last executing test programs: 10.819138536s ago: executing program 0 (id=182): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000680)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060200000800020011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r2 = socket(0x28, 0x5, 0x0) (async) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) (async) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x8080) r4 = accept4$unix(r3, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/266, 0x10a, 0x100, 0x0, 0x0) (async) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f0000000540), 0x4) (async) sendmsg$inet(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)="69a8d2cf824912834f46b89c9487e0a1d87cfa261568c291eb709bb1b3f9633d861fa3f755a9548997b6898bc09323f2d5ea8c6eaea1cf2c5a55f005898eb6635f", 0x41}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) (async) sendto$inet(r0, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001800ffff01000000000000000a000000ffe0ff08"], 0x1c}}, 0x4004001) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c0002801400030020fd000000000000000000000000000114000200fc"], 0x5c}}, 0x0) 10.586764269s ago: executing program 0 (id=184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000200)) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r7, 0x0, 0x6a) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x8ec3, 0x0) readv(r6, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x6e}], 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) splice(r6, 0x0, r8, 0x0, 0x800, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) close(r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000022", @ANYRES16=r4, @ANYBLOB="0100000000000000000006000009"], 0x14}, 0x2, 0x34005}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 10.127412441s ago: executing program 0 (id=186): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="88764ec4680b39f0d625d332321c1fc41fcef960b97ffc", 0x17) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000cf62a9ed000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000500000000000000852000000000000018600000000000000000000000000000bf91000000000000b7020000000000008500000001000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000440)={'wlan0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11}}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmsg$can_j1939(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2060) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000740)={'veth1_vlan\x00', &(0x7f0000000700)=@ethtool_cmd={0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0xc4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324", 0x12}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0)=0x8, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r7, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 9.032919127s ago: executing program 0 (id=196): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000200)) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r7, 0x0, 0x6a) splice(r4, 0x0, r7, 0x0, 0x8ec3, 0x0) readv(r6, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x6e}], 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) splice(r6, 0x0, r8, 0x0, 0x800, 0x0) write$binfmt_elf64(r5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) close(r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000022", @ANYRES16=r3, @ANYBLOB="0100000000000000000006000009"], 0x14}, 0x2, 0x34005}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 8.492238486s ago: executing program 0 (id=201): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x800, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) close(r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000022", @ANYRES16, @ANYBLOB="0100000000000000000006000009"], 0x14}, 0x2, 0x34005}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 8.038338478s ago: executing program 0 (id=203): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000017c0)='kfree\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000017c0)='kfree\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x1ff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001c00)=ANY=[@ANYBLOB="140100001f00010000000000000000000401"], 0x114}], 0x1}, 0x0) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001c00)=ANY=[@ANYBLOB="140100001f00010000000000000000000401"], 0x114}], 0x1}, 0x0) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) unshare(0x20040600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000000c0)=0x80000) (async) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000000c0)=0x80000) shutdown(0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x81114021}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r5], 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048004) (async) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x81114021}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r5], 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="56ff34be368b36f4e7000000000000000000"], 0x30}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="56ff34be368b36f4e7000000000000000000"], 0x30}}, 0x0) socket(0x2, 0x3, 0x9) (async) r6 = socket(0x2, 0x3, 0x9) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (async) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000004780)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{&(0x7f00000031c0)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000004500)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x44) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) (async) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000006d000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000052b18c7f6261016164765f736c6176655f303a8c"], 0x4c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpu.stat\x00', 0x26e1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}}}}}}, 0x0) 5.679084422s ago: executing program 2 (id=220): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r3, 0x1, 0xfffffeff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{}, {0x3}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @void}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={0x0, 0x43c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="0a0034000202020202020000040067000400cc00040008010600660000000000"], 0x3c}}, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x19, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0x1, "a78ce540065980"}]}}}}}}, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000880)={'macvlan1\x00', 0x0}) sendto$packet(r10, 0x0, 0x64, 0x0, &(0x7f00000001c0)={0x11, 0x1, r11, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000d52f1640e032945295759fb7ecc3052670e75bda915536f9ac493f793446afa557281b5a94f0d093ab8fd4fd71f49402f923bedc3f0c592fef987179a2740b2294f22c92bbaa13718ce44160c47983194c85d6ecee48e98298a6fe522c559364c9cbb3d1a32812554c5d3d939a66fa6298ce960dea24b85d9b284f0b839719e508e2c2aef2b84dbe30a8a85247ebe249a775b431ab25bf894f2916e866f7e94d5aa13c4e9e9c2d588c9f55f0e5e87fd6446ac6a77d", @ANYRES16=r8, @ANYBLOB="000125bd7000fbdbdf253500000008000300", @ANYRES32=r9, @ANYBLOB="0c009900000400002b0000000a000600ffffffffffff00000600fd00ffff00000500200100000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000015000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000140300000ee600f06702000014000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c78cd3e7dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25"], &(0x7f0000000100)='GPL\x00'}, 0x48) 5.236269671s ago: executing program 4 (id=222): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r3, 0x1, 0xfffffeff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{}, {0x3}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @void}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={0x0, 0x43c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002e00000008000300", @ANYBLOB="0a0034000202020202020000040067000400cc00040008010600660000000000"], 0x3c}}, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x19, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0x1, "a78ce540065980"}]}}}}}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd9d) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000880)={'macvlan1\x00', 0x0}) sendto$packet(r9, 0x0, 0x64, 0x0, &(0x7f00000001c0)={0x11, 0x1, r10, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000d52f1640e032945295759fb7ecc3052670e75bda915536f9ac493f793446afa557281b5a94f0d093ab8fd4fd71f49402f923bedc3f0c592fef987179a2740b2294f22c92bbaa13718ce44160c47983194c85d6ecee48e98298a6fe522c559364c9cbb3d1a32812554c5d3d939a66fa6298ce960dea24b85d9b284f0b839719e508e2c2aef2b84dbe30a8a85247ebe249a775b431ab25bf894f2916e866f7e94d5aa13c4e9e9c2d588c9f55f0e5e87fd6446ac6a77d", @ANYRES16=r7, @ANYBLOB="000125bd7000fbdbdf253500000008000300", @ANYRES32=r8, @ANYBLOB="0c009900000400002b0000000a000600ffffffffffff00000600fd00ffff00000500200100000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 4.408997333s ago: executing program 1 (id=225): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{}, {0x3}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @void}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={0x0, 0x43c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="0a0034000202020202020000040067000400cc00040008010600660000000000"], 0x3c}}, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x19, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0x1, "a78ce540065980"}]}}}}}}, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000880)={'macvlan1\x00', 0x0}) sendto$packet(r10, 0x0, 0x64, 0x0, &(0x7f00000001c0)={0x11, 0x1, r11, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000d52f1640e032945295759fb7ecc3052670e75bda915536f9ac493f793446afa557281b5a94f0d093ab8fd4fd71f49402f923bedc3f0c592fef987179a2740b2294f22c92bbaa13718ce44160c47983194c85d6ecee48e98298a6fe522c559364c9cbb3d1a32812554c5d3d939a66fa6298ce960dea24b85d9b284f0b839719e508e2c2aef2b84dbe30a8a85247ebe249a775b431ab25bf894f2916e866f7e94d5aa13c4e9e9c2d588c9f55f0e5e87fd6446ac6a77d", @ANYRES16=r8, @ANYBLOB="000125bd7000fbdbdf253500000008000300", @ANYRES32=r9, @ANYBLOB="0c009900000400002b0000000a000600ffffffffffff00000600fd00ffff00000500200100000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendfile(r5, r6, 0x0, 0x8000002b) 4.001149104s ago: executing program 2 (id=227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000200)) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r7, 0x0, 0x6a) splice(r4, 0x0, r7, 0x0, 0x8ec3, 0x0) readv(r6, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x6e}], 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) splice(r6, 0x0, r8, 0x0, 0x800, 0x0) write$binfmt_elf64(r5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) close(r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000022", @ANYRES16=r3, @ANYBLOB="0100000000000000000006000009"], 0x14}, 0x2, 0x34005}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) 3.982815134s ago: executing program 4 (id=228): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000200)) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x800, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) close(r4) 3.510892648s ago: executing program 4 (id=229): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.self_freezing\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000340)="a9e5d006525761e0928809220b90123a468521017fc46f175e044c9f94e1d70a4b45a187b448f00e93e8bcc7f2f43fe1bec1905864e0923557eac339d1c627cc1f0ea79a3b24eaf3cc51e38f1509770198f231da2433cf72f441b9c9a9a6a34542c62fb89ab094af6515ab32d5ac739a68fc72c49d6e999c907aea59efacccb8b8b24a3fd8656f973cb1908fa76d15231da0a2298fcf380e2faf1d7618c348d1b3888fdde3d847de604f5596ae0904b95b6a8279a45406dc97147f99ebf464f234a8fd298f425581f4656b596a9d6c0a674718a7397cf597dd5a53b8e77bd9fc8686ad79a8610fbb7bd5e34887b8ec5a7c13b8f9fe7ee7bc2921474f4ca8d31ecaa6d40ca95b4ed6162f225554a03afb60d13aff0daf50ca12926917279faad9bc5efa449aae1817e8", 0x129}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xa, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0}, 0x90) 3.365067979s ago: executing program 1 (id=230): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000001480)=ANY=[], 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xd3, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000300), 0x0}, 0x20) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0xc0000) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000580)={0x81, {{0xa, 0x4e20, 0x6, @private0}}, 0x0, 0x4, [{{0xa, 0x4e22, 0xffffffff, @rand_addr=' \x01\x00', 0x1}}, {{0xa, 0x4e23, 0x2, @private0, 0x400}}, {{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff}}, {{0xa, 0x4e21, 0x46a, @private1={0xfc, 0x1, '\x00', 0x1}}}]}, 0x290) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$rxrpc(0x21, 0x2, 0x0) connect$rxrpc(r7, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000004c0)={0x0, 0xffffffc3, &(0x7f0000000480)={&(0x7f0000000240)={0x40, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x40}}, 0x0) 3.284656006s ago: executing program 4 (id=231): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x8ec3, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) close(r4) 2.978396586s ago: executing program 4 (id=232): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r3, 0x1, 0xfffffeff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{}, {0x3}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @void}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={0x0, 0x43c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="0a0034000202020202020000040067000400cc00040008010600660000000000"], 0x3c}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000880)={'macvlan1\x00', 0x0}) sendto$packet(r10, 0x0, 0x64, 0x0, &(0x7f00000001c0)={0x11, 0x1, r11, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000d52f1640e032945295759fb7ecc3052670e75bda915536f9ac493f793446afa557281b5a94f0d093ab8fd4fd71f49402f923bedc3f0c592fef987179a2740b2294f22c92bbaa13718ce44160c47983194c85d6ecee48e98298a6fe522c559364c9cbb3d1a32812554c5d3d939a66fa6298ce960dea24b85d9b284f0b839719e508e2c2aef2b84dbe30a8a85247ebe249a775b431ab25bf894f2916e866f7e94d5aa13c4e9e9c2d588c9f55f0e5e87fd6446ac6a77d", @ANYRES16=r8, @ANYBLOB="000125bd7000fbdbdf253500000008000300", @ANYRES32=r9, @ANYBLOB="0c009900000400002b0000000a000600ffffffffffff00000600fd00ffff00000500200100000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000015000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000140300000ee600f06702000014000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c78cd3e7dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendfile(r5, r6, 0x0, 0x8000002b) 2.929418438s ago: executing program 2 (id=233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8feffffb703000000000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, r6}, 0x38) socket$packet(0x11, 0x3, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@local, @random="b0c942034375", @val={@void}, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @rand_addr=0x64010101, {[@noop]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x0, 0x8, 0x1}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 2.901571291s ago: executing program 1 (id=234): getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0) (async) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x1, 0x0, 0x0) (async) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1a}]}}}]}]}], {0x14}}, 0x70}}, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0xa, 0x0) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6}, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x0, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a80)=ANY=[@ANYBLOB="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"], 0x1cdc}}, 0x0) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001800), 0xffffffffffffffff) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000001b80)={0x0, 0x3, &(0x7f0000001b40)={&(0x7f0000001a40)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050600000000000000002000f1ff0b001000010000000100000024002d80080003002d0000000500010000000000050004000000000008005ef257830000"], 0x44}}, 0x0) (async) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="73797a31aeee0d7f06e13db399f3d34af9488d244bdd550d89553108459fc3868ec5d122453e2716c100"/54], 0xe) 2.586821898s ago: executing program 1 (id=235): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f00000001c0)=0x3, 0x4) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) close(r3) pipe(&(0x7f0000000080)={0xffffffffffffffff}) readv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x4b}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x1f, 0x0, 0x2, 0x400, 0x4, 0x1000, 0x20, 0x1fe0000, r6}, &(0x7f00000000c0)=0x20) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r7, 0x0) 2.549599265s ago: executing program 3 (id=236): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="88764ec4680b39f0d625d332321c1fc41fcef960b97ffc", 0x17) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000cf62a9ed000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000500000000000000852000000000000018600000000000000000000000000000bf91000000000000b7020000000000008500000001000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000440)={'wlan0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmsg$can_j1939(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2060) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0xc4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324", 0x12}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0)=0x8, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r8, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 2.030932356s ago: executing program 2 (id=237): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r3, 0x1, 0xfffffeff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{}, {0x3}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @void}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={0x0, 