5, 0x8, 0x0, 0x9, 0x80000000, 0x4, 0x1, 0x3, 0x10001, 0x6, 0x200, 0x8001, 0x7, 0x81, 0xf, 0x1ff, 0x4, 0x0, 0xffffff80, 0x8, 0x7, 0x9, 0x5, 0x0, 0x6, 0x3, 0x80, 0x5, 0x3, 0xe50, 0x6, 0x81, 0x9, 0x1, 0x6, 0xfffffe01, 0x8, 0x5, 0x9, 0x4, 0x3b, 0x9, 0x6, 0xffffffff, 0x100, 0x8, 0x8000, 0x0, 0x2, 0x6, 0x7, 0x0, 0x0, 0x7, 0x80, 0x80000000, 0x2, 0x4, 0x0, 0x4, 0x5, 0x3, 0x7ff, 0x12ba, 0x4, 0x7, 0x4b, 0x5, 0x0, 0x4, 0xa, 0xbd, 0x31b6, 0x1000, 0xc431, 0xb72, 0x9, 0x7fffffff, 0x8000, 0x6, 0x8, 0x7, 0x7fffffff, 0x4, 0x81, 0x8d9, 0x1, 0x7c9, 0x4, 0x6, 0x4, 0x91, 0x10, 0x9, 0xff, 0x3ff, 0x6, 0x0, 0x0, 0x1, 0x8, 0x0, 0x9, 0xfffffffa, 0x3, 0x4, 0xd98, 0x5, 0x8, 0x800, 0xf2ba, 0x9, 0x6, 0x9, 0x0, 0x1, 0x10001, 0x800, 0x81, 0x5, 0x12d5, 0x8, 0x9, 0x6, 0x4, 0x1, 0x1, 0x8001, 0xc86, 0x7, 0x3, 0xadca, 0xb, 0x80000000, 0x10001, 0x5, 0x6, 0x101, 0x6, 0x8, 0x6, 0x1, 0xd4f1, 0x8, 0xfffffbff, 0x8, 0x8be, 0x5, 0x5, 0x7fffffff, 0x1, 0x7, 0x1, 0x3, 0x2, 0x101, 0x8000, 0x9, 0xa, 0x7, 0x0, 0x9, 0xff, 0x1, 0x80, 0xffff0001, 0x7, 0x5, 0x10000000, 0x4, 0xaf, 0x0, 0xfffff67b, 0x5, 0x0, 0x4, 0x4, 0x2f51, 0x3f, 0xde21, 0x7fffffff, 0x9e6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xbe}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x3df}, @TCA_POLICE_RATE={0x404, 0x2, [0x8eb, 0x1, 0xfffffff7, 0x9, 0xfffffffa, 0x200, 0x1, 0x2, 0xf9b, 0x9, 0x8, 0x6, 0x0, 0x81, 0x1, 0x3, 0x56, 0x2, 0x2, 0xfffffffb, 0x3, 0xfffffff8, 0xfffffffa, 0x3, 0x3, 0x1c0d, 0x400, 0x6, 0x9, 0x9, 0x1ff, 0x7fff, 0xfffffeff, 0x1, 0x1, 0x7, 0x5, 0xb, 0xfffffffb, 0xd6e0, 0x1000, 0x2, 0x1, 0x7, 0x7, 0x9, 0xfffff000, 0xc5d, 0x8, 0xb41, 0x4, 0x10, 0x4, 0x7ff, 0x0, 0x6fe, 0x4, 0x4, 0xfffffffb, 0x1, 0x6, 0x5, 0x8, 0xb72f, 0x5, 0x7, 0x0, 0x2, 0xbcd, 0x3, 0x39, 0x4, 0x0, 0x81, 0x8001, 0x400, 0x2, 0x28f, 0xba7, 0x9, 0x2, 0x8, 0x1ff, 0x5, 0x9, 0x3ff, 0x7, 0x0, 0xe, 0x9, 0x2, 0x6, 0x7, 0xffff7fff, 0x40, 0x40000, 0x1, 0xcfc0, 0x9, 0x7f, 0x896, 0x5, 0xbecf, 0x200, 0x8, 0x3, 0xfff, 0x10000, 0xdeab, 0x9, 0xfffffffe, 0x2, 0x1, 0x3, 0x3, 0x3, 0x5, 0x7fff, 0x53, 0x1, 0x7fff, 0x9, 0x9, 0x800, 0x7, 0x4, 0x3, 0x5, 0x0, 0xfff, 0x5, 0x0, 0xe, 0x6, 0x7, 0x5878, 0xdd, 0x6, 0x8000, 0x8, 0x3a, 0x7, 0x7, 0x3, 0x81, 0x6, 0x4, 0x3, 0xf14, 0x22, 0x2d300bf1, 0x1, 0x31c2b0a3, 0x4, 0x3ff, 0x4, 0x4, 0xfffffffc, 0x2, 0x908b, 0x2, 0xd, 0x3, 0x2, 0x2, 0x3c4, 0x6, 0x9, 0x1, 0x5, 0xfffffffc, 0x2, 0x8, 0x1c000, 0x8, 0x10001, 0x848, 0x9, 0x1, 0x2, 0x2, 0x1ee6, 0xb, 0x9, 0x60a, 0x5, 0x8, 0x4, 0x3, 0x1, 0xffff4623, 0xf, 0x2, 0x0, 0x2a, 0x0, 0x80000001, 0x3, 0x7f, 0xbd, 0x5, 0x5adc, 0x4, 0x0, 0x4, 0x40, 0x6, 0x6, 0x5, 0xd9, 0xf, 0x200, 0xb, 0xffffffff, 0x5, 0x2, 0x6236, 0x1, 0x6, 0x7ff, 0x2, 0x8001, 0x7, 0x5, 0x9, 0x3, 0xffffffff, 0x5, 0xff, 0x6, 0xf0, 0x3, 0x0, 0x6, 0xfffffffc, 0x908, 0x5, 0x2, 0x3, 0x1d67, 0xd, 0x4, 0x100, 0x6, 0x2, 0xffff, 0x2, 0x2, 0x0, 0x1ff, 0x9, 0xffff8000, 0x7f, 0x0, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x2, 0xfffffffd, 0x8, 0xb404, {0x81, 0x2, 0x0, 0x7, 0x8001, 0x5}, {0x1, 0x0, 0x4, 0x1, 0xee, 0x7}, 0x7, 0x9, 0xb}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}]]}, {0xf5, 0x6, "c4364a67999b60ce6a1642be9828188cb3e9923c5c6b5420bce64f4865335e914cd4fe871a11111bab9c3b29ba2a52e3f54593cb11fcbda78af0b5dd34956e3b2836f0c664cda9f0440ce841f9350bcc66b0395a6f09b718781a190c320a2d6f7917960d487f66a15899d6aa3787b44c6e9fa615cddec4f8943936d0a0cee11c01c7bc95458fe525ef3fc6aa9ef46ee6485997eb909f36dd392ce667b5943cf9f7e31bf69256202e5a0435bf5d786f75d1cd71b536d8f52cae5c647d93bf909f27481adae87c1a57cc2c1dcc399fbe0855348356c5d0ef4cc0f0195bb30926a037504cd4676ef07d7ddb3a9688ff4823d2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x1484}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r6 = socket$inet(0x2, 0x1, 0x3) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_msfilter(r6, 0x0, 0x8, &(0x7f0000000180)=ANY=[], 0x1) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={@empty, 0x77, r8}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007900210826bd7000fcdbdf2507000000faffffff0700010001"], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) socket$rxrpc(0x21, 0x2, 0x2) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x10, 0x4, 0x3e8, 0x1f0, 0x0, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@private=0xa010100, @broadcast, 0xffffff00, 0x0, 0x0, 0x4, {}, {@mac=@random="bd22fdd68c29", {[0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'veth0_macvtap\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @empty, @loopback, @empty, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) 139.430542ms ago: executing program 3 (id=45): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) write$tun(r0, &(0x7f0000000040)={@void, @val={0x2, 0x0, 0x2, 0x4, 0x3, 0x5}, @mpls={[{0xe}, {0x9}], @ipv6=@tipc_packet={0x5, 0x6, "c20aa5", 0x265, 0x6, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, {[@dstopts={0x62, 0x23, '\x00', [@jumbo={0xc2, 0x4, 0x8d8}, @ra={0x5, 0x2, 0xffff}, @padn={0x1, 0x1, [0x0]}, @generic={0x1, 0xcd, "19a762519f4fb224ef6f2a2fa1c47a3e8a536688ae1ef90ff992a170b2ed315c1e9c290d030592edf4f3ec1d84d43145d00bcebf4ba5418a4665abdcfd197f4333c57a8d93d310ad05706b353ce6b7fdba6d8249ecacd83236e749c64ca63610ce85aec67e4ecc9fac4f5ff7a13cb137da3874e12fc84000da825dff64f046dce32b222ae7f4d62410bff23d99dc299ff3ec1c358de12eec78e88c82b75967274a12ec66bda4161f54e78411bea8fc0c6062ec9b36d6f3393eeaf584de638ee39f13cc9014f1ee06e993d6a7b7"}, @jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x400}, @generic={0x9, 0x31, "bbe85ed572af6eff9b5c65de0d389e5ece400d044816b775b29a56976737f8d78ac43f4f13e6b5cc41081c174a425e85a8"}]}, @routing={0x2c, 0x4, 0x0, 0xd, 0x0, [@empty, @private0={0xfc, 0x0, '\x00', 0x1}]}, @dstopts={0x6, 0x1b, '\x00', [@calipso={0x7, 0x50, {0x2, 0x12, 0xff, 0x7, [0x6, 0x8000000000000000, 0x7, 0x5, 0x8, 0xfffffffffffffff9, 0x6, 0x3, 0x5]}}, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x1}, @jumbo, @calipso={0x7, 0x18, {0x3, 0x4, 0x6, 0x8, [0x101, 0x2]}}, @jumbo={0xc2, 0x4, 0x4}, @generic={0xf, 0x56, "5d0075374fed394eea3c712a337dadb81cbb6958997f1a5cce2c48139684bef05b17f587cb165eea4c08d6ff47f86cd967f70e1f3a2ba200445113a5f53ee02f3d87b4334ff27f3597f9fba534b9f4924de5fa687d9b"}]}], @payload_named={{{{{0x2d, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x2, 