last executing test programs: 4.183942556s ago: executing program 3 (id=413): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast2, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="f658", 0x36, 0x40084, 0x0, 0xffffffffffffff18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x3d, &(0x7f0000000b00)=ANY=[@ANYBLOB="b4080000000000007311980000000000851d000002000000b7000000000000009500c2000000000095000012000000005a169d9707fddf2237095c0bc8a04f69e4cb085f799f0391761c9448dfebf65eabe0ad962ff54d42c8eebc33c5ec075ce6c739961931388961b82ab748bb76713aff34ab27f9481f2546b0e30272e24a5009e90415da0dbad2224be8b14ca3a70e522866dc24e685a0cb9dcd967a582f96bcc0980ceadd4f6c91530c49d0c49e14533b000075675be357cfac8f27fd2513e14fcbdc882b79d56d66b59d69b05227415fbd38cd2e5a53befd83c0d7fbdaca4b51ebf7e28efe68cd2cee20d1e52ea477d008974627b7ac55663bcf3cb1229a"], &(0x7f0000000080)='GPL\x00', 0x8, 0xca, &(0x7f0000000440)=""/202, 0x41000, 0x49, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) unshare(0x6a040000) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffee00000000000035adfdde000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)={0x0, 0xc2, "d6616abb1162708a25ab6689d7cadf921b38a9812b473045ea6b7d93e6cdcdc4795727096acfff7e5552d44ce182d10b922c4a7cdde687bf78b1b45ea1db614836acd78e2175d99a229a46a1364ba103d8cd36b46d70f6b06404f2755604d8319da1a8dcb0bad5cbf96d81d9a0a82382fed1f57947bb01dfb6bab35e2222ce0de3f0aa6ee43a1f6f29b5d0bdff065c740510f6679561b5d0e3a0e53c197ea968896896e96100646b3b64261216ca542c702be4b5b1b00755827a8e58efc679784d4e"}, &(0x7f0000000040)=0xca) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r3, @in={{0x2, 0x4e24, @local}}}, 0x84) 3.710081215s ago: executing program 3 (id=420): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@cgroup, 0xffffffffffffffff, 0x6, 0x6c, 0x0, @void, @void, @void, @value}, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xffffffff, 0x9, 0x8, 0x4800, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0xf, @void, @value, @void, @value}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000070a010800000000000000000a00000a090001"], 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x10, 0x20, 0x5, 0x5, {{0x1d, 0x4, 0x2, 0x6, 0x74, 0x68, 0x0, 0x5, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xf, 0xf5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3e}, @remote]}, @end, @timestamp={0x44, 0x1c, 0x66, 0x0, 0x8, [0x80000001, 0x4fc, 0x8, 0x9, 0x9, 0xba3]}, @cipso={0x86, 0x30, 0x0, [{0x0, 0xc, "4e9927c9b975476e5e35"}, {0x2, 0x11, "2a326d7a24acf3c8cf0c5c60294284"}, {0x6, 0xd, "08364ec96d387588bcf904"}]}, @end, @end]}}}}}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="150000000400000001000000eb73000008480100", @ANYRES32=r1, @ANYBLOB='\b\x00'/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="030000000000000005000000000000000300000080000000", @ANYRES32=r5, @ANYBLOB], 0x50) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000040)) 3.296411582s ago: executing program 0 (id=426): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002480)=@delchain={0x48, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002440)={'veth1_virt_wifi\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002440)={'veth1_virt_wifi\x00', 0x0}) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r3, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) (async) sendto$inet6(r3, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) recvmmsg(r2, &(0x7f00000037c0), 0x0, 0x2040001, &(0x7f0000001a40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x1, &(0x7f0000001a80)=ANY=[@ANYBLOB="01fc0b9aa32b58adfcc500000000cc6180"], &(0x7f0000000180)='GPL\x00', 0x5, 0x1000, &(0x7f00000006c0)=""/4096, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x2, 0xf, 0xea6, 0x1}, 0x10, 0xf803, 0xffffffffffffffff, 0x8, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000280)=[{0x3, 0x2, 0x2, 0x1}, {0x4, 0x4, 0x8, 0x4}, {0x4, 0x3, 0x4, 0x9}, {0x2, 0x1, 0xb, 0x5}, {0x0, 0x4, 0x3, 0x7}, {0x0, 0x4, 0x1, 0x5}, {0x1, 0x5, 0xb}, {0x2, 0x3, 0x1, 0x7}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000003c0)={r5, 0xffffffffffffffff, 0x4, r6}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000940)=ANY=[@ANYBLOB="757e9373d661aaaaaaaaaabb86dd6012000800183afffe8000000000000000000000000000bbff0200000000000000000000000000018800907808000000ff010000000000000000000000000001"], 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="aeaa000000000000711013000000000095000000000000002020e4bd8503f8ab2215f80bc72d5b764d019741c507000000920a5fea5629126f02f22fbe444467069b956e57cdd4b3434573eae5fb148b55fe50ecc9bb6eecf85aab6369a66c"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="aeaa000000000000711013000000000095000000000000002020e4bd8503f8ab2215f80bc72d5b764d019741c507000000920a5fea5629126f02f22fbe444467069b956e57cdd4b3434573eae5fb148b55fe50ecc9bb6eecf85aab6369a66c"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000a5ec00"/30], 0x48) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="4c0000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a10800000000ec508af6120009000100766c616ee2ffffff0b001f8006000100006138e07436e4c13898c1ad3ddaa5e568c1dcee14c05277b4f145e7d4b83464f1867053d8d7579098e4e38c37cc6d2e991913516ab36057bf1047aa21cc61f6cccab565e03d981f852015143616613346883a5e1843c5ccb1aace307bedf3594871ecf53ac0dd6cf055343ce97ab7834f81d90322aee080eb192d54696f2646beac52dcd9cabf692cb4244280fab67072a0014e2ac7fc4a"], 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x400c000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYRES8=r7, @ANYRESDEC, @ANYRESOCT=r11], 0x48}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001fc0), r12) sendmsg$IPSET_CMD_TEST(r7, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)=ANY=[@ANYBLOB="4c0000000b0601010000000000000000070000050500010007000000c4f3094000000065280008800c000780060004404e2000000c00078006001d40000800000c0007800800084000000085"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x20048055) (async) sendmsg$IPSET_CMD_TEST(r7, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)=ANY=[@ANYBLOB="4c0000000b0601010000000000000000070000050500010007000000c4f3094000000065280008800c000780060004404e2000000c00078006001d40000800000c0007800800084000000085"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x20048055) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001e00902a2abd7000fb49693d1d003800", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0) (async) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001e00902a2abd7000fb49693d1d003800", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f00000005c0)={r4, 0x4, 0x99fa, 0x6}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001940)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r14, 0x89f0, &(0x7f0000001a00)={'gre0\x00', &(0x7f0000001980)={'sit0\x00', r1, 0x80, 0x10, 0x9, 0x401, {{0x9, 0x4, 0x0, 0x6, 0x24, 0x64, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @dev={0xac, 0x14, 0x14, 0x29}, {[@end, @generic={0x88, 0x2}, @lsrr={0x83, 0xb, 0xa1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}]}}}}}) 3.015054826s ago: executing program 0 (id=431): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket(0x1e, 0x4, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000f40)=""/4089, 0x18, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x28) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x10681}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000010000000000000000000000711235000000000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb58, @void, @value}, 0x94) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000144fc417c2573500b595000000000000", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000000ffff000000000800080081070000"], 0x34}}, 0x0) 2.90537162s ago: executing program 2 (id=433): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socket(0x2, 0x80805, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) (async) sendmmsg$inet(r4, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x8, 0x9, 0xc, 0x4, 0x6, 0x5d0bef1f, 0x400, 0x5, 0x837, 0xffffffff, 0x9fec, 0x401, 0x2000068, 0x7, 0xdd64, 0x1, 0x8, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0xffff, 0x4, 0xf, 0x80000007, 0x7469, 0x40000b, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x9, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x4, 0x267, 0x1, 0x0, 0x81, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x8, 0x7ff, 0x44, 0x2, 0x9, 0x800, 0x3, 0x8, 0x0, 0x8e5e00, 0x922e, 0x0, 0x8, 0x2, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x1, 0x1, 0x2, 0x5, 0x0, 0xb, 0x6, 0x0, 0x3365, 0xa82f, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0xa, 0x81, 0x111, 0x7, 0x15c20, 0x7b, 0x0, 0xe, 0x4, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0xd, 0xc7, 0x0, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0xd, 0x4, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0xe56d, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x9, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x10000, 0x81, 0x2, 0xffff6c4b, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x3, 0x603c, 0x80000004, 0x4, 0x0, 0x5, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x4, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x10, 0x4, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0x0, 0x8, 0xe, 0x800, 0x5, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0xa2, 0x0, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x20002, 0x5, 0x1, 0x2, 0xfff, {0x5, 0x0, 0x9c, 0xf9e, 0xfff, 0x7}, {0xfa, 0x2, 0x0, 0x4, 0x6fb}, 0x6, 0x3}}]}]}}]}, 0x478}}, 0x4000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x8, 0x9, 0xc, 0x4, 0x6, 0x5d0bef1f, 0x400, 0x5, 0x837, 0xffffffff, 0x9fec, 0x401, 0x2000068, 0x7, 0xdd64, 0x1, 0x8, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0xffff, 0x4, 0xf, 0x80000007, 0x7469, 0x40000b, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x9, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x4, 0x267, 0x1, 0x0, 0x81, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x8, 0x7ff, 0x44, 0x2, 0x9, 0x800, 0x3, 0x8, 0x0, 0x8e5e00, 0x922e, 0x0, 0x8, 0x2, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x1, 0x1, 0x2, 0x5, 0x0, 0xb, 0x6, 0x0, 0x3365, 0xa82f, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0xa, 0x81, 0x111, 0x7, 0x15c20, 0x7b, 0x0, 0xe, 0x4, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0xd, 0xc7, 0x0, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0xd, 0x4, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0xe56d, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x9, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x10000, 0x81, 0x2, 0xffff6c4b, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x3, 0x603c, 0x80000004, 0x4, 0x0, 0x5, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x4, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x10, 0x4, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0x0, 0x8, 0xe, 0x800, 0x5, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0xa2, 0x0, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x20002, 0x5, 0x1, 0x2, 0xfff, {0x5, 0x0, 0x9c, 0xf9e, 0xfff, 0x7}, {0xfa, 0x2, 0x0, 0x4, 0x6fb}, 0x6, 0x3}}]}]}}]}, 0x478}}, 0x4000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) (async) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000001c0)={0x77f, 0x320, 0x1, 0x8, 0x10, 0xffff7dff, 0x4, 0x3, r3}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r1, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c1e, 0x0, @remote}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c1e, 0x0, @remote}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x14c8, 0xffffffff, 0x1130, 0x1200, 0x1130, 0xfeffffff, 0xffffffff, 0x13f8, 0x13f8, 0x13f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1108, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x2, './cgroup/syz1\x00'}}, @common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth1_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:tpm_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1528) (async) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x14c8, 0xffffffff, 0x1130, 0x1200, 0x1130, 0xfeffffff, 0xffffffff, 0x13f8, 0x13f8, 0x13f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1108, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x2, './cgroup/syz1\x00'}}, @common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth1_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:tpm_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1528) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x20, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x14008044) sendto$inet6(r1, &(0x7f0000000040)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0x22, 0x10, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 1.925442832s ago: executing program 2 (id=436): unshare(0x22020600) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0xfffffce6) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'dummy0\x00', &(0x7f0000000140)=@ethtool_gfeatures={0x1f}}) (async) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) (async) unshare(0x20000000) r5 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="72cd6ab347438aa545027c3f9c6e40614b5a3c3c4815fde0a3bf2e38bfbafa3053fbfa22f555072cd20d83217d4cf48ef132649322938f00ba8385f312acb61f7b10", @ANYRES16=r2, @ANYBLOB="010000000040000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="05002d000100000008002c000d000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000001580)=ANY=[], 