last executing test programs: 3.807960676s ago: executing program 2 (id=1096): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x150, 0x10, 0x413, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@remote, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@broadcast, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0x0, 0x8000}, {}, {}, 0x4000, 0x0, 0x2, 0x1, 0x0, 0x40}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}}, 0x0) 3.072088108s ago: executing program 2 (id=1103): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071124c000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x1a) 2.903957604s ago: executing program 2 (id=1105): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2d, 'blkio'}, {0x0, 'cpuset'}, {0x2d, 'freezer'}, {0x2b, 'io'}, {0x2d, 'blkio'}, {0x2b, 'net'}, {0x2d, 'devices'}, {0x2b, 'hugetlb'}]}, 0x3a) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, r1, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x25}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x13, 0x2, "59353bf5f46d25382deb9131e22344"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xaee0}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r1, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x7e}, @void, @val={0xc, 0x99, {0x8, 0x73}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x1, 0x536) syz_genetlink_get_family_id$team(&(0x7f0000000340), r3) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r3) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x94, r4, 0x200, 0xfc1, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x22f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x20000050) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x0, 0x44, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x4f, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6gre0\x00', r5, 0x29, 0x2, 0x9d, 0x1000, 0x57, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7, 0x1, 0x95d, 0x4}}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$vsock_stream(r3, &(0x7f0000000900)={0x28, 0x0, 0x2710, @hyper}, 0x10) ioctl$sock_proto_private(r2, 0x89ee, &(0x7f0000000940)="ba9a88afd4aebfb13619df6451c628b4402949f0eda3c54c59b3f9688cbb6e96185b7f3c645563dfa85083141edee8f4582104ea0eefb9050b8afedbcdaf471ac16896055fbf9618ff61ea37cd60c64bff9a5595ccc7fd777a85a3a00cd96cc918d2f5a41ed118ee084de2b874cba9d6509a207ffd78c6cb0ecac4ecd1b8e8a28d98a3e409cbaee0c3fd85d1b45ded4ec20db513") sendto$unix(r3, &(0x7f0000000a00)="18076cb36b2bedb5e861784ee3a1fa7d7f0d640d5eb3707af8dd74194755f77f72688ad37380fd26d212f6cad5f07585ac0240dd1db89387566188715fd1f5b5cb2d498f55726a33ed1f52b4e0fa59ad49f7de8bf9c5766578cfe7ccb7c79d6281d1faaa908f4273461e8b5c8ce4bb29a62a6cde6dc9965f5fdda627a8511a370ee1db2eada9285ae26946fbf19a4a0e1a4452df45b03bd941d5dadac183", 0x9e, 0x10, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x58, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x4c}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x38}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x30}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x40040c0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001200)={&(0x7f0000000c40), 0xc, &(0x7f00000011c0)={&(0x7f0000000cc0)={0x4fc, r8, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x164, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1b]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x6, 0x7ff, 0x4, 0x9, 0x7, 0x49]}}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x48, 0x85216149af227c11, 0x30, 0x1, 0x3, 0x12, 0x12, 0x6c, 0x18, 0x18, 0x1, 0x6c, 0x3, 0x30, 0x36, 0xc, 0xc, 0x30, 0x30, 0x6c, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x2, 0x18, 0x6c, 0x36, 0x30, 0xa6df46eed220cb42, 0x60, 0x6, 0x24, 0x3, 0x6, 0x0, 0x36, 0x30, 0xb, 0x18, 0x2, 0x36, 0x48, 0xc, 0x36, 0x1b, 0x6, 0x6c, 0x60, 0x9, 0x2, 0x18, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf4b, 0x37bb, 0x9, 0x1, 0x856, 0xe, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xdb, 0x9, 0x8001, 0x4, 0x4b, 0xfff8, 0x7]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x7, 0x4}, {0x1, 0x8}, {0x1, 0x9}, {0x6, 0x5}, {0x0, 0x4}, {0x4, 0x8}, {0x2, 0x9}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1f, 0x12, 0x6, 0x5, 0x4, 0x1b, 0xf, 0x3, 0x5, 0x0, 0x16, 0x30, 0x6]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1}, {0x6, 0x9}, {0x2, 0x3}, {0x0, 0x3}, {}, {0x5, 0x9}, {0x7, 0xa}, {0x5}]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x7, 0x7}, {0x1, 0x4}, {0x5, 0x2}, {0x6}, {0x0, 0x4}, {0x3, 0x9}, {0x3, 0x3}, {0x3, 0x7}, {0x3, 0x8}]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xa, 0x7ff, 0x6, 0xcfab, 0xffff, 0xf32a, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x4, 0x80, 0x8, 0x5, 0x9, 0x7, 0x40]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6c, 0x4, 0x30, 0x16, 0x36, 0x16, 0x12]}]}]}, @NL80211_ATTR_TX_RATES={0x278, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x12, 0x16, 0x18, 0x1b, 0x4, 0x6, 0x3, 0xbd2c34081d55e596, 0x9, 0x4, 0x18, 0x3, 0x60, 0x16, 0x9, 0xc, 0x9, 0x9, 0x9, 0x30, 0x4, 0x12, 0x18, 0x1, 0x48, 0x3, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0x1, 0xda, 0x400, 0x3ff, 0x9, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7fff, 0x3d, 0x1, 0x4, 0xa, 0x8000, 0x8]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x5d65, 0xf, 0x6a, 0x3ff, 0xfff8, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x7, 0x5, 0xb01, 0x2, 0x73e1, 0x5]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe1, 0x1, 0x0, 0x40, 0x5bcc, 0x8, 0x6, 0x7745]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x7}, {0x4, 0x8}, {0x0, 0xa}, {0x6, 0x3}, {0x5, 0x7}, {0x5, 0x4}, {0x3, 0x8}, {0x6, 0xa}, {0x1, 0x6}, {0x2}, {0x1, 0x9}, {0x2, 0x8}, {0x3, 0x5}, {0x7, 0x9}, {0x3, 0x2}, {0x0, 0x5}, {0x0, 0x3}, {0x6, 0x8}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x4, 0x48, 0x3, 0x30, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x746f, 0x6, 0x8000, 0x1, 0x7, 0x7, 0x7]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x50b, 0x4, 0x8, 0x1ff, 0x9, 0xa7d, 0x3, 0x5]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x3, 0x4}, {0x0, 0x8}, {0x3, 0x9}, {0x6, 0x1}, {0x6}, {0x7, 0x4}, {0x2, 0xa}, {0x2, 0x4}, {0x4, 0x5}, {0x0, 0x7}, {0x5, 0x1}, {0x1, 0x5}, {0x3, 0x6}, {0x0, 0x9}, {0x5, 0x4}, {0x5, 0x3}, {0x5, 0x8}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0x9}, {0x0, 0x5}, {0x6}, {0x7, 0xa}, {0x3, 0x3}, {0x2, 0x9}, {0x1, 0x9}, {0x4, 0x7}, {0x4, 0x5}, {0x7, 0x6}, {0x4, 0x2}, {0x4, 0x1}, {0x6, 0x7}, {0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x5}, {0x3, 0xa}, {0x5, 0x1}, {0x3}, {0x7, 0x4}, {0x0, 0x2}, {0x3, 0x6}, {0x7, 0xa}, {0x6, 0x3}, {0x5, 0x6}, {0x3, 0x8}, {0x3, 0x4}, {0x0, 0x2}, {0x0, 0x4}]}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1, 0xffff, 0xff, 0x1, 0x7, 0xce5b, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x4, 0xd, 0x2, 0x1, 0x8, 0x1, 0x800]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x9, 0x5, 0x9, 0x36, 0x1, 0x9, 0x30, 0xc, 0x0, 0x60, 0x12, 0x9, 0x12, 0xc, 0x9, 0x16, 0xc, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x2b, 0x2, [{}, {0x1, 0x8}, {0x6, 0xa}, {0x4, 0x5}, {0x3, 0x7}, {0x2, 0x9}, {0x6, 0xa}, {0x5, 0x7}, {0x3, 0x2}, {0x4, 0x8}, {0x2}, {0x6, 0x8}, {0x7, 0x6}, {0x2, 0xa}, {0x6, 0x1}, {0x7, 0x5}, {0x0, 0x3}, {0x6, 0x5}, {0x1, 0x8}, {0x4, 0x5}, {0x2, 0x8}, {0x3, 0x9}, {0x3, 0x7}, {0x5, 0x4}, {0x3, 0x2}, {0x6, 0x4}, {0x1, 0x5}, {0x6, 0x9}, {0x1, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x3, 0x2}, {0x7, 0x3}, {0x4, 0x6}, {0x6, 0x5}, {0x4, 0x6}, {0x6, 0x6}, {0x6, 0x3}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfc00, 0x86, 0x9, 0x5, 0x0, 0x6, 0xc4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x9, 0x5, 0x2, 0x401, 0x0, 0x9]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0x3132155daf3e1feb, 0xb, 0x4, 0x16, 0x18, 0x6, 0x48, 0x12, 0x3, 0x18, 0x24, 0x4]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0x3ff, 0x1, 0x4, 0x81, 0x9b5d, 0xf1]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6c, 0x36, 0x29, 0x5, 0x1b, 0xb, 0x48]}]}]}, @NL80211_ATTR_TX_RATES={0x104, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x36, 0x24, 0x48, 0x1b, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x7, 0x2}, {0x2, 0x6}, {0x7, 0x7}, {0x5, 0x9}, {0x6, 0x6}, {0x6, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0xa}, {0x3, 0x2}, {0x5, 0x6}, {0x0, 0x3}, {0x0, 0x2}, {}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x3}, {0x6, 0x5}, {0x6, 0x1}, {0x3, 0x6}, {0x3, 0x4}, {0x7, 0x7}, {0x7, 0x1}, {0x3, 0x5}, {0x3, 0x4}, {0x7, 0x7}, {0x5, 0x2}, {0x6, 0x3}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0xa}, {0x1, 0x3}, {0x7, 0x6}, {0x6, 0x2}, {}, {0x7, 0x8}, {}, {0x6}, {0x7, 0x1}, {0x6, 0x4}, {0x4, 0xa}, {0x6, 0x1}, {0x1, 0x7}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0xa}, {0x3, 0x4}, {0x4, 0x1}, {0x7, 0x6}, {0x6}, {0x6, 0x1}, {0x0, 0x5}, {0x5, 0xa}, {0x4, 0x2}, {0x1, 0x7}, {0x6, 0x1}, {0x1, 0x5}, {0x4, 0x2}, {0x1, 0x4}, {0x1, 0x5}, {0x1, 0xa}, {0x2, 0x4}, {0x5, 0x8}, {0x4, 0x6}, {0x3}, {0x1, 0x2}, {0x0, 0xa}, {0x1, 0x5}, {0x3, 0x7}, {0x1, 0x5}, {0x6, 0x2}, {0x6, 0x8}, {0x7, 0x6}, {0x5, 0x4}, {0x5, 0x5}, {0x5, 0x4}, {0x3, 0x1}, {0x1, 0x9}, {0x5, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x7, 0x2}, {0x0, 0x7}, {}, {0x5, 0x8}, {0x3}, {0x1, 0x3}, {0x3, 0x2}, {0x0, 0x2}, {0x2}, {0x7, 0x6}, {0x2, 0x2}, {}, {0x4, 0x3}, {0x6, 0x6}, {0x3, 0x4}, {}, {0x0, 0x8}, {0x4, 0xa}, {0x2, 0x9}, {0x4, 0x8}, {0x0, 0x9}, {0x1, 0x5}, {0x5, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x3, 0x8}, {0x3}, {0x2, 0x7}, {0x3, 0x9}, {0x3, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x4fc}, 0x1, 0x0, 0x0, 0x1}, 0x11) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000001240), &(0x7f0000001280)=0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r3) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000013c0)={&(0x7f00000012c0), 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x28, r9, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6c}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040010}, 0x44) socket$qrtr(0x2a, 0x2, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000001400)) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000001480), r0) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x24, r10, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x3ff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000814}, 0x800) socket(0x6, 0x1, 0x1) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, r9, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6d}, @val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f0000001680)=""/41, &(0x7f00000016c0)=0x29) 2.840998405s ago: executing program 0 (id=1106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r1, &(0x7f0000000100)=@abs={0x27}, 0x6e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r2, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r2, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r2) 2.728995339s ago: executing program 2 (id=1108): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)={0x7c, 0x10, 0x509, 0x0, 0x0, "", [@typed={0x69, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce2d712d285fda0a9423debbb86f9dba4a2dba4dbe076c292c2800c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff"}]}, 0x7c}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r2, @ANYBLOB="8b00330080800000ffffffffffff0802110000005050505050500000"], 0xa8}}, 0x20000000) 2.629614704s ago: executing program 2 (id=1110): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) unshare(0x2040400) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000000000006a0a00fe80000000850000000a000000b700000059a700009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ppoll(&(0x7f0000000480)=[{r2}, {r1}, {r4}], 0x3, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x0, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_USERDATA={0x0, 0xc, "592055a32b528d509fdb5804ba0c68a51770931b6152a4895658e31dd959419013b644beae8ca1abc3784faed49351bd985b829fadc007773c3d53558d44558b3bea58f51385"}, @NFTA_CHAIN_NAME={0x0, 0x3, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x20000040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r7, &(0x7f0000000a40)=[{&(0x7f00000007c0)='T', 0x1}], 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x160, 0x18c, 0x203, 0x0, 0x19030000, 0x278, 0x2e0, 0x2e0, 0x278, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x118, 0x160, 0x0, {}, [@common=@hbh={{0x48}, {0x3, 0x0, 0x0, [0x20, 0x7, 0xfffb, 0x9, 0x0, 0x0, 0x9, 0xff, 0x1, 0xf6e6, 0x7, 0x4, 0x8, 0x1, 0xcd1a], 0x10}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x85, &(0x7f00000004c0)={r11, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000280)={r11, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x9c) sendmsg$NL80211_CMD_REQ_SET_REG(r9, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x24, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}}, 0x0) unshare(0x62040200) socket$kcm(0x21, 0x2, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x325) socket$inet_tcp(0x2, 0x1, 0x0) 2.553351574s ago: executing program 0 (id=1111): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp(0x2, 0x2, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) r1 = socket(0x1d, 0x2, 0x6) unshare(0x2040400) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0xa, 0x8003}, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r3, 0x0) connect$vsock_stream(r2, &(0x7f0000000440), 0x10) sendmmsg(r2, &(0x7f0000000100), 0x0, 0x0) accept4$unix(r3, 0x0, 0x0, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r7, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001fc0)=@deltfilter={0x24, 0x2d, 0x800, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0x0, 0x8}, {0x5, 0xffff}}}, 0x24}}, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000200)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0) bind$can_j1939(r1, 0x0, 0x0) 2.164426464s ago: executing program 3 (id=1116): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800114000000000080008400000009c0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a6970"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f00000005c0)="bb31389c501cac6f", 0x8}], 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x19}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e0001000200"], 0x8) r5 = socket$kcm(0xa, 0x2, 0x88) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x48}}, 0x0) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), r9) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000d00)={&(0x7f0000000bc0), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x44, r11, 0x1, 0x70bd28, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x810) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x26f}]}]}]}}]}, 0xac}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'tunl0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x7800, 0x40, 0x101, 0x2, {{0x1c, 0x4, 0x3, 0xc, 0x70, 0x68, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast2, {[@timestamp_prespec={0x44, 0x24, 0xef, 0x3, 0x8, [{@multicast1, 0x9}, {@broadcast, 0x1}, {@private=0xa010100, 0x5}, {@local, 0x2}]}, @generic={0x44, 0x2}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xa8, 0x3, 0x4, [{@local, 0x6}, {@loopback, 0x9a}]}, @timestamp={0x44, 0x1c, 0xf1, 0x0, 0x7, [0x100, 0x2, 0x6, 0xffffffff, 0x9, 0x0]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000a80)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x4) sendmsg$inet(r5, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="db32e679e903b1af2696ae51f5d90af51c119b5c1d4ab4829b528bee4c2f8bdfebb4ee1f8e818ebbfc13bb75d077b94c339d4a37a59c20e8ae0867dcc73527c4a2e2f913df9d5a9dc20550ecbbe832c87baba33a7bf28a8cd8bb0ef145fc3bf443b4d036e34dbb03b196d9aef75f0ca6d94b79678ca4407ad03bad1fe84ccf70b249b4a5d304c2ff51ae81b9b855aa5139506b07d2086d007fbb0f91a58220b0574af561458952013ebc9f4469119006600985f78bbd122412d0dcda9ed992c6ded07d193687c269fa347312b80df7c8749da63edc7fd9d10db528a9c84535ce057ffc12e8", 0xe5}, {&(0x7f0000001640)="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", 0x4dc}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x90, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x99, 0x1d}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8000, 0x0, 0x2, 0x0, {0x5, 0x6, 0x0, 0x8, 0x0, 0x1, 0x0, 0x3}, 0x6, 0x2, 0x6}}, @NL80211_ATTR_HIDDEN_SSID={0x19, 0x7e, @random="03b2bf1eeaabff05cc6923ddbac146d42672417e20"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8000, 0x2, 0x6, 0x0, {0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x6, 0x2, 0x2}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000811}, 0x40008c5) syz_emit_ethernet(0x306, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "24c88b", 0x2d0, 0x3a, 0x1, @mcast1, @rand_addr=' \x01\x00', {[@fragment={0xc, 0x0, 0x4, 0x1, 0x0, 0x7, 0x65}, @routing={0x84, 0x2, 0x0, 0x7f, 0x0, [@ipv4={'\x00', '\xff\xff', @local}]}, @dstopts={0x0, 0x2e, '\x00', [@ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0xc4}, @calipso={0x7, 0x38, {0x1, 0xc, 0x9, 0x2, [0xa27, 0x1000, 0x1, 0xb01b, 0x4, 0x10]}}, @padn, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xc667}, @generic={0x41, 0xff, "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"}]}, @dstopts={0x73, 0x5, '\x00', [@pad1, @calipso={0x7, 0x10, {0x3, 0x2, 0xb3, 0x0, [0xffffffffffff0001]}}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}], @echo_request={0x80, 0x0, 0x0, 0x1, 0x4, "6f4f4d20274b0a7a9a278cc978d2d8582ecc1b533137893e1c5892c6436373da560868da46362134566e2d27e3476f4cd87c5a45aa9afbd888cd83d077167a22b49c837e8aaa301803578968999c85d3eee3cf7e7e813c9eb8377f378ae89a31f539ec15a30f6665a02515b5ccc5a10f6c6bc734effbf7c3d209d470e0aacf9f41e34e2777da1d5b7b13dd8e05e1dfbc2e7ed8f6d44a177e2b38d9ab9cf504d130b8b285e469f6374bde00581875258e4cfc9143dc62ecef1a69efb3e80c0490c81302d377d1c5c876c85ad173fc838b414a3a4c9471cba4e160f8905ca90690d0dca13b0a5db15ad63562a24c6e2cca"}}}}}}, 