0x81, 0x0, 0x1, 0x7, 0x1, 0x2, 0xffff, 0x3a, 0x1, 0x4e23, 0x4e22}, 0x1, 0x4}, 0x1, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x29f) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000300)=0x8000) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10, 0x80800) r2 = accept4$llc(r1, &(0x7f00000003c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000400)=0x10, 0x80000) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x5, &(0x7f0000000440)=[{0x9, 0x0, 0xc, 0x80}, {0x400, 0x3, 0x2, 0xda2}, {0x8, 0x7f, 0x5, 0x80}, {0x401, 0xf2, 0x7, 0x7ff}, {0x9, 0x6, 0x4c, 0xfd8}]}) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000004c0)={0x4, 0x6}, 0x4) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000500)) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1f, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@tail_call, @ldst={0x2, 0x3, 0xd596ed26e991641b, 0x0, 0xa, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x9b}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000680)='GPL\x00', 0x81, 0x99, &(0x7f00000006c0)=""/153, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0x10, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0xaf, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000540)='kvm_set_irq\x00', r4, 0x0, 0x5}, 0x18) (async) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000940)=@in={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000980)="f9df48fced96eaa64f884df2d543766dfbb997727eca3cfc9b2d222a", 0x1c}, {&(0x7f00000009c0)="7995c1ff5b940113bb9112a75a3237933ef936543958b0c6e6e87469693561b1e7d6fac5419450d832aaa4d037a35ced7ff4a75e3586a05a4278c5ff2c2f2c1cb2e1e02d278bedd8e714", 0x4a}, {&(0x7f0000000a40)="e54238b350703bad0cdf1243b6016062d5c6101591001258f8a281097733", 0x1e}, {&(0x7f0000000a80)="888412bcce1d7e225c157dd1db9e39c8995d3c052d6addd990981cce067c72f5f6bd47d306c60aba720cf524968aaca1223ae56d478e17f652d3dc7a53b228bfd179f7e73f0a26513b070e37719f34048ddd2b1f29cf8ab72f204ee0de58ceda9d08aa279252500b71b6efc0daf0206ab8cdd14e4dc5b504a90ff1c28d0b478fcfd6fc0f17fcc59547ca93a2b353e3df36ca18", 0x93}], 0x4, 0x0, 0x0, 0x84}, 0x45) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000bc0)={0x1, 'veth0_to_bond\x00', {}, 0x8}) ioctl$SIOCNRDECOBS(r3, 0x89e2) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000d00)={'tunl0\x00', &(0x7f0000000c40)={'sit0\x00', 0x0, 0x80, 0x40, 0x0, 0x59, {{0x1b, 0x4, 0x3, 0x2e, 0x6c, 0x64, 0x0, 0x4, 0x4, 0x0, @empty, @remote, {[@ssrr={0x89, 0x1b, 0x18, [@broadcast, @dev={0xac, 0x14, 0x14, 0xd}, @dev={0xac, 0x14, 0x14, 0x15}, @remote, @broadcast, @multicast1]}, @timestamp_prespec={0x44, 0x3c, 0x6d, 0x3, 0x3, [{@multicast2, 0x6}, {@loopback, 0x80000001}, {@broadcast, 0x2}, {@broadcast, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@multicast2, 0x1}, {@multicast2, 0xfff}]}, @end]}}}}}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000d40)={@multicast2, @local, 0x0}, &(0x7f0000000d80)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000dc0)={@private2, 0x0}, &(0x7f0000000e00)=0x14) sendmsg$nl_route(r6, &(0x7f0000000f00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)=@bridge_getneigh={0x70, 0x1e, 0x100, 0x70bd26, 0x25dfdbfb, {0x7, 0x0, 0x0, r7, 0x1208, 0x60084}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xd8bf}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xf9}, @IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_EVENT={0x8, 0x2c, 0x2}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfe}, @IFLA_CARRIER={0x5, 0x21, 0x6}, @IFLA_NET_NS_FD={0x8}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_OPERSTATE={0x5, 0x10, 0x9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4) getpeername$packet(r3, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f80)=0x14) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000fc0)={0x0, 0x2}, &(0x7f0000001000)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r10, 0x84, 0x79, &(0x7f0000001040)={r11, 0x3, 0x1}, 0x8) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r12) pwrite64(r0, &(0x7f00000010c0)="9b6b662b0b5b1d32e9fad602fc8b0af00103a85163f7184de8c79851dd556c32643d622567ead884b77c0b7f2473d18ab4c59b6567120f6f41d027cd7c05bf33af3fa2d7d90bf30cabc8c83f048005d922", 0x51, 0x2121) (async) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000001140), 0x8) connect$qrtr(r13, &(0x7f0000001180)={0x2a, 0x0, 0xffffbfff}, 0xc) setsockopt$inet6_tcp_TCP_ULP(r13, 0x6, 0x1f, &(0x7f00000011c0), 0x4) (async) socket(0x28, 0x1, 0x40) 24.575924ms ago: executing program 3 (id=46): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x80, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000880)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) (async) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="0483af", 0x3}], 0x1) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@allocspi={0x128, 0x16, 0x1, 0x0, 0x0, {{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x0, 0xd1}, [@XFRMA_SET_MARK={0x8}, @address_filter={0x28, 0x1a, {@in=@rand_addr=0x64010102, @in=@dev={0xac, 0x14, 0x14, 0x16}, 0x2, 0x6, 0x7}}]}, 0x128}}, 0x0) 0s ago: executing program 2 (id=47): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5dae3b146f4c95e5, 0x1b, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x963b}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803c}, @ldst={0x2, 0x3, 0x0, 0x9, 0x2, 0x4, 0x4}, @map_fd={0x18, 0x6}, @call={0x85, 0x0, 0x0, 0x93}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000140)='syzkaller\x00', 0x8, 0x65, &(0x7f0000000180)=""/101, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x10000, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x5, 0x8, 0x3}, {0x4, 0x4, 0xc, 0x5}], 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='f2fs_writepages\x00', r0, 0x0, 0x3ae}, 0x18) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000400)=""/41, &(0x7f0000000440)=0x29) (async) close(r1) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r3, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000005) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)={0x224, r6, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x399, 