last executing test programs: 2m44.432553697s ago: executing program 3 (id=325): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000063119d000000000007000000200000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f00000003c0)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x26, 0x200, 0x70bd28, 0x25dfdbfd, {0x16}, [@typed={0x8, 0x142, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4040) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, &(0x7f00000004c0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000540)={r2, 0x2c, &(0x7f0000000500)=[@in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0xf}, 0x1}, @in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000580)=0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, @in6={0xa, 0x4e20, 0x0, @private0}]}, &(0x7f0000000180)=0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x4000004) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000780)=[{&(0x7f0000000640)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), r6) 2m43.816496219s ago: executing program 1 (id=336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300f0000100001f9ff9c2d2f308250c516365075", @ANYRESDEC, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000e40)={0x9c, r3, 0x405, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x3}, {0x0, 0x6}, {0x7}}}, 0x24}}, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r9, 0x110, 0x5, 0x0, 0x0) 2m43.504418048s ago: executing program 3 (id=340): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='br_fdb_add\x00', r1}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0, r2}, 0x18) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) (async) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x7}, 0x80) recvmmsg(r6, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0xffffffffffffff6e, &(0x7f0000000640)=[{&(0x7f0000000e40)=""/91, 0x5b}, {&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/240, 0xf0}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000ec0)=""/93, 0x5d}, {&(0x7f0000000540)=""/168, 0xa8}, {&(0x7f00000001c0)=""/49, 0x31}], 0x8, &(0x7f00000006c0)=""/214, 0xd6}, 0x9}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/196, 0xc4}, {&(0x7f00000008c0)=""/213, 0xd5}, {&(0x7f00000009c0)=""/249, 0xf9}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x4, &(0x7f0000000b00)=""/28, 0x1e}, 0x7fffffff}, {{&(0x7f0000000b40)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/186, 0xba}], 0x2, &(0x7f0000000cc0)=""/109, 0xfffffede}, 0x8}], 0x4, 0x40000026, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f00000003c0)={{r7}, 0x0, 0x0}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076"], 0xe8}}, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38) sendmsg$inet(r8, &(0x7f00000003c0)={0x0, 0x100000035, 0x0, 0x0, &(0x7f0000000800)=[@ip_tos_int={{0xfffffffffffffdc1, 0x11a}}], 0x18}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) 2m43.473961s ago: executing program 1 (id=342): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r2, 0x11, 0x4, 0x0, 0x1000000000000) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r1}) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000500)={{0x2f, @local, 0x4e20, 0x0, 'fo\x00', 0x18, 0x0, 0x7}, {@remote, 0x4e23, 0x4, 0x9, 0x1, 0x5}}, 0x44) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r7, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x604ab000) sendmmsg$inet6(r7, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2ec15575afe867fdba546430ca1a47eb15c48f98e1e25b4e1b179f8897fc1fbbfc164b92054405964c6c9d2f2ca1430c84c3ceb4810d0311a5c28fa9c1eb7511923f6ae58949e6b92e94d667097384d0a22e25eb0a373d318f0a", 0x5a}, {&(0x7f0000000380)="63ce2e88626ff019a592a1faaa30606614baeaef770465257840ae8f02ce892875a9f6e5f40cd87b765acf2da11a69bb49199b4edf44d31a3c9d73f67dc2d7c7453d1dc43b8b74d96e30f7b67032c3611f017ebd3962c42f64174f91f244d50f57873444282103a1ee59b8fb29c92b148600ea95964445f7a6180d38e7834d0732189b9263648675d4332c8253af6aaef3fe5d2dacfef7e832f5efc1b7a32b6332ae5ddc7c943cef2f1c9d9187347f285bfe5577b8caa751a2fc09349166bc23453dbfacd515ac06ddfbc2118d3b887ef740f6ea6a1e81d4642d3f", 0xdb}, {&(0x7f0000002380)="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", 0xecb}], 0x3}}], 0x1, 0x880) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000002c0)=0x40) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) sendmsg$IEEE802154_START_REQ(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xfff}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r8}, 0x8) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES8=r6], 0x60}}, 0x4004) 2m43.428048068s ago: executing program 2 (id=343): syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @link_local, @dev={0xac, 0x14, 0x14, 0x18}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x4}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x88}}, 0x1c, 0x0}, 0xb10) recvmmsg(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000000)=""/98, 0x62}, {&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f0000003800)=""/4100, 0x1004}, {&(0x7f0000000780)=""/214, 0xd6}, {&(0x7f0000000300)=""/111, 0x6f}, {&(0x7f0000000540)=""/68, 0x44}, {&(0x7f0000000980)=""/67, 0x43}, {&(0x7f0000000280)=""/106, 0x6a}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000140)=""/205, 0xcd}, {&(0x7f00000006c0)=""/122, 0x7a}], 0xb, 0x0, 0x0, 0xb00}}, {{0x0, 0x0, 0x0}, 0xa04}], 0x2, 0x2100, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000004000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000540)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) r8 = accept4(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000280)=0x80, 0x80800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl2\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0xf, 0x3, 0x8, 0xa, @loopback, @local, 0x10, 0x7, 0x5, 0x1}}) r10 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000100)={r10}) bind$xdp(r11, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r10) sendmsg$can_raw(r8, &(0x7f0000000500)={&(0x7f0000000400)={0x1d, r9}, 0x10, &(0x7f00000004c0)={&(0x7f0000000440)=@canfd={{0x2, 0x1}, 0x18, 0x3, 0x0, 0x0, "d76fbf1adb57269ce04c834784e12ecc68e07530dc60198ec66fe22e0c3080cf29bc7088492033a596f4139094c5c7b11a870197548d5188ae869acb2737df0d"}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40801) close(r7) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x240408c5) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x70}}, 0x0) 2m43.184659355s ago: executing program 2 (id=344): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.self_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x557081, 0x100408) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000400)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) pread64(r3, &(0x7f00000000c0)=""/244, 0xf4, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, @in6={0xa, 0x4e20, 0x5, @private1, 0x3}, @in6={0xa, 0x4e21, 0x401, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}], 0x48) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)="700c62c6", 0x4}], 0x1}, 0x4000810) 2m43.184120467s ago: executing program 3 (id=345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xa, 0xfff3}, {0x0, 0xfff1}, {0x0, 0x7}}, [{0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000094}, 0x2404c010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13}}) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r4, @ANYRESOCT=0x0, @ANYRES8=r4, @ANYRES32=r4, @ANYBLOB="3a838e5c26a94fa08a0f934bdd78506e39449d6a689007d068eeefec9a9b25625bd946b2fff7913f177441585499a69a191a1983fb8b121c25fa05f536192a72baba28425202e68488448a5994af71d8283483924ab65708bb9e24ab5c3cd5c4c3659c686c61fd8a700600d72a3d4eaa20781eadf3670d59944f69e814cf9b002ff18e306f945efa2edfa0edd7642f8ff9cc6eae0bab8f7b58ea8602b85854e7e658f8520624db0243594448a8", @ANYRES16=r4, @ANYRESHEX=r5, @ANYRESDEC=r4, @ANYRESHEX=r5, @ANYRESDEC=r5], 0x154}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m43.164248891s ago: executing program 1 (id=346): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x24000090) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x80, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0xff}}]}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 2m43.064914869s ago: executing program 2 (id=347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x20, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 2m43.002536131s ago: executing program 1 (id=349): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) syz_emit_ethernet(0x11dc0, &(0x7f0000000d40)={@multicast, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "98ce9c", 0x10f4, 0x6, 0x1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x3b}, @hopopts={0x2b, 0x8, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x13}, @enc_lim={0x4, 0x1, 0x94}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x20, {0x3, 0x6, 0xb2, 0x0, [0xc5c31af, 0x8001, 0x0]}}, @jumbo={0xc2, 0x4, 0x1}]}, @routing={0x3c, 0x0, 0x1, 0x94}, @srh={0xff, 0xe, 0x4, 0x7, 0xe, 0x40, 0xfed9, [@local, @dev={0xfe, 0x80, '\x00', 0x42}, @private1, @mcast2, @mcast1, @empty, @empty]}, @dstopts={0x33, 0xa, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x5, 0xc, [0x2, 0x9, 0xc8ac, 0x3c]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0xc, 0xc, [0x5, 0x4403aad3, 0x7, 0x4]}}, @pad1]}, @hopopts={0x9, 0x1d8, '\x00', [@jumbo={0xc2, 0x4, 0x42}, @generic={0x81}, @enc_lim, @calipso={0x7, 0x48, {0x1, 0x10, 0x6, 0x4, [0x8, 0x8000, 0x1, 0x1, 0x9, 0x80000000, 0x7, 0x0]}}, @ra={0x5, 0x2, 0x8000}, @jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x28, {0x3, 0x8, 0x81, 0x0, [0x9, 0x5, 0x40, 0x3]}}, @generic={0x7, 0xe38, "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"}]}], @name_distributor={{0xec, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x400, 0x0, 0x1, 0x6, 0x0, 0x2, 0x4e23, 0x4e22, 0x0, 0x3, 0x0, 0x0, 0x1}, [{0x3, 0xa, 0x4, 0x62, 0x7fff, 0x5, 0x6, 0x10001}, {0x4, 0x5, 0x40, 0x3, 0x8, 0x6, 0x0, 0x8}, {0x10000, 0x3, 0x0, 0xf8b0, 0x6, 0x400, 0x0, 0x6}, {0x4, 0x7, 0x0, 0x8, 0x10, 0x18000000, 0x6}, {0xf, 0x8001, 0x1, 0x80, 0x80000001, 0x800, 0x9, 0xfffff81}, {0x8, 0x8, 0x8, 0x400, 0x4cee1ac4, 0x1b97, 0x4, 0x1}, {0x1, 0x7, 0x2, 0x10001, 0xd3fb, 0x8, 0x1, 0x400}]}}}}}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, 0x0, &(0x7f0000000100)) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="0198000000000000200012800800010067726500030081000000068003003f000000000000000000"], 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x4, 0x6, @local}, 0x14) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) syz_emit_ethernet(0x11dc0, &(0x7f0000000d40)={@multicast, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "98ce9c", 0x10f4, 0x6, 0x1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x3b}, @hopopts={0x2b, 0x8, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x13}, @enc_lim={0x4, 0x1, 0x94}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x20, {0x3, 0x6, 0xb2, 0x0, [0xc5c31af, 0x8001, 0x0]}}, @jumbo={0xc2, 0x4, 0x1}]}, @routing={0x3c, 0x0, 0x1, 0x94}, @srh={0xff, 0xe, 0x4, 0x7, 0xe, 0x40, 0xfed9, [@local, @dev={0xfe, 0x80, '\x00', 0x42}, @private1, @mcast2, @mcast1, @empty, @empty]}, @dstopts={0x33, 0xa, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x5, 0xc, [0x2, 0x9, 0xc8ac, 0x3c]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0xc, 0xc, [0x5, 0x4403aad3, 0x7, 0x4]}}, @pad1]}, @hopopts={0x9, 0x1d8, '\x00', [@jumbo={0xc2, 0x4, 0x42}, @generic={0x81}, @enc_lim, @calipso={0x7, 0x48, {0x1, 0x10, 0x6, 0x4, [0x8, 0x8000, 0x1, 0x1, 0x9, 0x80000000, 0x7, 0x0]}}, @ra={0x5, 0x2, 0x8000}, @jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x28, {0x3, 0x8, 0x81, 0x0, [0x9, 0x5, 0x40, 0x3]}}, @generic={0x7, 0xe38, "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"}]}], @name_distributor={{0xec, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x400, 0x0, 0x1, 0x6, 0x0, 0x2, 0x4e23, 0x4e22, 0x0, 0x3, 0x0, 0x0, 0x1}, [{0x3, 0xa, 0x4, 0x62, 0x7fff, 0x5, 0x6, 0x10001}, {0x4, 0x5, 0x40, 0x3, 0x8, 0x6, 0x0, 0x8}, {0x10000, 0x3, 0x0, 0xf8b0, 0x6, 0x400, 0x0, 0x6}, {0x4, 0x7, 0x0, 0x8, 0x10, 0x18000000, 0x6}, {0xf, 0x8001, 0x1, 0x80, 0x80000001, 0x800, 0x9, 0xfffff81}, {0x8, 0x8, 0x8, 0x400, 0x4cee1ac4, 0x1b97, 0x4, 0x1}, {0x1, 0x7, 0x2, 0x10001, 0xd3fb, 0x8, 0x1, 0x400}]}}}}}}, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, 0x0, &(0x7f0000000100)) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="0198000000000000200012800800010067726500030081000000068003003f000000000000000000"], 0x40}}, 0x0) (async) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x4, 0x6, @local}, 0x14) (async) 2m42.987233806s ago: executing program 3 (id=350): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x860}, 0x40000000) (async) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x860}, 0x40000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'gretap0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x8000, 0x20, 0x8, 0x5, {{0x12, 0x4, 0x2, 0x5, 0x48, 0x68, 0x0, 0xe, 0x29, 0x0, @local, @multicast2, {[@ssrr={0x89, 0x23, 0xe7, [@local, @broadcast, @empty, @broadcast, @local, @private=0xa010101, @remote, @dev={0xac, 0x14, 0x14, 0x10}]}, @lsrr={0x83, 0xb, 0xe1, [@private=0xa010101, @remote]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@deltfilter={0x34, 0x2d, 0x8, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xf, 0xb}, {0x2, 0xf}, {0xfff2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x5}}, @TCA_RATE={0x6, 0x5, {0x9}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000003c0)={0x0, 0x57, "6d89b40f88900e2d0da0dba7768dd657ccf733872debb15c6f8a6dd36357664805700d68106b03cfc6bea6093470b3df7d4bfdbd276611d62ff679b173fcc2919717dedb49a9b9ab7d0a7e51690698ccf2ffd3b735ca6d"}, &(0x7f0000000440)=0x5f) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000480)={r3, 0x99, "37027898f4b0733d4e7cc0727f7741c396c15389628e257bcecf6d8aeb60dff24dbe08a86d674440791c209ac1da5d3e15ad8e37b853ca4aa3a34af55543e3d45287a6df42e05b6a76929ca53181f0403e3b6f99679c99be2d373deed77ccbf71bf80b2daca0d7aeab2c0c35dbf69060b0e59ba7fe7a31c0b0aa9d1490fb488bfbe05c640eec406d148d53f19f0f279104471a770aec72d86f"}, &(0x7f0000000540)=0xa1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000c40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000600)={0x600, r4, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x138, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x76c0, 0xfff9, 0x3, 0x0, 0x1000, 0xa0, 0xe, 0x9b34]}}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x36, 0x18, 0xe6, 0x3, 0xb, 0x22, 0x4, 0x18, 0x48, 0x12, 0x18, 0x9, 0x3, 0x5, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x4, 0x5}, {0x1, 0x5}, {0x3, 0x8}, {0x0, 0x7}, {0x6, 0x1}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0x7}, {0x6}, {0x7, 0x8}, {0x5, 0x1}, {0x7, 0x3}, {0x0, 0xa}, {0x4, 0x7}, {0x2, 0x6}, {0x1, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x4, 0x8}, {0x4, 0x2}, {0x0, 0x8}, {0x5, 0x2}, {0x4, 0xa}, {0x6, 0x7}, {0x5, 0x6}, {0x6, 0x3}, {0x1, 0x9}, {0x6, 0x4}, {0x6, 0x9}, {0x0, 0xa}, {0x3, 0x6}, {0x7, 0x8}, {0x0, 0x6}, {0x0, 0x3}, {0x0, 0x8}, {0x5, 0x7}, {0x0, 0x1}, {0x2, 0xa}, {0x7}, {}, {0x4, 0x6}, {0x5, 0x5}, {0x2, 0x8}, {0x1, 0x6}, {0x2, 0x6}, {0x6, 0x4}, {0x6, 0x3}, {0x7, 0x6}, {0x5}, {0x7, 0x4}, {0x5, 0xa}, {0x7, 0x4}, {0x2, 0x6}, {0x7, 0x9}, {0x7, 0x5}, {0x4, 0x2}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x1}, {0x6, 0xa}, {0x0, 0x9}, {0x5, 0x8}, {0x3, 0x4}, {0x5, 0x5}, {0x7, 0x7}, {0x4, 0x6}, {0x0, 0x8}, {0x2, 0x5}, {0x4}, {0x3, 0x6}, {0x0, 0x7}, {0x5, 0xa}, {0x3, 0x8}, {0x0, 0xa}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x699, 0x5, 0x8, 0x7, 0x8, 0xc89]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xfffe, 0x4, 0x7, 0xd75b, 0x1c6b, 0x7ff, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xffff, 0x5dd9, 0x6, 0x6, 0xf, 0x6, 0x7]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x3}, {0x4, 0x6}, {0x6, 0x7}, {0x1, 0x2}, {0x0, 0x3}, {0x2, 0x5}, {0x3, 0x5}, {0x0, 0x2}, {0x3, 0xa}, {0x4, 0x7}, {0x7, 0x7}, {0x4, 0x4}, {0x7, 0x5}, {0x7, 0x2}, {0x0, 0x5}, {0x2, 0x3}, {0x0, 0x9}, {0x2, 0x6}, {0x0, 0x9}, {0x1, 0x8}, {0x2, 0x4}, {0x6, 0x4}, {0x1, 0x6}, {0x0, 0x9}, {0x1, 0x5}, {0x6, 0x6}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8001, 0xd, 0x6, 0xd, 0xcee, 0x9, 0xeef]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2, 0xa65, 0x6ac6, 0xe5, 0x1, 0x8, 0x704]}}]}]}, @NL80211_ATTR_TX_RATES={0x48, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x200, 0x1, 0xfff7, 0x0, 0x574b, 0x5, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x5, 0x0, 0xfffc, 0x0, 0xffff, 0x101, 0xc]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x214, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x2, 0x4, 0x4, 0x1000, 0x8]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x60, 0x6c, 0x2a, 0x5c, 0x9, 0x36, 0x30, 0x30, 0x12, 0x18, 0x2, 0x18, 0x24, 0x3, 0xb, 0x60, 0x16, 0x18]}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x200, 0x8, 0x8, 0x4, 0x9, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa5a5, 0x7f, 0xfff9, 0x6, 0x0, 0x9, 0x8, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x4, 0x14, 0xfffd, 0xfff7, 0x7, 0x6, 0xee]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x3}, {0x3, 0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x3, 0x8}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x4}, {0x4, 0x4}, {0x1, 0x9}, {0x0, 0x4}, {0x5}, {0x1, 0x7}, {}, {0x0, 0x5}, {0x0, 0x4}, {0x2, 0x7}, {0x5, 0x6}, {0x1, 0xa}, {0x3, 0x3}, {0x1, 0x5}, {0x2, 0xa}, {0x0, 0x3}, {0x4, 0x3}, {0x6, 0x9}, {0x6, 0x8}, {0x6, 0x1}, {0x3, 0x4}, {0x5, 0x2}, {0x4}, {0x6, 0x3}, {0x2, 0x8}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x5}, {0x0, 0x8}, {0x5, 0x2}, {0x1, 0xa}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x1}, {0x6, 0x6}, {0x4, 0x8}, {}, {0x6, 0x1}, {0x4, 0x9}, {0x1, 0xa}, {0x7, 0x4}, {0x7, 0x5}, {0x7, 0x7}, {0x0, 0x9}, {0x4, 0x7}, {0x3, 0x2}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x7}, {0x6}, {0x4, 0xa}, {0x0, 0x1}, {0x4, 0x4}, {0x7, 0x4}, {0x0, 0x9}, {0x5, 0x4}, {0x1, 0x2}, {0x6, 0x2}, {0x1, 0x5}, {0x0, 0x9}, {0x1, 0x6}, {0x5, 0x7}, {0x3, 0x8}, {0x0, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2e74, 0x80, 0x7, 0x9, 0x6f4, 0x81, 0x93, 0x6]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x5, 0x2}, {0x1, 0x3}, {0x1, 0x7}, {0x1, 0x4}, {0x0, 0x4}, {0x2, 0x4}, {0x7, 0x5}, {0x2, 0x2}, {0x2, 0x5}, {0x2, 0x4}, {0x5, 0x2}, {0x3, 0x5}, {0x4, 0x3}, {0x4, 0x5}, {0x7, 0x5}, {0x7}, {0x6, 0x9}, {0x7, 0x3}, {0x4, 0x9}, {0x0, 0x7}, {0x1, 0x1}, {0x5, 0x5}, {0x6, 0x6}, {0x6, 0x4}, {0x1, 0x2}, {0x1, 0x4}, {0x0, 0xa}, {0x2, 0x8}, {0x3, 0x5}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0xa}, {0x4, 0x9}, {0x0, 0x1}, {0x0, 0xa}, {0x3, 0x5}, {0x7, 0x6}, {0x7, 0x8}, {0x5, 0xa}, {0x7, 0x3}, {0x4, 0x2}, {0x7, 0x9}]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x660, 0x0, 0x7ff, 0x179, 0x7, 0x28e, 0x4, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xfffb, 0x3, 0x6c9, 0x2, 0xfffb, 0x2, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x35e, 0x2, 0xfff9, 0x6, 0x790f, 0x7, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xff80, 0x2, 0xac, 0x3500, 0x9, 0x4, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3d5, 0x4, 0xb, 0x101, 0x9, 0x8, 0xa, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x8, 0x0, 0x200, 0x7, 0x5, 0x1000]}}]}]}, @NL80211_ATTR_TX_RATES={0x4c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x0, 0x8}, {0x3}, {0x7, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x20, 0x8001, 0x8000, 0x0, 0x5, 0x8, 0xd6]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x60, 0xc, 0x48, 0x36, 0xb, 0x1, 0x4, 0x4, 0x24, 0x5, 0x6c, 0x4, 0x48, 0x3]}]}]}, @NL80211_ATTR_TX_RATES={0x204, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0x7}, {0x2, 0x3}, {0x6, 0x2}, {0x6, 0x6}, {0x7, 0xa}]}]}, @NL80211_BAND_2GHZ={0x148, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x1, 0x4}, {0x4, 0x8}, {0x7, 0x4}, {0x6, 0x8}, {0x6}, {0x2, 0x9}, {0x4}, {0x0, 0x3}, {0x7, 0x3}, {0x5, 0xa}, {0x3, 0x6}, {0x2, 0x5}, {0x3, 0x4}, {0x7, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x0, 0x2}, {0x7, 0x9}, {0x1, 0x4}, {0x3, 0x1}, {0x7, 0x9}, {0x1, 0x6}, {0x1, 0x3}, {0x4, 0x7}, {0x5, 0xa}, {0x5, 0x7}, {0x6, 0x5}, {0x5, 0x5}, {0x4, 0x6}, {0x0, 0x4}, {0x6}, {0x0, 0x7}, {0x5, 0xa}, {0x4, 0x7}, {0x7, 0x5}, {0x4, 0x3}, {0x2, 0x7}, {0x0, 0x6}, {0x0, 0x6}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x8}, {0x1, 0x8}, {0x7, 0x1}, {0x4, 0x4}, {0x4, 0x4}, {0x1, 0x2}, {0x2, 0x6}, {0x1, 0x3}, {0x7, 0x2}, {0x2}, {0x4, 0x9}, {0x2, 0x2}, {0x3, 0x6}, {0x6, 0x5}, {0x0, 0x9}, {0x1, 0x2}, {0x1, 0x5}, {0x1, 0x8}, {0x0, 0x7}, {0x1, 0x9}, {0x0, 0x5}, {0x4, 0xa}, {0x1}, {0x2, 0x6}, {0x0, 0x7}, {0x0, 0x9}, {0x6, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x3}, {0x6, 0x7}, {0x2, 0x4}, {0x7, 0x7}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x5}, {0x7, 0x7}, {0x5, 0x2}, {0x1, 0x1f}, {0x2, 0x9}, {0x6}, {0x4, 0xa}, {0x3, 0x8}, {0x0, 0x1}, {0x6, 0x5}, {0x4, 0x4}, {0x4, 0x8}, {0x3, 0x4}, {0x3, 0x5}, {0x6, 0x8}, {0x4, 0x1}, {0x6, 0x6}, {0x1, 0x5}, {0x0, 0x2}, {0x7, 0x7}, {0x2, 0x2}, {0x1, 0xa}, {0x7, 0xa}, {0x0, 0x2}, {0x6, 0x2}, {0x7, 0xa}, {0x6, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x6, 0x9}, {0x4, 0x5}, {0x4, 0x4}, {0x1, 0xa}, {0x1, 0x4}, {0x5, 0x9}, {0x3, 0x7}, {0x0, 0x3}, {0x1, 0x5}, {0x0, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x6, 0xa}, {0x7, 0x6}, {0x1, 0xa}, {0x3, 0x2}, {0x1, 0x6}, {0x6, 0x2}, {0x3, 0xa}, {0x5}, {0x0, 0x2}, {0x6, 0x5}, {0x0, 0x4}, {0x2, 0x8}, {0x2, 0x8}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x8}, {0x7}, {0x0, 0x9}, {0x5, 0x5}, {0x0, 0x9}, {0x5, 0x5}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x0, 0x16, 0x2, 0x6, 0x24, 0x60, 0x4, 0x6, 0x30, 0xc, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfff7, 0xcf2, 0x6, 0x9, 0x1ff, 0x7]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x2, 0xa}, {0x3}, {0x3, 0x8}, {0x4, 0x9}, {0x7, 0x1}, {0x3, 0x7}, {0x7, 0x4}, {0x0, 0x2}, {0x4, 0x1}, {0x7, 0xa}, {0x1, 0x2}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x7}, {0x6, 0xa}, {0x7, 0x7}, {0x0, 0x8}, {0x6, 0x4}, {0x4, 0xa}, {0x0, 0x4}, {0x7, 0x1}, {0x0, 0x4}, {0x5, 0x2}, {0x6, 0x4}, {0x7, 0x6}, {0x4, 0x5}, {0x0, 0xa}, {0x6, 0x9}, {0x5, 0x9}, {0x7, 0x6}, {0x0, 0x4}, {0x3, 0x5}, {0x0, 0x2}, {0x4, 0x8}, {0x2, 0x7}, {0x0, 0x2}, {0x7, 0x9}, {0x5, 0x7}, {0x7, 0xa}, {0x1, 0x2}, {0x3, 0x1}, {0x1, 0x3}, {0x3, 0x2}, {0x1, 0x7}, {0x0, 0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x6, 0x4}, {0x2, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x3, 0x1}, {0x0, 0x6}, {0x3, 0x1}, {0x0, 0x1}, {0x6, 0x5}, {0x0, 0x8}, {0x0, 0x1}, {0x3, 0x2}, {0x5, 0xa}, {0x7, 0x5}, {0x6, 0x8}, {0x7, 0x2}, {0x6, 0xa}, {0x1}, {0x6, 0x4}, {0x0, 0x6}, {0x7, 0x9}, {0x4, 0x1}, {0x6, 0x4}, {0x3, 0xa}, {0x3, 0x9}, {0x3, 0x4}, {0x5, 0x5}, {0x4, 0x4}, {0x1, 0x3}, {0x7, 0x3}, {0x7}, {0x6}, {0x4, 0x6}, {0x1, 0x8}, {0x1, 0x2}, {0x3, 0x15}, {0x1, 0xa}, {0x1, 0x9}, {0x4, 0x7}, {0x3, 0xa}, {0x4, 0x7}, {0x5, 0x4}, {0x2, 0x6}, {0x3, 0x6}, {0x6, 0x5}, {0x2, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x7}, {0x3, 0x8}, {0x3, 0xa}, {0x3, 0x3}, {0x3, 0x6}, {0x7, 0x1}, {0x6, 0x1}, {0x3, 0x9}, {0x7, 0x3}, {0x7, 0x6}, {0x2, 0x8}, {0x6, 0x9}, {0x1, 0x5}, {0x4, 0x3}, {0x4}, {0x5, 0x2}, {0x1, 0x4}]}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x60, 0x4, 0x24, 0x9, 0x6, 0x48, 0x12, 0x9, 0x12, 0x60, 0x16, 0x48, 0xb, 0x6c, 0x1, 0x2, 0x30, 0x1, 0x2, 0x60, 0x18, 0x48]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x4}, {0x0, 0x6}, {0x5, 0x8}, {0x0, 0x6}, {0x1, 0x2}, {0x6, 0x2}, {0x7, 0x5}, {0x7}, {0x2, 0x1}, {0x0, 0x4}, {0x5, 0x2}, {0x1, 0x7}, {0x0, 0x1}, {0x7, 0x2}, {0x4, 0x2}, {0x5, 0x4}, {0x3, 0x6}, {0x3, 0x3}, {0x7, 0x4}, {0x7}, {0x0, 0xd}, {0x3, 0x3}, {0x7, 0x3}, {0x4, 0x4}, {0x5, 0x7}, {0x0, 0x6}, {0x5, 0x2}, {0x4, 0x6}, {0x4, 0x1e}, {0x1}, {0x1, 0x1}, {0x2, 0xa}, {0x7, 0x1}, {0x1, 0x5}, {0x5, 0x5}, {0x3}, {0x0, 0x2}, {0x2}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x6, 0x6}, {0x1, 0xa}, {0x1, 0x3}, {0x5, 0x5}, {0x4, 0x3}, {0x0, 0x6}, {0x1, 0x7}, {0x6, 0x6}, {}, {0x1, 0x6}, {0x0, 0x5}, {0x0, 0x4}, {0x0, 0x5}, {0x4}, {0x0, 0x3}, {0x5, 0x5}, {0x2, 0x2}, {0x1, 0x5}, {0x6, 0xa}, {0x0, 0x7}, {0x2, 0x3}, {0x7, 0x6}, {0x1, 0x8}, {0x1}, {0x5, 0x3}, {0x3, 0x5}, {0x7, 0x4}, {0x0, 0x8}, {0x4, 0x8}, {0x6}, {0x4}, {0x7}, {0x0, 0x7}, {0x3, 0x9}, {0x7, 0x9}, {0x3, 0x2}, {0x7}, {0x6, 0x3}, {0x5, 0xa}, {0x7, 0x8}, {0x7}, {0x4}, {0x7, 0x9}, {0x1, 0x5}, {0x2, 0x7}, {0x1, 0x9}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x7, 0x2}, {0x6, 0x4}, {0x5, 0x9}, {0x1, 0x8}, {0x1, 0x1}, {0x1, 0x6}, {0x6, 0x9}]}]}]}]}, 0x600}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000cc0), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000f00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0xc0000081}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x184, r5, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xb6a5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x46}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe72}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xd532, @dev={0xfe, 0x80, '\x00', 0x10}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x40, @private0, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x800}, 0xc0) (async) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000f00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0xc0000081}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x184, r5, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xb6a5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x46}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe72}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xd532, @dev={0xfe, 0x80, '\x00', 0x10}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x40, @private0, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x800}, 0xc0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)={0xf0, 0x13, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_OBJ_USERDATA={0x80, 0x8, "0911df148de3dfd064de25c8b6bf7b6a840a1eb3e310c68b7658d9ead3462ac26d5d9179a7661ac7290c2782e470c1b29dadc7a7a9f2e19e8e0d47ee3cf7dddaa4882ae3bf599858afc294ea8012f0a9954d7e4f3a0c41f2d80c814b02df5cfb984915f78d0c853161053ff492282dfd657ca9da08b4ee8e1a1172fd"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0xf0}, 0x1, 0x0, 0x0, 0x14}, 0x80) (async) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)={0xf0, 0x13, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_OBJ_USERDATA={0x80, 0x8, "0911df148de3dfd064de25c8b6bf7b6a840a1eb3e310c68b7658d9ead3462ac26d5d9179a7661ac7290c2782e470c1b29dadc7a7a9f2e19e8e0d47ee3cf7dddaa4882ae3bf599858afc294ea8012f0a9954d7e4f3a0c41f2d80c814b02df5cfb984915f78d0c853161053ff492282dfd657ca9da08b4ee8e1a1172fd"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0xf0}, 0x1, 0x0, 0x0, 0x14}, 0x80) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001200)={'syztnl2\x00', &(0x7f0000001100)={'gre0\x00', r2, 0x8, 0x80, 0xa, 0x4, {{0x2b, 0x4, 0x3, 0x39, 0xac, 0x68, 0x0, 0xe, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @rr={0x7, 0xf, 0x61, [@private=0xa010101, @local, @multicast2]}, @timestamp_prespec={0x44, 0x34, 0x41, 0x3, 