last executing test programs: 2m54.165780227s ago: executing program 2 (id=143): r0 = socket$kcm(0x10, 0x7, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef000000000000000000000000060003000a0000000800010000000000240002"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000009f40)={0x0, 0x0, &(0x7f0000009f00)={&(0x7f0000009d40)={0x2c, 0x4, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000000}, 0x40094) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='virt_wifi0\x00', 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b2c, &(0x7f0000000040)) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x8, 0x27, 0x3202, @vifc_lcl_ifindex=r4, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@gettfilter={0x6c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff1, 0xc}, {0x1, 0xfff2}, {0x10, 0x6}}, [{0x8, 0xb, 0x1b4}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x10}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x3057}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x8}]}, 0x6c}}, 0x4008000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, 0xfffffffffffffffd) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRES8=r7, @ANYRES16=r8, @ANYRES32=r7], 0x54}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e) ioctl$PPPIOCGCHAN(r10, 0x80047437, &(0x7f0000001300)) readv(r10, &(0x7f0000001440)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1) sendmsg$nl_route_sched(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=@gettaction={0x28, 0x30, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x28}}, 0x4000040) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xb4, &(0x7f0000000100)=[{&(0x7f0000000140)="98474d7b91235da72185111007143153d0c882ebf418ed26dddda650d30460079f80881b4e26e0f1fd5407ed58279ef8919d2eef748bcd7a5329bf1faa4c8c4ac0ae11c9c2a3c75e4214a9b9a5ba48626009b3b1e3a2880f78ce7a1685cac9be60eaae7e6c17338f31736efb59f5d6a381a2897cdfeb"}, {&(0x7f0000000640)="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", 0x27}, {&(0x7f0000000080)="a10e50ee4fcc9ba57d01bd19cb9f190341c80eff641d2ff7ac89180a5c5ac89f08a11816436508922665e997a85c7e904cfe666861373ee66fb7feb5f6a854e65acec5877b7bb815a88b821315a7b790bc7f98466af4ccd7efda7e42ab1b54d28f0b659e6a"}]}, 0xa001814) write$tun(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="0000007c0100f7ffc90010000101431700f000670000fc019078e0000002000000000086188c1b99820108e5d5e435e1ed070ac13d3ceb60682e2594040100070b53ac1414bbac1414bb440c8b83ac14141b000000ba864000000003070aaa0f32a57e5aebec060cc997d22d1c6bb74b9d9d02086be1dc8c61300603df06036d0005df74cb0711fab95ca0b09edf000000000000000094040100030b907800097f2f0004e0000001e0000002831b167f000001ac14142fac1e0101190402736906b2dbe00000020000072b0affffffff640101020a010101ac14142773b11a82956700000000ffffffffac1e0001ac1414bb7f00"/254], 0xfe) 2m53.961613438s ago: executing program 4 (id=146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000000ae00)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r15, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x8000f2ff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000000ae00)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r15, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x8000f2ff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) 2m52.781807457s ago: executing program 1 (id=152): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) 2m52.781028802s ago: executing program 0 (id=153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x60, 0x4, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20080810) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000004000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYBLOB="0000000000000000000000000000000000000000000000000000000038b5fb7e6914dfc093235457f25725b81019e5d061ea6f5974b145500c8a5ce3bcffc9853267f44afb8f5de862d03e3bb0dda8c68f15d40cd1edbaac9d5a05906a4786bbfb5ef8312a53d79fe6e2e7aea4b93b8d"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x8b) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000540)="03e9e67d13ab7a1dfabd2e3ff276bff5f3d99656686b5cf5b7ac577d0a8c2c77768d427791c293072ad77c17d02725ea7c3647338a1aaa51c5f077ee1c027274e8d9ded244b97559389ecde7c152d2898800876a1f4af242b344afaee2c2965a51aa05118fdc02040bc2f9be9f0e9325335c7da4235e3dcf33f75b4f51cd2ec9db7394e33bfe4deaf0f48f8c769047c4e1ec47d3e1d09c7a47f2d11ecea5a2940159868538598c88f70fb086f708fb705a34a9b2ebff19de6f398d", &(0x7f0000000480)=""/87, &(0x7f0000000600)="24d0cfa2a376fcd607cbf06bab257eeb7e44fed8581885f54e39", &(0x7f0000000640)="8e0578593116bfe2ea9e684813d4fdfa6b5aa00014b18527387b2d14c8e7dd8b26477885360fbdc47903bba7268f67f9d1154313e51553f6e5e07784aef0e3061c66b91448f1e5adb3d6aa41a4be9a2019a5353185e78e5bd3679ab669191435f61204bab17d496a8f0e895f77f92e78cc0cd04d56b6e1c5a383b0c827b480edffd4b540bb63592c5e0cc620e0558a44a743bbb33da7cf160ff48b13bdeddb44946dd492a9ab688a38ffbe8c9c256bea1bbedc39adeb25b8fd325e015b80f17abf1eee8ff58aac21123c5d99a42cc6048aaaa6c11ec279bc43e35be317d6e7968b2eea7d05c88e79d737", 0x5, r4, 0x4}, 0x38) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r4, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x54, r2, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a0d4e01051d6ff63"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="cb437b1ec31102799ec86372a23189a5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a93063d59ee23c66b5445a20fc42c734"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)={{0x6b}, [@NFT_MSG_NEWFLOWTABLE={0xf4, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x0, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0xa4, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x78, 0x3, 0x0, 0x1, [{0xfffffffffffffce5, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x64, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}]}, @NFTA_DATA_VALUE={0x52, 0x1, "aa08f58eeb9ee5cee0e0ea0fa5aba6d766f457a1fa76bf9d77cd9390d69d077ea2090af33e36d4f9d7b9b633dd3dc33d55c77ddb8da5b9f2099050f06bf4f492a99a5685396e80f5768b73f3849b"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "3453a9fecd09680c01ba8fa70b98a9a6769b1304fac9d7eaba034db9279161e47e1aa96a5819e596ef53a0e4dcf253d55f5e700cbbdef33ef400c2e8fba3da580a587d47be712cf2265c931ff36e2fbaaae8d9795f98f7f5a1e43a3b3880fc343506be824721a67658142fbc0a78ad948b2c2044c65ce789a4"}, @NFTA_DATA_VALUE={0x0, 0x1, "b639c2d46b1833f0167bc706efd23a5e9412e0c87034d0892d3a253bb64d14c7668a535f73d18271fbe39e4eccad42acb87752aacff202e8457015c1fa51643b33682db2dcbb2368311d2a34bfe1ca9da6c5dac207d7d9ff679f5eb2181cda3d8b9d0c5c52eea60b982b774f9ca501a1ae23c02dd5b8a5e5eaeb8969fa61a3d5415bb1217277f33e957d80f36da321f96f14a85ac9bda6144dcf0d828459dd308c"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_TIMEOUT={0x0, 0x4, 0x1, 0x0, 0x68}, @NFTA_SET_ELEM_KEY_END={0x0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "326a85b9e9b41f1c7ebae175caf52b25fc254043a689734bd6de5bb4e08c441d46058ae347fa3acca58d654f4cbc7384fb5c82d4fba43b2e5ab48bdc272acfb462715cc9310e"}]}, @NFTA_SET_ELEM_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0x0, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPIRATION]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}]}]}]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x0, 0xb, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @nat={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @log={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @tproxy={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x0, 0x2, 0x1, 0x0, 0xb}]}}}, {0x0, 0x1, 0x0, 0x1, @synproxy={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x0, 0x1, 0x1, 0x0, 0xfffe}, @NFTA_SYNPROXY_WSCALE={0x0, 0x2, 0x8}, @NFTA_SYNPROXY_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_MSS={0x0, 0x1, 0x1, 0x0, 0x7}]}}}, {0x0, 0x1, 0x0, 0x1, @reject={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x0, 0x2, 0xa}, @NFTA_REJECT_ICMP_CODE={0x0, 0x2, 0x7f}]}}}]}]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "e91c2cdceb2121353a55fc05eb212e61b26519acd7"}, @NFTA_DATA_VALUE={0x0, 0x1, "49293cbedf06324c02f96d46fd0a456fd6d434729b8c22a819de45e8338fcaf5642c3a1d25adeac1c01c19466074326afe289cc8b29bd3127712218e752a07c785c78088cfbd493b4085fe0c839193b949c1c8d71490f01ba1528a5e72c3f2493b68861f6e46090dd52850782123e7c69b29f6f5e4676a0af70acc0554900ab419ee152e082bcb820f38a67775280814e337819700d2ed7150113e3dc0b1567eccdb196aebe681db52a3855777f8bb3b693c7acb6c4554cc495784c1577b34877dc856a90fc2edef6dc4da97ce722ec38c1834243ce51ae82c6e3971ea96ed1f72085f3023d5ba25a764"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x0, 0x1, "c63d9961b8724ecabb68b273a2150a2de449cd20b3f173d5dbe01c065a4c2cf0838da28418f4a9ae40c095cd8c96947a0b57e7932edf96ac28a7afefb77a10849963db8592f21c045d8ea7b2584102a02fe719b3c9c108c705beb5d6276b56dbdc15c86aa9c37fce66ad08e34a93297287ed360367439754010dbd488d56bf7aa5e2f0e0f43b070058b9ddf37f5fe2a1a56debb15e51a9f76388b8e274f314bafd2c728f1d11db06431d9f4178602bc1ae1f540073958bfdb3063fa3c4e5c4"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_OBJREF={0x0, 0x9, 'syz2\x00'}]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x0, 0x7, 0x0, 0x1, @nat={{}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0x0, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_DATA={0x0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "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"}, @NFTA_DATA_VALUE={0x0, 0x1, "0381523f61415ad975b62bf74e2eaa15a701a5937b58b6e0e414c06739bb38de50f10c352e3621cc9c"}, @NFTA_DATA_VALUE={0x0, 0x1, "a0f11b"}]}]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0x0, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0x0, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPR={0x0, 0x7, 0x0, 0x1, @exthdr={{}, @void}}, @NFTA_SET_ELEM_KEY={0x0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "d5"}]}]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0x0, 0x5, 0x1, 0x0, 0x6}]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x0, 0x7, 0x0, 0x1, @numgen={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x0, 0x4, 0x1, 0x0, 0xc59}]}}}, @NFTA_SET_ELEM_OBJREF={0x0, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0x0, 0x6, 0x1, 0x0, "10fb2fd6e23a665a8af0c2a314a5a6c4216f5b8e44487ab48af7671d168d78bdbbf8a516ca11d3938c919cfc64cfed1a3e7a3615df7563379a87823f5cc9995c657dd80e80ea0d569089e7982cac012bb8bbdcee0c141a846c9ba5db62e4ac606193a2bd8733f18708faf31ca586d9af5f4c2ec367d9c1ee59a5c91c994e8f125d3a56427cfee4731167f164032fd62aad0842d84041a0e351b25ba735e50711c0c53cf383ea56d3eb0725619e83327a23d01fdb8dd81de59925d5df9a315dece2966ad2923a14ab78b5290d08a90df6e2d49b6d43262534bc61e8552cfeb8946ad1d0b418d20a72dabf"}]}]}]}], {0x14, 0x10}}, 0xfecd}, 0x1, 0x0, 0x0, 0x131e284dd61db437}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x98, 0x0, 0x7, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xa2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x68b9}, @NFACCT_QUOTA={0xc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x80) 2m52.721212856s ago: executing program 2 (id=154): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000002a00)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) close(r0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x40047440, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x32}, 0x0, @in=@local, 0x80000, 0x0, 0x2, 0x0, 0xfffffffa, 0x0, 0xfffffffc}}, 0xe8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000019c0)={0xffffffffffffffff, 0x58, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002500)={'vxcan1\x00', 0x0}) sendmmsg$inet6(r2, &(0x7f0000002740)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x101, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6d06}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000080)="e485c24075723f47ac5d9df83d0fbdc4e1f2cea699e0026e2a5b85ed5f0cd6a507e75de27754b3ab48bbf0dc281846aba2daacc97b11baeddfb7696db76b8f24a1fe27ca52fbbf4c2a584ec1fccfb7713714db2b90b20a4d8f130295266d9503c0262641213b489a4339e248aeb55beabca958dbdaad9e", 0x77}, {&(0x7f0000000140)="dc38545a65c318990904a03b77d3253487abd6f0a544c8ce495481a70a244469768164d7165a3a7c594730e44adbc383f1b979ae29e2d7b98b0a492d7b9d5c4d759ac9be61fe91dfffa3f496a8f1d539f04f1e82294172a4a6c13918ca9a34a1548d6776fb3f18e4672a55929931db3afdf6ab70849e6b6df8cb949fa833946313ca44f227c8d5328e01af7eb85c035ae4907912518147a49df3353aacc6b64a3627c71513002650a155d0da2a76e3f7", 0xb0}, {&(0x7f0000000200)="1c9c01c0a2082ff9fa35ce9c74fe81b93328c485ee9b486c1374408eb4f69949ecfe9d343ccf89faf0d387849bfb638002885f7d125c2ad4279dbad89f9abfeaf9ae82ae6aaff3f03afaab16fe710fe8cf25", 0x52}], 0x3, &(0x7f00000002c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @hopopts={{0x60, 0x29, 0x36, {0x32, 0x8, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @pad1, @pad1, @calipso={0x7, 0x38, {0x2, 0xc, 0x6, 0x4, [0x2, 0xffffffff, 0x10001, 0x1, 0xec1, 0x9]}}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x52, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x81}, @ra={0x5, 0x2, 0x1}]}}}], 0x98}}, {{&(0x7f0000000380)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x22}, 0xd44f}, 0x1c, &(0x7f0000001780)=[{&(0x7f00000003c0)="6b7ddec4dd1605e6438bcd91dcf1b43496a642638657d45179b18b794cbaa6654368bec68aa1763b0f0c6777097be7dbc70ef49da2b270441042be95b58f0e4c5aefcdaeca38911fcbf95d56ecf5", 0x4e}, {&(0x7f0000000440)="ba59dbcd32b4db1a9d006164e323f67c44fb393880e5229439723dc769514bb9f50bd796c7165d8dfacbc19fb66a0c4d2748a4e5426606db99272f7ac8344889ccf2c5ffb579683fbc0d325ff55c0991614c509a142aa0ebceeaa99506a1c635e25f443a5fb70f96e88a8bb54c1142cc6ca196c72f5bd49ad65e38954ea45437def0f48aba", 0x85}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="34cb566aea4104840a14434a1c38f5f91844527eea80837724ef9ca2a745d5c8a9ab3dedda48c66dfb2287cec592447a9587d37a8c56a203fd234b1bf04b90b53153a01a829daa874890e052", 0x4c}, {&(0x7f00000016c0)="dae419caecd9650e1d33f9f241ed279edb7c4019153d2f64c9c7a400d76d2a1f1ec6a0c8e5efbfb43bd1598bc25b0cef0212c0f13554ae6bd5bbb762d654a2ccfb87fe29689d40e031c27c1f20fbe27d4e770499f007c0167214a463ed84e9ba0e72a825d9f4283a5537a31a37a01416d1e6cb2f0c581841cf35d0ad5983df3fe20a4f52ac89a2638bc7530a144d68867e54c5de8b5e10c22b972838e4b30adf1da6fab1203aaad11b76dc88c78dc7648241c8c03e8e9e694a25cd336d4d97f8", 0xc0}], 0x5}}, {{&(0x7f0000000500)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, 0x4}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000001800)="1e807afe0de5806b26c1ea4edbb7bb0fb523caedcfaa41d2f92afb6349b73e6e06541352990cb6e5ea5792be61f8ad4da97ac54e9d5a58ab345686431fdcbab9bef546e8c03abfaf1a669dceeaec121ac0ffeec4eebffbbd3b97b322f25830ad3614a7c9e01e0f50636dadd9cd667c3946948484e4b486385352c0e0c012b1028ca572eae5a1b7a88ad7fce54fde400875c03405856143a3606180340629b26c4e71b22de425e7244694a92d6f77bc97f2712609c7ec2efa4ff1bd7a9dd3c3ee53a0b782ad2672c5c47dc2d25dde0ae5e78edf0686459c", 0xd7}], 0x1, &(0x7f0000001a00)=[@rthdrdstopts={{0x290, 0x29, 0x37, {0x6c, 0x4e, '\x00', [@hao={0xc9, 0x10, @remote}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0xfd, 0xd1, "3d58970f6a04125a600c57eab10df57806eb1cf0dbc4b637d6d7bb83bbcee58c837fc2d57c9aefd34498bc734aa9a20f3acfb947a18e33bacf432b09c44798140da8584859975cad500002234c8bd7a64a2b372afd3d728cf7fa527a2b4eedcb19a79306bcb3e4e3c28d75adab176471c08ca617a2f2c1110b17ae8728695446f94b30d3be2f1271ff61d2432e87bde6316812aba3a2b8dea7c8257af09c5c012cc640bb093bb28aa28e16b4f71babefa626f735756fd6dfed05fe6c518246c61ae8c1fcdc88e89c87bd79e960a4b56da1"}, @calipso={0x7, 0x38, {0x3, 0xc, 0x8, 0x9, [0x80000001, 0x7, 0x1, 0x4, 0xa, 0x800]}}, @generic={0x0, 0xde, "721292f9b03924c941f923e9e13a73f5cc6565755ac0702f61bb57914a2db3065bdf6fba8ac563d974df3da4ba6da69711cb5c0c2584d8cdea6acf795d57b1ebb301ed3c91c201c9dc1846a5a3bc4a983528c7d3ecc5c6d91b11f0083f7e19261995aaacaecc93c28e1aa238270d05c999644ee84e60fb87ce1f8175af7104719d03e30542a9ea712092b4ffa04326583cc956e9b965028f7f6a34dbe2d8fa40fc1089dc1eacbe107816baeabc86a4ca75713abdf5b382e107be0a6726e6f9642fd29c299db28f43db777451fc68c6bda6f8ecea2b26c22e0a31a6e7bab9"}, @enc_lim={0x4, 0x1, 0xd6}, @generic={0x7, 0x69, "fe9bcb4dfa1436479386af850d79a40f154d9782ccc135b40f35a50125a0e3ed1e3d035937d88d59679340fd90155b07433ae2fb60b467173a0e0325a9ab3102af612dcea534374d98c0b87fc525329a732dddae5f2324cfebc5f0504ba8906c94f3d0542e472178f9"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6779}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r4}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7f}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @dstopts={{0x48, 0x29, 0x37, {0x59, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @private1}, @jumbo={0xc2, 0x4, 0x8000}]}}}], 0x348}}, {{&(0x7f0000001d80)={0xa, 0x4e21, 0x85f, @remote, 0x100}, 0x1c, &(0x7f0000002240)=[{&(0x7f0000001dc0)="cae753c74ab17ec8d9bb753ae94bb0c51be38ad5c2a424bb97d92ea65abf2e59ae80153c9ab9925d5c6f14b31aa1d992536f324b69e5b463a4b0266edc10c82d623f7656ac05ae1a7fec2d8587cb2e863756fcc0e9e69dc07507d98b17b0c1eefe1d01e123c548ad5e0f7eee4a56e7d6232cb170d9a0bee82c46b2b82defe26f1eddc5bb63a035facfb2563d8293fe534c3a7e42c38699e84a0606624dde8146", 0xa0}, {&(0x7f0000001e80)="bd02511927038dc3580b90df2ecd3576aab2473aad229eafcdaaf72c93430f588cb654d1b43bb9bff9e9228f3366f40966824c926e3cb3391aa8d9d210cfce9acdd3dec9929210abcd60b61ed3df0beb26d3d6ea1f062f0378a1b9a9e90c89c67dcae55af641d3ecfc204d1066289906d43dfa23833a76bf593f2bf59a373b763ed462e84a13d3a2848f132431e92eeb49177c928d9e59809e8f394d98a2cb85ec35256b59", 0xa5}, {&(0x7f0000001f40)="602cd1c34b0f6afd81bed2eca87eaebecaae247dbdca13cd7011e64e637e1cffc675", 0x22}, {&(0x7f0000001f80)="1c094ea7c8dd7f00e46b61f94dec0efa0742cf57693209bd84f894adcd643776f6ce63d33507af4b48673423feb7480d88f13ca3e2a773b7254e603d3bdb38e8da823835d35e585c62e588240d73a7193dd15a2055e449e90f4f6d5401e245c453fb8e1eb2e8ef45e119671e1c0ef27bf95645550e12b826620c086762ca51cbbc6ae70b", 0x84}, {&(0x7f0000002040)="8af085a6e1eb1d53f18e312de833cdf12def631f70ded12344625b9b61e1d88a02eadeb0ea077be61904bea2f50ffa4b23bb67e206694e31e61dbe6ab14b1c5bc3cd19606cdd9c19150c1ef981b51c5da8fa6c4d8b7be68348447d5e433a279ea5e1dc52210f96728e32633148333d9ac563f3e8a8155eea98a154e8901535a2e63dacc25a85a49c86043245e8605b3bdb70f91e7c9b277e6169398d393c1e96ae6daa6770bd969299b66c250fd9e4222e3775ecbcee2c3d806484b125898067e8bfffd977eefcca3605db635bfb1c0bb76be0d3d37af44acb46ef4133c114cc7630c2089a44e45163a219b7", 0xec}, {&(0x7f0000002140)="e2bff83857e9b21b613eb5779908dba7fb032d686e5646e31193066128ea5cc5b0ef17b4ddb271cb4c212605dcdf306d7a14cc9f30c9680b646754bae851b6b28cc5bbaad89a0d96af4d0e0e242542a26887d7f5818bdf3b5e01b4b88b3e9014afedd479e6c022fb6ff821f845cc589f3c63d8fde4ee4524d08fd10bfa2829951edf78ced8726e1ffd9a2739386e4256c1d53c224d28d30af821d41792bdf2fe80b6badf31516da9d585b4f07b5c65f2e8da34f098aeb5e8bf202dee26c35fa877c4c8900a934281e1a203b3eee3e2c58da0ddf53f9ae16cea079331f5c20cd8e3e604bec54fba", 0xe7}], 0x6, &(0x7f00000022c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x10000}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x3b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}]}}}], 0x38}}, {{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000002300)="c46fd5ff7b5b473206ecedfa6e332b262c5b55a0fa28ea30f11b7cb04e5f20528da5a9317eccec153e97fc48b52212d5a0d8eb2519e489f2802631c47957896439f332acadcfb862e3d99a39a5f86ddf23c9f4a80011a8a454633237fbc9cb93df5ce35531071a6c9cc337c67c9e", 0x6e}, {&(0x7f0000002380)="5ad2de76ecfe2a4ee0789a4acd2cc7f86dc3bf686832eb6c6cdc01b39809be29b8dfee55390259ca2f47698d797d3c1e29b67605f016df3ec9deda4ec14dd01a4c0eee87bee2a4ad723179c29be346817c13953830039e8b3260ebfd4d59a01bb11a2ab410140535fc21217d8bf194c69d54f9cb048c5b7cc10b", 0x7a}, {&(0x7f0000002400)="2192c6194af3564b8619843de38775568ce9414975473dea588a9b4f83cafd783efad5342d6b911511b45715c5d11c9d6aa113e94a82dd7a8c6fe217a5fc18361e202c0593a6fcb4d2c7789a9218546c8df3a87353df70e42b7834b4e74590f0874c6cd43817fd1172d119d597821c64f0a5360c7b0f0a3fc7203d5d3eda33fef6330235a2c767c40d7b94871ffd766bb654502dcb9d2a971303062d11e5155e99cbf7c2d5ce23d0bcedd3bd228f8d7953b397c3c5769da248107def71ea", 0xbe}], 0x3, &(0x7f0000002540)=ANY=[@ANYBLOB="980000000000000029000000390000003c10000200000000ff01000000000000000000000000000100000000000000000000000000000000fc00000000000000000000000000000100000000000000000000000000000000fe8000000000000000000000000000aafc020000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa1400000000000000290000003400000003000000000000001400000000000000290000003e000000b80500000000000014000000000000002900000034000000516d000000000000680000000000000029000000360000002c09000000000000c20400000004c204000000070502000607200000000206e242070e0000000000000000080000000000000600000000000000071000000001020208000700000000000000040101c2040000000800000024000000000000002900000032000000fc0200"/360, @ANYRES32=r5, @ANYBLOB="00000000780000000000000029000000360000003b0b0000000528796dcce7d88b0110080000f23b000000000000010001e5ff0000004000000000000000050000000000000000000000000000000700000000000000fbffffffffffffff09000000000000000401f9c2040000d46b00010000010000010000000000"], 0x1e8}}], 0x5, 0x81) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000056000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="100001"], 0x28}}, 0x0) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305839, &(0x7f0000000000)={0x5c, 0x2, 0x0, 0x10001, 0x0, 0xf0}) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @private}, 0x2, 0x0, 0x2, 0x3}}, 0x2e) (async) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000005280)) 2m52.700628311s ago: executing program 1 (id=155): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x38}, 0x1, 0x7500, 0x0, 0x400c1}, 0x8000) (async) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000080)=0x2) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000040)=0x80002219, 0x4) (async) writev(r1, &(0x7f00000000c0), 0x0) (async, rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) (rerun: 64) 2m52.597639257s ago: executing program 4 (id=156): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f00000004c0)=ANY=[@ANYBLOB="cf599d594a0987000000000086dd60000000001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000008"], 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x0) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x701, 0x0, 0x0, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x5}}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x4, 0x25ffdbfe, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 2m52.565706598s ago: executing program 0 (id=158): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000000000018030000feffffff85000000b200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2m52.457445272s ago: executing program 4 (id=159): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4018}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0x76, 0x97, &(0x7f0000000080)="eebb2635831f22a3c7f3136ed602946ae313603c29006e8693d8b9d755b93acec96b480d5d007c6418a38a2334d1d6755b6ed26abaf291e086445f954d90370c052e15604f2758e889eaef2038e864ec503beb2432c21bb345a6a747c61a453b760018479af1e6ac4dd1b3df1e26f4d852cc161c8959", &(0x7f0000000100)=""/151, 0x4c6d, 0x0, 0x3d, 0x73, &(0x7f00000001c0)="4808f28fb1c80a669591b3b68591f9b067521a4932da632f2d13f19bb6d6d2d8849f382756916582139ae239649e100325838c7ab35dc520c37640ebdc", &(0x7f0000000200)="8e3a1db1e7526153f302f08fa21fe137eb131233f93d05bf89e5f58b4a6ee80f02bc9d9b019b3c9cb8b9ffe09e02014cffe774b6f55c3fb2b3479aaa318ed7d547cf7598a57a3c77b86f772cde8618bf8d167f40e1924fed786a70dc88fd329c929a9491849b421c8ddb5f4551ce9f9d0d9ea2", 