0x48}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x104, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x2b, 0x2, "6ada3fb391a9c5ac273e640591e0c500cc742f09b63d3a760c332a784d11722f31f4580b93e38d"}}, {0xd0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xca, 0x1, "2966d799a9b08c1f1531ccba5f1de35e8f529f1a2f6898ace59cb223b2a1b783141aaf19639fd8f6f842cecf1a37ce34ff564e5813b4e78582b8a300bd8d7a19e1620b8da565e28917f131b9704b32093284227abdafed80a1927d76b5dff452bdd60fb45724a47186a219660203a0d58f1c2b2c12d01d1e5d8181e13b195c2517779e4cfbdfad0b2674c18ece81102c95ddcfd484f9e505e827c114d49c90b37556a8dad9ead2794ada9d8dc6d64c628fd796adfec076b43730f63227b037dd545fa7294d51"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4b}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x101}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xc8, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x400}}, {0x10, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xb, 0x2, "9005fdf2d6299a"}}, {0xa8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xa2, 0x1, "ae1e648b678ba8a09070960e9138ef306970e70ff48155cbf4767550c1151457efc81b70dcdf0bed86a9ce785bd124a6f9021e6a573a15970e144a7838c028eed2309fa4e9221391e073fba5008dbbfd57abe3976ebc1b337df2c5de07c3301b078512e1ae04049426c89f9b5bedab4a9866e1bc87632c4c1aadda5fc272255a9eb7688da6159d30d8566e32b7dc0711a06f710c3209d1b3a79357464287"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x224}, 0x1, 0x0, 0x0, 0x20000000}, 0x80c0) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000980), 0x8) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000009c0)={0x7, 0x5, 0x0, 0xe6, 0x80, 0x2, 0x43, 0x0, 0x4, 0x80, 0xe0, 0x8, 0xe4, 0x4}, 0xe) (async) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x84004242}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r6, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2}}}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x15e0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000040}, 0x40c0041) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), r2) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r8, &(0x7f0000000c40)={&(0x7f0000000b00), 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x58, r9, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xc}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xe}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008001) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r7, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd8, 0x7e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8010) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000e40)={'syztnl1\x00', &(0x7f0000000dc0)={'ip6gre0\x00', 0x0, 0x4, 0xb, 0x3, 0x5, 0x8, @mcast1, @loopback, 0x80, 0x0, 0x200, 0x2}}) sendmsg$nl_route(r0, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=@RTM_GETMDB={0x18, 0x56, 0x400, 0x70bd28, 0x25dfdbfd, {0x7, r10}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x44004}, 0x80) (async) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, r3, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0xc004) (async) sendmsg$NL802154_CMD_SET_PAN_ID(r8, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000020) r11 = socket$inet(0x2, 0x80000, 0x7f) getsockopt$inet_mreq(r11, 0x0, 0x20, &(0x7f0000001140)={@remote, @local}, &(0x7f0000001180)=0x8) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f00000011c0)={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x5, [@dev={0xac, 0x14, 0x14, 0x3b}, @local, @dev={0xac, 0x14, 0x14, 0x23}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, 0x24) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001200), r2) r12 = accept(r11, 0x0, &(0x7f0000001240)) sendmsg$nl_route(r12, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)=@ipv4_getnexthop={0x44, 0x6a, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r10}, @NHA_OIF={0x8, 0x5, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x44008000}, 0x80) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r8, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x4c, r3, 0x208, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x4c}}, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.195' (ED25519) to the list of known hosts. [ 51.898300][ T5831] cgroup: Unknown subsys name 'net' [ 52.005239][ T5831] cgroup: Unknown subsys name 'cpuset' [ 52.013305][ T5831] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.315355][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.458582][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.466864][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.475518][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.483186][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.491414][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.494831][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.499268][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.507558][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.513260][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.527153][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.534380][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.542404][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.553596][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.561874][ T5854] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.576667][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.585392][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.585600][ T5158] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.606848][ T5158] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.614323][ T5158] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.636472][ T5158] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.647457][ T5158] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.658054][ T5158] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.665913][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.666324][ T5158] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.680983][ T5158] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.688432][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.688606][ T5158] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.704844][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.713057][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.723496][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.961868][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 56.113116][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 56.175227][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 56.185484][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 56.225304][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.236286][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.244616][ T5842] bridge_slave_0: entered allmulticast mode [ 56.251179][ T5842] bridge_slave_0: entered promiscuous mode [ 56.296711][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.303922][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.311092][ T5851] bridge_slave_0: entered allmulticast mode [ 56.317836][ T5851] bridge_slave_0: entered promiscuous mode [ 56.324986][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.332104][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.340656][ T5842] bridge_slave_1: entered allmulticast mode [ 56.347844][ T5842] bridge_slave_1: entered promiscuous mode [ 56.390999][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.398262][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.405609][ T5851] bridge_slave_1: entered allmulticast mode [ 56.412105][ T5851] bridge_slave_1: entered promiscuous mode [ 56.433430][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 56.454178][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.495256][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.532487][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.549928][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.557151][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.565371][ T5856] bridge_slave_0: entered allmulticast mode [ 56.571826][ T5856] bridge_slave_0: entered promiscuous mode [ 56.589701][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.597056][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.604788][ T5844] bridge_slave_0: entered allmulticast mode [ 56.611257][ T5844] bridge_slave_0: entered promiscuous mode [ 56.619501][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.630975][ T5842] team0: Port device team_slave_0 added [ 56.637286][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.644512][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.651619][ T5856] bridge_slave_1: entered allmulticast mode [ 56.658219][ T5856] bridge_slave_1: entered promiscuous mode [ 56.667289][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.674455][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.681631][ T5844] bridge_slave_1: entered allmulticast mode [ 56.688292][ T5844] bridge_slave_1: entered promiscuous mode [ 56.701676][ T5842] team0: Port device team_slave_1 added [ 56.763760][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.770707][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.797014][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.809983][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.821595][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.844936][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.856872][ T5851] team0: Port device team_slave_0 added [ 56.863283][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.870249][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.896385][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.921247][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.928496][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.935724][ T5860] bridge_slave_0: entered allmulticast mode [ 56.942544][ T5860] bridge_slave_0: entered promiscuous mode [ 56.950537][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.969405][ T5851] team0: Port device team_slave_1 added [ 56.989620][ T5856] team0: Port device team_slave_0 added [ 56.998269][ T5856] team0: Port device team_slave_1 added [ 57.004659][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.011846][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.019188][ T5860] bridge_slave_1: entered allmulticast mode [ 57.026452][ T5860] bridge_slave_1: entered promiscuous mode [ 57.085211][ T5844] team0: Port device team_slave_0 added [ 57.091395][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.099226][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.125283][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.142566][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.149771][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.175748][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.191147][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.201065][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.227242][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.248979][ T5844] team0: Port device team_slave_1 added [ 57.263422][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.270367][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.296825][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.310831][ T5842] hsr_slave_0: entered promiscuous mode [ 57.317403][ T5842] hsr_slave_1: entered promiscuous mode [ 57.337426][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.349161][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.366592][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.373762][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.399950][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.441924][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.450249][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.476464][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.520378][ T5860] team0: Port device team_slave_0 added [ 57.544177][ T5851] hsr_slave_0: entered promiscuous mode [ 57.550514][ T5851] hsr_slave_1: entered promiscuous mode [ 