0x0) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6a0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={&(0x7f00000004c0)="38cc4329a2d1ca17c5678bf903d0bf6d34aa6a7e9a1ba787f146e457a67f7f7dfc74c9037ddd377a762717c058ca0e79828ed2a83b245b7abe1068ca145ad5e4372f0477686b63a0ae557753bbd1f1b6f4b608aed3b1e5a33635996c7b0a55d4e1e767632220ac157d6bf5db8a81f252a9456f0920b9ea15341ca228aeaeba80da1b4f53ed906ee7355c6d60efeb145678159381609290ea122a8cdb47c442f2f80283a37392777d3cb71d5974d0496cfd251b1735f0027c97c1f957bbb60540317612110dd53a873fd7aee40143659305e83f", &(0x7f00000005c0)=""/22, &(0x7f0000000600)="a4cac32528b37bdf8cff8413532b04416f889c3cd025b81de1c8da28b586f400a7812836b8dc2b92880cbcaa6feaeb673cf6c850fde8768f674a1b20771ce296f19f65a49fc6c33e65621d047e859ebe3c25e4afbef5a50b48705b47593f24699190067340d613094aa2d57bb3f6204234d9c39b8857586f79793ec3fddd2f458fb670e4187bf746c5", &(0x7f00000006c0)="de0f97fd0d6afb0ec779829e00dddd879e84a1051c2449548eb4745ea571e2cfe5ad95021a4316fa8c7c0e3cc3e0fb0f2ec31ad6f8accdd511499a279f170adab403a27992d9fc28e3779930fc47142dd52dc1d82d0d803130b68e71f6e4af1fc5aa2a6508c4ac16d9a1b14037427c34ea90fccd14fd212580634d5a6bf59f00faeb7022d2254ba2a4465ff519254bc56f5b8bb46dbd769e39817257dad10e42a874bf20d492c117fbc79ea22016574c0196be41c2d5a0915e30e1d16782e2fcd2620874dadf3e30844d5d89d6631239a25a540244c42a43c6cc69021e3b37e64497149bbc576838d0", 0xfffffffd, r14}, 0x38) 1.816668459s ago: executing program 3 (id=1120): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)={0x7c, 0x10, 0x509, 0x0, 0x0, "", [@typed={0x69, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce2d712d285fda0a9423debbb86f9dba4a2dba4dbe076c292c2800c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff"}]}, 0x7c}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r2, @ANYBLOB="8b00330080800000ffffffffffff0802110000005050505050500000"], 0xa8}}, 0x20000000) 1.708846562s ago: executing program 4 (id=1122): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeec, 0x0, &(0x7f00000002c0)="4e39aaaf812e89b903658b2ecc211925314a63a8f2c7b436fecdad79a19d7ce5e2fd6542359926ad4506a9ccba0bc5687ad825da62777a521636e4cd4db8a5d777e3b6d2725348ea765287ebb75384421e297c449ff1a819653f00bac4adb71d1c36886f55adefd33d483d66702be9be47ad0300984e57afa0f7ee9fd5b52de7ea05f275b7cb62664a2e1184d639a17c290e01909fd5610ab26e1a7bb785061fd33310c688da44a3d1a0dd014f8fa92fbd562df001ed50c0228b6ee36deb", 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="3a1d"], 0xf0) listen(r3, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4e, &(0x7f0000000700)={@local, @random="03fd00b38eb8", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 1.643727429s ago: executing program 3 (id=1123): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)={0xbc, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d888f1d1c4e5ad85ce4966d", @typed={0x9b, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce2d712d285fda0a9423debbb86f9dba4a2dba4dbe076c292c2800c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100024db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336"}]}, 0xbc}], 0x1}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x70, r2, 0x1, 0x71bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x10}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4048804}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="8b00330080800000ffffffffffff08021100000050505050505000001a"], 0xa8}}, 0x20000000) 1.57689372s ago: executing program 0 (id=1125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000070000008000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000dbe9569d3c05c45c7079c800000000f8006b74567b7561ccb9995ad9b8d5fa6bb054e597e5c7b607ea7cb41b9c49c9d50a2abfcc5afb9cca7dadcde52b9bbd41b781ce45581969"], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r3) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xfffffffffffffeba}}}]}]}, 0x98}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000002100000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3d, 0x0, 0x1, 0x20}, {0x4d}, {0x6}]}) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$sock_SIOCGSKNS(r12, 0x894c, 0x0) 1.432132694s ago: executing program 3 (id=1126): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_ZONE={0x6, 0x8}, @TCA_CT_ZONE={0x6, 0x4, 0xd4c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000440)={0x6, {{0x2, 0x3, @multicast2}}, {{0x2, 0xfffc, @broadcast}}}, 0x108) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="baffffffff000000a5", @ANYRES16=0x0, @ANYBLOB="030b00000000000000000e000000"], 0x14}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8002, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000001740)=0x10006, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000004e00000000000000180000000000000000000000000000d50a000000000000950000000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd}, {}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x4f) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0x0, 0xc}, {0x1c, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008805) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x38, &(0x7f00000000c0), 0x4) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) pipe(&(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 1.421110847s ago: executing program 4 (id=1127): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x4e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="5e4b28089182cf", 0x7) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8, 0x700, 0x4, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @broadcast, @rand_addr=0x64010100}}}}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x605, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c0000000b0a01010000000000000000010000000900010073797a30000000000c0010400000000000000001"], 0x54}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)="c8d1eb88e5d3c52fdc327c1022eb7ed096d16e2c707aafc0192eb360a8299ff52eadbf04b8cfc7893e168ae0db57fa035245c70c64bd55bf07f03be2fda441cd6aed15d7b8ecbd923ff33708be9d13731f9db56bd4b7e52dc8da2dadcde3059573100f87be48a136a3bab7f3738bd864291b8851e3047ab6a0c639460a307090e61ed7a4702f574f20d02c79106a015be620385431d242f1ccb4c96cd3224d49eacf31390debfd8e5ab338a7f76f225f2216265073c9eacb5833a6ab0d01d62b23fd", 0xc2}], 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x300, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 1.352467735s ago: executing program 0 (id=1129): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x44, 0x6, 0x398, 0x1d0, 0x300, 0x1d0, 0x268, 0x268, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x8000000, 0x0, {[{{@ip={@multicast1, @private, 0x0, 0x0, 'bond_slave_0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x9}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'pim6reg0\x00', 'dummy0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@remote, @local, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_hsr\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @private}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000300008500000014000000850000000500000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) recvfrom(r4, 0x0, 0x0, 0x41, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.254654721s ago: executing program 4 (id=1130): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000000)=0x3, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000000)=0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x8, 0xec, 0x2, 0x40, @local, @remote, 0x10, 0x10, 0x0, 0x7}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x8, 0xec, 0x2, 0x40, @local, @remote, 0x10, 0x10, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', r1, 0x29, 0x3, 0x2, 0x9, 0x4a, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x20, 0xe, 0x8}}) socket$inet6(0xa, 0x80000, 0x0) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f00000001c0)=0x81, 0x4) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000200)={'nat\x00', 0x0, [0xe, 0xcea6, 0x80000001, 0x1, 0x7ff]}, &(0x7f0000000280)=0x54) (async) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000200)={'nat\x00', 0x0, [0xe, 0xcea6, 0x80000001, 0x1, 0x7ff]}, &(0x7f0000000280)=0x54) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1cc, r5, 0xe00, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x0, {0x4, 0x7, 0x6, 0x7}}}, @NL80211_ATTR_IE={0x155, 0x2a, [@ibss={0x6, 0x2, 0x9699}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @peer_mgmt={0x75, 0x6, {0x0, 0x9de, @val=0x7, @void, @void}}, @dsss={0x3, 0x1, 0xa5}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0x80, 0x7}}, @random={0x80, 0x49, "2c717f6ff4d45815c175e691d67e066aa730116c3f4ca3c507e103d99fd4a69794ffc69e2eaa2e53d2f27d9944ee5b2c1fb2c6ed38dab86c7494ef23c4ff183dfe6529a50e4a73ddc6"}, @mic={0x8c, 0x10, {0x2de, "bb4ad66810f8", @short="2acf2550e5428006"}}, @random={0x0, 0xd3, "2f13edccb91e34a37ff1405437c099c661b45e15ab5bb93617e073561496fd4a5589be88c788b6ffee8a94379e7e934f4c53474811a18f07211c62a877716e2a80a3e7a43a8c0ad0f9442210d4ad5cd8065ecd5c2bc474d919a67afdf9f5febda821d89518f85a7b61b031da58153b1808a06aba63d333e35cf5f3aee2b947528988df5e04025625fae54e53a542a41f9ab407ba5c83f8078ab6a053b4d050f8f0e9ceab26fb51738c099afedbeac5589daee4e8e95d9be3310d4e51520f3e482c7b9c474b6b3f01e0ee0d8ca24c8350f05f6a"}, @supported_rates={0x1, 0x5, [{0x1}, {0xb}, {0x1b}, {0xc}, {0xb, 0x1}]}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x3ff}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xfffffbff}]}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x200000, {0x1, 0xe35, 0x9, 0x6}}}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40020}, 0x0) writev(r3, &(0x7f0000000940)=[{&(0x7f00000005c0)="2836632806cdf9a84ebe2eefb33424228dbb956cfce19c9768bbe44034", 0x1d}, {&(0x7f0000000600)="2d3535034c2ad020898d8ffe7e7121fbbfe7d01a078dadce30c15e8dbd9631e13658f16f4718b353cf49ce5fdc44030d416d285441c0a2d772ddd75123c63de4d77faa4192cfd4ad96670db692b45dd7d2cabfc9", 0x54}, {&(0x7f0000000680)="9fa189bde74903c96095be", 0xb}, {&(0x7f00000006c0)="897034ed8b2257501f7ae8d48129c99c15f357d4d2ba88a8ddb0b2b5b5cc68256c89e205fee42b9c9e1ea7aa59c6c505acffd16291c8a8666347f4f8bb34932b913a8cc3cdc0df910446b5a87bf966d533e3122c8b727d37c3afb8dda24f4ddf80d0fe", 0x63}, {&(0x7f0000000740)="145b0fa64ffbe5d1ba218dcda98d704fea09f4fb64a8b0a3e7a8d6de665afbce1285bec6c08f9761e4cced713434598e2734d645f8d0e9939ccaca3dc85bdc95fde6afbd94492bf3de2424bfe919", 0x4e}, {&(0x7f00000007c0)="afb04c7911fa00d9bb714810a264a5bb82b145149a7eab7bf82776b855266ec8452a97a850e58cc209487afe5b6be56108c41af1b527789b2a607bfba9e8da9ac02db239c197235d78c61af5fc3c6deff497551c70d306d2be00d0bc9f2d8c02465eac1d3558d11a290653fdb4bdaeb6389caf50d1cad51cccde2f98d9fa1cb2f79cf2e2fccc0ae7646501e4ca41f9c89726235f02a61ff76532d4965b492b62c036ea6cb35365486cf42dfd60409f610925794c4646629232b33c5c05bbb43e60a4aa2909c9dd1fefbd33a3285e6ea238fd23ca24100d0ed04e572b20b6cd01437f31c678c558a7fb24fac803329f1283", 0xf1}, {&(0x7f00000008c0)="81bc14b6561ec666df5857314d2114a51bafc3c22406297939146369b474d969cdac4f906f102bb4d793cc01d8cbce6e4bfea7b148f2cfc576831522fd694d2563e55289a4a5dfe2ba3fab1921a4", 0x4e}], 0x7) (async) writev(r3, &(0x7f0000000940)=[{&(0x7f00000005c0)="2836632806cdf9a84ebe2eefb33424228dbb956cfce19c9768bbe44034", 0x1d}, {&(0x7f0000000600)="2d3535034c2ad020898d8ffe7e7121fbbfe7d01a078dadce30c15e8dbd9631e13658f16f4718b353cf49ce5fdc44030d416d285441c0a2d772ddd75123c63de4d77faa4192cfd4ad96670db692b45dd7d2cabfc9", 0x54}, {&(0x7f0000000680)="9fa189bde74903c96095be", 0xb}, {&(0x7f00000006c0)="897034ed8b2257501f7ae8d48129c99c15f357d4d2ba88a8ddb0b2b5b5cc68256c89e205fee42b9c9e1ea7aa59c6c505acffd16291c8a8666347f4f8bb34932b913a8cc3cdc0df910446b5a87bf966d533e3122c8b727d37c3afb8dda24f4ddf80d0fe", 0x63}, {&(0x7f0000000740)="145b0fa64ffbe5d1ba218dcda98d704fea09f4fb64a8b0a3e7a8d6de665afbce1285bec6c08f9761e4cced713434598e2734d645f8d0e9939ccaca3dc85bdc95fde6afbd94492bf3de2424bfe919", 0x4e}, {&(0x7f00000007c0)="afb04c7911fa00d9bb714810a264a5bb82b145149a7eab7bf82776b855266ec8452a97a850e58cc209487afe5b6be56108c41af1b527789b2a607bfba9e8da9ac02db239c197235d78c61af5fc3c6deff497551c70d306d2be00d0bc9f2d8c02465eac1d3558d11a290653fdb4bdaeb6389caf50d1cad51cccde2f98d9fa1cb2f79cf2e2fccc0ae7646501e4ca41f9c89726235f02a61ff76532d4965b492b62c036ea6cb35365486cf42dfd60409f610925794c4646629232b33c5c05bbb43e60a4aa2909c9dd1fefbd33a3285e6ea238fd23ca24100d0ed04e572b20b6cd01437f31c678c558a7fb24fac803329f1283", 0xf1}, {&(0x7f00000008c0)="81bc14b6561ec666df5857314d2114a51bafc3c22406297939146369b474d969cdac4f906f102bb4d793cc01d8cbce6e4bfea7b148f2cfc576831522fd694d2563e55289a4a5dfe2ba3fab1921a4", 0x4e}], 0x7) r6 = accept4(r3, &(0x7f00000009c0)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000a40)=0x80, 0x800) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xac, r5, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x3}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8001}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x200}, @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_AKM_SUITES={0x8, 0x4c, [0xfac0e]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0c}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888d}, @NL80211_ATTR_SAE_PASSWORD={0x29, 0x115, "ea88fe6d5eb0d8811a7093f7674e7785afa5a652c09f8c5e05ace2739fba26031e05ab49f9"}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac0b, 0xfac09, 0xfac0c]}]]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x2404c051) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000c80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4b8, 0x1f8, 0x1f8, 0x110, 0x110, 0x1f8, 0x420, 0x420, 0x420, 0x420, 0x420, 0x6, &(0x7f0000000c00), {[{{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x0, 0x1}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff, 'nr0\x00', 'veth0_to_bridge\x00', {}, {}, 0x29, 0x3, 0x42}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x1, 0x1}}, @inet=@rpfilter={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x7, 0x1}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x40}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast2, @loopback, 0xffffffff, 0xffffff00, 'macvtap0\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x4, 0x0, 0x2}, 0x0, 0x98, 0xd0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5}, {0x3, 0x6, 0x4}, {0x1, 0x3, 0x6}, 0x9, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x518) syz_extract_tcp_res$synack(&(0x7f00000011c0), 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, &(0x7f0000001200)={{0x0, 0x800, 0x1, 0x800, 0x81, 0x1000, 0x6, 0xf7, 0xd8df, 0xfc, 0xc9, 0x800, 0x1, 0xfffffffffffffffb, 0x400}}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, &(0x7f0000001200)={{0x0, 0x800, 0x1, 0x800, 0x81, 0x1000, 0x6, 0xf7, 0xd8df, 0xfc, 0xc9, 0x800, 0x1, 0xfffffffffffffffb, 0x400}}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000002200)={0x0, r3, 0x5, 0x80, 0x0, 0xfffffffffffffff6}) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x6c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xc}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}}, 0x5) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x6c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xc}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}}, 0x5) sendmsg$nl_route_sched(r6, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002440)={&(0x7f00000023c0)=@getqdisc={0x4c, 0x26, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff2, 0x8}, {0x0, 0x7}, {0x8, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x20004800) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000024c0), 0x200, 0x0) close(r7) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002780)={&(0x7f0000002500)="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", &(0x7f0000002600)=""/197, &(0x7f0000002700)="9fdf57374df5777a98a91615a3262a7e83364a9630629d4e61489f44907b745965f1af5f1ff00620df060d810b467b42b400cb14f5ec32a13ec100", &(0x7f0000002740)="9fb883b7eb8879", 0x6}, 0x38) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f00000027c0)={0x7, 0x1, 0x5, 0x5}, 0x10) (async) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f00000027c0)={0x7, 0x1, 0x5, 0x5}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002800)='cpuset.effective_mems\x00', 0x0, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002800)='cpuset.effective_mems\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000028c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002840), &(0x7f0000002880)}, 0x20) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002b00)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002bc0)={0x0, 0x2, 0x8}, 0xc) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002bc0)={0x0, 0x2, 0x8}, 0xc) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002c00)={0x1b, 0x0, 0x0, 0x6, 0x0, r4, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003040)={0x6, 0x20, &(0x7f0000002900)=@raw=[@jmp={0x5, 0x0, 0x7, 0xa, 0x5, 0x6}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @call={0x85, 0x0, 0x0, 0x40}, @tail_call, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000002a00)='GPL\x00', 0x400, 0x95, &(0x7f0000002a40)=""/149, 0x40f00, 0xe, '\x00', r2, 0x25, r10, 0x8, &(0x7f0000002b40)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000002b80)={0x0, 0x6, 0x6, 0x880}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000002fc0)=[r11, r12, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000003000)=[{0x0, 0x5, 0xd, 0x2}, {0x5, 0x4, 0x0, 0xb}, {0x1, 0x1, 0xd, 0x1}], 0x10, 0xe7c, @void, @value}, 0x94) 