0x6, [{@local, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@local, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@multicast1, 0x8}]}, @ssrr={0x89, 0xf, 0x1d, [@broadcast, @broadcast, @private=0xa010101]}, @lsrr={0x83, 0x13, 0xb4, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty]}, @timestamp_addr={0x44, 0xc, 0x8f, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}, @noop, @rr={0x7, 0x7, 0x6e, [@empty]}, @rr={0x7, 0x17, 0x75, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1, @rand_addr=0x64010101, @empty]}, @ra={0x94, 0x4}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001200)={'syztnl2\x00', &(0x7f0000001100)={'gre0\x00', r2, 0x8, 0x80, 0xa, 0x4, {{0x2b, 0x4, 0x3, 0x39, 0xac, 0x68, 0x0, 0xe, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @rr={0x7, 0xf, 0x61, [@private=0xa010101, @local, @multicast2]}, @timestamp_prespec={0x44, 0x34, 0x41, 0x3, 0x6, [{@local, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@local, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@multicast1, 0x8}]}, @ssrr={0x89, 0xf, 0x1d, [@broadcast, @broadcast, @private=0xa010101]}, @lsrr={0x83, 0x13, 0xb4, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty]}, @timestamp_addr={0x44, 0xc, 0x8f, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}, @noop, @rr={0x7, 0x7, 0x6e, [@empty]}, @rr={0x7, 0x17, 0x75, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1, @rand_addr=0x64010101, @empty]}, @ra={0x94, 0x4}]}}}}}) write$cgroup_subtree(r0, &(0x7f0000001240)={[{0x2d, 'pids'}, {0x2d, 'net'}, {0x2b, 'cpuset'}, {0x2d, 'net_cls'}, {0x2b, 'devices'}, {0x2b, 'cpuacct'}, {0x0, 'net_cls'}]}, 0x37) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001280)={'macvlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x3c, r4, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4d9, 0x45}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000002) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r8, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20000008}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r6, &(0x7f0000001580)={&(0x7f00000014c0), 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x20, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0xf}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24040004}, 0x2004c0c5) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r6, &(0x7f0000001580)={&(0x7f00000014c0), 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x20, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0xf}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24040004}, 0x2004c0c5) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000001600), r6) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x2c, r9, 0x3, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FAMILY={0x5, 0xd, 0x22}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x2c}}, 0x40000) r10 = syz_genetlink_get_family_id$team(&(0x7f0000001740), r6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001780)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001780)={'vxcan0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000018c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)={0x9c, r10, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000001900)={0x7, 0x81, 0xa5, 0x10, 0x2, 0x9, 0x80, 0x0, 0x0, 0x0, 0x3, 0x80, 0x1, 0x8}, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000001940)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000001940)) connect$inet6(0xffffffffffffffff, &(0x7f0000001980)={0xa, 0x4e24, 0x7, @remote, 0x7}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000001980)={0xa, 0x4e24, 0x7, @remote, 0x7}, 0x1c) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000019c0)=""/149, &(0x7f0000001a80)=0x95) 2m42.824590958s ago: executing program 2 (id=351): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x5, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000000c0)=0x96, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x2e}], 0x1, 0x45833af92e4b39ff, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000140)=0x12, 0x80000) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={@null, 0x4, 'virt_wifi0\x00'}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00400000000002400128009000100626f6e64000000001400650280080008b72a6214141c98dd0d328937a3"], 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0xe6f4e3cdb9854ea, 0x0, 0x0, 0x0, 0x10000, @value=r5}, 0x28) 2m42.77050497s ago: executing program 3 (id=352): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb9}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x815}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r6) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200448c4}, 0x850) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0800272f3c0000dbdf2504000000080004000000000014000600fc020000000000000000000000000008000400000000001400f3affc00000000000000000000000000000108f301000300"/86], 0x5c}, 0x1, 0x0, 0x0, 0x6386755c87578e7d}, 0x80) ioctl$TUNSETLINK(r4, 0x400454cd, 0x18) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r11, &(0x7f0000000040)="09000000010003", 0x7) mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1416, 0x1}, 0x10}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x1c, r10, 0x4, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}]}, 0x1c}, 0x4, 0x700000000000000}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) 2m42.7227133s ago: executing program 2 (id=353): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x88}}, 0x1c, 0x0}, 0xb10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'veth0_to_hsr\x00'}) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000000000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000100", @ANYRES16=r5, @ANYBLOB="010200000000000000000700260007000400ac35000114000600626f6e643000000000000000000000001400070000000000000000000000ffffac1e000105000500ac1403aa"], 0x4c}, 0x8, 0x3000000000002}, 0x0) 2m42.668506427s ago: executing program 1 (id=354): socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0x7, 0x1, {0x7f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff}}]}]}}}, @IFLA_LINK={0x8}]}, 0x78}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0x7, 0x1, {0x7f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff}}]}]}}}, @IFLA_LINK={0x8}]}, 0x78}}, 0x0) 2m42.320526128s ago: executing program 2 (id=358): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x9403, 0x0, 0x2e0, 0x2c0, 0x410, 0x3d8, 0x3d8, 0x410, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0xffffffff, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@empty, @local, [], [], 'ip6erspan0\x00', 'bridge_slave_1\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000008e09000008000300", @ANYRES32=r4], 0x7c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60824b9f00302b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a020201"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='cma_alloc_start\x00', r5, 0x0, 0x2}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r7, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000640)=0x40) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7ff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x8040) 2m41.819574834s ago: executing program 32 (id=358): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x9403, 0x0, 0x2e0, 0x2c0, 0x410, 0x3d8, 0x3d8, 0x410, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0xffffffff, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@empty, @local, [], [], 'ip6erspan0\x00', 'bridge_slave_1\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000008e09000008000300", @ANYRES32=r4], 0x7c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60824b9f00302b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a020201"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='cma_alloc_start\x00', r5, 0x0, 0x2}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r7, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000640)=0x40) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7ff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x8040) 2m41.804866444s ago: executing program 1 (id=361): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x32, @void, @value}, 0x94) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (rerun: 64) r1 = socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000480)={0xffff1a47, 0x40000000, 0x10000, 0x9, 0x9}, 0x14) (async, rerun: 64) bind$alg(r1, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(generic-gcm-aesni)\x00'}, 0xfffffffffffffdce) (async, rerun: 64) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x15, @void, @value, @void, @value}, 0x50) r4 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg(r4, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001ac0)="9ab5108bcaa247044550fa5114fa67188d4769300eb25a72cfcdefefb447", 0x1e}], 0x1}}], 0x1, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002c607e18cfdcadee9400000008000300", @ANYRES32=r7, @ANYBLOB="0400848038002d800a0000000101010101010000040000000a00000002020202020200000a"], 0x58}, 0x1, 0x0, 0x0, 0x4000011}, 0x40000) (async, rerun: 32) r8 = socket$nl_audit(0x10, 0x3, 0x9) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000000103010800000000015578da2a0545efaf9073eac7a043000000020000403364057f9fcb20dac55d47b33670bed963d1997f019990f470c0e6d8611d2c364a496ebf"], 0x14}}, 0x44) (async) bind$netlink(r9, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) (async, rerun: 32) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r12, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)={0x11c, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_ORIG={0x6c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_NAT_DST={0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7fff}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xee1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xf90}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 32) sendmmsg$alg(r8, &(0x7f0000002c40)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)='[', 0x1}], 0x1, &(0x7f0000000680)=[@assoc={0x18}, @assoc={0x18}], 0x30}], 0x1, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400010026bd7000ffdbdf250a0818c8e5b0bdcd1a7ba1b5b1eef306d2f62f36fbde0037a09d266430ac21131f3b2216ba3ba9ba654888eb9466ba344f0f50d9997e9da5d6f3833a9942ba17ba62f8f43cd5ec945d2bfcd2bc52a80545f1fe831d16f26f2b0ea3dc17aae9bced68959e407323efdc8861e6e0ee937d0f0d580f8546738c64614c2ab4f9f6fb65c4753db624e53f924ba689efc06a86b2f06471bb7cde1efd31e08173913e65a6621a36fc", @ANYRES32=r0, @ANYBLOB="14000200fe8000000000000000000000000000bb14000100fc020000000000000000000000000001"], 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="2000000021080000510c00000200000002000200", @ANYRES32, @ANYBLOB="09ffffff00"/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="02000000040000000200"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f0000001b00)="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", &(0x7f00000004c0)=""/219, &(0x7f00000006c0)="899da0d8d19bfd82f82ca89d9bb927e66efb94c9d59726618e0da8d17eb28842b9cb7b5485a9e9b9a4a52b030826fd9ca67ca88a8a6fb49e7227d704c4b588d9919431fe3ab40735c80156db1279a81d3232ea669b512fbd518745c30156cc7e2ee706ec204b4a57ae43cbd2b567abd62459de406dd73ba9cbbf2a1057841418fb1fa98292030ccfaaea", &(0x7f0000000780)="4d801192a971ab34ca8e16820afb0c6c502ab6acd9e2e5a2f64b4106fc7e98f1b618b4660b048539e47de3ed0467b1a78fcca04a1168479209629375e798f4622b6f69088ddd419f1f999e90f80526890269bf2b5b37d5dd4604abbc21cda555c52992ce21982ddd1b6961c2ea8bc1ef93e3f6e75fb412", 0xffff0591, r3}, 0x38) 2m41.803859415s ago: executing program 33 (id=361): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x32, @void, @value}, 0x94) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (rerun: 64) r1 = socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000480)={0xffff1a47, 0x40000000, 0x10000, 0x9, 0x9}, 0x14) (async, rerun: 64) bind$alg(r1, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(generic-gcm-aesni)\x00'}, 0xfffffffffffffdce) (async, rerun: 64) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x15, @void, @value, @void, @value}, 0x50) r4 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg(r4, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001ac0)="9ab5108bcaa247044550fa5114fa67188d4769300eb25a72cfcdefefb447", 0x1e}], 0x1}}], 0x1, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002c607e18cfdcadee9400000008000300", @ANYRES32=r7, @ANYBLOB="0400848038002d800a0000000101010101010000040000000a00000002020202020200000a"], 0x58}, 0x1, 0x0, 0x0, 0x4000011}, 0x40000) (async, rerun: 32) r8 = socket$nl_audit(0x10, 0x3, 0x9) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000000103010800000000015578da2a0545efaf9073eac7a043000000020000403364057f9fcb20dac55d47b33670bed963d1997f019990f470c0e6d8611d2c364a496ebf"], 0x14}}, 0x44) (async) bind$netlink(r9, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) (async, rerun: 32) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r12, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)={0x11c, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_ORIG={0x6c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_NAT_DST={0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7fff}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xee1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xf90}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 32) sendmmsg$alg(r8, &(0x7f0000002c40)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)='[', 0x1}], 0x1, &(0x7f0000000680)=[@assoc={0x18}, @assoc={0x18}], 0x30}], 0x1, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400010026bd7000ffdbdf250a0818c8e5b0bdcd1a7ba1b5b1eef306d2f62f36fbde0037a09d266430ac21131f3b2216ba3ba9ba654888eb9466ba344f0f50d9997e9da5d6f3833a9942ba17ba62f8f43cd5ec945d2bfcd2bc52a80545f1fe831d16f26f2b0ea3dc17aae9bced68959e407323efdc8861e6e0ee937d0f0d580f8546738c64614c2ab4f9f6fb65c4753db624e53f924ba689efc06a86b2f06471bb7cde1efd31e08173913e65a6621a36fc", @ANYRES32=r0, @ANYBLOB="14000200fe8000000000000000000000000000bb14000100fc020000000000000000000000000001"], 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="2000000021080000510c00000200000002000200", @ANYRES32, @ANYBLOB="09ffffff00"/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="02000000040000000200"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f0000001b00)="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", &(0x7f00000004c0)=""/219, &(0x7f00000006c0)="899da0d8d19bfd82f82ca89d9bb927e66efb94c9d59726618e0da8d17eb28842b9cb7b5485a9e9b9a4a52b030826fd9ca67ca88a8a6fb49e7227d704c4b588d9919431fe3ab40735c80156db1279a81d3232ea669b512fbd518745c30156cc7e2ee706ec204b4a57ae43cbd2b567abd62459de406dd73ba9cbbf2a1057841418fb1fa98292030ccfaaea", &(0x7f0000000780)="4d801192a971ab34ca8e16820afb0c6c502ab6acd9e2e5a2f64b4106fc7e98f1b618b4660b048539e47de3ed0467b1a78fcca04a1168479209629375e798f4622b6f69088ddd419f1f999e90f80526890269bf2b5b37d5dd4604abbc21cda555c52992ce21982ddd1b6961c2ea8bc1ef93e3f6e75fb412", 0xffff0591, r3}, 0x38) 2m41.728525226s ago: executing program 3 (id=362): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="b2", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES64=r1], 0x18, 0x8800}}], 0x1, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x50}, 0x6060050) 2m41.727294145s ago: executing program 34 (id=362): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="b2", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES64=r1], 0x18, 0x8800}}], 0x1, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x50}, 0x6060050) 1m10.464045045s ago: executing program 4 (id=394): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000080)=0x401, 0x4) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000180)='wg1\x00', 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x100, @remote, 0x6}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000140)={r3, 0x7fffffffffffffff, 0x2, 0x9}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x101}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000240)={r5, @in={{0x2, 0x4e20, @private=0xa010102}}, [0x3, 0x5, 0xfffffffffffffff7, 0x3, 0x9, 0x3, 0x7e, 0x8, 0x7f, 0x8, 0x7ff, 0x0, 0xf, 0x1, 0x3]}, &(0x7f0000000340)=0x100) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYRES32], 0x548}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000030601080000000000000000010000050900220073797a32000000000900020073797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2040010}, 0x51) 1m0.400504478s ago: executing program 7 (id=1289): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000100001fd1e0000000000000000000500000a1c000000780a010200000000000100001300000208000340000000011400000011f1000000000000000000000300000a"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=ANY=[], 0x18}}], 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f0000000080), 0x4) getsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r6, @ANYBLOB="014000000000000034001680300001802c000c801400010006000000940700004400000088a800001400"], 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@mpls_newroute={0x44, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1c, 0x14, 0x80, 0x4, 0xff, 0x4, 0xfd, 0x1}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_OIF={0x8}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x2}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x25}, @RTA_OIF={0x8, 0x4, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x44810}, 0x4000010) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @local}}, 0x24) 59.817120789s ago: executing program 7 (id=1294): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) syz_emit_ethernet(0xca, &(0x7f0000000640)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @local, {[@rr={0x7, 0x3, 0xdd}, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback}, {}, {@local}, {@loopback}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000340), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001240)={'ip_vti0\x00', &(0x7f00000011c0)={'erspan0\x00', 0x0, 0x7800, 0x700, 0x2, 0x7, {{0x16, 0x4, 0x2, 0x35, 0x58, 0x64, 0x0, 0x1, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xf, 0x8e, [@remote, @rand_addr=0x64010102, @empty]}, @timestamp={0x44, 0x10, 0xad, 0x0, 0x1, [0xcb64, 0x938, 0x200000]}, @cipso={0x86, 0xf, 0xffffffffffffffff, [{0x0, 0x9, "6232c4c32c941f"}]}, @timestamp={0x44, 0x14, 0xee, 0x0, 0x7, [0xa, 0xb3b, 0x5, 0x91d2]}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001380)=[{{&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="653afbb344bdd7f91bb428663016d74fc39b45f9982193510cf370dddb7f31", 0x1f}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="4296bf03ae7b5c65f5742bf848ca018c24eb7c2bf10aef07cf5477791e", 0x1d}, {&(0x7f00000001c0)="6ba0505c7983c4978084e65fc7a32fd44c2e1305bae2464571747716b8eb86e2e583d776e8f1405ab1be3a01db43987898fd5d923228c66388b83e4b4afa4521840a16e0907dd563dfc810dd7e6efb9f2ae101260d446a1bf2cf61af72657d27e5e41b2e50b20f6ec4832ed42378b6cb131437cf51c175243c2223299acdf510e0663f7007a381b48d92bc2cfb4be0775eff7ed3b8ce499e05980b78f946", 0x9e}, {&(0x7f0000000280)="e7dab0662eb0e02ada73a959f1caff6936e82b1e35992c8a7dc05484bfe7320bca835991cfd3ba6038", 0x29}, {&(0x7f0000000380)="89f702d190abc3b5e555f3d3a8aa0a4fa5fe39fef3ed954e940a6a88e0aba1a15ebe1275776f33bf5e7056db2e385b3c6dc21016846abe209c0de1946fe39d05eb55ff35b4827168c961196e5871be5d2607e0679f1bb0088f70bc45f333b96215e72c674df12bb9413eeb3073d360fe963cbe448c6686da55df65492929ec6186d9454cff7086d2bc", 0x89}, {&(0x7f0000000440)="3818a1d5ebb143a652f670e63dac0d6a28d96df123d9c747a7533be8f335d5a922d560d406acb4fdc6da27d32ff264ca433163c4a0b68d609bd6a82fdde07128f521db73c7a03d58f783777b2b5fb09c133f3813c17558d09bbeac547c1a74600edccc91d66650dd774828e1bf61ac7b93872779ed0259a83a240d51face560397475865c175d2b7fb6b612a21288c1e29c8a5ccb6d93ae9cab6347ddaf8ac28f493697bad28e57d5064911c8819", 0xae}, {&(0x7f0000000500)="ffdf7ba2a7bec45a4241b73c503548c585bbecc9869af8ced616c375bdd1f74ad8a3dfe0b91d4ff9f473080c45da307f487e92cd322ac22751a0a615a733605c6c1b2b002261a9c0b85890ca5cafb9c0a34754c82444e59d5be90a965370389598df4405bffd72b958b0522d831e81e23e92587806be4a1f1d3b2d294de693e324b1a36c7f45b15a580d4f99927a1d098f7b5d09c23b98767b66250441bf3a38d3a04a6f67ca1f591e91bbe6475180fec3b19d90e95b3debca0e5f64eadff88fe3004548a17964154799e957e49dce9ebc21f56ffee2bfe8aa2bb1d2ae5c", 0xde}], 0x6, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x18}}, {{&(0x7f0000000640)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000680)="910221c37b1d622eba22869b9ded5b45ac921c657b82c6b5b4a4cdff33839e62d5b38948b3d3118bf7b06e76300f44e4cc582ba4918bfb1869907aa2542848dd1ab7103c8e43071276cebbdc21eadc50e0a8a2315a11fe166c836298b8a988ed1139e6147fd9f49eacf11e9d5ea833a9c859f9680fc4b36bb0c2c9a954f5054ce5269d8e696040c2eac811b49ca1a740a46d0c3c4ad77d6b157e5a66442248df2bc4d218e033", 0xa6}], 0x1, &(0x7f0000000780)=[@ip_ttl={{0x14, 0x0, 0x2, 0x40}}], 0x18}}, {{&(0x7f00000007c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000800)}, {&(0x7f0000000840)="15c905cf68f3b27a596bb5d5775830029027b201943a9402ceefb706f2", 0x1d}, {&(0x7f0000000880)="3f3c1bc8dbbcafe1ff0181c2acfc5e7e9690d9099144d6520b9b380a438291cb55ad4b4f8f235c416461b58361fe619ee06fcf997da21b3163682fc3c1968a", 0x3f}, {&(0x7f00000008c0)="5d4227612f385426ac71a1bb7eedad5504cde0e2fa48b5ce95d0b9b783549606bcad24a587ba424721de22170381c7700c1d00bf9fc24e459c9705365ef906c276991866ab616178334b30acd5932856371545d4f4b6a4584b72ba44c127d07ed23a703da80da14c33d6bf6935209201716d859d1b485a332e6eda6b67955eddf0ec249f75dac7826f236a41d584", 0x8e}, {&(0x7f0000000980)="fdbedeb99c478e4ab9257c35ab96f208e57786f18590321fad4bf825c775c61c3252867494b9ecc42ddb36a25020cc54db4f7bcd77267f92248637adf9974c8cb55a56d9b9707a5e8a84e895d5fafcb5de4a517f0f25abe5a7710ea1eae9e7693196e0a35a0416ff456cbc3c4d69efcf34", 0x71}, {&(0x7f0000000a00)}], 0x6}}, {{&(0x7f0000000ac0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000b00)="1c1c6f847b6697d907d77c3cccba0df871da098c89ba23ba352f6e52cab05b0433c76f2539c6fce4d33ad822453a603ca1e2449753c47488892c4ebd33aa95e4179521e3351d47fc67c20cf6426ae6b39c2f3e126f65b95b79eba301b74a61c99510f0767a71aed50984e35358f769440f7e4f830d99", 0x76}, {&(0x7f0000000b80)="0759a7010d92700b5c34a327e903636510a9affc56faefc1f4827f759dba5ba57396394f9ada85386b937295b330d606df1c1a9829305a9305d24942df9af749c0f0cdd634bb49c772504a09c6dacbaebbb536fa20af617c95d993239ed24820cb973a49d2eace37e05b7f2bb7b4efb6d124485bfdc6baeb769d9dbfcd741bf0636e185f699acc6aa074047a3add6dc65371d6a62fcf7638c819ce0211f671e2991b538ed8564503b55d9a58df686e0ac553cb932f12118794c6d1c31936cc7e51ddf354a9a38f006279cea0b852d2cab08e7df588d14155b8519f", 0xdb}, {&(0x7f0000000c80)="4cca47a5073ff8387c8355e6c266066b75089d912bbbf99282a8b727f4f841e2baf309448216a73d06dc14b5ad7c145c6609f46d04096286c6bc3b090937503f3a79aae49d66a0ae45617c3843a6451b8d9515b13e47f0e70d5cf7d4c99327b5a2438c7c3862f25c5ec86e7039dea1bc8be46e", 0x73}, {&(0x7f0000000d00)="9db72b6c32b425ce94374cc86c996ed241aef91ba1120e3fb990da2e975188c0d904097c83d98046a17dd021095899dd14ea8be7c7ac40eddf99c9f740df3c9086e92cf1f0d821fe1286692221a94b8f17aa2d00bcb0aea3fc0eac4f2dea9b62b4843bed74c3ff8541c6d1a0a1a5f72698451156f350031e2d08060103ae789d690c5107659d746ef2b6ca87f175be4bebfeed5ec53ccc0567bc7a23468472c24cf1aa568de2707c", 0xa8}, {&(0x7f0000000dc0)="a577ef5bdc17fec54a18dc60bbf426b6f5cb2c8abd76e3dee820ab0871f19de59357b1a1ae9e469d5cdd1e3e277e4da7fd85a126084d534b75a08ea7a860a1957839176889a8ba7c1e4d6e4e3a41fdbf2727dfd430cc376cdd18f27ed3ce1198923d1661743b0ec388a0d6dc0fd2f79c5c721c96c5cd3170ed9d2187abf914354ec4d1a1239a5f3d740ff66f34777784b03e24f0c20e6e7e90b910ef2087d7e38a", 0xa1}, {&(0x7f0000000e80)="714ccfb19f413ae2e8d8dd3425d758a46b3e7926c3da50d34d76452e77e768346d4d83bb1c48f3efb63a307da3c5ea01f5ec523188f4900fd09348f96a6f1b0de2373577f17b6918ae4b5f7c1df9c71cee1a6137b677933eddfcd99f133f9a134a1892f460b4283a4fe5f9ca66f942838aee28855911e9a07af2c1a407d2bf80336006e34162ee4cc0c4c3689521d5a62a7fe09c55ad7def219aca17efa38de01f40c9d7a05c62f5ad14d6aa320964d3621b2b6234", 0xb5}], 0x6, &(0x7f0000000fc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001000)="138092c56f922f341a8c00421fc4fa01caff91aa0d2c4f0d704740108236731293ec25e0c7cdc787aa4bff0318910ba8bb3449d88997ea19bb102c7687e31f6c37ec01f3ee90dd12bc52ea4eb65329773ce3546609761f25a6a1be462ae51a3895c8d5e88f8dde5173c5c970280d7156ff3ff6c93a90340b5286fb5ec715df783af934357def695c3f3949acac93cb642767c99d682a34b5819ec7445734984862f46726363beba929ccfedafdc7cf54806823b3ae7b16b69a6b0cf0681cd0ff7f79a91407cd83f8c2a8b54a5ce940b10d48", 0xd2}, {&(0x7f0000001100)="3f768e4b590be02191286d3e61927a8257de14ee5e73164f2c10eb206582ccdf806eb67c21226540eb60e0767a10a7fc5bb7d4f1bcf5f6666c5f4cbb342c9b37603014c8723da2f0be0b975da81ed0d18b79f60bf6e86718cf8abe8833", 0x5d}], 0x2, &(0x7f0000001280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xa9, 0x3, 0x0, [{@loopback, 0x4}]}, @noop, @timestamp_addr={0x44, 0xc, 0x6a, 0x1, 0x5, [{@empty, 0xd}]}, @timestamp_prespec={0x44, 0x24, 0x49, 0x3, 0xa, [{@loopback, 0x2}, {@multicast1, 0x9}, {@broadcast, 0x7f}, {@multicast2, 0xe6}]}, @generic={0x7, 0xa, "c5e9de03c228408c"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @broadcast}}}], 0x100}}], 0x6, 0x0) 59.015239191s ago: executing program 4 (id=394): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000080)=0x401, 0x4) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000180)='wg1\x00', 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x100, @remote, 0x6}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000140)={r3, 0x7fffffffffffffff, 0x2, 0x9}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x101}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000240)={r5, @in={{0x2, 0x4e20, @private=0xa010102}}, [0x3, 0x5, 0xfffffffffffffff7, 0x3, 0x9, 0x3, 0x7e, 0x8, 0x7f, 0x8, 0x7ff, 0x0, 0xf, 0x1, 0x3]}, &(0x7f0000000340)=0x100) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYRES32], 0x548}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000030601080000000000000000010000050900220073797a32000000000900020073797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2040010}, 0x51) 49.571167677s ago: executing program 7 (id=1294): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) syz_emit_ethernet(0xca, &(0x7f0000000640)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @local, {[@rr={0x7, 0x3, 0xdd}, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback}, {}, {@local}, {@loopback}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000340), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001240)={'ip_vti0\x00', &(0x7f00000011c0)={'erspan0\x00', 0x0, 0x7800, 0x700, 0x2, 0x7, {{0x16, 0x4, 0x2, 0x35, 0x58, 0x64, 0x0, 0x1, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xf, 0x8e, [@remote, @rand_addr=0x64010102, @empty]}, @timestamp={0x44, 0x10, 0xad, 0x0, 0x1, [0xcb64, 0x938, 0x200000]}, @cipso={0x86, 0xf, 0xffffffffffffffff, [{0x0, 0x9, "6232c4c32c941f"}]}, @timestamp={0x44, 0x14, 0xee, 0x0, 0x7, [0xa, 0xb3b, 0x5, 0x91d2]}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001380)=[{{&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="653afbb344bdd7f91bb428663016d74fc39b45f9982193510cf370dddb7f31", 0x1f}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="4296bf03ae7b5c65f5742bf848ca018c24eb7c2bf10aef07cf5477791e", 