0x3623c6954ef2a520, 0x0, 0x200}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xdc9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x18, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000580)='syzkaller\x00', 0x5, 0x2d, &(0x7f00000005c0)=""/45, 0x41000, 0x64, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x0, 0xf, 0x0, 0x401}, 0x10, 0xffffffffffffffff, r0, 0x0, 0x0, &(0x7f0000000640), 0x10, 0xb, @void, @value}, 0x94) socketpair(0x29, 0x5, 0x17, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000007c0)={r2, r4, 0x0, r8}, 0x10) socketpair(0x29, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000000840)={{r2}, 0x0, 0x0, @unused=[0x5, 0x5, 0xd, 0x8], @name="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"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000018c0)={{r2, 0xffffffffffffffff}, &(0x7f0000001840), &(0x7f0000001880)=r0}, 0x20) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000001ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@type_tag={0x5, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x5f, 0x27f7721bf8c1b332, 0x2e]}}, &(0x7f0000001b00)=""/62, 0x29, 0x3e, 0x1, 0x81, 0x10000, @value}, 0x28) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x4, 0x10, &(0x7f0000001900)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x246}, [@exit, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @generic={0x7, 0x6, 0x5, 0x2, 0x3}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}]}, &(0x7f0000001980)='syzkaller\x00', 0x200, 0xdd, &(0x7f00000019c0)=""/221, 0x41000, 0x10, '\x00', 0x0, @fallback=0x1f, r12, 0x8, &(0x7f0000001b80)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001bc0)=[r3], 0x0, 0x10, 0xba5, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0xb, &(0x7f0000001cc0)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_val={0x18, 0x6, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x7}], &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x32, &(0x7f0000001d80)=""/50, 0x41000, 0x0, '\x00', 0x0, 0x25, r12, 0x8, &(0x7f0000001dc0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000001e00)={0x3, 0x10, 0xa, 0x7fffffff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001e40)=[r3, 0x1, 0xffffffffffffffff], &(0x7f0000001e80)=[{0x4, 0x5, 0x3, 0xb}, {0x5, 0x2, 0x10, 0x4}, {0x3, 0x3, 0xe, 0x6}, {0x5, 0x1, 0x0, 0xa}], 0x10, 0x5, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000001f80)={0x0, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000002040)=0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000002080)={0x1, [0x0]}, &(0x7f00000020c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000002100)={r14, 0x9, 0x800, 0x2, 0x81, 0x7, 0x9, 0x7b, {r15, @in={{0x2, 0x4e20, @private=0xa010100}}, 0x3, 0x14bf, 0x0, 0x40, 0xff}}, &(0x7f00000021c0)=0xb0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000002380)={'gretap0\x00', &(0x7f0000002340)={'ip_vti0\x00', 0x0, 0x7, 0x700, 0x6, 0x7, {{0x8, 0x4, 0x1, 0x28, 0x20, 0x64, 0x0, 0x10, 0x29, 0x0, @multicast2, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x50, 0x1, 0xd, [{@loopback, 0xa2b}]}]}}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000025c0)={r12, 0x20, &(0x7f0000002580)={&(0x7f0000002440)=""/231, 0xe7, 0x0, &(0x7f0000002540)=""/28, 0x1c}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002640)={0x1c, 0x8, &(0x7f0000002200)=@raw=[@generic={0x7, 0x6, 0x4, 0x401, 0x6}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_fd={0x18, 0x9, 0x1, 0x0, r11}, @exit, @alu={0x7, 0x1, 0xb, 0x8, 0x6, 0x0, 0xfffffffffffffffc}], &(0x7f0000002240)='GPL\x00', 0x2, 0x93, &(0x7f0000002280)=""/147, 0x41000, 0x40, '\x00', r16, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f00000023c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000002400)={0x0, 0xb, 0x5, 0x5}, 0x10, r17, r13, 0x0, &(0x7f0000002600)=[r3, r2], 0x0, 0x10, 0xfffff1ed, @void, @value}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0x7, &(0x7f0000002700)={0x9, 0x4007cae9, 0x101, 0xb4e6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002740)=@base={0xf, 0x8, 0x8000, 0x7, 0x1000, r3, 0x3, '\x00', r16, r12, 0x3, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r18 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002800), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000002900)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x50, r18, 0x210, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip_vti0\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, &(0x7f0000002940)={'IDLETIMER\x00'}, &(0x7f0000002980)=0x1e) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x21, &(0x7f00000029c0)=""/234, &(0x7f0000002ac0)=0xea) openat$ppp(0xffffffffffffff9c, &(0x7f0000002b00), 0x280000, 0x0) 2m52.456936198s ago: executing program 1 (id=160): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000000206050000000000000200000000000005000400000000000900120073697a32000000000500050000000000050001000600000013000300686173683a6e65742c69666163650000ebb54b650829b2e6217cb8524b0dfb5492754117a98419fb988cb31d556ab9140f873ed94dcf521f8b9db656b01c596bafc8b3ddc7858f13d77d4a994c37533c60f90c7a18138abea47c1d3c3c875c677d786ef4b57da155e27440c14dcf130761c7980327bc8068137db9da1e5674ae16c0577996c9873e2c4048008632bac86e1c101d3b4a31a5010dd8269cfd4d62c806"], 0x4c}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000980), 0xa2000, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000980), 0xa2000, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xfffd}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000005, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x100f1e}, 0x1c) socket$inet(0x2, 0x5, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x19, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x5, 0x4, 0x3, 0x0, 0x1}, @alu={0x4, 0x1, 0x3, 0x6, 0x6, 0xffffffffffffffd6, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x1, 0x1b, &(0x7f00000004c0)=""/27, 0x41100, 0x10, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x3, 0x4, 0x7fff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc86, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x80, 0x700, 0x9, 0x4, {{0xb, 0x4, 0x0, 0x9, 0x2c, 0x65, 0x0, 0xe, 0x2f, 0x0, @multicast1, @local, {[@noop, @timestamp_prespec={0x44, 0xc, 0xf4, 0x3, 0xf, [{@loopback, 0x6}]}, @cipso={0x86, 0xb, 0x0, [{0x1, 0x5, '8\'p'}]}]}}}}}) pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000940)=0x200100, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000940)=0x200100, 0x4) sendmsg$nl_route(r4, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)=@ipv4_newnexthop={0x48, 0x68, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2, 0x0, 0x2, 0x0, 0x22}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8, 0x1, r5}}}, @NHA_OIF={0x8, 0x5, r6}, @NHA_GATEWAY={0x14, 0x6, @ip4=@private=0xa010102}, @NHA_BLACKHOLE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) sendmsg$nl_route(r4, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)=@ipv4_newnexthop={0x48, 0x68, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2, 0x0, 0x2, 0x0, 0x22}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8, 0x1, r5}}}, @NHA_OIF={0x8, 0x5, r6}, @NHA_GATEWAY={0x14, 0x6, @ip4=@private=0xa010102}, @NHA_BLACKHOLE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000780)={r2, @in6={{0xa, 0x4e24, 0x0, @mcast1, 0x10000}}, [0x4e1, 0xffffffffffffff7f, 0x8b, 0x800, 0x4, 0x8000000000000001, 0x1ff, 0x6, 0x2339, 0x8, 0x3, 0x10, 0x7fff, 0x5bd, 0x8]}, &(0x7f0000000100)=0x100) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000780)={r2, @in6={{0xa, 0x4e24, 0x0, @mcast1, 0x10000}}, [0x4e1, 0xffffffffffffff7f, 0x8b, 0x800, 0x4, 0x8000000000000001, 0x1ff, 0x6, 0x2339, 0x8, 0x3, 0x10, 0x7fff, 0x5bd, 0x8]}, &(0x7f0000000100)=0x100) 2m52.425415346s ago: executing program 2 (id=162): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x4004743c, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) shutdown(r1, 0x2) 2m52.33046631s ago: executing program 0 (id=163): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) (async) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) (async) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x2, 0x0, 0x0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) sendmsg$NLBL_MGMT_C_ADDDEF(r1, 0x0, 0x4040000) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000004380), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0xc010}, 0x40880) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r10, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004700)={&(0x7f0000004600)={0x40, r8, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0x6}}]}, 0x40}}, 0x20000010) (async) sendmsg$nl_route(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001800010000000000000000001d018f0008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRESDEC=r9], 0x24}}, 0x0) 2m52.201714408s ago: executing program 4 (id=164): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000007b019e000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x2) getsockname(r0, &(0x7f0000000d00)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000c80)=0x80) r2 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x1a0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x170, 0x2, [@TCA_GRED_LIMIT={0x8}, @TCA_GRED_DPS={0x10}, @TCA_GRED_STAB={0xfffffffffffffdaa, 0x2, "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"}, @TCA_GRED_DPS={0x10}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x1a0}}, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0x2c}, r1}, 0xc) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) 2m52.141342506s ago: executing program 1 (id=166): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m52.094456779s ago: executing program 0 (id=167): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl(r1, 0x8b2c, &(0x7f0000000040)) socket(0x2, 0x3, 0xffff) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x2}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}}, 0x40) (rerun: 64) 2m51.937808782s ago: executing program 2 (id=169): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r2 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0xc, 0x7}, {}, {0xfff3, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 2m51.908216238s ago: executing program 1 (id=170): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000006780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x8, [@union={0x2, 0x4, 0x0, 0x5, 0x1, 0x1, [{0xf, 0x0, 0x3}, {0x7, 0x4, 0x5}, {0xb, 0x2, 0xf1}, {0x1e, 0x1, 0xd6}]}, @var={0x10, 0x0, 0x0, 0xe, 0x1, 0x1}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x3, 0x7}]}, {0x0, [0x2e, 0x2e, 0x61, 0x61, 0x5f, 0x5f]}}, &(0x7f0000000100)=""/29, 0x7c, 0x1d, 0x0, 0x6, 0x0, @void, @value}, 0x28) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) (async) clock_gettime(0x0, &(0x7f0000006700)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006540)=[{{&(0x7f0000000500)=@generic, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000580)=""/136, 0x88}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000640)=""/95, 0x5f}, {&(0x7f0000000280)=""/17, 0x11}, {&(0x7f00000006c0)=""/59, 0x3b}, {&(0x7f0000001940)=""/235, 0xeb}, {&(0x7f00000007c0)=""/132, 0x84}, {&(0x7f0000001a40)=""/114, 0x72}], 0x8, &(0x7f0000000700)}, 0x3}, {{&(0x7f0000001b40)=@ax25={{0x3, @bcast}, [@remote, @rose, @bcast, @bcast, @rose, @netrom, @rose, @bcast]}, 0x80, &(0x7f0000003140)=[{&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/175, 0xaf}, {&(0x7f00000049c0)=""/47, 0x2f}, {&(0x7f0000002cc0)=""/230, 0xe6}, {&(0x7f0000002dc0)=""/234, 0xea}, {&(0x7f0000002ec0)=""/12, 0xc}, {&(0x7f0000002f00)=""/156, 0x9c}, {&(0x7f0000002fc0)=""/230, 0xe6}, {&(0x7f00000030c0)=""/86, 0x56}], 0x9, &(0x7f0000003200)=""/29, 0x1d}, 0x9}, {{&(0x7f0000003240)=@can, 0x80, &(0x7f0000003340)=[{&(0x7f00000032c0)=""/119, 0x77}], 0x1, &(0x7f0000003380)=""/141, 0x8d}, 0x6}, {{&(0x7f0000003440)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003540)=[{&(0x7f00000034c0)=""/97, 0x61}], 0x1, &(0x7f0000003580)=""/99, 0x63}, 0x8}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003600)=""/92, 0x5c}], 0x1}, 0x95}, {{&(0x7f00000036c0)=@isdn, 0x80, &(0x7f0000004a80)=[{&(0x7f0000003740)=""/78, 0x4e}, {&(0x7f00000037c0)=""/231, 0xe7}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f00000048c0)=""/128, 0x80}, {&(0x7f0000004940)=""/65, 0x41}, {&(0x7f00000049c0)}, {&(0x7f0000004a00)=""/78, 0x4e}], 0x7, &(0x7f0000004b00)=""/84, 0x54}, 0x5}, {{&(0x7f0000004b80), 0x80, &(0x7f00000063c0)=[{&(0x7f0000004c00)=""/141, 0x8d}, {&(0x7f0000004cc0)=""/211, 0xd3}, {&(0x7f0000004dc0)=""/143, 0x8f}, {&(0x7f0000004e80)=""/238, 0xee}, {&(0x7f0000004f80)=""/203, 0xcb}, {&(0x7f0000005080)=""/241, 0xf1}, {&(0x7f0000005180)=""/194, 0xc2}, {&(0x7f0000005280)=""/96, 0x60}, {&(0x7f0000005300)=""/4096, 0x1000}, {&(0x7f0000006300)=""/138, 0x8a}], 0xa, &(0x7f0000006480)=""/180, 0xb4}, 0x7fffffff}], 0x7, 0x10023, &(0x7f0000006740)={r3, r4+60000000}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x194}}, 0x0) 2m51.907852938s ago: executing program 4 (id=171): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b040700e0ff030002004788aa96a13bb100000000004305400f", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 2m51.779264463s ago: executing program 0 (id=172): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000100)=0xfffffffa, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="21ff0100000000002008b1e3b7fe2bed322300"/28, @ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c0002800800070000000000"], 0x3c}}, 0x0) r2 = socket(0x28, 0x5, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x90) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20, 'TRACE\x00', 0xe}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b706000014000000b7030000000000008500000056000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'pimreg\x00'}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b140100000000000d000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x4855}, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x100}}]}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x98}}, 0x8000) shutdown(r2, 0x0) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000040a000000000000000000000300000108000a40000000010900030073797a30000000001db40b82ef793fbfe8d1b04963ec94e4c0d5bbf29c4bfe75fcdbbc6b021d5b0eacb3a39e10069b7689692f6f9644bee5f9f143e3dc52ba12d10fb2e914220a77f5d33f793908e43fff9242365801c9605e54cbac604e8744f3121a60caf6c554dd62f700da2ccff96d687de4e62522ba20024e69b5a1a8e7c9e5fe8f14b6ff56f6e8a376256324183f6f14e7a09cf30f570f1473b1f3d399594fc689d2034bd93e045380e5e2a6b6441a3c26f0db94a3d26c00"/233], 0x28}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000800) setsockopt$MRT_ASSERT(r2, 0x0, 0xcf, &(0x7f0000000840), 0x4) 2m51.617677901s ago: executing program 2 (id=173): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000000000007b030000feffffff85000000b200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2m51.532711434s ago: executing program 4 (id=174): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x44, 0x1, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@bridge_setlink={0x34, 0x13, 0xa2f, 0x70bd25, 0x0, {0x7, 0x0, 0x68, r1, 0x900, 0x62010}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x4}}}]}, 0x34}}, 0x4050) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000080)=0x2e7, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x44, 0x1, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@bridge_setlink={0x34, 0x13, 0xa2f, 0x70bd25, 0x0, {0x7, 0x0, 0x68, r1, 0x900, 0x62010}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x4}}}]}, 0x34}}, 0x4050) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000080)=0x2e7, 0x4) (async) 2m51.179965024s ago: executing program 32 (id=174): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x44, 0x1, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@bridge_setlink={0x34, 0x13, 0xa2f, 0x70bd25, 0x0, {0x7, 0x0, 0x68, r1, 0x900, 0x62010}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x4}}}]}, 0x34}}, 0x4050) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000080)=0x2e7, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x44, 0x1, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@bridge_setlink={0x34, 0x13, 0xa2f, 0x70bd25, 0x0, {0x7, 0x0, 0x68, r1, 0x900, 0x62010}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x4}}}]}, 0x34}}, 0x4050) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000080)=0x2e7, 0x4) (async) 2m51.162105678s ago: executing program 0 (id=176): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r3}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000640)={@remote, @broadcast, @void, {@llc_tr={0x11, {@llc={0xdc, 0xdc, "8bd9", "88ed87ca5b2617935103c855f34805e31aa9c9b8cc97900c43daa5c20b179349b9908e44d301cd7c932f050cf1063a027e90b5ef6d5b50d146bcc3378eceea0ddc55dfdc4190b79ad7dba38d924f28e58ab2fdc0aae3dbfa46b6de76b1897c739605ffc82c533bb07ddcf8f5f0d02f0f1515e8808314af8351e7e5eba8cf4bfac223fe5389fb1f22121f180f5150bb1edac2a265c3013b8bac0915a11513fbc118fb4900ef0002d250b3a56f"}}}}}, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x804) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r9, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x9, 0x0}, 0x8) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}}}}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x17, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x80, 0x9f, &(0x7f00000003c0)=""/159, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[r2, r2, r2, r2, r2, r2], 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 2m50.889133383s ago: executing program 33 (id=176): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r3}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000640)={@remote, @broadcast, @void, {@llc_tr={0x11, {@llc={0xdc, 0xdc, "8bd9", "88ed87ca5b2617935103c855f34805e31aa9c9b8cc97900c43daa5c20b179349b9908e44d301cd7c932f050cf1063a027e90b5ef6d5b50d146bcc3378eceea0ddc55dfdc4190b79ad7dba38d924f28e58ab2fdc0aae3dbfa46b6de76b1897c739605ffc82c533bb07ddcf8f5f0d02f0f1515e8808314af8351e7e5eba8cf4bfac223fe5389fb1f22121f180f5150bb1edac2a265c3013b8bac0915a11513fbc118fb4900ef0002d250b3a56f"}}}}}, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x804) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r9, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x9, 0x0}, 0x8) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}}}}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x17, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x80, 0x9f, &(0x7f00000003c0)=""/159, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[r2, r2, r2, r2, r2, r2], 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 2m50.868956193s ago: executing program 1 (id=177): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x8, @dev={0xfe, 0x80, '\x00', 0x20}, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0xffffffffffffff15}, &(0x7f00000007c0)=[{0x0, 0x4000000}], 0x300}}], 0x48}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a90a28bd7000ffc4631c9800000008000300", @ANYRES32=r4, @ANYBLOB="0a001a0008021100000100000a0006"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r5, 0x8b2c, &(0x7f0000000480)="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") r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="bf113581", @ANYRES16=r6, @ANYBLOB="080025bd7000fbdbdf25010000000000000008410000004c00180000000975647000"/98], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x9, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x8090) 2m50.868580484s ago: executing program 34 (id=177): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x8, @dev={0xfe, 0x80, '\x00', 0x20}, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0xffffffffffffff15}, &(0x7f00000007c0)=[{0x0, 0x4000000}], 0x300}}], 0x48}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a90a28bd7000ffc4631c9800000008000300", @ANYRES32=r4, @ANYBLOB="0a001a0008021100000100000a0006"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r5, 0x8b2c, &(0x7f0000000480)="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") r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="bf113581", @ANYRES16=r6, @ANYBLOB="080025bd7000fbdbdf25010000000000000008410000004c00180000000975647000"/98], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x9, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x8090) 2m50.868338467s ago: executing program 2 (id=178): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={0x0, 0xb65}, 0x8) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000042000b0023ad7000fedbdf2505000000080002000500941c"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)}, 0x20000000) r6 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000040)=0x2, 0x4) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000080)=0x2) connect$vsock_stream(r7, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r7, 0x2) connect$vsock_stream(r7, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000002c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x4}, 0x8) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x0) 2m50.868173383s ago: executing program 35 (id=178): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={0x0, 0xb65}, 0x8) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000042000b0023ad7000fedbdf2505000000080002000500941c"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)}, 0x20000000) r6 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000040)=0x2, 0x4) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000080)=0x2) connect$vsock_stream(r7, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r7, 0x2) connect$vsock_stream(r7, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000002c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x4}, 0x8) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x0) 1m40.617330497s ago: executing program 6 (id=239): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400e0000", @ANYBLOB="cf0400000000000000001300", @ANYBLOB="0400130006001200000000000600b500850100000a0006"], 0x40}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f00f9ffff7f00000000000001"], 0x114}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 1m19.457578349s ago: executing program 8 (id=1100): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7d37bcf9e433c29", 0x28}], 0x2}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 1m19.321610146s ago: executing program 8 (id=1105): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x40000000, {}, [{0x54, 0x1, [@m_mpls={0x1b, 0x1, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf47eb}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d00)={@cgroup, 0xffffffffffffffff, 0x1f, 0x4, 0xffffffffffffffff, @void, @value}, 0x20) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000301e42049ad083e0177f463ea4780519c5346b29f5a632f81361f936ca2324b77eb605aa619d8c603cfef33fbbb37b521b4a89"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004850) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) poll(&(0x7f0000000040)=[{r3}], 0x1, 0x6) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x8800) r6 