1.201060788s ago: executing program 1 (id=1131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000008000000790000000000000000050000090900020073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040001}, 0x4001) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000008000000790000000000000000050000090900020073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040001}, 0x4001) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 1.056995722s ago: executing program 1 (id=1132): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x1000) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000080)=0x7, 0x4) sendto$phonet(0xffffffffffffffff, &(0x7f00000000c0)="6e7dc3354b96a620d64563b40519f8d7cd2abf59d5f0de7d11b5f135057baaec664b6635147448e6205c9df4ed41fff7edce26b8215eab0d49a21b27dc3a385094a4f6db6308ad9a5deaa4eab757f880d6d5247f4a46838d46caf81b3d1bc3ead7fd7fbf34b9ef01ba6ce4cb92f0900bc11d809dbf87a7d5e5067d86cb979771dee8c4a15f08702da595544afa49909f8b74cdb81a3fb2331f5bfecb74c46a62366653bbed01dc449a67e76fe9117890d7e2da37043eff6f142d09657cc8c7c376f962fa6168dba606db43053b8982cc5b3e45ffa0e6f0f419db1a6e9d4f899fb49b0daa3d69d9add045cc12fd66ddb382c6b21f6535", 0xf6, 0x80, &(0x7f00000001c0)={0x23, 0x9, 0x61, 0x3e}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r0}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x8008, 0x5, 0x86, 0x0}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r2, 0x9, 0x2}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000340)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000380)=0x24) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000003c0)={r4, 0x40, 0x2, [0x2, 0x2]}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000400)={r3, 0x2, 0x8}, 0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001640)={0x0}, &(0x7f0000001680)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000016c0)={{{@in, @in6=@ipv4={""/10, ""/2, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f00000017c0)=0xe8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001800)=0x0) r8 = getuid() r9 = getgid() r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0x1c, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2d9fc245, 0x0, 0x0, 0x0, 0x12}, [@map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x0, 0x7, 0xb, 0x5, 0x2, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @generic={0xae, 0x0, 0x7, 0x5, 0xff}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000001940)='syzkaller\x00', 0x8, 0xb0, &(0x7f0000001980)=""/176, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001a80)={0x3, 0x4, 0x80000001, 0x9}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001ac0)=[{0x2, 0x5, 0x9, 0x3}, {0x1, 0x5, 0x5, 0x7}, {0x3, 0x1, 0x2, 0x8}], 0x10, 0xf, @void, @value}, 0x94) r11 = gettid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001bc0)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f0000001cc0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001d00)={{{@in6=@private0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000001e00)=0xe8) sendmsg$unix(r1, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000440)="b94d6f9bccaad24db5c2487a0e9f267511234f970bcee63856188d3a573717b9c31bd0ae8714b0e3b4a71313ebc6a5a12b01b081055be534d6919f6ff39787fb090bf786c87c6e9d183b77d5997cb8be55d8ae5fe61647602bbd0849aa18f23e434a86e30fce8659d12f9137542313ef34ec639fe28e6002c4b3263df3fdaf8e384ed0f22a4b2943f24ed405646305c48bd004dd8579e54b7d601459d81b3a8d289c1ec2df2a", 0xa6}, {&(0x7f0000000500)="13d886d866996bb8b56766283efb0d3f1e5e384f19cf75332d5f0892e8bc1513efc72d03d1343ed04e720ff5a4df7f96509962dd4a2907d22d1bd1d38d4e6200a0530958315b54d0dab8dae8e6d86426cb09a7dd4b5ac58c322c894f90ad", 0x5e}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="24fe0bc383cb45bd7320952dc5b7a90ca957cf852a5bd55020c9fef0f8a6fce1ed5f7b33bdc679918b084aff88c70aaa7d707485ff5a9d64b33665fd2b9b4f92d88fcca01011551cd57c92ae5956a0e66ea8b694534a44305b12815c1a79e8e9d54f46b0164d8c4fa8323067a1a73ad55dddedae", 0x74}], 0x4, &(0x7f0000001e40)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x28, 0x1, 0x1, [r1, r0, r1, 0xffffffffffffffff, r0, r10]}}, @cred={{0x1c, 0x1, 0x2, {r11, r13, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r15}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0xd8, 0x40000}, 0x4008000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001fc0)=@filter={'filter\x00', 0xe, 0x4, 0x620, 0xffffffff, 0x338, 0x168, 0x338, 0xffffffff, 0xffffffff, 0x550, 0x550, 0x550, 0xffffffff, 0x4, &(0x7f0000001f80), {[{{@uncond, 0x0, 0x108, 0x168, 0x0, {}, [@common=@icmp6={{0x28}, {0xb, "30e4", 0x1}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3, 0x500000, 0xc02b, {0x8}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0x0, 0xffffffff], 0x4e23, 0x4e20, 0x4e23, 0x4e24, 0x3, 0x9, 0x5, 0x2, 0x20}}}, {{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], [0xff, 0xff000000, 0xffffffff, 0xffffff00], 'veth1_to_bridge\x00', 'lo\x00', {}, {0xff}, 0x16, 0x6, 0x5, 0x52}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x10000, 'system_u:object_r:fonts_t:s0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x24}, [0xff000000, 0xffffff, 0xffffff00], [0xffffffff, 0xffffff00, 0xff000000], 'team0\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x84, 0xfd, 0x4, 0x26}, 0x0, 0xf0, 0x218, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x1, 'H.245\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xf9d, 'system_u:object_r:iptables_conf_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002640)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x5, '\x00', r12, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000026c0), &(0x7f0000002700)=r10}, 0x20) r18 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002980)={&(0x7f00000028c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2b, 0x2b, 0xb, [@datasec={0x4, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x2, 0x7fffffff}], "4f51a6"}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x3, 0x8}]}, {0x0, [0x30, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x30, 0x5f, 0x60]}}, &(0x7f0000002940)=""/32, 0x4f, 0x20, 0x0, 0x5, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a80)={0x11, 0x1c, &(0x7f0000002780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r16}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfe}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r17}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002880)='GPL\x00', 0x769d, 0x0, 0x0, 0x41000, 0x20, '\x00', r14, 0x0, r18, 0x8, 0x0, 0x0, 0x10, &(0x7f00000029c0)={0x0, 0xc, 0x1, 0x1f}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000002a00)=[0xffffffffffffffff], &(0x7f0000002a40)=[{0x5, 0x4, 0x7, 0x5}, {0x0, 0x4, 0x9}, {0x0, 0x3, 0x4, 0x7}, {0x2, 0x5, 0x3, 0x2}], 0x10, 0xc0000000, @void, @value}, 0x94) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000002b40)) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000002b80)={'veth0_to_team\x00', 0x97, 0x65d}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000002c80)={0x4, @remote, 0x4e20, 0x4, 'none\x00', 0x20, 0x9, 0x59}, 0x2c) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000002cc0)=@req3={0x7, 0x200, 0x9, 0x401, 0xc, 0x7f, 0x2}, 0x1c) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x40, 0x1401, 0x1, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 1.015192102s ago: executing program 4 (id=1133): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)={0x7c, 0x10, 0x509, 0x0, 0x0, "", [@typed={0x69, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce2d712d285fda0a9423debbb86f9dba4a2dba4dbe076c292c2800c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff"}]}, 0x7c}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r2, @ANYBLOB="8b00330080800000ffffffffffff0802110000005050505050500000"], 0xa8}}, 0x20000000) 916.952559ms ago: executing program 0 (id=1134): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001500)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="a6c6c34238f4595563a175ec970bf439024f8ec2dd49af842ad6830044218ebde605b5112fb292cf5d480002739aed74e8bacf37c73b5cdff62e63d3205c2d63c2ae686256cacda6fccf602641752997b84b75cdfd8d156c5fa9fa3f9338f13e0bb9af65d1e645a7f7553972ac", 0x6d}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/108, 0x6c}, {0x0, 0x2}], 0x2}}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000d80), 0x2, 0x10162, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 832.775117ms ago: executing program 1 (id=1135): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000001000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000040001000b0808004149004006040800", 0x58}], 0x1) 706.034748ms ago: executing program 4 (id=1136): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)={0xbc, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d888f1d1c4e5ad85ce4966d", @typed={0x9b, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce2d712d285fda0a9423debbb86f9dba4a2dba4dbe076c292c2800c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100024db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336"}]}, 0xbc}], 0x1}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x70, r2, 0x1, 0x71bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x10}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4048804}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="8b00330080800000ffffffffffff08021100000050505050505000001a"], 0xa8}}, 0x20000000) 628.89863ms ago: executing program 1 (id=1137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeec, 0x0, &(0x7f00000002c0)="4e39aaaf812e89b903658b2ecc211925314a63a8f2c7b436fecdad79a19d7ce5e2fd6542359926ad4506a9ccba0bc5687ad825da62777a521636e4cd4db8a5d777e3b6d2725348ea765287ebb75384421e297c449ff1a819653f00bac4adb71d1c36886f55adefd33d483d66702be9be47ad0300984e57afa0f7ee9fd5b52de7ea05f275b7cb62664a2e1184d639a17c290e01909fd5610ab26e1a7bb785061fd33310c688da44a3d1a0dd014f8fa92fbd562df001ed50c0228b6ee36deb", 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="3a1d"], 0xf0) listen(r3, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4e, &(0x7f0000000700)={@local, @random="03fd00b38eb8", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 579.403273ms ago: executing program 4 (id=1138): r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x238, 0x230, 0x258, 0x238, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @mcast2, [], [], 'lo\x00', 'macvlan0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x6, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000011146ff90000050000000000080001000000000008004b0013000000080003", @ANYRESDEC=r0], 0x28}}, 0x0) 475.558924ms ago: executing program 2 (id=1139): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r2, 0x29, 0x18, 0x0, &(0x7f00000000c0)) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c080000050601020000000000000000000000000800010000000000d13b5878b08efade9312995e765f61a5ef5868b73c0dd2e868a1988b196d70bfd5be23fd33e357ed59d30bccb63f5454cee47a73585ac332c2ab9b81c3ed50749fdacb33adee0079e9aac3dcd7f75687b7d319f346b195f9bf2d8077791cf550d3070720282e6f998470d3ab3d46bbf1798ee2c976b38bdecaa2d91b322f9b7a0c14349b4e949728ab1a7d37b46a149480adc2f809e5"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, 0x0, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x4, 0x13, r3, 0x0) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x439, 0x0, 0x25dfdbfc, {0x0, 0x0, 0xe403, 0x0, 0x800, 0x610c3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x41}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x9}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}]}}}]}, 0x50}}, 0x0) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000140)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x34, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xf}, @alu={0x0, 0x0, 0xc, 0x5, 0x9, 0x2, 0x1}], &(0x7f00000000c0)='GPL\x00', 0x7a, 0xbe, &(0x7f00000002c0)=""/190, 0x41000, 0x10, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000100)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000580)=[r10, r12], &(0x7f00000005c0)=[{0x1, 0x4, 0x6, 0xc}, {0x0, 0x4, 0x8, 0x2}, {0x2, 0x5, 0xc, 0x1}, {0x3, 0x4, 0x2, 0x7}, {0x4, 0x4, 0x4, 0x9}, {0x3, 0x3, 0xd, 0x8}], 0x10, 0x400, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) 416.896581ms ago: executing program 3 (id=1140): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x0, 0x0, 0x1, 0x1, 0x40}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x0, 0x0, 0x1, 0x1, 0x40}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010008105000000000000000000000000995ff45d863f17e6cf2fc4e8a5896a49f85185347d7dd17175094116949f5e2f339a076101b5d5d45221b019305e2a", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067656e65766500001800028014000700fec0ffff000000000000000000000001"], 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010008105000000000000000000000000995ff45d863f17e6cf2fc4e8a5896a49f85185347d7dd17175094116949f5e2f339a076101b5d5d45221b019305e2a", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067656e65766500001800028014000700fec0ffff000000000000000000000001"], 0x48}}, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)="39886bb50b840f8cfaef0c04bb97349f", 0x10}, 0x1, 0x0, 0x0, 0xa0000c1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000300008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, 0x0) (async) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, 0x0) ioctl(r2, 0x0, &(0x7f0000000100)="a7391ebb6641f534211d1f410532b6b2bda0a5a0589516832c78dc09e59049d7e352a39f0c105c8093218aa55153ebad3aaba781ada024d553df0b389f8211b3afb565f6727bdbb3dea947871e19adfa6beda021665f6e6bfccb4fcda6dcdcd51a5f8ea0feb9d328e34e3a18db3f9531e451f5d1c1c0735489ba8245bdac2c218bbb922993607f0978d5f413f1aed0bbf61a8a018e02b5c0b00b3b") (async) ioctl(r2, 0x0, &(0x7f0000000100)="a7391ebb6641f534211d1f410532b6b2bda0a5a0589516832c78dc09e59049d7e352a39f0c105c8093218aa55153ebad3aaba781ada024d553df0b389f8211b3afb565f6727bdbb3dea947871e19adfa6beda021665f6e6bfccb4fcda6dcdcd51a5f8ea0feb9d328e34e3a18db3f9531e451f5d1c1c0735489ba8245bdac2c218bbb922993607f0978d5f413f1aed0bbf61a8a018e02b5c0b00b3b") r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x3, 0x10}, 0xc) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x3, [@decl_tag={0x9, 0x0, 0x0, 0x11, 0x4, 0x2}, @typedef={0x3, 0x0, 0x0, 0x8, 0x5}, @volatile={0xfffffffe}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x51, 0x0, 0x2, 0x6}, @struct={0x0, 0x4, 0x0, 0x4, 0x0, 0x5, [{0x7, 0x2, 0xffffff29}, {0xc, 0x4, 0x8}, {0xb, 0x4, 0x7}, {0xd, 0x3, 0xe}]}, @func={0xf, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x5f]}}, &(0x7f0000000200)=""/28, 0x9b, 0x1c, 0x1, 0x5, 0x10000, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x55, '\x00', 0x0, r7, 0x3, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x21) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x55, '\x00', 0x0, r7, 0x3, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x21) 415.103253ms ago: executing program 1 (id=1141): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_newvlan={0x30, 0x70, 0x200, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x12, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x5c}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) 334.181536ms ago: executing program 1 (id=1142): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) 41.751418ms ago: executing program 0 (id=1143): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc02000000000000000000000000000004001200050008"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 3 (id=1144): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeec, 0x0, &(0x7f00000002c0)="4e39aaaf812e89b903658b2ecc211925314a63a8f2c7b436fecdad79a19d7ce5e2fd6542359926ad4506a9ccba0bc5687ad825da62777a521636e4cd4db8a5d777e3b6d2725348ea765287ebb75384421e297c449ff1a819653f00bac4adb71d1c36886f55adefd33d483d66702be9be47ad0300984e57afa0f7ee9fd5b52de7ea05f275b7cb62664a2e1184d639a17c290e01909fd5610ab26e1a7bb785061fd33310c688da44a3d1a0dd014f8fa92fbd562df001ed50c0228b6ee36deb", 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="3a1d"], 0xf0) listen(r3, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20008041) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4e, &(0x7f0000000700)={@local, @random="03fd00b38eb8", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.119' (ED25519) to the list of known hosts. [ 53.518203][ T5817] cgroup: Unknown subsys name 'net' [ 53.637407][ T5817] cgroup: Unknown subsys name 'cpuset' [ 53.645848][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.928500][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.314938][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.350360][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.357699][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.366143][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.375710][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.394295][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.401655][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.409334][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.414139][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.424347][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.424701][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.433156][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.447181][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.455567][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.455707][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.468714][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.470470][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.477477][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.484333][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.498711][ T5847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.499558][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.506156][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.514475][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.529001][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.536938][ T5831] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.546072][ T5831] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.558973][ T5831] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.566209][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.573621][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.582502][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.906157][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 58.951844][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 59.045368][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 59.116894][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.124986][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.132245][ T5839] bridge_slave_0: entered allmulticast mode [ 59.140557][ T5839] bridge_slave_0: entered promiscuous mode [ 59.183702][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.191114][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.198629][ T5839] bridge_slave_1: entered allmulticast mode [ 59.206060][ T5839] bridge_slave_1: entered promiscuous mode [ 59.257720][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.265000][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.272167][ T5830] bridge_slave_0: entered allmulticast mode [ 59.279272][ T5830] bridge_slave_0: entered promiscuous mode [ 59.314238][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.323540][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.331531][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.338989][ T5830] bridge_slave_1: entered allmulticast mode [ 59.346271][ T5830] bridge_slave_1: entered promiscuous mode [ 59.366191][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 59.379046][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.386314][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.393690][ T5835] bridge_slave_0: entered allmulticast mode [ 59.400594][ T5835] bridge_slave_0: entered promiscuous mode [ 59.409619][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.445974][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.453091][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.460704][ T5835] bridge_slave_1: entered allmulticast mode [ 59.467774][ T5835] bridge_slave_1: entered promiscuous mode [ 59.500658][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.519854][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 59.530685][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.542401][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.556503][ T5839] team0: Port device team_slave_0 added [ 59.564531][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.601007][ T5839] team0: Port device team_slave_1 added [ 59.654868][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.661814][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.688072][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.726947][ T5835] team0: Port device team_slave_0 added [ 59.733270][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.740450][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.766824][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.786113][ T5830] team0: Port device team_slave_0 added [ 59.806432][ T5835] team0: Port device team_slave_1 added [ 59.832258][ T5830] team0: Port device team_slave_1 added [ 59.849069][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.858574][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.866370][ T5833] bridge_slave_0: entered allmulticast mode [ 59.872947][ T5833] bridge_slave_0: entered promiscuous mode [ 59.881013][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.888523][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.895810][ T5833] bridge_slave_1: entered allmulticast mode [ 59.902699][ T5833] bridge_slave_1: entered promiscuous mode [ 59.916741][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.923729][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.949877][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.001766][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.008939][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.040488][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.064292][ T5839] hsr_slave_0: entered promiscuous mode [ 60.070619][ T5839] hsr_slave_1: entered promiscuous mode [ 60.077996][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.085307][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.111493][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.132551][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.141761][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.149175][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.156541][ T5827] bridge_slave_0: entered allmulticast mode [ 60.163518][ T5827] bridge_slave_0: entered promiscuous mode [ 60.185605][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.192570][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.218970][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.231959][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.249309][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.256672][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.263871][ T5827] bridge_slave_1: entered allmulticast mode [ 60.270825][ T5827] bridge_slave_1: entered promiscuous mode [ 60.324702][ T5835] hsr_slave_0: entered promiscuous mode [ 60.330854][ T5835] hsr_slave_1: entered promiscuous mode [ 60.337299][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.345419][ T5835] Cannot create hsr debugfs directory [ 60.358746][ T5833] team0: Port device team_slave_0 added [ 60.382407][ T5830] hsr_slave_0: entered promiscuous mode [ 60.388830][ T5830] hsr_slave_1: entered promiscuous mode [ 60.395385][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.402958][ T5830] Cannot create hsr debugfs directory [ 60.420693][ T5833] team0: Port device team_slave_1 added [ 60.428492][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.486292][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.545962][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.552935][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.578904][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.590321][ T5831] Bluetooth: hci4: command tx timeout [ 60.592266][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.602910][ T5838] Bluetooth: hci1: command tx timeout [ 60.608714][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.635216][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.648897][ T5827] team0: Port device team_slave_0 added [ 60.664029][ T5838] Bluetooth: hci3: command tx timeout [ 60.664102][ T5831] Bluetooth: hci0: command tx timeout [ 60.669553][ T53] Bluetooth: hci2: command tx timeout [ 60.692062][ T5827] team0: Port device team_slave_1 added [ 60.802155][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.809163][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.836120][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.869558][ T5833] hsr_slave_0: entered promiscuous mode [ 60.876654][ T5833] hsr_slave_1: entered promiscuous mode [ 60.882833][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.890743][ T5833] Cannot create hsr debugfs directory [ 60.914182][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.921138][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.947539][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.047532][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.061494][ T5827] hsr_slave_0: entered promiscuous mode [ 61.070827][ T5827] hsr_slave_1: entered promiscuous mode [ 61.079997][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.088382][ T5827] Cannot create hsr debugfs directory [ 61.097726][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.122381][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.147678][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.203400][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.213135][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.237528][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.260247][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.342061][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.353779][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.372730][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.387558][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.464362][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.473562][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.496278][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.508792][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.541774][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.595113][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.608201][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.632834][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.645458][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.656625][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.671446][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.690867][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.698308][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.738972][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.746126][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.758349][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.783211][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.790320][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.801809][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.808912][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.832706][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.879828][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.917241][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.924375][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.951829][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.958980][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.016985][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.099481][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.131272][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.155169][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.162304][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.207414][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.214610][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.271750][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.312898][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.320065][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.362645][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.369828][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.408698][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.448539][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.468807][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.540029][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.554118][ T5839] veth0_vlan: entered promiscuous mode [ 62.618241][ T5839] veth1_vlan: entered promiscuous mode [ 62.666099][ T53] Bluetooth: hci1: command tx timeout [ 62.674416][ T53] Bluetooth: hci4: command tx timeout [ 62.695929][ T5835] veth0_vlan: entered promiscuous mode [ 62.711283][ T5839] veth0_macvtap: entered promiscuous mode [ 62.744862][ T53] Bluetooth: hci2: command tx timeout [ 62.750333][ T53] Bluetooth: hci3: command tx timeout [ 62.757144][ T5838] Bluetooth: hci0: command tx timeout [ 62.773237][ T5830] veth0_vlan: entered promiscuous mode [ 62.781746][ T5839] veth1_macvtap: entered promiscuous mode [ 62.797268][ T5835] veth1_vlan: entered promiscuous mode [ 62.819225][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.844991][ T5830] veth1_vlan: entered promiscuous mode [ 62.856549][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.882097][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.892553][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.902104][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.912392][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.922314][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.946853][ T5835] veth0_macvtap: entered promiscuous mode [ 62.959670][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.022017][ T5835] veth1_macvtap: entered promiscuous mode [ 63.069544][ T5830] veth0_macvtap: entered promiscuous mode [ 63.078283][ T5833] veth0_vlan: entered promiscuous mode [ 63.108944][ T5830] veth1_macvtap: entered promiscuous mode [ 63.122432][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.133288][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.142435][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.168093][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.180092][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.193483][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.204828][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.216209][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.244065][ T5833] veth1_vlan: entered promiscuous mode [ 63.251272][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.263191][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.281041][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.292141][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.310514][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.332081][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.332544][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.344026][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.354618][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.367820][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.378489][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.389992][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.399795][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.408682][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.420362][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.429370][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.465207][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.474657][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.483369][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.492127][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.538214][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 63.543654][ T5833] veth0_macvtap: entered promiscuous mode [ 63.590397][ T5827] veth0_vlan: entered promiscuous mode [ 63.613745][ T5833] veth1_macvtap: entered promiscuous mode [ 63.641191][ T5827] veth1_vlan: entered promiscuous mode [ 63.744271][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.760474][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.771872][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.782610][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.792737][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.804502][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.815838][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.831213][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.841981][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.852886][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.854662][ T5914] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 63.864454][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.883875][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.894923][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.905966][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.909837][ T5914] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 63.936187][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.954671][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.969282][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.978817][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.988057][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.997034][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.008747][ T5827] veth0_macvtap: entered promiscuous mode [ 64.078506][ T5827] veth1_macvtap: entered promiscuous mode [ 64.088618][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.102299][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.113258][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.122223][ T5916] xt_TPROXY: Can be used only with -p tcp or -p udp [ 64.148543][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.159705][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.170591][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.180843][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.191631][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.202817][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.213583][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.225593][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.235942][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.247023][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.256984][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.268005][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.278967][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.289822][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6'. [ 