0x1d}, {&(0x7f00000001c0)="6ba0505c7983c4978084e65fc7a32fd44c2e1305bae2464571747716b8eb86e2e583d776e8f1405ab1be3a01db43987898fd5d923228c66388b83e4b4afa4521840a16e0907dd563dfc810dd7e6efb9f2ae101260d446a1bf2cf61af72657d27e5e41b2e50b20f6ec4832ed42378b6cb131437cf51c175243c2223299acdf510e0663f7007a381b48d92bc2cfb4be0775eff7ed3b8ce499e05980b78f946", 0x9e}, {&(0x7f0000000280)="e7dab0662eb0e02ada73a959f1caff6936e82b1e35992c8a7dc05484bfe7320bca835991cfd3ba6038", 0x29}, {&(0x7f0000000380)="89f702d190abc3b5e555f3d3a8aa0a4fa5fe39fef3ed954e940a6a88e0aba1a15ebe1275776f33bf5e7056db2e385b3c6dc21016846abe209c0de1946fe39d05eb55ff35b4827168c961196e5871be5d2607e0679f1bb0088f70bc45f333b96215e72c674df12bb9413eeb3073d360fe963cbe448c6686da55df65492929ec6186d9454cff7086d2bc", 0x89}, {&(0x7f0000000440)="3818a1d5ebb143a652f670e63dac0d6a28d96df123d9c747a7533be8f335d5a922d560d406acb4fdc6da27d32ff264ca433163c4a0b68d609bd6a82fdde07128f521db73c7a03d58f783777b2b5fb09c133f3813c17558d09bbeac547c1a74600edccc91d66650dd774828e1bf61ac7b93872779ed0259a83a240d51face560397475865c175d2b7fb6b612a21288c1e29c8a5ccb6d93ae9cab6347ddaf8ac28f493697bad28e57d5064911c8819", 0xae}, {&(0x7f0000000500)="ffdf7ba2a7bec45a4241b73c503548c585bbecc9869af8ced616c375bdd1f74ad8a3dfe0b91d4ff9f473080c45da307f487e92cd322ac22751a0a615a733605c6c1b2b002261a9c0b85890ca5cafb9c0a34754c82444e59d5be90a965370389598df4405bffd72b958b0522d831e81e23e92587806be4a1f1d3b2d294de693e324b1a36c7f45b15a580d4f99927a1d098f7b5d09c23b98767b66250441bf3a38d3a04a6f67ca1f591e91bbe6475180fec3b19d90e95b3debca0e5f64eadff88fe3004548a17964154799e957e49dce9ebc21f56ffee2bfe8aa2bb1d2ae5c", 0xde}], 0x6, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x18}}, {{&(0x7f0000000640)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000680)="910221c37b1d622eba22869b9ded5b45ac921c657b82c6b5b4a4cdff33839e62d5b38948b3d3118bf7b06e76300f44e4cc582ba4918bfb1869907aa2542848dd1ab7103c8e43071276cebbdc21eadc50e0a8a2315a11fe166c836298b8a988ed1139e6147fd9f49eacf11e9d5ea833a9c859f9680fc4b36bb0c2c9a954f5054ce5269d8e696040c2eac811b49ca1a740a46d0c3c4ad77d6b157e5a66442248df2bc4d218e033", 0xa6}], 0x1, &(0x7f0000000780)=[@ip_ttl={{0x14, 0x0, 0x2, 0x40}}], 0x18}}, {{&(0x7f00000007c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000800)}, {&(0x7f0000000840)="15c905cf68f3b27a596bb5d5775830029027b201943a9402ceefb706f2", 0x1d}, {&(0x7f0000000880)="3f3c1bc8dbbcafe1ff0181c2acfc5e7e9690d9099144d6520b9b380a438291cb55ad4b4f8f235c416461b58361fe619ee06fcf997da21b3163682fc3c1968a", 0x3f}, {&(0x7f00000008c0)="5d4227612f385426ac71a1bb7eedad5504cde0e2fa48b5ce95d0b9b783549606bcad24a587ba424721de22170381c7700c1d00bf9fc24e459c9705365ef906c276991866ab616178334b30acd5932856371545d4f4b6a4584b72ba44c127d07ed23a703da80da14c33d6bf6935209201716d859d1b485a332e6eda6b67955eddf0ec249f75dac7826f236a41d584", 0x8e}, {&(0x7f0000000980)="fdbedeb99c478e4ab9257c35ab96f208e57786f18590321fad4bf825c775c61c3252867494b9ecc42ddb36a25020cc54db4f7bcd77267f92248637adf9974c8cb55a56d9b9707a5e8a84e895d5fafcb5de4a517f0f25abe5a7710ea1eae9e7693196e0a35a0416ff456cbc3c4d69efcf34", 0x71}, {&(0x7f0000000a00)}], 0x6}}, {{&(0x7f0000000ac0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000b00)="1c1c6f847b6697d907d77c3cccba0df871da098c89ba23ba352f6e52cab05b0433c76f2539c6fce4d33ad822453a603ca1e2449753c47488892c4ebd33aa95e4179521e3351d47fc67c20cf6426ae6b39c2f3e126f65b95b79eba301b74a61c99510f0767a71aed50984e35358f769440f7e4f830d99", 0x76}, {&(0x7f0000000b80)="0759a7010d92700b5c34a327e903636510a9affc56faefc1f4827f759dba5ba57396394f9ada85386b937295b330d606df1c1a9829305a9305d24942df9af749c0f0cdd634bb49c772504a09c6dacbaebbb536fa20af617c95d993239ed24820cb973a49d2eace37e05b7f2bb7b4efb6d124485bfdc6baeb769d9dbfcd741bf0636e185f699acc6aa074047a3add6dc65371d6a62fcf7638c819ce0211f671e2991b538ed8564503b55d9a58df686e0ac553cb932f12118794c6d1c31936cc7e51ddf354a9a38f006279cea0b852d2cab08e7df588d14155b8519f", 0xdb}, {&(0x7f0000000c80)="4cca47a5073ff8387c8355e6c266066b75089d912bbbf99282a8b727f4f841e2baf309448216a73d06dc14b5ad7c145c6609f46d04096286c6bc3b090937503f3a79aae49d66a0ae45617c3843a6451b8d9515b13e47f0e70d5cf7d4c99327b5a2438c7c3862f25c5ec86e7039dea1bc8be46e", 0x73}, {&(0x7f0000000d00)="9db72b6c32b425ce94374cc86c996ed241aef91ba1120e3fb990da2e975188c0d904097c83d98046a17dd021095899dd14ea8be7c7ac40eddf99c9f740df3c9086e92cf1f0d821fe1286692221a94b8f17aa2d00bcb0aea3fc0eac4f2dea9b62b4843bed74c3ff8541c6d1a0a1a5f72698451156f350031e2d08060103ae789d690c5107659d746ef2b6ca87f175be4bebfeed5ec53ccc0567bc7a23468472c24cf1aa568de2707c", 0xa8}, {&(0x7f0000000dc0)="a577ef5bdc17fec54a18dc60bbf426b6f5cb2c8abd76e3dee820ab0871f19de59357b1a1ae9e469d5cdd1e3e277e4da7fd85a126084d534b75a08ea7a860a1957839176889a8ba7c1e4d6e4e3a41fdbf2727dfd430cc376cdd18f27ed3ce1198923d1661743b0ec388a0d6dc0fd2f79c5c721c96c5cd3170ed9d2187abf914354ec4d1a1239a5f3d740ff66f34777784b03e24f0c20e6e7e90b910ef2087d7e38a", 0xa1}, {&(0x7f0000000e80)="714ccfb19f413ae2e8d8dd3425d758a46b3e7926c3da50d34d76452e77e768346d4d83bb1c48f3efb63a307da3c5ea01f5ec523188f4900fd09348f96a6f1b0de2373577f17b6918ae4b5f7c1df9c71cee1a6137b677933eddfcd99f133f9a134a1892f460b4283a4fe5f9ca66f942838aee28855911e9a07af2c1a407d2bf80336006e34162ee4cc0c4c3689521d5a62a7fe09c55ad7def219aca17efa38de01f40c9d7a05c62f5ad14d6aa320964d3621b2b6234", 0xb5}], 0x6, &(0x7f0000000fc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001000)="138092c56f922f341a8c00421fc4fa01caff91aa0d2c4f0d704740108236731293ec25e0c7cdc787aa4bff0318910ba8bb3449d88997ea19bb102c7687e31f6c37ec01f3ee90dd12bc52ea4eb65329773ce3546609761f25a6a1be462ae51a3895c8d5e88f8dde5173c5c970280d7156ff3ff6c93a90340b5286fb5ec715df783af934357def695c3f3949acac93cb642767c99d682a34b5819ec7445734984862f46726363beba929ccfedafdc7cf54806823b3ae7b16b69a6b0cf0681cd0ff7f79a91407cd83f8c2a8b54a5ce940b10d48", 0xd2}, {&(0x7f0000001100)="3f768e4b590be02191286d3e61927a8257de14ee5e73164f2c10eb206582ccdf806eb67c21226540eb60e0767a10a7fc5bb7d4f1bcf5f6666c5f4cbb342c9b37603014c8723da2f0be0b975da81ed0d18b79f60bf6e86718cf8abe8833", 0x5d}], 0x2, &(0x7f0000001280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xa9, 0x3, 0x0, [{@loopback, 0x4}]}, @noop, @timestamp_addr={0x44, 0xc, 0x6a, 0x1, 0x5, [{@empty, 0xd}]}, @timestamp_prespec={0x44, 0x24, 0x49, 0x3, 0xa, [{@loopback, 0x2}, {@multicast1, 0x9}, {@broadcast, 0x7f}, {@multicast2, 0xe6}]}, @generic={0x7, 0xa, "c5e9de03c228408c"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @broadcast}}}], 0x100}}], 0x6, 0x0) 47.272509559s ago: executing program 4 (id=394): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000080)=0x401, 0x4) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000180)='wg1\x00', 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x100, @remote, 0x6}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000140)={r3, 0x7fffffffffffffff, 0x2, 0x9}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x101}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000240)={r5, @in={{0x2, 0x4e20, @private=0xa010102}}, [0x3, 0x5, 0xfffffffffffffff7, 0x3, 0x9, 0x3, 0x7e, 0x8, 0x7f, 0x8, 0x7ff, 0x0, 0xf, 0x1, 0x3]}, &(0x7f0000000340)=0x100) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYRES32], 0x548}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000030601080000000000000000010000050900220073797a32000000000900020073797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2040010}, 0x51) 34.422847693s ago: executing program 7 (id=1294): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) syz_emit_ethernet(0xca, &(0x7f0000000640)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @local, {[@rr={0x7, 0x3, 0xdd}, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback}, {}, {@local}, {@loopback}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000340), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001240)={'ip_vti0\x00', &(0x7f00000011c0)={'erspan0\x00', 0x0, 0x7800, 0x700, 0x2, 0x7, {{0x16, 0x4, 0x2, 0x35, 0x58, 0x64, 0x0, 0x1, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xf, 0x8e, [@remote, @rand_addr=0x64010102, @empty]}, @timestamp={0x44, 0x10, 0xad, 0x0, 0x1, [0xcb64, 0x938, 0x200000]}, @cipso={0x86, 0xf, 0xffffffffffffffff, [{0x0, 0x9, "6232c4c32c941f"}]}, @timestamp={0x44, 0x14, 0xee, 0x0, 0x7, [0xa, 0xb3b, 0x5, 0x91d2]}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001380)=[{{&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="653afbb344bdd7f91bb428663016d74fc39b45f9982193510cf370dddb7f31", 0x1f}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="4296bf03ae7b5c65f5742bf848ca018c24eb7c2bf10aef07cf5477791e", 0x1d}, {&(0x7f00000001c0)="6ba0505c7983c4978084e65fc7a32fd44c2e1305bae2464571747716b8eb86e2e583d776e8f1405ab1be3a01db43987898fd5d923228c66388b83e4b4afa4521840a16e0907dd563dfc810dd7e6efb9f2ae101260d446a1bf2cf61af72657d27e5e41b2e50b20f6ec4832ed42378b6cb131437cf51c175243c2223299acdf510e0663f7007a381b48d92bc2cfb4be0775eff7ed3b8ce499e05980b78f946", 0x9e}, {&(0x7f0000000280)="e7dab0662eb0e02ada73a959f1caff6936e82b1e35992c8a7dc05484bfe7320bca835991cfd3ba6038", 0x29}, {&(0x7f0000000380)="89f702d190abc3b5e555f3d3a8aa0a4fa5fe39fef3ed954e940a6a88e0aba1a15ebe1275776f33bf5e7056db2e385b3c6dc21016846abe209c0de1946fe39d05eb55ff35b4827168c961196e5871be5d2607e0679f1bb0088f70bc45f333b96215e72c674df12bb9413eeb3073d360fe963cbe448c6686da55df65492929ec6186d9454cff7086d2bc", 0x89}, {&(0x7f0000000440)="3818a1d5ebb143a652f670e63dac0d6a28d96df123d9c747a7533be8f335d5a922d560d406acb4fdc6da27d32ff264ca433163c4a0b68d609bd6a82fdde07128f521db73c7a03d58f783777b2b5fb09c133f3813c17558d09bbeac547c1a74600edccc91d66650dd774828e1bf61ac7b93872779ed0259a83a240d51face560397475865c175d2b7fb6b612a21288c1e29c8a5ccb6d93ae9cab6347ddaf8ac28f493697bad28e57d5064911c8819", 0xae}, {&(0x7f0000000500)="ffdf7ba2a7bec45a4241b73c503548c585bbecc9869af8ced616c375bdd1f74ad8a3dfe0b91d4ff9f473080c45da307f487e92cd322ac22751a0a615a733605c6c1b2b002261a9c0b85890ca5cafb9c0a34754c82444e59d5be90a965370389598df4405bffd72b958b0522d831e81e23e92587806be4a1f1d3b2d294de693e324b1a36c7f45b15a580d4f99927a1d098f7b5d09c23b98767b66250441bf3a38d3a04a6f67ca1f591e91bbe6475180fec3b19d90e95b3debca0e5f64eadff88fe3004548a17964154799e957e49dce9ebc21f56ffee2bfe8aa2bb1d2ae5c", 0xde}], 0x6, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x18}}, {{&(0x7f0000000640)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000680)="910221c37b1d622eba22869b9ded5b45ac921c657b82c6b5b4a4cdff33839e62d5b38948b3d3118bf7b06e76300f44e4cc582ba4918bfb1869907aa2542848dd1ab7103c8e43071276cebbdc21eadc50e0a8a2315a11fe166c836298b8a988ed1139e6147fd9f49eacf11e9d5ea833a9c859f9680fc4b36bb0c2c9a954f5054ce5269d8e696040c2eac811b49ca1a740a46d0c3c4ad77d6b157e5a66442248df2bc4d218e033", 0xa6}], 0x1, &(0x7f0000000780)=[@ip_ttl={{0x14, 0x0, 0x2, 0x40}}], 0x18}}, {{&(0x7f00000007c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000800)}, {&(0x7f0000000840)="15c905cf68f3b27a596bb5d5775830029027b201943a9402ceefb706f2", 0x1d}, {&(0x7f0000000880)="3f3c1bc8dbbcafe1ff0181c2acfc5e7e9690d9099144d6520b9b380a438291cb55ad4b4f8f235c416461b58361fe619ee06fcf997da21b3163682fc3c1968a", 0x3f}, {&(0x7f00000008c0)="5d4227612f385426ac71a1bb7eedad5504cde0e2fa48b5ce95d0b9b783549606bcad24a587ba424721de22170381c7700c1d00bf9fc24e459c9705365ef906c276991866ab616178334b30acd5932856371545d4f4b6a4584b72ba44c127d07ed23a703da80da14c33d6bf6935209201716d859d1b485a332e6eda6b67955eddf0ec249f75dac7826f236a41d584", 0x8e}, {&(0x7f0000000980)="fdbedeb99c478e4ab9257c35ab96f208e57786f18590321fad4bf825c775c61c3252867494b9ecc42ddb36a25020cc54db4f7bcd77267f92248637adf9974c8cb55a56d9b9707a5e8a84e895d5fafcb5de4a517f0f25abe5a7710ea1eae9e7693196e0a35a0416ff456cbc3c4d69efcf34", 0x71}, {&(0x7f0000000a00)}], 0x6}}, {{&(0x7f0000000ac0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000b00)="1c1c6f847b6697d907d77c3cccba0df871da098c89ba23ba352f6e52cab05b0433c76f2539c6fce4d33ad822453a603ca1e2449753c47488892c4ebd33aa95e4179521e3351d47fc67c20cf6426ae6b39c2f3e126f65b95b79eba301b74a61c99510f0767a71aed50984e35358f769440f7e4f830d99", 0x76}, {&(0x7f0000000b80)="0759a7010d92700b5c34a327e903636510a9affc56faefc1f4827f759dba5ba57396394f9ada85386b937295b330d606df1c1a9829305a9305d24942df9af749c0f0cdd634bb49c772504a09c6dacbaebbb536fa20af617c95d993239ed24820cb973a49d2eace37e05b7f2bb7b4efb6d124485bfdc6baeb769d9dbfcd741bf0636e185f699acc6aa074047a3add6dc65371d6a62fcf7638c819ce0211f671e2991b538ed8564503b55d9a58df686e0ac553cb932f12118794c6d1c31936cc7e51ddf354a9a38f006279cea0b852d2cab08e7df588d14155b8519f", 0xdb}, {&(0x7f0000000c80)="4cca47a5073ff8387c8355e6c266066b75089d912bbbf99282a8b727f4f841e2baf309448216a73d06dc14b5ad7c145c6609f46d04096286c6bc3b090937503f3a79aae49d66a0ae45617c3843a6451b8d9515b13e47f0e70d5cf7d4c99327b5a2438c7c3862f25c5ec86e7039dea1bc8be46e", 0x73}, {&(0x7f0000000d00)="9db72b6c32b425ce94374cc86c996ed241aef91ba1120e3fb990da2e975188c0d904097c83d98046a17dd021095899dd14ea8be7c7ac40eddf99c9f740df3c9086e92cf1f0d821fe1286692221a94b8f17aa2d00bcb0aea3fc0eac4f2dea9b62b4843bed74c3ff8541c6d1a0a1a5f72698451156f350031e2d08060103ae789d690c5107659d746ef2b6ca87f175be4bebfeed5ec53ccc0567bc7a23468472c24cf1aa568de2707c", 0xa8}, {&(0x7f0000000dc0)="a577ef5bdc17fec54a18dc60bbf426b6f5cb2c8abd76e3dee820ab0871f19de59357b1a1ae9e469d5cdd1e3e277e4da7fd85a126084d534b75a08ea7a860a1957839176889a8ba7c1e4d6e4e3a41fdbf2727dfd430cc376cdd18f27ed3ce1198923d1661743b0ec388a0d6dc0fd2f79c5c721c96c5cd3170ed9d2187abf914354ec4d1a1239a5f3d740ff66f34777784b03e24f0c20e6e7e90b910ef2087d7e38a", 0xa1}, {&(0x7f0000000e80)="714ccfb19f413ae2e8d8dd3425d758a46b3e7926c3da50d34d76452e77e768346d4d83bb1c48f3efb63a307da3c5ea01f5ec523188f4900fd09348f96a6f1b0de2373577f17b6918ae4b5f7c1df9c71cee1a6137b677933eddfcd99f133f9a134a1892f460b4283a4fe5f9ca66f942838aee28855911e9a07af2c1a407d2bf80336006e34162ee4cc0c4c3689521d5a62a7fe09c55ad7def219aca17efa38de01f40c9d7a05c62f5ad14d6aa320964d3621b2b6234", 0xb5}], 0x6, &(0x7f0000000fc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001000)="138092c56f922f341a8c00421fc4fa01caff91aa0d2c4f0d704740108236731293ec25e0c7cdc787aa4bff0318910ba8bb3449d88997ea19bb102c7687e31f6c37ec01f3ee90dd12bc52ea4eb65329773ce3546609761f25a6a1be462ae51a3895c8d5e88f8dde5173c5c970280d7156ff3ff6c93a90340b5286fb5ec715df783af934357def695c3f3949acac93cb642767c99d682a34b5819ec7445734984862f46726363beba929ccfedafdc7cf54806823b3ae7b16b69a6b0cf0681cd0ff7f79a91407cd83f8c2a8b54a5ce940b10d48", 0xd2}, {&(0x7f0000001100)="3f768e4b590be02191286d3e61927a8257de14ee5e73164f2c10eb206582ccdf806eb67c21226540eb60e0767a10a7fc5bb7d4f1bcf5f6666c5f4cbb342c9b37603014c8723da2f0be0b975da81ed0d18b79f60bf6e86718cf8abe8833", 0x5d}], 0x2, &(0x7f0000001280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xa9, 0x3, 0x0, [{@loopback, 0x4}]}, @noop, @timestamp_addr={0x44, 0xc, 0x6a, 0x1, 0x5, [{@empty, 0xd}]}, @timestamp_prespec={0x44, 0x24, 0x49, 0x3, 0xa, [{@loopback, 0x2}, {@multicast1, 0x9}, {@broadcast, 0x7f}, {@multicast2, 0xe6}]}, @generic={0x7, 0xa, "c5e9de03c228408c"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @broadcast}}}], 0x100}}], 0x6, 0x0) 31.332258331s ago: executing program 4 (id=394): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000080)=0x401, 0x4) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000180)='wg1\x00', 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x100, @remote, 0x6}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000140)={r3, 0x7fffffffffffffff, 0x2, 0x9}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x101}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000240)={r5, @in={{0x2, 0x4e20, @private=0xa010102}}, [0x3, 0x5, 0xfffffffffffffff7, 0x3, 0x9, 0x3, 0x7e, 0x8, 0x7f, 0x8, 0x7ff, 0x0, 0xf, 0x1, 0x3]}, &(0x7f0000000340)=0x100) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYRES32], 0x548}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000030601080000000000000000010000050900220073797a32000000000900020073797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2040010}, 0x51) 19.40130162s ago: executing program 7 (id=1294): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) syz_emit_ethernet(0xca, &(0x7f0000000640)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @local, {[@rr={0x7, 0x3, 0xdd}, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback}, {}, {@local}, {@loopback}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000340), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001240)={'ip_vti0\x00', &(0x7f00000011c0)={'erspan0\x00', 0x0, 0x7800, 0x700, 0x2, 0x7, {{0x16, 0x4, 0x2, 0x35, 0x58, 0x64, 0x0, 0x1, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xf, 0x8e, [@remote, @rand_addr=0x64010102, @empty]}, @timestamp={0x44, 0x10, 0xad, 0x0, 0x1, [0xcb64, 0x938, 0x200000]}, @cipso={0x86, 0xf, 0xffffffffffffffff, [{0x0, 0x9, "6232c4c32c941f"}]}, @timestamp={0x44, 0x14, 0xee, 0x0, 0x7, [0xa, 0xb3b, 0x5, 0x91d2]}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001380)=[{{&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="653afbb344bdd7f91bb428663016d74fc39b45f9982193510cf370dddb7f31", 0x1f}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="4296bf03ae7b5c65f5742bf848ca018c24eb7c2bf10aef07cf5477791e", 0x1d}, {&(0x7f00000001c0)="6ba0505c7983c4978084e65fc7a32fd44c2e1305bae2464571747716b8eb86e2e583d776e8f1405ab1be3a01db43987898fd5d923228c66388b83e4b4afa4521840a16e0907dd563dfc810dd7e6efb9f2ae101260d446a1bf2cf61af72657d27e5e41b2e50b20f6ec4832ed42378b6cb131437cf51c175243c2223299acdf510e0663f7007a381b48d92bc2cfb4be0775eff7ed3b8ce499e05980b78f946", 0x9e}, {&(0x7f0000000280)="e7dab0662eb0e02ada73a959f1caff6936e82b1e35992c8a7dc05484bfe7320bca835991cfd3ba6038", 0x29}, {&(0x7f0000000380)="89f702d190abc3b5e555f3d3a8aa0a4fa5fe39fef3ed954e940a6a88e0aba1a15ebe1275776f33bf5e7056db2e385b3c6dc21016846abe209c0de1946fe39d05eb55ff35b4827168c961196e5871be5d2607e0679f1bb0088f70bc45f333b96215e72c674df12bb9413eeb3073d360fe963cbe448c6686da55df65492929ec6186d9454cff7086d2bc", 0x89}, {&(0x7f0000000440)="3818a1d5ebb143a652f670e63dac0d6a28d96df123d9c747a7533be8f335d5a922d560d406acb4fdc6da27d32ff264ca433163c4a0b68d609bd6a82fdde07128f521db73c7a03d58f783777b2b5fb09c133f3813c17558d09bbeac547c1a74600edccc91d66650dd774828e1bf61ac7b93872779ed0259a83a240d51face560397475865c175d2b7fb6b612a21288c1e29c8a5ccb6d93ae9cab6347ddaf8ac28f493697bad28e57d5064911c8819", 0xae}, {&(0x7f0000000500)="ffdf7ba2a7bec45a4241b73c503548c585bbecc9869af8ced616c375bdd1f74ad8a3dfe0b91d4ff9f473080c45da307f487e92cd322ac22751a0a615a733605c6c1b2b002261a9c0b85890ca5cafb9c0a34754c82444e59d5be90a965370389598df4405bffd72b958b0522d831e81e23e92587806be4a1f1d3b2d294de693e324b1a36c7f45b15a580d4f99927a1d098f7b5d09c23b98767b66250441bf3a38d3a04a6f67ca1f591e91bbe6475180fec3b19d90e95b3debca0e5f64eadff88fe3004548a17964154799e957e49dce9ebc21f56ffee2bfe8aa2bb1d2ae5c", 0xde}], 0x6, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x18}}, {{&(0x7f0000000640)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000680)="910221c37b1d622eba22869b9ded5b45ac921c657b82c6b5b4a4cdff33839e62d5b38948b3d3118bf7b06e76300f44e4cc582ba4918bfb1869907aa2542848dd1ab7103c8e43071276cebbdc21eadc50e0a8a2315a11fe166c836298b8a988ed1139e6147fd9f49eacf11e9d5ea833a9c859f9680fc4b36bb0c2c9a954f5054ce5269d8e696040c2eac811b49ca1a740a46d0c3c4ad77d6b157e5a66442248df2bc4d218e033", 0xa6}], 0x1, &(0x7f0000000780)=[@ip_ttl={{0x14, 0x0, 0x2, 0x40}}], 0x18}}, {{&(0x7f00000007c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000800)}, {&(0x7f0000000840)="15c905cf68f3b27a596bb5d5775830029027b201943a9402ceefb706f2", 0x1d}, {&(0x7f0000000880)="3f3c1bc8dbbcafe1ff0181c2acfc5e7e9690d9099144d6520b9b380a438291cb55ad4b4f8f235c416461b58361fe619ee06fcf997da21b3163682fc3c1968a", 0x3f}, {&(0x7f00000008c0)="5d4227612f385426ac71a1bb7eedad5504cde0e2fa48b5ce95d0b9b783549606bcad24a587ba424721de22170381c7700c1d00bf9fc24e459c9705365ef906c276991866ab616178334b30acd5932856371545d4f4b6a4584b72ba44c127d07ed23a703da80da14c33d6bf6935209201716d859d1b485a332e6eda6b67955eddf0ec249f75dac7826f236a41d584", 0x8e}, {&(0x7f0000000980)="fdbedeb99c478e4ab9257c35ab96f208e57786f18590321fad4bf825c775c61c3252867494b9ecc42ddb36a25020cc54db4f7bcd77267f92248637adf9974c8cb55a56d9b9707a5e8a84e895d5fafcb5de4a517f0f25abe5a7710ea1eae9e7693196e0a35a0416ff456cbc3c4d69efcf34", 0x71}, {&(0x7f0000000a00)}], 0x6}}, {{&(0x7f0000000ac0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000b00)="1c1c6f847b6697d907d77c3cccba0df871da098c89ba23ba352f6e52cab05b0433c76f2539c6fce4d33ad822453a603ca1e2449753c47488892c4ebd33aa95e4179521e3351d47fc67c20cf6426ae6b39c2f3e126f65b95b79eba301b74a61c99510f0767a71aed50984e35358f769440f7e4f830d99", 0x76}, {&(0x7f0000000b80)="0759a7010d92700b5c34a327e903636510a9affc56faefc1f4827f759dba5ba57396394f9ada85386b937295b330d606df1c1a9829305a9305d24942df9af749c0f0cdd634bb49c772504a09c6dacbaebbb536fa20af617c95d993239ed24820cb973a49d2eace37e05b7f2bb7b4efb6d124485bfdc6baeb769d9dbfcd741bf0636e185f699acc6aa074047a3add6dc65371d6a62fcf7638c819ce0211f671e2991b538ed8564503b55d9a58df686e0ac553cb932f12118794c6d1c31936cc7e51ddf354a9a38f006279cea0b852d2cab08e7df588d14155b8519f", 0xdb}, {&(0x7f0000000c80)="4cca47a5073ff8387c8355e6c266066b75089d912bbbf99282a8b727f4f841e2baf309448216a73d06dc14b5ad7c145c6609f46d04096286c6bc3b090937503f3a79aae49d66a0ae45617c3843a6451b8d9515b13e47f0e70d5cf7d4c99327b5a2438c7c3862f25c5ec86e7039dea1bc8be46e", 0x73}, {&(0x7f0000000d00)="9db72b6c32b425ce94374cc86c996ed241aef91ba1120e3fb990da2e975188c0d904097c83d98046a17dd021095899dd14ea8be7c7ac40eddf99c9f740df3c9086e92cf1f0d821fe1286692221a94b8f17aa2d00bcb0aea3fc0eac4f2dea9b62b4843bed74c3ff8541c6d1a0a1a5f72698451156f350031e2d08060103ae789d690c5107659d746ef2b6ca87f175be4bebfeed5ec53ccc0567bc7a23468472c24cf1aa568de2707c", 0xa8}, {&(0x7f0000000dc0)="a577ef5bdc17fec54a18dc60bbf426b6f5cb2c8abd76e3dee820ab0871f19de59357b1a1ae9e469d5cdd1e3e277e4da7fd85a126084d534b75a08ea7a860a1957839176889a8ba7c1e4d6e4e3a41fdbf2727dfd430cc376cdd18f27ed3ce1198923d1661743b0ec388a0d6dc0fd2f79c5c721c96c5cd3170ed9d2187abf914354ec4d1a1239a5f3d740ff66f34777784b03e24f0c20e6e7e90b910ef2087d7e38a", 0xa1}, {&(0x7f0000000e80)="714ccfb19f413ae2e8d8dd3425d758a46b3e7926c3da50d34d76452e77e768346d4d83bb1c48f3efb63a307da3c5ea01f5ec523188f4900fd09348f96a6f1b0de2373577f17b6918ae4b5f7c1df9c71cee1a6137b677933eddfcd99f133f9a134a1892f460b4283a4fe5f9ca66f942838aee28855911e9a07af2c1a407d2bf80336006e34162ee4cc0c4c3689521d5a62a7fe09c55ad7def219aca17efa38de01f40c9d7a05c62f5ad14d6aa320964d3621b2b6234", 0xb5}], 0x6, &(0x7f0000000fc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001000)="138092c56f922f341a8c00421fc4fa01caff91aa0d2c4f0d704740108236731293ec25e0c7cdc787aa4bff0318910ba8bb3449d88997ea19bb102c7687e31f6c37ec01f3ee90dd12bc52ea4eb65329773ce3546609761f25a6a1be462ae51a3895c8d5e88f8dde5173c5c970280d7156ff3ff6c93a90340b5286fb5ec715df783af934357def695c3f3949acac93cb642767c99d682a34b5819ec7445734984862f46726363beba929ccfedafdc7cf54806823b3ae7b16b69a6b0cf0681cd0ff7f79a91407cd83f8c2a8b54a5ce940b10d48", 0xd2}, {&(0x7f0000001100)="3f768e4b590be02191286d3e61927a8257de14ee5e73164f2c10eb206582ccdf806eb67c21226540eb60e0767a10a7fc5bb7d4f1bcf5f6666c5f4cbb342c9b37603014c8723da2f0be0b975da81ed0d18b79f60bf6e86718cf8abe8833", 0x5d}], 0x2, &(0x7f0000001280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xa9, 0x3, 0x0, [{@loopback, 0x4}]}, @noop, @timestamp_addr={0x44, 0xc, 0x6a, 0x1, 0x5, [{@empty, 0xd}]}, @timestamp_prespec={0x44, 0x24, 0x49, 0x3, 0xa, [{@loopback, 0x2}, {@multicast1, 0x9}, {@broadcast, 0x7f}, {@multicast2, 0xe6}]}, @generic={0x7, 0xa, "c5e9de03c228408c"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @broadcast}}}], 0x100}}], 0x6, 0x0) 17.707409896s ago: executing program 4 (id=394): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000080)=0x401, 0x4) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000180)='wg1\x00', 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x100, @remote, 0x6}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000140)={r3, 0x7fffffffffffffff, 0x2, 0x9}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x101}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000240)={r5, @in={{0x2, 0x4e20, @private=0xa010102}}, [0x3, 0x5, 0xfffffffffffffff7, 0x3, 0x9, 0x3, 0x7e, 0x8, 0x7f, 0x8, 0x7ff, 0x0, 0xf, 0x1, 0x3]}, &(0x7f0000000340)=0x100) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYRES32], 0x548}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000030601080000000000000000010000050900220073797a32000000000900020073797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2040010}, 0x51) 5.712817745s ago: executing program 0 (id=1715): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0x91, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev}}}}}}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x5f, @empty, 0x99f}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @private2}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x88, 0x464, 0x10, 0x70bd27, 0x25dfdbfc, "718b4790c4f8718aade28e6958db09642407779e927aa89d14e6c05597b235fafbd2115e06a1dca3ea658f3522fb8cbcd414c3cf0d87897d746b0a6bf63e276aaabebcc9b25efde55d8d5701930fb88580c1470c1b319c007aa7c5fd6b3bf66d3049b6cccb728bf5aa0a2688502277e58dc38bb8828f", ["", "", "", "", "", "", "", ""]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) socket$unix(0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000010000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0x1}, {{@in=@local, 0x4, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x3, 0x4, 0xfffffffd, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$inet6(0xa, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0x91, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev}}}}}}}, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x5f, @empty, 0x99f}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @private2}, 0x1c) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x88, 0x464, 0x10, 0x70bd27, 0x25dfdbfc, "718b4790c4f8718aade28e6958db09642407779e927aa89d14e6c05597b235fafbd2115e06a1dca3ea658f3522fb8cbcd414c3cf0d87897d746b0a6bf63e276aaabebcc9b25efde55d8d5701930fb88580c1470c1b319c007aa7c5fd6b3bf66d3049b6cccb728bf5aa0a2688502277e58dc38bb8828f", ["", "", "", "", "", "", "", ""]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) socket$unix(0x1, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x4) (async) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000010000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0x1}, {{@in=@local, 0x4, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x3, 0x4, 0xfffffffd, 0x3}}, 0xe8) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) 5.496802175s ago: executing program 0 (id=1716): unshare(0x400) r0 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0xe, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}]}, 0x20}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000180)="2e9b3d0007e03dd65193dfb6c575963f86ddf067124c922f2b8db0049d90490000ebfd26d4eef23248000000f858dbb8a19052343fde74b0", 0x38}, {&(0x7f0000000300)="608b", 0x2}], 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x18, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {0x4e22, 0xe22, 0x18, 0x0, @wg=@data={0x4, 0xd}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000041000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r6, @ANYBLOB="08000400ffff"], 