0x32600) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) (async) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) (async) sendmmsg$inet(r10, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) (async) sendto$inet(r10, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x15, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.924509474s ago: executing program 3 (id=437): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x318982, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x37, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRESDEC=r1, @ANYBLOB="8dffa88801010000140012800b0001006d616373656300000400028008000500", @ANYRESHEX=r0, @ANYRESDEC=r0], 0x44}}, 0x81) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000080)=0xfffffeff, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0xa, 0x0, 0xd}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x4c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000001200)={0x87, 0x21, '\x00', [@generic={0x82, 0xc4, "cfa8d4c1ea0b643c4a819a575b265932f9004b63064146f4214a6f5d2ce261df8c4abeb53a7b46f2d2928120a80f3034bd54c01b0e949906fbc4c4e2bcebbc39ed3ff7ae8986571718c36e68f78615dba0fd31ad6b8b87793975c4ea06e9e2cdc62cd1c27cbea169dd747ed08272f040cce0f1ac8d127716cc5f493de2a89314407b6e803b4876e5b3a8d19e4b4474a6de1d907c86acbda427c1cd35c45dce473e90f42d513bac40d38abc03f654105f2999d0c7260623af3cda07e4d40e6304251ab2b8"}, @pad1, @padn, @calipso={0x7, 0x20, {0x1, 0x6, 0x1, 0x2, [0x30000000000000, 0x1000, 0x1]}}, @calipso={0x7, 0x20, {0x3, 0x6, 0x4, 0x2, [0xac5, 0xfffffffffffff30d, 0xffffffffffffffff]}}]}, 0x118) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0xb70, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0xb38, 0x2, [@TCA_BASIC_ACT={0x940, 0x3, [@m_police={0x8d4, 0xc, 0x0, 0x0, {{0xb}, {0x82c, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5ad6, 0x7, 0x9, 0x9, 0x6, 0x7, 0x1ff, 0x6, 0x8, 0x2, 0x2, 0x7, 0x3, 0x3ff, 0x2, 0x8c5, 0xf32, 0x0, 0x6, 0x8001, 0x0, 0x8, 0xffff8001, 0x3, 0x9, 0xfffffffe, 0xd, 0x6, 0x7, 0x2, 0x9, 0x4, 0xffff, 0x6, 0x2024, 0x5, 0x9, 0x200, 0x40000001, 0xffffffff, 0x0, 0x1, 0xd9, 0x7fff, 0xa334, 0x10000, 0x8, 0x1, 0xfffffffe, 0x9, 0x3, 0x7, 0x0, 0x5, 0xff, 0x4, 0x80000001, 0xfffffffd, 0x9, 0x9, 0xfffffc01, 0x7, 0x8, 0x5, 0x800, 0x85c, 0x7, 0x6, 0x2, 0x0, 0x495f267e, 0x10000, 0x4, 0x7, 0x81, 0x2a, 0x5, 0x3, 0x3, 0x8, 0x6, 0xd, 0xc, 0x4, 0x0, 0x7f, 0x4, 0x4, 0x5, 0x8000, 0xad, 0x4603, 0x7fffffff, 0x1, 0x784, 0xa9, 0x1ff, 0x4, 0xab2, 0xffffffff, 0x5, 0x1, 0x3, 0x9, 0x8, 0x4512, 0x0, 0x3, 0x9, 0xd, 0x3, 0xffffffff, 0xa5, 0xff, 0x4, 0x7fff, 0xfffffff7, 0x3, 0x3, 0x7, 0x80000001, 0xfff, 0x10001, 0xa2, 0x7, 0x0, 0x42, 0x80, 0x1000000, 0x2, 0x8, 0x0, 0x7, 0xffffffff, 0xffffff2c, 0xffffff0f, 0x5, 0x8, 0x6, 0x9b, 0x200, 0x4, 0x7f, 0x7, 0x1000, 0x1800, 0x1, 0x3, 0x7, 0x100, 0x80000000, 0x6, 0x4, 0x4, 0x3, 0x81, 0x2, 0x7, 0x6, 0x6, 0x3ff, 0x8, 0xe18, 0x6, 0x3, 0x1, 0xb, 0x1, 0x9, 0x8, 0x4, 0x1, 0x8, 0x6, 0x0, 0x8, 0x4, 0x4, 0x7, 0x0, 0x2, 0x6, 0x4, 0x5, 0x36c, 0x400, 0xfffffffd, 0xadcd, 0x5, 0xfff, 0x3, 0x5, 0x5, 0x1ff, 0x101, 0x2, 0x5, 0x8b, 0xaa65, 0x5, 0x0, 0xeb, 0xc, 0x5, 0x7, 0x2, 0x3, 0x1, 0x1, 0x58f69f97, 0x7, 0x5db7, 0x10000, 0xfffff778, 0x1, 0xffff3750, 0x4, 0x8, 0xffffffff, 0x400, 0x5, 0xf, 0x33e1, 0x401, 0x1, 0xfffffffd, 0xfa, 0xffff, 0x4efa, 0x5681, 0x100, 0xa4, 0x6, 0x6, 0x5, 0x7, 0x9dc, 0x6, 0x6f, 0xb9, 0x9, 0xfffffff8, 0x296fb8e5, 0x8, 0x2, 0x8001, 0x7f1, 0x9, 0x5000, 0x7, 0x10, 0xffffffff, 0x0, 0x5, 0x5, 0xd]}, @TCA_POLICE_RATE={0x404, 0x2, [0xcb, 0x8, 0x0, 0xa, 0x5, 0x10005, 0x1, 0x9, 0x5, 0xf, 0x3fe00000, 0x0, 0x2, 0x8, 0x5, 0xfff, 0x7, 0xb2, 0x8, 0x7fff, 0x7, 0x8, 0x0, 0x52b, 0x5c9d, 0x8, 0x1, 0x10000, 0x9, 0x6, 0x0, 0x7, 0x67c4, 0xff, 0x8d11, 0x1, 0xa, 0xd, 0x8, 0x2, 0x6, 0x6, 0x9, 0xf2a9, 0x100, 0x0, 0x51, 0x4, 0x3, 0x3, 0x3, 0x6, 0xf01, 0x8, 0x7fffffff, 0x10000, 0x3ff, 0x3, 0x9, 0x7, 0x7, 0x5, 0xd, 0x8, 0x6, 0x0, 0x7, 0x0, 0x5, 0x8, 0x97, 0x6, 0xfffffffd, 0x401, 0x4, 0x9, 0xfffffff9, 0x5d2, 0xc, 0x6, 0x2, 0x7, 0x5, 0x2, 0x1, 0x0, 0x2, 0x10001, 0x9, 0x6651, 0xfeb, 0x6677f80e, 0x1, 0x3, 0x5990, 0x7, 0x374b, 0x2, 0x5, 0x1, 0x81, 0x8000, 0x1, 0x6, 0x8, 0x6, 0x4ead, 0x8, 0xd742, 0x1, 0x3, 0x40, 0x9, 0x1, 0x5fc, 0x3, 0xf, 0xe, 0xffffffdb, 0x6, 0x8, 0x2c, 0xba0, 0x9, 0x4, 0xd, 0x3ff, 0x1f29, 0x9, 0x1, 0x8, 0x6, 0x80000000, 0x3, 0xffff, 0x8, 0xfffffffd, 0x200, 0xf, 0xb90, 0x0, 0xfffffff9, 0x1, 0x3, 0x80000000, 0x0, 0x2, 0x10001, 0x6, 0x5, 0x7, 0x5, 0x80, 0xffffc336, 0xffffffff, 0x8, 0xa87, 0x6, 0x10001, 0x81, 0x84, 0x3, 0xffffff18, 0x4, 0x4, 0x1, 0xd, 0x80000001, 0x1, 0xfffffff9, 0xf7db, 0xfffffffc, 0x3, 0xfffffffb, 0xab1, 0x4c, 0x20, 0x200, 0x8000, 0x5, 0x6, 0x7, 0xfffffffd, 0x200, 0x0, 0xffffffff, 0x6c, 0xab, 0x9, 0x9a, 0x4, 0x5, 0x3, 0x80000001, 0xf5, 0xb, 0x5, 0x3, 0x6, 0x7fffffff, 0x800, 0x1, 0x8, 0xfff, 0x80000001, 0x2cf2, 0x3, 0x8, 0xfd82, 0x365, 0x101, 0x7, 0xffffffe2, 0x3d0f, 0x8, 0x51c, 0x101, 0x5, 0x1ff, 0x0, 0x4db, 0x3ff, 0x66dc, 0x7ff, 0x7, 0xa13d, 0x21343989, 0x7, 0x124, 0xa8, 0x5, 0x54, 0x7f, 0x8000, 0x1, 0x1, 0xfffff000, 0x80000000, 0x1f, 0x2, 0x8001, 0x5, 0x9, 0x0, 0x3, 0x7, 0x10001, 0x7fffffff, 0x6, 0x7, 0x7, 0xf6c, 0x6, 0x200, 0x8001, 0x7fff]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xe89f}]]}, {0x7e, 0x6, "d6d1fc4c553423c26cd4a66b9bf60fbacc9289c78836c2266997924985a3ea8a74dd2aadafd5a275c17be19abdf55d167c0b15a718ac05f9c2b2a6d1be6480ee159c45a31fdde6d79b54315fb342ec4b57308cec6bc6a5d396a3f2507b4e7fa10fc7d9b6735ba69fc4ee7dd9f162bc186d6dca413d114dc4ccc6"}, {0xc, 0x7, {0xd72d03d6105f067a, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x68, 0x1a, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0xf, 0x7, 0x8, 0x80000001}}, @TCA_ACT_BPF_FD={0x8, 0x5, r9}]}, {0x20, 0x6, "ddb29acb14097fe79758c90e8f1a12986bd7ef9a2d7de7f41002b1f8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0x1f4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9}, {0x75, 0x5, 0x2, 0x2, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xe}, {0xffffffffffffffff, 0x4, 0x5}}}, @TCF_EM_IPT={0x24, 0x2, 0x0, 0x0, {{0xee7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xfff, 0x1, 0x3}, {0x8, 0x5, 0x5, 0x4, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x3, 0xbb3}, {0x6, 0x9, 0x3, 0x2}}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x10, 0x9, 0xaf90}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9e}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x6}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x17, 0x2, 0xff}, {0x6, 0xa, 0x2, "f704000000bf8eb5d0e4"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x800, 0x0, 0x4}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8}, {0x3, 0x4, 0xd, 0x1}}}, @TCF_EM_META={0x64, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="28c3", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x8}, {0x1ff, 0x80, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xde, 0x1}, {0x58, 0x5, 0x1}}}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x53, 0x3}, {0x2, 0x8, 0x1}}}, @TCA_EM_META_RVALUE={0xb, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="9cb2232a929395"]}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR='R&', @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0x401}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xa70, 0x8, 0x5}, {0x0, 0x1, 0x2}}}, @TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x4, 0x2}, {0x19, 0x7, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xc9a8, 0xe, 0x2}, {0x8}}}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x800}, {0x6, 0x1, 0x2, 0x5}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xd76d, 0x1, 0xcc}, {0x0, 0x10, 0x25, 0x7, 0x5, 0x0, 0x1}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0xb70}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000040)={'bridge_slave_0\x00', @remote}) syz_genetlink_get_family_id$team(&(0x7f0000000040), r2) 1.773619025s ago: executing program 2 (id=439): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x3) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x800) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r3, 0x891f, &(0x7f0000000200)) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) close(0x3) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r4, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{0x0}], 0x1}}], 0x1, 0x46054) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x9, 0x0, 0x2f, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2={0xff, 0x5}, 0x0, 0x7}}) 1.637831423s ago: executing program 0 (id=441): r0 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x40080c0) 1.622104166s ago: executing program 2 (id=443): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000040)=0x1, 0x4) r2 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg(r2, &(0x7f0000000e00)={&(0x7f00000003c0)=@qipcrtr={0x2a, 0xffffffff, 0x7ffe}, 0x80, 0x0}, 0x0) (async) openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) 1.568227561s ago: executing program 3 (id=444): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$unix(r0, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001c00070c000000000000000007000000", @ANYRES32=r2, @ANYBLOB="fb00060b0a000200aaaaaaaaaabb00000c000e80"], 0x34}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020605000000000000000000000000001400078008000640201b2000080013400000000205000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a"], 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = gettid() sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_open_procfs$namespace(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x4, 0x10010, r6, 0xffffe000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x8, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000b4321f00000000000a00630018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b706000014000600b703000000064863850000007a000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000001e40)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.394137851s ago: executing program 2 (id=445): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = socket(0x1, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x1, 0x4, 0x9, 0x0, 0x74, 0xffff8001}}, {0x4}}]}]}, 0x54}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000340)={'erspan0\x00', r10, 0x80, 0x20, 0x4, 0x6, {{0x32, 0x4, 0x0, 0x24, 0xc8, 0x67, 0x0, 0xb, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @private=0xa010100, {[@cipso={0x86, 0x58, 0x3, [{0x6, 0x8, "5518e2606fd6"}, {0x7, 0x3, "90"}, {0x0, 0xa, "cfa1ed9e9e04733b"}, {0x2, 0xa, "c896554ace98aae2"}, {0x1, 0x3, "b2"}, {0x6, 0x9, "0df296ccf6a9b1"}, {0x1, 0x4, "61e7"}, {0x1, 0x6, "859566c6"}, {0x5, 0xd, "a2fdd4345d7b036c3bb761"}, {0x6, 0x10, "f285bc86f3602fe8c1f4dae4e383"}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0x7c, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@local, 0x1}, {@loopback, 0x5}]}, @ssrr={0x89, 0x27, 0x24, [@local, @broadcast, @local, @local, @empty, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback, @multicast2, @broadcast]}, @ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4}, @cipso={0x86, 0x6}, @generic={0x89, 0x6, "ff76fad8"}]}}}}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r6}, 0x20) recvmmsg(r6, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/197, 0xc5}], 0x1}}], 0x2, 0x60, 0x0) 1.363660663s ago: executing program 4 (id=446): syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private2={0xfc, 0x2, '\x00', 0x1}, @private2}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd2a, 0x0, {}, [@FRA_FLOW={0x8, 0xb, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004880}, 0x20000001) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='tlb_flush\x00', r3, 0x0, 0x20000000000}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00!'], 0x28}}, 0x0) 1.30854611s ago: executing program 3 (id=447): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x7, 0x7800, 0x6, 0x4, {{0xb, 0x4, 0x3, 0x5, 0x2c, 0x67, 0x0, 0x2, 0x29, 0x0, @empty, @empty, {[@noop, @ssrr={0x89, 0xb, 0x5c, [@broadcast, @dev={0xac, 0x14, 0x14, 0x21}]}, @timestamp_addr={0x44, 0xc, 0x9d, 0x1, 0x1, [{@empty, 0x6}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x20, 0x7, 0x0, 0x5000000, {{0x8, 0x4, 0x3, 0x0, 0x20, 0x66, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@rr={0x7, 0xb, 0xcb, [@loopback, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x8000, 0x1, 0x8, 0x80000000, {{0xa, 0x4, 0x0, 0x1, 0x28, 0x66, 0x0, 0x7f, 0x4, 0x0, @broadcast, @loopback, {[@end, @generic={0x89, 0x10, "f99c669cb676db4e327f4531efa5"}, @end]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x90, r0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40005}, 0x400c011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6_vti0\x00', r2, 0x4, 0xa, 0x6, 0x0, 0x10, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x8000, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl1\x00', r3, 0x29, 0x4, 0x3, 0x9, 0x40, @empty, @ipv4={'\x00', '\xff\xff', @local}, 0x8, 0x8, 0x4, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'gretap0\x00', &(0x7f0000000580)={'gretap0\x00', r3, 0x7800, 0x8, 0x4, 0x2, {{0x21, 0x4, 0x3, 0x9, 0x84, 0x64, 0x0, 0xe, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1b, 0xbc, [@loopback, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast]}, @rr={0x7, 0x17, 0xc3, [@loopback, @dev={0xac, 0x14, 0x14, 