57.556890][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.565284][ T5851] Cannot create hsr debugfs directory [ 57.575707][ T5860] team0: Port device team_slave_1 added [ 57.588486][ T5850] Bluetooth: hci0: command tx timeout [ 57.596815][ T5856] hsr_slave_0: entered promiscuous mode [ 57.603555][ T5856] hsr_slave_1: entered promiscuous mode [ 57.609489][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.617099][ T5856] Cannot create hsr debugfs directory [ 57.663010][ T5850] Bluetooth: hci1: command tx timeout [ 57.663867][ T5158] Bluetooth: hci2: command tx timeout [ 57.674854][ T5844] hsr_slave_0: entered promiscuous mode [ 57.681063][ T5844] hsr_slave_1: entered promiscuous mode [ 57.687607][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.695440][ T5844] Cannot create hsr debugfs directory [ 57.720764][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.727763][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.747066][ T5158] Bluetooth: hci4: command tx timeout [ 57.753931][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.759256][ T5850] Bluetooth: hci3: command tx timeout [ 57.794793][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.801745][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.828096][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.999085][ T5860] hsr_slave_0: entered promiscuous mode [ 58.006128][ T5860] hsr_slave_1: entered promiscuous mode [ 58.012212][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.020230][ T5860] Cannot create hsr debugfs directory [ 58.090470][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.100799][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.126916][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.137332][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.218939][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.230453][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.262606][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.274985][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.317732][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.334742][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.346535][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.378384][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.411322][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.442517][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.451892][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.464976][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.507908][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.526473][ T5860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.540003][ T5860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.552338][ T5860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.567090][ T5860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.595358][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.636579][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.643991][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.667034][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.674130][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.750042][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.775697][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.788935][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.805421][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.812539][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.833046][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.851415][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.880016][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.887158][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.915367][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.941918][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.958226][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.965322][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.986655][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.993773][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.021033][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.028162][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.041470][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.056887][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.084026][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.091140][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.126093][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.133239][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.146580][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.153989][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.220647][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.373454][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.387768][ T5842] veth0_vlan: entered promiscuous mode [ 59.452165][ T5842] veth1_vlan: entered promiscuous mode [ 59.517246][ T5844] veth0_vlan: entered promiscuous mode [ 59.572937][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.582012][ T5842] veth0_macvtap: entered promiscuous mode [ 59.623784][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.636469][ T5842] veth1_macvtap: entered promiscuous mode [ 59.656277][ T5844] veth1_vlan: entered promiscuous mode [ 59.673970][ T5850] Bluetooth: hci0: command tx timeout [ 59.685728][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.702036][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.732130][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.742040][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.752197][ T5850] Bluetooth: hci2: command tx timeout [ 59.756493][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.762754][ T5158] Bluetooth: hci1: command tx timeout [ 59.770575][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.780496][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.822425][ T5844] veth0_macvtap: entered promiscuous mode [ 59.828969][ T5158] Bluetooth: hci3: command tx timeout [ 59.834560][ T5158] Bluetooth: hci4: command tx timeout [ 59.855298][ T5844] veth1_macvtap: entered promiscuous mode [ 59.872420][ T5856] veth0_vlan: entered promiscuous mode [ 59.896130][ T5856] veth1_vlan: entered promiscuous mode [ 59.956652][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.969332][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.981928][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.016312][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.027165][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.038896][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.078171][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.092263][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.104219][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.114296][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.124637][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.133597][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.151262][ T5851] veth0_vlan: entered promiscuous mode [ 60.183142][ T5851] veth1_vlan: entered promiscuous mode [ 60.197998][ T5856] veth0_macvtap: entered promiscuous mode [ 60.214213][ T5860] veth0_vlan: entered promiscuous mode [ 60.226300][ T5856] veth1_macvtap: entered promiscuous mode [ 60.234528][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.241537][ T5860] veth1_vlan: entered promiscuous mode [ 60.248016][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.270675][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.282125][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.297309][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.308274][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.320632][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.347797][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.359805][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.370218][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.381010][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.393924][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.418566][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.431504][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.466194][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.469566][ T5856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.497229][ T5856] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.506114][ T5856] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.515711][ T5856] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.531432][ T5851] veth0_macvtap: entered promiscuous mode [ 60.550761][ T5851] veth1_macvtap: entered promiscuous mode [ 60.564711][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.572552][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.594597][ T5860] veth0_macvtap: entered promiscuous mode [ 60.655093][ T5860] veth1_macvtap: entered promiscuous mode [ 60.724647][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.743412][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.754382][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.770817][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.781141][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.793727][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.804789][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.817767][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.839481][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.851410][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.861977][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.871992][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.882470][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.892453][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.903086][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.914441][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.955584][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.966659][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.976633][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.987172][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.997142][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.007691][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.018481][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.028809][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.043085][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.085478][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.096024][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.107046][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.118631][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.128798][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.139654][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.149595][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.160086][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.171841][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.206863][ T5851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.215925][ T5851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.224782][ T5851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.233965][ T5851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.259661][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.271406][ T5860] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.280288][ T5860] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.295826][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.298742][ T5860] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.312065][ T5860] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.420159][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.438567][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.604804][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.612657][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.637290][ T5940] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 61.676702][ T5942] netlink: 'syz.0.9': attribute type 21 has an invalid length. [ 61.691889][ T5942] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9'. [ 