0x4c}}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x630281, 0x0) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000080)=0x10001) 5.196605014s ago: executing program 0 (id=1717): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8c1c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}}, 0x24000040) 5.049818151s ago: executing program 7 (id=1294): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) syz_emit_ethernet(0xca, &(0x7f0000000640)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @local, {[@rr={0x7, 0x3, 0xdd}, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback}, {}, {@local}, {@loopback}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000340), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001240)={'ip_vti0\x00', &(0x7f00000011c0)={'erspan0\x00', 0x0, 0x7800, 0x700, 0x2, 0x7, {{0x16, 0x4, 0x2, 0x35, 0x58, 0x64, 0x0, 0x1, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xf, 0x8e, [@remote, @rand_addr=0x64010102, @empty]}, @timestamp={0x44, 0x10, 0xad, 0x0, 0x1, [0xcb64, 0x938, 0x200000]}, @cipso={0x86, 0xf, 0xffffffffffffffff, [{0x0, 0x9, "6232c4c32c941f"}]}, @timestamp={0x44, 0x14, 0xee, 0x0, 0x7, [0xa, 0xb3b, 0x5, 0x91d2]}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001380)=[{{&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="653afbb344bdd7f91bb428663016d74fc39b45f9982193510cf370dddb7f31", 0x1f}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="4296bf03ae7b5c65f5742bf848ca018c24eb7c2bf10aef07cf5477791e", 0x1d}, {&(0x7f00000001c0)="6ba0505c7983c4978084e65fc7a32fd44c2e1305bae2464571747716b8eb86e2e583d776e8f1405ab1be3a01db43987898fd5d923228c66388b83e4b4afa4521840a16e0907dd563dfc810dd7e6efb9f2ae101260d446a1bf2cf61af72657d27e5e41b2e50b20f6ec4832ed42378b6cb131437cf51c175243c2223299acdf510e0663f7007a381b48d92bc2cfb4be0775eff7ed3b8ce499e05980b78f946", 0x9e}, {&(0x7f0000000280)="e7dab0662eb0e02ada73a959f1caff6936e82b1e35992c8a7dc05484bfe7320bca835991cfd3ba6038", 0x29}, {&(0x7f0000000380)="89f702d190abc3b5e555f3d3a8aa0a4fa5fe39fef3ed954e940a6a88e0aba1a15ebe1275776f33bf5e7056db2e385b3c6dc21016846abe209c0de1946fe39d05eb55ff35b4827168c961196e5871be5d2607e0679f1bb0088f70bc45f333b96215e72c674df12bb9413eeb3073d360fe963cbe448c6686da55df65492929ec6186d9454cff7086d2bc", 0x89}, {&(0x7f0000000440)="3818a1d5ebb143a652f670e63dac0d6a28d96df123d9c747a7533be8f335d5a922d560d406acb4fdc6da27d32ff264ca433163c4a0b68d609bd6a82fdde07128f521db73c7a03d58f783777b2b5fb09c133f3813c17558d09bbeac547c1a74600edccc91d66650dd774828e1bf61ac7b93872779ed0259a83a240d51face560397475865c175d2b7fb6b612a21288c1e29c8a5ccb6d93ae9cab6347ddaf8ac28f493697bad28e57d5064911c8819", 0xae}, {&(0x7f0000000500)="ffdf7ba2a7bec45a4241b73c503548c585bbecc9869af8ced616c375bdd1f74ad8a3dfe0b91d4ff9f473080c45da307f487e92cd322ac22751a0a615a733605c6c1b2b002261a9c0b85890ca5cafb9c0a34754c82444e59d5be90a965370389598df4405bffd72b958b0522d831e81e23e92587806be4a1f1d3b2d294de693e324b1a36c7f45b15a580d4f99927a1d098f7b5d09c23b98767b66250441bf3a38d3a04a6f67ca1f591e91bbe6475180fec3b19d90e95b3debca0e5f64eadff88fe3004548a17964154799e957e49dce9ebc21f56ffee2bfe8aa2bb1d2ae5c", 0xde}], 0x6, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x18}}, {{&(0x7f0000000640)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000680)="910221c37b1d622eba22869b9ded5b45ac921c657b82c6b5b4a4cdff33839e62d5b38948b3d3118bf7b06e76300f44e4cc582ba4918bfb1869907aa2542848dd1ab7103c8e43071276cebbdc21eadc50e0a8a2315a11fe166c836298b8a988ed1139e6147fd9f49eacf11e9d5ea833a9c859f9680fc4b36bb0c2c9a954f5054ce5269d8e696040c2eac811b49ca1a740a46d0c3c4ad77d6b157e5a66442248df2bc4d218e033", 0xa6}], 0x1, &(0x7f0000000780)=[@ip_ttl={{0x14, 0x0, 0x2, 0x40}}], 0x18}}, {{&(0x7f00000007c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000800)}, {&(0x7f0000000840)="15c905cf68f3b27a596bb5d5775830029027b201943a9402ceefb706f2", 0x1d}, {&(0x7f0000000880)="3f3c1bc8dbbcafe1ff0181c2acfc5e7e9690d9099144d6520b9b380a438291cb55ad4b4f8f235c416461b58361fe619ee06fcf997da21b3163682fc3c1968a", 0x3f}, {&(0x7f00000008c0)="5d4227612f385426ac71a1bb7eedad5504cde0e2fa48b5ce95d0b9b783549606bcad24a587ba424721de22170381c7700c1d00bf9fc24e459c9705365ef906c276991866ab616178334b30acd5932856371545d4f4b6a4584b72ba44c127d07ed23a703da80da14c33d6bf6935209201716d859d1b485a332e6eda6b67955eddf0ec249f75dac7826f236a41d584", 0x8e}, {&(0x7f0000000980)="fdbedeb99c478e4ab9257c35ab96f208e57786f18590321fad4bf825c775c61c3252867494b9ecc42ddb36a25020cc54db4f7bcd77267f92248637adf9974c8cb55a56d9b9707a5e8a84e895d5fafcb5de4a517f0f25abe5a7710ea1eae9e7693196e0a35a0416ff456cbc3c4d69efcf34", 0x71}, {&(0x7f0000000a00)}], 0x6}}, {{&(0x7f0000000ac0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000b00)="1c1c6f847b6697d907d77c3cccba0df871da098c89ba23ba352f6e52cab05b0433c76f2539c6fce4d33ad822453a603ca1e2449753c47488892c4ebd33aa95e4179521e3351d47fc67c20cf6426ae6b39c2f3e126f65b95b79eba301b74a61c99510f0767a71aed50984e35358f769440f7e4f830d99", 0x76}, {&(0x7f0000000b80)="0759a7010d92700b5c34a327e903636510a9affc56faefc1f4827f759dba5ba57396394f9ada85386b937295b330d606df1c1a9829305a9305d24942df9af749c0f0cdd634bb49c772504a09c6dacbaebbb536fa20af617c95d993239ed24820cb973a49d2eace37e05b7f2bb7b4efb6d124485bfdc6baeb769d9dbfcd741bf0636e185f699acc6aa074047a3add6dc65371d6a62fcf7638c819ce0211f671e2991b538ed8564503b55d9a58df686e0ac553cb932f12118794c6d1c31936cc7e51ddf354a9a38f006279cea0b852d2cab08e7df588d14155b8519f", 0xdb}, {&(0x7f0000000c80)="4cca47a5073ff8387c8355e6c266066b75089d912bbbf99282a8b727f4f841e2baf309448216a73d06dc14b5ad7c145c6609f46d04096286c6bc3b090937503f3a79aae49d66a0ae45617c3843a6451b8d9515b13e47f0e70d5cf7d4c99327b5a2438c7c3862f25c5ec86e7039dea1bc8be46e", 0x73}, {&(0x7f0000000d00)="9db72b6c32b425ce94374cc86c996ed241aef91ba1120e3fb990da2e975188c0d904097c83d98046a17dd021095899dd14ea8be7c7ac40eddf99c9f740df3c9086e92cf1f0d821fe1286692221a94b8f17aa2d00bcb0aea3fc0eac4f2dea9b62b4843bed74c3ff8541c6d1a0a1a5f72698451156f350031e2d08060103ae789d690c5107659d746ef2b6ca87f175be4bebfeed5ec53ccc0567bc7a23468472c24cf1aa568de2707c", 0xa8}, {&(0x7f0000000dc0)="a577ef5bdc17fec54a18dc60bbf426b6f5cb2c8abd76e3dee820ab0871f19de59357b1a1ae9e469d5cdd1e3e277e4da7fd85a126084d534b75a08ea7a860a1957839176889a8ba7c1e4d6e4e3a41fdbf2727dfd430cc376cdd18f27ed3ce1198923d1661743b0ec388a0d6dc0fd2f79c5c721c96c5cd3170ed9d2187abf914354ec4d1a1239a5f3d740ff66f34777784b03e24f0c20e6e7e90b910ef2087d7e38a", 0xa1}, {&(0x7f0000000e80)="714ccfb19f413ae2e8d8dd3425d758a46b3e7926c3da50d34d76452e77e768346d4d83bb1c48f3efb63a307da3c5ea01f5ec523188f4900fd09348f96a6f1b0de2373577f17b6918ae4b5f7c1df9c71cee1a6137b677933eddfcd99f133f9a134a1892f460b4283a4fe5f9ca66f942838aee28855911e9a07af2c1a407d2bf80336006e34162ee4cc0c4c3689521d5a62a7fe09c55ad7def219aca17efa38de01f40c9d7a05c62f5ad14d6aa320964d3621b2b6234", 0xb5}], 0x6, &(0x7f0000000fc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001000)="138092c56f922f341a8c00421fc4fa01caff91aa0d2c4f0d704740108236731293ec25e0c7cdc787aa4bff0318910ba8bb3449d88997ea19bb102c7687e31f6c37ec01f3ee90dd12bc52ea4eb65329773ce3546609761f25a6a1be462ae51a3895c8d5e88f8dde5173c5c970280d7156ff3ff6c93a90340b5286fb5ec715df783af934357def695c3f3949acac93cb642767c99d682a34b5819ec7445734984862f46726363beba929ccfedafdc7cf54806823b3ae7b16b69a6b0cf0681cd0ff7f79a91407cd83f8c2a8b54a5ce940b10d48", 0xd2}, {&(0x7f0000001100)="3f768e4b590be02191286d3e61927a8257de14ee5e73164f2c10eb206582ccdf806eb67c21226540eb60e0767a10a7fc5bb7d4f1bcf5f6666c5f4cbb342c9b37603014c8723da2f0be0b975da81ed0d18b79f60bf6e86718cf8abe8833", 0x5d}], 0x2, &(0x7f0000001280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xa9, 0x3, 0x0, [{@loopback, 0x4}]}, @noop, @timestamp_addr={0x44, 0xc, 0x6a, 0x1, 0x5, [{@empty, 0xd}]}, @timestamp_prespec={0x44, 0x24, 0x49, 0x3, 0xa, [{@loopback, 0x2}, {@multicast1, 0x9}, {@broadcast, 0x7f}, {@multicast2, 0xe6}]}, @generic={0x7, 0xa, "c5e9de03c228408c"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @broadcast}}}], 0x100}}], 0x6, 0x0) 4.156413322s ago: executing program 0 (id=1721): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) shutdown(r7, 0x1) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000700)=0x2, 0x4) sendmsg$inet6(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) writev(r7, &(0x7f0000000680)=[{&(0x7f0000000080)="d1", 0x1}], 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000002280)={@private0, 0x200000, 0x2, 0x0, 0x0, 0xfffd}, 0x20) write$tun(r3, &(0x7f0000000340)={@val={0x1c, 0xf6}, @val, @mpls={[], @ipv4=@generic={{0x20, 0x4, 0x3, 0xb, 0x80, 0xfffe, 0x0, 0x7, 0x2, 0x0, @private=0xa010100, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x24, 0x9a, 0x1, 0x2, [{@empty, 0x10}, {@loopback, 0x7}, {@empty, 0xa}, {@broadcast, 0xa}]}, @timestamp={0x44, 0x28, 0xc8, 0x0, 0x5, [0x6, 0x401, 0x3, 0x4, 0x9, 0x6, 0x9, 0x4, 0x7fff]}, @timestamp={0x44, 0x8, 0xa2, 0x0, 0x5, [0x5]}, @rr={0x7, 0xb, 0x4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102]}, @rr={0x7, 0xb, 0x5b, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x42}]}, @end]}}}}}, 0x8e) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x24, r0, 0x121, 0x70bd2c, 0x100000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}}, 0x4000040) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x84, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_FRAME={0x50, 0x33, @probe_response={{{}, {}, @broadcast}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2, 0x1}, @val={0x2d, 0x1a}, @void, @void}}]}, 0x84}}, 0x80) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x401ffa}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x440000a0) write(0xffffffffffffffff, &(0x7f00000000c0)="4b0003000000", 0x6) socket(0x2b, 0x80801, 0x1) 3.346507722s ago: executing program 4 (id=394): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000080)=0x401, 0x4) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000180)='wg1\x00', 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x100, @remote, 0x6}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000140)={r3, 0x7fffffffffffffff, 0x2, 0x9}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x101}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000240)={r5, @in={{0x2, 0x4e20, @private=0xa010102}}, [0x3, 0x5, 0xfffffffffffffff7, 0x3, 0x9, 0x3, 0x7e, 0x8, 0x7f, 0x8, 0x7ff, 0x0, 0xf, 0x1, 0x3]}, &(0x7f0000000340)=0x100) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYRES32], 0x548}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000030601080000000000000000010000050900220073797a32000000000900020073797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2040010}, 0x51) 1.558198618s ago: executing program 0 (id=1726): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711053000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xdf48, 0x0, 0x5, 0x0, 0xd01d}, 0x0, &(0x7f00000001c0)={0x1ff}, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.557047803s ago: executing program 6 (id=1727): socket$packet(0x11, 0x3, 0x300) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r1 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x30, r5, 0x1, 0x70bd30, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8004) (async) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async, rerun: 32) r6 = socket$inet(0xa, 0x801, 0x84) (rerun: 32) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r6, 0x8) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r7, 0x0, 0x44010) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xffffff}}}}}, 0x0) (async) sendmsg$NFT_BATCH(r8, 0x0, 0x0) (async) r10 = accept4(r6, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty, 0x7}}, 0xcb3, 0x3}, &(0x7f0000000100)=0x90) recvmmsg(r3, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f00000002c0)=""/25, 0x19}, {&(0x7f0000000440)=""/71, 0x47}, {&(0x7f0000001940)=""/4102, 0x1006}, {&(0x7f00000006c0)=""/232, 0xe8}], 0x5}}], 0x4, 0x40000100, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (rerun: 32) write$tun(r0, &(0x7f0000000440)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "6ad9ba", 0x44, 0x2f, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x0, 0x5}, 0x1, {0x10}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x4, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}, 0x7a) 1.031878832s ago: executing program 6 (id=1730): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000200)="8f", 0x1}], 0x1}, 0x10) sendmmsg(r0, &(0x7f000000e240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848010000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x80) 914.686749ms ago: executing program 6 (id=1733): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r2, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001800110101000000000000000a3f000000000006"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007c80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0xffe0}}]}}]}, 0x38}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 799.045093ms ago: executing program 5 (id=1734): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="20000000000000004000128008000100687372003400028008000200", @ANYRES32=r1, @ANYBLOB="050006000000000008000100", @ANYRES32=r3, @ANYBLOB="05000700010000000500030000000000050007"], 0x60}}, 0x0) 722.106199ms ago: executing program 6 (id=1735): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000042c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000004300)={'wlan0\x00', 0x0}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x20, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}, @call={0x85, 0x0, 0x0, 0x82}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000300)='GPL\x00', 0x7c6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1bb35, 0xffffffffffffffff, 0x3, &(0x7f0000000380)=[0xffffffffffffffff], &(0x7f00000003c0)=[{0x1, 0x3, 0xa, 0x9}, {0x0, 0x3, 0x9, 0x2}, {0x5, 0x3, 0x1, 0x2}], 0x10, 0x1, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffff001}]}}]}, 0x38}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r8, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r9, 0x900}, 0x38) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r10, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x13, r10, 0xa896f000) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0x1}, &(0x7f0000000580), &(0x7f00000005c0)='%+9llu \x00'}, 0x20) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) sendfile(0xffffffffffffffff, r11, 0x0, 0x7) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r11, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, r11, 0xffff8000, '\x00', 0x0, r10, 0x3, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x13, 0xf, &(0x7f00000007c0)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x23, r0, 0x8, &(0x7f00000001c0)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x10, 0x6, @void, @value}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000043c0)={0x0, 0x0, &(0x7f0000004380)={&(0x7f0000000780)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x3041}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x4040040) 628.781954ms ago: executing program 0 (id=1736): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x2, 0x11, 0x15be, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) shutdown(r0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8948, &(0x7f0000000580)={'bond0\x00'}) write(r0, 0x0, 0x0) 504.585422ms ago: executing program 5 (id=1737): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$netlink(0x10, 0x3, 0x15) write(r3, &(0x7f0000000000)="2700000014000707030e0000120f0a0004000100f5fe009d2fb112ff000000008a151f75080039", 0x27) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) (async) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 501.127792ms ago: executing program 6 (id=1738): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x200000000000011, 0x2, 0x1) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xfffffdae}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbaddefdaa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c755ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x290}}, 0x4048010) bind$alg(r4, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000002d80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001701000800000000000000000000000010000000000000001701000003"], 0x30}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000001880)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x0, 0x1c8, 0x280, 0x280, 0x0, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xff000000, 'netpci0\x00', 'geneve0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@ip={@local, @local, 0x0, 0x0, 'vcan0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz1\x00'}}}, {{@ip={@broadcast, @rand_addr=0x4, 0x0, 0xffffff00, 'ip6erspan0\x00', 'team_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @TTL={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_LEAVE_MESH(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x33fe0}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_UPDATE_FT_IES(r9, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)={0x104, r11, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x2b, 0x2a, [@dsss={0x3, 0x1, 0xaf}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @supported_rates={0x1, 0x5, [{0x9154c3ea78dadbe3, 0x1}, {0x4, 0x1}, {0x30}, {0x6c, 0x1}, {0x1, 0x1}]}, @chsw_timing={0x68, 0x4, {0x1, 0x4}}, @link_id={0x65, 0x12, {@random="af3e0b8bad5f", @device_b, @broadcast}}]}, @NL80211_ATTR_IE={0xb3, 0x2a, [@dsss={0x3, 0x1, 0xe}, @peer_mgmt={0x75, 0x4, {0x1, 0x8, @void, @void, @void}}, @fast_bss_trans={0x37, 0x7a, {0xf, 0x2, "0e29ee617a5824fe0af4d341ac5a92a0", "4b4f88da302ba201f76fb4a34524ec02fe637964e3ca809dcb23eaedaf45f836", "f36786312748c9f72d9b689306224c6b832d5a89dfa6676244036d811c08a10d", [{0x3, 0x1c, "8761ffa050085f8846c39b3e25594aca09bcc543e55dfadfd3d396c4"}, {0x3, 0x8, "0c1807ba3671375c"}]}}, @peer_mgmt={0x75, 0x16, {0x1, 0x81, @val=0x7, @void, @val="7b16754b77363c9708ec0b5ed7f4c170"}}, @channel_switch={0x25, 0x3, {0x1, 0xb9, 0x9}}, @cf={0x4, 0x6, {0x7, 0xc, 0x4, 0x100}}, @channel_switch={0x25, 0x3, {0x0, 0x84, 0xc9}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x101}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1000}]}, 0x104}, 0x1, 0x0, 0x0, 0x200440c1}, 0x4040800) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) 324.176978ms ago: executing program 5 (id=1739): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x4c, 0x30, 0x800, 0x0, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_ife={0x0, 0x4, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x0, 0x6, [@IFE_META_SKBMARK={0x0, 0x1, @void}, @IFE_META_TCINDEX={0x0, 0x5, @val=0x6}, @IFE_META_PRIO={0x0, 0x3, @val=0x976}, @IFE_META_SKBMARK={0x0, 0x1, @val=0x7}, @IFE_META_TCINDEX={0x0, 0x5, @void}, @IFE_META_PRIO={0x0, 0x3, @void}, @IFE_META_PRIO={0x0, 0x3, @val=0x7f}]}, @TCA_IFE_DMAC={0x0, 0x3, @remote}, @TCA_IFE_TYPE={0x0, 0x5, 0x69dd}, @TCA_IFE_TYPE={0x0, 0x5, 0x4}]}, {0x0, 0x6, "453da0fc59a9c7dde3bbe6a182b86811e314b6780ca2b0ee18c5d5691cb524237922ee32375317eeccfd572c08c0d8dcd9eec3c68ff22d9de8dc47efc756d5513fd0993f5ea620135cc5f983ef0efd6352e87a2f30e15b9c35505509814c0d597ffa8942575f0b5d48c7ed9484d4634d240e01c7b508c78e5575c450c196af4f70e63ee474627175b6f3ad19cf79ff5f13f9341ccb77900103d200"/164}, {}, {0x0, 0x8, {0x1, 0x5}}}}]}]}, 0x4c}}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@deltfilter={0x34, 0x2d, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffe0, 0x8}, {0x9, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x7e, 0x13}}, @TCA_CHAIN={0x8, 0xb, 0x9ef}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8801) 291.070235ms ago: executing program 6 (id=1740): writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000040000000560000022500000019000a001000000007fd", 0x2a}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x2, 0x0, 0x0, 0x6, 0x4, [{0xd, 0x9}, {}, {0x1, 0x1}, {0xe, 0x6}, {0x7, 0x80000000}, {0x6, 0xe}, {0x2, 0x7}, {0x1, 0xb6c}, {0xf, 0x6}, {0xf, 0x1}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x30]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x36) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x20, @multicast2}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000004c0)=[@in6={0xa, 0x3, 0x9, @mcast2, 0x9}], 0x1c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x2c, r3, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x9b639ffca15f133, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x26, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) 106.197049ms ago: executing program 5 (id=1741): getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000), 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000), 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) (async) 78.194362ms ago: executing program 5 (id=1742): syz_emit_ethernet(0x117, &(0x7f0000000280)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x109, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo={0x8, 0x0, 0x0, 0xfff, 0x200, "6941651a3eeff5fb2327010d2bfd6aa17ae754c49378de201074cb650c309ed52e6e5b5d79d3abc5080088fb047cbdac81315eff8096320e74a89f96a9a5835b0d2a9fc009ad6e5f2f7b06153ca8f3f542c947d6d8abae7116640e1cf1493de89f24e2ede9ec434d035eef8a552bb2239e46a16c05287ef261d2e13712690095de9b04d74b4b6e4700efcf4e825abb08f23a0b3b5ed79c300c3841743916cb5c07c41447f56a542a014f7296a71fb621f347d78db7eeed90e76a324aeecff0ab7e35852137b56a5d120d5718320cb4ad4ddfb552e4e55c2437f200"/237}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c00000002060500000000000000000000000000120003006269746d61703a6970006d616300000005000400000000000900020073797a3100000000200007800c00018008000140000000000800080000000000080006400000000005000500020000000500010006"], 0x6c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0x801c581f, 0x30000002000005c) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0x801c581f, 0x30000002000005c) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) 0s ago: executing program 5 (id=1743): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'caif0\x00'}) unshare(0x22020600) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2688644c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x1e, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x3}, @generic={0x6, 0x1, 0x9, 0x4e2, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @ringbuf_query, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @generic={0x42, 0xa, 0x6, 0x2, 0x80000000}, @generic={0x9a, 0x7, 0xd, 0xa3f, 0x800}, @map_fd={0x18, 0x9, 0x1, 0x0, r4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x28, &(0x7f0000000280)=""/40, 0x41100, 0x65, '\x00', 0x0, @fallback=0xb, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x2, 0x7, 0x4, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000440)=[r0], &(0x7f00000005c0)=[{0x0, 0x3, 0x10, 0x4}], 0x10, 0x1b, @void, @value}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000006c0)=@generic={&(0x7f0000000140)='./file0\x00', r6}, 0x18) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, {}, {0x1, 0x0, 0x0, 0xfffffffffffffffd}}}, 0xb8}}, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) (rerun: 64) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff}, 0x6) kernel console output (not intermixed with test programs): 189] netlink: 'syz.6.1218': attribute type 1 has an invalid length. [ 216.141206][ T5849] Bluetooth: hci3: command tx timeout [ 216.450679][T10124] chnl_net:caif_netlink_parms(): no params data found [ 216.507470][T10225] __nla_validate_parse: 67 callbacks suppressed [ 216.507490][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1226'. [ 216.702767][T10240] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1229'. [ 216.758961][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1230'. [ 216.819348][T10124] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.832912][T10124] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.840664][T10124] bridge_slave_0: entered allmulticast mode [ 216.857924][T10124] bridge_slave_0: entered promiscuous mode [ 216.870282][T10124] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.877641][T10124] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.884885][T10124] bridge_slave_1: entered allmulticast mode [ 216.894305][T10124] bridge_slave_1: entered promiscuous mode [ 216.902954][T10238] netlink: 'syz.0.1230': attribute type 5 has an invalid length. [ 216.938941][T10238] netlink: 'syz.0.1230': attribute type 17 has an invalid length. [ 217.228600][T10124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.262635][T10124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.492949][T10124] team0: Port device team_slave_0 added [ 217.520491][T10124] team0: Port device team_slave_1 added [ 217.634888][T10124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.654496][T10124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.700822][T10124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.744529][T10124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.775823][T10124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.835212][T10124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.881588][T10295] bridge_slave_1: entered promiscuous mode [ 217.909447][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1246'. [ 217.955331][T10124] hsr_slave_0: entered promiscuous mode [ 217.979554][ T30] audit: type=1107 audit(1746471448.879:2): pid=10297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ó}—óãá’g¬Â¶àÞ›/c"£ÿ’æ2ú“ßæW‡MÍDül-‡ÅëÅ’=ao©I´øf†½Ô,¡áß'óm&xεø*Èïņóé7ôŠöI¢TY¾ªzÀ7ò4~žáù*7ˆMp©.