0x1d}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}, @timestamp_prespec={0x44, 0x1c, 0x38, 0x3, 0x6, [{@local, 0xe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}, {@rand_addr=0x64010101, 0xfffffff8}]}, @ssrr={0x89, 0xb, 0x7, [@empty, @loopback]}, @ssrr={0x89, 0xb, 0xf4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x17, 0xc, "b34eaf9a3f5e8268b0b8"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'gre0\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x0, 0x7800, 0x0, 0x401, {{0x13, 0x4, 0x2, 0x8, 0x4c, 0x65, 0x0, 0x0, 0x4, 0x0, @multicast2, @private=0xa010100, {[@noop, @timestamp_addr={0x44, 0x34, 0x67, 0x1, 0xe, [{@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@multicast1, 0x2}, {@multicast2, 0xfff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000}, {@local, 0x80000001}]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1e0, r0, 0x8, 0x70bd2c, 0x23a, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000}, 0x20049094) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), r8) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), r8) sendmsg$TIPC_NL_SOCK_GET(r8, &(0x7f0000000cc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0xe6045207a82b1398}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a80)={0x1c8, r9, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xdf, 0x3, "a540d9a81a5ccb77aa254b807d26c7b311886c4ca441537f04d2bbfde2319bf075a389a6651f6e7950926b18923450d00358ec3c68ffde6a9632bd2768fdfaf91bdfb2540de212bed4337fbed1070acf083572726dbde797ca7c5c4fb7fd277b80f83bc0e9ba76d769669efa1af0529905627cb4d6d56f02e1277e1f3227130d69e9d6f1babb8a86e60eef48d6fcadbeb03d89b9242b009cfeb08e7f827c555e9b02c112e107836c8b4861d03b1536d04ef8ea722926e76dca870dac57e80b037be058cea78eac0a10a12c3f16ba8e293aa647662e569a405ff051"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "b1fd5318457162cc0364a3d0aeb63bb94c7cf41b"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x80}, 0x20004010) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0xa0, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x90}, 0x804) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e80), 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@bloom_filter={0x1e, 0x9, 0x3ff, 0x1, 0x40108, 0x1, 0x5, '\x00', r5, r10, 0x3, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)=@getspdinfo={0x14, 0x25, 0x800, 0x70bd27, 0x25dfdbff, 0x3, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4040001) r12 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) shutdown(r12, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000002140)={r11, &(0x7f0000001040)="540e1fca34e9c795599cd501fc6357fd9c0c428c602e6818db60928628f5bda14a23d913f7e5e91f1e3288dc56714d7ae91c40c01d5593f6c72b0332f9a0ab54ff1bf3f5bccd217940f3a38e77b5f1f1a992bf330a46606dcdf1f899b22186df46c3024e78920267502d4f89653e8c38bca449da73e90625694c1b19f92201055ccaad327876c6e92b1ad06354b1e2a26236c1dc0b554e3131596a7021ea4d061911ee01a0ef0b582f8098bce2a6b6e483b21c04194d335eed6db1858a431b83b17a3370a6cd22", &(0x7f0000001140)=""/4096}, 0x20) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000021c0), r8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000002340)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002300)={&(0x7f0000002200)={0xc4, r13, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xbb, 0x50}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x94, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x5, 0x0, @random='-'}, {0x24, 0x0, @random="6458390acc7a15abf73e7e62bf7b30e3682612e61d45cc1b24e7a795b3c6cb3f"}, {0xb, 0x0, @random="abd1eae70f2c6c"}, {0xa, 0x0, @default_ap_ssid}, {0x14, 0x0, @random="93824d76e10504683aee0b26c9337af2"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x8, 0x0, @random="4506dae1"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24008015}, 0x8000) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002640)={0x6, 0x20, &(0x7f00000023c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000024c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x4, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002500)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000002540)={0x4, 0xa, 0x1000, 0xc00}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000002580)=[r11, r11, r11, r11, r11], &(0x7f00000025c0)=[{0x0, 0x3, 0x1, 0xc}, {0x2, 0x5, 0xa, 0x4}, {0x3, 0x4, 0xf, 0x3}, {0x1, 0x4, 0xf, 0x7}, {0x2, 0x2, 0xf, 0xd}, {0x0, 0x2, 0x1, 0x9}, {0x2, 0x2, 0x4, 0x8}], 0x10, 0x2, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002740)={{r11}, &(0x7f0000002380), &(0x7f0000002700)=r14}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r15, &(0x7f0000002780)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xd}, 0xa) 1.246164668s ago: executing program 0 (id=448): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000011c0), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000100001001000"/20, @ANYRES32, @ANYBLOB="0100020000000000080004000a0000001c001a8018000a8014000700"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x40}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={r5, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 1.166166165s ago: executing program 4 (id=449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x40}], 0x18}], 0x1, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000280)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x6001}, 0x10044001) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=""/96, 0x60}], 0x1}, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x18, r4, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x18}}, 0x4800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r5, 0x0, &(0x7f0000001540)) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0xc4, r4, 0x500, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x90, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2ff8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x971b}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1000}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3ff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9a}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4800}, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd14}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_tcp_int(r6, 0x6, 0x9, 0x0, &(0x7f0000000080)) 1.124505804s ago: executing program 1 (id=450): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 981.837348ms ago: executing program 4 (id=451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname$packet(r6, 0x0, &(0x7f0000000480)) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r3, 0x513, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x44, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x14, 0x0, 0x1, [@nested={0x18, 0x19, 0x0, 0x1, [@typed={0x14, 0x77, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="040100001a000700000000e2fa00000000000000000001000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000000000000000000000000000000002b000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e"], 0x104}}, 0x0) 980.897503ms ago: executing program 1 (id=452): r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0xa, 0x3, 0x3a) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000003a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0xfffffff9, 0x25dfdbfe, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x5, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xfffffff9}, @TCA_PIE_LIMIT={0x8, 0x2, 0x2}]}}]}, 0x40}}, 0x8000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d28", @ANYRES8], 0xe0}], 0x1}, 0x40040) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x66}, @initr0, @alu={0x6, 0x0, 0x3, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x20, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0x3, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000280)={r7, 0x7, 0x6, 0x8}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000711228000000000095000000000000004669b01680141018a3cdd73e32ec27c6e5c9ec608cf57b2a82e28f2db9547e3bfd84a33939dd2564d72d918b6c01c40d0100e5a3f3bdd224e0c5c2e2849fab0d16fd2b2a67c864e81c910290e4f7d46a60b38db77bd715077df09c0aadcd78e7abac544d75d59a6e97531845142a7b28fb5b5110445953ed497ec8d2ac49775810aef1b1ba431e7c36d2fde4e522b9"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {}, {0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r7) 667.442838ms ago: executing program 4 (id=453): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x13, 0x8, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000001a4bf82a52f4e4b200", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000005d000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@generic, &(0x7f0000000280)=0x80) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbb6bb98be58a72ff6030008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x27d87cc094c6cfb9}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008054}, 0xc0c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = gettid() sendmsg$unix(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r4, @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) r10 = epoll_create1(0x0) r11 = socket(0x1, 0x80802, 0x0) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r12, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r10, 0x2, r11, 0x0) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r13, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000000206010400000000000000000000000014000780080006400000000208000840000000300500010006000000050005000a00000011000300686173683a69702c706f7274000000000900020073797a3100000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) 551.362279ms ago: executing program 1 (id=454): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000007bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000001b0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc01000000000000000000e6ee506188ad3ff6bb05"], 0xfc}}, 0x0) 438.086617ms ago: executing program 4 (id=455): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100000}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x380, @empty, 0x7}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000080)="d452e83375dd45bb8d64783b044a94a15953a397a6848d2144a9905b5570c30fe651ddfdb21a5bd43047afa7f289c8e2170d1cf2e99a13f928da4eb1ca6852c1347d94a1683960e49182ed73f8e1fcd3ddc974af83c55c5a3dfb1912bb7ec3446ebe05733cb29a1c750d16155dc6cf22a82c3b701cbd9ad15a852dfa97958f3e2841991c78ce90a02785290a6b558022a615aef4609ee0a14fd0850e89a8c497de85", 0xa2}, {&(0x7f0000000180)="91207fafb3a84793f5c8f8ad586df97e6ce34fed5f28e9cacc9ab37c0d7f41caf9c2d21fe736b08c9d920a0879c46ddc1857bf394837806298cba9e39dcdc3b16fb4269538452c746716bb79e197eea3b44716ac6a4e140fcd99", 0x5a}], 0x2, &(0x7f0000000400)=[@hopopts={{0x20, 0x29, 0x36, {0x62, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x87, 0x2, 0x1, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x26}, r4}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0xc, 0x8, 0x1, 0x6, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @loopback, @loopback]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r2}}}, @dstopts={{0x40, 0x29, 0x37, {0x3c, 0x4, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x9}, @calipso={0x7, 0x10, {0x3, 0x2, 0x6, 0x3, [0x8]}}, @ra={0x5, 0x2, 0x10}, @ra={0x5, 0x2, 0x4}]}}}, @dstopts={{0x58, 0x29, 0x37, {0x2f, 0x7, '\x00', [@generic={0x6, 0x30, "8a4687b5d301351cb94ffe47de08242ca86ce5158dc452a8a36a7b588a36022512205d848747ff6ba775fb6c0f814501"}, @pad1, @jumbo={0xc2, 0x4, 0xff}]}}}], 0x188}}], 0x1, 0x24040000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="8dffa88801010000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00R'], 0x44}}, 0x8000) 437.858825ms ago: executing program 1 (id=456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000130a03000000000000000000020000060900020073797a310000000008000340000800010900010073797a3000000000"], 0x34}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x100000]}}) bind$tipc(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000018000109000000000010000002180000fe0000060000000008000100ac1414"], 0x24}}, 0x0) 366.078324ms ago: executing program 1 (id=457): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) close(0x3) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@private0}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000002030104000000f4ffffffff000000000800010001"], 0x28}}, 0x40000) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x20, 0x3, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x5ffffff}}]}, 0x20}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec85000000750000008500000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r4 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x8910, &(0x7f0000000300)={'syztnl2\x00', 0x0}) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00', 0x0, [0x9, 0x3, 0x40]}, &(0x7f0000000240)=0x44) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r5}, 0x10) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r7, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xd0}, 0x20008000) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x8f4, r7, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x8e0, 0x8, 0x0, 0x1, [{0x54c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @private=0xa010101}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xbfa5}, @WGPEER_A_ALLOWEDIPS={0x1e0, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3a}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x80000001, @loopback, 