0x43c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="0a0034000202020202020000040067000400cc00040008010600660000000000"], 0x3c}}, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x19, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0x1, "a78ce540065980"}]}}}}}}, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000880)={'macvlan1\x00', 0x0}) sendto$packet(r10, 0x0, 0x64, 0x0, &(0x7f00000001c0)={0x11, 0x1, r11, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000d52f1640e032945295759fb7ecc3052670e75bda915536f9ac493f793446afa557281b5a94f0d093ab8fd4fd71f49402f923bedc3f0c592fef987179a2740b2294f22c92bbaa13718ce44160c47983194c85d6ecee48e98298a6fe522c559364c9cbb3d1a32812554c5d3d939a66fa6298ce960dea24b85d9b284f0b839719e508e2c2aef2b84dbe30a8a85247ebe249a775b431ab25bf894f2916e866f7e94d5aa13c4e9e9c2d588c9f55f0e5e87fd6446ac6a77d", @ANYRES16=r8, @ANYBLOB="000125bd7000fbdbdf253500000008000300", @ANYRES32=r9, @ANYBLOB="0c009900000400002b0000000a000600ffffffffffff00000600fd00ffff00000500200100000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.42669145s ago: executing program 1 (id=238): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r3, 0x1, 0xfffffeff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{}, {0x3}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @void}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002e00000008000300", @ANYBLOB="0a0034000202020202020000040067000400cc00040008010600660000000000"], 0x3c}}, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x19, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0x1, "a78ce540065980"}]}}}}}}, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000880)={'macvlan1\x00', 0x0}) sendto$packet(r10, 0x0, 0x64, 0x0, &(0x7f00000001c0)={0x11, 0x1, r11, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000d52f1640e032945295759fb7ecc3052670e75bda915536f9ac493f793446afa557281b5a94f0d093ab8fd4fd71f49402f923bedc3f0c592fef987179a2740b2294f22c92bbaa13718ce44160c47983194c85d6ecee48e98298a6fe522c559364c9cbb3d1a32812554c5d3d939a66fa6298ce960dea24b85d9b284f0b839719e508e2c2aef2b84dbe30a8a85247ebe249a775b431ab25bf894f2916e866f7e94d5aa13c4e9e9c2d588c9f55f0e5e87fd6446ac6a77d", @ANYRES16=r8, @ANYBLOB="000125bd7000fbdbdf253500000008000300", @ANYRES32=r9, @ANYBLOB="0c009900000400002b0000000a000600ffffffffffff00000600fd00ffff00000500200100000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.389353239s ago: executing program 3 (id=239): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@deltaction={0x2a8, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x2a8}}, 0x0) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0xc38}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x1bc}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x300}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.353096382s ago: executing program 4 (id=240): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{}, {0x3}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @void}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={0x0, 0x43c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="0a0034000202020202020000040067000400cc00040008010600660000000000"], 0x3c}}, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x19, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0x1, "a78ce540065980"}]}}}}}}, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000880)={'macvlan1\x00', 0x0}) sendto$packet(r10, 0x0, 0x64, 0x0, &(0x7f00000001c0)={0x11, 0x1, r11, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000d52f1640e032945295759fb7ecc3052670e75bda915536f9ac493f793446afa557281b5a94f0d093ab8fd4fd71f49402f923bedc3f0c592fef987179a2740b2294f22c92bbaa13718ce44160c47983194c85d6ecee48e98298a6fe522c559364c9cbb3d1a32812554c5d3d939a66fa6298ce960dea24b85d9b284f0b839719e508e2c2aef2b84dbe30a8a85247ebe249a775b431ab25bf894f2916e866f7e94d5aa13c4e9e9c2d588c9f55f0e5e87fd6446ac6a77d", @ANYRES16=r8, @ANYBLOB="000125bd7000fbdbdf253500000008000300", @ANYRES32=r9, @ANYBLOB="0c009900000400002b0000000a000600ffffffffffff00000600fd00ffff00000500200100000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendfile(r5, r6, 0x0, 0x8000002b) 1.142978915s ago: executing program 3 (id=241): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.self_freezing\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000340)="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", 0x129}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xa, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0}, 0x90) 974.701771ms ago: executing program 2 (id=242): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000080), 0x10) listen(r4, 0x0) listen(r4, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) r5 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000429bd7000fedbdf251a00000008000300", @ANYRES32=r6, @ANYBLOB="1c002e8006000200ffff00000600010009000000060002000200000008000300", @ANYRES32=r3, @ANYBLOB="10002e800c04000202aaaa3faaaaaa00"], 0x50}, 0x1, 0x0, 0x0, 0x8000804}, 0x4044001) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000340)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r1) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r7, 0x0, 0x2000c051) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e37080c188009ac0f000300", 0x33fe0}], 0x1}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000006d000100"/20, @ANYRESOCT=r8, @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x1c000}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in=@remote, @in=@remote}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000300)=0x9d) 909.537437ms ago: executing program 3 (id=243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000200)) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r6, 0x0, 0x6a) splice(r3, 0x0, r6, 0x0, 0x8ec3, 0x0) readv(r5, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x6e}], 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) splice(r5, 0x0, r7, 0x0, 0x800, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) close(r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000022", @ANYRES16, @ANYBLOB="0100000000000000000006000009"], 0x14}, 0x2, 0x34005}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) 330.704733ms ago: executing program 3 (id=244): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000001380)}}], 0x1, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x2, 0x3a) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) close(r3) socket$phonet(0x23, 0x2, 0x1) sendto$phonet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde6) close(r3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x18, r4, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x4, 0x10d}]}, 0x18}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x54, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @deauth={{{}, {}, @broadcast}, 0x0, @val={0x8c, 0x18, {0x0, "031686e62c78", @long="71af0ef2355a69d2dd510d0ca89bd043"}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067726574697000001400028008000400020000000600010245a27bed"], 0x44}}, 0x0) r10 = socket(0x40000000015, 0x3, 0x3fe) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r10, 0x6628) 240.983467ms ago: executing program 1 (id=245): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000006800010000f40100000000000a0000000400000004"], 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000009000000000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket(0x1d, 0x2, 0x6) socket$caif_stream(0x25, 0x1, 0x0) pipe(&(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB="ac9198b52678af1b37c5e09a5fc3454d9a62d0d60666c398c5e952d22c5ebcd2be926dbe06528ca3fed0fb3f"], 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x220, 0x110, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000100), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @private=0xa010102, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@local, @loopback, @broadcast, 0x2}}}, {{@arp={@loopback, @broadcast, 0x80000000, 0xffffffff, 0x10, 0x8, {@mac, {[0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0xa0, 0x3, 0x9, 0x1, 0x9, 0xf800, 'macvtap0\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x12}, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) r6 = socket$inet(0xa, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x618, 0x98, 0x138, 0x210, 0x138, 0x2b0, 0x580, 0x580, 0x580, 0x580, 0x580, 0x6, 0x0, {[{{@ip={@rand_addr, @private, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'ipvlan0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x0, 0x43}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @TTL={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'pimreg1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x2a0, 0x2d0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x678) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'/11], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 69.758305ms ago: executing program 2 (id=246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1800, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) 0s ago: executing program 3 (id=247): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000740)=[{&(0x7f0000000340)="15", 0x1}, {&(0x7f0000000480)='\x00\x00t', 0x3}, {&(0x7f0000000040)="1f478d", 0x3}, {&(0x7f0000000000)="efce55", 0x3}, {&(0x7f0000000540)="94eaadd7c66d2a2ef2da40569fb064209dfb1e048b03bc0e43680764b5e473e0e673ed11c936bf3050d3613e9a662ffb527457da1b63290d09e69f62049073d137bc7dbd1d2a32d2e190b19ab0b3b29d7972cd2bfe673068c36a57668c4abf830afd43e5dfe418645dfa4cb7bfc676feef167924a4f068e5e244e0", 0x7b}, {&(0x7f0000000080)='R@', 0x2}, {&(0x7f0000001840)="7504", 0x2}, {&(0x7f0000001900)="d3", 0x1}, {&(0x7f0000000200)='[', 0x1}], 0x9) (async) write$binfmt_script(r2, &(0x7f0000000040), 0x18a3c85) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) (async) r4 = accept$alg(r3, 0x0, 0x0) sendfile(r4, r2, 0x0, 0xf) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000240)={0x14, r1, 0x50e30db85b07bfe3}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.92' (ED25519) to the list of known hosts. [ 69.126855][ T5086] cgroup: Unknown subsys name 'net' [ 69.300757][ T5086] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.004324][ T5086] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.594028][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.606777][ T5103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.614522][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.623527][ T5103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.641290][ T5103] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.650305][ T5103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.658607][ T5103] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.666348][ T5103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.675983][ T4493] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.699213][ T5098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.706848][ T4493] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.715509][ T4493] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.723842][ T4493] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.733203][ T4493] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.742425][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.761651][ T4493] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.772772][ T5098] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.780340][ T5098] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.789401][ T5098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.797931][ T5098] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.809220][ T5098] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.816747][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.833405][ T5110] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.842493][ T5098] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.847812][ T5110] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.858792][ T5098] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.866504][ T5110] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.868614][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.873713][ T5110] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.880341][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.888262][ T5110] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.901594][ T5110] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.316811][ T5096] chnl_net:caif_netlink_parms(): no params data found [ 72.507309][ T5104] chnl_net:caif_netlink_parms(): no params data found [ 72.658737][ T5105] chnl_net:caif_netlink_parms(): no params data found [ 72.677554][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.684893][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.693626][ T5096] bridge_slave_0: entered allmulticast mode [ 72.700976][ T5096] bridge_slave_0: entered promiscuous mode [ 72.709481][ T5095] chnl_net:caif_netlink_parms(): no params data found [ 72.734137][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.742401][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.749760][ T5096] bridge_slave_1: entered allmulticast mode [ 72.758274][ T5096] bridge_slave_1: entered promiscuous mode [ 72.840130][ T5107] chnl_net:caif_netlink_parms(): no params data found [ 72.903786][ T5096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.947638][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.955109][ T5104] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.962533][ T5104] bridge_slave_0: entered allmulticast mode [ 72.969599][ T5104] bridge_slave_0: entered promiscuous mode [ 72.980177][ T5096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.041031][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.048192][ T5104] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.056305][ T5104] bridge_slave_1: entered allmulticast mode [ 73.063495][ T5104] bridge_slave_1: entered promiscuous mode [ 73.086261][ T5096] team0: Port device team_slave_0 added [ 73.096301][ T5096] team0: Port device team_slave_1 added [ 73.177263][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.184524][ T5105] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.191910][ T5105] bridge_slave_0: entered allmulticast mode [ 73.198977][ T5105] bridge_slave_0: entered promiscuous mode [ 73.207599][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.214915][ T5105] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.222364][ T5105] bridge_slave_1: entered allmulticast mode [ 73.229435][ T5105] bridge_slave_1: entered promiscuous mode [ 73.239453][ T5104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.283938][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.292243][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.299486][ T5095] bridge_slave_0: entered allmulticast mode [ 73.306910][ T5095] bridge_slave_0: entered promiscuous mode [ 73.338561][ T5104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.358814][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.365927][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.392230][ T5096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.404586][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.411906][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.419129][ T5095] bridge_slave_1: entered allmulticast mode [ 73.426877][ T5095] bridge_slave_1: entered promiscuous mode [ 73.509988][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.517368][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.544278][ T5096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.576824][ T5105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.589962][ T5105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.604266][ T5104] team0: Port device team_slave_0 added [ 73.610601][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.618130][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.625926][ T5107] bridge_slave_0: entered allmulticast mode [ 73.634344][ T5107] bridge_slave_0: entered promiscuous mode [ 73.648039][ T5095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.679253][ T5104] team0: Port device team_slave_1 added [ 73.686073][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.693646][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.701039][ T5107] bridge_slave_1: entered allmulticast mode [ 73.706370][ T5098] Bluetooth: hci0: command tx timeout [ 73.708641][ T5107] bridge_slave_1: entered promiscuous mode [ 73.747767][ T5095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.781215][ T5098] Bluetooth: hci1: command tx timeout [ 73.819077][ T5096] hsr_slave_0: entered promiscuous mode [ 73.826458][ T5096] hsr_slave_1: entered promiscuous mode [ 73.861174][ T5098] Bluetooth: hci2: command tx timeout [ 73.869261][ T5095] team0: Port device team_slave_0 added [ 73.879358][ T5105] team0: Port device team_slave_0 added [ 73.889006][ T5105] team0: Port device team_slave_1 added [ 73.929292][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.942354][ T5095] team0: Port device team_slave_1 added [ 73.973894][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.981676][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.008187][ T5104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.031061][ T5098] Bluetooth: hci4: command tx timeout [ 74.036888][ T5098] Bluetooth: hci3: command tx timeout [ 74.046500][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.093858][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.102897][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.129593][ T5104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.169480][ T5107] team0: Port device team_slave_0 added [ 74.176655][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.183882][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.210156][ T5095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.223483][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.230582][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.256607][ T5095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.269537][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.276632][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.302759][ T5105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.315916][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.323003][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.349061][ T5105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.404734][ T5107] team0: Port device team_slave_1 added [ 74.453267][ T5104] hsr_slave_0: entered promiscuous mode [ 74.460393][ T5104] hsr_slave_1: entered promiscuous mode [ 74.466963][ T5104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.475205][ T5104] Cannot create hsr debugfs directory [ 74.530111][ T5105] hsr_slave_0: entered promiscuous mode [ 74.537406][ T5105] hsr_slave_1: entered promiscuous mode [ 74.544323][ T5105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.552405][ T5105] Cannot create hsr debugfs directory [ 74.589252][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.596524][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.622659][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.683510][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.690527][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.717234][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.764004][ T5095] hsr_slave_0: entered promiscuous mode [ 74.770490][ T5095] hsr_slave_1: entered promiscuous mode [ 74.777658][ T5095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.785949][ T5095] Cannot create hsr debugfs directory [ 74.955012][ T5107] hsr_slave_0: entered promiscuous mode [ 74.965741][ T5107] hsr_slave_1: entered promiscuous mode [ 74.972123][ T5107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.979696][ T5107] Cannot create hsr debugfs directory [ 75.265873][ T5096] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.291990][ T5096] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.305951][ T5096] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.334173][ T5096] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.405464][ T5105] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.426541][ T5105] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.440220][ T5105] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.466019][ T5105] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.532819][ T5104] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.553918][ T5104] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.571713][ T5104] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.612233][ T5104] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.716051][ T5095] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.727772][ T5095] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.739838][ T5095] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.782165][ T5098] Bluetooth: hci0: command tx timeout [ 75.798594][ T5095] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.861855][ T5098] Bluetooth: hci1: command tx timeout [ 75.895364][ T5096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.917324][ T5107] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.941298][ T5098] Bluetooth: hci2: command tx timeout [ 75.951600][ T5107] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.965524][ T5107] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.990473][ T5107] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.073209][ T5096] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.101194][ T53] Bluetooth: hci3: command tx timeout [ 76.103079][ T5104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.107250][ T5098] Bluetooth: hci4: command tx timeout [ 76.145983][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.153522][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.194519][ T5105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.207159][ T5104] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.233821][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.241777][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.251894][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.259086][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.316877][ T5105] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.340231][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.347460][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.404227][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.411469][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.537289][ T5095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.560703][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.567960][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.667691][ T5095] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.777986][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.785292][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.820511][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.827753][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.903031][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.971887][ T5096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.999109][ T5107] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.095789][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.103055][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.121740][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.128944][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.204577][ T5104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.222275][ T5105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.322342][ T5096] veth0_vlan: entered promiscuous mode [ 77.412527][ T5096] veth1_vlan: entered promiscuous mode [ 77.482013][ T5104] veth0_vlan: entered promiscuous mode [ 77.591899][ T5104] veth1_vlan: entered promiscuous mode [ 77.677227][ T5096] veth0_macvtap: entered promiscuous mode [ 77.756987][ T5095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.774353][ T5096] veth1_macvtap: entered promiscuous mode [ 77.834049][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.862070][ T5098] Bluetooth: hci0: command tx timeout [ 77.875121][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.896711][ T5104] veth0_macvtap: entered promiscuous mode [ 77.924369][ T5096] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.934733][ T5096] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.945050][ T5096] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.951850][ T5098] Bluetooth: hci1: command tx timeout [ 77.958323][ T5096] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.984069][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.009216][ T5104] veth1_macvtap: entered promiscuous mode [ 78.022880][ T5098] Bluetooth: hci2: command tx timeout [ 78.084144][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.095781][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.110319][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.143918][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.157424][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.179111][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.191369][ T5098] Bluetooth: hci4: command tx timeout [ 78.196849][ T5098] Bluetooth: hci3: command tx timeout [ 78.212176][ T5105] veth0_vlan: entered promiscuous mode [ 78.220199][ T5095] veth0_vlan: entered promiscuous mode [ 78.264086][ T5104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.273470][ T5104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.283139][ T5104] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.292161][ T5104] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.325892][ T5095] veth1_vlan: entered promiscuous mode [ 78.346596][ T2873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.362940][ T2873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.404517][ T5105] veth1_vlan: entered promiscuous mode [ 78.466421][ T5107] veth0_vlan: entered promiscuous mode [ 78.488167][ T2873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.496908][ T2873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.548231][ T5107] veth1_vlan: entered promiscuous mode [ 78.571035][ T2873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.587355][ T5095] veth0_macvtap: entered promiscuous mode [ 78.598471][ T2873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.638176][ T5095] veth1_macvtap: entered promiscuous mode [ 78.680259][ T2823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.702886][ T2823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.755505][ T5105] veth0_macvtap: entered promiscuous mode [ 78.783765][ T5107] veth0_macvtap: entered promiscuous mode [ 78.815336][ T5105] veth1_macvtap: entered promiscuous mode [ 78.837520][ T5107] veth1_macvtap: entered promiscuous mode [ 