´–O?A$ŠTeι‰J•¼ì*z€*Ê$˜©U(kcsÛƒwz·; š÷ß¹¬ôO‡òÏ^a8«N' [ 218.009870][T10124] hsr_slave_1: entered promiscuous mode [ 218.019268][T10124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.028725][T10124] Cannot create hsr debugfs directory [ 218.034485][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1246'. [ 218.054381][T10294] bridge_slave_1: left promiscuous mode [ 218.207416][T10304] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x2 [ 218.217112][ T5832] Bluetooth: hci3: command tx timeout [ 218.782678][T10330] lo speed is unknown, defaulting to 1000 [ 218.833637][T10124] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.856779][T10124] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.905186][T10124] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.927395][T10333] netlink: 'syz.6.1256': attribute type 1 has an invalid length. [ 218.941190][T10124] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 219.158324][ T5882] IPVS: starting estimator thread 0... [ 219.164317][T10338] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 219.175283][T10338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.231688][T10341] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1259'. [ 219.245723][T10339] IPVS: using max 29 ests per chain, 69600 per kthread [ 219.264670][T10343] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1259'. [ 219.662897][T10124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.899147][T10124] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.986283][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.993524][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.040309][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.047546][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.254553][T10404] netlink: 'syz.0.1270': attribute type 1 has an invalid length. [ 220.306708][ T5832] Bluetooth: hci3: command tx timeout [ 220.436392][T10404] 8021q: adding VLAN 0 to HW filter on device bond6 [ 220.944024][T10124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.986538][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1278'. [ 221.016535][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1278'. [ 221.487618][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1284'. [ 221.807671][T10490] xt_NFQUEUE: number of total queues is 0 [ 221.918708][T10124] veth0_vlan: entered promiscuous mode [ 222.013884][T10124] veth1_vlan: entered promiscuous mode [ 222.110785][T10124] veth0_macvtap: entered promiscuous mode [ 222.123831][T10124] veth1_macvtap: entered promiscuous mode [ 222.175190][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.201617][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.223227][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.244644][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.282926][T10124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.304954][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1291'. [ 222.376096][ T5849] Bluetooth: hci3: command tx timeout [ 222.415949][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.420697][T10519] Bluetooth: MGMT ver 1.23 [ 222.426869][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.441764][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.455272][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.469572][T10124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.484727][T10124] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.494117][T10124] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.555192][T10124] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.589379][T10124] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.633195][T10510] syzkaller1: entered promiscuous mode [ 222.645792][T10510] syzkaller1: entered allmulticast mode [ 222.965042][ T4308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.986938][ T4308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.075007][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.109297][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.534700][T10560] netlink: 'syz.5.1298': attribute type 10 has an invalid length. [ 223.614782][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.793320][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.908855][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.987070][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.999640][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 224.008777][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 224.018314][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 224.027053][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 224.040894][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.087690][T10567] lo speed is unknown, defaulting to 1000 [ 224.231590][ T36] bridge_slave_1: left allmulticast mode [ 224.237607][ T36] bridge_slave_1: left promiscuous mode [ 224.243413][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.254649][ T36] bridge_slave_0: left allmulticast mode [ 224.261449][ T36] bridge_slave_0: left promiscuous mode [ 224.267653][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.588841][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.600386][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.611635][ T36] bond0 (unregistering): Released all slaves [ 224.743469][T10567] chnl_net:caif_netlink_parms(): no params data found [ 224.879771][ T36] hsr_slave_0: left promiscuous mode [ 224.885921][ T36] hsr_slave_1: left promiscuous mode [ 224.891771][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.899788][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.907728][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.915144][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.937074][ T36] veth1_macvtap: left promiscuous mode [ 224.943027][ T36] veth0_macvtap: left promiscuous mode [ 224.948832][ T36] veth1_vlan: left promiscuous mode [ 224.954145][ T36] veth0_vlan: left promiscuous mode [ 225.434982][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1305'. [ 225.451855][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 225.460796][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 225.471456][T10592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.480626][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 225.489634][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 225.501951][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 225.695670][ T36] team0 (unregistering): Port device team_slave_1 removed [ 225.734002][ T36] team0 (unregistering): Port device team_slave_0 removed [ 226.065821][ T5849] Bluetooth: hci3: command tx timeout [ 226.126633][T10567] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.133825][T10567] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.192266][T10567] bridge_slave_0: entered allmulticast mode [ 226.207572][T10567] bridge_slave_0: entered promiscuous mode [ 226.242570][T10590] lo speed is unknown, defaulting to 1000 [ 226.249857][T10567] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.273291][T10567] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.281482][T10567] bridge_slave_1: entered allmulticast mode [ 226.289536][T10567] bridge_slave_1: entered promiscuous mode [ 226.381231][T10606] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1307'. [ 226.395489][T10567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.491313][T10567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.613616][T10567] team0: Port device team_slave_0 added [ 226.653384][T10567] team0: Port device team_slave_1 added [ 226.749815][T10623] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1314'. [ 226.817089][T10567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.825182][T10567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.851959][T10567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.889388][T10567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.909604][T10567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.941088][T10567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.103526][T10567] hsr_slave_0: entered promiscuous mode [ 227.117990][T10567] hsr_slave_1: entered promiscuous mode [ 227.134845][T10567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.142932][T10567] Cannot create hsr debugfs directory [ 227.423009][T10590] chnl_net:caif_netlink_parms(): no params data found [ 227.577837][ T5849] Bluetooth: hci4: command tx timeout [ 227.684725][T10664] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1326'. [ 227.889344][T10567] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.939988][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1327'. [ 227.949811][T10674] netlink: 'syz.6.1329': attribute type 4 has an invalid length. [ 227.972015][T10590] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.003866][T10590] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.011571][T10590] bridge_slave_0: entered allmulticast mode [ 228.019781][T10590] bridge_slave_0: entered promiscuous mode [ 228.081781][T10567] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.102815][T10590] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.103099][T10684] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1332'. [ 228.119304][T10590] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.129378][T10590] bridge_slave_1: entered allmulticast mode [ 228.139038][ T5849] Bluetooth: hci3: command tx timeout [ 228.139344][T10590] bridge_slave_1: entered promiscuous mode [ 228.159690][T10684] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1332'. [ 228.197844][T10567] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.212161][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1332'. [ 228.241914][T10686] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1332'. [ 228.286411][T10567] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.344722][T10590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.418569][T10590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.533029][T10590] team0: Port device team_slave_0 added [ 228.549842][T10590] team0: Port device team_slave_1 added [ 228.563991][T10698] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1337'. [ 228.685083][T10705] netlink: 'syz.5.1338': attribute type 4 has an invalid length. [ 228.708220][T10590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.715341][T10590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.754221][T10590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.829610][T10590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.845909][T10590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.883260][T10712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.905761][T10590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.940298][T10567] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 228.969210][T10567] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 229.009478][T10721] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1344'. [ 229.020208][T10717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1342'. [ 229.042458][T10721] openvswitch: netlink: Flow key attr not present in new flow. [ 229.074951][T10723] netlink: 'syz.5.1345': attribute type 1 has an invalid length. [ 229.093226][T10723] netlink: 'syz.5.1345': attribute type 2 has an invalid length. [ 229.147790][T10590] hsr_slave_0: entered promiscuous mode [ 229.154512][T10590] hsr_slave_1: entered promiscuous mode [ 229.165559][T10590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.177097][T10590] Cannot create hsr debugfs directory [ 229.183045][T10567] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 229.192288][T10728] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1346'. [ 229.230062][T10567] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 229.256567][ T30] audit: type=1107 audit(1746471460.139:3): pid=10726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 229.595238][T10752] ksmbd: Unknown IPC event: 3, ignore. [ 229.705840][ T5849] Bluetooth: hci4: command tx timeout [ 229.728715][T10747] netlink: 'syz.0.1350': attribute type 12 has an invalid length. [ 229.857354][T10757] xt_ipcomp: unknown flags B [ 229.931548][T10567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.004436][T10567] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.065107][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.072335][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.082830][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.090087][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.215742][ T5849] Bluetooth: hci3: command tx timeout [ 230.369338][T10590] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 230.410513][T10590] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 230.429267][T10776] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 230.488272][T10590] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 230.527932][T10590] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 230.690524][T10790] netlink: 'syz.5.1365': attribute type 1 has an invalid length. [ 230.858847][T10791] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 230.869123][T10791] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 230.890173][T10791] bond1: (slave vcan1): making interface the new active one [ 230.898684][T10791] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 230.924002][T10796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.164592][T10567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.197596][T10806] netlink: 'syz.6.1370': attribute type 2 has an invalid length. [ 231.251811][T10590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.362276][T10590] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.391685][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.398892][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.476916][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.484146][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.743143][ T5849] Bluetooth: hci4: command tx timeout [ 231.979534][T10567] veth0_vlan: entered promiscuous mode [ 232.038366][T10567] veth1_vlan: entered promiscuous mode [ 232.062031][T10590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.142658][T10567] veth0_macvtap: entered promiscuous mode [ 232.171155][T10567] veth1_macvtap: entered promiscuous mode [ 232.203175][T10857] Cannot find add_set index 65534 as target [ 232.229376][T10567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.258886][T10567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.269884][T10567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.280862][T10567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.293150][T10567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.307845][ T5832] Bluetooth: hci3: command tx timeout [ 232.348773][T10567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.385428][T10567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.395498][T10567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.406243][T10567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.418205][T10567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.444771][T10567] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.460618][T10567] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.471107][T10567] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.483791][T10567] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.592164][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.606600][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.652710][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.652857][T10590] veth0_vlan: entered promiscuous mode [ 232.666812][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.688690][T10590] veth1_vlan: entered promiscuous mode [ 232.743229][T10590] veth0_macvtap: entered promiscuous mode [ 232.792842][T10590] veth1_macvtap: entered promiscuous mode [ 232.810729][T10590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.822732][T10590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.834043][T10590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.844748][T10590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.854721][T10590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.866878][T10590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.892157][T10590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.945571][T10590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.956514][T10590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.970618][T10590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.982405][T10590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.996599][T10590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.007767][T10590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.031919][T10590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.119170][ T63] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.147524][T10590] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.156566][T10590] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.165381][T10590] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.182573][T10590] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.233618][ T63] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.363755][T10880] netlink: 'syz.5.1390': attribute type 10 has an invalid length. [ 233.374454][ T63] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.469127][T10880] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 233.554425][ T63] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.759918][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.778101][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.816502][ T5832] Bluetooth: hci4: command tx timeout [ 233.896066][ T5849] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 233.902614][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 233.997782][T10907] FAULT_INJECTION: forcing a failure. [ 233.997782][T10907] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 234.012283][T10907] CPU: 1 UID: 0 PID: 10907 Comm: syz.0.1397 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 234.012314][T10907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 234.012327][T10907] Call Trace: [ 234.012335][T10907] [ 234.012343][T10907] dump_stack_lvl+0x189/0x250 [ 234.012376][T10907] ? __lock_acquire+0xaac/0xd20 [ 234.012407][T10907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.012435][T10907] ? __pfx__printk+0x10/0x10 [ 234.012455][T10907] ? __might_fault+0xb0/0x130 [ 234.012493][T10907] should_fail_ex+0x414/0x560 [ 234.012530][T10907] _copy_from_iter+0x1db/0x15a0 [ 234.012568][T10907] ? __pfx__copy_from_iter+0x10/0x10 [ 234.012601][T10907] ? skb_put+0x11b/0x210 [ 234.012628][T10907] hci_sock_sendmsg+0x422/0xee0 [ 234.012656][T10907] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 234.012677][T10907] ? aa_sock_msg_perm+0x94/0x160 [ 234.012700][T10907] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 234.012722][T10907] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 234.012743][T10907] __sock_sendmsg+0x219/0x270 [ 234.012777][T10907] sock_write_iter+0x258/0x330 [ 234.012809][T10907] ? __pfx_sock_write_iter+0x10/0x10 [ 234.012849][T10907] ? bpf_lsm_file_permission+0x9/0x20 [ 234.012873][T10907] ? security_file_permission+0x75/0x290 [ 234.012911][T10907] vfs_write+0x548/0xa90 [ 234.012939][T10907] ? __pfx_sock_write_iter+0x10/0x10 [ 234.012968][T10907] ? __pfx_vfs_write+0x10/0x10 [ 234.013001][T10907] ? __fget_files+0x2a/0x420 [ 234.013036][T10907] ksys_write+0x145/0x250 [ 234.013057][T10907] ? rcu_is_watching+0x15/0xb0 [ 234.013088][T10907] ? __pfx_ksys_write+0x10/0x10 [ 234.013114][T10907] ? do_syscall_64+0xba/0x210 [ 234.013142][T10907] do_syscall_64+0xf6/0x210 [ 234.013166][T10907] ? clear_bhb_loop+0x45/0xa0 [ 234.013191][T10907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.013210][T10907] RIP: 0033:0x7f65a778e969 [ 234.013227][T10907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.013244][T10907] RSP: 002b:00007f65a8591038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 234.013272][T10907] RAX: ffffffffffffffda RBX: 00007f65a79b5fa0 RCX: 00007f65a778e969 [ 234.013286][T10907] RDX: 0000000000000007 RSI: 0000200000000040 RDI: 0000000000000004 [ 234.013299][T10907] RBP: 00007f65a8591090 R08: 0000000000000000 R09: 0000000000000000 [ 234.013311][T10907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.013323][T10907] R13: 0000000000000000 R14: 00007f65a79b5fa0 R15: 00007ffe2ed159d8 [ 234.013355][T10907] [ 234.313737][T10906] __nla_validate_parse: 9 callbacks suppressed [ 234.313756][T10906] netlink: 696 bytes leftover after parsing attributes in process `syz.5.1398'. [ 234.349270][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.358120][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.362832][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 234.375509][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 234.420088][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 234.435420][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 234.443471][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 234.470279][ T63] bridge_slave_1: left allmulticast mode [ 234.486246][ T63] bridge_slave_1: left promiscuous mode [ 234.501747][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.534379][ T63] bridge_slave_0: left allmulticast mode [ 234.558199][ T63] bridge_slave_0: left promiscuous mode [ 234.564593][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.725449][T10921] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 234.759082][T10923] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1402'. [ 234.985207][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.998843][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.013741][ T63] bond0 (unregistering): Released all slaves [ 235.075206][T10908] lo speed is unknown, defaulting to 1000 [ 235.564679][ T63] hsr_slave_0: left promiscuous mode [ 235.571125][ T63] hsr_slave_1: left promiscuous mode [ 235.579237][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.587002][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.595474][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.603001][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.625330][ T63] veth1_macvtap: left promiscuous mode [ 235.631138][ T63] veth0_macvtap: left promiscuous mode [ 235.636900][ T63] veth1_vlan: left promiscuous mode [ 235.642200][ T63] veth0_vlan: left promiscuous mode [ 236.034226][ T63] team0 (unregistering): Port device team_slave_1 removed [ 236.074353][ T63] team0 (unregistering): Port device team_slave_0 removed [ 236.454848][T10908] chnl_net:caif_netlink_parms(): no params data found [ 236.538441][ T5849] Bluetooth: hci3: command tx timeout [ 236.611583][T10908] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.619803][T10908] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.627713][T10908] bridge_slave_0: entered allmulticast mode [ 236.636392][T10908] bridge_slave_0: entered promiscuous mode [ 236.644938][T10908] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.652313][T10908] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.660152][T10908] bridge_slave_1: entered allmulticast mode [ 236.668191][T10908] bridge_slave_1: entered promiscuous mode [ 236.771185][T10908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.833769][T10908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.904552][T10953] FAULT_INJECTION: forcing a failure. [ 236.904552][T10953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.945753][T10953] CPU: 1 UID: 0 PID: 10953 Comm: syz.5.1410 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 236.945781][T10953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 236.945794][T10953] Call Trace: [ 236.945802][T10953] [ 236.945811][T10953] dump_stack_lvl+0x189/0x250 [ 236.945848][T10953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.945877][T10953] ? __pfx__printk+0x10/0x10 [ 236.945909][T10953] should_fail_ex+0x414/0x560 [ 236.945946][T10953] _copy_to_user+0x31/0xb0 [ 236.945975][T10953] simple_read_from_buffer+0xe1/0x170 [ 236.946005][T10953] proc_fail_nth_read+0x1df/0x250 [ 236.946036][T10953] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.946067][T10953] ? rw_verify_area+0x258/0x650 [ 236.946087][T10953] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.946114][T10953] vfs_read+0x1fd/0x980 [ 236.946140][T10953] ? __pfx___mutex_lock+0x10/0x10 [ 236.946162][T10953] ? __pfx_vfs_read+0x10/0x10 [ 236.946185][T10953] ? __fget_files+0x2a/0x420 [ 236.946212][T10953] ? __fget_files+0x3a0/0x420 [ 236.946235][T10953] ? __fget_files+0x2a/0x420 [ 236.946270][T10953] ksys_read+0x145/0x250 [ 236.946304][T10953] ? __pfx_ksys_read+0x10/0x10 [ 236.946329][T10953] ? do_syscall_64+0xba/0x210 [ 236.946356][T10953] do_syscall_64+0xf6/0x210 [ 236.946380][T10953] ? clear_bhb_loop+0x45/0xa0 [ 236.946405][T10953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.946423][T10953] RIP: 0033:0x7f61bcb8d37c [ 236.946465][T10953] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 236.946482][T10953] RSP: 002b:00007f61bd96c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 236.946502][T10953] RAX: ffffffffffffffda RBX: 00007f61bcdb5fa0 RCX: 00007f61bcb8d37c [ 236.946517][T10953] RDX: 000000000000000f RSI: 00007f61bd96c0a0 RDI: 0000000000000005 [ 236.946529][T10953] RBP: 00007f61bd96c090 R08: 0000000000000000 R09: 0000000000000000 [ 236.946541][T10953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.946553][T10953] R13: 0000000000000000 R14: 00007f61bcdb5fa0 R15: 00007fff0e85c7b8 [ 236.946585][T10953] [ 237.181074][T10908] team0: Port device team_slave_0 added [ 237.200858][T10956] netlink: 'syz.0.1411': attribute type 1 has an invalid length. [ 237.209345][T10956] netlink: 'syz.0.1411': attribute type 1 has an invalid length. [ 237.234337][T10908] team0: Port device team_slave_1 added [ 237.383919][ T5139] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 237.393186][ T5139] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 237.408193][ T5139] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 237.416732][ T5832] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 237.418827][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 237.436333][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 237.451760][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.492820][T10908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.504718][T10908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.536367][T10908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.574147][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.593694][T10969] veth0: entered promiscuous mode [ 237.605112][T10908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.614666][T10908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.645500][T10908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.673315][T10967] veth0: left promiscuous mode [ 237.747961][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.791749][T10973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.801984][T10973] batadv_slave_0: entered promiscuous mode [ 237.828447][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.247369][T10908] hsr_slave_0: entered promiscuous mode [ 238.319132][T10908] hsr_slave_1: entered promiscuous mode [ 238.325813][T10908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.333584][T10908] Cannot create hsr debugfs directory [ 238.373566][T10958] lo speed is unknown, defaulting to 1000 [ 238.398644][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.588737][T10994] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1423'. [ 238.620405][ T5849] Bluetooth: hci3: command tx timeout [ 238.904174][T11008] tipc: Cannot configure node identity twice [ 238.933185][ T151] tipc: Subscription rejected, illegal request [ 238.982321][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1427'. [ 238.992570][T11013] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1427'. [ 239.098968][ T63] bridge_slave_1: left allmulticast mode [ 239.104957][ T63] bridge_slave_1: left promiscuous mode [ 239.111058][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.121431][ T63] bridge_slave_0: left allmulticast mode [ 239.127535][ T63] bridge_slave_0: left promiscuous mode [ 239.133405][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.244090][T11026] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1428'. [ 239.261354][T11025] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1428'. [ 239.499136][ T5849] Bluetooth: hci4: command tx timeout [ 239.521343][T11029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1429'. [ 239.549851][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.567392][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.582291][ T63] bond0 (unregistering): Released all slaves [ 239.936599][T10958] chnl_net:caif_netlink_parms(): no params data found [ 240.064244][T11049] sctp: [Deprecated]: syz.6.1435 (pid 11049) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.064244][T11049] Use struct sctp_sack_info instead [ 240.234147][T11058] FAULT_INJECTION: forcing a failure. [ 240.234147][T11058] name failslab, interval 1, probability 0, space 0, times 1 [ 240.248958][T11058] CPU: 0 UID: 0 PID: 11058 Comm: syz.5.1438 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 240.248988][T11058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 240.249001][T11058] Call Trace: [ 240.249009][T11058] [ 240.249019][T11058] dump_stack_lvl+0x189/0x250 [ 240.249057][T11058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.249087][T11058] ? __pfx__printk+0x10/0x10 [ 240.249113][T11058] ? __pfx___might_resched+0x10/0x10 [ 240.249138][T11058] should_fail_ex+0x414/0x560 [ 240.249177][T11058] should_failslab+0xa8/0x100 [ 240.249205][T11058] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 240.249230][T11058] ? __kasan_kmalloc+0x93/0xb0 [ 240.249251][T11058] ? mgmt_pending_new+0xe0/0x240 [ 240.249278][T11058] kmemdup_noprof+0x2b/0x70 [ 240.249300][T11058] mgmt_pending_new+0xe0/0x240 [ 240.249325][T11058] mgmt_pending_add+0x34/0x120 [ 240.249348][T11058] set_powered+0x3b1/0x590 [ 240.249378][T11058] ? __pfx_set_powered+0x10/0x10 [ 240.249415][T11058] hci_mgmt_cmd+0x9c6/0xef0 [ 240.249452][T11058] hci_sock_sendmsg+0x6ca/0xee0 [ 240.249486][T11058] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 240.249507][T11058] ? aa_sock_msg_perm+0x94/0x160 [ 240.249530][T11058] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 240.249552][T11058] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 240.249573][T11058] __sock_sendmsg+0x219/0x270 [ 240.249608][T11058] sock_write_iter+0x258/0x330 [ 240.249640][T11058] ? __pfx_sock_write_iter+0x10/0x10 [ 240.249681][T11058] ? bpf_lsm_file_permission+0x9/0x20 [ 240.249704][T11058] ? security_file_permission+0x75/0x290 [ 240.249743][T11058] vfs_write+0x548/0xa90 [ 240.249771][T11058] ? __pfx_sock_write_iter+0x10/0x10 [ 240.249808][T11058] ? __pfx_vfs_write+0x10/0x10 [ 240.249842][T11058] ? __fget_files+0x2a/0x420 [ 240.249879][T11058] ksys_write+0x145/0x250 [ 240.249900][T11058] ? rcu_is_watching+0x15/0xb0 [ 240.249931][T11058] ? __pfx_ksys_write+0x10/0x10 [ 240.249958][T11058] ? do_syscall_64+0xba/0x210 [ 240.249986][T11058] do_syscall_64+0xf6/0x210 [ 240.250010][T11058] ? clear_bhb_loop+0x45/0xa0 [ 240.250035][T11058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.250053][T11058] RIP: 0033:0x7f61bcb8e969 [ 240.250071][T11058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.250089][T11058] RSP: 002b:00007f61bd96c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 240.250109][T11058] RAX: ffffffffffffffda RBX: 00007f61bcdb5fa0 RCX: 00007f61bcb8e969 [ 240.250123][T11058] RDX: 0000000000000007 RSI: 0000200000000040 RDI: 0000000000000004 [ 240.250135][T11058] RBP: 00007f61bd96c090 R08: 0000000000000000 R09: 0000000000000000 [ 240.250148][T11058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.250159][T11058] R13: 0000000000000000 R14: 00007f61bcdb5fa0 R15: 00007fff0e85c7b8 [ 240.250193][T11058] [ 240.633160][T11063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1440'. [ 240.658588][T10958] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.668957][T10958] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.676365][T10958] bridge_slave_0: entered allmulticast mode [ 240.684240][T10958] bridge_slave_0: entered promiscuous mode [ 240.692878][T10958] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.705807][ T5849] Bluetooth: hci3: command tx timeout [ 240.711395][T10958] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.718896][T10958] bridge_slave_1: entered allmulticast mode [ 240.726718][T10958] bridge_slave_1: entered promiscuous mode [ 240.798349][T10958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.811099][T10958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.853573][ T63] hsr_slave_0: left promiscuous mode [ 240.862285][T11071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1441'. [ 240.865744][ T63] hsr_slave_1: left promiscuous mode [ 240.878342][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.892079][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.903099][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.916679][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.966477][ T63] veth1_macvtap: left promiscuous mode [ 240.972069][ T63] veth0_macvtap: left promiscuous mode [ 240.983160][ T63] veth1_vlan: left promiscuous mode [ 240.989493][ T63] veth0_vlan: left promiscuous mode [ 241.427851][ T63] team0 (unregistering): Port device team_slave_1 removed [ 241.469062][ T63] team0 (unregistering): Port device team_slave_0 removed [ 241.576028][ T5849] Bluetooth: hci4: command tx timeout [ 241.989788][T10958] team0: Port device team_slave_0 added [ 242.029524][T11091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1445'. [ 242.062413][T10958] team0: Port device team_slave_1 added [ 242.081019][T11091] xt_cluster: node mask cannot exceed total number of nodes [ 242.081449][T10908] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 242.133685][T11091] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 242.240156][T11100] netlink: 'syz.6.1449': attribute type 1 has an invalid length. [ 242.250267][T10908] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 242.250283][T11098] netlink: 'syz.5.1450': attribute type 21 has an invalid length. [ 242.261013][T11100] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.1449'. [ 242.293214][T10958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.302322][T10958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.332564][T10958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.349333][T10908] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 242.422814][T10908] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 242.465517][T10958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.481522][T10958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.517130][T11116] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1453'. [ 242.543454][T10958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.714189][T10958] hsr_slave_0: entered promiscuous mode [ 242.727664][T10958] hsr_slave_1: entered promiscuous mode [ 242.756789][T10958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.764418][T10958] Cannot create hsr debugfs directory [ 242.776112][ T5849] Bluetooth: hci3: command tx timeout [ 242.868979][T11131] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1459'. [ 242.992909][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1458'. [ 243.546702][T10908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.584616][T10908] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.637660][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.644826][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.656192][ T5849] Bluetooth: hci4: command tx timeout [ 243.689929][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.697150][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.734041][T11165] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1465'. [ 243.821499][T11173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1467'. [ 244.270387][T10908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.512793][T10958] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 244.554551][T10958] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 244.588107][T10958] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 244.619486][T10958] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 244.832766][T10908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.931315][T10958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.980621][T10958] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.001188][ T8558] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.008435][ T8558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.064412][ T8558] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.071652][ T8558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.302136][T11216] tipc: Invalid UDP bearer configuration [ 245.302195][T11216] tipc: Enabling of bearer rejected, failed to enable media [ 245.557202][T11223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.562880][T10908] veth0_vlan: entered promiscuous mode [ 245.612764][T10958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.645559][T10908] veth1_vlan: entered promiscuous mode [ 245.686415][T11224] __nla_validate_parse: 1 callbacks suppressed [ 245.686462][T11224] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1478'. [ 245.709253][T11223] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1478'. [ 245.736996][ T5832] Bluetooth: hci4: command tx timeout [ 245.875473][T10908] veth0_macvtap: entered promiscuous mode [ 245.912426][T10908] veth1_macvtap: entered promiscuous mode [ 245.968984][T10908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.997368][T10908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.009909][T11236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1483'. [ 246.016469][T10908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.030312][T11236] FAULT_INJECTION: forcing a failure. [ 246.030312][T11236] name failslab, interval 1, probability 0, space 0, times 0 [ 246.040219][T10908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.059118][T10908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.069722][T11236] CPU: 0 UID: 0 PID: 11236 Comm: syz.5.1483 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 246.069749][T11236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 246.069772][T11236] Call Trace: [ 246.069781][T11236] [ 246.069789][T11236] dump_stack_lvl+0x189/0x250 [ 246.069826][T11236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.069854][T11236] ? __pfx__printk+0x10/0x10 [ 246.069881][T11236] ? __pfx___might_resched+0x10/0x10 [ 246.069903][T11236] should_fail_ex+0x414/0x560 [ 246.069936][T11236] should_failslab+0xa8/0x100 [ 246.069965][T11236] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 246.069992][T11236] ? __alloc_skb+0x112/0x2d0 [ 246.070019][T11236] __alloc_skb+0x112/0x2d0 [ 246.070045][T11236] netlink_sendmsg+0x5c6/0xb30 [ 246.070076][T11236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.070100][T11236] ? aa_sock_msg_perm+0x94/0x160 [ 246.070123][T11236] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 246.070152][T11236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.070174][T11236] __sock_sendmsg+0x219/0x270 [ 246.070209][T11236] ____sys_sendmsg+0x505/0x830 [ 246.070240][T11236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.070274][T11236] ? import_iovec+0x74/0xa0 [ 246.070305][T11236] ___sys_sendmsg+0x21f/0x2a0 [ 246.070332][T11236] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.070396][T11236] ? __fget_files+0x2a/0x420 [ 246.070420][T11236] ? __fget_files+0x3a0/0x420 [ 246.070456][T11236] __x64_sys_sendmsg+0x19b/0x260 [ 246.070484][T11236] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 246.070527][T11236] ? do_syscall_64+0xba/0x210 [ 246.070555][T11236] do_syscall_64+0xf6/0x210 [ 246.070579][T11236] ? clear_bhb_loop+0x45/0xa0 [ 246.070604][T11236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.070623][T11236] RIP: 0033:0x7f61bcb8e969 [ 246.070641][T11236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.070658][T11236] RSP: 002b:00007f61bd96c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.070678][T11236] RAX: ffffffffffffffda RBX: 00007f61bcdb5fa0 RCX: 00007f61bcb8e969 [ 246.070693][T11236] RDX: 0000000000000004 RSI: 00002000000003c0 RDI: 000000000000000c [ 246.070705][T11236] RBP: 00007f61bd96c090 R08: 0000000000000000 R09: 0000000000000000 [ 246.070717][T11236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.070728][T11236] R13: 0000000000000000 R14: 00007f61bcdb5fa0 R15: 00007fff0e85c7b8 [ 246.070760][T11236] [ 246.073392][T10908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.144108][T11244] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1484'. [ 246.148801][T10908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.214058][T11248] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 246.220728][T10908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.410410][T10908] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.444757][T10908] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.480360][T10908] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.503231][T10908] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.525215][T11256] netlink: 'syz.6.1486': attribute type 13 has an invalid length. [ 246.534508][T11256] netlink: 'syz.6.1486': attribute type 17 has an invalid length. [ 246.689575][T11256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.819210][T10958] veth0_vlan: entered promiscuous mode [ 246.845053][T10958] veth1_vlan: entered promiscuous mode [ 247.000197][T10958] veth0_macvtap: entered promiscuous mode [ 247.021851][T11272] netlink: 'syz.0.1490': attribute type 1 has an invalid length. [ 247.028936][T10958] veth1_macvtap: entered promiscuous mode [ 247.037077][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1490'. [ 247.052005][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.067356][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.206044][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.225720][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.270994][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.282227][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.307749][T10958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.333025][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.360493][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.374390][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.391937][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.402665][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.413673][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.424834][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.436005][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.448205][T10958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.496389][ T5139] Bluetooth: hci2: command 0x0406 tx timeout [ 247.502914][ T5139] Bluetooth: hci1: command 0x0406 tx timeout [ 247.517906][T10958] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.527436][T10958] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.537489][T10958] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.546319][T10958] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.603852][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1495'. [ 247.936633][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.944514][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.136158][ T5849] Bluetooth: hci4: command tx timeout [ 248.160072][ T1162] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.777187][ T5832] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 248.786607][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 248.794572][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 248.804244][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 248.812608][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 248.821030][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 248.830553][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 250.137777][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.156042][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.219663][ T1162] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.319989][T11322] lo speed is unknown, defaulting to 1000 [ 250.432496][ T1162] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.497786][T11339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1506'. [ 250.598909][T11341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1507'. [ 250.616771][T11341] FAULT_INJECTION: forcing a failure. [ 250.616771][T11341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.635874][T11341] CPU: 0 UID: 0 PID: 11341 Comm: syz.0.1507 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 250.635904][T11341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 250.635918][T11341] Call Trace: [ 250.635926][T11341] [ 250.635935][T11341] dump_stack_lvl+0x189/0x250 [ 250.635967][T11341] ? __lock_acquire+0xaac/0xd20 [ 250.635997][T11341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.636026][T11341] ? __pfx__printk+0x10/0x10 [ 250.636047][T11341] ? __might_fault+0xb0/0x130 [ 250.636085][T11341] should_fail_ex+0x414/0x560 [ 250.636122][T11341] _copy_from_iter+0x1db/0x15a0 [ 250.636154][T11341] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 250.636175][T11341] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 250.636201][T11341] ? __pfx__copy_from_iter+0x10/0x10 [ 250.636226][T11341] ? __build_skb_around+0x257/0x3e0 [ 250.636253][T11341] ? netlink_sendmsg+0x642/0xb30 [ 250.636273][T11341] ? skb_put+0x11b/0x210 [ 250.636299][T11341] netlink_sendmsg+0x6b2/0xb30 [ 250.636331][T11341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.636356][T11341] ? aa_sock_msg_perm+0x94/0x160 [ 250.636379][T11341] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 250.636401][T11341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.636423][T11341] __sock_sendmsg+0x219/0x270 [ 250.636457][T11341] ____sys_sendmsg+0x505/0x830 [ 250.636488][T11341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.636523][T11341] ? import_iovec+0x74/0xa0 [ 250.636553][T11341] ___sys_sendmsg+0x21f/0x2a0 [ 250.636580][T11341] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.636644][T11341] ? __fget_files+0x2a/0x420 [ 250.636677][T11341] ? __fget_files+0x3a0/0x420 [ 250.636713][T11341] __x64_sys_sendmsg+0x19b/0x260 [ 250.636742][T11341] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 250.636785][T11341] ? do_syscall_64+0xba/0x210 [ 250.636813][T11341] do_syscall_64+0xf6/0x210 [ 250.636838][T11341] ? clear_bhb_loop+0x45/0xa0 [ 250.636862][T11341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.636881][T11341] RIP: 0033:0x7f65a778e969 [ 250.636899][T11341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.636917][T11341] RSP: 002b:00007f65a8591038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.636938][T11341] RAX: ffffffffffffffda RBX: 00007f65a79b5fa0 RCX: 00007f65a778e969 [ 250.636952][T11341] RDX: 0000000000000004 RSI: 00002000000003c0 RDI: 000000000000000c [ 250.636965][T11341] RBP: 00007f65a8591090 R08: 0000000000000000 R09: 0000000000000000 [ 250.636977][T11341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.636988][T11341] R13: 0000000000000000 R14: 00007f65a79b5fa0 R15: 00007ffe2ed159d8 [ 250.637020][T11341] [ 250.915218][ T5840] Bluetooth: hci3: command tx timeout [ 250.925984][T11343] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1508'. [ 251.014706][ T1162] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.511578][T11322] chnl_net:caif_netlink_parms(): no params data found [ 251.530521][ T1162] bridge_slave_1: left allmulticast mode [ 251.536823][ T1162] bridge_slave_1: left promiscuous mode [ 251.542630][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.552773][ T1162] bridge_slave_0: left allmulticast mode [ 251.559073][ T1162] bridge_slave_0: left promiscuous mode [ 251.564890][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.879608][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.891325][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.901606][ T1162] bond0 (unregistering): Released all slaves [ 252.007992][T11322] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.015272][T11322] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.022870][T11322] bridge_slave_0: entered allmulticast mode [ 252.030995][T11322] bridge_slave_0: entered promiscuous mode [ 252.061910][T11322] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.069426][T11322] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.077892][T11322] bridge_slave_1: entered allmulticast mode [ 252.085191][T11322] bridge_slave_1: entered promiscuous mode [ 252.153123][T11322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.167569][T11322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.224039][T11322] team0: Port device team_slave_0 added [ 252.233141][T11322] team0: Port device team_slave_1 added [ 252.242661][ T1162] hsr_slave_0: left promiscuous mode [ 252.249872][ T1162] hsr_slave_1: left promiscuous mode [ 252.255846][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.263271][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.271693][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.279626][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.301113][ T1162] veth1_macvtap: left promiscuous mode [ 252.306781][ T1162] veth0_macvtap: left promiscuous mode [ 252.312384][ T1162] veth1_vlan: left promiscuous mode [ 252.317799][ T1162] veth0_vlan: left promiscuous mode [ 252.709122][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 252.743787][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 252.896272][T11377] netlink: 'syz.6.1515': attribute type 13 has an invalid length. [ 252.946005][ T5840] Bluetooth: hci3: command tx timeout [ 253.241671][T11397] trusted_key: syz.5.1517 sent an empty control message without MSG_MORE. [ 253.270172][ T5954] hid-generic 0005:0B57:0009.0001: collection stack underflow [ 253.286892][ T5954] hid-generic 0005:0B57:0009.0001: item 0 0 0 12 parsing failed [ 253.310032][ T5954] hid-generic 0005:0B57:0009.0001: probe with driver hid-generic failed with error -22 [ 253.353889][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.364523][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.378914][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.388250][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 253.396724][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.588148][T11377] veth0_macvtap: left promiscuous mode [ 253.593933][T11377] macvtap0: entered allmulticast mode [ 253.610761][T11377] macvtap0: refused to change device tx_queue_len [ 253.624509][T11389] netlink: 'syz.5.1517': attribute type 21 has an invalid length. [ 253.632863][T11389] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1517'. [ 253.656933][T11322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.665340][T11322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.695088][T11322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.741771][T11322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.751024][T11322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.777604][T11322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.830369][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1522'. [ 253.847362][T11407] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1520'. [ 253.888543][T11400] lo speed is unknown, defaulting to 1000 [ 253.974378][T11322] hsr_slave_0: entered promiscuous mode [ 253.985292][T11322] hsr_slave_1: entered promiscuous mode [ 253.994167][T11322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.019061][T11322] Cannot create hsr debugfs directory [ 254.093476][T11415] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1524'. [ 254.208537][T11414] bond0 (unregistering): Released all slaves [ 254.250910][T11415] vlan2: entered allmulticast mode [ 254.259078][T11415] gretap0: entered allmulticast mode [ 254.438159][T11421] geneve2: entered promiscuous mode [ 254.443457][T11421] geneve2: entered allmulticast mode [ 254.494217][T11427] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1528'. [ 254.679573][T11434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1530'. [ 254.779029][ T1162] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.937554][ T1162] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.960451][T11447] xt_hashlimit: size too large, truncated to 1048576 [ 255.017089][ T5840] Bluetooth: hci3: command tx timeout [ 255.092484][ T1162] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.146953][T11400] chnl_net:caif_netlink_parms(): no params data found [ 255.295252][ T1162] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.351555][T11465] netlink: 'syz.0.1537': attribute type 1 has an invalid length. [ 255.505761][ T5840] Bluetooth: hci4: command tx timeout [ 255.528161][T11477] SET target dimension over the limit! [ 255.626735][T11400] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.644550][T11400] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.664364][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.675505][T11400] bridge_slave_0: entered allmulticast mode [ 255.690925][T11400] bridge_slave_0: entered promiscuous mode [ 255.745252][T11400] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.762962][T11400] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.786543][T11400] bridge_slave_1: entered allmulticast mode [ 255.818280][T11490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1544'. [ 255.834242][T11400] bridge_slave_1: entered promiscuous mode [ 256.042937][T11400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.058961][T11501] netdevsim netdevsim0 : renamed from netdevsim0 [ 256.074491][ T1162] bridge_slave_1: left allmulticast mode [ 256.090811][ T1162] bridge_slave_1: left promiscuous mode [ 256.099333][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.109839][ T1162] bridge_slave_0: left allmulticast mode [ 256.117713][ T1162] bridge_slave_0: left promiscuous mode [ 256.123612][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.332324][T11517] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 256.569178][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.581341][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.594583][ T1162] bond0 (unregistering): Released all slaves [ 256.611846][T11400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.829305][T11322] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 256.862502][T11400] team0: Port device team_slave_0 added [ 256.882506][T11400] team0: Port device team_slave_1 added [ 256.904613][T11322] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 257.055152][T11322] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 257.076353][T11322] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 257.099356][ T5840] Bluetooth: hci3: command tx timeout [ 257.171692][ T1162] hsr_slave_0: left promiscuous mode [ 257.187254][ T1162] hsr_slave_1: left promiscuous mode [ 257.196936][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.205285][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.213797][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.222310][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.253038][T11550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1560'. [ 257.310015][ T1162] veth1_macvtap: left promiscuous mode [ 257.325912][ T1162] veth0_macvtap: left promiscuous mode [ 257.346500][ T1162] veth1_vlan: left promiscuous