61.704209][ T5942] netlink: 'syz.0.9': attribute type 4 has an invalid length. [ 61.711772][ T5942] netlink: 'syz.0.9': attribute type 5 has an invalid length. [ 61.719596][ T5942] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9'. [ 61.740181][ T5938] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 61.752132][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.760650][ T5850] Bluetooth: hci0: command tx timeout [ 61.783102][ T5938] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3'. [ 61.783653][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.823739][ T5850] Bluetooth: hci1: command tx timeout [ 61.829180][ T5850] Bluetooth: hci2: command tx timeout [ 61.881844][ T5948] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 61.891106][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'. [ 61.902949][ T5158] Bluetooth: hci3: command tx timeout [ 61.908768][ T5850] Bluetooth: hci4: command tx timeout [ 61.917875][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'. [ 61.922134][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.942666][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.954825][ T5948] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.016620][ T5948] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.034131][ T5948] Cannot find set identified by id 0 to match [ 62.188472][ C1] Illegal XDP return value 16128 on prog (id 10) dev bond_slave_1, expect packet loss! [ 62.423461][ T5962] Cannot find set identified by id 0 to match [ 62.503724][ T5950] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 62.521252][ T5952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10'. [ 62.533696][ T5958] netlink: 'syz.1.11': attribute type 1 has an invalid length. [ 62.642951][ T5967] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 62.731032][ T5970] tipc: Started in network mode [ 62.738607][ T5970] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 62.753745][ T5970] tipc: Enabled bearer , priority 10 [ 62.772028][ T5967] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 62.792210][ T5969] syz.2.14 uses obsolete (PF_INET,SOCK_PACKET) [ 63.102178][ T5983] raw_sendmsg: syz.3.18 forgot to set AF_INET. Fix it! [ 63.142037][ T5976] netlink: 'syz.3.18': attribute type 4 has an invalid length. [ 63.327221][ T5992] tipc: Enabled bearer , priority 10 [ 63.565225][ T6000] Zero length message leads to an empty skb [ 63.650345][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'. [ 63.679048][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.29'. [ 63.708055][ T6015] netlink: 'syz.4.29': attribute type 25 has an invalid length. [ 63.823943][ T5850] Bluetooth: hci0: command tx timeout [ 63.903170][ T5850] Bluetooth: hci2: command tx timeout [ 63.909363][ T5158] Bluetooth: hci1: command tx timeout [ 63.984042][ T5850] Bluetooth: hci4: command tx timeout [ 63.989539][ T5158] Bluetooth: hci3: command tx timeout [ 64.152079][ T6040] IPv6: sit1: Disabled Multicast RS [ 64.443989][ T5895] tipc: Node number set to 4269801491 [ 64.603269][ T6069] Bluetooth: MGMT ver 1.23 [ 64.641524][ T6054] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 64.706781][ T5850] ================================================================== [ 64.714888][ T5850] BUG: KASAN: slab-use-after-free in set_powered_sync+0x3a/0xc0 [ 64.720839][ T6054] netlink: 'syz.0.41': attribute type 4 has an invalid length. [ 64.722541][ T5850] Read of size 8 at addr ffff88803360cc98 by task kworker/u9:4/5850 [ 64.738053][ T5850] [ 64.740404][ T5850] CPU: 0 UID: 0 PID: 5850 Comm: kworker/u9:4 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 64.750913][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 64.760976][ T5850] Workqueue: hci0 hci_cmd_sync_work [ 64.766210][ T5850] Call Trace: [ 64.769504][ T5850] [ 64.772439][ T5850] dump_stack_lvl+0x241/0x360 [ 64.777132][ T5850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 64.782350][ T5850] ? __pfx__printk+0x10/0x10 [ 64.786962][ T5850] ? _printk+0xd5/0x120 [ 64.791142][ T5850] ? __virt_addr_valid+0x183/0x530 [ 64.796270][ T5850] ? __virt_addr_valid+0x183/0x530 [ 64.801398][ T5850] print_report+0x169/0x550 [ 64.805917][ T5850] ? __virt_addr_valid+0x183/0x530 [ 64.811046][ T5850] ? __virt_addr_valid+0x183/0x530 [ 64.816172][ T5850] ? __virt_addr_valid+0x45f/0x530 [ 64.821306][ T5850] ? __phys_addr+0xba/0x170 [ 64.825823][ T5850] ? set_powered_sync+0x3a/0xc0 [ 64.830694][ T5850] kasan_report+0x143/0x180 [ 64.835218][ T5850] ? set_powered_sync+0x3a/0xc0 [ 64.840089][ T5850] set_powered_sync+0x3a/0xc0 [ 64.844782][ T5850] ? __pfx_set_powered_sync+0x10/0x10 [ 64.850169][ T5850] hci_cmd_sync_work+0x22b/0x400 [ 64.855137][ T5850] ? process_scheduled_works+0x976/0x1850 [ 64.860879][ T5850] process_scheduled_works+0xa63/0x1850 [ 64.866461][ T5850] ? __pfx_process_scheduled_works+0x10/0x10 [ 64.872469][ T5850] ? assign_work+0x364/0x3d0 [ 64.877087][ T5850] worker_thread+0x870/0xd30 [ 64.881702][ T5850] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 64.887623][ T5850] ? __kthread_parkme+0x169/0x1d0 [ 64.892688][ T5850] ? __pfx_worker_thread+0x10/0x10 [ 64.897821][ T5850] kthread+0x2f0/0x390 [ 64.901909][ T5850] ? __pfx_worker_thread+0x10/0x10 [ 64.907045][ T5850] ? __pfx_kthread+0x10/0x10 [ 64.911655][ T5850] ret_from_fork+0x4b/0x80 [ 64.916082][ T5850] ? __pfx_kthread+0x10/0x10 [ 64.920678][ T5850] ret_from_fork_asm+0x1a/0x30 [ 64.925453][ T5850] [ 64.928470][ T5850] [ 64.930783][ T5850] Allocated by task 6069: [ 64.935105][ T5850] kasan_save_track+0x3f/0x80 [ 64.939790][ T5850] __kasan_kmalloc+0x98/0xb0 [ 64.944374][ T5850] __kmalloc_cache_noprof+0x19c/0x2c0 [ 64.949735][ T5850] mgmt_pending_new+0x65/0x250 [ 64.954485][ T5850] mgmt_pending_add+0x36/0x120 [ 64.959245][ T5850] set_powered+0x3cd/0x5e0 [ 64.963661][ T5850] hci_mgmt_cmd+0xc47/0x11d0 [ 64.968241][ T5850] hci_sock_sendmsg+0x7b8/0x11c0 [ 64.973170][ T5850] __sock_sendmsg+0x221/0x270 [ 64.977836][ T5850] sock_write_iter+0x2d7/0x3f0 [ 64.982587][ T5850] vfs_write+0xaeb/0xd30 [ 64.986821][ T5850] ksys_write+0x18f/0x2b0 [ 64.991142][ T5850] do_syscall_64+0xf3/0x230 [ 