last executing test programs: 2.366499076s ago: executing program 0 (id=196): r0 = socket(0x28, 0x1, 0x0) getsockopt$nfc_llcp(r0, 0x28, 0x0, 0xfffffffffffffffe, 0x20000000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x1000, 0x10}, &(0x7f00000001c0)=0xc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000000)={r1, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000200)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r3, 0x2, 0x9}, 0x8) 2.175897022s ago: executing program 0 (id=200): recvmmsg(0xffffffffffffffff, &(0x7f0000001600), 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="6400000015000100000000000000000002000000", @ANYRES32=r2, @ANYBLOB="08000900030000001400030076657468300000000000000001"], 0x64}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, @local}, @RTA_SRC={0x8, 0x2, @rand_addr=0x64010101}, @RTA_IIF={0x8, 0x3, r5}]}, 0x34}}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x8912, &(0x7f0000000100)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_MSS={0x6}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4}}}, 0x90) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_FLAGS_EXT={0x8, 0x7}]}, 0x24}}, 0x0) sendto$inet6(r10, &(0x7f0000000380)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xe) shutdown(r10, 0x1) 1.961332555s ago: executing program 2 (id=201): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x500, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) 1.789614283s ago: executing program 2 (id=205): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x4, 0x100, 0x7ffffffe, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000180)="98d653f061f93a147c083b07cc907b26b446550230cff12ed7f7affdc91c8faec4e6f52512ba189896340866b7fc1b43688b4bbcc90fac03dd0d99d3d9feaeb2fdc6c277eaeb240d252efe221eaa7e2ecb731b30fc5e9d7ebffd2f9d5e2ee3cbd9c932bffd507842b134e6c8f72a74f0800293e5483ec4c5cf3b7e8a860a6ff7c9cb73e8ff7e3edfddbbd2b78bb4e2df40", &(0x7f0000000000)=@buf="7e869d31f5057e7a70632aabb612b39d44b26228d61ea6e551bb288b9182", 0x1}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f0000000780)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xd2, &(0x7f0000000040)=""/210}, 0x90) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x6b, 0x11, 0x32}]}, 0x0}, 0x90) unshare(0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r7, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @remote}, &(0x7f0000000400)=0xc) sendmsg$nl_xfrm(r8, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)=@newae={0x18c, 0x1e, 0x400, 0x70bd2d, 0x25dfdbff, {{@in=@dev={0xac, 0x14, 0x14, 0x26}, 0x4d2, 0x2, 0x3c}, @in=@loopback, 0x401}, [@algo_auth_trunc={0xd4, 0x14, {{'ghash-ce\x00'}, 0x440, 0x0, "d594f0655a2dff8e3e3dd9664bd8d789145072646249149527f22b5ada86a32764c21595044730f9eddde8f18eb3ad075c5ca8a5ab8f6e6e5ecff20bea15b0c6d3d3440f385371b15c20c759ec88e0e1da13773559173d9dea9ed1afb6a18df034d7de999b75116ec3313c90e5687a2c474d565349ee68d4cfadaf28330210e9899719cb34dab753"}}, @replay_esn_val={0x34, 0x17, {0x6, 0x70bd2a, 0x70bd28, 0x70bd2b, 0x70bd29, 0x4, [0x3, 0xe, 0xf4, 0x2566, 0x40, 0x3bb]}}, @srcaddr={0x14, 0xd, @in=@multicast1}, @offload={0xc, 0x1c, {r9, 0x3}}, @lifetime_val={0x24, 0x9, {0x3, 0x3, 0x9, 0x6}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4004}, 0x20004010) 1.752344076s ago: executing program 0 (id=206): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) getpid() setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f00000001c0)={0x1, 0x1, 0x6, 0x8000, @vifc_lcl_ifindex=r2, @rand_addr=0x64010101}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmmsg(r4, &(0x7f00000061c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="1000000000000000000000000d00000018000000000000001701000002"], 0x28}}], 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) socket$inet6(0xa, 0x2, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r8, 0x0, 0x3, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000180), 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private2, 0xfffffffd}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) syz_emit_ethernet(0x6a, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c200000000000000000008004500005c000000000011907800000000e000000100004e20004890780300000000000000250389e0369c10bd7e74749b5d0af8b4df9f38314635b4704b4d8cfe98459911c3b3e1f78045c9e5a31d7c735f270ec7a76bfe34ebedd3bc1bde11d264ef70dbf9dfa369367385c2530b48364d0beb9b36a74112a55f4aaf980af41cf427e46e0357a11943cbb54d6c8f"], 0x0) 1.723670179s ago: executing program 3 (id=207): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x2000041) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_DREG={0x8}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(r3, 0x0, 