78.854508][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.868361][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.878602][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.889525][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.905946][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.962769][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.973862][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.985821][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.000724][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.032969][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.047334][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.072634][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.088093][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.099135][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.109614][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.120624][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.141235][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.180092][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.194241][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.204946][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.216086][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.226808][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.237893][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.266138][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.290219][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.328025][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.340159][ T5095] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.360193][ T5095] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.369347][ T5095] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.386338][ T5095] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.414080][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.435723][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.457708][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.496265][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.503883][ T5185] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.519425][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.543307][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.558526][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.575957][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.596690][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.609200][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.620136][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.633304][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.644254][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.654469][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.665664][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.679093][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.716455][ T5107] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.744043][ T5107] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.762700][ T5107] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.785448][ T5107] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.806740][ T5105] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.841112][ T5105] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.850013][ T5105] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.865889][ T5105] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.954852][ T5098] Bluetooth: hci0: command tx timeout [ 80.021396][ T5098] Bluetooth: hci1: command tx timeout [ 80.089066][ T5185] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 80.106373][ T5185] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 80.116597][ T5098] Bluetooth: hci2: command tx timeout [ 80.261563][ T5098] Bluetooth: hci3: command tx timeout [ 80.262043][ T53] Bluetooth: hci4: command tx timeout [ 80.339710][ T2886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.377747][ T2886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.467137][ T2834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.480214][ T2834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.567557][ T2834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.585892][ T2834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.659356][ T2873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.677381][ T2873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.732349][ T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.740240][ T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.893167][ T2823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.934349][ T2823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.970554][ T5204] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 81.002869][ T5204] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 81.020153][ T5204] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 81.040060][ T5204] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 81.063476][ T5204] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 81.077451][ T5204] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 81.146675][ T5204] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 81.235186][ T5204] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 81.244492][ T5204] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 81.255436][ T5204] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 81.580354][ T5226] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12'. [ 81.977665][ T5239] netlink: 'syz.2.16': attribute type 10 has an invalid length. [ 82.103565][ T5239] batman_adv: batadv0: Adding interface: team0 [ 82.129846][ T5239] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.209826][ T5239] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 83.092520][ T5271] netlink: 'syz.1.25': attribute type 13 has an invalid length. [ 83.181738][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807c383400: rx timeout, send abort [ 83.221045][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807c383c00: rx timeout, send abort [ 83.691723][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807c383400: abort rx timeout. Force session deactivation [ 83.729446][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807c383c00: abort rx timeout. Force session deactivation [ 84.810297][ T5311] netlink: 20 bytes leftover after parsing attributes in process `syz.4.34'. [ 84.927162][ T5318] netlink: 'syz.4.34': attribute type 13 has an invalid length. [ 84.958248][ T5318] veth0_macvtap: left promiscuous mode [ 85.019716][ T5318] macvtap0: entered allmulticast mode [ 85.072607][ T5318] macvtap0: refused to change device tx_queue_len [ 85.618041][ T5344] netlink: 'syz.0.44': attribute type 13 has an invalid length. [ 86.219258][ T5363] netlink: 'syz.2.49': attribute type 10 has an invalid length. [ 87.411513][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802aba9400: rx timeout, send abort [ 87.450686][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880297ea000: rx timeout, send abort [ 87.919942][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802aba9400: abort rx timeout. Force session deactivation [ 87.959175][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880297ea000: abort rx timeout. Force session deactivation [ 90.024909][ T5479] netlink: 'syz.0.81': attribute type 13 has an invalid length. [ 90.065718][ T5479] netlink: 32 bytes leftover after parsing attributes in process `syz.0.81'. [ 90.129910][ T5483] netlink: 'syz.3.83': attribute type 13 has an invalid length. [ 90.448875][ T5493] netlink: 'syz.2.85': attribute type 13 has an invalid length. [ 91.374018][ T5500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.88'. [ 91.969428][ T5514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.253492][ T5522] syz.4.93 uses obsolete (PF_INET,SOCK_PACKET) [ 92.331896][ T5524] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.390516][ T929] cfg80211: failed to load regulatory.db [ 92.592834][ T5527] bond_slave_0: entered promiscuous mode [ 92.598931][ T5527] bond_slave_1: entered promiscuous mode [ 92.631277][ T5526] bond_slave_0: left promiscuous mode [ 92.637222][ T5526] bond_slave_1: left promiscuous mode [ 92.715659][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.88'. [ 93.140494][ T5545] netlink: 'syz.0.98': attribute type 13 has an invalid length. [ 93.285187][ T5540] netlink: 'syz.1.97': attribute type 13 has an invalid length. [ 93.386495][ T5551] netlink: 'syz.3.100': attribute type 13 has an invalid length. [ 94.016250][ T5562] Zero length message leads to an empty skb [ 94.340212][ T5566] netlink: 'syz.4.103': attribute type 4 has an invalid length. [ 94.527831][ T5578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'. [ 94.824719][ T5584] tipc: Started in network mode [ 94.829792][ T5584] tipc: Node identity 921eee1c86c1, cluster identity 4711 [ 94.899887][ T5584] tipc: Enabled bearer , priority 0 [ 94.974262][ T5583] tipc: Disabling bearer [ 95.067438][ T5603] netlink: 32 bytes leftover after parsing attributes in process `syz.0.111'. [ 95.079494][ T5599] netlink: 'syz.0.111': attribute type 13 has an invalid length. [ 95.314690][ T5607] netlink: 'syz.3.114': attribute type 13 has an invalid length. [ 95.362217][ T5610] netlink: 'syz.2.115': attribute type 13 has an invalid length. [ 95.835520][ T5619] netlink: 'syz.1.117': attribute type 13 has an invalid length. [ 96.397411][ T5622] netlink: 'syz.0.118': attribute type 13 has an invalid length. [ 96.442910][ T5624] netlink: 'syz.4.119': attribute type 4 has an invalid length. [ 96.567525][ T5628] warning: `syz.3.120' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.137242][ T5644] xt_cgroup: xt_cgroup: no path or classid specified [ 97.557764][ T5657] netlink: 'syz.3.130': attribute type 13 has an invalid length. [ 97.691699][ T5661] netlink: 'syz.2.131': attribute type 13 has an invalid length. [ 97.897462][ T5668] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 97.984113][ T5668] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 98.953867][ T5671] netlink: 'syz.4.133': attribute type 13 has an invalid length. [ 99.283044][ T5686] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 99.579452][ T5694] netlink: 'syz.2.140': attribute type 13 has an invalid length. [ 100.141557][ T5707] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 100.235052][ T5707] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 100.353343][ T5709] netlink: 'syz.1.144': attribute type 13 has an invalid length. [ 101.448224][ T5721] netlink: 'syz.4.145': attribute type 13 has an invalid length. [ 101.524715][ T5717] netlink: 'syz.2.147': attribute type 13 has an invalid length. [ 101.751492][ T5728] netlink: 'syz.0.151': attribute type 13 has an invalid length. [ 102.982806][ T5756] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 103.068490][ T5756] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 103.131389][ T5758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.157'. [ 103.214906][ T5761] netlink: 'syz.3.158': attribute type 13 has an invalid length. [ 103.422049][ T5764] netlink: 'syz.0.159': attribute type 13 has an invalid length. [ 104.338062][ T5781] netlink: 'syz.4.165': attribute type 13 has an invalid length. [ 104.444775][ T5783] netlink: 'syz.1.167': attribute type 13 has an invalid length. [ 104.558973][ T5786] netlink: 'syz.2.168': attribute type 13 has an invalid length. [ 104.729371][ T5790] netlink: 'syz.0.166': attribute type 13 has an invalid length. [ 105.923266][ T5804] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 106.001292][ T5804] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 106.360288][ T5812] xt_bpf: check failed: parse error [ 106.865636][ T5819] netlink: 'syz.1.176': attribute type 13 has an invalid length. [ 106.952057][ T5820] netlink: 'syz.3.177': attribute type 13 has an invalid length. [ 107.359888][ T5830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.178'. [ 107.392250][ T5829] netlink: 'syz.4.181': attribute type 13 has an invalid length. [ 107.427389][ T5830] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 107.435175][ T5830] IPv6: NLM_F_CREATE should be set when creating new route [ 107.442621][ T5830] IPv6: NLM_F_CREATE should be set when creating new route [ 107.449891][ T5830] IPv6: NLM_F_CREATE should be set when creating new route [ 107.492342][ T5833] netlink: 'syz.2.180': attribute type 13 has an invalid length. [ 108.359006][ T5850] xt_bpf: check failed: parse error [ 108.650476][ T5855] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 108.761059][ T5855] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 108.900123][ T5865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'. [ 109.001244][ T5867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.189'. [ 109.118382][ T5872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.192'. [ 109.179388][ T5876] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 109.186870][ T5876] IPv6: NLM_F_CREATE should be set when creating new route [ 109.194243][ T5876] IPv6: NLM_F_CREATE should be set when creating new route [ 109.201541][ T5876] IPv6: NLM_F_CREATE should be set when creating new route [ 109.255040][ T5873] netlink: 'syz.2.193': attribute type 13 has an invalid length. [ 109.358573][ T5873] netlink: 32 bytes leftover after parsing attributes in process `syz.2.193'. [ 109.437006][ T5880] netlink: 20 bytes leftover after parsing attributes in process `syz.4.195'. [ 109.521414][ T5885] netlink: 'syz.3.197': attribute type 13 has an invalid length. [ 109.616056][ T5889] netlink: 'syz.2.199': attribute type 13 has an invalid length. [ 109.897868][ T5895] syz_tun: entered promiscuous mode [ 109.925202][ T5895] macsec1: entered promiscuous mode [ 110.021670][ T5895] syz_tun: left promiscuous mode [ 110.353936][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.202'. [ 110.553740][ T5914] netlink: 256 bytes leftover after parsing attributes in process `syz.0.203'. [ 110.623214][ T5912] netlink: 256 bytes leftover after parsing attributes in process `syz.0.203'. [ 110.808871][ T5921] xt_bpf: check failed: parse error [ 110.976132][ T5925] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 111.037337][ T5925] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 111.283571][ T5937] netlink: 'syz.2.209': attribute type 13 has an invalid length. [ 111.331983][ T5937] netlink: 32 bytes leftover after parsing attributes in process `syz.2.209'. [ 112.278291][ T5957] netlink: 'syz.4.216': attribute type 13 has an invalid length. [ 112.396198][ T5959] syz_tun: entered promiscuous mode [ 112.419475][ T5959] macsec1: entered promiscuous mode [ 112.432408][ T5959] syz_tun: left promiscuous mode [ 112.626488][ T5966] xt_bpf: check failed: parse error [ 112.861470][ T5970] netlink: 'syz.2.220': attribute type 13 has an invalid length. [ 113.010558][ T5974] netlink: 'syz.3.221': attribute type 21 has an invalid length. [ 113.042345][ T5974] netlink: 156 bytes leftover after parsing attributes in process `syz.3.221'. [ 113.564631][ T5985] netlink: 'syz.4.222': attribute type 13 has an invalid length. [ 113.711900][ T5992] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 113.769703][ T5992] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 115.524925][ T6023] netlink: 'syz.4.232': attribute type 13 has an invalid length. [ 115.710256][ T6030] netlink: 'syz.2.233': attribute type 21 has an invalid length. [ 115.729342][ T6030] __nla_validate_parse: 2 callbacks suppressed [ 115.729366][ T6030] netlink: 156 bytes leftover after parsing attributes in process `syz.2.233'. [ 115.832940][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 116.301997][ T6039] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 116.378333][ T6039] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 116.484276][ T6041] netlink: 'syz.2.237': attribute type 13 has an invalid length. [ 117.141605][ T6044] netlink: 'syz.1.238': attribute type 13 has an invalid length. [ 117.191346][ T6044] netlink: 32 bytes leftover after parsing attributes in process `syz.1.238'. [ 117.867322][ T6058] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.242'. [ 117.981998][ T6060] netlink: 44 bytes leftover after parsing attributes in process `syz.2.242'. [ 118.531702][ T25] ================================================================== [ 118.539837][ T25] BUG: KASAN: slab-use-after-free in nf_tables_trans_destroy_work+0x152b/0x1750 [ 118.549036][ T25] Read of size 2 at addr ffff88801eb279c4 by task kworker/1:0/25 [ 118.556793][ T25] [ 118.559149][ T25] CPU: 1 PID: 25 Comm: kworker/1:0 Not tainted 6.10.0-rc5-syzkaller-01176-g19e6ad2c7578 #0 [ 118.569252][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 118.579354][ T25] Workqueue: events nf_tables_trans_destroy_work [ 118.586133][ T25] Call Trace: [ 118.589462][ T25] [ 118.592430][ T25] dump_stack_lvl+0x241/0x360 [ 118.597151][ T25] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.602503][ T25] ? __pfx__printk+0x10/0x10 [ 118.607330][ T25] ? _printk+0xd5/0x120 [ 118.611531][ T25] ? __virt_addr_valid+0x183/0x520 [ 118.616774][ T25] ? __virt_addr_valid+0x183/0x520 [ 118.622251][ T25] print_report+0x169/0x550 [ 118.626829][ T25] ? __virt_addr_valid+0x183/0x520 [ 118.631990][ T25] ? __virt_addr_valid+0x183/0x520 [ 118.637147][ T25] ? __virt_addr_valid+0x44e/0x520 [ 118.642318][ T25] ? __phys_addr+0xba/0x170 [ 118.646876][ T25] ? nf_tables_trans_destroy_work+0x152b/0x1750 [ 118.653052][ T6071] x_tables: duplicate underflow at hook 1 [ 118.653142][ T25] kasan_report+0x143/0x180 [ 118.653181][ T25] ? nf_tables_trans_destroy_work+0x152b/0x1750 [ 118.653212][ T25] nf_tables_trans_destroy_work+0x152b/0x1750 [ 118.669586][ T6071] xt_TPROXY: Can be used only with -p tcp or -p udp [ 118.669676][ T25] ? __pfx_nf_tables_trans_destroy_work+0x10/0x10 [ 118.689034][ T25] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 118.695066][ T25] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 118.701628][ T25] ? process_scheduled_works+0x945/0x1830 [ 