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000440)=@assoc_value, &(0x7f0000000600)=0x8) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)=0x1) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r7}}}}]}, 0x38}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x8, 0x0, 0x0, @local, @private2, {[], "c10a074faa17e05f"}}}}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r8, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x48004) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r8, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r9, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) write$tun(r3, &(0x7f00000004c0)={@val={0x0, 0x6000}, @val={0x1, 0x3, 0x4, 0x6, 0x5, 0x7}, @ipv4=@icmp={{0x30, 0x4, 0x3, 0x39, 0xf9, 0x66, 0x0, 0x8c, 0x1, 0x0, @local, @broadcast, {[@cipso={0x86, 0x73, 0x0, [{0x0, 0x12, "82c5e2dbfc4c810ea95e3db4a4629549"}, {0x1, 0x12, "b39cfe06367cebab8f7f87bd78fc255e"}, {0x6, 0x10, "c10e45186800b2f7e09137ddb064"}, {0x1, 0x6, "3321cf87"}, {0x2, 0xf, "7249a64643d4943c203260bc16"}, {0x0, 0x12, "e36348310d6311390fce8ed7a479965e"}, {0x5, 0xd, "060b7cd448cac71c87d298"}, {0x0, 0x2}, {0x1, 0x3, ']'}]}, @timestamp_addr={0x44, 0xc, 0x20, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0x22}, 0xffffffff}]}, @noop, @noop, @cipso={0x86, 0x2a, 0x2, [{0x6, 0x5, "99326b"}, {0x5, 0xc, "3641c58a7b6b8b0f87ef"}, {0x2, 0x3, "bb"}, {0x0, 0x10, "ecfc479548976d96ee58a08f7d3d"}]}]}}, @dest_unreach={0x3, 0x2, 0x0, 0x0, 0x3, 0xd, {0xc, 0x4, 0x0, 0x2, 0xff01, 0x65, 0x8b5e, 0x9, 0x0, 0x0, @multicast1, @loopback, {[@timestamp={0x44, 0xc, 0x89, 0x0, 0xe, [0x0, 0xfff]}, @lsrr={0x83, 0xf, 0x8b, [@rand_addr=0x64010101, @broadcast, @multicast1]}]}}, "b9"}}}, 0x107) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff2a0b34185e406c343c99667d", @ANYRES32=0x0, @ANYBLOB="00000000003f0000240012800b000100677265746170000014000280080004000000000005000a000100000008000d00ffffffff"], 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x0) 1m18.844729083s ago: executing program 8 (id=1110): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$TUNSETFILTEREBPF(r0, 0x8008b705, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 1m18.696081949s ago: executing program 8 (id=1112): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x1bf, &(0x7f0000000240)={@broadcast, @broadcast, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x1, 0x0, 0x4}}, {@ipv6={0x86dd, @tipc_packet={0x3, 0x6, "1a73ca", 0x181, 0x6, 0xff, @remote, @remote, {[@fragment={0x73, 0x0, 0x0, 0x0, 0x0, 0x1, 0x64}, @fragment={0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x67}, @fragment={0x5c, 0x0, 0x5, 0x0, 0x0, 0x1f, 0x68}, @routing={0x6, 0x14, 0x2, 0x9, 0x0, [@loopback, @private1, @private0, @remote, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, @dev={0xfe, 0x80, '\x00', 0x3e}, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2]}, @dstopts={0xc, 0x11, '\x00', [@generic={0x7, 0x56, "28e51834d348196957c4a9ba8ed74e5268d5a2abc38ea75e6ff8ab5da8dab8e25e09e85ccf1daa38bbdca611918867b95a567b264724bd944685a7a0b37a22073a054f49461de8e068a171ce6b4311716c1e5a286918"}, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x7}, @pad1, @calipso={0x7, 0x18, {0x1, 0x4, 0x10, 0x1, [0x8, 0x1]}}, @ra={0x5, 0x2, 0x2}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x4e85}]}], @payload_direct={{{{0x29, 0x0, 0x0, 0x1, 0x1, 0x8, 0x0, 0x2, 0x3, 0x0, 0x3, 0x6, 0x2, 0x3, 0x9, 0x1, 0x4, 0x4e22, 0x4e20}, 0x2, 0x3}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, &(0x7f0000000080)={0x1, 0x3, [0xed3, 0x271, 0x648, 0x751]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}], {0x14, 0x10}}, 0x5c}, 0x1, 0x0, 0x0, 0x131e284dd61db437}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000200)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x8, 0xa, &(0x7f0000000fc0)="c0f924ae269dee0f527d", 0x9, 0x52, 0xb57, 0x8002, 0x9, 0x0, 0xd, 'syz0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_newvlan={0x34, 0x71, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x1}}}]}, 0x34}}, 0x20008000) 1m18.280047235s ago: executing program 8 (id=1116): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) epoll_create1(0x0) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 1m18.153241361s ago: executing program 8 (id=1117): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x1, 0x4}, 0x1}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0xa00, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x100000, {0x0, 0x0, 0x74, r5, {0xfff3, 0x8}, {0x4, 0xfff3}, {0xffe0, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r8, 0x4) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0x8, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x3f}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}, @ldst={0x3, 0x1, 0x1, 0xbdf2c98007aec95c, 0x9, 0x80, 0xfffffffffffffff8}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}], &(0x7f0000000080)='GPL\x00', 0xbcc7, 0x0, 0x0, 0x40f00, 0x4, '\x00', r5, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x7, 0x8, 0x2}, 0x10, r8, r3, 0x0, &(0x7f0000000200)=[r9, r10, r1], 0x0, 0x10, 0xf5, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x2f08, 0x8, 0x8, &(0x7f00000006c0)="feffffff00000005", &(0x7f0000000700)=""/8, 0x800, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000740), &(0x7f0000000040)='%ps \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x1, 0x4}, 0x1}, 0x18) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0xa00, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x100000, {0x0, 0x0, 0x74, r5, {0xfff3, 0x8}, {0x4, 0xfff3}, {0xffe0, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r8, 0x4) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) close(r10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0x8, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x3f}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}, @ldst={0x3, 0x1, 0x1, 0xbdf2c98007aec95c, 0x9, 0x80, 0xfffffffffffffff8}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}], &(0x7f0000000080)='GPL\x00', 0xbcc7, 0x0, 0x0, 0x40f00, 0x4, '\x00', r5, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x7, 0x8, 0x2}, 0x10, r8, r3, 0x0, &(0x7f0000000200)=[r9, r10, r1], 0x0, 0x10, 0xf5, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x2f08, 0x8, 0x8, &(0x7f00000006c0)="feffffff00000005", &(0x7f0000000700)=""/8, 0x800, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) (async) 1m3.042999403s ago: executing program 36 (id=1117): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x1, 0x4}, 0x1}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0xa00, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x100000, {0x0, 0x0, 0x74, r5, {0xfff3, 0x8}, {0x4, 0xfff3}, {0xffe0, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r8, 0x4) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0x8, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x3f}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}, @ldst={0x3, 0x1, 0x1, 0xbdf2c98007aec95c, 0x9, 0x80, 0xfffffffffffffff8}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}], &(0x7f0000000080)='GPL\x00', 0xbcc7, 0x0, 0x0, 0x40f00, 0x4, '\x00', r5, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x7, 0x8, 0x2}, 0x10, r8, r3, 0x0, &(0x7f0000000200)=[r9, r10, r1], 0x0, 0x10, 0xf5, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x2f08, 0x8, 0x8, &(0x7f00000006c0)="feffffff00000005", &(0x7f0000000700)=""/8, 0x800, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000740), &(0x7f0000000040)='%ps \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x1, 0x4}, 0x1}, 0x18) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0xa00, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x100000, {0x0, 0x0, 0x74, r5, {0xfff3, 0x8}, {0x4, 0xfff3}, {0xffe0, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r8, 0x4) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) close(r10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0x8, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x3f}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}, @ldst={0x3, 0x1, 0x1, 0xbdf2c98007aec95c, 0x9, 0x80, 0xfffffffffffffff8}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}], &(0x7f0000000080)='GPL\x00', 0xbcc7, 0x0, 0x0, 0x40f00, 0x4, '\x00', r5, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x7, 0x8, 0x2}, 0x10, r8, r3, 0x0, &(0x7f0000000200)=[r9, r10, r1], 0x0, 0x10, 0xf5, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x2f08, 0x8, 0x8, &(0x7f00000006c0)="feffffff00000005", &(0x7f0000000700)=""/8, 0x800, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) (async) 1m2.939080635s ago: executing program 7 (id=1003): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {@in=@multicast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 53.029031534s ago: executing program 7 (id=1003): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {@in=@multicast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 51.835259172s ago: executing program 6 (id=239): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400e0000", @ANYBLOB="cf0400000000000000001300", @ANYBLOB="0400130006001200000000000600b500850100000a0006"], 0x40}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f00f9ffff7f00000000000001"], 0x114}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 39.252015566s ago: executing program 7 (id=1003): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {@in=@multicast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 38.226746513s ago: executing program 6 (id=239): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400e0000", @ANYBLOB="cf0400000000000000001300", @ANYBLOB="0400130006001200000000000600b500850100000a0006"], 0x40}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f00f9ffff7f00000000000001"], 0x114}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 25.981234887s ago: executing program 7 (id=1003): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {@in=@multicast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 25.232833618s ago: executing program 6 (id=239): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400e0000", @ANYBLOB="cf0400000000000000001300", @ANYBLOB="0400130006001200000000000600b500850100000a0006"], 0x40}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f00f9ffff7f00000000000001"], 0x114}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 14.465739807s ago: executing program 7 (id=1003): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {@in=@multicast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 13.177504178s ago: executing program 6 (id=239): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400e0000", @ANYBLOB="cf0400000000000000001300", @ANYBLOB="0400130006001200000000000600b500850100000a0006"], 0x40}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f00f9ffff7f00000000000001"], 0x114}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 3.029585226s ago: executing program 5 (id=1699): syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x9, @dev, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{}, {@remote}, {@dev}, {}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb8, r1, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8011}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, @void, @value}, 0x94) 2.913919623s ago: executing program 5 (id=1701): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x80000) getsockopt$inet6_udp_int(r0, 0x11, 0x66, 0x0, &(0x7f0000000b80)) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) 2.725745991s ago: executing program 3 (id=1704): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r3, 0x800, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x20}}, 0x20008854) close(r1) 2.585779569s ago: executing program 5 (id=1705): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={&(0x7f0000000080)="47420f505d515838ae196ae0e0d8e7d1f3cc660e1b1f820e9d957787907198fd3a0e14691e2808ee11c0dd70131ad81a3ced24fe218542be26d8f13597b54e6e510bfd10381af1c724cb89bc1e6e48c82d2d485ef0e5b89d8e42f7758b3c5e9b2cd83f0b60dccd65c72156d1828bd6d93efac6b7c51b1061e6c9437169c9a244f5d68c64e9ec3403e8cf3b761c9dd4eec29babd6fefd4f5a8e1c9ab984a927244ad1b874fec08a2634d9f7f230e945c51096e484af72896f89b0ced6cd49243ac036988841", &(0x7f00000001c0)=""/147, &(0x7f0000000580)="719146b91e71ba8d44a23f735a10f840d778a91d55b24d6c1d120bee8ec231fe92cd4f3a037dcbd12de008f2ab55d4fd3b9707247c1f02091f87ee52bcbad7145d290cbfba39d807f7497f93ca9cbf6b5df15269a96fe2419d6178caedeafaee27397f286097ad51d869c775703571c086ab889a1bd790699556a7154ded0f265b071242286e9b0de792d69eeeffbed29870", &(0x7f0000000280)="bf8ae390ae6c8495ea1c09cd02b3f1baba80179c9b855aece446bf4cccfb5c8725228f29be845ac644305a0f9d9a6ff0f349dee67dbdc9c48331f3bf7239cfacf1013a6b968e7da672d1ec00a5de27a190e5991524ea3fca6d773097df575d42f1555a421baa6bf5a40d8a30b10cf1ebc39d7e0098", 0xfffffffb, r1}, 0x38) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x220, 0x30, 0x800, 0x0, 0x0, {}, [{0x20c, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x4, 0x0, 0x4443f390}, 0x3}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xf8, 0x0, 0x0, 0x0, {{0xffffff5d}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x3}}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010103}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x220}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r5, 0x0, 0x7) 2.376755642s ago: executing program 3 (id=1706): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) epoll_create1(0x0) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 2.301525329s ago: executing program 5 (id=1708): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000200"], 0x390) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x24000085) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 2.19591708s ago: executing program 5 (id=1710): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) connect$llc(r0, &(0x7f0000000840)={0x1a, 0x8, 0x1, 0x81, 0x2, 0xff, @random="ba215c4ff697"}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}, [@IFLA_CARRIER={0x5, 0x21, 0x2}]}, 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcd, 0xcd, 0x7, [@datasec={0x4, 0x4, 0x0, 0xf, 0x1, [{0x3, 0x8, 0x6}, {0x1, 0x5b, 0x1}, {0x4, 0xf, 0x4bcb}, {0x5, 0x0, 0x4}], ')'}, @fwd={0xe}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x7f, [{0x3, 0x4, 0x7}, {0x5, 0x2, 0x8}, {0xd, 0x5, 0xc899}, {0xc, 0x4, 0x8}]}, @enum64={0x3, 0x3, 0x0, 0x13, 0x0, 0xb, [{0xa, 0x5, 0x6}, {0x8, 0x7, 0x2}, {0x1000, 0x200, 0x7}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x101}}]}, {0x0, [0x5f, 0x2e, 0x5f, 0x61, 0x0]}}, &(0x7f0000000480)=""/4096, 0xef, 0x1000, 0x1, 0x7, 0x0, @void, @value}, 0x28) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000019c0)={0x0, @private, @multicast2}, &(0x7f0000001a00)=0xc) sendmsg$nl_route_sched_retired(r1, &(0x7f0000001b40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a40)=@newchain={0x90, 0x64, 0x2, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffff, 0x2}, {0xa, 0x7}, {0xffff, 0x10}}, [@f_rsvp6={{0xa}, {0x38, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @private2}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7ff, 0x4, 0xffffffff}, {0x6}, 0x4, 0x2, 0x1}}]}}, @f_rsvp={{0x9}, {0x1c, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x10, 0xffff}}]}}]}, 0x90}}, 0x8004) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001500)={0xffff0001, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x5, 0x4, &(0x7f0000001540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3800000}, [@generic={0x2, 0x8, 0x0, 0x4, 0x20000}]}, &(0x7f0000001580)='syzkaller\x00', 0x4, 0x7b, &(0x7f00000015c0)=""/123, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001680)={0x4, 0x10, 0x2, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000016c0)=[{0x4, 0x1, 0x10, 0x1}], 0x10, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{0x1, 0xffffffffffffffff}, &(0x7f00000017c0), &(0x7f0000001800)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x19, 0x18, &(0x7f0000001b80)=ANY=[@ANYBLOB="180000000900000000000000020000001854000001000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000de0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000183200000500000000000000000000009500000000000000dd"], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x78, &(0x7f00000002c0)=""/120, 0x41100, 0x40, '\x00', 0x0, @cgroup_sockopt=0x15, r4, 0x8, &(0x7f00000014c0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, r6, r7, 0x0, &(0x7f0000001880)=[r8], 0x0, 0x10, 0x8, @void, @value}, 0x94) 2.113929294s ago: executing program 3 (id=1711): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x390, 0xfeffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x138, 0x158, 0x60030000, {0x0, 0xff000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x208, 0x238, 0x0, {}, [@common=@rt={{0x138}, {0x4000000, [], 0x0, 0x9, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @local, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0xff}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}]}}, @common=@unspec=@cpu={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) 2.053417685s ago: executing program 9 (id=1712): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@ipv6_getnexthop={0x18, 0x6a, 0x1}, 0x18}}, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = socket(0x1d, 0x2, 0x6) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r2, 0x75fb3000) (async) bind$can_j1939(r1, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x9c, 0x1, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_ID={0x8}, @CTA_TUPLE_REPLY={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040040) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 2.005138402s ago: executing program 3 (id=1713): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, r0, 0x0) (async) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x12, r0, 0x84522000) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200090000000000000000420100000700000087000000002020702500000000002020207b1af8ff00e3ffffbea100000000000007010000f8ffffffb702000008000000b7030000000000008500000017e800009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'ipvlan1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x4, 0x9}, {0xc, 0x5, 0x7}]}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f0000002d40)=""/4089, 0x41, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86) (async) getpeername$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) (async) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x1007, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) (async) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r11, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bind$xdp(r11, &(0x7f0000000100)={0x2c, 0x1}, 0x10) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x503, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x62504}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0xf7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_SLAVE1={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r3, @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000080108805400078008000500000000000800050000000000080005009d2c690d0800050000000000080005000000000008000500000000000800050000ebffff070005"], 0x134}}, 0x4048014) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000006, 0x12, r1, 0xe93f6000) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 1.821763539s ago: executing program 9 (id=1714): r0 = socket(0x10, 0x80000, 0x202) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=@base={0x12, 0x12, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000000), &(0x7f0000000140)=@udp6=r3, 0x2}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x10000, 0xfffffffd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8844}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 1.670808688s ago: executing program 9 (id=1715): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r2, 0x0, 0xf69}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0xffffff81) 1.504031195s ago: executing program 9 (id=1716): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0x41, 0x9, 0x70bd25, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) (rerun: 64) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') writev(r0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="30cb6bd73397e9899aa88e953c", 0xd}, {&(0x7f0000000240)="a1b7c505c63f948e10c764816f783d929e658356a13721e2", 0x18}, {&(0x7f0000000400)="6175d0ca39a68107244b56a3b7068aa65d62f2bbb0f7ded7ac49b264e1b8a51432505440d3b2bd867c888b95359088a436f23fd95550ff2ebd289872a15c909a092089fb193e6ffce6b4b014ff516ac3a11a3239c30772fccfdcc76428b68c3569a9f7a9db25d00b7ad2f3f3ee38d5ae7803cb42a3377660bcee39b8a5d1423ad277415f4c472bc9c78b120ccbd64cd963e485720e2ac42f3963", 0x9a}], 0x3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000180), 0x0}, 0x20) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cc, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)={0x24, r2, 0x203, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40884) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async) listen(r6, 0x0) (async, rerun: 32) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r8}, 0x10) (async) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1d, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) 1.281698958s ago: executing program 9 (id=1717): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x34}}, 0x8004) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200029bd6200fedbdf256d0000000c009900010000000100"], 0x20}, 0x1, 0x0, 0x0, 0x20004015}, 0x40c0) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0x5, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0xfffffffffffffd41}]}]}, 0x70}}, 0x0) 1.243640152s ago: executing program 3 (id=1718): socket(0x10, 0x80000, 0x1) syz_emit_ethernet(0x82, &(0x7f0000000640)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@loopback, 0x200}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) 1.224488494s ago: executing program 5 (id=1719): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0xce, &(0x7f0000000bc0)=""/206, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0xb4, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x88, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x7c, 0x2, 0x0, 0x1, [{0x4}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x39b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1c5}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x801, 0x0, 0x0, {0x73c3bfc5edc560a0, 0x0, 0x7}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x134}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000440)="0ce5e61120a3bc5c59343c00d69dfe78d7a07be1d95ae7e7082bd1dabd07ecc35fcd98730208a8f07fdc017960bff962be2a93b33716f71ddbc5e60a1b12bf3297ca933d7dd5dd8c69b8daed173140cd725f57a6a9cac643032b4f13db1466fb5ea0794f19c349982987b42a51171967e5c0a8298f5793654567c4b76a9646f47b") sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000006c0)=[@ip_retopts={{0x10, 0x0, 0x3}}], 0x9}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b000000060000000c0000000300000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="4c8220ba470173020000000010000000000000"], 0x50) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xfffc, @any, 