mode [ 257.351937][ T1162] veth0_vlan: left promiscuous mode [ 257.390346][T11560] netlink: 'syz.6.1562': attribute type 21 has an invalid length. [ 257.576064][ T5840] Bluetooth: hci4: command tx timeout [ 257.924042][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 257.964805][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 258.331909][T11400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.339043][T11400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.368415][T11400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.396490][T11400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.403575][T11400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.429779][T11400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.479134][T11560] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1562'. [ 258.494776][T11566] IPv6: sit2: Disabled Multicast RS [ 258.501979][T11566] sit2: entered allmulticast mode [ 258.602650][T11400] hsr_slave_0: entered promiscuous mode [ 258.622999][T11400] hsr_slave_1: entered promiscuous mode [ 258.629645][T11400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.637514][T11400] Cannot create hsr debugfs directory [ 258.643666][T11571] tipc: Started in network mode [ 258.648818][T11571] tipc: Node identity ffffa848, cluster identity 4711 [ 258.657180][T11571] tipc: Node number set to 4294944840 [ 258.692159][T11577] pimreg3: entered allmulticast mode [ 258.747803][T11577] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1567'. [ 258.782134][T11581] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1568'. [ 259.155454][T11597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1573'. [ 259.179884][T11597] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1573'. [ 259.195777][T11597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1573'. [ 259.215687][T11597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1573'. [ 259.293213][T11322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.384285][T11322] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.420210][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.427413][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.467306][ T8558] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.474485][ T8558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.655752][ T5840] Bluetooth: hci4: command tx timeout [ 259.781621][T11400] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 259.835528][T11400] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 259.866621][T11400] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 259.891301][T11400] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 260.221049][T11400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.292070][T11400] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.330830][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.338020][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.390730][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.397969][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.503453][T11646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1587'. [ 260.522664][T11322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.523838][T11649] Bluetooth: MGMT ver 1.23 [ 260.740748][T11657] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1590'. [ 261.050678][T11400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.142494][T11322] veth0_vlan: entered promiscuous mode [ 261.185297][T11322] veth1_vlan: entered promiscuous mode [ 261.280839][T11322] veth0_macvtap: entered promiscuous mode [ 261.300832][T11322] veth1_macvtap: entered promiscuous mode [ 261.339306][T11685] sctp: [Deprecated]: syz.6.1594 (pid 11685) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.339306][T11685] Use struct sctp_sack_info instead [ 261.367022][T11685] sctp: [Deprecated]: syz.6.1594 (pid 11685) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.367022][T11685] Use struct sctp_sack_info instead [ 261.371232][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.435674][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.450844][T11322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.522369][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.543001][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.563049][T11322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.574115][T11322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.590573][T11322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.624330][T11322] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.670984][T11322] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.685692][T11322] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.703624][T11322] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.741545][ T5840] Bluetooth: hci4: command tx timeout [ 261.986726][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.005738][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.112183][T11400] veth0_vlan: entered promiscuous mode [ 262.171486][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.180217][T11400] veth1_vlan: entered promiscuous mode [ 262.189475][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.266943][T11724] netlink: 'syz.5.1606': attribute type 12 has an invalid length. [ 262.309324][T11724] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 262.323325][T11726] openvswitch: netlink: IPv6 tunnel dst address is zero [ 262.365102][T11400] veth0_macvtap: entered promiscuous mode [ 262.473748][T11733] __nla_validate_parse: 10 callbacks suppressed [ 262.473768][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1610'. [ 262.487098][T11734] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1611'. [ 262.505106][T11400] veth1_macvtap: entered promiscuous mode [ 262.513750][T11733] FAULT_INJECTION: forcing a failure. [ 262.513750][T11733] name failslab, interval 1, probability 0, space 0, times 0 [ 262.561552][T11733] CPU: 0 UID: 0 PID: 11733 Comm: syz.6.1610 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 262.561582][T11733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 262.561595][T11733] Call Trace: [ 262.561603][T11733] [ 262.561612][T11733] dump_stack_lvl+0x189/0x250 [ 262.561651][T11733] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.561692][T11733] ? __pfx__printk+0x10/0x10 [ 262.561717][T11733] ? xa_load+0x60/0x210 [ 262.561747][T11733] should_fail_ex+0x414/0x560 [ 262.561783][T11733] should_failslab+0xa8/0x100 [ 262.561812][T11733] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 262.561839][T11733] ? __alloc_skb+0x112/0x2d0 [ 262.561866][T11733] __alloc_skb+0x112/0x2d0 [ 262.561893][T11733] ctnetlink_conntrack_event+0x45d/0x1490 [ 262.561923][T11733] ? preempt_schedule_irq+0xb5/0x150 [ 262.561963][T11733] ? __pfx_ctnetlink_conntrack_event+0x10/0x10 [ 262.562007][T11733] ? __nf_conntrack_eventmask_report+0xc1/0x480 [ 262.562032][T11733] __nf_conntrack_eventmask_report+0x1f7/0x480 [ 262.562065][T11733] nf_conntrack_eventmask_report+0x2ce/0x4a0 [ 262.562105][T11733] ? __pfx_nf_conntrack_eventmask_report+0x10/0x10 [ 262.562130][T11733] ? __local_bh_enable_ip+0x12d/0x1c0 [ 262.562160][T11733] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.562183][T11733] ? __local_bh_enable_ip+0x12d/0x1c0 [ 262.562217][T11733] nf_ct_delete+0x22f/0x600 [ 262.562238][T11733] ? nf_ct_iterate_cleanup+0x10e/0x520 [ 262.562263][T11733] nf_ct_iterate_cleanup+0x32e/0x520 [ 262.562286][T11733] ? nf_ct_iterate_cleanup+0x10e/0x520 [ 262.562313][T11733] ? __pfx_ctnetlink_flush_iterate+0x10/0x10 [ 262.562341][T11733] ctnetlink_del_conntrack+0x6f1/0x8e0 [ 262.562367][T11733] ? __pfx_ctnetlink_del_conntrack+0x10/0x10 [ 262.562435][T11733] nfnetlink_rcv_msg+0xb4a/0x1130 [ 262.562462][T11733] ? __kernel_text_address+0xd/0x40 [ 262.562487][T11733] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 262.562535][T11733] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 262.562617][T11733] netlink_rcv_skb+0x219/0x490 [ 262.562640][T11733] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 262.562669][T11733] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 262.562705][T11733] ? apparmor_capable+0x137/0x1b0 [ 262.562735][T11733] ? bpf_lsm_capable+0x9/0x20 [ 262.562761][T11733] ? security_capable+0x7e/0x2e0 [ 262.562790][T11733] nfnetlink_rcv+0x273/0x2530 [ 262.562820][T11733] ? __dev_queue_xmit+0x27e/0x3a70 [ 262.562847][T11733] ? __dev_queue_xmit+0x27e/0x3a70 [ 262.562871][T11733] ? __dev_queue_xmit+0x27e/0x3a70 [ 262.562900][T11733] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 262.562938][T11733] ? __dev_queue_xmit+0x27e/0x3a70 [ 262.562966][T11733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.562991][T11733] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 262.563024][T11733] ? __pfx___dev_queue_xmit+0x10/0x10 [ 262.563068][T11733] ? ref_tracker_free+0x63a/0x7d0 [ 262.563098][T11733] ? __copy_skb_header+0xa7/0x550 [ 262.563126][T11733] ? __pfx_ref_tracker_free+0x10/0x10 [ 262.563145][T11733] ? __skb_clone+0x63/0x7a0 [ 262.563176][T11733] ? __skb_clone+0x483/0x7a0 [ 262.563210][T11733] ? skb_clone+0x246/0x3a0 [ 262.563240][T11733] ? __netlink_deliver_tap+0x807/0x850 [ 262.563261][T11733] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.563290][T11733] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.563310][T11733] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.563336][T11733] netlink_unicast+0x758/0x8d0 [ 262.563380][T11733] netlink_sendmsg+0x805/0xb30 [ 262.563413][T11733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.563438][T11733] ? aa_sock_msg_perm+0x94/0x160 [ 262.563462][T11733] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 262.563483][T11733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.563506][T11733] __sock_sendmsg+0x219/0x270 [ 262.563541][T11733] ____sys_sendmsg+0x505/0x830 [ 262.563574][T11733] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.563610][T11733] ? import_iovec+0x74/0xa0 [ 262.563639][T11733] ___sys_sendmsg+0x21f/0x2a0 [ 262.563668][T11733] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.563736][T11733] ? __fget_files+0x2a/0x420 [ 262.563761][T11733] ? __fget_files+0x3a0/0x420 [ 262.563798][T11733] __x64_sys_sendmsg+0x19b/0x260 [ 262.563827][T11733] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 262.563873][T11733] ? do_syscall_64+0xba/0x210 [ 262.563901][T11733] do_syscall_64+0xf6/0x210 [ 262.563925][T11733] ? clear_bhb_loop+0x45/0xa0 [ 262.563951][T11733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.563969][T11733] RIP: 0033:0x7fbcef18e969 [ 262.563987][T11733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.564004][T11733] RSP: 002b:00007fbceff77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.564026][T11733] RAX: ffffffffffffffda RBX: 00007fbcef3b5fa0 RCX: 00007fbcef18e969 [ 262.564041][T11733] RDX: 0000000000000004 RSI: 00002000000003c0 RDI: 000000000000000c [ 262.564054][T11733] RBP: 00007fbceff77090 R08: 0000000000000000 R09: 0000000000000000 [ 262.564066][T11733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.564078][T11733] R13: 0000000000000000 R14: 00007fbcef3b5fa0 R15: 00007ffda728c2b8 [ 262.564121][T11733] [ 263.136413][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.173681][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.225588][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.264873][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.337596][T11400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.543126][ T36] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.660590][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.671401][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.681378][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.691915][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.701802][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.712355][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.772328][T11400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.853209][ T36] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.882197][T11400] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.893140][T11400] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.902043][T11400] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.910905][T11400] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.934529][ T36] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.019383][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.029885][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.128862][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.162560][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.235112][ T36] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.275036][T11745] lo: left promiscuous mode [ 264.280984][T11745] tunl0: left promiscuous mode [ 264.287834][T11745] gre0: left promiscuous mode [ 264.293070][T11745] gretap0: left promiscuous mode [ 264.316824][T11745] erspan0: left promiscuous mode [ 264.323062][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'. [ 264.343220][T11745] ip_vti0: left promiscuous mode [ 264.371781][T11754] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1616'. [ 264.606704][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 264.645831][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 264.656578][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 264.678394][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 264.693298][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 264.701040][ T36] bridge_slave_1: left allmulticast mode [ 264.707177][ T36] bridge_slave_1: left promiscuous mode [ 264.713148][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.731861][ T36] bridge_slave_0: left allmulticast mode [ 264.739946][ T36] bridge_slave_0: left promiscuous mode [ 264.745935][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.795249][T11767] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1618'. [ 264.824334][T11767] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 264.871673][T11774] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1618'. [ 265.261456][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.272880][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.284180][ T36] bond0 (unregistering): Released all slaves [ 265.352654][T11762] lo speed is unknown, defaulting to 1000 [ 265.591826][T11762] chnl_net:caif_netlink_parms(): no params data found [ 265.646626][ T36] hsr_slave_0: left promiscuous mode [ 265.652523][ T36] hsr_slave_1: left promiscuous mode [ 265.659045][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.667030][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.677181][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.684594][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.705964][ T36] veth1_macvtap: left promiscuous mode [ 265.711505][ T36] veth0_macvtap: left promiscuous mode [ 265.717322][ T36] veth1_vlan: left promiscuous mode [ 265.722611][ T36] veth0_vlan: left promiscuous mode [ 266.120511][ T36] team0 (unregistering): Port device team_slave_1 removed [ 266.154477][ T36] team0 (unregistering): Port device team_slave_0 removed [ 266.477639][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1621'. [ 266.505406][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1622'. [ 266.513231][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1621'. [ 266.780520][ T5849] Bluetooth: hci3: command tx timeout [ 266.957886][T11762] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.977310][T11762] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.984634][T11762] bridge_slave_0: entered allmulticast mode [ 267.007526][T11762] bridge_slave_0: entered promiscuous mode [ 267.025260][T11762] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.044745][T11762] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.062306][T11762] bridge_slave_1: entered allmulticast mode [ 267.084012][T11762] bridge_slave_1: entered promiscuous mode [ 267.202195][T11762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.221812][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 267.244501][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 267.254573][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 267.261382][T11824] sctp: [Deprecated]: syz.6.1630 (pid 11824) Use of int in maxseg socket option. [ 267.261382][T11824] Use struct sctp_assoc_value instead [ 267.286013][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 267.293952][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 267.323319][T11762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.510244][T11762] team0: Port device team_slave_0 added [ 267.532598][T11818] lo speed is unknown, defaulting to 1000 [ 267.542809][T11762] team0: Port device team_slave_1 added [ 267.581471][T11831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1633'. [ 267.607838][T11841] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1635'. [ 267.704705][T11843] block nbd5: not configured, cannot reconfigure [ 267.713127][T11846] block nbd5: not configured, cannot reconfigure [ 267.763379][T11762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.773450][T11762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.801360][T11762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.881662][T11851] netlink: 'syz.5.1637': attribute type 2 has an invalid length. [ 267.893760][T11762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.901655][T11762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.943986][T11762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.137369][ T54] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.299941][ T54] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.335522][T11762] hsr_slave_0: entered promiscuous mode [ 268.342349][T11762] hsr_slave_1: entered promiscuous mode [ 268.352832][T11762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.360992][T11762] Cannot create hsr debugfs directory [ 268.399051][ T54] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.536208][T11878] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1645'. [ 268.587831][T11880] vxcan0: tx drop: invalid sa for name 0x0000000000000008 [ 268.692889][ T54] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.742921][T11889] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 268.857240][T11892] netlink: 'syz.0.1652': attribute type 1 has an invalid length. [ 268.860904][ T5849] Bluetooth: hci3: command tx timeout [ 268.865500][T11892] netlink: 'syz.0.1652': attribute type 1 has an invalid length. [ 268.900322][T11892] tipc: Can't bind to reserved service type 1 [ 268.950094][T11899] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1653'. [ 268.983996][T11899] netlink: 'syz.5.1653': attribute type 10 has an invalid length. [ 269.117755][T11818] chnl_net:caif_netlink_parms(): no params data found [ 269.169875][T11905] netlink: 'syz.6.1655': attribute type 1 has an invalid length. [ 269.263561][ T54] bridge_slave_1: left allmulticast mode [ 269.269674][ T54] bridge_slave_1: left promiscuous mode [ 269.275542][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.288951][ T54] bridge_slave_0: left allmulticast mode [ 269.294665][ T54] bridge_slave_0: left promiscuous mode [ 269.300596][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.336163][ T5849] Bluetooth: hci4: command tx timeout [ 269.677749][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.689464][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.700893][ T54] bond0 (unregistering): Released all slaves [ 269.720680][T11907] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 269.731349][T11907] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 269.749752][T11907] bond1: (slave vcan1): making interface the new active one [ 269.758071][T11907] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 269.803466][T11905] 8021q: adding VLAN 0 to HW filter on device bond1 [ 270.027112][T11919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1657'. [ 270.054022][T11818] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.073922][T11818] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.108747][T11818] bridge_slave_0: entered allmulticast mode [ 270.116364][T11818] bridge_slave_0: entered promiscuous mode [ 270.133628][T11818] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.142532][T11818] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.155371][T11818] bridge_slave_1: entered allmulticast mode [ 270.164315][T11930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1660'. [ 270.164319][T11818] bridge_slave_1: entered promiscuous mode [ 270.166055][T11919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.212345][T11919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.218511][T11931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1660'. [ 270.229918][T11919] batadv_slave_1 (unregistering): left promiscuous mode [ 270.487997][ T54] hsr_slave_0: left promiscuous mode [ 270.505768][ T54] hsr_slave_1: left promiscuous mode [ 270.520580][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.530046][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.541644][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.557741][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.594605][ T54] veth1_macvtap: left promiscuous mode [ 270.602880][ T54] veth0_macvtap: left promiscuous mode [ 270.608717][ T54] veth1_vlan: left promiscuous mode [ 270.614143][ T54] veth0_vlan: left promiscuous mode [ 270.936397][ T5849] Bluetooth: hci3: command tx timeout [ 271.203893][ T54] team0 (unregistering): Port device team_slave_1 removed [ 271.249596][ T54] team0 (unregistering): Port device team_slave_0 removed [ 271.418812][ T5849] Bluetooth: hci4: command tx timeout [ 271.644936][T11818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.659218][T11818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.822019][T11818] team0: Port device team_slave_0 added [ 271.833719][T11818] team0: Port device team_slave_1 added [ 271.986688][T11818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.017457][T11818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.084319][T11818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.112466][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1669'. [ 272.128645][T11818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.149900][T11818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.188328][T11818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.358013][T11762] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 272.373815][T11987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1674'. [ 272.387218][T11762] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 272.429548][T11818] hsr_slave_0: entered promiscuous mode [ 272.444506][T11818] hsr_slave_1: entered promiscuous mode [ 272.453879][T11818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.473446][T11818] Cannot create hsr debugfs directory [ 272.519171][T11762] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 272.594900][T11762] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 272.781667][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1681'. [ 272.815339][T12007] FAULT_INJECTION: forcing a failure. [ 272.815339][T12007] name failslab, interval 1, probability 0, space 0, times 0 [ 272.828266][T12007] CPU: 1 UID: 0 PID: 12007 Comm: syz.0.1681 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 272.828294][T12007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 272.828307][T12007] Call Trace: [ 272.828315][T12007] [ 272.828325][T12007] dump_stack_lvl+0x189/0x250 [ 272.828360][T12007] ? __lock_acquire+0xaac/0xd20 [ 272.828389][T12007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.828418][T12007] ? __pfx__printk+0x10/0x10 [ 272.828444][T12007] ? __lock_acquire+0xaac/0xd20 [ 272.828490][T12007] should_fail_ex+0x414/0x560 [ 272.828527][T12007] should_failslab+0xa8/0x100 [ 272.828555][T12007] kmem_cache_alloc_noprof+0x73/0x3c0 [ 272.828576][T12007] ? skb_clone+0x212/0x3a0 [ 272.828607][T12007] skb_clone+0x212/0x3a0 [ 272.828630][T12007] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 272.828655][T12007] dev_queue_xmit_nit+0x416/0xcc0 [ 272.828678][T12007] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 272.828714][T12007] dev_hard_start_xmit+0x1d5/0x880 [ 272.828743][T12007] ? stack_trace_save+0x9c/0xe0 [ 272.828775][T12007] __dev_queue_xmit+0x1adf/0x3a70 [ 272.828808][T12007] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 272.828835][T12007] ? __dev_queue_xmit+0x27e/0x3a70 [ 272.828862][T12007] ? ctnetlink_del_conntrack+0x6f1/0x8e0 [ 272.828890][T12007] ? netlink_rcv_skb+0x219/0x490 [ 272.828908][T12007] ? netlink_unicast+0x758/0x8d0 [ 272.828934][T12007] ? netlink_sendmsg+0x805/0xb30 [ 272.828953][T12007] ? ____sys_sendmsg+0x505/0x830 [ 272.828974][T12007] ? ___sys_sendmsg+0x21f/0x2a0 [ 272.828994][T12007] ? __x64_sys_sendmsg+0x19b/0x260 [ 272.829016][T12007] ? do_syscall_64+0xf6/0x210 [ 272.829037][T12007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.829063][T12007] ? __pfx___dev_queue_xmit+0x10/0x10 [ 272.829107][T12007] ? __copy_skb_header+0xa7/0x550 [ 272.829134][T12007] ? __asan_memcpy+0x40/0x70 [ 272.829153][T12007] ? __skb_clone+0x63/0x7a0 [ 272.829184][T12007] ? __skb_clone+0x483/0x7a0 [ 272.829217][T12007] ? skb_clone+0x246/0x3a0 [ 272.829246][T12007] __netlink_deliver_tap+0x5ad/0x850 [ 272.829282][T12007] ? netlink_deliver_tap+0x2e/0x1b0 [ 272.829304][T12007] netlink_deliver_tap+0x19c/0x1b0 [ 272.829326][T12007] netlink_broadcast_filtered+0xcbb/0x1140 [ 272.829381][T12007] nlmsg_notify+0xf0/0x1a0 [ 272.829405][T12007] ctnetlink_conntrack_event+0x10b2/0x1490 [ 272.829435][T12007] ? preempt_schedule_irq+0xb5/0x150 [ 272.829477][T12007] ? __pfx_ctnetlink_conntrack_event+0x10/0x10 [ 272.829523][T12007] ? __nf_conntrack_eventmask_report+0xc1/0x480 [ 272.829548][T12007] __nf_conntrack_eventmask_report+0x1f7/0x480 [ 272.829582][T12007] nf_conntrack_eventmask_report+0x2ce/0x4a0 [ 272.829613][T12007] ? __pfx_nf_conntrack_eventmask_report+0x10/0x10 [ 272.829638][T12007] ? __local_bh_enable_ip+0x12d/0x1c0 [ 272.829668][T12007] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.829690][T12007] ? __local_bh_enable_ip+0x12d/0x1c0 [ 272.829724][T12007] nf_ct_delete+0x22f/0x600 [ 272.829747][T12007] ? nf_ct_iterate_cleanup+0x10e/0x520 [ 272.829772][T12007] nf_ct_iterate_cleanup+0x32e/0x520 [ 272.829795][T12007] ? nf_ct_iterate_cleanup+0x10e/0x520 [ 272.829822][T12007] ? __pfx_ctnetlink_flush_iterate+0x10/0x10 [ 272.829851][T12007] ctnetlink_del_conntrack+0x6f1/0x8e0 [ 272.829883][T12007] ? __pfx_ctnetlink_del_conntrack+0x10/0x10 [ 272.829935][T12007] nfnetlink_rcv_msg+0xb4a/0x1130 [ 272.829961][T12007] ? __kernel_text_address+0xd/0x40 [ 272.829984][T12007] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 272.830032][T12007] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 272.830118][T12007] netlink_rcv_skb+0x219/0x490 [ 272.830139][T12007] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 272.830168][T12007] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 