64.995633][ T5850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.001512][ T5850] [ 65.003825][ T5850] Freed by task 6059: [ 65.007791][ T5850] kasan_save_track+0x3f/0x80 [ 65.012458][ T5850] kasan_save_free_info+0x40/0x50 [ 65.017472][ T5850] __kasan_slab_free+0x59/0x70 [ 65.022231][ T5850] kfree+0x1a0/0x440 [ 65.026123][ T5850] settings_rsp+0x2bc/0x390 [ 65.030622][ T5850] mgmt_pending_foreach+0xd1/0x130 [ 65.035728][ T5850] __mgmt_power_off+0x106/0x430 [ 65.040577][ T5850] hci_dev_close_sync+0x6c4/0x11c0 [ 65.045681][ T5850] hci_dev_close+0x112/0x210 [ 65.050261][ T5850] sock_do_ioctl+0x158/0x460 [ 65.054846][ T5850] sock_ioctl+0x626/0x8e0 [ 65.059166][ T5850] __se_sys_ioctl+0xf5/0x170 [ 65.063748][ T5850] do_syscall_64+0xf3/0x230 [ 65.068238][ T5850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.074119][ T5850] [ 65.076429][ T5850] The buggy address belongs to the object at ffff88803360cc80 [ 65.076429][ T5850] which belongs to the cache kmalloc-96 of size 96 [ 65.090297][ T5850] The buggy address is located 24 bytes inside of [ 65.090297][ T5850] freed 96-byte region [ffff88803360cc80, ffff88803360cce0) [ 65.103919][ T5850] [ 65.106240][ T5850] The buggy address belongs to the physical page: [ 65.112642][ T5850] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3360c [ 65.121395][ T5850] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 65.128497][ T5850] page_type: f5(slab) [ 65.132467][ T5850] raw: 00fff00000000000 ffff88801ac41280 dead000000000122 0000000000000000 [ 65.141044][ T5850] raw: 0000000000000000 0000000000200020 00000001f5000000 0000000000000000 [ 65.149607][ T5850] page dumped because: kasan: bad access detected [ 65.156007][ T5850] page_owner tracks the page as allocated [ 65.161708][ T5850] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 6056, tgid 6056 (syz-executor), ts 64454498377, free_ts 64450212477 [ 65.181231][ T5850] post_alloc_hook+0x1f3/0x230 [ 65.185995][ T5850] get_page_from_freelist+0x3649/0x3790 [ 65.191539][ T5850] __alloc_pages_noprof+0x292/0x710 [ 65.196728][ T5850] alloc_slab_page+0x59/0x140 [ 65.201396][ T5850] allocate_slab+0x5a/0x2f0 [ 65.205889][ T5850] ___slab_alloc+0xcd1/0x14b0 [ 65.210553][ T5850] __slab_alloc+0x58/0xa0 [ 65.214870][ T5850] __kmalloc_node_noprof+0x286/0x440 [ 65.220145][ T5850] allocate_slab+0xb6/0x2f0 [ 65.224639][ T5850] ___slab_alloc+0xcd1/0x14b0 [ 65.229309][ T5850] __slab_alloc+0x58/0xa0 [ 65.233629][ T5850] kmem_cache_alloc_lru_noprof+0x1c5/0x2b0 [ 65.239426][ T5850] proc_alloc_inode+0x2a/0xc0 [ 65.244092][ T5850] alloc_inode+0x65/0x1a0 [ 65.248409][ T5850] new_inode+0x22/0x1d0 [ 65.252551][ T5850] proc_pid_make_inode+0x1f/0x130 [ 65.257563][ T5850] page last free pid 5895 tgid 5895 stack trace: [ 65.263873][ T5850] free_unref_page+0xdf9/0x1140 [ 65.268717][ T5850] rcu_core+0xaaa/0x17a0 [ 65.272958][ T5850] handle_softirqs+0x2c5/0x980 [ 65.277710][ T5850] do_softirq+0x11b/0x1e0 [ 65.282031][ T5850] __local_bh_enable_ip+0x1bb/0x200 [ 65.287219][ T5850] tipc_net_finalize+0x1f4/0x340 [ 65.292144][ T5850] process_scheduled_works+0xa63/0x1850 [ 65.297680][ T5850] worker_thread+0x870/0xd30 [ 65.302259][ T5850] kthread+0x2f0/0x390 [ 65.306315][ T5850] ret_from_fork+0x4b/0x80 [ 65.310715][ T5850] ret_from_fork_asm+0x1a/0x30 [ 65.315470][ T5850] [ 65.317777][ T5850] Memory state around the buggy address: [ 65.323389][ T5850] ffff88803360cb80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 65.331436][ T5850] ffff88803360cc00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 65.339482][ T5850] >ffff88803360cc80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 65.347529][ T5850] ^ [ 65.352361][ T5850] ffff88803360cd00: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 65.360407][ T5850] ffff88803360cd80: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 65.368452][ T5850] ================================================================== [ 65.379743][ T5850] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 65.386947][ T5850] CPU: 0 UID: 0 PID: 5850 Comm: kworker/u9:4 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 65.397444][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 65.407490][ T5850] Workqueue: hci0 hci_cmd_sync_work [ 65.412687][ T5850] Call Trace: [ 65.415962][ T5850] [ 65.418885][ T5850] dump_stack_lvl+0x241/0x360 [ 65.423556][ T5850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 65.428744][ T5850] ? __pfx__printk+0x10/0x10 [ 65.433333][ T5850] ? preempt_schedule+0xe1/0xf0 [ 65.438183][ T5850] ? vscnprintf+0x5d/0x90 [ 65.442503][ T5850] panic+0x349/0x880 [ 65.446390][ T5850] ? check_panic_on_warn+0x21/0xb0 [ 65.451490][ T5850] ? __pfx_panic+0x10/0x10 [ 65.455904][ T5850] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 65.461876][ T5850] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 65.468194][ T5850] ? print_report+0x502/0x550 [ 65.472862][ T5850] check_panic_on_warn+0x86/0xb0 [ 65.477786][ T5850] ? set_powered_sync+0x3a/0xc0 [ 65.482628][ T5850] end_report+0x77/0x160 [ 65.486857][ T5850] kasan_report+0x154/0x180 [ 65.491348][ T5850] ? set_powered_sync+0x3a/0xc0 [ 65.496188][ T5850] set_powered_sync+0x3a/0xc0 [ 65.500852][ T5850] ? __pfx_set_powered_sync+0x10/0x10 [ 65.506218][ T5850] hci_cmd_sync_work+0x22b/0x400 [ 65.511151][ T5850] ? process_scheduled_works+0x976/0x1850 [ 65.516864][ T5850] process_scheduled_works+0xa63/0x1850 [ 65.522412][ T5850] ? __pfx_process_scheduled_works+0x10/0x10 [ 65.528386][ T5850] ? assign_work+0x364/0x3d0 [ 65.532979][ T5850] worker_thread+0x870/0xd30 [ 65.537570][ T5850] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 65.543457][ T5850] ? __kthread_parkme+0x169/0x1d0 [ 65.548476][ T5850] ? __pfx_worker_thread+0x10/0x10 [ 65.553581][ T5850] kthread+0x2f0/0x390 [ 65.557639][ T5850] ? __pfx_worker_thread+0x10/0x10 [ 65.562747][ T5850] ? __pfx_kthread+0x10/0x10 [ 65.567324][ T5850] ret_from_fork+0x4b/0x80 [ 65.571724][ T5850] ? __pfx_kthread+0x10/0x10 [ 65.576300][ T5850] ret_from_fork_asm+0x1a/0x30 [ 65.581059][ T5850] [ 65.584302][ T5850] Kernel Offset: disabled [ 65.588616][ T5850] Rebooting in 86400 seconds..