64.293031][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.308677][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.319305][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.336191][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.351648][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.365382][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.389322][ T5918] bridge_slave_1: left allmulticast mode [ 64.395142][ T5918] bridge_slave_1: left promiscuous mode [ 64.401507][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.416749][ T5918] bridge_slave_0: left allmulticast mode [ 64.421204][ T5917] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6'. [ 64.422484][ T5918] bridge_slave_0: left promiscuous mode [ 64.437659][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.542838][ T5827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.564043][ T5827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.572825][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.590391][ T5921] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.601326][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.637427][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.666311][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.745710][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.755317][ T53] Bluetooth: hci4: command tx timeout [ 64.761252][ T5838] Bluetooth: hci1: command tx timeout [ 64.779274][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.824746][ T53] Bluetooth: hci3: command tx timeout [ 64.830219][ T53] Bluetooth: hci0: command tx timeout [ 64.836539][ T5838] Bluetooth: hci2: command tx timeout [ 64.923144][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.931520][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.069002][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.077009][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.180160][ T795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.233921][ T795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.385077][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 65.413184][ T5939] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3'. [ 65.702984][ T5944] pimreg: entered allmulticast mode [ 65.755194][ T5945] pimreg: left allmulticast mode [ 66.432552][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 66.825125][ T53] Bluetooth: hci4: command tx timeout [ 66.830468][ T5838] Bluetooth: hci1: command tx timeout [ 66.904219][ T5838] Bluetooth: hci3: command tx timeout [ 66.909671][ T5838] Bluetooth: hci0: command tx timeout [ 66.913595][ T53] Bluetooth: hci2: command tx timeout [ 66.922899][ T5968] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15'. [ 66.932246][ T5968] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15'. [ 67.243275][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 67.349937][ T5974] netlink: 48 bytes leftover after parsing attributes in process `syz.0.16'. [ 67.823163][ T5986] sit0: entered promiscuous mode [ 67.829626][ T5991] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.21'. [ 67.857096][ T5986] netlink: 'syz.0.20': attribute type 1 has an invalid length. [ 68.385118][ T6000] netlink: 'syz.2.23': attribute type 1 has an invalid length. [ 68.659346][ T6012] netlink: 'syz.3.27': attribute type 2 has an invalid length. [ 68.923654][ T6029] netlink: 'syz.3.34': attribute type 1 has an invalid length. [ 68.956259][ T6031] __nla_validate_parse: 4 callbacks suppressed [ 68.956276][ T6031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.35'. [ 68.990079][ T6033] delete_channel: no stack [ 69.005163][ T6031] netlink: 40 bytes leftover after parsing attributes in process `syz.2.35'. [ 69.031731][ T6031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.35'. [ 69.050186][ T6031] netlink: 40 bytes leftover after parsing attributes in process `syz.2.35'. [ 69.504350][ T6057] syz.2.42 uses obsolete (PF_INET,SOCK_PACKET) [ 69.623158][ T6068] tipc: Started in network mode [ 69.635384][ T6068] tipc: Node identity ffffffff, cluster identity 4711 [ 69.662718][ T6068] tipc: Node number set to 4294967295 [ 69.701667][ T6063] sctp: failed to load transform for md5: -2 [ 69.932735][ T6081] netlink: 48 bytes leftover after parsing attributes in process `syz.2.47'. [ 70.287689][ T6103] netlink: 'syz.1.54': attribute type 10 has an invalid length. [ 70.331009][ T6103] syz_tun: entered promiscuous mode [ 70.373162][ T6103] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 70.382571][ T6120] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 70.445878][ T6120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.57'. [ 70.481389][ T6120] netlink: 'syz.4.57': attribute type 1 has an invalid length. [ 70.506848][ T6120] netlink: 224 bytes leftover after parsing attributes in process `syz.4.57'. [ 71.293665][ T6162] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.450876][ T6168] netlink: 16 bytes leftover after parsing attributes in process `syz.3.74'. [ 71.626003][ T6178] warning: `syz.3.78' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 71.634703][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.961694][ T6202] netlink: 76 bytes leftover after parsing attributes in process `syz.4.73'. [ 72.086974][ T6204] vxcan3: entered promiscuous mode [ 72.112073][ T6208] netem: incorrect ge model size [ 72.134065][ T6208] netem: change failed [ 72.549887][ T6221] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.698526][ T6231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.94'. [ 72.711175][ T6221] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.735592][ T6231] netlink: 'syz.0.94': attribute type 6 has an invalid length. [ 72.896231][ T6239] netlink: 'syz.4.96': attribute type 1 has an invalid length. [ 72.927427][ T6221] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.025769][ T6249] FAULT_INJECTION: forcing a failure. [ 73.025769][ T6249] name failslab, interval 1, probability 0, space 0, times 1 [ 73.066108][ T6249] CPU: 1 UID: 0 PID: 6249 Comm: syz.2.97 Not tainted 6.13.0-rc2-syzkaller-00485-gc1bad69f8baf #0 [ 73.076663][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 73.086756][ T6249] Call Trace: [ 73.090056][ T6249] [ 73.093014][ T6249] dump_stack_lvl+0x241/0x360 [ 73.097745][ T6249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.102979][ T6249] ? __pfx__printk+0x10/0x10 [ 73.107607][ T6249] ? __kmalloc_noprof+0xb5/0x4c0 [ 73.112582][ T6249] ? __pfx___might_resched+0x10/0x10 [ 73.117899][ T6249] ? aa_get_newest_label+0xff/0x6f0 [ 73.123133][ T6249] should_fail_ex+0x3b0/0x4e0 [ 73.127855][ T6249] should_failslab+0xac/0x100 [ 73.132566][ T6249] __kmalloc_noprof+0xdd/0x4c0 [ 73.137363][ T6249] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 73.143637][ T6249] ? apparmor_capable+0x13b/0x1b0 [ 73.148699][ T6249] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 73.154902][ T6249] genl_rcv_msg+0x802/0xec0 [ 73.159448][ T6249] ? __pfx_genl_rcv_msg+0x10/0x10 [ 73.164520][ T6249] ? __pfx_lock_acquire+0x10/0x10 [ 73.169549][ T6249] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 73.175013][ T6249] ? __pfx_nl802154_add_llsec_seclevel+0x10/0x10 [ 73.181346][ T6249] ? __pfx_nl802154_post_doit+0x10/0x10 [ 73.186897][ T6249] ? __pfx___might_resched+0x10/0x10 [ 73.192232][ T6249] netlink_rcv_skb+0x1e3/0x430 [ 73.197009][ T6249] ? __pfx_genl_rcv_msg+0x10/0x10 [ 73.202054][ T6249] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 73.207360][ T6249] genl_rcv+0x28/0x40 [ 73.211339][ T6249] netlink_unicast+0x7f6/0x990 [ 73.216112][ T6249] ? __pfx_netlink_unicast+0x10/0x10 [ 73.221423][ T6249] ? __virt_addr_valid+0x45f/0x530 [ 73.226551][ T6249] ? __phys_addr_symbol+0x2f/0x70 [ 73.231581][ T6249] ? __check_object_size+0x47a/0x730 [ 73.236874][ T6249] netlink_sendmsg+0x8e4/0xcb0 [ 73.241658][ T6249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.246963][ T6249] ? aa_sock_msg_perm+0x91/0x160 [ 73.251908][ T6249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.257205][ T6249] __sock_sendmsg+0x221/0x270 [ 73.261895][ T6249] ____sys_sendmsg+0x52a/0x7e0 [ 73.266684][ T6249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.271978][ T6249] ? __fget_files+0x2a/0x410 [ 73.276590][ T6249] ? __fget_files+0x2a/0x410 [ 73.281197][ T6249] __sys_sendmsg+0x269/0x350 [ 73.285803][ T6249] ? __pfx_lock_release+0x10/0x10 [ 73.290838][ T6249] ? __pfx___sys_sendmsg+0x10/0x10 [ 73.295967][ T6249] ? __pfx_vfs_write+0x10/0x10 [ 73.300752][ T6249] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 73.307082][ T6249] ? do_syscall_64+0x100/0x230 [ 73.311847][ T6249] ? do_syscall_64+0xb6/0x230 [ 73.316528][ T6249] do_syscall_64+0xf3/0x230 [ 73.321036][ T6249] ? clear_bhb_loop+0x35/0x90 [ 73.325725][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.331614][ T6249] RIP: 0033:0x7f1decf85d29 [ 73.336030][ T6249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.355636][ T6249] RSP: 002b:00007f1dedcf9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.364070][ T6249] RAX: ffffffffffffffda RBX: 00007f1ded176080 RCX: 00007f1decf85d29 [ 73.372126][ T6249] RDX: 0000000000000000 RSI: 0000000020001b40 RDI: 0000000000000005 [ 73.380094][ T6249] RBP: 00007f1dedcf9090 R08: 0000000000000000 R09: 0000000000000000 [ 73.388151][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.396125][ T6249] R13: 0000000000000000 R14: 00007f1ded176080 R15: 00007ffcb0ba9d18 [ 73.404111][ T6249] [ 73.455594][ T6221] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.473329][ T6256] netlink: 'syz.1.98': attribute type 1 has an invalid length. [ 73.661459][ T6221] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.686195][ T6221] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.703472][ T6221] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.718942][ T6221] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.975112][ T6269] netlink: 'syz.4.104': attribute type 1 has an invalid length. [ 74.125649][ T6273] Zero length message leads to an empty skb [ 74.667014][ T6304] __nla_validate_parse: 2 callbacks suppressed [ 74.667032][ T6304] netlink: 20 bytes leftover after parsing attributes in process `syz.1.113'. [ 74.704123][ T6306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.113'. [ 74.864034][ T6316] x_tables: duplicate underflow at hook 1 [ 74.888145][ T6316] netlink: 'syz.2.115': attribute type 10 has an invalid length. [ 74.897727][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.112'. [ 74.911598][ T6316] netlink: 2 bytes leftover after parsing attributes in process `syz.2.115'. [ 74.972913][ T6316] bridge0: entered promiscuous mode [ 74.997114][ T6320] netlink: 56 bytes leftover after parsing attributes in process `syz.0.116'. [ 75.034346][ T6320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.116'. [ 75.065658][ T6312] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.132688][ T6332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.117'. [ 75.172875][ T6332] (unnamed net_device) (uninitialized): option use_carrier: invalid value (13) [ 75.297422][ T6312] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.457973][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.122'. [ 75.480552][ T6312] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.507165][ T6347] macsec1: entered promiscuous mode [ 75.542906][ T6356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.122'. [ 75.579334][ T6312] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.123613][ T6390] netlink: 84 bytes leftover after parsing attributes in process `syz.4.131'. [ 76.248707][ T6396] netlink: 'syz.0.135': attribute type 4 has an invalid length. [ 76.638640][ T6422] netlink: 'syz.2.138': attribute type 3 has an invalid length. [ 76.656223][ T6422] netlink: 'syz.2.138': attribute type 3 has an invalid length. [ 76.682195][ T6422] x_tables: duplicate underflow at hook 2 [ 76.786789][ T1205] cfg80211: failed to load regulatory.db [ 76.791688][ T6428] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 77.205378][ T6456] delete_channel: no stack [ 77.647073][ T6312] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.714989][ T6312] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.791803][ T6312] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.954677][ T6312] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.013174][ T6436] trusted_key: syz.1.142 sent an empty control message without MSG_MORE. [ 78.139314][ T5911] IPVS: starting estimator thread 0... [ 78.253985][ T6490] IPVS: using max 22 ests per chain, 52800 per kthread [ 78.625901][ T6512] netlink: 'syz.1.157': attribute type 1 has an invalid length. [ 78.827911][ T6525] tipc: Can't bind to reserved service type 1 [ 79.548392][ T6555] bridge1: entered promiscuous mode [ 79.575225][ T6555] bridge1: entered allmulticast mode [ 79.723942][ T6568] __nla_validate_parse: 9 callbacks suppressed [ 79.723961][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 79.868223][ T6576] netlink: 'syz.2.182': attribute type 1 has an invalid length. [ 79.927616][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'. [ 79.989301][ T6580] netlink: 20 bytes leftover after parsing attributes in process `syz.2.184'. [ 80.025072][ T6586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.184'. [ 80.335728][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 80.374390][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.189'. [ 80.412596][ T6599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.189'. [ 80.465021][ T6602] netlink: 32 bytes leftover after parsing attributes in process `syz.1.190'. [ 80.482178][ T6602] netem: unknown loss type 13 [ 80.493898][ T6602] netem: change failed [ 81.153696][ T6641] ebt_among: dst integrity fail: 101 [ 81.183727][ T6639] lo speed is unknown, defaulting to 1000 [ 81.213672][ T6639] lo speed is unknown, defaulting to 1000 [ 81.237936][ T6639] lo speed is unknown, defaulting to 1000 [ 81.587778][ T5911] lo speed is unknown, defaulting to 1000 [ 81.603904][ T6639] infiniband syz0: set active [ 81.612227][ T6639] infiniband syz0: added lo [ 81.636735][ T6639] syz0: rxe_create_cq: returned err = -12 [ 81.649404][ T6639] infiniband syz0: Couldn't create ib_mad CQ [ 81.660085][ T6639] infiniband syz0: Couldn't open port 1 [ 81.692320][ T6639] RDS/IB: syz0: added [ 81.699831][ T6639] smc: adding ib device syz0 with port count 1 [ 81.706895][ T6639] smc: ib device syz0 port 1 has pnetid [ 81.716053][ T5911] lo speed is unknown, defaulting to 1000 [ 81.743974][ T6639] lo speed is unknown, defaulting to 1000 [ 82.263714][ T6639] lo speed is unknown, defaulting to 1000 [ 82.769727][ T6639] lo speed is unknown, defaulting to 1000 [ 82.904904][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.221'. [ 83.159527][ T6639] lo speed is unknown, defaulting to 1000 [ 83.183404][ T6707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.224'. [ 83.190749][ T6711] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 83.209156][ T6707] syzkaller0: entered promiscuous mode [ 83.214740][ T6707] syzkaller0: entered allmulticast mode [ 83.405482][ T6723] netlink: 'syz.3.230': attribute type 24 has an invalid length. [ 83.517666][ T6639] lo speed is unknown, defaulting to 1000 [ 83.843288][ T6739] netlink: 'syz.4.231': attribute type 1 has an invalid length. [ 83.915744][ T6745] gretap0: entered promiscuous mode [ 83.921586][ T6745] vlan2: entered promiscuous mode [ 83.931661][ T6745] netlink: 'syz.2.237': attribute type 6 has an invalid length. [ 84.647776][ T6778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.705481][ T6778] netlink: 'syz.2.247': attribute type 10 has an invalid length. [ 84.799696][ T6778] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 85.161958][ T6811] dccp_v4_rcv: dropped packet with invalid checksum [ 85.182209][ T6806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.255'. [ 85.204527][ T6813] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 85.317545][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'. [ 85.464195][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.260'. [ 85.976070][ T6843] netlink: set zone limit has 4 unknown bytes [ 86.076261][ T6851] ip6t_srh: unknown srh invflags 4000 [ 86.324133][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.269'. [ 86.398961][ T6868] netlink: 32 bytes leftover after parsing attributes in process `syz.1.269'. [ 86.409668][ T6865] syz.3.271 (6865) used obsolete PPPIOCDETACH ioctl [ 86.420046][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.269'. [ 86.839748][ T6888] netlink: 32 bytes leftover after parsing attributes in process `syz.2.278'. [ 86.967844][ T6894] tipc: Enabling of bearer rejected, failed to enable media [ 86.988077][ T6886] lo speed is unknown, defaulting to 1000 [ 86.997757][ T6894] netlink: 44 bytes leftover after parsing attributes in process `syz.0.281'. [ 88.170540][ T6952] netlink: 40 bytes leftover after parsing attributes in process `syz.3.293'. [ 88.183516][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.295'. [ 88.280643][ T8] IPVS: starting estimator thread 0... [ 88.394147][ T6964] IPVS: using max 23 ests per chain, 55200 per kthread [ 88.611743][ T6980] netlink: 'syz.4.301': attribute type 7 has an invalid length. [ 88.638738][ T6980] netlink: 'syz.4.301': attribute type 8 has an invalid length. [ 88.647790][ T6980] netlink: 'syz.4.301': attribute type 13 has an invalid length. [ 88.672938][ T6978] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.159334][ T7001] syzkaller1: entered promiscuous mode [ 89.168517][ T7001] syzkaller1: entered allmulticast mode [ 89.519632][ T7017] netlink: 