272.830204][T12007] ? apparmor_capable+0x137/0x1b0 [ 272.830232][T12007] ? bpf_lsm_capable+0x9/0x20 [ 272.830258][T12007] ? security_capable+0x7e/0x2e0 [ 272.830287][T12007] nfnetlink_rcv+0x273/0x2530 [ 272.830334][T12007] ? __dev_queue_xmit+0x27e/0x3a70 [ 272.830361][T12007] ? __dev_queue_xmit+0x27e/0x3a70 [ 272.830385][T12007] ? __dev_queue_xmit+0x27e/0x3a70 [ 272.830414][T12007] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 272.830458][T12007] ? __dev_queue_xmit+0x27e/0x3a70 [ 272.830485][T12007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.830510][T12007] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 272.830544][T12007] ? __pfx___dev_queue_xmit+0x10/0x10 [ 272.830589][T12007] ? ref_tracker_free+0x63a/0x7d0 [ 272.830608][T12007] ? __copy_skb_header+0xa7/0x550 [ 272.830635][T12007] ? __pfx_ref_tracker_free+0x10/0x10 [ 272.830655][T12007] ? __skb_clone+0x63/0x7a0 [ 272.830685][T12007] ? __skb_clone+0x483/0x7a0 [ 272.830718][T12007] ? skb_clone+0x246/0x3a0 [ 272.830748][T12007] ? __netlink_deliver_tap+0x807/0x850 [ 272.830768][T12007] ? netlink_deliver_tap+0x2e/0x1b0 [ 272.830796][T12007] ? netlink_deliver_tap+0x2e/0x1b0 [ 272.830816][T12007] ? netlink_deliver_tap+0x2e/0x1b0 [ 272.830843][T12007] netlink_unicast+0x758/0x8d0 [ 272.830893][T12007] netlink_sendmsg+0x805/0xb30 [ 272.830926][T12007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.830951][T12007] ? aa_sock_msg_perm+0x94/0x160 [ 272.830973][T12007] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 272.830994][T12007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.831015][T12007] __sock_sendmsg+0x219/0x270 [ 272.831048][T12007] ____sys_sendmsg+0x505/0x830 [ 272.831082][T12007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.831118][T12007] ? import_iovec+0x74/0xa0 [ 272.831149][T12007] ___sys_sendmsg+0x21f/0x2a0 [ 272.831177][T12007] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.831244][T12007] ? __fget_files+0x2a/0x420 [ 272.831269][T12007] ? __fget_files+0x3a0/0x420 [ 272.831305][T12007] __x64_sys_sendmsg+0x19b/0x260 [ 272.831333][T12007] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 272.831380][T12007] ? do_syscall_64+0xba/0x210 [ 272.831409][T12007] do_syscall_64+0xf6/0x210 [ 272.831433][T12007] ? clear_bhb_loop+0x45/0xa0 [ 272.831458][T12007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.831477][T12007] RIP: 0033:0x7f65a778e969 [ 272.831494][T12007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.831511][T12007] RSP: 002b:00007f65a8591038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.831532][T12007] RAX: ffffffffffffffda RBX: 00007f65a79b5fa0 RCX: 00007f65a778e969 [ 272.831545][T12007] RDX: 0000000000000004 RSI: 00002000000003c0 RDI: 000000000000000c [ 272.831558][T12007] RBP: 00007f65a8591090 R08: 0000000000000000 R09: 0000000000000000 [ 272.831570][T12007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 272.831581][T12007] R13: 0000000000000000 R14: 00007f65a79b5fa0 R15: 00007ffe2ed159d8 [ 272.831615][T12007] [ 273.478584][ T5840] Bluetooth: hci3: command tx timeout [ 273.498106][ T5840] Bluetooth: hci4: command tx timeout [ 273.517274][T12012] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1683'. [ 273.602074][T12009] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.700459][T12009] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.790617][T12009] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.815900][ T5849] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 273.816100][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 273.826086][T12027] IPVS: Unknown mcast interface: netdevsim0 [ 273.879812][T12009] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.963457][T11762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.030358][T11762] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.049708][T12036] netlink: 'syz.0.1690': attribute type 11 has an invalid length. [ 274.056428][T12037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.057694][T12036] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1690'. [ 274.105074][T12009] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.132352][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.139571][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.149417][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.156601][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.191642][T12009] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.242159][T12009] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.291035][T12009] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.381267][T12046] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1694'. [ 274.414597][T12046] FAULT_INJECTION: forcing a failure. [ 274.414597][T12046] name failslab, interval 1, probability 0, space 0, times 0 [ 274.427314][T12046] CPU: 1 UID: 0 PID: 12046 Comm: syz.6.1694 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 274.427341][T12046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 274.427353][T12046] Call Trace: [ 274.427361][T12046] [ 274.427370][T12046] dump_stack_lvl+0x189/0x250 [ 274.427404][T12046] ? __lock_acquire+0xaac/0xd20 [ 274.427432][T12046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.427460][T12046] ? __pfx__printk+0x10/0x10 [ 274.427485][T12046] ? __lock_acquire+0xaac/0xd20 [ 274.427519][T12046] should_fail_ex+0x414/0x560 [ 274.427556][T12046] should_failslab+0xa8/0x100 [ 274.427584][T12046] kmem_cache_alloc_noprof+0x73/0x3c0 [ 274.427607][T12046] ? skb_clone+0x212/0x3a0 [ 274.427637][T12046] skb_clone+0x212/0x3a0 [ 274.427660][T12046] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 274.427686][T12046] dev_queue_xmit_nit+0x416/0xcc0 [ 274.427708][T12046] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 274.427751][T12046] dev_hard_start_xmit+0x1d5/0x880 [ 274.427786][T12046] ? stack_trace_save+0x9c/0xe0 [ 274.427819][T12046] __dev_queue_xmit+0x1adf/0x3a70 [ 274.427851][T12046] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 274.427878][T12046] ? __dev_queue_xmit+0x27e/0x3a70 [ 274.427905][T12046] ? ctnetlink_del_conntrack+0x6f1/0x8e0 [ 274.427926][T12046] ? netlink_rcv_skb+0x219/0x490 [ 274.427944][T12046] ? netlink_unicast+0x758/0x8d0 [ 274.427970][T12046] ? netlink_sendmsg+0x805/0xb30 [ 274.427989][T12046] ? ____sys_sendmsg+0x505/0x830 [ 274.428010][T12046] ? ___sys_sendmsg+0x21f/0x2a0 [ 274.428031][T12046] ? __x64_sys_sendmsg+0x19b/0x260 [ 274.428052][T12046] ? do_syscall_64+0xf6/0x210 [ 274.428073][T12046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.428098][T12046] ? __pfx___dev_queue_xmit+0x10/0x10 [ 274.428161][T12046] ? __copy_skb_header+0xa7/0x550 [ 274.428188][T12046] ? __asan_memcpy+0x40/0x70 [ 274.428208][T12046] ? __skb_clone+0x63/0x7a0 [ 274.428239][T12046] ? __skb_clone+0x483/0x7a0 [ 274.428274][T12046] ? skb_clone+0x246/0x3a0 [ 274.428304][T12046] __netlink_deliver_tap+0x5ad/0x850 [ 274.428340][T12046] ? netlink_deliver_tap+0x2e/0x1b0 [ 274.428364][T12046] netlink_deliver_tap+0x19c/0x1b0 [ 274.428387][T12046] netlink_broadcast_filtered+0xcbb/0x1140 [ 274.428454][T12046] nlmsg_notify+0xf0/0x1a0 [ 274.428480][T12046] ctnetlink_conntrack_event+0x10b2/0x1490 [ 274.428536][T12046] ? __pfx_ctnetlink_conntrack_event+0x10/0x10 [ 274.428583][T12046] ? __nf_conntrack_eventmask_report+0xc1/0x480 [ 274.428610][T12046] __nf_conntrack_eventmask_report+0x1f7/0x480 [ 274.428643][T12046] nf_conntrack_eventmask_report+0x2ce/0x4a0 [ 274.428675][T12046] ? __pfx_nf_conntrack_eventmask_report+0x10/0x10 [ 274.428700][T12046] ? __local_bh_enable_ip+0x12d/0x1c0 [ 274.428738][T12046] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.428761][T12046] ? __local_bh_enable_ip+0x12d/0x1c0 [ 274.428797][T12046] nf_ct_delete+0x22f/0x600 [ 274.428817][T12046] ? nf_ct_iterate_cleanup+0x10e/0x520 [ 274.428837][T12046] nf_ct_iterate_cleanup+0x32e/0x520 [ 274.428856][T12046] ? nf_ct_iterate_cleanup+0x10e/0x520 [ 274.428878][T12046] ? __pfx_ctnetlink_flush_iterate+0x10/0x10 [ 274.428902][T12046] ctnetlink_del_conntrack+0x6f1/0x8e0 [ 274.428923][T12046] ? __pfx_ctnetlink_del_conntrack+0x10/0x10 [ 274.428964][T12046] nfnetlink_rcv_msg+0xb4a/0x1130 [ 274.428987][T12046] ? __kernel_text_address+0xd/0x40 [ 274.429006][T12046] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 274.429045][T12046] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 274.429111][T12046] netlink_rcv_skb+0x219/0x490 [ 274.429128][T12046] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 274.429151][T12046] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 274.429180][T12046] ? apparmor_capable+0x137/0x1b0 [ 274.429203][T12046] ? bpf_lsm_capable+0x9/0x20 [ 274.429225][T12046] ? security_capable+0x7e/0x2e0 [ 274.429249][T12046] nfnetlink_rcv+0x273/0x2530 [ 274.429272][T12046] ? __dev_queue_xmit+0x27e/0x3a70 [ 274.429293][T12046] ? __dev_queue_xmit+0x27e/0x3a70 [ 274.429313][T12046] ? __dev_queue_xmit+0x27e/0x3a70 [ 274.429335][T12046] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 274.429366][T12046] ? __dev_queue_xmit+0x27e/0x3a70 [ 274.429388][T12046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.429407][T12046] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 274.429434][T12046] ? __pfx___dev_queue_xmit+0x10/0x10 [ 274.429468][T12046] ? ref_tracker_free+0x63a/0x7d0 [ 274.429484][T12046] ? __copy_skb_header+0xa7/0x550 [ 274.429506][T12046] ? __pfx_ref_tracker_free+0x10/0x10 [ 274.429522][T12046] ? __skb_clone+0x63/0x7a0 [ 274.429547][T12046] ? __skb_clone+0x483/0x7a0 [ 274.429574][T12046] ? skb_clone+0x246/0x3a0 [ 274.429598][T12046] ? __netlink_deliver_tap+0x807/0x850 [ 274.429614][T12046] ? netlink_deliver_tap+0x2e/0x1b0 [ 274.429637][T12046] ? netlink_deliver_tap+0x2e/0x1b0 [ 274.429652][T12046] ? netlink_deliver_tap+0x2e/0x1b0 [ 274.429674][T12046] netlink_unicast+0x758/0x8d0 [ 274.429709][T12046] netlink_sendmsg+0x805/0xb30 [ 274.429743][T12046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.429764][T12046] ? aa_sock_msg_perm+0x94/0x160 [ 274.429782][T12046] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 274.429799][T12046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.429817][T12046] __sock_sendmsg+0x219/0x270 [ 274.429858][T12046] ____sys_sendmsg+0x505/0x830 [ 274.429882][T12046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.429910][T12046] ? import_iovec+0x74/0xa0 [ 274.429934][T12046] ___sys_sendmsg+0x21f/0x2a0 [ 274.429956][T12046] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.430009][T12046] ? __fget_files+0x2a/0x420 [ 274.430029][T12046] ? __fget_files+0x3a0/0x420 [ 274.430059][T12046] __x64_sys_sendmsg+0x19b/0x260 [ 274.430081][T12046] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 274.430116][T12046] ? do_syscall_64+0xba/0x210 [ 274.430137][T12046] do_syscall_64+0xf6/0x210 [ 274.430156][T12046] ? clear_bhb_loop+0x45/0xa0 [ 274.430175][T12046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.430190][T12046] RIP: 0033:0x7fbcef18e969 [ 274.430205][T12046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.430218][T12046] RSP: 002b:00007fbceff77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.430235][T12046] RAX: ffffffffffffffda RBX: 00007fbcef3b5fa0 RCX: 00007fbcef18e969 [ 274.430246][T12046] RDX: 0000000000000004 RSI: 00002000000003c0 RDI: 000000000000000c [ 274.430256][T12046] RBP: 00007fbceff77090 R08: 0000000000000000 R09: 0000000000000000 [ 274.430265][T12046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 274.430274][T12046] R13: 0000000000000000 R14: 00007fbcef3b5fa0 R15: 00007ffda728c2b8 [ 274.430300][T12046] [ 275.078320][T11762] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 275.088759][T11762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.104942][T11818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 275.119970][T11818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 275.149162][T11818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 275.232313][T11818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 275.291837][T12060] dvmrp0: entered allmulticast mode [ 275.299537][T12060] dvmrp0: left allmulticast mode [ 275.360826][T12062] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1697'. [ 275.539856][T11762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.548592][T12075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1700'. [ 275.585856][ T5840] Bluetooth: hci4: command tx timeout [ 275.589599][T12075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1700'. [ 275.631765][T11818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.681430][T12075] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1700'. [ 275.731130][T11818] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.744858][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.752078][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.828834][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.836030][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.185441][T11762] veth0_vlan: entered promiscuous mode [ 276.211432][T11762] veth1_vlan: entered promiscuous mode [ 276.240593][T12106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1709'. [ 276.274720][T12106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1709'. [ 276.317616][T11762] veth0_macvtap: entered promiscuous mode [ 276.373239][T11818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.382659][T11762] veth1_macvtap: entered promiscuous mode [ 276.472177][T11762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.493212][T11762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.518445][T11762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.552872][T11762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.565836][T11762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.578227][T11762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.593747][T11762] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.604952][T11762] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.621473][T11762] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.632085][T11762] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.828842][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.849938][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.894786][ T8558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.904505][ T8558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.067701][T11818] veth0_vlan: entered promiscuous mode [ 277.081859][T11818] veth1_vlan: entered promiscuous mode [ 277.144110][T11818] veth0_macvtap: entered promiscuous mode [ 277.156903][T11818] veth1_macvtap: entered promiscuous mode [ 277.179363][T11818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.193572][T11818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.203986][T11818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.214835][T11818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.227077][T11818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.263612][T11818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.295078][T11818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.305085][T11818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.319893][T11818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.331777][T11818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.378787][T12142] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 277.400284][T12142] gretap1: entered promiscuous mode [ 277.405649][T12142] gretap1: entered allmulticast mode [ 277.445046][T11818] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.475063][T11818] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.507207][T11818] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.529946][T11818] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.599683][ T8558] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.656322][ T5840] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 277.657051][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 277.669867][T12149] sit0: entered promiscuous mode [ 277.689590][T12149] netlink: 'syz.5.1720': attribute type 1 has an invalid length. [ 277.738469][ T8558] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.801389][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.810001][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.844109][ T8558] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.881269][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.890007][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.052697][ T8558] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.262198][ T8558] bridge_slave_1: left allmulticast mode [ 278.285792][ T8558] bridge_slave_1: left promiscuous mode [ 278.291609][ T8558] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.336972][ T8558] bridge_slave_0: left allmulticast mode [ 278.342668][ T8558] bridge_slave_0: left promiscuous mode [ 278.356086][ T8558] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.673307][T12171] __nla_validate_parse: 3 callbacks suppressed [ 278.673328][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1724'. [ 278.749347][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1724'. [ 278.814734][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1724'. [ 278.897689][T12177] x_tables: unsorted entry at hook 1 [ 278.920753][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.934451][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.945711][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.953990][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.961757][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 279.175243][ T8558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.190760][ T8558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.207948][ T8558] bond0 (unregistering): Released all slaves [ 279.345510][T12178] lo speed is unknown, defaulting to 1000 [ 279.595835][ T8558] hsr_slave_0: left promiscuous mode [ 279.601826][ T8558] hsr_slave_1: left promiscuous mode [ 279.609776][ T8558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.617282][ T8558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.627204][ T8558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.634657][ T8558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.656327][ T8558] veth1_macvtap: left promiscuous mode [ 279.661852][ T8558] veth0_macvtap: left promiscuous mode [ 279.667737][ T8558] veth1_vlan: left promiscuous mode [ 279.673022][ T8558] veth0_vlan: left promiscuous mode [ 280.050058][ T8558] team0 (unregistering): Port device team_slave_1 removed [ 280.088625][ T8558] team0 (unregistering): Port device team_slave_0 removed [ 280.508133][T12178] chnl_net:caif_netlink_parms(): no params data found [ 280.627051][T12178] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.634214][T12178] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.641544][T12178] bridge_slave_0: entered allmulticast mode [ 280.650308][T12178] bridge_slave_0: entered promiscuous mode [ 280.660124][T12178] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.667990][T12178] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.675156][T12178] bridge_slave_1: entered allmulticast mode [ 280.682425][T12178] bridge_slave_1: entered promiscuous mode [ 280.718376][T12178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.731024][T12178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.778756][T12178] team0: Port device team_slave_0 added [ 280.789036][T12178] team0: Port device team_slave_1 added [ 280.820650][T12178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.827736][T12178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.853891][T12178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.866956][T12178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.873917][T12178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.901807][T12178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.015758][ T5849] Bluetooth: hci3: command tx timeout [ 281.033018][T12192] netlink: 'syz.0.1726': attribute type 1 has an invalid length. [ 281.048490][T12197] netlink: 'syz.0.1726': attribute type 1 has an invalid length. [ 281.052271][ T1162] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.075289][T12192] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1726'. [ 281.083042][T12197] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1726'. [ 281.223846][ T1162] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.252740][T12178] hsr_slave_0: entered promiscuous mode [ 281.268702][T12178] hsr_slave_1: entered promiscuous mode [ 281.275297][T12178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.287339][T12178] Cannot create hsr debugfs directory [ 281.300509][T12202] vlan2: entered promiscuous mode [ 281.306530][T12202] bridge0: entered promiscuous mode [ 281.364779][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.376798][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.400188][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.413369][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.423414][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.432967][ T1162] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.472220][T12207] netlink: 'syz.6.1730': attribute type 10 has an invalid length. [ 281.544531][ T1162] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.633218][T12212] IPv6: Can't replace route, no match found [ 281.716421][T12203] lo speed is unknown, defaulting to 1000 [ 282.011512][T12232] netlink: 'syz.5.1737': attribute type 1 has an invalid length. [ 282.053224][ T1162] bridge_slave_1: left allmulticast mode [ 282.068614][ T1162] bridge_slave_1: left promiscuous mode [ 282.074511][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.089566][T12236] netlink: 564 bytes leftover after parsing attributes in process `syz.6.1738'. [ 282.100671][T12236] netlink: 564 bytes leftover after parsing attributes in process `syz.6.1738'. [ 282.115751][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1738'. [ 282.128685][ T1162] bridge_slave_0: left allmulticast mode [ 282.134509][ T1162] bridge_slave_0: left promiscuous mode [ 282.141850][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.631846][ T1162] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 282.643798][ T1162] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 282.653361][ T1162] CPU: 1 UID: 0 PID: 1162 Comm: kworker/u8:6 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 282.665508][ T1162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 282.675658][ T1162] Workqueue: netns cleanup_net [ 282.680443][ T1162] RIP: 0010:mld_clear_delrec+0x34a/0x5d0 [ 282.686086][ T1162] Code: ff ff ff e8 e8 f8 3f 01 89 c5 31 ff 89 c6 e8 0d d3 a9 f7 85 ed 74 40 e8 c4 ce a9 f7 eb 05 e8 bd ce a9 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 a7 c3 0b f8 4d 8b 27 49 8d 7f 30 [ 282.705716][ T1162] RSP: 0018:ffffc90003d4f5b0 EFLAGS: 00010206 [ 282.711784][ T1162] RAX: 000000001fffe000 RBX: ffff8880287a3538 RCX: ffff888026a50000 [ 282.719756][ T1162] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 282.727727][ T1162] RBP: 0000000000000001 R08: ffffffff8f7ed377 R09: 1ffffffff1efda6e [ 282.735703][ T1162] R10: dffffc0000000000 R11: fffffbfff1efda6f R12: ffff888060af8c28 [ 282.743676][ T1162] R13: dffffc0000000000 R14: ffff888060af8c00 R15: 00000000ffff0000 [ 282.751644][ T1162] FS: 0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 282.760607][ T1162] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.767185][ T1162] CR2: 00007f6b164c1440 CR3: 0000000025b70000 CR4: 00000000003526f0 [ 282.775154][ T1162] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 282.783126][ T1162] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 282.791098][ T1162] Call Trace: [ 282.794378][ T1162] [ 282.797311][ T1162] ipv6_mc_destroy_dev+0x45/0x5a0 [ 282.802334][ T1162] ? addrconf_ifdown+0x1396/0x1880 [ 282.807468][ T1162] addrconf_ifdown+0x139e/0x1880 [ 282.812443][ T1162] ? tls_dev_event+0x717/0xec0 [ 282.817232][ T1162] ? __pfx_addrconf_ifdown+0x10/0x10 [ 282.822558][ T1162] addrconf_notify+0x1bc/0x1010 [ 282.827437][ T1162] notifier_call_chain+0x1b3/0x3e0 [ 282.832578][ T1162] unregister_netdevice_many_notify+0x15d4/0x2330 [ 282.839033][ T1162] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 282.845839][ T1162] ? unregister_netdevice_queue+0x1b3/0x380 [ 282.851765][ T1162] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 282.858037][ T1162] ? net_generic+0x1e/0x240 [ 282.862545][ T1162] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 282.868527][ T1162] cleanup_net+0x6a3/0xbd0 [ 282.872962][ T1162] ? __pfx_cleanup_net+0x10/0x10 [ 282.877894][ T1162] ? _raw_spin_unlock_irq+0x23/0x50 [ 282.883082][ T1162] ? process_scheduled_works+0x9ec/0x17a0 [ 282.888831][ T1162] ? process_scheduled_works+0x9ec/0x17a0 [ 282.894543][ T1162] process_scheduled_works+0xadb/0x17a0 [ 282.900098][ T1162] ? __pfx_process_scheduled_works+0x10/0x10 [ 282.906099][ T1162] worker_thread+0x8a0/0xda0 [ 282.910700][ T1162] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 282.917029][ T1162] ? __kthread_parkme+0x7b/0x200 [ 282.921965][ T1162] kthread+0x70e/0x8a0 [ 282.926030][ T1162] ? __pfx_worker_thread+0x10/0x10 [ 282.931139][ T1162] ? __pfx_kthread+0x10/0x10 [ 282.935745][ T1162] ? __pfx_kthread+0x10/0x10 [ 282.940383][ T1162] ? _raw_spin_unlock_irq+0x23/0x50 [ 282.945584][ T1162] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.950794][ T1162] ? __pfx_kthread+0x10/0x10 [ 282.955392][ T1162] ret_from_fork+0x4b/0x80 [ 282.959834][ T1162] ? __pfx_kthread+0x10/0x10 [ 282.964431][ T1162] ret_from_fork_asm+0x1a/0x30 [ 282.969211][ T1162] [ 282.972223][ T1162] Modules linked in: [ 282.977197][ T1162] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 282.982754][ T1162] RIP: 0010:mld_clear_delrec+0x34a/0x5d0 [ 282.990267][ T1162] Code: ff ff ff e8 e8 f8 3f 01 89 c5 31 ff 89 c6 e8 0d d3 a9 f7 85 ed 74 40 e8 c4 ce a9 f7 eb 05 e8 bd ce a9 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 a7 c3 0b f8 4d 8b 27 49 8d 7f 30 [ 283.048842][ T1162] RSP: 0018:ffffc90003d4f5b0 EFLAGS: 00010206 [ 283.054970][ T1162] RAX: 000000001fffe000 RBX: ffff8880287a3538 RCX: ffff888026a50000 [ 283.063121][ T1162] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 283.071704][ T1162] RBP: 0000000000000001 R08: ffffffff8f7ed377 R09: 1ffffffff1efda6e [ 283.080733][ T1162] R10: dffffc0000000000 R11: fffffbfff1efda6f R12: ffff888060af8c28 [ 283.088910][ T1162] R13: dffffc0000000000 R14: ffff888060af8c00 R15: 00000000ffff0000 [ 283.103331][ T5849] Bluetooth: hci3: command tx timeout [ 283.103415][ T1162] FS: 0000000000000000(0000) GS:ffff8881260cc000(0000) knlGS:0000000000000000 [ 283.120264][ T1162] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 283.127470][ T1162] CR2: 0000560bdcb91088 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 283.135462][ T1162] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 283.143626][ T1162] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 283.151640][ T1162] Kernel panic - not syncing: Fatal exception [ 283.158082][ T1162] Kernel Offset: disabled [ 283.162404][ T1162] Rebooting in 86400 seconds..