0x4, 0x1}, 0xe) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0e00000004000000080000000100000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000280), &(0x7f00000002c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000040), 0x0}, 0x20) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, r9, 0xb03, 0x70bd26, 0x0, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x40}}, 0x0) 1.139633881s ago: executing program 7 (id=1003): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {@in=@multicast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 1.093682875s ago: executing program 3 (id=1720): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x84, 0x8f, 0x8, 0x2c, @private1={0xfc, 0x1, '\x00', 0x2}, @remote, 0x8000, 0x8000, 0x80000000, 0x4}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000a00)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x84, 0x8f, 0x8, 0x2c, @private1={0xfc, 0x1, '\x00', 0x2}, @remote, 0x8000, 0x8000, 0x80000000, 0x4}}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (async) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000a00)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) (async) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) 1.093299291s ago: executing program 9 (id=1721): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) epoll_create1(0x0) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 0s ago: executing program 6 (id=239): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400e0000", @ANYBLOB="cf0400000000000000001300", @ANYBLOB="0400130006001200000000000600b500850100000a0006"], 0x40}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f00f9ffff7f00000000000001"], 0x114}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) kernel console output (not intermixed with test programs): 1q: adding VLAN 0 to HW filter on device bond0 [ 199.514166][T10182] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.526069][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.533254][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.550431][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.557609][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.717597][T10182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.798044][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 200.025093][T10182] veth0_vlan: entered promiscuous mode [ 200.041619][T10182] veth1_vlan: entered promiscuous mode [ 200.079707][T10182] veth0_macvtap: entered promiscuous mode [ 200.104355][T10182] veth1_macvtap: entered promiscuous mode [ 200.132052][T10182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.143374][T10182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.153600][T10182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.165797][T10182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.176218][T10182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.189445][T10182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.199418][T10182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.210040][T10182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.222209][T10182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.250793][T10182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.268345][T10182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.278750][T10182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.289294][T10182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.299642][T10182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.310147][T10182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.320132][T10182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.330677][T10182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.349019][T10182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.384598][T10182] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.397212][T10182] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.405947][T10182] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.414784][T10182] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.524884][T10297] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1222'. [ 200.539102][T10297] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1222'. [ 200.553545][T10297] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1222'. [ 200.578954][T10299] netlink: 'syz.5.1223': attribute type 7 has an invalid length. [ 200.614323][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.645003][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.698513][T10305] netlink: 'syz.5.1225': attribute type 1 has an invalid length. [ 200.723510][T10305] 8021q: adding VLAN 0 to HW filter on device bond11 [ 200.732598][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.755789][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.824465][ T5837] IPVS: starting estimator thread 0... [ 200.917428][T10310] IPVS: using max 35 ests per chain, 84000 per kthread [ 200.922001][T10317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1228'. [ 200.960422][ T3552] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 200.983162][T10321] sctp: [Deprecated]: syz.5.1229 (pid 10321) Use of int in max_burst socket option. [ 200.983162][T10321] Use struct sctp_assoc_value instead [ 201.012500][T10321] netlink: 'syz.5.1229': attribute type 30 has an invalid length. [ 201.191718][T10333] netlink: 'syz.5.1233': attribute type 1 has an invalid length. [ 201.201450][T10333] netlink: 'syz.5.1233': attribute type 2 has an invalid length. [ 201.210332][T10333] netlink: 'syz.5.1233': attribute type 1 has an invalid length. [ 201.477819][T10347] netlink: 'syz.3.1236': attribute type 1 has an invalid length. [ 201.516434][T10347] 8021q: adding VLAN 0 to HW filter on device bond6 [ 201.571312][T10350] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1237'. [ 201.621409][T10352] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1238'. [ 201.795438][T10359] bond13: entered promiscuous mode [ 201.804623][T10359] bond13: entered allmulticast mode [ 201.816615][T10359] 8021q: adding VLAN 0 to HW filter on device bond13 [ 201.934080][T10366] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.1241'. [ 202.053112][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1242'. [ 202.067649][T10368] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1242'. [ 202.077577][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 202.255450][T10372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.603055][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.707291][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 202.716159][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 202.725287][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 202.735294][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 202.743996][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 202.889743][T10375] chnl_net:caif_netlink_parms(): no params data found [ 202.960122][T10375] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.967598][T10375] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.974801][T10375] bridge_slave_0: entered allmulticast mode [ 202.983242][T10375] bridge_slave_0: entered promiscuous mode [ 202.990911][T10375] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.998799][T10375] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.006031][T10375] bridge_slave_1: entered allmulticast mode [ 203.013925][T10375] bridge_slave_1: entered promiscuous mode [ 203.043820][T10375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.058304][T10375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.138950][T10385] netlink: 'syz.5.1247': attribute type 1 has an invalid length. [ 203.141634][T10375] team0: Port device team_slave_0 added [ 203.202504][ T7937] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 203.233905][T10385] 8021q: adding VLAN 0 to HW filter on device bond14 [ 203.260083][T10375] team0: Port device team_slave_1 added [ 203.417145][T10375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.424138][T10375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.453436][T10375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.496026][T10375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.498342][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 203.513466][T10375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.542932][T10375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.553634][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 203.575415][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 203.595963][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 203.609570][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 203.622454][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.671401][T10403] geneve2: entered promiscuous mode [ 203.676663][T10403] geneve2: entered allmulticast mode [ 203.730218][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.780307][T10375] hsr_slave_0: entered promiscuous mode [ 203.788337][T10375] hsr_slave_1: entered promiscuous mode [ 203.794489][T10375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.802613][T10375] Cannot create hsr debugfs directory [ 203.833000][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.065165][ T12] bridge_slave_1: left allmulticast mode [ 204.071135][ T12] bridge_slave_1: left promiscuous mode [ 204.077296][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.087066][ T12] bridge_slave_0: left allmulticast mode [ 204.092733][ T12] bridge_slave_0: left promiscuous mode [ 204.099349][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.337368][ T3525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 204.432653][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.445352][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.456308][ T12] bond0 (unregistering): Released all slaves [ 204.837434][ T5835] Bluetooth: hci1: command tx timeout [ 204.970053][T10397] chnl_net:caif_netlink_parms(): no params data found [ 204.980007][T10425] netlink: 'syz.5.1258': attribute type 1 has an invalid length. [ 205.108209][T10425] 8021q: adding VLAN 0 to HW filter on device bond15 [ 205.320274][T10442] netlink: 'syz.5.1260': attribute type 1 has an invalid length. [ 205.351090][T10442] __nla_validate_parse: 3 callbacks suppressed [ 205.351106][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1260'. [ 205.384228][ T12] hsr_slave_0: left promiscuous mode [ 205.404801][ T12] hsr_slave_1: left promiscuous mode [ 205.428554][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.436013][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.447380][ T1097] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 205.466925][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.474367][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.496594][ T12] veth1_macvtap: left promiscuous mode [ 205.502461][ T12] veth0_macvtap: left promiscuous mode [ 205.508336][ T12] veth1_vlan: left promiscuous mode [ 205.513647][ T12] veth0_vlan: left promiscuous mode [ 205.717436][ T5835] Bluetooth: hci5: command tx timeout [ 205.950209][ T12] team0 (unregistering): Port device team_slave_1 removed [ 205.992586][ T12] team0 (unregistering): Port device team_slave_0 removed [ 206.425181][T10375] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 206.578144][ T7937] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 206.629048][T10397] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.630482][T10471] netlink: 'syz.3.1269': attribute type 1 has an invalid length. [ 206.636279][T10397] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.651259][T10397] bridge_slave_0: entered allmulticast mode [ 206.658342][T10397] bridge_slave_0: entered promiscuous mode [ 206.665611][T10375] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 206.678705][T10375] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 206.734004][T10471] 8021q: adding VLAN 0 to HW filter on device bond7 [ 206.741911][T10397] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.749204][T10397] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.756497][T10397] bridge_slave_1: entered allmulticast mode [ 206.776890][T10397] bridge_slave_1: entered promiscuous mode [ 206.784113][T10375] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 206.899718][T10397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.917690][ T5835] Bluetooth: hci1: command tx timeout [ 206.941298][T10397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.039755][T10397] team0: Port device team_slave_0 added [ 207.061840][T10397] team0: Port device team_slave_1 added [ 207.151775][T10397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.159611][T10397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.185726][T10397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.200870][T10397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.210717][T10397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.237263][T10397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.415623][T10397] hsr_slave_0: entered promiscuous mode [ 207.427711][T10397] hsr_slave_1: entered promiscuous mode [ 207.434133][T10397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.443496][T10397] Cannot create hsr debugfs directory [ 207.450665][T10492] IPv6: Can't replace route, no match found [ 207.645342][T10500] netlink: 'syz.5.1280': attribute type 1 has an invalid length. [ 207.690398][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 207.713309][T10500] 8021q: adding VLAN 0 to HW filter on device bond16 [ 207.798756][ T5835] Bluetooth: hci5: command tx timeout [ 207.858613][T10375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.950868][T10375] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.001362][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.008560][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.081645][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.088842][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.455217][T10397] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 208.484137][T10397] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 208.524409][T10397] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 208.548869][T10397] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 208.571267][T10532] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 208.700729][T10375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.778517][T10540] netlink: 'syz.5.1293': attribute type 1 has an invalid length. [ 208.793267][T10397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.808380][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 208.856001][T10540] 8021q: adding VLAN 0 to HW filter on device bond17 [ 208.902351][T10397] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.946416][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.953624][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.980474][T10548] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1295'. [ 208.998726][ T5826] Bluetooth: hci1: command tx timeout [ 209.062787][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.069993][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.260009][T10558] bond8: entered promiscuous mode [ 209.266049][T10558] bond8: entered allmulticast mode [ 209.272630][T10558] 8021q: adding VLAN 0 to HW filter on device bond8 [ 209.301509][T10375] veth0_vlan: entered promiscuous mode [ 209.314577][T10375] veth1_vlan: entered promiscuous mode [ 209.424563][T10375] veth0_macvtap: entered promiscuous mode [ 209.440769][T10375] veth1_macvtap: entered promiscuous mode [ 209.510951][T10375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.521943][T10375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.542092][T10375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.554969][T10375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.573164][T10375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.584578][T10375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.595495][T10375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.606156][T10375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.619952][T10375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.631952][T10375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.643029][T10375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.653790][T10375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.664693][T10375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.674749][T10375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.685553][T10375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.695674][T10375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.706213][T10375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.717676][T10375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.732113][T10573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1301'. [ 209.799948][T10573] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.809795][T10573] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.819461][T10573] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.828664][T10573] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.841309][T10573] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.850433][T10573] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.859652][T10573] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.869833][T10573] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.887226][ T5826] Bluetooth: hci5: command tx timeout [ 209.901749][T10375] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.911059][T10375] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.920280][T10375] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.930972][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 209.939797][T10375] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.022139][T10397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.124277][T10584] netlink: 'syz.3.1304': attribute type 1 has an invalid length. [ 210.134044][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.149734][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.189381][T10584] 8021q: adding VLAN 0 to HW filter on device bond9 [ 210.229871][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.242950][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.533229][T10598] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1306'. [ 210.550305][T10397] veth0_vlan: entered promiscuous mode [ 210.564465][T10397] veth1_vlan: entered promiscuous mode [ 210.634787][T10397] veth0_macvtap: entered promiscuous mode [ 210.648984][T10601] : entered promiscuous mode [ 210.656471][T10397] veth1_macvtap: entered promiscuous mode [ 210.702263][T10397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.722026][T10397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.734501][T10397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.751216][T10397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.763288][T10397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.780117][T10397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.794465][T10397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.816446][T10397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.830253][T10397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.842264][T10397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.874347][T10397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.902884][T10397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.930019][T10397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.950302][T10397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.971092][T10397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.007543][T10397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.022584][T10608] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1310'. [ 211.033708][T10397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.046811][ T3552] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 211.057167][T10397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.067757][T10397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.077996][T10397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.087434][ T5826] Bluetooth: hci1: command tx timeout [ 211.093315][T10397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.106240][T10397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.132974][T10397] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.158017][T10397] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.182381][T10397] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.195266][T10397] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.484381][T10617] netlink: 'syz.9.1314': attribute type 1 has an invalid length. [ 211.593168][T10624] netlink: 'syz.3.1313': attribute type 2 has an invalid length. [ 211.605536][T10624] netlink: 1184 bytes leftover after parsing attributes in process `syz.3.1313'. [ 211.619515][T10624] raw_sendmsg: syz.3.1313 forgot to set AF_INET. Fix it! [ 211.703948][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.724937][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.844033][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.844881][T10626] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 211.858792][T10626] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 211.878816][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.956982][ T5826] Bluetooth: hci5: command tx timeout [ 212.042693][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1320'. [ 212.053406][T10636] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1319'. [ 212.251948][ T3525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 212.323357][ T1161] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.431312][ T1161] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.514613][ T1161] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.570463][ T1161] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.712039][ T1161] bridge_slave_1: left allmulticast mode [ 212.719947][ T1161] bridge_slave_1: left promiscuous mode [ 212.725646][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.738464][ T1161] bridge_slave_0: left allmulticast mode [ 212.744143][ T1161] bridge_slave_0: left promiscuous mode [ 212.750043][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.092089][T10656] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1325'. [ 213.104019][T10654] netlink: 'syz.5.1326': attribute type 1 has an invalid length. [ 213.143135][T10658] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1327'. [ 213.212226][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.224004][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.234793][ T1161] bond0 (unregistering): Released all slaves [ 213.351225][T10654] 8021q: adding VLAN 0 to HW filter on device bond18 [ 213.419459][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.428286][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 213.442543][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.457276][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.511018][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.528421][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.866362][ T1161] hsr_slave_0: left promiscuous mode [ 213.872770][ T1161] hsr_slave_1: left promiscuous mode [ 213.880297][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.887793][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.895550][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.903382][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.924009][ T1161] veth1_macvtap: left promiscuous mode [ 213.929705][ T1161] veth0_macvtap: left promiscuous mode [ 213.935282][ T1161] veth1_vlan: left promiscuous mode [ 213.940681][ T1161] veth0_vlan: left promiscuous mode [ 214.353656][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 214.392743][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 214.539589][ T3552] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 214.777874][T10684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1331'. [ 214.911611][T10688] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1333'. [ 215.042405][T10694] netlink: 'syz.5.1335': attribute type 7 has an invalid length. [ 215.142818][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.158903][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.167387][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.177937][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.185654][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.631359][T10704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1336'. [ 215.641248][ T5839] Bluetooth: hci2: command tx timeout [ 215.733527][ T3552] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 215.862015][T10711] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:65535 [ 215.866185][T10709] unknown channel width for channel at 909000KHz? [ 215.890048][T10661] chnl_net:caif_netlink_parms(): no params data found [ 216.070072][T10718] netlink: 'syz.3.1342': attribute type 1 has an invalid length. [ 216.107337][T10720] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1341'. [ 216.182285][T10718] 8021q: adding VLAN 0 to HW filter on device bond10 [ 216.347628][T10661] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.355425][T10661] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.363677][T10661] bridge_slave_0: entered allmulticast mode [ 216.371518][T10661] bridge_slave_0: entered promiscuous mode [ 216.401252][T10661] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.410033][T10661] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.418710][T10661] bridge_slave_1: entered allmulticast mode [ 216.432622][T10661] bridge_slave_1: entered promiscuous mode [ 216.521460][T10661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.550763][T10737] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1346'. [ 216.570712][T10736] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1346'. [ 216.592465][T10661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.651351][T10661] team0: Port device team_slave_0 added [ 216.733200][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.787819][T10661] team0: Port device team_slave_1 added [ 216.848416][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 216.882876][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.935279][T10661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.943086][T10661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.970044][T10661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.992611][T10696] chnl_net:caif_netlink_parms(): no params data found [ 217.023244][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.041863][T10661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.049632][T10661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.079675][T10661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.119747][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.237108][ T5839] Bluetooth: hci5: command tx timeout [ 217.306331][T10661] hsr_slave_0: entered promiscuous mode [ 217.313789][T10661] hsr_slave_1: entered promiscuous mode [ 217.323736][T10661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.331355][T10661] Cannot create hsr debugfs directory [ 217.337188][T10768] netlink: 65039 bytes leftover after parsing attributes in process `syz.9.1352'. [ 217.405514][T10769] netlink: 65039 bytes leftover after parsing attributes in process `syz.9.1352'. [ 217.435599][T10773] netlink: 'syz.5.1353': attribute type 1 has an invalid length. [ 217.510842][T10777] netlink: 'syz.9.1354': attribute type 1 has an invalid length. [ 217.719559][ T5839] Bluetooth: hci2: command tx timeout [ 217.732172][T10696] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.777621][T10696] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.800953][T10696] bridge_slave_0: entered allmulticast mode [ 217.819962][T10696] bridge_slave_0: entered promiscuous mode [ 217.861249][T10696] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.869630][T10696] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.889324][T10696] bridge_slave_1: entered allmulticast mode [ 217.898918][T10696] bridge_slave_1: entered promiscuous mode [ 217.921549][ T13] bridge_slave_1: left allmulticast mode [ 217.943227][ T13] bridge_slave_1: left promiscuous mode [ 217.958232][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.988596][ T1097] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 217.989746][ T13] bridge_slave_0: left allmulticast mode [ 218.016676][ T13] bridge_slave_0: left promiscuous mode [ 218.025590][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.054538][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1361'. [ 218.068159][T10800] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1361'. [ 218.517679][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.532539][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.542859][ T13] bond0 (unregistering): Released all slaves [ 218.575185][T10800] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 218.672731][T10696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.802483][T10696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.070066][T10696] team0: Port device team_slave_0 added [ 219.080564][T10830] netlink: 'syz.9.1368': attribute type 1 has an invalid length. [ 219.142119][ T1147] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 219.170316][T10696] team0: Port device team_slave_1 added [ 219.303997][T10696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.318266][ T5839] Bluetooth: hci5: command tx timeout [ 219.325001][T10696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.358791][T10696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.376320][T10696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.407641][T10696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.435092][T10696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.453401][ T13] hsr_slave_0: left promiscuous mode [ 219.459372][ T13] hsr_slave_1: left promiscuous mode [ 219.465220][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.473007][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.482080][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.489834][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.501336][T10841] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1372'. [ 219.524361][ T13] veth1_macvtap: left promiscuous mode [ 219.530056][ T13] veth0_macvtap: left promiscuous mode [ 219.535715][ T13] veth1_vlan: left promiscuous mode [ 219.541392][ T13] veth0_vlan: left promiscuous mode [ 219.614967][T10843] x_tables: duplicate underflow at hook 1 [ 219.809988][ T5839] Bluetooth: hci2: command tx timeout [ 219.957686][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 220.004051][ T13] team0 (unregistering): Port device team_slave_1 removed [ 220.053049][ T13] team0 (unregistering): Port device team_slave_0 removed [ 220.257897][ T3525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 220.511273][T10843] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.1372'. [ 220.559435][T10696] hsr_slave_0: entered promiscuous mode [ 220.572091][T10696] hsr_slave_1: entered promiscuous mode [ 220.609746][T10696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.639992][T10696] Cannot create hsr debugfs directory [ 220.698961][T10848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1374'. [ 220.732687][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1374'. [ 220.880171][T10859] netlink: 'syz.9.1378': attribute type 11 has an invalid length. [ 220.912723][T10859] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1378'. [ 221.206454][T10874] netlink: 'syz.9.1381': attribute type 1 has an invalid length. [ 221.345395][T10661] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 221.379449][T10661] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 221.397046][ T5839] Bluetooth: hci5: command tx timeout [ 221.403366][ T1147] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 221.454984][T10661] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 221.479706][T10661] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 221.611012][T10885] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1385'. [ 221.620893][T10885] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1385'. [ 221.630553][T10885] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1385'. [ 221.836440][T10661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.877858][ T5839] Bluetooth: hci2: command tx timeout [ 221.933118][T10661] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.988409][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.995539][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.020361][T10900] netlink: 'syz.3.1392': attribute type 1 has an invalid length. [ 222.033425][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.040614][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.085459][T10900] 8021q: adding VLAN 0 to HW filter on device bond11 [ 222.351682][T10696] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 222.398652][T10696] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 222.464531][T10696] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 222.490378][T10696] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 222.555659][ T3525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 222.810920][T10696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.855557][T10661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.875343][T10696] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.916133][T10939] syz.9.1403: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 222.921640][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.938457][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.976884][T10939] CPU: 1 UID: 0 PID: 10939 Comm: syz.9.1403 Not tainted 6.15.0-rc4-syzkaller-00152-g4397684a292a #0 PREEMPT(full) [ 222.976912][T10939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 222.976927][T10939] Call Trace: [ 222.976938][T10939] [ 222.976948][T10939] dump_stack_lvl+0x189/0x250 [ 222.976991][T10939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.977013][T10939] ? __pfx__printk+0x10/0x10 [ 222.977030][T10939] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 222.977053][T10939] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 222.977077][T10939] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 222.977102][T10939] warn_alloc+0x214/0x310 [ 222.977121][T10939] ? __pfx___schedule+0x10/0x10 [ 222.977142][T10939] ? __pfx_warn_alloc+0x10/0x10 [ 222.977161][T10939] ? kasan_save_track+0x4f/0x80 [ 222.977178][T10939] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 222.977196][T10939] ? xskq_create+0x56/0x170 [ 222.977214][T10939] ? __x64_sys_setsockopt+0x18b/0x220 [ 222.977230][T10939] ? do_syscall_64+0xf6/0x210 [ 222.977246][T10939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.977271][T10939] __vmalloc_node_range_noprof+0x125/0x12c0 [ 222.977322][T10939] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 222.977345][T10939] ? __kasan_kmalloc+0x93/0xb0 [ 222.977370][T10939] vmalloc_user_noprof+0x74/0x80 [ 222.977392][T10939] ? xskq_create+0xbf/0x170 [ 222.977409][T10939] xskq_create+0xbf/0x170 [ 222.977430][T10939] xsk_init_queue+0xb0/0x110 [ 222.977451][T10939] xsk_setsockopt+0x43f/0x710 [ 222.977471][T10939] ? __pfx_xsk_setsockopt+0x10/0x10 [ 222.977500][T10939] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 222.977517][T10939] ? __pfx_xsk_setsockopt+0x10/0x10 [ 222.977535][T10939] do_sock_setsockopt+0x257/0x3e0 [ 222.977558][T10939] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 222.977575][T10939] ? __fget_files+0x2a/0x420 [ 222.977600][T10939] ? __fget_files+0x3a0/0x420 [ 222.977618][T10939] ? __fget_files+0x2a/0x420 [ 222.977647][T10939] __x64_sys_setsockopt+0x18b/0x220 [ 222.977674][T10939] do_syscall_64+0xf6/0x210 [ 222.977694][T10939] ? clear_bhb_loop+0x45/0xa0 [ 222.977715][T10939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.977731][T10939] RIP: 0033:0x7fc49ad8e969 [ 222.977757][T10939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.977772][T10939] RSP: 002b:00007fc49bba1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 222.977791][T10939] RAX: ffffffffffffffda RBX: 00007fc49afb5fa0 RCX: 00007fc49ad8e969 [ 222.977803][T10939] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 222.977814][T10939] RBP: 00007fc49ae10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 222.977824][T10939] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.977835][T10939] R13: 0000000000000000 R14: 00007fc49afb5fa0 R15: 00007ffee03b9398 [ 222.977871][T10939] [ 222.977883][T10939] Mem-Info: [ 222.985077][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.013730][T10939] active_anon:4137 inactive_anon:0 isolated_anon:0 [ 223.013730][T10939] active_file:1425 inactive_file:38405 isolated_file:0 [ 223.013730][T10939] unevictable:768 dirty:86 writeback:0 [ 223.013730][T10939] slab_reclaimable:11072 slab_unreclaimable:108032 [ 223.013730][T10939] mapped:33448 shmem:1429 pagetables:756 [ 223.013730][T10939] sec_pagetables:0 bounce:0 [ 223.013730][T10939] kernel_misc_reclaimable:0 [ 223.013730][T10939] free:1325878 free_pcp:1439 free_cma:0 [ 223.016288][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.028174][T10939] Node 0 active_anon:16548kB inactive_anon:0kB active_file:5700kB inactive_file:153544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133792kB dirty:344kB writeback:0kB shmem:4180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12108kB pagetables:3024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 223.373925][T10939] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 223.479342][ T5826] Bluetooth: hci5: command tx timeout [ 223.506064][T10939] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 223.517445][T10696] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 223.551173][T10696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.552604][T10951] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1405'. [ 223.577686][T10939] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 223.583571][T10939] Node 0 DMA32 free:1380504kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:16532kB inactive_anon:0kB active_file:5700kB inactive_file:153444kB unevictable:1536kB writepending:344kB present:3129332kB managed:2564156kB mlocked:0kB bounce:0kB free_pcp:788kB local_pcp:16kB free_cma:0kB [ 223.651036][T10939] lowmem_reserve[]: 0 0 0 0 0 [ 223.655932][T10939] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 223.674159][T10954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.698904][T10939] lowmem_reserve[]: 0 0 0 0 0 [ 223.703745][T10939] Node 1 Normal free:3910152kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:1012kB local_pcp:512kB free_cma:0kB [ 223.766953][T10939] lowmem_reserve[]: 0 0 0 0 0 [ 223.771735][T10939] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 223.799754][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 223.823814][T10961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1407'. [ 223.857107][T10939] Node 0 DMA32: 315*4kB (UME) 265*8kB (UME) 133*16kB (UME) 93*32kB (UME) 42*64kB (UME) 31*128kB (UME) 21*256kB (M) 7*512kB (UM) 4*1024kB (U) 12*2048kB (UME) 324*4096kB (M) = 1379876kB [ 223.909995][T10939] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 223.922608][T10939] Node 1 Normal: 80*4kB (U) 27*8kB (UME) 31*16kB (UME) 228*32kB (UME) 88*64kB (UME) 25*128kB (UME) 15*256kB (UME) 8*512kB (UME) 4*1024kB (UME) 3*2048kB (UE) 946*4096kB (M) = 3910152kB [ 223.969505][T10939] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 223.979434][T10939] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 223.991518][T10939] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 224.001754][T10939] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 224.011155][T10939] 41262 total pagecache pages [ 224.015858][T10939] 0 pages in swap cache [ 224.024513][T10939] Free swap = 124996kB [ 224.028944][T10939] Total swap = 124996kB [ 224.033115][T10939] 2097051 pages RAM [ 224.037760][T10939] 0 pages HighMem/MovableOnly [ 224.042463][T10939] 424354 pages reserved [ 224.046630][T10939] 0 pages cma reserved [ 224.078388][T10696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.113875][T10661] veth0_vlan: entered promiscuous mode [ 224.155892][T10661] veth1_vlan: entered promiscuous mode [ 224.192486][T10972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1409'. [ 224.240403][T10972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1409'. [ 224.245046][T10661] veth0_macvtap: entered promiscuous mode [ 224.296631][T10975] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 224.314451][T10975] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 224.338206][T10661] veth1_macvtap: entered promiscuous mode [ 224.377835][T10661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.411111][T10661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.421198][T10661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.467048][T10661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.488726][T10661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.504625][T10661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.525014][T10661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.535821][T10661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.551859][T10661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.563232][T10661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.574265][T10661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.590606][T10661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.607314][T10661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.618511][T10661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.630777][T10661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.643569][T10661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.655497][T10661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.668502][T10661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.740504][T10661] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.769081][T10661] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.788283][T10661] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.797285][T10661] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.947004][ T3552] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 224.983273][T10696] veth0_vlan: entered promiscuous mode [ 225.030331][T10696] veth1_vlan: entered promiscuous mode [ 225.054384][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.074023][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.190961][T10696] veth0_macvtap: entered promiscuous mode [ 225.199198][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.221314][T10696] veth1_macvtap: entered promiscuous mode [ 225.227767][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.291189][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.353747][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.372858][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.385379][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.395759][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.407687][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.417659][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.428377][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.442592][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.453197][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.465396][T10696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.490211][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.504062][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.515311][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.527253][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.538437][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.549184][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.559982][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.572421][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.582601][T10696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.593180][T10696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.604861][T10696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.639536][T10696] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.663785][T10696] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.674182][T10696] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.688357][T10696] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.824125][T11027] netlink: 'syz.9.1427': attribute type 4 has an invalid length. [ 225.877698][T11027] netlink: 'syz.9.1427': attribute type 4 has an invalid length. [ 225.891384][T11029] __nla_validate_parse: 4 callbacks suppressed [ 225.891400][T11029] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1428'. [ 225.911638][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.945314][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.956273][T11031] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1429'. [ 226.074148][ T3525] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.097681][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 226.159917][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.174725][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.335944][ T3525] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.445704][ T3525] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.569867][ T3525] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.852143][ T3525] bridge_slave_1: left allmulticast mode [ 226.870501][ T3525] bridge_slave_1: left promiscuous mode [ 226.876290][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.905782][ T3525] bridge_slave_0: left allmulticast mode [ 226.917784][ T3525] bridge_slave_0: left promiscuous mode [ 226.923525][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.247625][ T3552] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 227.321675][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 227.341446][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 227.354434][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 