'syz.3.313': attribute type 1 has an invalid length. [ 90.015358][ T7039] netem: incorrect gi model size [ 90.022869][ T7039] netem: change failed [ 90.384644][ T7064] __nla_validate_parse: 8 callbacks suppressed [ 90.384662][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'. [ 90.427550][ T7064] lo speed is unknown, defaulting to 1000 [ 90.528883][ T7073] bridge0: entered allmulticast mode [ 90.573666][ T7078] pim6reg: entered allmulticast mode [ 90.733607][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 90.809599][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'. [ 90.851104][ T7093] vlan3: entered allmulticast mode [ 90.876739][ T7093] xfrm0: entered allmulticast mode [ 91.195786][ T7108] netlink: 36 bytes leftover after parsing attributes in process `syz.0.341'. [ 91.378383][ T7115] netlink: 'syz.0.345': attribute type 11 has an invalid length. [ 91.527204][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'. [ 91.578687][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'. [ 91.611636][ T7126] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20000 [ 91.631022][ T7128] netlink: zone id is out of range [ 91.637607][ T7121] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20000 [ 91.647817][ T7128] netlink: zone id is out of range [ 91.652961][ T7128] netlink: del zone limit has 8 unknown bytes [ 91.656691][ T7127] netlink: 20 bytes leftover after parsing attributes in process `syz.3.348'. [ 91.674334][ T7131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.349'. [ 91.714037][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.349'. [ 91.836383][ T7134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.350'. [ 91.861520][ T7138] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048) [ 91.881390][ T7135] netlink: 'syz.4.343': attribute type 3 has an invalid length. [ 92.191931][ T7154] Bluetooth: MGMT ver 1.23 [ 92.393666][ T7156] lo speed is unknown, defaulting to 1000 [ 92.871717][ T7181] openvswitch: netlink: Flow actions attr not present in new flow. [ 93.577297][ T7202] team0 (unregistering): Port device team_slave_0 removed [ 93.597491][ T7202] team0 (unregistering): Port device team_slave_1 removed [ 93.722543][ T7223] syzkaller1: entered promiscuous mode [ 93.752297][ T7223] syzkaller1: entered allmulticast mode [ 94.161955][ T7248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.261382][ T7248] bond0: (slave bond1): Enslaving as an active interface with an up link [ 94.704786][ T7262] netlink: 'syz.0.382': attribute type 39 has an invalid length. [ 95.171692][ T7284] netlink: 'syz.2.389': attribute type 1 has an invalid length. [ 95.184945][ T7282] nbd: must specify an index to disconnect [ 95.204495][ T7284] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.279528][ T7288] netlink: 'syz.1.387': attribute type 1 has an invalid length. [ 95.494855][ T7290] __nla_validate_parse: 12 callbacks suppressed [ 95.494880][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'. [ 95.530577][ T7299] netlink: 'syz.2.392': attribute type 30 has an invalid length. [ 95.843034][ T7314] netlink: 32 bytes leftover after parsing attributes in process `syz.2.397'. [ 96.119937][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.400'. [ 96.142082][ T7324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.216398][ T7332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.404'. [ 96.289887][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 96.295632][ T7324] xt_recent: Unsupported userspace flags (00000042) [ 96.395398][ T7345] netlink: 112 bytes leftover after parsing attributes in process `syz.0.404'. [ 96.435160][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 96.533663][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 96.592842][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 96.701035][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 96.838728][ T7356] netlink: 'syz.2.410': attribute type 1 has an invalid length. [ 96.843152][ T7358] batman_adv: batadv0: Adding interface: dummy0 [ 96.853095][ T7358] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.878670][ T7358] batman_adv: batadv0: Interface activated: dummy0 [ 96.895645][ T7358] batadv0: mtu less than device minimum [ 96.903437][ T7358] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 96.916479][ T7358] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 96.928761][ T7358] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 96.941281][ T7358] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 96.953768][ T7358] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 96.966196][ T7358] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 96.978813][ T7358] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 96.991294][ T7358] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.003739][ T7358] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.452378][ T7382] x_tables: duplicate underflow at hook 2 [ 97.655033][ T7391] tipc: Enabling of bearer rejected, failed to enable media [ 97.676414][ T7390] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 98.388131][ T7436] Cannot find add_set index 0 as target [ 98.828757][ T7453] netlink: 'syz.0.440': attribute type 8 has an invalid length. [ 98.953363][ T7457] xt_hashlimit: Unknown mode mask 40030000, kernel too old? [ 98.979354][ T7457] sctp: [Deprecated]: syz.3.441 (pid 7457) Use of int in maxseg socket option. [ 98.979354][ T7457] Use struct sctp_assoc_value instead [ 99.100946][ T7460] erspan0: entered promiscuous mode [ 99.413264][ T7460] erspan0: left promiscuous mode [ 99.601847][ T7459] tipc: Enabling of bearer rejected, failed to enable media [ 100.397998][ T7511] netlink: 'syz.4.454': attribute type 1 has an invalid length. [ 100.530580][ T7513] veth2: entered allmulticast mode [ 100.575400][ T7517] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 100.586840][ T7517] netlink: 'syz.2.457': attribute type 9 has an invalid length. [ 100.595658][ T7517] netlink: 'syz.2.457': attribute type 7 has an invalid length. [ 100.605243][ T7517] netlink: 'syz.2.457': attribute type 8 has an invalid length. [ 100.843769][ T7523] __nla_validate_parse: 34 callbacks suppressed [ 100.854909][ T7523] netlink: 32 bytes leftover after parsing attributes in process `syz.0.458'. [ 100.869912][ T7519] syzkaller0: entered promiscuous mode [ 100.880701][ T7519] syzkaller0: entered allmulticast mode [ 100.917599][ T7522] dvmrp0: entered allmulticast mode [ 100.961695][ T7523] netlink: 20 bytes leftover after parsing attributes in process `syz.0.458'. [ 102.248915][ T7562] netlink: 'syz.4.470': attribute type 1 has an invalid length. [ 104.440395][ T7599] batadv_slave_1: entered promiscuous mode [ 104.633341][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.482'. [ 104.640033][ T7614] net_ratelimit: 10 callbacks suppressed [ 104.640053][ T7614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.739798][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 105.017497][ T7633] netlink: 56 bytes leftover after parsing attributes in process `syz.3.490'. [ 105.026840][ T7635] netlink: 40 bytes leftover after parsing attributes in process `syz.1.491'. [ 105.071019][ T7635] netlink: 36 bytes leftover after parsing attributes in process `syz.1.491'. [ 105.185124][ T7598] batadv_slave_1: left promiscuous mode [ 105.315355][ T7648] xt_recent: Unsupported userspace flags (00000042) [ 105.635338][ T7668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.499'. [ 105.691467][ T7668] netlink: 104 bytes leftover after parsing attributes in process `syz.1.499'. [ 105.714176][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 105.745955][ T7675] macsec0: entered promiscuous mode [ 105.752185][ T7675] macvlan1: entered promiscuous mode [ 105.784977][ T7671] netlink: 'syz.0.502': attribute type 1 has an invalid length. [ 105.801619][ T7675] macvlan1: left promiscuous mode [ 105.933393][ T7683] __nla_validate_parse: 1 callbacks suppressed [ 105.933427][ T7683] netlink: 104 bytes leftover after parsing attributes in process `syz.3.504'. [ 105.955932][ T7684] netlink: 36 bytes leftover after parsing attributes in process `syz.0.505'. [ 105.972245][ T7683] netlink: 76 bytes leftover after parsing attributes in process `syz.3.504'. [ 106.006816][ T7686] netlink: 'syz.0.505': attribute type 10 has an invalid length. [ 106.044359][ T7686] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.053400][ T7686] bond0: (slave team0): Enslaving as an active interface with an up link [ 106.271851][ T7695] netlink: 'syz.2.508': attribute type 10 has an invalid length. [ 106.290901][ T7695] team0: Device veth1_macvtap failed to register rx_handler [ 106.405318][ T7700] netlink: 40 bytes leftover after parsing attributes in process `syz.2.510'. [ 106.421404][ T7701] rdma_rxe: rxe_newlink: failed to add lo [ 106.435825][ T7700] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20004 [ 106.877991][ T7722] bridge0: port 1(vlan2) entered blocking state [ 106.905121][ T7722] bridge0: port 1(vlan2) entered disabled state [ 106.929600][ T7722] vlan2: entered allmulticast mode [ 106.952955][ T7722] syz_tun: entered allmulticast mode [ 106.986485][ T7722] vlan2: entered promiscuous mode [ 107.005056][ T7722] syz_tun: entered promiscuous mode [ 107.091399][ T7732] netlink: 244 bytes leftover after parsing attributes in process `syz.0.518'. [ 107.101930][ T7733] netlink: 60 bytes leftover after parsing attributes in process `syz.1.517'. [ 107.377299][ T7748] IPv6: sit1: Disabled Multicast RS [ 107.619704][ T7753] netlink: 'syz.4.523': attribute type 10 has an invalid length. [ 107.693592][ T7765] netlink: 2 bytes leftover after parsing attributes in process `syz.3.525'. [ 107.723458][ T7765] netlink: 2 bytes leftover after parsing attributes in process `syz.3.525'. [ 107.774844][ T7765] netlink: 2 bytes leftover after parsing attributes in process `syz.3.525'. [ 107.787908][ T7765] netlink: 2 bytes leftover after parsing attributes in process `syz.3.525'. [ 107.954585][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 108.081831][ T7784] lo speed is unknown, defaulting to 1000 [ 108.153941][ T7788] netlink: 'syz.4.528': attribute type 4 has an invalid length. [ 108.231405][ T7792] xt_hashlimit: size too large, truncated to 1048576 [ 108.811794][ T5831] Bluetooth: hci4: link tx timeout [ 108.817841][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.023230][ T7810] netlink: 'syz.2.537': attribute type 6 has an invalid length. [ 109.569556][ T7827] openvswitch: netlink: Flow actions attr not present in new flow. [ 109.708818][ T7831] lo speed is unknown, defaulting to 1000 [ 109.768255][ T7837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.804037][ T7837] netlink: 'syz.4.545': attribute type 10 has an invalid length. [ 109.906715][ T7839] syzkaller0: entered promiscuous mode [ 109.912233][ T7839] syzkaller0: entered allmulticast mode [ 110.060911][ T7837] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 110.907438][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 113.259311][ T7888] bond_slave_0: entered promiscuous mode [ 113.265338][ T7888] bond_slave_1: entered promiscuous mode [ 113.271141][ T7888] team_slave_0: entered promiscuous mode [ 113.277072][ T7888] team_slave_1: entered promiscuous mode [ 113.288785][ T7886] __nla_validate_parse: 29 callbacks suppressed [ 113.288806][ T7886] netlink: 40 bytes leftover after parsing attributes in process `syz.2.558'. [ 113.302745][ T7888] vlan2: entered promiscuous mode [ 113.309807][ T7888] bond0: entered promiscuous mode [ 113.315751][ T7888] team0: entered promiscuous mode [ 113.322448][ T7888] vlan2: entered allmulticast mode [ 113.335562][ T7888] bond0: entered allmulticast mode [ 113.340949][ T7888] bond_slave_0: entered allmulticast mode [ 113.378710][ T7888] bond_slave_1: entered allmulticast mode [ 113.393832][ T7888] team0: entered allmulticast mode [ 113.426398][ T7888] team_slave_0: entered allmulticast mode [ 113.432621][ T7888] team_slave_1: entered allmulticast mode [ 113.445417][ T7888] bond0: left allmulticast mode [ 113.453315][ T7888] bond_slave_0: left allmulticast mode [ 113.459069][ T7888] bond_slave_1: left allmulticast mode [ 113.464834][ T7888] team0: left allmulticast mode [ 113.469791][ T7888] team_slave_0: left allmulticast mode [ 113.476098][ T7888] team_slave_1: left allmulticast mode [ 113.481712][ T7888] bond0: left promiscuous mode [ 113.487060][ T7888] team0: left promiscuous mode [ 113.492246][ T7888] bond_slave_0: left promiscuous mode [ 113.497735][ T7888] bond_slave_1: left promiscuous mode [ 113.503203][ T7888] team_slave_0: left promiscuous mode [ 113.508656][ T7888] team_slave_1: left promiscuous mode [ 113.761510][ T7897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.560'. [ 113.815143][ T7897] bond1: entered promiscuous mode [ 113.832135][ T7897] netlink: 21 bytes leftover after parsing attributes in process `syz.0.560'. [ 113.885898][ T7897] bond1 (unregistering): Released all slaves [ 113.952201][ T7906] lo speed is unknown, defaulting to 1000 [ 114.154086][ T7918] netlink: 'syz.0.566': attribute type 4 has an invalid length. [ 114.259647][ T7923] netlink: 20 bytes leftover after parsing attributes in process `syz.3.567'. [ 114.338223][ T7926] netlink: 'syz.3.567': attribute type 21 has an invalid length. [ 114.574070][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 114.615035][ T7937] (unnamed net_device) (uninitialized): option arp_validate: invalid value (1024) [ 114.665919][ T7934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.775587][ T7946] netlink: 52 bytes leftover after parsing attributes in process `syz.1.573'. [ 114.952063][ T7956] netlink: 112 bytes leftover after parsing attributes in process `syz.2.577'. [ 115.124262][ T7969] Bluetooth: MGMT ver 1.23 [ 115.138137][ T7962] lo speed is unknown, defaulting to 1000 [ 115.432312][ T7979] Cannot find set identified by id 0 to match [ 115.442896][ T7979] Cannot find set identified by id 0 to match [ 115.456429][ T7979] Cannot find set identified by id 0 to match [ 115.480876][ T7979] Cannot find set identified by id 0 to match [ 115.494342][ T7979] Cannot find set identified by id 0 to match [ 115.765202][ T7993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.589'. [ 115.815687][ T7991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.588'. [ 115.825930][ T7991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.588'. [ 116.180020][ T8017] netlink: 'syz.0.593': attribute type 1 has an invalid length. [ 116.244856][ T8016] netlink: 'syz.2.595': attribute type 1 has an invalid length. [ 116.395817][ T8025] tc_dump_action: action bad kind [ 117.205421][ T8079] Cannot find add_set index 0 as target [ 117.821813][ T8114] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 118.229671][ T8138] netlink: 'syz.1.623': attribute type 4 has an invalid length. [ 118.245291][ T8136] netlink: 'syz.1.623': attribute type 4 has an invalid length. [ 118.282013][ T8141] netlink: 'syz.1.623': attribute type 4 has an invalid length. [ 118.423079][ T8132] infiniband syz2: set down [ 118.427707][ T8132] infiniband syz2: added ipvlan0 [ 118.478641][ T8132] RDS/IB: syz2: added [ 118.482717][ T8132] smc: adding ib device syz2 with port count 1 [ 118.489484][ T8132] smc: ib device syz2 port 1 has pnetid [ 118.712026][ T8151] syzkaller1: entered promiscuous mode [ 118.744927][ T8151] syzkaller1: entered allmulticast mode [ 118.893704][ T8166] netlink: 'syz.1.631': attribute type 32 has an invalid length. [ 118.913814][ T8169] __nla_validate_parse: 8 callbacks suppressed [ 118.913831][ T8169] netlink: 24 bytes leftover after parsing attributes in process `syz.0.632'. [ 119.245446][ T8179] netlink: 243 bytes leftover after parsing attributes in process `syz.3.637'. [ 119.283471][ T8179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.364645][ T8181] netlink: 40 bytes leftover after parsing attributes in process `syz.0.636'. [ 119.611830][ T8194] x_tables: duplicate underflow at hook 1 [ 120.412922][ T8220] netlink: 'syz.4.645': attribute type 1 has an invalid length. [ 121.446941][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.650'. [ 121.463013][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.650'. [ 121.515814][ T8227] infiniband syz!: set down [ 121.524304][ T8227] infiniband syz!: added team_slave_0 [ 121.530062][ T8227] syz!: rxe_create_cq: returned err = -12 [ 121.545395][ T8227] infiniband syz!: Couldn't create ib_mad CQ [ 121.560445][ T8227] infiniband syz!: Couldn't open port 1 [ 121.615494][ T8227] RDS/IB: syz!: added [ 121.630784][ T8227] smc: adding ib device syz! with port count 1 [ 121.656772][ T8227] smc: ib device syz! port 1 has pnetid [ 121.681664][ T8249] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 4, id = 0 [ 122.218570][ T8272] xt_ecn: cannot match TCP bits for non-tcp packets [ 122.253025][ T8274] netlink: 144 bytes leftover after parsing attributes in process `syz.3.659'. [ 122.565201][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.658'. [ 122.705494][ T8296] netlink: 'syz.2.666': attribute type 27 has an invalid length. [ 122.784912][ T8291] team0: Port device team_slave_1 removed [ 122.897470][ T8301] vlan4: entered promiscuous mode [ 122.902904][ T8301] team0: Device vlan4 is already an upper device of the team interface [ 122.940060][ T8307] netlink: 72 bytes leftover after parsing attributes in process `syz.1.667'. [ 123.132286][ T8311] sctp: [Deprecated]: syz.3.669 (pid 8311) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.132286][ T8311] Use struct sctp_sack_info instead [ 123.189512][ T8311] netlink: 'syz.3.669': attribute type 1 has an invalid length. [ 123.255141][ T8321] x_tables: duplicate underflow at hook 2 [ 123.282954][ T8324] netlink: 'syz.4.672': attribute type 10 has an invalid length. [ 123.318996][ T8324] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 123.397133][ T8324] bridge0: port 3(ip6gretap0) entered blocking state [ 123.406496][ T8332] Cannot find set identified by id 0 to match [ 123.415506][ T8324] bridge0: port 3(ip6gretap0) entered disabled state [ 123.431617][ T8324] ip6gretap0: entered allmulticast mode [ 123.447953][ T8324] ip6gretap0: entered promiscuous mode [ 123.456040][ T8324] bridge0: port 3(ip6gretap0) entered blocking state [ 123.463742][ T8324] bridge0: port 3(ip6gretap0) entered forwarding state [ 123.577260][ T8339] ip6t_srh: unknown srh invflags 92A7 [ 123.613628][ T8339] lo speed is unknown, defaulting to 1000 [ 123.662829][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'. [ 123.696795][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.680'. [ 124.358490][ T8368] netlink: 148 bytes leftover after parsing attributes in process `syz.2.687'. [ 124.367939][ T8368] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 124.554765][ T8375] netlink: 'syz.4.689': attribute type 4 has an invalid length. [ 124.562933][ T8375] netlink: 17 bytes leftover after parsing attributes in process `syz.4.689'. [ 124.662376][ T8378] netlink: 'syz.2.690': attribute type 12 has an invalid length. [ 124.771932][ T8377] netlink: 'syz.2.690': attribute type 12 has an invalid length. [ 125.132684][ T8401] netlink: 140 bytes leftover after parsing attributes in process `syz.4.695'. [ 125.557576][ T8422] hsr_slave_0: left promiscuous mode [ 125.575950][ T8422] hsr_slave_1: left promiscuous mode [ 125.698790][ T8431] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 125.725362][ T8435] netlink: 'syz.0.706': attribute type 1 has an invalid length. [ 125.733685][ T8435] netlink: 'syz.0.706': attribute type 4 has an invalid length. [ 125.747750][ T8435] netlink: 15363 bytes leftover after parsing attributes in process `syz.0.706'. [ 125.748055][ T8431] x_tables: ip_tables: osf match: only valid for protocol 6 [ 125.911618][ T8442] lo speed is unknown, defaulting to 1000 [ 126.067699][ T8447] netlink: 140 bytes leftover after parsing attributes in process `syz.2.710'. [ 126.339269][ T8460] netlink: 28 bytes leftover after parsing attributes in process `syz.4.715'. [ 126.348643][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.715'. [ 126.362808][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 126.373256][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.628914][ T8470] IPv6: sit1: Disabled Multicast RS [ 126.675779][ T8478] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 126.676556][ T8472] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 126.693906][ T8478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.733426][ T8472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.765566][ T8481] netlink: 40 bytes leftover after parsing attributes in process `syz.4.721'. [ 126.808299][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.722'. [ 126.838543][ T8483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.722'. [ 127.069029][ T8443] syzkaller1: entered promiscuous mode [ 127.093414][ T8443] syzkaller1: entered allmulticast mode [ 127.660459][ T8515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.776118][ T8522] netlink: 'syz.1.734': attribute type 39 has an invalid length. [ 127.845297][ T8523] netlink: 'syz.0.733': attribute type 1 has an invalid length. [ 127.870772][ T8522] bond0: (slave syz_tun): Releasing backup interface [ 129.513736][ T8609] __nla_validate_parse: 10 callbacks suppressed [ 129.513750][ T8609] netlink: 32 bytes leftover after parsing attributes in process `syz.2.758'. [ 129.797281][ T8618] netlink: 'syz.0.762': attribute type 10 has an invalid length. [ 129.830309][ T8618] team0: Device ipvlan1 failed to register rx_handler [ 129.890595][ T8625] xt_l2tp: v2 doesn't support IP mode [ 130.074769][ T8633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.767'. [ 130.100200][ T8637] netlink: 36 bytes leftover after parsing attributes in process `syz.2.768'. [ 130.105440][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.767'. [ 130.213720][ T8637] netlink: 'syz.2.768': attribute type 1 has an invalid length. [ 130.233664][ T8639] lo speed is unknown, defaulting to 1000 [ 130.241925][ T8642] netlink: 16 bytes leftover after parsing attributes in process `syz.0.767'. [ 130.441586][ T8654] netlink: 60 bytes leftover after parsing attributes in process `syz.0.773'. [ 130.500676][ T8656] netlink: 'syz.1.774': attribute type 29 has an invalid length. [ 130.525419][ T8656] netlink: 'syz.1.774': attribute type 29 has an invalid length. [ 130.568533][ T8656] netlink: 596 bytes leftover after parsing attributes in process `syz.1.774'. [ 130.693502][ T8660] netlink: 92 bytes leftover after parsing attributes in process `syz.1.775'. [ 130.705413][ T8660] netlink: 16 bytes leftover after parsing attributes in process `syz.1.775'. [ 130.887433][ T8668] netlink: 28 bytes leftover after parsing attributes in process `syz.4.778'. [ 130.896891][ T8668] netlink: 'syz.4.778': attribute type 7 has an invalid length. [ 130.905187][ T8668] netlink: 'syz.4.778': attribute type 8 has an invalid length. [ 130.924701][ T8634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.079939][ T8668] netlink: 'syz.4.778': attribute type 7 has an invalid length. [ 131.092085][ T8671] netlink: 'syz.1.779': attribute type 3 has an invalid length. [ 131.108555][ T8668] netlink: 'syz.4.778': attribute type 8 has an invalid length. [ 131.386993][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 131.602909][ T8693] lo speed is unknown, defaulting to 1000 [ 131.888151][ T8705] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 132.075617][ T8708] sctp: [Deprecated]: syz.2.792 (pid 8708) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.075617][ T8708] Use struct sctp_sack_info instead [ 132.321165][ T8716] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.341631][ T8722] Cannot find add_set index 2 as target [ 132.367504][ T57] IPVS: starting estimator thread 0... [ 132.464806][ T8729] IPVS: using max 23 ests per chain, 55200 per kthread [ 132.794214][ T8752] tipc: Started in network mode [ 132.799243][ T8752] tipc: Node identity ac14140f, cluster identity 4711 [ 132.855618][ T8752] tipc: New replicast peer: 255.255.255.255 [ 132.879250][ T8752] tipc: Enabled bearer , priority 10 [ 133.426857][ T8777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.494976][ T8777] batadv_slave_1: entered promiscuous mode [ 133.619344][ T8787] macvlan1: entered promiscuous mode [ 133.675257][ T8787] team0: Port device macvlan1 added [ 133.745786][ T8794] geneve2: entered promiscuous mode [ 133.752348][ T8794] geneve2: entered allmulticast mode [ 133.852257][ T8799] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 133.902143][ T8799] openvswitch: netlink: EtherType f0 is less than min 600 [ 133.975610][ T8] tipc: Node number set to 2886997007 [ 134.280549][ T8831] netlink: 'syz.2.823': attribute type 3 has an invalid length. [ 134.589186][ T8830] __nla_validate_parse: 13 callbacks suppressed [ 134.589205][ T8830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.824'. [ 134.970229][ T8873] netlink: 'syz.2.836': attribute type 13 has an invalid length. [ 134.989181][ T8874] netlink: 'syz.2.836': attribute type 13 has an invalid length. [ 134.998833][ T8873] netlink: 16 bytes leftover after parsing attributes in process `syz.2.836'. [ 135.018708][ T8874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.836'. [ 135.038057][ T8873] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 135.085126][ T8874] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 135.463537][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.841'. [ 135.514016][ T8908] lo speed is unknown, defaulting to 1000 [ 135.662769][ T8920] netlink: 76 bytes leftover after parsing attributes in process `syz.2.847'. [ 136.116926][ T8945] netlink: 'syz.2.853': attribute type 10 has an invalid length. [ 136.135705][ T8945] team0: Device veth1_macvtap failed to register rx_handler [ 136.168222][ T8943] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 136.234963][ T8943] netlink: 68 bytes leftover after parsing attributes in process `syz.0.852'. [ 136.464014][ T8958] netlink: 140 bytes leftover after parsing attributes in process `syz.3.856'. [ 136.671651][ T8972] netlink: 16 bytes leftover after parsing attributes in process `syz.1.860'. [ 137.060864][ T8997] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.865'. [ 137.061749][ T8994] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.865'. [ 137.312257][ T9006] tipc: Started in network mode [ 137.317443][ T9006] tipc: Node identity 52a01815a1be, cluster identity 4711 [ 137.348967][ T9006] tipc: Enabled bearer , priority 0 [ 137.379659][ T9011] vlan3: entered allmulticast mode [ 137.403656][ T9011] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 137.445978][ T9011] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 137.488447][ T9013] syzkaller0: entered promiscuous mode [ 137.494650][ T9013] syzkaller0: entered allmulticast mode [ 137.508777][ T9019] tipc: Resetting bearer [ 137.538809][ T9006] tipc: Resetting bearer [ 137.573959][ T9006] tipc: Resetting bearer [ 137.695153][ T9006] tipc: Disabling bearer [ 137.708365][ T9029] netlink: 'syz.3.876': attribute type 4 has an invalid length. [ 137.723390][ T9031] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 137.744087][ T9031] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 137.752919][ T9031] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 137.764559][ T9031] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 137.849310][ T9041] lo speed is unknown, defaulting to 1000 [ 137.997160][ T9053] netlink: 'syz.0.882': attribute type 1 has an invalid length. [ 138.026843][ T9053] NCSI netlink: No device for ifindex 458760 [ 138.045292][ T9055] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 138.075277][ T9052] Illegal XDP return value 4294967274 on prog (id 388) dev N/A, expect packet loss! [ 138.303502][ T9067] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 138.572749][ T9083] xt_time: unknown flags 0x4 [ 138.611697][ T9089] xt_time: unknown flags 0x4 [ 138.658816][ T9085] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 139.173730][ T9109] netlink: 'syz.4.897': attribute type 4 has an invalid length. [ 139.435871][ T9117] team0: Port device bridge3 added [ 139.602290][ T9119] __nla_validate_parse: 7 callbacks suppressed [ 139.602308][ T9119] netlink: 72 bytes leftover after parsing attributes in process `syz.4.900'. [ 139.644448][ T9119] netlink: 452 bytes leftover after parsing attributes in process `syz.4.900'. [ 139.658739][ T9120] netlink: 56 bytes leftover after parsing attributes in process `syz.4.900'. [ 139.921254][ T9139] netlink: 40 bytes leftover after parsing attributes in process `syz.0.905'. [ 140.060519][ T9151] lo speed is unknown, defaulting to 1000 [ 140.085503][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'. [ 140.174612][ T9160] veth0_virt_wifi: entered promiscuous mode [ 140.200746][ T9160] veth0_virt_wifi: left promiscuous mode [ 140.289315][ T9163] netlink: 'syz.1.914': attribute type 1 has an invalid length. [ 140.406532][ T9163] bond1: (slave gretap1): making interface the new active one [ 140.427293][ T9163] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 140.584891][ T9179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.918'. [ 140.664120][ T53] Bluetooth: hci3: command 0x0401 tx timeout [ 140.943452][ T9196] netlink: 40 bytes leftover after parsing attributes in process `syz.4.923'. [ 141.915180][ T9242] netlink: 'syz.2.937': attribute type 10 has an invalid length. [ 141.923670][ T9242] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.931977][ T9242] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.971470][ T9242] bridge0: left promiscuous mode [ 141.997026][ T9242] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.004243][ T9242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.011714][ T9242] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.020069][ T9242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.032026][ T9242] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 142.053089][ T9247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.939'. [ 142.263699][ T9252] ip6gretap0: entered promiscuous mode [ 142.285092][ T9252] batadv_slave_0: entered promiscuous mode [ 142.303438][ T9256] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 142.326116][ T9256] netlink: 16 bytes leftover after parsing attributes in process `syz.1.943'. [ 142.343148][ T9256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.943'. [ 142.631606][ T9281] netlink: 'syz.2.952': attribute type 1 has an invalid length. [ 142.684453][ T9287] xt_hashlimit: size too large, truncated to 1048576 [ 142.691443][ T9287] xt_hashlimit: max too large, truncated to 1048576 [ 142.700611][ T9280] lo speed is unknown, defaulting to 1000 [ 142.728960][ T9287] xt_hashlimit: overflow, try lower: 0/0 [ 142.767200][ T9278] netlink: 'syz.0.951': attribute type 10 has an invalid length. [ 142.825227][ T9278] bond0: (slave team0): Releasing backup interface [ 142.844173][ T9278] batman_adv: batadv0: Adding interface: team0 [ 142.850456][ T9278] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.878582][ T9278] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 143.344815][ T9316] SET target dimension over the limit! [ 143.384190][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 143.426079][ T9314] tun0: tun_chr_ioctl cmd 1074025675 [ 143.431430][ T9314] tun0: persist enabled [ 143.445611][ T9314] tun0: tun_chr_ioctl cmd 1074025675 [ 143.451126][ T9314] tun0: persist enabled [ 143.472140][ T9314] tun0: tun_chr_ioctl cmd 35636 [ 143.498180][ T9314] IPv6: sit1: Disabled Multicast RS [ 143.539368][ T9314] xt_recent: Unsupported userspace flags (00000042) [ 143.652744][ T9314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.681214][ T9329] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 143.734539][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 144.114521][ T9356] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (42) [ 144.500294][ T9370] gretap1: entered allmulticast mode [ 144.535212][ T9370] bridge0: port 2(gretap1) entered blocking state [ 144.554745][ T9370] bridge0: port 2(gretap1) entered disabled state [ 144.572497][ T9370] gretap1: entered promiscuous mode [ 144.779857][ T9370] bond0: (slave bond_slave_0): Releasing backup interface [ 144.850008][ T9370] bond0: (slave bond_slave_1): Releasing backup interface [ 144.898491][ T9370] team0: Port device team_slave_0 removed [ 144.915605][ T9370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.923115][ T9370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.938373][ T9370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.946361][ T9370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.958869][ T9370] bond0: (slave bond1): Releasing backup interface [ 144.972524][ T9370] vlan2: left allmulticast mode [ 144.981975][ T9370] syz_tun: left allmulticast mode [ 144.991816][ T9370] vlan2: left promiscuous mode [ 144.996919][ T9370] syz_tun: left promiscuous mode [ 145.002104][ T9370] bridge0: port 1(vlan2) entered disabled state [ 145.011432][ T9370] gretap1: left promiscuous mode [ 145.018106][ T9370] bridge0: port 2(gretap1) entered disabled state [ 145.078781][ T9402] netlink: 'syz.0.985': attribute type 3 has an invalid length. [ 145.436029][ T9426] netlink: zone id is out of range [ 145.444344][ T9426] netlink: zone id is out of range [ 145.449507][ T9426] netlink: zone id is out of range [ 145.465533][ T9426] netlink: zone id is out of range [ 145.470694][ T9426] netlink: zone id is out of range [ 145.484137][ T9426] netlink: zone id is out of range [ 145.489302][ T9426] netlink: zone id is out of range [ 145.518944][ T9426] netlink: set zone limit has 4 unknown bytes [ 145.527354][ T9430] : renamed from bond0 (while UP) [ 145.539901][ T9421] __nla_validate_parse: 6 callbacks suppressed [ 145.539920][ T9421] netlink: 40 bytes leftover after parsing attributes in process `syz.4.992'. [ 145.543646][ T9432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.995'. [ 145.546411][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.991'. [ 145.778667][ T9435] x_tables: duplicate underflow at hook 1 [ 145.915465][ T9457] netlink: 'syz.4.1002': attribute type 1 has an invalid length. [ 145.951762][ T9463] FAULT_INJECTION: forcing a failure. [ 145.951762][ T9463] name failslab, interval 1, probability 0, space 0, times 0 [ 145.970300][ T9463] CPU: 0 UID: 0 PID: 9463 Comm: syz.3.1005 Not tainted 6.13.0-rc2-syzkaller-00485-gc1bad69f8baf #0 [ 145.981036][ T9463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 145.991132][ T9463] Call Trace: [ 145.994437][ T9463] [ 145.997394][ T9463] dump_stack_lvl+0x241/0x360 [ 146.002131][ T9463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.007359][ T9463] ? __pfx__printk+0x10/0x10 [ 146.011978][ T9463] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 146.017997][ T9463] ? __pfx___might_resched+0x10/0x10 [ 146.023308][ T9463] should_fail_ex+0x3b0/0x4e0 [ 146.028032][ T9463] should_failslab+0xac/0x100 [ 146.032745][ T9463] kmem_cache_alloc_node_noprof+0x77/0x380 [ 146.038581][ T9463] ? __alloc_skb+0x1c3/0x440 [ 146.043203][ T9463] __alloc_skb+0x1c3/0x440 [ 146.047645][ T9463] ? __pfx___alloc_skb+0x10/0x10 [ 146.052610][ T9463] ? __pfx___might_resched+0x10/0x10 [ 146.057930][ T9463] alloc_skb_with_frags+0xc3/0x820 [ 146.063083][ T9463] sock_alloc_send_pskb+0x91a/0xa60 [ 146.068324][ T9463] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 146.074080][ T9463] ? __lock_acquire+0x1397/0x2100 [ 146.079142][ T9463] ? dev_get_by_index+0x23/0x2d0 [ 146.084118][ T9463] packet_sendmsg+0x4080/0x6c30 [ 146.089013][ T9463] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 146.094427][ T9463] ? __pfx___might_resched+0x10/0x10 [ 146.099766][ T9463] ? __pfx_packet_sendmsg+0x10/0x10 [ 146.104994][ T9463] ? aa_sk_perm+0x96d/0xab0 [ 146.109540][ T9463] ? __pfx_aa_sk_perm+0x10/0x10 [ 146.114426][ T9463] ? __fget_files+0x2a/0x410 [ 146.119045][ T9463] ? aa_sock_msg_perm+0x91/0x160 [ 146.124031][ T9463] ? __pfx_packet_sendmsg+0x10/0x10 [ 146.129257][ T9463] __sock_sendmsg+0x221/0x270 [ 146.133968][ T9463] __sys_sendto+0x363/0x4c0 [ 146.138508][ T9463] ? __pfx___sys_sendto+0x10/0x10 [ 146.143552][ T9463] ? __mutex_unlock_slowpath+0x21e/0x790 [ 146.149220][ T9463] ? __fget_files+0x2a/0x410 [ 146.153856][ T9463] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 146.159855][ T9463] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 146.166185][ T9463] __x64_sys_sendto+0xde/0x100 [ 146.170971][ T9463] do_syscall_64+0xf3/0x230 [ 146.175509][ T9463] ? clear_bhb_loop+0x35/0x90 [ 146.180222][ T9463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.186153][ T9463] RIP: 0033:0x7f84ae185d29 [ 146.190598][ T9463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.210238][ T9463] RSP: 002b:00007f84aefcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 146.218719][ T9463] RAX: ffffffffffffffda RBX: 00007f84ae375fa0 RCX: 00007f84ae185d29 [ 146.226759][ T9463] RDX: 00000000000100a6 RSI: 0000000020000180 RDI: 0000000000000008 [ 146.234774][ T9463] RBP: 00007f84aefcf090 R08: 0000000020000140 R09: 0000000000000014 [ 146.242790][ T9463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.250794][ T9463] R13: 0000000000000000 R14: 00007f84ae375fa0 R15: 00007ffec888f068 [ 146.258786][ T9463] [ 146.439069][ T9480] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1008'. [ 146.649261][ T9489] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1009'. [ 146.824658][ T9502] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1014'. [ 147.032452][ T9512] lo: entered allmulticast mode [ 147.093004][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1019'. [ 147.117412][ T9511] lo: left allmulticast mode [ 147.137816][ T9520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.410039][ T9528] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 147.444944][ T9539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.712166][ T9545] Cannot find del_set index 1 as target [ 147.967830][ T9567] netlink: 'syz.0.1034': attribute type 1 has an invalid length. [ 147.976073][ T9567] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1034'. [ 148.157427][ T9582] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1036'. [ 148.278164][ T9587] netlink: 'syz.4.1038': attribute type 1 has an invalid length. [ 148.313221][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1038'. [ 148.395057][ T9582] batman_adv: batadv0: Removing interface: team0 [ 148.438090][ T9582] bridge_slave_0: left allmulticast mode [ 148.462914][ T9582] bridge_slave_0: left promiscuous mode [ 148.480519][ T9582] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.514198][ T9582] bridge_slave_1: left allmulticast mode [ 148.520014][ T9582] bridge_slave_1: left promiscuous mode [ 148.528217][ T9582] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.553632][ T9582] : (slave bond_slave_0): Releasing backup interface [ 148.577112][ T9582] : (slave bond_slave_1): Releasing backup interface [ 148.632825][ T9582] team0: Port device team_slave_0 removed [ 148.705950][ T9582] team0: Port device team_slave_1 removed [ 148.712364][ T9582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.722114][ T9582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.746024][ T9582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.753476][ T9582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.784812][ T9582] team0: Port device bridge3 removed [ 148.829508][ T9614] erspan1: entered promiscuous mode [ 148.839472][ T9614] erspan1: entered allmulticast mode [ 148.994916][ T9627] netlink: 'syz.1.1049': attribute type 12 has an invalid length. [ 149.002787][ T9627] netlink: 'syz.1.1049': attribute type 29 has an invalid length. [ 149.179674][ T9634] netlink: 'syz.0.1052': attribute type 22 has an invalid length. [ 149.361806][ T9645] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 149.478285][ T9654] netlink: 'syz.2.1059': attribute type 10 has an invalid length. [ 149.495830][ T9654] syz_tun: entered promiscuous mode [ 149.534703][ T9654] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 150.024999][ T9690] syzkaller0: entered promiscuous mode [ 150.042259][ T9690] syzkaller0: entered allmulticast mode [ 150.299520][ T9700] lo speed is unknown, defaulting to 1000 [ 150.514728][ T9716] netlink: 'syz.4.1075': attribute type 32 has an invalid length. [ 150.795586][ T9729] lo: MTU too low for tipc bearer [ 150.812098][ T9729] tipc: Enabling of bearer rejected, failed to enable media [ 150.818462][ T9730] __nla_validate_parse: 9 callbacks suppressed [ 150.818480][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1078'. [ 150.964352][ T9735] nbd: must specify at least one socket [ 151.040471][ T9739] bond0: option mode: unable to set because the bond device has slaves [ 151.085559][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1081'. [ 151.125216][ T9743] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1083'. [ 151.178663][ T9743] vlan3: entered promiscuous mode [ 151.191285][ T9743] bond0: entered promiscuous mode [ 151.207802][ T9743] vlan3: entered allmulticast mode [ 151.236419][ T9743] bond0: entered allmulticast mode [ 151.277639][ T9743] bond0: left allmulticast mode [ 151.282680][ T9743] bond0: left promiscuous mode [ 151.294472][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1086'. [ 152.178095][ T9792] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1097'. [ 152.437592][ T9803] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1098'. [ 152.473215][ T9790] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1098'. [ 153.117597][ T9827] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1108'. [ 153.423419][ T9838] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 153.524903][ T9841] lo speed is unknown, defaulting to 1000 [ 153.722269][ T9851] Bluetooth: MGMT ver 1.23 [ 153.764031][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1116'. [ 153.892341][ T9857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1117'. [ 154.741710][ T9893] x_tables: duplicate underflow at hook 1 [ 155.329004][ T9917] netlink: 'syz.4.1138': attribute type 10 has an invalid length. [ 155.557702][ T7205] smc: removing ib device syz2 [ 155.814133][ T5911] ================================================================== [ 155.822256][ T5911] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 155.831061][ T5911] Read of size 8 at addr ffff8880600d22e8 by task kworker/1:5/5911 [ 155.839001][ T5911] [ 155.841343][ T5911] CPU: 1 UID: 0 PID: 5911 Comm: kworker/1:5 Not tainted 6.13.0-rc2-syzkaller-00485-gc1bad69f8baf #0 [ 155.852124][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 155.862291][ T5911] Workqueue: events smc_ib_port_event_work [ 155.868140][ T5911] Call Trace: [ 155.871444][ T5911] [ 155.874401][ T5911] dump_stack_lvl+0x241/0x360 [ 155.879107][ T5911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.884337][ T5911] ? __pfx__printk+0x10/0x10 [ 155.888963][ T5911] ? _printk+0xd5/0x120 [ 155.893146][ T5911] ? __virt_addr_valid+0x183/0x530 [ 155.898288][ T5911] ? __virt_addr_valid+0x183/0x530 [ 155.903521][ T5911] print_report+0x169/0x550 [ 155.908148][ T5911] ? __virt_addr_valid+0x183/0x530 [ 155.913280][ T5911] ? __virt_addr_valid+0x183/0x530 [ 155.918574][ T5911] ? __virt_addr_valid+0x45f/0x530 [ 155.923688][ T5911] ? __phys_addr+0xba/0x170 [ 155.928284][ T5911] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 155.934271][ T5911] kasan_report+0x143/0x180 [ 155.938776][ T5911] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 155.944925][ T5911] __ethtool_get_link_ksettings+0x6e/0x190 [ 155.950728][ T5911] ib_get_eth_speed+0x160/0x800 [ 155.955577][ T5911] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 155.961033][ T5911] ? rxe_query_port+0x4f/0x260 [ 155.965796][ T5911] rxe_query_port+0x76/0x260 [ 155.970392][ T5911] ib_query_port+0x166/0x7d0 [ 155.975002][ T5911] smc_ib_port_event_work+0x14e/0xa50 [ 155.980378][ T5911] ? process_scheduled_works+0x976/0x1840 [ 155.986787][ T5911] process_scheduled_works+0xa66/0x1840 [ 155.992452][ T5911] ? __pfx_process_scheduled_works+0x10/0x10 [ 155.998521][ T5911] ? assign_work+0x364/0x3d0 [ 156.003212][ T5911] worker_thread+0x870/0xd30 [ 156.007800][ T5911] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 156.013704][ T5911] ? __kthread_parkme+0x169/0x1d0 [ 156.018732][ T5911] ? __pfx_worker_thread+0x10/0x10 [ 156.023838][ T5911] kthread+0x2f0/0x390 [ 156.027921][ T5911] ? __pfx_worker_thread+0x10/0x10 [ 156.033044][ T5911] ? __pfx_kthread+0x10/0x10 [ 156.037649][ T5911] ret_from_fork+0x4b/0x80 [ 156.042075][ T5911] ? __pfx_kthread+0x10/0x10 [ 156.046660][ T5911] ret_from_fork_asm+0x1a/0x30 [ 156.051423][ T5911] [ 156.054433][ T5911] [ 156.056743][ T5911] Allocated by task 5827: [ 156.061063][ T5911] kasan_save_track+0x3f/0x80 [ 156.065733][ T5911] __kasan_kmalloc+0x98/0xb0 [ 156.070321][ T5911] __kmalloc_node_noprof+0x290/0x4d0 [ 156.075600][ T5911] __kvmalloc_node_noprof+0x72/0x190 [ 156.080873][ T5911] alloc_netdev_mqs+0xa4/0x1080 [ 156.085732][ T5911] rtnl_create_link+0x2f9/0xc20 [ 156.090574][ T5911] rtnl_newlink_create+0x210/0xa40 [ 156.095681][ T5911] rtnl_newlink+0x160d/0x2150 [ 156.100354][ T5911] rtnetlink_rcv_msg+0x791/0xcf0 [ 156.105286][ T5911] netlink_rcv_skb+0x1e3/0x430 [ 156.110044][ T5911] netlink_unicast+0x7f6/0x990 [ 156.114807][ T5911] netlink_sendmsg+0x8e4/0xcb0 [ 156.119568][ T5911] __sock_sendmsg+0x221/0x270 [ 156.124243][ T5911] __sys_sendto+0x363/0x4c0 [ 156.128737][ T5911] __x64_sys_sendto+0xde/0x100 [ 156.133490][ T5911] do_syscall_64+0xf3/0x230 [ 156.137988][ T5911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.143873][ T5911] [ 156.146185][ T5911] Freed by task 9917: [ 156.150149][ T5911] kasan_save_track+0x3f/0x80 [ 156.154816][ T5911] kasan_save_free_info+0x40/0x50 [ 156.159834][ T5911] __kasan_slab_free+0x59/0x70 [ 156.164587][ T5911] kfree+0x196/0x430 [ 156.168474][ T5911] device_release+0x99/0x1c0 [ 156.173053][ T5911] kobject_put+0x22f/0x480 [ 156.177460][ T5911] netdev_run_todo+0xe79/0x1000 [ 156.182316][ T5911] rtnl_dellink+0x760/0x8d0 [ 156.186812][ T5911] rtnetlink_rcv_msg+0x791/0xcf0 [ 156.191740][ T5911] netlink_rcv_skb+0x1e3/0x430 [ 156.196495][ T5911] netlink_unicast+0x7f6/0x990 [ 156.201252][ T5911] netlink_sendmsg+0x8e4/0xcb0 [ 156.206003][ T5911] __sock_sendmsg+0x221/0x270 [ 156.210679][ T5911] ____sys_sendmsg+0x52a/0x7e0 [ 156.215432][ T5911] __sys_sendmsg+0x269/0x350 [ 156.220039][ T5911] do_syscall_64+0xf3/0x230 [ 156.224547][ T5911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.230438][ T5911] [ 156.232756][ T5911] The buggy address belongs to the object at ffff8880600d2000 [ 156.232756][ T5911] which belongs to the cache kmalloc-cg-4k of size 4096 [ 156.247074][ T5911] The buggy address is located 744 bytes inside of [ 156.247074][ T5911] freed 4096-byte region [ffff8880600d2000, ffff8880600d3000) [ 156.261043][ T5911] [ 156.263371][ T5911] The buggy address belongs to the physical page: [ 156.269780][ T5911] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x600d0 [ 156.278533][ T5911] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 156.287022][ T5911] memcg:ffff888027235641 [ 156.291252][ T5911] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 156.299225][ T5911] page_type: f5(slab) [ 156.303194][ T5911] raw: 00fff00000000040 ffff88801ac4f500 0000000000000000 dead000000000001 [ 156.311765][ T5911] raw: 0000000000000000 0000000000040004 00000001f5000000 ffff888027235641 [ 156.320340][ T5911] head: 00fff00000000040 ffff88801ac4f500 0000000000000000 dead000000000001 [ 156.329000][ T5911] head: 0000000000000000 0000000000040004 00000001f5000000 ffff888027235641 [ 156.337665][ T5911] head: 00fff00000000003 ffffea0001803401 ffffffffffffffff 0000000000000000 [ 156.347199][ T5911] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 156.355862][ T5911] page dumped because: kasan: bad access detected [ 156.362270][ T5911] page_owner tracks the page as allocated [ 156.367971][ T5911] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5835, tgid 5835 (syz-executor), ts 61185864884, free_ts 15473712810 [ 156.389334][ T5911] post_alloc_hook+0x1f3/0x230 [ 156.394100][ T5911] get_page_from_freelist+0x365c/0x37a0 [ 156.399635][ T5911] __alloc_pages_noprof+0x292/0x710 [ 156.404821][ T5911] alloc_pages_mpol_noprof+0x3e8/0x680 [ 156.410279][ T5911] alloc_slab_page+0x6a/0x110 [ 156.414944][ T5911] allocate_slab+0x5a/0x2b0 [ 156.419438][ T5911] ___slab_alloc+0xc27/0x14a0 [ 156.424111][ T5911] __slab_alloc+0x58/0xa0 [ 156.428435][ T5911] __kmalloc_noprof+0x2e6/0x4c0 [ 156.433279][ T5911] __register_sysctl_table+0xd4/0x1430 [ 156.438729][ T5911] __addrconf_sysctl_register+0x234/0x3a0 [ 156.444442][ T5911] addrconf_sysctl_register+0x167/0x1c0 [ 156.449978][ T5911] ipv6_add_dev+0xcf6/0x1220 [ 156.454561][ T5911] addrconf_notify+0x6a7/0x1020 [ 156.459401][ T5911] notifier_call_chain+0x1a5/0x3f0 [ 156.464501][ T5911] register_netdevice+0x167f/0x1b00 [ 156.469692][ T5911] page last free pid 1 tgid 1 stack trace: [ 156.475482][ T5911] free_unref_page+0xd3f/0x1010 [ 156.480322][ T5911] free_contig_range+0x14c/0x430 [ 156.485258][ T5911] destroy_args+0x92/0x910 [ 156.489665][ T5911] debug_vm_pgtable+0x4be/0x550 [ 156.494508][ T5911] do_one_initcall+0x248/0x870 [ 156.499271][ T5911] do_initcall_level+0x157/0x210 [ 156.504208][ T5911] do_initcalls+0x3f/0x80 [ 156.508547][ T5911] kernel_init_freeable+0x435/0x5d0 [ 156.513741][ T5911] kernel_init+0x1d/0x2b0 [ 156.518065][ T5911] ret_from_fork+0x4b/0x80 [ 156.522560][ T5911] ret_from_fork_asm+0x1a/0x30 [ 156.527313][ T5911] [ 156.529624][ T5911] Memory state around the buggy address: [ 156.535242][ T5911] ffff8880600d2180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.543293][ T5911] ffff8880600d2200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.551435][ T5911] >ffff8880600d2280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.559496][ T5911] ^ [ 156.566940][ T5911] ffff8880600d2300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.574992][ T5911] ffff8880600d2380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.583049][ T5911] ================================================================== [ 156.659071][ T5911] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 156.666317][ T5911] CPU: 1 UID: 0 PID: 5911 Comm: kworker/1:5 Not tainted 6.13.0-rc2-syzkaller-00485-gc1bad69f8baf #0 [ 156.677100][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 156.687182][ T5911] Workqueue: events smc_ib_port_event_work [ 156.693035][ T5911] Call Trace: [ 156.696326][ T5911] [ 156.699273][ T5911] dump_stack_lvl+0x241/0x360 [ 156.703974][ T5911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.709191][ T5911] ? __pfx__printk+0x10/0x10 [ 156.713782][ T5911] ? preempt_schedule+0xe1/0xf0 [ 156.718651][ T5911] ? vscnprintf+0x5d/0x90 [ 156.722987][ T5911] panic+0x349/0x880 [ 156.726878][ T5911] ? check_panic_on_warn+0x21/0xb0 [ 156.731990][ T5911] ? __pfx_panic+0x10/0x10 [ 156.736410][ T5911] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 156.742396][ T5911] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 156.748725][ T5911] ? print_report+0x502/0x550 [ 156.753401][ T5911] check_panic_on_warn+0x86/0xb0 [ 156.758334][ T5911] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 156.764313][ T5911] end_report+0x77/0x160 [ 156.768552][ T5911] kasan_report+0x154/0x180 [ 156.773050][ T5911] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 156.779028][ T5911] __ethtool_get_link_ksettings+0x6e/0x190 [ 156.785362][ T5911] ib_get_eth_speed+0x160/0x800 [ 156.790211][ T5911] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 156.795674][ T5911] ? rxe_query_port+0x4f/0x260 [ 156.800438][ T5911] rxe_query_port+0x76/0x260 [ 156.805026][ T5911] ib_query_port+0x166/0x7d0 [ 156.809614][ T5911] smc_ib_port_event_work+0x14e/0xa50 [ 156.814986][ T5911] ? process_scheduled_works+0x976/0x1840 [ 156.820701][ T5911] process_scheduled_works+0xa66/0x1840 [ 156.826344][ T5911] ? __pfx_process_scheduled_works+0x10/0x10 [ 156.832406][ T5911] ? assign_work+0x364/0x3d0 [ 156.837456][ T5911] worker_thread+0x870/0xd30 [ 156.842063][ T5911] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 156.847970][ T5911] ? __kthread_parkme+0x169/0x1d0 [ 156.852997][ T5911] ? __pfx_worker_thread+0x10/0x10 [ 156.858124][ T5911] kthread+0x2f0/0x390 [ 156.862190][ T5911] ? __pfx_worker_thread+0x10/0x10 [ 156.867322][ T5911] ? __pfx_kthread+0x10/0x10 [ 156.871906][ T5911] ret_from_fork+0x4b/0x80 [ 156.876316][ T5911] ? __pfx_kthread+0x10/0x10 [ 156.880900][ T5911] ret_from_fork_asm+0x1a/0x30 [ 156.885658][ T5911] [ 156.888930][ T5911] Kernel Offset: disabled [ 156.893263][ T5911] Rebooting in 86400 seconds..