0x7fff}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_ALLOWEDIPS={0x2cc, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8ee, @mcast1, 0x101}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x160, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @remote}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7ff, @private2, 0x6}}, @WGPEER_A_ALLOWEDIPS={0xe4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}]}]}, {0x194, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xe4}, @WGPEER_A_ALLOWEDIPS={0x144, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4, @private0, 0x4}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}]}]}]}, 0x8f4}, 0x1, 0x0, 0x0, 0x2400c800}, 0x800) (async) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) (async) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000110001000000", @ANYRES32=r9], 0x20}}, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r11, &(0x7f0000000180)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6eea2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x4008800) 308.585817ms ago: executing program 3 (id=458): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xfff1, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r5, &(0x7f0000000940), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) sendmmsg(r6, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000f40)=@vsock={0x28, 0x0, 0xfffffffe}, 0x80, 0x0}}], 0x2, 0x100) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x5, 0x13, r0, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x7e}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) 210.15344ms ago: executing program 0 (id=459): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x88, r4, 0x500, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3f}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40001}, 0x41000) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r1, &(0x7f0000003a00)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xffffff83, @local, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000600)="11", 0x1}], 0x1, 0x0, 0x0, 0xf5}}], 0x1, 0x4c040) 185.458536ms ago: executing program 4 (id=460): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x40) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=""/27, 0x1b}}], 0x1, 0x12141, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000000000000}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$kcm(0x29, 0x7, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, &(0x7f0000000740)=""/159, 0x7a, 0x9f, 0x0, 0xfffffffb, 0x0, @void, @value}, 0x20) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) openat$cgroup_ro(r5, &(0x7f00000003c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pS \x00'}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x7800, 0x10, 0x4, 0x1, {{0x2c, 0x4, 0x3, 0x1, 0xb0, 0x68, 0x0, 0x5, 0x0, 0x0, @local, @remote, {[@timestamp_prespec={0x44, 0x54, 0x97, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x20}, 0x8}, {@private=0xa010102, 0x8001}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}, {@loopback}, {@local, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4}, {@empty, 0x9}, {@remote, 0x5}, {@remote, 0x200}]}, @timestamp_addr={0x44, 0x1c, 0x6f, 0x1, 0xd, [{@multicast2, 0x6}, {@empty, 0x4}, {@local, 0x2}]}, @timestamp_addr={0x44, 0x14, 0xc3, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1b}, {@local, 0x7ff}]}, @ssrr={0x89, 0x17, 0xfe, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010101, @remote]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYRESDEC=r3], &(0x7f0000000000)='GPL\x00', 0x5, 0x8e, &(0x7f0000002240)=""/142, 0x0, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x9, '\x00', r7, r8, 0x2, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) 172.557982ms ago: executing program 2 (id=461): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000012b3604fd35463a3d9dbdf2507000000", @ANYRES32=0x0, @ANYRESDEC=r0], 0x28}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x424}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtaction={0x18, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x0) sendmmsg(r3, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000068c0)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="5baf15", 0x3}, {0x0}], 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25b6a5e0aadc1c00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44080}], 0x4, 0x48000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000000)={@multicast2, @broadcast, 0x1, "2b1d1c5d4a3502e09dfedad667d8ef823358d35105099dda724ba5671b8321d7", 0x31f, 0xef, 0x400}, 0x3c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 102.059318ms ago: executing program 1 (id=462): r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0xa000042}, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x26, 0x0, 0x26, {{0x10, 0x4, 0x3, 0x36, 0x40, 0x67, 0x0, 0x7, 0x29, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0x45, 0x3, 0x8, [{@multicast2, 0xfff}]}, @timestamp_prespec={0x44, 0xc, 0xb2, 0x3, 0x3, [{@private=0xa010100, 0x6f8a}]}, @lsrr={0x83, 0xb, 0x1a, [@multicast1, @rand_addr=0x64010102]}, @lsrr={0x83, 0x7, 0xc5, [@local]}]}}}}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@loopback, @mcast2, @remote, 0x8, 0x0, 0x8001, 0x100, 0xffff, 0x4800000, r2}) (async) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@loopback, @mcast2, @remote, 0x8, 0x0, 0x8001, 0x100, 0xffff, 0x4800000, r2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', r2, 0x700, 0x40, 0x0, 0x6, {{0x11, 0x4, 0x3, 0x3d, 0x44, 0x65, 0x3, 0x2, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x18}, {[@ssrr={0x89, 0xf, 0xcf, [@multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x20, 0x2b, 0x0, 0x9, [0x7fff, 0x80000, 0x200, 0x3, 0x3, 0x65, 0x2]}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getroute={0x58, 0x1a, 0x4, 0x70bd26, 0x25dfdbfe, {0xa, 0x14, 0x80, 0x7, 0xfe, 0x4, 0x0, 0x6, 0x2000}, [@RTA_PREF={0x5, 0x14, 0xff}, @RTA_MARK={0x8, 0x10, 0x5}, @RTA_PRIORITY={0x8, 0x6, 0x9}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x20, 0x1a, r4}}, @RTA_EXPIRES={0x8, 0x17, 0x10001}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x24000810) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000380)=0x100000, 0x4) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x7fff, @loopback, 0x6}, 0x1c) (async) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x7fff, @loopback, 0x6}, 0x1c) r6 = socket$tipc(0x1e, 0xd76c208f6e5227dd, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000440)={0x4, &(0x7f0000000400)=[{0x5, 0x5, 0x0, 0x7}, {0x9, 0x7, 0xa, 0x80000000}, {0x5ad, 0x4, 0x6, 0x2}, {0x2, 0x6, 0x7, 0x7d}]}, 0x10) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000480)={0x0, 0x4, 0x4d6}, &(0x7f00000004c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000480)={0x0, 0x4, 0x4d6}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000500)={r8, @in6={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}}}, &(0x7f00000005c0)=0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='ata_tf_load\x00', 0xffffffffffffffff, 0x0, 0xf}, 0x18) recvmmsg(r5, &(0x7f0000000980)=[{{&(0x7f0000000680)=@generic, 0x80, &(0x7f0000000880)=[{&(0x7f0000000700)=""/70, 0x46}, {&(0x7f0000000780)=""/73, 0x49}, {&(0x7f0000000800)=""/125, 0x7d}], 0x3, &(0x7f00000008c0)=""/168, 0xa8}, 0x4e}], 0x1, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x30200, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000a00)={'wg0\x00', 0x800}) (async) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000a00)={'wg0\x00', 0x800}) setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000a40)=@assoc_id=r8, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000a80)={r1}) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000ac0)={r9, 0xfe1, 0x0, 0x10}, &(0x7f0000000b00)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r11, 0x84, 0x72, &(0x7f0000000b40)={r12, 0x7, 0x30}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r11, 0x84, 0x72, &(0x7f0000000b40)={r12, 0x7, 0x30}, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000b80)={0x6, 0x8000, 0x3, 0x1, r8}, &(0x7f0000000bc0)=0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000c00), 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000c00), 0x4) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r11) sendmsg$BATADV_CMD_TP_METER(r11, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r14, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}}, 0x10) (async) sendmsg$BATADV_CMD_TP_METER(r11, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r14, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000d80)={r13, 0xfb, "b74f67e45f63b7388d174accc1f32b5b6e2f32685b621db336bf3166d5d851d1ecdd0b21a1b3a17dc8a65451c06ac32eefff417f9323c639f61d92322476efeb8a85c52781d459a81924741775c9c64179f3db57728aee7eea35f806ee76020ea846ff54b11917f9c3eb99686bbb834cbd4463b88065812ae10c402e64d0feced102f807dae0bd9025855d87490649d262f1462f71a222e7a38deff1a30600d58d45ba7ab247f2345b7b857f9c7b79726a8a3ecc72c5caeae03ccedbc7b3613bec79ddb1b0588f980ba010fc11a3fcb536d66221efcb628cd9082885224f90af850475454a0c2acf3e8ce23d28bb9020a579616299dc48302778d5"}, &(0x7f0000000ec0)=0x103) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000d80)={r13, 0xfb, "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"}, &(0x7f0000000ec0)=0x103) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000f00)={r15}, &(0x7f0000000f40)=0x8) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000f00)={r15}, &(0x7f0000000f40)=0x8) 0s ago: executing program 0 (id=463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x10c}, 0x1, 0x0, 0x0, 0x40}, 0x51) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=""/173, 0xad}, 0x7a}], 0x1, 0x2b, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f00000001c0)='\r', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0xa}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1011}, 0x4000000) vmsplice(r1, &(0x7f0000000940)=[{&(0x7f0000000400)="13331e", 0x3}], 0x1, 0x0) write$cgroup_type(r1, &(0x7f00000001c0), 0x9) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24004800}, 0x40000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.61' (ED25519) to the list of known hosts. [ 67.979336][ T5814] cgroup: Unknown subsys name 'net' [ 68.110939][ T5814] cgroup: Unknown subsys name 'cpuset' [ 68.119958][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.510299][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.203156][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.213676][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.941242][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.948620][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.957529][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.964805][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.972599][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.981105][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.988576][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.996715][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.004765][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.012732][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.016692][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.020405][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.044348][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.053631][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.060900][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.067861][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.083320][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.090580][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.093379][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.106000][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.114035][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.129215][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.137090][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.148721][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.155952][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.535016][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 72.710434][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 72.766648][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 72.872998][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 72.912094][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.919643][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.926934][ T5824] bridge_slave_0: entered allmulticast mode [ 72.934049][ T5824] bridge_slave_0: entered promiscuous mode [ 72.974821][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.982299][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.990147][ T5824] bridge_slave_1: entered allmulticast mode [ 72.997320][ T5824] bridge_slave_1: entered promiscuous mode [ 73.085248][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.092444][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.100098][ T5834] bridge_slave_0: entered allmulticast mode [ 73.107283][ T5834] bridge_slave_0: entered promiscuous mode [ 73.114331][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 