227.368667][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 227.385603][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 227.411042][ T3525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.429670][ T3525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.440188][ T3525] bond0 (unregistering): Released all slaves [ 227.671721][T11058] chnl_net:caif_netlink_parms(): no params data found [ 227.716349][ T3525] hsr_slave_0: left promiscuous mode [ 227.722747][ T3525] hsr_slave_1: left promiscuous mode [ 227.729753][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.737405][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.745141][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.753654][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.776967][ T3525] veth1_macvtap: left promiscuous mode [ 227.782526][ T3525] veth0_macvtap: left promiscuous mode [ 227.789415][ T3525] veth1_vlan: left promiscuous mode [ 227.794709][ T3525] veth0_vlan: left promiscuous mode [ 228.381266][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 228.396882][ T3552] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 228.413420][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 228.430945][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 228.439731][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 228.458911][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 228.711054][ T3525] team0 (unregistering): Port device team_slave_1 removed [ 228.754768][ T3525] team0 (unregistering): Port device team_slave_0 removed [ 229.405237][T11058] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.420111][T11058] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.434874][T11058] bridge_slave_0: entered allmulticast mode [ 229.444328][T11058] bridge_slave_0: entered promiscuous mode [ 229.464056][T11101] bond0: Removing last arp target with arp_interval on [ 229.479309][ T5826] Bluetooth: hci2: command tx timeout [ 229.492441][T11058] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.517791][T11058] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.525185][T11058] bridge_slave_1: entered allmulticast mode [ 229.534242][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 229.545255][T11058] bridge_slave_1: entered promiscuous mode [ 229.656577][T11058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.684281][T11058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.803274][T11058] team0: Port device team_slave_0 added [ 229.823849][T11058] team0: Port device team_slave_1 added [ 229.933722][T11058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.941500][T11058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.969185][T11058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.980326][T11121] netlink: 'syz.9.1447': attribute type 5 has an invalid length. [ 229.996097][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1447'. [ 230.006368][T11058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.013684][T11058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.040789][T11058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.165353][ T3525] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.188067][T11084] chnl_net:caif_netlink_parms(): no params data found [ 230.234834][T11058] hsr_slave_0: entered promiscuous mode [ 230.251989][T11058] hsr_slave_1: entered promiscuous mode [ 230.261677][T11058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.274643][T11058] Cannot create hsr debugfs directory [ 230.284224][T11126] netem: change failed [ 230.356611][ T3525] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.513159][T11140] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1453'. [ 230.529454][ T5826] Bluetooth: hci5: command tx timeout [ 230.540003][ T3525] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.602486][T11084] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.616542][T11084] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.625412][T11084] bridge_slave_0: entered allmulticast mode [ 230.633162][T11147] netlink: 'syz.3.1454': attribute type 1 has an invalid length. [ 230.646151][T11084] bridge_slave_0: entered promiscuous mode [ 230.658041][ T7937] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 230.674870][T11147] netlink: 'syz.3.1454': attribute type 10 has an invalid length. [ 230.695547][T11147] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1454'. [ 230.725447][ T3525] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.756408][T11084] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.765612][T11084] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.774393][T11084] bridge_slave_1: entered allmulticast mode [ 230.787606][T11084] bridge_slave_1: entered promiscuous mode [ 230.920251][T11084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.993328][T11084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.189235][T11182] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 231.200523][T11182] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 231.210881][T11182] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 231.220489][T11182] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 231.230016][T11182] geneve2: entered promiscuous mode [ 231.235254][T11182] geneve2: entered allmulticast mode [ 231.324798][T11084] team0: Port device team_slave_0 added [ 231.517961][T11189] netlink: 'syz.3.1462': attribute type 1 has an invalid length. [ 231.525902][T11189] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1462'. [ 231.557416][ T5826] Bluetooth: hci2: command tx timeout [ 231.779389][ T1097] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 232.599274][ T5826] Bluetooth: hci5: command tx timeout [ 232.887183][ T7937] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 232.924537][T11084] team0: Port device team_slave_1 added [ 233.054800][ T3525] bridge_slave_1: left allmulticast mode [ 233.070088][ T3525] bridge_slave_1: left promiscuous mode [ 233.084108][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.094927][ T3525] bridge_slave_0: left allmulticast mode [ 233.101261][ T3525] bridge_slave_0: left promiscuous mode [ 233.107234][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.449965][ T3525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.461174][ T3525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.473736][ T3525] bond0 (unregistering): Released all slaves [ 233.495473][T11084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.502727][T11084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.530977][T11084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.544234][T11084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.560393][T11084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.605414][T11084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.639780][ T5826] Bluetooth: hci2: command tx timeout [ 233.751071][T11215] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1468'. [ 233.888305][T11084] hsr_slave_0: entered promiscuous mode [ 233.895853][T11219] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 233.907467][T11084] hsr_slave_1: entered promiscuous mode [ 233.913829][T11084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.921660][T11084] Cannot create hsr debugfs directory [ 233.959291][ T3525] hsr_slave_0: left promiscuous mode [ 233.965609][ T3525] hsr_slave_1: left promiscuous mode [ 233.987481][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.994949][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.021691][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.030536][T11225] No such timeout policy "syz0" [ 234.030594][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.050187][ T1097] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 234.113657][ T3525] veth1_macvtap: left promiscuous mode [ 234.127599][ T3525] veth0_macvtap: left promiscuous mode [ 234.133268][ T3525] veth1_vlan: left promiscuous mode [ 234.142063][ T3525] veth0_vlan: left promiscuous mode [ 234.576005][ T3525] team0 (unregistering): Port device team_slave_1 removed [ 234.623329][ T3525] team0 (unregistering): Port device team_slave_0 removed [ 234.677136][ T5826] Bluetooth: hci5: command tx timeout [ 235.158071][ T7937] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 235.436477][T11254] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1479'. [ 235.462045][T11254] ï‰Oܼ: renamed from hsr0 (while UP) [ 235.486647][T11254] ï‰Oܼ: entered promiscuous mode [ 235.500949][T11254] A link change request failed with some changes committed already. Interface ï‰Oܼ may have been left with an inconsistent configuration, please check. [ 235.562544][T11058] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 235.591493][T11058] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 235.614004][T11058] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 235.652579][T11058] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 235.718585][ T5826] Bluetooth: hci2: command tx timeout [ 235.773131][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1484'. [ 236.038585][T11058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.125529][T11084] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 236.153402][T11058] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.161280][T11084] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 236.187952][T11084] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 236.210791][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.217986][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.239822][T11084] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 236.265427][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.272589][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.308056][ T7937] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 236.373759][T11291] netlink: 'syz.5.1490': attribute type 10 has an invalid length. [ 236.572734][T11084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.612968][T11084] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.623931][T11301] sctp: [Deprecated]: syz.9.1493 (pid 11301) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.623931][T11301] Use struct sctp_sack_info instead [ 236.632948][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.647497][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.690628][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.697811][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.742452][T11058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.759637][ T5826] Bluetooth: hci5: command tx timeout [ 236.764170][T11084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.978317][T11084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.113940][T11058] veth0_vlan: entered promiscuous mode [ 237.154694][T11058] veth1_vlan: entered promiscuous mode [ 237.184933][T11318] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1495'. [ 237.221771][T11058] veth0_macvtap: entered promiscuous mode [ 237.256637][T11058] veth1_macvtap: entered promiscuous mode [ 237.294717][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.305639][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.324824][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.336576][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.352750][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.363704][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.378427][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.390549][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.408377][T11058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.427642][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 237.472750][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.499662][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.510911][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.522237][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.532234][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.543929][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.554357][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.565183][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.608527][T11058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.655897][T11058] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.679362][T11058] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.694356][T11341] netlink: 'syz.3.1501': attribute type 10 has an invalid length. [ 237.702361][T11058] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.711342][T11341] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1501'. [ 237.723124][T11058] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.752491][T11341] dummy0: entered promiscuous mode [ 237.765023][T11341] bond0: (slave dummy0): Releasing backup interface [ 237.785883][T11345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1501'. [ 237.792715][T11341] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 237.885493][T11084] veth0_vlan: entered promiscuous mode [ 237.940685][T11084] veth1_vlan: entered promiscuous mode [ 238.054015][T11352] syzkaller1: entered promiscuous mode [ 238.063463][T11352] syzkaller1: entered allmulticast mode [ 238.083101][ T7937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.099864][ T7937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.218312][T11362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.249720][T11084] veth0_macvtap: entered promiscuous mode [ 238.260704][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.265050][T11084] veth1_macvtap: entered promiscuous mode [ 238.275216][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.373533][T11084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.392900][T11084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.403882][T11084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.414507][T11084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.424506][T11084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.435495][T11084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.446992][T11084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.458928][T11084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.468865][T11084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.480208][T11084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.491654][T11084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.502821][T11084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.513463][T11084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.528819][T11084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.537644][ T1147] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 238.540479][T11084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.557945][T11084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.568548][T11084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.578589][T11084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.589700][T11084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.600266][T11084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.610833][T11084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.635919][T11084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.692111][T11084] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.710001][T11084] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.719016][T11084] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.727848][T11084] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.756414][T11370] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1511'. [ 238.780286][T11370] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1511'. [ 238.794978][T11370] netlink: 'syz.5.1511': attribute type 5 has an invalid length. [ 238.804274][T11370] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1511'. [ 238.868998][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.882322][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.945407][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.958890][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.981744][T11375] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1513'. [ 238.989753][T11374] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1512'. [ 239.105589][T11378] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1514'. [ 239.136525][T11378] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1514'. [ 239.158657][T11378] delete_channel: no stack [ 239.448220][ T3525] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.669482][ T3525] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.690365][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 239.890078][ T3525] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.024566][ T3525] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.192544][ T3525] bridge_slave_1: left allmulticast mode [ 240.198937][ T3525] bridge_slave_1: left promiscuous mode [ 240.204682][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.214453][ T3525] bridge_slave_0: left allmulticast mode [ 240.221073][ T3525] bridge_slave_0: left promiscuous mode [ 240.229549][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.363716][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.377155][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.397878][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.412086][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.422126][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.614683][ T3525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.625500][ T3525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.635351][ T3525] bond0 (unregistering): Released all slaves [ 240.828189][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 240.872363][T11394] chnl_net:caif_netlink_parms(): no params data found [ 241.019166][ T3525] hsr_slave_0: left promiscuous mode [ 241.036843][ T3525] hsr_slave_1: left promiscuous mode [ 241.042987][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.073323][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.105813][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.126530][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.165207][ T3525] veth1_macvtap: left promiscuous mode [ 241.182001][ T3525] veth0_macvtap: left promiscuous mode [ 241.190482][ T3525] veth1_vlan: left promiscuous mode [ 241.195881][ T3525] veth0_vlan: left promiscuous mode [ 241.286490][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.297168][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.306596][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.314638][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.322887][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.694799][ T3525] team0 (unregistering): Port device team_slave_1 removed [ 241.743626][ T3525] team0 (unregistering): Port device team_slave_0 removed [ 241.950060][ T1147] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 242.231411][T11394] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.239444][T11394] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.246676][T11394] bridge_slave_0: entered allmulticast mode [ 242.265840][T11394] bridge_slave_0: entered promiscuous mode [ 242.300621][T11394] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.313965][T11394] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.326696][T11394] bridge_slave_1: entered allmulticast mode [ 242.346092][T11394] bridge_slave_1: entered promiscuous mode [ 242.517631][ T5826] Bluetooth: hci2: command tx timeout [ 242.531381][T11394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.569891][T11394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.699241][T11394] team0: Port device team_slave_0 added [ 242.761873][T11446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.777328][T11394] team0: Port device team_slave_1 added [ 242.847339][T11446] netem: change failed [ 242.924116][T11394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.927677][T11453] __nla_validate_parse: 2 callbacks suppressed [ 242.927694][T11453] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1530'. [ 242.965933][T11394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.012405][T11394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.059319][T11394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.069561][T11394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.100449][T11394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.118202][ T1097] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 243.120288][T11418] chnl_net:caif_netlink_parms(): no params data found [ 243.146257][T11453] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1530'. [ 243.314569][T11394] hsr_slave_0: entered promiscuous mode [ 243.334370][T11394] hsr_slave_1: entered promiscuous mode [ 243.343668][T11394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.362855][T11394] Cannot create hsr debugfs directory [ 243.396997][ T5826] Bluetooth: hci5: command tx timeout [ 243.459308][T11478] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1537'. [ 243.464785][ T3525] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.550566][T11483] netlink: 'syz.3.1538': attribute type 4 has an invalid length. [ 243.581423][ T3525] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.736597][ T3525] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.823511][T11418] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.840551][T11418] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.851492][T11418] bridge_slave_0: entered allmulticast mode [ 243.859553][T11418] bridge_slave_0: entered promiscuous mode [ 243.903189][ T3525] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.950341][T11418] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.960439][T11418] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.972086][T11418] bridge_slave_1: entered allmulticast mode [ 243.981387][T11418] bridge_slave_1: entered promiscuous mode [ 244.077812][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1542'. [ 244.143285][T11501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1542'. [ 244.161419][T11418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.189202][T11418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.234831][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1542'. [ 244.244695][ T1161] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 244.256011][T11501] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1542'. [ 244.358760][T11418] team0: Port device team_slave_0 added [ 244.409780][T11418] team0: Port device team_slave_1 added [ 244.421759][ T3525] bridge_slave_1: left allmulticast mode [ 244.428257][ T3525] bridge_slave_1: left promiscuous mode [ 244.433999][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.443645][ T3525] bridge_slave_0: left allmulticast mode [ 244.453479][ T3525] bridge_slave_0: left promiscuous mode [ 244.459501][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.597866][ T5826] Bluetooth: hci2: command tx timeout [ 244.944142][ T3525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.957976][ T3525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.968746][ T3525] bond0 (unregistering): Released all slaves [ 245.106773][ T5880] IPVS: starting estimator thread 0... [ 245.196665][T11418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.206021][T11418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.232504][T11418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.235588][T11529] IPVS: using max 41 ests per chain, 98400 per kthread [ 245.252849][T11418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.266456][T11418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.306538][T11418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.335868][T11531] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 245.368153][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 245.447915][T11535] veth5: entered allmulticast mode [ 245.455530][T11534] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1551'. [ 245.480737][ T5826] Bluetooth: hci5: command tx timeout [ 245.665247][T11418] hsr_slave_0: entered promiscuous mode [ 245.677957][T11418] hsr_slave_1: entered promiscuous mode [ 245.688552][T11418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.696148][T11418] Cannot create hsr debugfs directory [ 245.704860][T11552] x_tables: unsorted entry at hook 2 [ 245.761050][ T3525] hsr_slave_0: left promiscuous mode [ 245.771233][ T3525] hsr_slave_1: left promiscuous mode [ 245.783740][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.793216][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.804089][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.815313][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.842134][ T3525] veth1_macvtap: left promiscuous mode [ 245.849800][ T3525] veth0_macvtap: left promiscuous mode [ 245.855385][ T3525] veth1_vlan: left promiscuous mode [ 245.860950][ T3525] veth0_vlan: left promiscuous mode [ 246.255692][ T3525] team0 (unregistering): Port device team_slave_1 removed [ 246.305057][ T3525] team0 (unregistering): Port device team_slave_0 removed [ 246.509194][ T1097] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 246.679605][ T5826] Bluetooth: hci2: command tx timeout [ 246.732003][T11552] tipc: Invalid UDP bearer configuration [ 246.732040][T11552] tipc: Enabling of bearer rejected, failed to enable media [ 246.894216][T11567] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1560'. [ 246.930241][T11567] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.938555][T11567] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.975202][T11570] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1560'. [ 246.993242][T11394] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 247.029386][T11394] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 247.049846][T11394] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 247.088331][T11394] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 247.145248][T11579] xt_bpf: check failed: parse error [ 247.566810][ T5826] Bluetooth: hci5: command tx timeout [ 247.649302][ T3525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 247.675224][T11394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.804276][T11394] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.832536][T11612] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 247.848714][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.855950][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.883529][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.890743][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.947752][T11612] netlink: 'syz.9.1575': attribute type 5 has an invalid length. [ 248.149359][T11418] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 248.205507][T11418] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 248.231436][T11628] netlink: 'syz.3.1580': attribute type 58 has an invalid length. [ 248.251132][T11628] __nla_validate_parse: 2 callbacks suppressed [ 248.251149][T11628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1580'. [ 248.259097][T11418] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 248.314976][T11418] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 248.595505][T11418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.614434][T11394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.659492][T11418] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.689810][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.697091][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.713273][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.720484][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.757185][ T5826] Bluetooth: hci2: command tx timeout [ 248.789953][ T7937] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 248.904989][T11660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1588'. [ 248.924909][T11660] netlink: 'syz.3.1588': attribute type 5 has an invalid length. [ 248.941255][T11660] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1588'. [ 249.143451][T11673] netlink: 'syz.5.1591': attribute type 1 has an invalid length. [ 249.165248][T11673] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1591'. [ 249.253150][T11394] veth0_vlan: entered promiscuous mode [ 249.301650][T11394] veth1_vlan: entered promiscuous mode [ 249.321532][T11418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.406646][T11394] veth0_macvtap: entered promiscuous mode [ 249.450023][T11394] veth1_macvtap: entered promiscuous mode [ 249.503648][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.531408][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.541657][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.552419][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.562840][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.575180][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.585208][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.596098][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.608156][T11394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.637070][ T5826] Bluetooth: hci5: command tx timeout [ 249.651743][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1595'. [ 249.689395][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.710169][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.723345][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.747843][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.774779][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.790530][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.801919][T11394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.816371][T11394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.833755][T11394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.850444][T11394] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.866160][T11394] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.885092][T11394] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.894016][T11394] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.937247][ T1097] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 250.072075][T11418] veth0_vlan: entered promiscuous mode [ 250.080317][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.116116][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.149883][T11418] veth1_vlan: entered promiscuous mode [ 250.236282][ T7937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.267406][ T7937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.303246][T11418] veth0_macvtap: entered promiscuous mode [ 250.326141][T11418] veth1_macvtap: entered promiscuous mode [ 250.399941][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.426624][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.443855][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.454733][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.466101][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.480238][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.490758][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.504728][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.514618][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.528409][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.547680][T11418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.601222][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.615049][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.632201][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.643041][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.660424][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.671169][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.684855][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.695452][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.708942][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.720246][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.732630][T11418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.746445][T11418] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.843162][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1603'. [ 250.862637][T11730] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1603'. [ 250.888733][T11418] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.913538][T11733] netlink: 'syz.3.1606': attribute type 8 has an invalid length. [ 250.918405][T11418] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.946880][T11418] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.090441][ T1097] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.099815][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 251.239561][ T1097] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.284796][ T7937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.294730][ T7937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.324525][ T7937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.333950][ T7937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.427733][ T1097] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.655152][ T1097] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.761867][ T1097] bridge_slave_1: left allmulticast mode [ 251.767602][ T1097] bridge_slave_1: left promiscuous mode [ 251.773291][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.818575][ T1097] bridge_slave_0: left allmulticast mode [ 251.824250][ T1097] bridge_slave_0: left promiscuous mode [ 251.847752][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.229407][ T3552] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 252.356108][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 252.369596][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 252.380830][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 252.402537][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 252.412758][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 252.420787][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.441165][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.451446][ T1097] bond0 (unregistering): Released all slaves [ 252.675258][T11741] chnl_net:caif_netlink_parms(): no params data found [ 252.790509][T11741] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.805521][T11741] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.812914][T11741] bridge_slave_0: entered allmulticast mode [ 252.820214][T11741] bridge_slave_0: entered promiscuous mode [ 252.828349][T11741] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.835481][T11741] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.843176][T11741] bridge_slave_1: entered allmulticast mode [ 252.853917][T11741] bridge_slave_1: entered promiscuous mode [ 252.878856][ T1097] hsr_slave_0: left promiscuous mode [ 252.884783][ T1097] hsr_slave_1: left promiscuous mode [ 252.891119][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.898906][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.906645][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.914367][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.936163][ T1097] veth1_macvtap: left promiscuous mode [ 252.942091][ T1097] veth0_macvtap: left promiscuous mode [ 252.947890][ T1097] veth1_vlan: left promiscuous mode [ 252.953227][ T1097] veth0_vlan: left promiscuous mode [ 253.337563][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 253.578952][T11767] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1613'. [ 253.590931][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.601414][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.610704][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.613783][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1614'. [ 253.635633][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.650965][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 253.680745][T11772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1614'. [ 253.910459][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 253.951323][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 254.457861][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1616'. [ 254.472382][T11779] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1616'. [ 254.477393][ T1147] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 254.483167][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1616'. [ 254.502052][T11741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.521399][ T5839] Bluetooth: hci2: command tx timeout [ 254.522661][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1616'. [ 254.537125][T11779] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1616'. [ 254.562130][T11741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.566998][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1616'. [ 254.607654][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1616'. [ 254.694955][T11789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.703898][T11786] geneve0: entered promiscuous mode [ 254.731428][T11741] team0: Port device team_slave_0 added [ 254.813117][T11741] team0: Port device team_slave_1 added [ 254.906582][T11741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.915217][T11741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.944317][T11741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.974794][T11741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.998031][ T5839] block nbd1: Receive control failed (result -32) [ 255.031416][T11741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.074514][T11804] netlink: 'syz.9.1621': attribute type 10 has an invalid length. [ 255.080127][T11741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.131742][T11804] vlan0: entered allmulticast mode [ 255.147455][T11804] veth0_vlan: entered allmulticast mode [ 255.176685][T11804] team0: Port device vlan0 added [ 255.383354][T11741] hsr_slave_0: entered promiscuous mode [ 255.392723][T11741] hsr_slave_1: entered promiscuous mode [ 255.400793][T11741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.413389][T11741] Cannot create hsr debugfs directory [ 255.516474][ T1097] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.562628][T11819] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 255.578398][T11819] team0: Device ipvlan3 is already an upper device of the team interface [ 255.644619][ T68] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.717402][ T5839] Bluetooth: hci5: command tx timeout [ 255.734436][ T1097] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.802272][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.899557][ T1097] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.957817][T11766] chnl_net:caif_netlink_parms(): no params data found [ 256.064589][ T1097] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.124045][T11841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.138664][T11839] tunl0: entered promiscuous mode [ 256.144065][T11839] tunl0: left allmulticast mode [ 256.153851][T11839] netlink: 'syz.5.1632': attribute type 3 has an invalid length. [ 256.173041][T11842] netlink: 'syz.5.1632': attribute type 3 has an invalid length. [ 256.367313][T11766] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.375043][T11766] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.382367][T11766] bridge_slave_0: entered allmulticast mode [ 256.390222][T11766] bridge_slave_0: entered promiscuous mode [ 256.426095][T11766] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.433498][T11766] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.446355][T11766] bridge_slave_1: entered allmulticast mode [ 256.464296][T11766] bridge_slave_1: entered promiscuous mode [ 256.482744][ T1097] bridge_slave_1: left allmulticast mode [ 256.491584][ T1097] bridge_slave_1: left promiscuous mode [ 256.497925][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.512824][ T1097] bridge_slave_0: left allmulticast mode [ 256.526843][ T1097] bridge_slave_0: left promiscuous mode [ 256.552834][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.598028][ T5839] Bluetooth: hci2: command tx timeout [ 256.685990][T11864] FAULT_INJECTION: forcing a failure. [ 256.685990][T11864] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 256.705462][T11864] CPU: 0 UID: 0 PID: 11864 Comm: syz.5.1640 Not tainted 6.15.0-rc4-syzkaller-00152-g4397684a292a #0 PREEMPT(full) [ 256.705502][T11864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 256.705532][T11864] Call Trace: [ 256.705539][T11864] [ 256.705546][T11864] dump_stack_lvl+0x189/0x250 [ 256.705572][T11864] ? __lock_acquire+0xaac/0xd20 [ 256.705593][T11864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.705612][T11864] ? __pfx__printk+0x10/0x10 [ 256.705627][T11864] ? __might_fault+0xb0/0x130 [ 256.705656][T11864] should_fail_ex+0x414/0x560 [ 256.705682][T11864] _copy_from_user+0x2d/0xb0 [ 256.705701][T11864] ___sys_sendmsg+0x158/0x2a0 [ 256.705722][T11864] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.705772][T11864] ? __fget_files+0x2a/0x420 [ 256.705788][T11864] ? __fget_files+0x3a0/0x420 [ 256.705814][T11864] __x64_sys_sendmsg+0x19b/0x260 [ 256.705834][T11864] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 256.705867][T11864] ? do_syscall_64+0xba/0x210 [ 256.705887][T11864] do_syscall_64+0xf6/0x210 [ 256.705903][T11864] ? clear_bhb_loop+0x45/0xa0 [ 256.705921][T11864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.705935][T11864] RIP: 0033:0x7fbe88d8e969 [ 256.705949][T11864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.705962][T11864] RSP: 002b:00007fbe89be7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.705978][T11864] RAX: ffffffffffffffda RBX: 00007fbe88fb5fa0 RCX: 00007fbe88d8e969 [ 256.705989][T11864] RDX: 0000000000008000 RSI: 0000200000000940 RDI: 0000000000000003 [ 256.705999][T11864] RBP: 00007fbe89be7090 R08: 0000000000000000 R09: 0000000000000000 [ 256.706008][T11864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.706017][T11864] R13: 0000000000000000 R14: 00007fbe88fb5fa0 R15: 00007ffc839a4448 [ 256.706043][T11864] [ 256.898209][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 257.267712][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.282560][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.293391][ T1097] bond0 (unregistering): Released all slaves [ 257.332479][ T30] audit: type=1800 audit(1746500609.373:3): pid=11871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1643" name="cgroup.controllers" dev="tmpfs" ino=2317 res=0 errno=0 [ 257.446625][T11766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.546029][T11766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.806863][ T5839] Bluetooth: hci5: command tx timeout [ 257.819866][T11766] team0: Port device team_slave_0 added [ 257.846461][T11766] team0: Port device team_slave_1 added [ 257.937827][T11893] team_slave_0: entered promiscuous mode [ 257.943715][T11893] team_slave_1: entered promiscuous mode [ 257.956106][T11893] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 257.965288][T11893] team0: Device macvtap0 is already an upper device of the team interface [ 257.979678][T11893] team_slave_0: left promiscuous mode [ 257.985320][T11893] team_slave_1: left promiscuous mode [ 258.019947][ T1161] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 258.038300][T11766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.045398][T11766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.072747][T11766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.103891][ T1097] hsr_slave_0: left promiscuous mode [ 258.117536][ T1097] hsr_slave_1: left promiscuous mode [ 258.123867][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.134673][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.150324][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.159201][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.190354][ T1097] veth1_macvtap: left promiscuous mode [ 258.195908][ T1097] veth0_macvtap: left promiscuous mode [ 258.212695][ T1097] veth1_vlan: left promiscuous mode [ 258.226936][ T1097] veth0_vlan: left promiscuous mode [ 258.684917][ T5839] Bluetooth: hci2: command tx timeout [ 258.896247][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 258.935758][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 259.138398][ T3525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 259.311736][T11766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.321364][T11766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.352505][T11766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.437816][T11918] team_slave_0: entered promiscuous mode [ 259.443529][T11918] team_slave_1: entered promiscuous mode [ 259.460957][T11918] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 259.469207][T11918] team0: Device macvtap0 is already an upper device of the team interface [ 259.482947][T11918] team_slave_0: left promiscuous mode [ 259.488498][T11918] team_slave_1: left promiscuous mode [ 259.562008][T11927] netlink: 'syz.9.1664': attribute type 10 has an invalid length. [ 259.583680][T11927] __nla_validate_parse: 94 callbacks suppressed [ 259.583698][T11927] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1664'. [ 259.597707][T11929] [H: renamed from veth0_vlan [ 259.622393][T11924] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1664'. [ 259.653927][T11927] dummy0: entered promiscuous mode [ 259.681492][T11927] bridge0: port 3(dummy0) entered blocking state [ 259.703972][T11927] bridge0: port 3(dummy0) entered disabled state [ 259.711005][T11927] dummy0: entered allmulticast mode [ 259.728365][T11936] netlink: 'syz.3.1667': attribute type 7 has an invalid length. [ 259.876302][T11741] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 259.883519][ T5839] Bluetooth: hci5: command tx timeout [ 259.906546][T11741] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 259.942957][T11766] hsr_slave_0: entered promiscuous mode [ 259.974397][T11766] hsr_slave_1: entered promiscuous mode [ 259.995694][T11766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.015374][T11766] Cannot create hsr debugfs directory [ 260.050605][T11955] netlink: 'syz.3.1673': attribute type 1 has an invalid length. [ 