118.707366][ T25] process_scheduled_works+0xa2c/0x1830 [ 118.707414][ T25] ? __pfx_process_scheduled_works+0x10/0x10 [ 118.719070][ T25] ? assign_work+0x364/0x3d0 [ 118.723708][ T25] worker_thread+0x86d/0xd50 [ 118.728352][ T25] ? __kthread_parkme+0x169/0x1d0 [ 118.733419][ T25] ? __pfx_worker_thread+0x10/0x10 [ 118.738574][ T25] kthread+0x2f0/0x390 [ 118.742689][ T25] ? __pfx_worker_thread+0x10/0x10 [ 118.747838][ T25] ? __pfx_kthread+0x10/0x10 [ 118.752496][ T25] ret_from_fork+0x4b/0x80 [ 118.757010][ T25] ? __pfx_kthread+0x10/0x10 [ 118.761695][ T25] ret_from_fork_asm+0x1a/0x30 [ 118.766518][ T25] [ 118.769575][ T25] [ 118.771929][ T25] Allocated by task 6067: [ 118.776308][ T25] kasan_save_track+0x3f/0x80 [ 118.781025][ T25] __kasan_kmalloc+0x98/0xb0 [ 118.785664][ T25] kmalloc_trace_noprof+0x19c/0x2c0 [ 118.791205][ T25] nf_tables_newtable+0x52e/0x1dc0 [ 118.796497][ T25] nfnetlink_rcv+0x1427/0x2a90 [ 118.801411][ T25] netlink_unicast+0x7f0/0x990 [ 118.806237][ T25] netlink_sendmsg+0x8e4/0xcb0 [ 118.811084][ T25] __sock_sendmsg+0x221/0x270 [ 118.815794][ T25] ____sys_sendmsg+0x525/0x7d0 [ 118.820605][ T25] __sys_sendmsg+0x2b0/0x3a0 [ 118.825253][ T25] do_syscall_64+0xf3/0x230 [ 118.829796][ T25] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.835850][ T25] [ 118.838192][ T25] Freed by task 6066: [ 118.842198][ T25] kasan_save_track+0x3f/0x80 [ 118.846910][ T25] kasan_save_free_info+0x40/0x50 [ 118.851975][ T25] poison_slab_object+0xe0/0x150 [ 118.856963][ T25] __kasan_slab_free+0x37/0x60 [ 118.861884][ T25] kfree+0x149/0x360 [ 118.865830][ T25] __nft_release_table+0xe80/0xf40 [ 118.871001][ T25] nft_rcv_nl_event+0x55f/0x6d0 [ 118.875904][ T25] notifier_call_chain+0x19f/0x3e0 [ 118.881063][ T25] blocking_notifier_call_chain+0x69/0x90 [ 118.886915][ T25] netlink_release+0x11a6/0x1b10 [ 118.891905][ T25] sock_close+0xbc/0x240 [ 118.896192][ T25] __fput+0x406/0x8b0 [ 118.900210][ T25] task_work_run+0x24f/0x310 [ 118.904849][ T25] syscall_exit_to_user_mode+0x168/0x370 [ 118.910524][ T25] do_syscall_64+0x100/0x230 [ 118.915165][ T25] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.921116][ T25] [ 118.923466][ T25] Last potentially related work creation: [ 118.929207][ T25] kasan_save_stack+0x3f/0x60 [ 118.933934][ T25] __kasan_record_aux_stack+0xac/0xc0 [ 118.939348][ T25] insert_work+0x3e/0x330 [ 118.943719][ T25] __queue_work+0xc16/0xee0 [ 118.948275][ T25] queue_work_on+0x1c2/0x380 [ 118.952910][ T25] rhltable_remove+0x1097/0x1160 [ 118.958026][ T25] __nft_release_table+0xc57/0xf40 [ 118.963202][ T25] nft_rcv_nl_event+0x55f/0x6d0 [ 118.968105][ T25] notifier_call_chain+0x19f/0x3e0 [ 118.973254][ T25] blocking_notifier_call_chain+0x69/0x90 [ 118.979015][ T25] netlink_release+0x11a6/0x1b10 [ 118.984000][ T25] sock_close+0xbc/0x240 [ 118.988295][ T25] __fput+0x406/0x8b0 [ 118.992311][ T25] task_work_run+0x24f/0x310 [ 118.997034][ T25] syscall_exit_to_user_mode+0x168/0x370 [ 119.002756][ T25] do_syscall_64+0x100/0x230 [ 119.007389][ T25] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.013428][ T25] [ 119.015774][ T25] The buggy address belongs to the object at ffff88801eb27800 [ 119.015774][ T25] which belongs to the cache kmalloc-cg-512 of size 512 [ 119.030228][ T25] The buggy address is located 452 bytes inside of [ 119.030228][ T25] freed 512-byte region [ffff88801eb27800, ffff88801eb27a00) [ 119.044170][ T25] [ 119.046534][ T25] The buggy address belongs to the physical page: [ 119.052993][ T25] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801eb26c00 pfn:0x1eb24 [ 119.063120][ T25] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 119.071670][ T25] memcg:ffff88805f05cd01 [ 119.075939][ T25] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 119.083896][ T25] page_type: 0xffffefff(slab) [ 119.088621][ T25] raw: 00fff00000000040 ffff88801504f140 ffffea0001f31d00 dead000000000003 [ 119.097250][ T25] raw: ffff88801eb26c00 000000008010000f 00000001ffffefff ffff88805f05cd01 [ 119.105973][ T25] head: 00fff00000000040 ffff88801504f140 ffffea0001f31d00 dead000000000003 [ 119.114689][ T25] head: ffff88801eb26c00 000000008010000f 00000001ffffefff ffff88805f05cd01 [ 119.123411][ T25] head: 00fff00000000002 ffffea00007ac901 ffffffffffffffff 0000000000000000 [ 119.132129][ T25] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 119.140833][ T25] page dumped because: kasan: bad access detected [ 119.147293][ T25] page_owner tracks the page as allocated [ 119.153039][ T25] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4762, tgid 4762 (dhcpcd), ts 66165121170, free_ts 64192449752 [ 119.173940][ T25] post_alloc_hook+0x1f3/0x230 [ 119.178764][ T25] get_page_from_freelist+0x2e4c/0x2f10 [ 119.184359][ T25] __alloc_pages_noprof+0x256/0x6c0 [ 119.189611][ T25] alloc_slab_page+0x5f/0x120 [ 119.194344][ T25] allocate_slab+0x5a/0x2f0 [ 119.198904][ T25] ___slab_alloc+0xcd1/0x14b0 [ 119.203631][ T25] __slab_alloc+0x58/0xa0 [ 119.207999][ T25] kmalloc_node_track_caller_noprof+0x281/0x440 [ 119.214279][ T25] kmalloc_reserve+0x111/0x2a0 [ 119.219083][ T25] __alloc_skb+0x1f3/0x440 [ 119.223554][ T25] alloc_skb_with_frags+0xc3/0x770 [ 119.228709][ T25] sock_alloc_send_pskb+0x91a/0xa60 [ 119.233946][ T25] unix_dgram_sendmsg+0x6d3/0x1f80 [ 119.239084][ T25] __sock_sendmsg+0x221/0x270 [ 119.243791][ T25] sock_write_iter+0x2dd/0x400 [ 119.248586][ T25] do_iter_readv_writev+0x5a4/0x800 [ 119.253825][ T25] page last free pid 5065 tgid 5065 stack trace: [ 119.260180][ T25] free_unref_page+0xd22/0xea0 [ 119.264996][ T25] __put_partials+0xeb/0x130 [ 119.269620][ T25] put_cpu_partial+0x17c/0x250 [ 119.274428][ T25] __slab_free+0x2ea/0x3d0 [ 119.278886][ T25] qlist_free_all+0x9e/0x140 [ 119.283515][ T25] kasan_quarantine_reduce+0x14f/0x170 [ 119.289013][ T25] __kasan_slab_alloc+0x23/0x80 [ 119.293906][ T25] kmem_cache_alloc_noprof+0x135/0x2a0 [ 119.299416][ T25] getname_flags+0xbd/0x4f0 [ 119.303960][ T25] vfs_fstatat+0x11c/0x190 [ 119.308514][ T25] __x64_sys_newfstatat+0x125/0x1b0 [ 119.313749][ T25] do_syscall_64+0xf3/0x230 [ 119.318278][ T25] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.324209][ T25] [ 119.326675][ T25] Memory state around the buggy address: [ 119.332342][ T25] ffff88801eb27880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 119.340443][ T25] ffff88801eb27900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 119.348543][ T25] >ffff88801eb27980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 119.356637][ T25] ^ [ 119.362823][ T25] ffff88801eb27a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 119.370916][ T25] ffff88801eb27a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 119.379005][ T25] ================================================================== [ 119.582248][ T25] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 119.589598][ T25] CPU: 1 PID: 25 Comm: kworker/1:0 Not tainted 6.10.0-rc5-syzkaller-01176-g19e6ad2c7578 #0 [ 119.599700][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 119.609793][ T25] Workqueue: events nf_tables_trans_destroy_work [ 119.616221][ T25] Call Trace: [ 119.619566][ T25] [ 119.622564][ T25] dump_stack_lvl+0x241/0x360 [ 119.627390][ T25] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.632650][ T25] ? __pfx__printk+0x10/0x10 [ 119.637316][ T25] ? preempt_schedule+0xe1/0xf0 [ 119.642331][ T25] ? vscnprintf+0x5d/0x90 [ 119.646711][ T25] panic+0x349/0x860 [ 119.650697][ T25] ? check_panic_on_warn+0x21/0xb0 [ 119.655860][ T25] ? __pfx_panic+0x10/0x10 [ 119.660537][ T25] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 119.666578][ T25] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 119.672962][ T25] ? print_report+0x502/0x550 [ 119.677704][ T25] check_panic_on_warn+0x86/0xb0 [ 119.682688][ T25] ? nf_tables_trans_destroy_work+0x152b/0x1750 [ 119.689023][ T25] end_report+0x77/0x160 [ 119.693349][ T25] kasan_report+0x154/0x180 [ 119.697946][ T25] ? nf_tables_trans_destroy_work+0x152b/0x1750 [ 119.704311][ T25] nf_tables_trans_destroy_work+0x152b/0x1750 [ 119.710638][ T25] ? __pfx_nf_tables_trans_destroy_work+0x10/0x10 [ 119.717197][ T25] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 119.723247][ T25] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 119.729641][ T25] ? process_scheduled_works+0x945/0x1830 [ 119.735432][ T25] process_scheduled_works+0xa2c/0x1830 [ 119.741040][ T25] ? __pfx_process_scheduled_works+0x10/0x10 [ 119.747335][ T25] ? assign_work+0x364/0x3d0 [ 119.752031][ T25] worker_thread+0x86d/0xd50 [ 119.756783][ T25] ? __kthread_parkme+0x169/0x1d0 [ 119.761859][ T25] ? __pfx_worker_thread+0x10/0x10 [ 119.767133][ T25] kthread+0x2f0/0x390 [ 119.771253][ T25] ? __pfx_worker_thread+0x10/0x10 [ 119.776495][ T25] ? __pfx_kthread+0x10/0x10 [ 119.781265][ T25] ret_from_fork+0x4b/0x80 [ 119.786010][ T25] ? __pfx_kthread+0x10/0x10 [ 119.790651][ T25] ret_from_fork_asm+0x1a/0x30 [ 119.795665][ T25] [ 119.799089][ T25] Kernel Offset: disabled [ 119.803537][ T25] Rebooting in 86400 seconds..