73.143709][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.155338][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.170903][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.178156][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.185293][ T5834] bridge_slave_1: entered allmulticast mode [ 73.192946][ T5834] bridge_slave_1: entered promiscuous mode [ 73.285574][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.298689][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.308097][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.315300][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.323167][ T5825] bridge_slave_0: entered allmulticast mode [ 73.330653][ T5825] bridge_slave_0: entered promiscuous mode [ 73.382378][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.389638][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.397867][ T5825] bridge_slave_1: entered allmulticast mode [ 73.404808][ T5825] bridge_slave_1: entered promiscuous mode [ 73.437284][ T5824] team0: Port device team_slave_0 added [ 73.451852][ T5834] team0: Port device team_slave_0 added [ 73.489578][ T5824] team0: Port device team_slave_1 added [ 73.495608][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.503139][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.510638][ T5838] bridge_slave_0: entered allmulticast mode [ 73.519202][ T5838] bridge_slave_0: entered promiscuous mode [ 73.533454][ T5834] team0: Port device team_slave_1 added [ 73.556582][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.570232][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.600395][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.607980][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.615107][ T5838] bridge_slave_1: entered allmulticast mode [ 73.623278][ T5838] bridge_slave_1: entered promiscuous mode [ 73.691382][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.698422][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.724752][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.766164][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.773370][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.799440][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.813590][ T5825] team0: Port device team_slave_0 added [ 73.820450][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.828446][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.854956][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.882512][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.891861][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.899480][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.906608][ T5831] bridge_slave_0: entered allmulticast mode [ 73.914119][ T5831] bridge_slave_0: entered promiscuous mode [ 73.922849][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.930263][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.956418][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.975632][ T5825] team0: Port device team_slave_1 added [ 74.000461][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.023242][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.030778][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.037937][ T5831] bridge_slave_1: entered allmulticast mode [ 74.044847][ T5831] bridge_slave_1: entered promiscuous mode [ 74.077430][ T5839] Bluetooth: hci0: command tx timeout [ 74.104208][ T5838] team0: Port device team_slave_0 added [ 74.123925][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.136305][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.146439][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.154059][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.180497][ T5830] Bluetooth: hci1: command tx timeout [ 74.185909][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.186191][ T5839] Bluetooth: hci3: command tx timeout [ 74.198832][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.209023][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.235016][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.237068][ T5839] Bluetooth: hci4: command tx timeout [ 74.246925][ T5830] Bluetooth: hci2: command tx timeout [ 74.270363][ T5838] team0: Port device team_slave_1 added [ 74.348460][ T5824] hsr_slave_0: entered promiscuous mode [ 74.354753][ T5824] hsr_slave_1: entered promiscuous mode [ 74.368404][ T5834] hsr_slave_0: entered promiscuous mode [ 74.374569][ T5834] hsr_slave_1: entered promiscuous mode [ 74.381465][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.389525][ T5834] Cannot create hsr debugfs directory [ 74.398941][ T5831] team0: Port device team_slave_0 added [ 74.409280][ T5831] team0: Port device team_slave_1 added [ 74.427168][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.434111][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.460196][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.472496][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.479736][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.505663][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.600344][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.607539][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.633613][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.647089][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.654040][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.680397][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.714343][ T5825] hsr_slave_0: entered promiscuous mode [ 74.720733][ T5825] hsr_slave_1: entered promiscuous mode [ 74.726891][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.734452][ T5825] Cannot create hsr debugfs directory [ 74.815508][ T5838] hsr_slave_0: entered promiscuous mode [ 74.822813][ T5838] hsr_slave_1: entered promiscuous mode [ 74.829655][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.837730][ T5838] Cannot create hsr debugfs directory [ 74.959169][ T5831] hsr_slave_0: entered promiscuous mode [ 74.965440][ T5831] hsr_slave_1: entered promiscuous mode [ 74.973726][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.981339][ T5831] Cannot create hsr debugfs directory [ 75.335839][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.347714][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.359788][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.377357][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.429772][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.454130][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.467429][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.479978][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.533898][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.546432][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.565637][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.581599][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.694498][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.707832][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.745676][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.756548][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.852149][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.874606][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.883018][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.892776][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.904684][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.915042][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.974685][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.004579][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.017050][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.024322][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.042788][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.060903][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.068071][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.079813][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.086945][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.122628][ T4880] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.129847][ T4880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.142829][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.157100][ T5839] Bluetooth: hci0: command tx timeout [ 76.182433][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.189654][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.237009][ T5839] Bluetooth: hci3: command tx timeout [ 76.240917][ T5830] Bluetooth: hci1: command tx timeout [ 76.256778][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.263893][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.303786][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.318025][ T5830] Bluetooth: hci4: command tx timeout [ 76.318240][ T5839] Bluetooth: hci2: command tx timeout [ 76.333327][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.381207][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.455168][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.462380][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.493122][ T4880] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.500330][ T4880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.522506][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.591618][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.673799][ T4880] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.680970][ T4880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.704766][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.711966][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.803876][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.940922][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.990016][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.121538][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.190588][ T5824] veth0_vlan: entered promiscuous mode [ 77.256032][ T5831] veth0_vlan: entered promiscuous mode [ 77.264794][ T5824] veth1_vlan: entered promiscuous mode [ 77.304063][ T5831] veth1_vlan: entered promiscuous mode [ 77.335836][ T5825] veth0_vlan: entered promiscuous mode [ 77.346553][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.381909][ T5825] veth1_vlan: entered promiscuous mode [ 77.415936][ T5824] veth0_macvtap: entered promiscuous mode [ 77.431812][ T5834] veth0_vlan: entered promiscuous mode [ 77.448909][ T5824] veth1_macvtap: entered promiscuous mode [ 77.468738][ T5831] veth0_macvtap: entered promiscuous mode [ 77.477895][ T5834] veth1_vlan: entered promiscuous mode [ 77.490183][ T5831] veth1_macvtap: entered promiscuous mode [ 77.521517][ T5825] veth0_macvtap: entered promiscuous mode [ 77.532684][ T5825] veth1_macvtap: entered promiscuous mode [ 77.563743][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.572889][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.583924][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.601584][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.621867][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.632632][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.642564][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.653322][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.664889][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.683394][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.695701][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.704654][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.714084][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.723013][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.734181][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.745411][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.756505][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.767918][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.778726][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.790005][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.800563][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.811835][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.829688][ T5834] veth0_macvtap: entered promiscuous mode [ 77.842382][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.851661][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.860573][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.869475][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.882945][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.892033][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.901330][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.910115][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.923680][ T5838] veth0_vlan: entered promiscuous mode [ 77.942997][ T5834] veth1_macvtap: entered promiscuous mode [ 77.978509][ T5838] veth1_vlan: entered promiscuous mode [ 78.029481][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.041011][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.051425][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.062233][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.072219][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.083475][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.094409][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.120782][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.132048][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.142396][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.152864][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.162777][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.173270][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.185154][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.219392][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.228348][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.237600][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.246283][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.247638][ T5839] Bluetooth: hci0: command tx timeout [ 78.276517][ T5838] veth0_macvtap: entered promiscuous mode [ 78.298783][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.317449][ T5839] Bluetooth: hci1: command tx timeout [ 78.319765][ T5830] Bluetooth: hci3: command tx timeout [ 78.336966][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.351658][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.352014][ T5838] veth1_macvtap: entered promiscuous mode [ 78.365558][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.397981][ T5830] Bluetooth: hci2: command tx timeout [ 78.403448][ T5830] Bluetooth: hci4: command tx timeout [ 78.419607][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.429210][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.430439][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.444272][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.461152][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.471625][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.481890][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.492424][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.502602][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.513152][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.524563][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.551927][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.562701][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.573993][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.584721][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.594900][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.605407][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.615246][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.625789][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.638052][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.688736][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.701479][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.711331][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.720660][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.742134][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.753419][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.771930][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.906439][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.919977][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.971171][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.000967][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.091493][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.116668][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.128533][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.144610][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.166960][ T5921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6'. [ 79.220803][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.242710][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.269438][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 79.275006][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.291111][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.312586][ T5917] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6'. [ 79.533452][ T5926] veth0_to_team: entered promiscuous mode [ 79.870210][ T5942] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8'. [ 80.318740][ T5830] Bluetooth: hci0: command tx timeout [ 80.400195][ T5830] Bluetooth: hci3: command tx timeout [ 80.403763][ T5839] Bluetooth: hci1: command tx timeout [ 80.477447][ T5839] Bluetooth: hci4: command tx timeout [ 80.477458][ T5830] Bluetooth: hci2: command tx timeout [ 80.649493][ T5960] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14'. [ 80.961967][ T5972] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17'. [ 81.198868][ T5982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21'. [ 81.231922][ T5984] Zero length message leads to an empty skb [ 81.398202][ T5993] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.803274][ T6003] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.970718][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27'. [ 82.021783][ T6008] warning: `syz.4.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.148168][ T6013] openvswitch: netlink: Actions may not be safe on all matching packets [ 82.180435][ T6011] netlink: 'syz.2.28': attribute type 5 has an invalid length. [ 82.538407][ T6021] netlink: 'syz.2.30': attribute type 30 has an invalid length. [ 82.733798][ T6026] tipc: Started in network mode [ 82.784667][ T6026] tipc: Node identity 00000000004000000000000000000001, cluster identity 4711 [ 82.830370][ T6026] tipc: Enabling of bearer rejected, failed to enable media [ 83.164609][ T6045] netlink: 'syz.0.38': attribute type 30 has an invalid length. [ 83.179737][ T6051] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.40'. [ 83.240505][ T6045] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.249551][ T6045] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.259063][ T6045] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.268874][ T6045] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.338230][ T6045] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.347401][ T6045] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.356930][ T6045] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.365821][ T6045] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.453483][ T6051] netlink: 'syz.4.40': attribute type 3 has an invalid length. [ 83.585930][ T6055] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 83.631013][ T6055] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 83.758916][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.42'. [ 83.959503][ T6071] Bluetooth: MGMT ver 1.23 [ 84.181747][ T6073] syzkaller0: entered promiscuous mode [ 84.188977][ T6073] syzkaller0: entered allmulticast mode [ 85.240176][ T6127] syz.4.61 uses obsolete (PF_INET,SOCK_PACKET) [ 86.111881][ T6138] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 86.569542][ T53] cfg80211: failed to load regulatory.db [ 86.669887][ T6168] veth1_macvtap: left promiscuous mode [ 86.675784][ T6168] macsec0: entered promiscuous mode [ 86.701833][ T6164] syzkaller1: entered promiscuous mode [ 86.716626][ T6164] syzkaller1: entered allmulticast mode [ 86.751263][ T6156] veth1_macvtap: entered promiscuous mode [ 86.779684][ T6172] Bluetooth: MGMT ver 1.23 [ 86.781156][ T6156] macsec0: left promiscuous mode [ 87.083582][ T6183] netlink: 'syz.1.75': attribute type 3 has an invalid length. [ 87.796570][ T6213] __nla_validate_parse: 1 callbacks suppressed [ 87.796589][ T6213] netlink: 132 bytes leftover after parsing attributes in process `syz.2.84'. [ 87.924630][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.87'. [ 87.982000][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.87'. [ 88.001350][ T6231] sctp: [Deprecated]: syz.1.89 (pid 6231) Use of int in max_burst socket option deprecated. [ 88.001350][ T6231] Use struct sctp_assoc_value instead [ 88.035936][ T6224] netlink: 'syz.4.87': attribute type 13 has an invalid length. [ 88.113718][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'. [ 88.123690][ T6224] netlink: 'syz.4.87': attribute type 12 has an invalid length. [ 88.143757][ T6235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.88'. [ 88.181928][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 88.201564][ T6235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.88'. [ 88.376482][ T30] audit: type=1800 audit(1746078310.184:2): pid=6231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.89" name="cgroup.controllers" dev="tmpfs" ino=100 res=0 errno=0 [ 88.546715][ T6255] macsec1: entered promiscuous mode [ 88.566943][ T6255] macsec1: entered allmulticast mode [ 88.822344][ T6270] netlink: 'syz.3.95': attribute type 2 has an invalid length. [ 88.868042][ T6270] netlink: 56 bytes leftover after parsing attributes in process `syz.3.95'. [ 88.883520][ T6273] raw_sendmsg: syz.1.96 forgot to set AF_INET. Fix it! [ 89.708728][ T6308] netlink: 'syz.4.105': attribute type 1 has an invalid length. [ 89.764348][ T6308] netlink: 44 bytes leftover after parsing attributes in process `syz.4.105'. [ 89.780254][ T6311] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 89.907315][ T6318] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 89.917136][ T6311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.106'. [ 90.087757][ T6332] netlink: 'syz.3.111': attribute type 3 has an invalid length. [ 90.214410][ T6337] gtp0: entered promiscuous mode [ 90.477949][ T6346] netlink: 'syz.2.117': attribute type 21 has an invalid length. [ 90.498424][ T6349] openvswitch: netlink: Message has 24 unknown bytes. [ 90.505282][ T6349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.902936][ T6376] Bluetooth: MGMT ver 1.23 [ 91.272840][ T6391] smc: net device bond0 applied user defined pnetid SYZ0 [ 91.342426][ T6391] smc: net device bond0 erased user defined pnetid SYZ0 [ 91.580496][ T30] audit: type=1800 audit(1746078313.394:3): pid=6421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.132" name="memory.events" dev="tmpfs" ino=178 res=0 errno=0 [ 91.659334][ T30] audit: type=1804 audit(1746078313.394:4): pid=6421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.132" name="/newroot/31/memory.events" dev="tmpfs" ino=178 res=1 errno=0 [ 92.027349][ T6442] ieee802154 phy0 wpan0: encryption failed: -22 [ 92.075074][ T6435] IPv6: sit1: Disabled Multicast RS [ 92.102989][ T6437] bridge_slave_1: left allmulticast mode [ 92.126836][ T6437] bridge_slave_1: left promiscuous mode [ 92.133333][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.206441][ T6437] bridge_slave_0: left allmulticast mode [ 92.247488][ T6437] bridge_slave_0: left promiscuous mode [ 92.255971][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.543035][ T6460] bond0: entered promiscuous mode [ 92.557531][ T6460] bond_slave_0: entered promiscuous mode [ 92.578260][ T6460] bond_slave_1: entered promiscuous mode [ 92.601522][ T6459] bond0: left promiscuous mode [ 92.621282][ T6459] bond_slave_0: left promiscuous mode [ 92.647164][ T6459] bond_slave_1: left promiscuous mode [ 92.733207][ T5877] IPVS: starting estimator thread 0... [ 92.812153][ T6477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.837624][ T6472] IPVS: using max 32 ests per chain, 76800 per kthread [ 92.932786][ T6486] trusted_key: syz.3.146 sent an empty control message without MSG_MORE. [ 92.990266][ T6476] __nla_validate_parse: 10 callbacks suppressed [ 92.990284][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 93.371932][ T6509] xt_limit: Overflow, try lower: 0/0 [ 93.776163][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.158'. [ 94.366932][ T6547] netlink: 32 bytes leftover after parsing attributes in process `syz.0.164'. [ 94.580683][ T6569] netlink: 'syz.4.168': attribute type 30 has an invalid length. [ 94.821342][ T6569] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.831322][ T6569] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.841065][ T6569] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.850370][ T6569] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.922039][ T6569] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.932457][ T6569] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.942620][ T6569] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.951560][ T6569] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.549082][ T6592] syzkaller0: entered allmulticast mode [ 95.959896][ T6606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.180'. [ 96.046322][ T6612] netlink: 64 bytes leftover after parsing attributes in process `syz.0.179'. [ 96.065974][ T6613] netlink: 'syz.2.182': attribute type 11 has an invalid length. [ 96.146818][ T6619] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x2 [ 97.379965][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'. [ 97.526540][ T6637] netlink: 36 bytes leftover after parsing attributes in process `syz.3.189'. [ 97.821262][ T6647] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 97.943076][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.194'. [ 98.002196][ T6654] Bluetooth: MGMT ver 1.23 [ 98.214497][ T6653] bridge_slave_1: left allmulticast mode [ 98.222339][ T6653] bridge_slave_1: left promiscuous mode [ 98.233182][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.267145][ T6653] bridge_slave_0: left allmulticast mode [ 98.274311][ T6653] bridge_slave_0: left promiscuous mode [ 98.281090][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.314398][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.195'. [ 98.467639][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.195'. [ 