260.058995][T11741] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 260.115335][T11961] netlink: 512 bytes leftover after parsing attributes in process `syz.3.1673'. [ 260.125533][T11959] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1674'. [ 260.144139][T11955] 8021q: adding VLAN 0 to HW filter on device bond14 [ 260.156185][T11741] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 260.212245][T11961] bond14: (slave gretap2): making interface the new active one [ 260.231986][T11961] bond14: (slave gretap2): Enslaving as an active interface with an up link [ 260.262455][ T1161] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 260.298184][T11961] syz.3.1673 (11961) used greatest stack depth: 17416 bytes left [ 260.476636][T11981] netlink: 300 bytes leftover after parsing attributes in process `syz.5.1681'. [ 260.750698][T11741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.766275][ T5839] Bluetooth: hci2: command tx timeout [ 260.776392][T11741] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.874159][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.881359][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.919549][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.926744][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.952829][T12001] team_slave_0: entered promiscuous mode [ 260.958845][T12001] team_slave_1: entered promiscuous mode [ 260.976095][T12001] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 260.984515][T12001] team0: Device macvtap1 is already an upper device of the team interface [ 260.995360][T12001] team_slave_0: left promiscuous mode [ 261.000806][T12001] team_slave_1: left promiscuous mode [ 261.093847][T11741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.235748][T11766] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 261.250160][T12011] Cannot find add_set index 0 as target [ 261.262594][T12011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.263400][T11766] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 261.295318][T11766] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 261.314361][T11766] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 261.430001][ T3525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 261.512253][T11766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.521977][T11741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.538629][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1693'. [ 261.564572][T12017] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 261.580945][T11766] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.593828][T12020] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 261.622437][T12020] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 261.647026][T12020] gretap1: entered promiscuous mode [ 261.652710][T12020] gretap1: entered allmulticast mode [ 261.675418][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.682609][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.730137][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.737373][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.911975][T12034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1696'. [ 261.959688][ T5839] Bluetooth: hci5: command tx timeout [ 261.962115][T12037] netdevsim netdevsim5: Firmware load for './file0/../file0' refused, path contains '..' component [ 262.015805][T12041] ip_vti0: left allmulticast mode [ 262.332808][T11766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.342486][T11741] veth0_vlan: entered promiscuous mode [ 262.385673][T11741] veth1_vlan: entered promiscuous mode [ 262.473397][T11741] veth0_macvtap: entered promiscuous mode [ 262.511817][T11741] veth1_macvtap: entered promiscuous mode [ 262.573193][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.588163][ T3525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 262.604715][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.617673][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.637403][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.657178][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.677501][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.687809][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.698837][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.711164][T11741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.784769][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.800936][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.840629][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.851270][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.861800][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.920186][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.945151][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.966219][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.981194][T11741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.046346][T11741] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.075829][T11741] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.085003][T11741] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.101442][T11741] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.236329][T11766] veth0_vlan: entered promiscuous mode [ 263.292120][T11766] veth1_vlan: entered promiscuous mode [ 263.330383][ T7937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.358095][ T7937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.427964][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.433422][T11766] veth0_macvtap: entered promiscuous mode [ 263.451266][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.454088][T11766] veth1_macvtap: entered promiscuous mode [ 263.508004][T11766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.529378][T11766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.540273][T11766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.552947][T11766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.563997][T11766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.575131][T11766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.585137][T11766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.603525][T11766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.613476][T11766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.639267][T11766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.668512][T11766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.711255][T11766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.739416][T11766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.756838][T11766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.760959][ T3525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 263.775721][T11766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.790561][T11766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.802362][T11766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.812265][T11766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.823078][T11766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.833838][T11766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.850581][T11766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.878987][T11766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.955222][T11766] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.981450][T11766] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.991111][T11766] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.000366][T11766] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.054218][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1717'. [ 264.291052][ T1097] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.476550][ T1097] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.503600][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.525007][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.574886][ T1097] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.600573][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.626955][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.750595][ T1097] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.895766][ T1097] bridge_slave_1: left allmulticast mode [ 264.901764][ T3525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 264.901770][ T1097] bridge_slave_1: left promiscuous mode [ 264.901968][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.953018][ T1097] bridge_slave_0: left allmulticast mode [ 264.968784][ T1097] bridge_slave_0: left promiscuous mode [ 264.974589][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.501701][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 265.517730][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 265.535313][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 265.550326][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 265.559169][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 265.559324][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.585618][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.596114][ T1097] bond0 (unregistering): Released all slaves [ 265.842725][T12130] chnl_net:caif_netlink_parms(): no params data found [ 265.907830][ T1097] hsr_slave_0: left promiscuous mode [ 265.914527][ T1097] hsr_slave_1: left promiscuous mode [ 265.920872][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.928683][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.936506][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.944027][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.965978][ T1097] veth1_macvtap: left promiscuous mode [ 265.971627][ T1097] veth0_macvtap: left promiscuous mode [ 265.977335][ T1097] veth1_vlan: left promiscuous mode [ 265.983974][ T1097] veth0_vlan: left promiscuous mode [ 266.008808][ T7937] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 266.037015][ C0] ================================================================== [ 266.045119][ C0] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 266.053039][ C0] Read of size 2 at addr ffff888020f6982a by task kworker/u8:10/7937 [ 266.061121][ C0] [ 266.063449][ C0] CPU: 0 UID: 0 PID: 7937 Comm: kworker/u8:10 Not tainted 6.15.0-rc4-syzkaller-00152-g4397684a292a #0 PREEMPT(full) [ 266.063475][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 266.063487][ C0] Workqueue: 0x0 (gid-cache-wq) [ 266.063519][ C0] Call Trace: [ 266.063527][ C0] [ 266.063534][ C0] dump_stack_lvl+0x189/0x250 [ 266.063563][ C0] ? __virt_addr_valid+0x18c/0x540 [ 266.063586][ C0] ? rcu_is_watching+0x15/0xb0 [ 266.063612][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.063635][ C0] ? rcu_is_watching+0x15/0xb0 [ 266.063661][ C0] ? lock_release+0x4b/0x3e0 [ 266.063687][ C0] ? __virt_addr_valid+0x18c/0x540 [ 266.063709][ C0] ? __virt_addr_valid+0x469/0x540 [ 266.063731][ C0] print_report+0xb4/0x290 [ 266.063751][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 266.063775][ C0] kasan_report+0x118/0x150 [ 266.063798][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 266.063826][ C0] rose_timer_expiry+0x471/0x4b0 [ 266.063851][ C0] call_timer_fn+0x17b/0x5f0 [ 266.063874][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 266.063897][ C0] ? call_timer_fn+0xbe/0x5f0 [ 266.063918][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 266.063945][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 266.063962][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.063980][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 266.064005][ C0] __run_timer_base+0x61a/0x860 [ 266.064026][ C0] ? ktime_get+0x3e/0x1f0 [ 266.064048][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 266.064068][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 266.064095][ C0] run_timer_softirq+0xb7/0x180 [ 266.064116][ C0] handle_softirqs+0x283/0x870 [ 266.064145][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 266.064163][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 266.064191][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 266.064213][ C0] __irq_exit_rcu+0xca/0x1f0 [ 266.064228][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 266.064248][ C0] irq_exit_rcu+0x9/0x30 [ 266.064262][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 266.064281][ C0] [ 266.064287][ C0] [ 266.064294][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 266.064314][ C0] RIP: 0010:finish_task_switch+0x26b/0x950 [ 266.064337][ C0] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 7f 92 c6 09 e8 6a 66 35 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 266.064354][ C0] RSP: 0018:ffffc90003b2fa58 EFLAGS: 00000282 [ 266.064369][ C0] RAX: a7b1a7ff3dd3c200 RBX: 0000000000000000 RCX: a7b1a7ff3dd3c200 [ 266.064383][ C0] RDX: 0000000000000000 RSI: ffffffff8d749ecb RDI: ffffffff8bc1cde0 [ 266.064396][ C0] RBP: ffffc90003b2fab0 R08: ffffffff8f7ed377 R09: 1ffffffff1efda6e [ 266.064411][ C0] R10: dffffc0000000000 R11: fffffbfff1efda6f R12: ffff888077683c00 [ 266.064424][ C0] R13: dffffc0000000000 R14: ffffffff8dc95240 R15: ffff8880b883a6d8 [ 266.064447][ C0] ? finish_task_switch+0x266/0x950 [ 266.064472][ C0] __schedule+0x16ea/0x4cd0 [ 266.064499][ C0] ? process_scheduled_works+0x1701/0x17a0 [ 266.064529][ C0] ? schedule+0x165/0x360 [ 266.064548][ C0] ? __pfx___schedule+0x10/0x10 [ 266.064572][ C0] ? schedule+0x91/0x360 [ 266.064590][ C0] schedule+0x165/0x360 [ 266.064607][ C0] worker_thread+0xa82/0xda0 [ 266.064625][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 266.064646][ C0] ? __kthread_parkme+0x7b/0x200 [ 266.064668][ C0] kthread+0x70e/0x8a0 [ 266.064689][ C0] ? __pfx_worker_thread+0x10/0x10 [ 266.064705][ C0] ? __pfx_kthread+0x10/0x10 [ 266.064725][ C0] ? __pfx_kthread+0x10/0x10 [ 266.064744][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 266.064760][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.064778][ C0] ? __pfx_kthread+0x10/0x10 [ 266.064797][ C0] ret_from_fork+0x4b/0x80 [ 266.064814][ C0] ? __pfx_kthread+0x10/0x10 [ 266.064833][ C0] ret_from_fork_asm+0x1a/0x30 [ 266.064857][ C0] [ 266.064864][ C0] [ 266.446986][ C0] Allocated by task 11922: [ 266.451407][ C0] kasan_save_track+0x3e/0x80 [ 266.456068][ C0] __kasan_kmalloc+0x93/0xb0 [ 266.460638][ C0] __kmalloc_noprof+0x27a/0x4f0 [ 266.465481][ C0] sock_kmalloc+0xd6/0x160 [ 266.469877][ C0] ____sys_sendmsg+0x1b5/0x830 [ 266.474630][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 266.479543][ C0] __sys_sendmmsg+0x227/0x430 [ 266.484210][ C0] __x64_sys_sendmmsg+0xa0/0xc0 [ 266.489063][ C0] do_syscall_64+0xf6/0x210 [ 266.493547][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.499452][ C0] [ 266.501757][ C0] Freed by task 11922: [ 266.505799][ C0] kasan_save_track+0x3e/0x80 [ 266.510464][ C0] kasan_save_free_info+0x46/0x50 [ 266.515468][ C0] __kasan_slab_free+0x62/0x70 [ 266.520209][ C0] kfree+0x193/0x440 [ 266.524129][ C0] sock_kfree_s+0x28/0x60 [ 266.528461][ C0] ____sys_sendmsg+0x66a/0x830 [ 266.533203][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 266.537857][ C0] __sys_sendmmsg+0x227/0x430 [ 266.542511][ C0] __x64_sys_sendmmsg+0xa0/0xc0 [ 266.547342][ C0] do_syscall_64+0xf6/0x210 [ 266.551827][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.557698][ C0] [ 266.559999][ C0] The buggy address belongs to the object at ffff888020f69800 [ 266.559999][ C0] which belongs to the cache kmalloc-512 of size 512 [ 266.574214][ C0] The buggy address is located 42 bytes inside of [ 266.574214][ C0] freed 512-byte region [ffff888020f69800, ffff888020f69a00) [ 266.587904][ C0] [ 266.590211][ C0] The buggy address belongs to the physical page: [ 266.596604][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20f68 [ 266.605353][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 266.613841][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 266.621369][ C0] page_type: f5(slab) [ 266.625333][ C0] raw: 00fff00000000040 ffff88801a041c80 ffffea000094e600 dead000000000002 [ 266.633894][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 266.642545][ C0] head: 00fff00000000040 ffff88801a041c80 ffffea000094e600 dead000000000002 [ 266.651196][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 266.659846][ C0] head: 00fff00000000002 ffffea000083da01 00000000ffffffff 00000000ffffffff [ 266.668494][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 266.677141][ C0] page dumped because: kasan: bad access detected [ 266.683541][ C0] page_owner tracks the page as allocated [ 266.689240][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5827, tgid 5827 (syz-executor), ts 76133446925, free_ts 76029635208 [ 266.710581][ C0] post_alloc_hook+0x1d8/0x230 [ 266.715333][ C0] get_page_from_freelist+0x21ce/0x22b0 [ 266.720862][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 266.726647][ C0] alloc_pages_mpol+0x232/0x4a0 [ 266.731474][ C0] allocate_slab+0x8a/0x3b0 [ 266.735952][ C0] ___slab_alloc+0xbfc/0x1480 [ 266.740607][ C0] __kmalloc_cache_noprof+0x296/0x3d0 [ 266.745952][ C0] device_add+0xbe/0xb50 [ 266.750174][ C0] device_create+0x25b/0x2f0 [ 266.754744][ C0] macvtap_device_event+0x2f1/0x410 [ 266.759931][ C0] notifier_call_chain+0x1b3/0x3e0 [ 266.765017][ C0] register_netdevice+0x1608/0x1af0 [ 266.770192][ C0] macvlan_common_newlink+0x120a/0x1980 [ 266.775717][ C0] macvtap_newlink+0x13c/0x1b0 [ 266.780474][ C0] rtnl_newlink_create+0x305/0xaf0 [ 266.785580][ C0] rtnl_newlink+0x16d6/0x1c70 [ 266.790248][ C0] page last free pid 5828 tgid 5828 stack trace: [ 266.796545][ C0] __free_frozen_pages+0xb0e/0xcd0 [ 266.801651][ C0] __slab_free+0x326/0x400 [ 266.806099][ C0] qlist_free_all+0x9a/0x140 [ 266.810671][ C0] kasan_quarantine_reduce+0x148/0x160 [ 266.816107][ C0] __kasan_slab_alloc+0x22/0x80 [ 266.820934][ C0] __kmalloc_cache_noprof+0x1be/0x3d0 [ 266.826282][ C0] netdevice_event+0x3a1/0x8a0 [ 266.831032][ C0] notifier_call_chain+0x1b3/0x3e0 [ 266.836120][ C0] __netdev_upper_dev_link+0x3c3/0x590 [ 266.841569][ C0] netdev_upper_dev_link+0x9d/0xf0 [ 266.846747][ C0] macvlan_common_newlink+0x124a/0x1980 [ 266.852290][ C0] rtnl_newlink_create+0x305/0xaf0 [ 266.857389][ C0] rtnl_newlink+0x16d6/0x1c70 [ 266.862044][ C0] rtnetlink_rcv_msg+0x7cc/0xb70 [ 266.867044][ C0] netlink_rcv_skb+0x219/0x490 [ 266.871783][ C0] netlink_unicast+0x758/0x8d0 [ 266.876528][ C0] [ 266.878866][ C0] Memory state around the buggy address: [ 266.884476][ C0] ffff888020f69700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 266.892518][ C0] ffff888020f69780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 266.900560][ C0] >ffff888020f69800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.908620][ C0] ^ [ 266.913969][ C0] ffff888020f69880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.922010][ C0] ffff888020f69900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.930048][ C0] ================================================================== [ 266.938236][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 266.945447][ C0] CPU: 0 UID: 0 PID: 7937 Comm: kworker/u8:10 Not tainted 6.15.0-rc4-syzkaller-00152-g4397684a292a #0 PREEMPT(full) [ 266.957708][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 266.967777][ C0] Workqueue: 0x0 (gid-cache-wq) [ 266.972725][ C0] Call Trace: [ 266.976018][ C0] [ 266.978860][ C0] dump_stack_lvl+0x99/0x250 [ 266.983447][ C0] ? __asan_memcpy+0x40/0x70 [ 266.988027][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.993227][ C0] ? __pfx__printk+0x10/0x10 [ 266.997829][ C0] panic+0x2db/0x790 [ 267.001736][ C0] ? __pfx_panic+0x10/0x10 [ 267.006149][ C0] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 267.012037][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 267.017923][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 267.024245][ C0] ? print_memory_metadata+0x314/0x400 [ 267.029703][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 267.034811][ C0] check_panic_on_warn+0x89/0xb0 [ 267.039740][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 267.044841][ C0] end_report+0x78/0x160 [ 267.049075][ C0] kasan_report+0x129/0x150 [ 267.053571][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 267.058680][ C0] rose_timer_expiry+0x471/0x4b0 [ 267.063612][ C0] call_timer_fn+0x17b/0x5f0 [ 267.068241][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 267.073693][ C0] ? call_timer_fn+0xbe/0x5f0 [ 267.078362][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 267.083470][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 267.088659][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.093856][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 267.099310][ C0] __run_timer_base+0x61a/0x860 [ 267.104158][ C0] ? ktime_get+0x3e/0x1f0 [ 267.108479][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 267.113842][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 267.120081][ C0] run_timer_softirq+0xb7/0x180 [ 267.124925][ C0] handle_softirqs+0x283/0x870 [ 267.129684][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 267.134436][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 267.139717][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 267.144904][ C0] __irq_exit_rcu+0xca/0x1f0 [ 267.149500][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 267.154706][ C0] irq_exit_rcu+0x9/0x30 [ 267.158948][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 267.164585][ C0] [ 267.167523][ C0] [ 267.170445][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 267.176418][ C0] RIP: 0010:finish_task_switch+0x26b/0x950 [ 267.182228][ C0] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 7f 92 c6 09 e8 6a 66 35 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 267.201846][ C0] RSP: 0018:ffffc90003b2fa58 EFLAGS: 00000282 [ 267.207945][ C0] RAX: a7b1a7ff3dd3c200 RBX: 0000000000000000 RCX: a7b1a7ff3dd3c200 [ 267.215921][ C0] RDX: 0000000000000000 RSI: ffffffff8d749ecb RDI: ffffffff8bc1cde0 [ 267.223889][ C0] RBP: ffffc90003b2fab0 R08: ffffffff8f7ed377 R09: 1ffffffff1efda6e [ 267.231855][ C0] R10: dffffc0000000000 R11: fffffbfff1efda6f R12: ffff888077683c00 [ 267.239818][ C0] R13: dffffc0000000000 R14: ffffffff8dc95240 R15: ffff8880b883a6d8 [ 267.247791][ C0] ? finish_task_switch+0x266/0x950 [ 267.252987][ C0] __schedule+0x16ea/0x4cd0 [ 267.257489][ C0] ? process_scheduled_works+0x1701/0x17a0 [ 267.263308][ C0] ? schedule+0x165/0x360 [ 267.267634][ C0] ? __pfx___schedule+0x10/0x10 [ 267.272482][ C0] ? schedule+0x91/0x360 [ 267.276719][ C0] schedule+0x165/0x360 [ 267.280866][ C0] worker_thread+0xa82/0xda0 [ 267.285447][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 267.291771][ C0] ? __kthread_parkme+0x7b/0x200 [ 267.296699][ C0] kthread+0x70e/0x8a0 [ 267.300765][ C0] ? __pfx_worker_thread+0x10/0x10 [ 267.305863][ C0] ? __pfx_kthread+0x10/0x10 [ 267.310442][ C0] ? __pfx_kthread+0x10/0x10 [ 267.315021][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 267.320211][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.325403][ C0] ? __pfx_kthread+0x10/0x10 [ 267.329982][ C0] ret_from_fork+0x4b/0x80 [ 267.334386][ C0] ? __pfx_kthread+0x10/0x10 [ 267.338968][ C0] ret_from_fork_asm+0x1a/0x30 [ 267.343726][ C0] [ 267.346982][ C0] Kernel Offset: disabled [ 267.351298][ C0] Rebooting in 86400 seconds..