98.891611][ T6685] netlink: 60 bytes leftover after parsing attributes in process `syz.3.200'. [ 98.912916][ T6675] netlink: 44 bytes leftover after parsing attributes in process `syz.3.200'. [ 98.925278][ T6682] netlink: 60 bytes leftover after parsing attributes in process `syz.3.200'. [ 99.208120][ T6700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.207'. [ 99.650508][ T6720] FAULT_INJECTION: forcing a failure. [ 99.650508][ T6720] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.683448][ T6720] CPU: 1 UID: 0 PID: 6720 Comm: syz.4.212 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 99.683476][ T6720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 99.683498][ T6720] Call Trace: [ 99.683522][ T6720] [ 99.683530][ T6720] dump_stack_lvl+0x189/0x250 [ 99.683575][ T6720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.683607][ T6720] ? __pfx__printk+0x10/0x10 [ 99.683640][ T6720] should_fail_ex+0x414/0x560 [ 99.683676][ T6720] _copy_from_user+0x2d/0xb0 [ 99.683702][ T6720] sctp_setsockopt+0x19f/0x1200 [ 99.683722][ T6720] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 99.683755][ T6720] do_sock_setsockopt+0x257/0x3e0 [ 99.683780][ T6720] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 99.683800][ T6720] ? __fget_files+0x2a/0x420 [ 99.683830][ T6720] ? __fget_files+0x3a0/0x420 [ 99.683853][ T6720] ? __fget_files+0x2a/0x420 [ 99.683886][ T6720] __x64_sys_setsockopt+0x18b/0x220 [ 99.683914][ T6720] do_syscall_64+0xf6/0x210 [ 99.683944][ T6720] ? clear_bhb_loop+0x45/0xa0 [ 99.683967][ T6720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.683986][ T6720] RIP: 0033:0x7f92f9b8e969 [ 99.684007][ T6720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.684023][ T6720] RSP: 002b:00007f92faa1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 99.684043][ T6720] RAX: ffffffffffffffda RBX: 00007f92f9db5fa0 RCX: 00007f92f9b8e969 [ 99.684057][ T6720] RDX: 0000000000000014 RSI: 0000000000000084 RDI: 0000000000000004 [ 99.684068][ T6720] RBP: 00007f92faa1a090 R08: 0000000000000008 R09: 0000000000000000 [ 99.684079][ T6720] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 99.684091][ T6720] R13: 0000000000000000 R14: 00007f92f9db5fa0 R15: 00007ffead782a08 [ 99.684121][ T6720] [ 100.222279][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 100.241223][ T6740] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 100.275295][ T6740] xt_l2tp: missing protocol rule (udp|l2tpip) [ 100.286575][ T6739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.219'. [ 100.314906][ T6744] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.331974][ T6744] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 100.446858][ T6752] veth0_to_bridge: entered promiscuous mode [ 100.470955][ T6738] veth0_to_bridge: left promiscuous mode [ 100.602869][ T6763] FAULT_INJECTION: forcing a failure. [ 100.602869][ T6763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.643295][ T6768] netlink: 'syz.1.227': attribute type 10 has an invalid length. [ 100.656546][ T6763] CPU: 1 UID: 0 PID: 6763 Comm: syz.4.226 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 100.656573][ T6763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 100.656590][ T6763] Call Trace: [ 100.656597][ T6763] [ 100.656605][ T6763] dump_stack_lvl+0x189/0x250 [ 100.656639][ T6763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.656665][ T6763] ? __pfx__printk+0x10/0x10 [ 100.656695][ T6763] should_fail_ex+0x414/0x560 [ 100.656731][ T6763] _copy_to_user+0x31/0xb0 [ 100.656755][ T6763] simple_read_from_buffer+0xe1/0x170 [ 100.656781][ T6763] proc_fail_nth_read+0x1df/0x250 [ 100.656806][ T6763] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.656833][ T6763] ? rw_verify_area+0x258/0x650 [ 100.656850][ T6763] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.656874][ T6763] vfs_read+0x1fd/0x980 [ 100.656897][ T6763] ? __pfx___mutex_lock+0x10/0x10 [ 100.656922][ T6763] ? __pfx_vfs_read+0x10/0x10 [ 100.656942][ T6763] ? __fget_files+0x2a/0x420 [ 100.656967][ T6763] ? __fget_files+0x3a0/0x420 [ 100.656987][ T6763] ? __fget_files+0x2a/0x420 [ 100.657016][ T6763] ksys_read+0x145/0x250 [ 100.657037][ T6763] ? __pfx_ksys_read+0x10/0x10 [ 100.657059][ T6763] ? do_syscall_64+0xba/0x210 [ 100.657087][ T6763] do_syscall_64+0xf6/0x210 [ 100.657110][ T6763] ? clear_bhb_loop+0x45/0xa0 [ 100.657131][ T6763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.657147][ T6763] RIP: 0033:0x7f92f9b8d37c [ 100.657163][ T6763] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 100.657177][ T6763] RSP: 002b:00007f92faa1a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 100.657194][ T6763] RAX: ffffffffffffffda RBX: 00007f92f9db5fa0 RCX: 00007f92f9b8d37c [ 100.657206][ T6763] RDX: 000000000000000f RSI: 00007f92faa1a0a0 RDI: 0000000000000005 [ 100.657217][ T6763] RBP: 00007f92faa1a090 R08: 0000000000000000 R09: 0000000000000000 [ 100.657227][ T6763] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 100.657237][ T6763] R13: 0000000000000000 R14: 00007f92f9db5fa0 R15: 00007ffead782a08 [ 100.657263][ T6763] [ 100.673437][ T6768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.839837][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 100.890197][ T6776] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 100.975776][ T6768] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 101.109789][ T6776] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.117588][ T6776] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.262526][ T6776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.284855][ T6776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.352379][ T6776] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.363448][ T6776] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.373493][ T6776] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.389561][ T6776] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.446617][ T6789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.559742][ T6795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.235'. [ 101.600844][ T6797] netlink: 'syz.3.234': attribute type 1 has an invalid length. [ 101.680378][ T6797] bond1: (slave gretap1): making interface the new active one [ 101.707742][ T6797] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 101.733540][ T6799] netlink: 'syz.1.235': attribute type 29 has an invalid length. [ 102.145967][ T6825] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 102.410576][ T6833] tipc: Enabling of bearer rejected, failed to enable media [ 102.436635][ T6831] netlink: 'syz.2.244': attribute type 30 has an invalid length. [ 102.599029][ T6838] hsr0: entered promiscuous mode [ 102.681555][ T6838] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 102.965910][ T6855] syzkaller0: entered promiscuous mode [ 103.036686][ T6855] syzkaller0: entered allmulticast mode [ 103.078556][ T6869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.269245][ T5907] IPVS: starting estimator thread 0... [ 103.367005][ T6878] IPVS: using max 46 ests per chain, 110400 per kthread [ 104.093119][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.104184][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.114056][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.124602][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.134473][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.146263][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.156141][ T6869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.166842][ T6869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.320883][ T6884] __nla_validate_parse: 4 callbacks suppressed [ 104.320900][ T6884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.261'. [ 104.323240][ T6885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.416165][ T6887] netlink: 48 bytes leftover after parsing attributes in process `syz.3.260'. [ 104.637223][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'. [ 104.922970][ T6912] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.269'. [ 105.996164][ T6953] syzkaller1: entered promiscuous mode [ 106.002602][ T6953] syzkaller1: entered allmulticast mode [ 106.113386][ T6957] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 106.153029][ T6957] netlink: 'syz.3.280': attribute type 1 has an invalid length. [ 106.482606][ T6967] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 106.514479][ T6967] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 106.539186][ T6967] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 106.701195][ T6981] netlink: 24 bytes leftover after parsing attributes in process `syz.0.286'. [ 106.743319][ T6980] netlink: 24 bytes leftover after parsing attributes in process `syz.0.286'. [ 106.781625][ T5875] IPVS: starting estimator thread 0... [ 106.881568][ T6982] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.889373][ T6982] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.907401][ T6985] IPVS: using max 30 ests per chain, 72000 per kthread [ 106.909169][ T6981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 107.104382][ T6982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.142313][ T6982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.310573][ T6982] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.334573][ T6982] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.367063][ T6982] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.375963][ T6982] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.459904][ T7000] netlink: 24 bytes leftover after parsing attributes in process `syz.2.292'. [ 107.508630][ T6982] gtp0: left promiscuous mode [ 107.525046][ T6984] bridge0: port 3(gretap0) entered blocking state [ 107.538453][ T6984] bridge0: port 3(gretap0) entered disabled state [ 107.558231][ T6984] gretap0: entered allmulticast mode [ 107.572545][ T6984] gretap0: entered promiscuous mode [ 107.584969][ T5879] syz2: Port: 1 Link DOWN [ 107.727764][ T7011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.294'. [ 107.759247][ T7006] netlink: 16 bytes leftover after parsing attributes in process `syz.3.293'. [ 107.993907][ T7026] vti0: entered promiscuous mode [ 108.454374][ T7039] sit0: entered promiscuous mode [ 108.478469][ T7049] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003 [ 108.490124][ T7039] netlink: 'syz.0.298': attribute type 3 has an invalid length. [ 108.850355][ T7071] netlink: 'syz.4.307': attribute type 3 has an invalid length. [ 109.096415][ T7087] netlink: 'syz.0.311': attribute type 3 has an invalid length. [ 109.584524][ T7109] __nla_validate_parse: 10 callbacks suppressed [ 109.584542][ T7109] netlink: 36 bytes leftover after parsing attributes in process `syz.1.316'. [ 109.606337][ T7110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 109.626247][ T7106] netlink: 'syz.2.315': attribute type 1 has an invalid length. [ 109.634294][ T7106] netlink: 224 bytes leftover after parsing attributes in process `syz.2.315'. [ 109.689444][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.315'. [ 109.869776][ T7111] macvtap1: entered promiscuous mode [ 109.875464][ T7111] vlan0: entered promiscuous mode [ 109.886573][ T7111] macvtap1: entered allmulticast mode [ 109.892388][ T7111] vlan0: entered allmulticast mode [ 109.897921][ T7111] veth0_vlan: entered allmulticast mode [ 109.932854][ T7123] xt_recent: Unsupported userspace flags (00000048) [ 110.087215][ T7130] netlink: 24 bytes leftover after parsing attributes in process `syz.4.323'. [ 110.321979][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 110.612294][ T7154] netlink: 'syz.3.331': attribute type 10 has an invalid length. [ 110.632673][ T7154] netlink: 40 bytes leftover after parsing attributes in process `syz.3.331'. [ 110.674742][ T7154] batman_adv: batadv0: Adding interface: virt_wifi0 [ 110.714963][ T7154] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.776936][ T7154] batman_adv: batadv0: Interface activated: virt_wifi0 [ 111.154687][ T7175] dvmrp0: entered allmulticast mode [ 111.162118][ T7177] dvmrp0: left allmulticast mode [ 111.365330][ T7182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.338'. [ 111.906502][ T7210] netlink: 36 bytes leftover after parsing attributes in process `syz.3.350'. [ 111.955756][ T7214] netlink: 24 bytes leftover after parsing attributes in process `syz.0.351'. [ 112.370462][ T7238] syzkaller0: create flow: hash 867375896 index 1 [ 112.407071][ T3654] syzkaller0: tun_net_xmit 76 [ 112.412141][ T3654] syzkaller0: tun_net_xmit 48 [ 112.427014][ T5879] syzkaller0: tun_net_xmit 76 [ 112.471635][ T7244] netlink: 'syz.4.360': attribute type 1 has an invalid length. [ 112.501223][ T7244] netlink: 'syz.4.360': attribute type 10 has an invalid length. [ 112.514479][ T7244] netlink: 'syz.4.360': attribute type 4 has an invalid length. [ 112.523112][ T7244] netlink: 'syz.4.360': attribute type 1 has an invalid length. [ 112.617551][ T7238] syzkaller0: delete flow: hash 867375896 index 1 [ 112.688631][ T7259] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 112.702296][ T7260] IPVS: set_ctl: invalid protocol: 184 172.20.20.63:8210 [ 113.275012][ T7291] netlink: 'syz.4.368': attribute type 10 has an invalid length. [ 114.174742][ T7291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.206690][ T7291] team0: Port device bond0 added [ 114.455656][ T7294] team0 (unregistering): Port device team_slave_0 removed [ 114.501544][ T7294] team0 (unregistering): Port device team_slave_1 removed [ 114.532111][ T7294] team0 (unregistering): Port device bond0 removed [ 114.692665][ T7324] __nla_validate_parse: 9 callbacks suppressed [ 114.692681][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.376'. [ 114.859060][ T7324] netlink: 20 bytes leftover after parsing attributes in process `syz.2.376'. [ 114.942157][ T7336] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.950409][ T7336] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.085382][ T7367] netlink: 20 bytes leftover after parsing attributes in process `syz.3.389'. [ 116.221565][ T7373] netlink: 'syz.0.390': attribute type 10 has an invalid length. [ 116.421915][ T7373] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 116.531392][ T7381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.391'. [ 116.750213][ T7404] netlink: 16 bytes leftover after parsing attributes in process `syz.4.394'. [ 117.705417][ T7436] netlink: 68 bytes leftover after parsing attributes in process `syz.3.403'. [ 118.571644][ T7466] netlink: 'syz.4.411': attribute type 14 has an invalid length. [ 118.591658][ T7461] pim6reg1: entered promiscuous mode [ 118.601960][ T7461] pim6reg1: entered allmulticast mode [ 119.045070][ T7495] netlink: 'syz.1.419': attribute type 1 has an invalid length. [ 119.175136][ T7495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.214961][ T7504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.418'. [ 119.260314][ T7498] bond1: (slave gretap1): making interface the new active one [ 119.270762][ T7498] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 119.382391][ T7502] gretap2: entered promiscuous mode [ 119.401862][ T7498] syz.1.419 (7498) used greatest stack depth: 20008 bytes left [ 119.678172][ T7522] netlink: 44 bytes leftover after parsing attributes in process `syz.0.426'. [ 120.059812][ T7549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.362195][ T7549] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 120.457683][ T7554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 120.718104][ T7542] bridge2: entered allmulticast mode [ 121.299278][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 121.370828][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.444'. [ 121.383442][ T7585] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 121.614690][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'. [ 121.988587][ T7614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.131672][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.452'. [ 122.764799][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.460'. [ 122.811100][ T7650] ------------[ cut here ]------------ [ 122.816619][ T7650] memcpy: detected field-spanning write (size 4096) of single field "pfx->in6_u.u6_addr8" at ./include/net/ipv6.h:614 (size 16) [ 122.855995][ T7652] ================================================================== [ 122.864086][ T7652] BUG: KASAN: stack-out-of-bounds in ipv6_addr_prefix+0x6e/0x1d0 [ 122.871820][ T7652] Read of size 4096 at addr ffffc9001c657a94 by task syz.1.462/7652 [ 122.879880][ T7652] [ 122.882211][ T7652] CPU: 0 UID: 0 PID: 7652 Comm: syz.1.462 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 122.882230][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 122.882240][ T7652] Call Trace: [ 122.882246][ T7652] [ 122.882254][ T7652] dump_stack_lvl+0x189/0x250 [ 122.882284][ T7652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.882307][ T7652] ? __pfx__printk+0x10/0x10 [ 122.882323][ T7652] ? __pfx__printk+0x10/0x10 [ 122.882336][ T7652] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 122.882359][ T7652] ? __virt_addr_valid+0xc3/0x540 [ 122.882381][ T7652] print_report+0xb4/0x290 [ 122.882399][ T7652] ? ipv6_addr_prefix+0x6e/0x1d0 [ 122.882420][ T7652] kasan_report+0x118/0x150 [ 122.882440][ T7652] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 122.882461][ T7652] ? ipv6_addr_prefix+0x6e/0x1d0 [ 122.882486][ T7652] kasan_check_range+0x29a/0x2b0 [ 122.882505][ T7652] ? ipv6_addr_prefix+0x6e/0x1d0 [ 122.882527][ T7652] __asan_memcpy+0x29/0x70 [ 122.882543][ T7652] ipv6_addr_prefix+0x6e/0x1d0 [ 122.882566][ T7652] ip6_route_info_create+0x629/0xa70 [ 122.882586][ T7652] ip6_route_add+0x29/0x2f0 [ 122.882601][ T7652] ? ipv6_route_ioctl+0x313/0x480 [ 122.882619][ T7652] ipv6_route_ioctl+0x35c/0x480 [ 122.882639][ T7652] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 122.882668][ T7652] inet6_ioctl+0x219/0x280 [ 122.882695][ T7652] ? __pfx_inet6_ioctl+0x10/0x10 [ 122.882721][ T7652] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 122.882748][ T7652] sock_do_ioctl+0xd9/0x300 [ 122.882772][ T7652] ? __pfx_sock_do_ioctl+0x10/0x10 [ 122.882793][ T7652] ? __lock_acquire+0xaac/0xd20 [ 122.882820][ T7652] sock_ioctl+0x576/0x790 [ 122.882841][ T7652] ? __pfx_sock_ioctl+0x10/0x10 [ 122.882863][ T7652] ? __fget_files+0x3a0/0x420 [ 122.882883][ T7652] ? __fget_files+0x2a/0x420 [ 122.882903][ T7652] ? bpf_lsm_file_ioctl+0x9/0x20 [ 122.882923][ T7652] ? __pfx_sock_ioctl+0x10/0x10 [ 122.882944][ T7652] __se_sys_ioctl+0xf9/0x170 [ 122.882960][ T7652] do_syscall_64+0xf6/0x210 [ 122.882983][ T7652] ? clear_bhb_loop+0x45/0xa0 [ 122.883000][ T7652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.883015][ T7652] RIP: 0033:0x7f6216b8e969 [ 122.883032][ T7652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.883046][ T7652] RSP: 002b:00007f6217a6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.883066][ T7652] RAX: ffffffffffffffda RBX: 00007f6216db6080 RCX: 00007f6216b8e969 [ 122.883078][ T7652] RDX: 0000200000000100 RSI: 000000000000890b RDI: 0000000000000005 [ 122.883088][ T7652] RBP: 00007f6216c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 122.883098][ T7652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.883107][ T7652] R13: 0000000000000001 R14: 00007f6216db6080 R15: 00007ffdba0a2e48 [ 122.883125][ T7652] [ 122.883130][ T7652] [ 123.164568][ T7652] The buggy address belongs to stack of task syz.1.462/7652 [ 123.171848][ T7652] and is located at offset 84 in frame: [ 123.177473][ T7652] ipv6_route_ioctl+0x0/0x480 [ 123.182153][ T7652] [ 123.184468][ T7652] This frame has 1 object: [ 123.188876][ T7652] [32, 208) 'cfg' [ 123.188888][ T7652] [ 123.194912][ T7652] The buggy address belongs to the virtual mapping at [ 123.194912][ T7652] [ffffc9001c650000, ffffc9001c659000) created by: [ 123.194912][ T7652] copy_process+0x544/0x3b80 [ 123.212621][ T7652] [ 123.214942][ T7652] The buggy address belongs to the physical page: [ 123.221360][ T7652] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807bcf9dc0 pfn:0x7bcf9 [ 123.231421][ T7652] memcg:ffff88814cfd8302 [ 123.235653][ T7652] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 123.242777][ T7652] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 123.251372][ T7652] raw: ffff88807bcf9dc0 0000000000000000 00000001ffffffff ffff88814cfd8302 [ 123.259952][ T7652] page dumped because: kasan: bad access detected [ 123.266383][ T7652] page_owner tracks the page as allocated [ 123.272102][ T7652] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 7649, tgid 7649 (syz.1.462), ts 122855610157, free_ts 122625125840 [ 123.291302][ T7652] post_alloc_hook+0x1d8/0x230 [ 123.296171][ T7652] get_page_from_freelist+0x21e0/0x22c0 [ 123.301735][ T7652] __alloc_frozen_pages_noprof+0x181/0x370 [ 123.307636][ T7652] alloc_pages_mpol+0x232/0x4a0 [ 123.312490][ T7652] alloc_pages_noprof+0xa9/0x190 [ 123.317433][ T7652] __vmalloc_node_range_noprof+0x8fe/0x12c0 [ 123.323325][ T7652] __vmalloc_node_noprof+0x7d/0x90 [ 123.328441][ T7652] dup_task_struct+0x3e7/0x860 [ 123.333202][ T7652] copy_process+0x544/0x3b80 [ 123.337800][ T7652] kernel_clone+0x21e/0x870 [ 123.342292][ T7652] __se_sys_clone3+0x256/0x2d0 [ 123.347065][ T7652] do_syscall_64+0xf6/0x210 [ 123.351565][ T7652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.357472][ T7652] page last free pid 5878 tgid 5878 stack trace: [ 123.363799][ T7652] __free_frozen_pages+0xb14/0xce0 [ 123.368914][ T7652] kasan_depopulate_vmalloc_pte+0x75/0x90 [ 123.374638][ T7652] __apply_to_page_range+0x7cb/0xd20 [ 123.379916][ T7652] kasan_release_vmalloc+0xa2/0xd0 [ 123.385015][ T7652] purge_vmap_node+0x245/0x880 [ 123.389770][ T7652] __purge_vmap_area_lazy+0x71a/0xae0 [ 123.395142][ T7652] drain_vmap_area_work+0x27/0x40 [ 123.400168][ T7652] process_scheduled_works+0xadb/0x17a0 [ 123.405709][ T7652] worker_thread+0x8a0/0xda0 [ 123.410288][ T7652] kthread+0x70e/0x8a0 [ 123.414354][ T7652] ret_from_fork+0x4b/0x80 [ 123.418763][ T7652] ret_from_fork_asm+0x1a/0x30 [ 123.423521][ T7652] [ 123.425832][ T7652] Memory state around the buggy address: [ 123.431448][ T7652] ffffc9001c657a00: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 [ 123.439499][ T7652] ffffc9001c657a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 123.447551][ T7652] >ffffc9001c657b00: 00 00 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 00 00 00 00 [ 123.455598][ T7652] ^ [ 123.460169][ T7652] ffffc9001c657b80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 [ 123.468242][ T7652] ffffc9001c657c00: 00 00 00 00 00 00 f3 f3 f3 f3 f3 f3 00 00 00 00 [ 123.476293][ T7652] ================================================================== [ 123.499526][ T7650] WARNING: CPU: 1 PID: 7650 at ./include/net/ipv6.h:614 ipv6_addr_prefix+0x124/0x1d0 [ 123.509142][ T7650] Modules linked in: [ 123.513065][ T7650] CPU: 1 UID: 0 PID: 7650 Comm: syz.1.462 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 123.526580][ T7650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 123.537132][ T7650] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 123.542802][ T7650] Code: cc e8 80 c4 b2 f7 c6 05 c7 34 5c 05 01 90 b9 10 00 00 00 48 c7 c7 20 51 7d 8c 4c 89 fe 48 c7 c2 40 58 7d 8c e8 5d 23 77 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 4e c4 b2 f7 44 89 e6 48 c7 c7 00 07 [ 123.562929][ T7650] RSP: 0018:ffffc9001c1a7920 EFLAGS: 00010246 [ 123.569510][ T7650] RAX: 9f372097f4124200 RBX: ffff888147338c68 RCX: ffff888025719e00 [ 123.570251][ T7652] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 123.570268][ T7652] CPU: 0 UID: 0 PID: 7652 Comm: syz.1.462 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 123.570290][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 123.570308][ T7652] Call Trace: [ 123.570316][ T7652] [ 123.570324][ T7652] dump_stack_lvl+0x99/0x250 [ 123.570356][ T7652] ? __asan_memcpy+0x40/0x70 [ 123.570375][ T7652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.570400][ T7652] ? __pfx__printk+0x10/0x10 [ 123.570424][ T7652] panic+0x2db/0x790 [ 123.570452][ T7652] ? __pfx_panic+0x10/0x10 [ 123.570479][ T7652] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 123.570502][ T7652] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 123.570523][ T7652] ? print_memory_metadata+0x314/0x400 [ 123.570547][ T7652] ? ipv6_addr_prefix+0x6e/0x1d0 [ 123.570573][ T7652] check_panic_on_warn+0x89/0xb0 [ 123.570596][ T7652] ? ipv6_addr_prefix+0x6e/0x1d0 [ 123.570621][ T7652] end_report+0x78/0x160 [ 123.570643][ T7652] kasan_report+0x129/0x150 [ 123.570664][ T7652] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 123.570687][ T7652] ? ipv6_addr_prefix+0x6e/0x1d0 [ 123.570716][ T7652] kasan_check_range+0x29a/0x2b0 [ 123.570738][ T7652] ? ipv6_addr_prefix+0x6e/0x1d0 [ 123.570764][ T7652] __asan_memcpy+0x29/0x70 [ 123.570781][ T7652] ipv6_addr_prefix+0x6e/0x1d0 [ 123.570808][ T7652] ip6_route_info_create+0x629/0xa70 [ 123.570831][ T7652] ip6_route_add+0x29/0x2f0 [ 123.570849][ T7652] ? ipv6_route_ioctl+0x313/0x480 [ 123.570870][ T7652] ipv6_route_ioctl+0x35c/0x480 [ 123.570893][ T7652] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 123.570928][ T7652] inet6_ioctl+0x219/0x280 [ 123.570953][ T7652] ? __pfx_inet6_ioctl+0x10/0x10 [ 123.570984][ T7652] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 123.571016][ T7652] sock_do_ioctl+0xd9/0x300 [ 123.571044][ T7652] ? __pfx_sock_do_ioctl+0x10/0x10 [ 123.571070][ T7652] ? __lock_acquire+0xaac/0xd20 [ 123.571100][ T7652] sock_ioctl+0x576/0x790 [ 123.571126][ T7652] ? __pfx_sock_ioctl+0x10/0x10 [ 123.571152][ T7652] ? __fget_files+0x3a0/0x420 [ 123.571175][ T7652] ? __fget_files+0x2a/0x420 [ 123.571199][ T7652] ? bpf_lsm_file_ioctl+0x9/0x20 [ 123.571222][ T7652] ? __pfx_sock_ioctl+0x10/0x10 [ 123.571245][ T7652] __se_sys_ioctl+0xf9/0x170 [ 123.571264][ T7652] do_syscall_64+0xf6/0x210 [ 123.571291][ T7652] ? clear_bhb_loop+0x45/0xa0 [ 123.571318][ T7652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.571335][ T7652] RIP: 0033:0x7f6216b8e969 [ 123.571352][ T7652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.571367][ T7652] RSP: 002b:00007f6217a6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.571387][ T7652] RAX: ffffffffffffffda RBX: 00007f6216db6080 RCX: 00007f6216b8e969 [ 123.571401][ T7652] RDX: 0000200000000100 RSI: 000000000000890b RDI: 0000000000000005 [ 123.571413][ T7652] RBP: 00007f6216c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 123.571424][ T7652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.571435][ T7652] R13: 0000000000000001 R14: 00007f6216db6080 R15: 00007ffdba0a2e48 [ 123.571456][ T7652] [ 123.577777][ T7652] Kernel Offset: disabled