0x0) syz_emit_ethernet(0x1bb, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_remove_blocks\x00', r5}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.651841734s ago: executing program 1 (id=209): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0xd00, &(0x7f0000001ac0)=[{&(0x7f0000003080)={0x298, 0x23, 0x1, 0x0, 0x0, "", [@nested={0x287, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="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"]}]}, 0x298}], 0x1}, 0x0) 1.530835323s ago: executing program 2 (id=210): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xb}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4c004) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x201, 0xffffff7f, 0x1000000, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001a00010000000000000000000a000000000000000000000008001900", @ANYRES32=0x0, @ANYBLOB="fc93747340de3da6ec6a3ea36203c9cbf73392fb2e405bf7d9917ee9600db8c90f8232b9c1069669b914525f0e076dfc7bd027d0aed1ff942435eea595a200040000000000000ae251389c10a770978312", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0800100000000000"], 0x3c}}, 0x0) 1.487495427s ago: executing program 4 (id=211): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x14, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/pid_for_children\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid\x00') socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b00)={&(0x7f0000000400)={0xdc, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1f02ffff0000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r3], 0x40}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='swiotlb_bounced\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.435800909s ago: executing program 1 (id=212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x110, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x68, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}]}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6}]}, @NFCTH_TUPLE={0x78, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}]}, 0x110}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000008000000000000000200000d000000000000000000000000000000611e00"], 0x0, 0x3c}, 0x20) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "1296de93d42abc942a6fcff4a23adae0c2631cfb9500a8620adf1c360b8f47dce7c2b4bcecc57bc566e09f34ec744e1d981896bc465305253f59ea34aa23152317847405bd362bd5386481795d0ce05c0136607206492a7b73c35ccdf2d231ea2c288fcd61e5edd1b9a44ee645bcb16ad18aa4031e32b85059c9f27764c0fc113d5e02bc6d37e484537f225b64d0b4c5922b9a9a96e927973556251495945bb9254acea71793a6547fdbe626b61ff774b328ffab05567144f750b3ac185f43a0b904e2c5843a93dbca340c5bfe586abb0a0bdff03d367a5836a3dd0062d94550de352d712167b87b907f50e8884dfb47f8b586b25cb8c15eeebca606d82a44b4e4efeae61f6d4aff2ad6ed6e66439884905619707bf24cd18527b88e3fe5237bcb9ea28ca7410d1ed1a4ad410871da87b75bd880ed100d53ebcac789a647ecf7c70bda96f8c4e128a5183c4fb6e93bd4d7187dcc43bfb7540602050b28f2d2745c3353a81dd60920bfc2100bccde902f1cc5e1b9cc354f9c3936db7b13cb2ca3b5de486cb7af0824a20a0adf1dd9452bba5780eebce1a5299aaa66806475b54c443f730636e15fec969f06dc2662115f842123b4a7f05fb923bff4d5a9a0d3611d8380f5c189492c0c32697851698882e7cac74617cf725bd5ef186fdfa0d3ee91afcbc07d22d7f3d59ddc41cc62b5a22c11f652ffa6272cceefdc3fde005251740c8e023965f6a6325be94603c0564052a254e5adc05c8a335d3cc4c364ce4aa05ae2bf39b02630d39abe1026e8f2493c45278ec983e27689eeed4849c58d8b451263f015c7e9b41727b8b920d7fc422ef5804bb4e0492588fa1c5a20bd964e6ab5ac52f6ff54e2c3d6f6a84502d395d8792fe9a9c5391300dbf91c9a13ba77f2d181ce7e47fab67cd96bc8f062e9c5bb4b9b8fbfbdd5487e043eb50232fd5db02e5c3d24e7b6de8d1c24c38c44d1b783a4b17950615dd3aff36df8af574d3e8714ee859995c2195d72a53a925a0ba5ebc1879f287ad9a2f5feaacd394d7bc5e0ea87347efb54c5dbf74b7d3f936566192b4a62aaa4ba0c4afab271d5281cdaecfbb80ee6a6faa707b516935fd675067a73b89458aba9eef6e60802a546610f443467d81f419b26bf3fb83b1d2e20d855804a1ff5b4085c94b19b20ea6c38d07f6ab749f581fe73f5dad67696440c8541cbc5c0a9d625d870bd2d91e3658be13118dba0b8ffdf74fc7569839eb94127a48425274443d1d90a7c64368d697d9e347a05d62ab7e30ab7ad1d018e759a72d2ca516fde8c9ae5814363110fdd59b1d095e29353a0e57b60badcf59e3e07d4752dfa9ffddc3bbde093274cb65fb92eead74dce5059811c95c0ff3ad73f87690369cdbabae831fb4f39edb906bffdc084342d3e4e309e7bad00dec7a77f79351d60d843152424ee6f4178b0f2f5e0a9a58d3280440a9050ac51d7d8d3e787a0fc10af60ff465f1d66fc8bbf3332389289fa69791da2d7b620605f596b2ec949da0b7b7ea8929d7016d7af98dbf01db1882141c842cca7ddfab0f268839f0f65e276bdb7ef1cadcd62d219b576e8968091cfceff259f7c58335a0430523aa5de8385fe8960148913d1393a2de76c04e28186435fd86a73a474c88d8b1e80b3bae45b08ce590d2e6df8a5f667c61b01df8436ba6636c840b10c3afd83e90c1f87a651e097749dc66d757d14fdb2358c72892180f09f51beff93d73b6d4f8af491a719c0f794896d82f88edd994d92b6793b85374b01b49faed5bb01de1cef84b80c1fc3edfc24791d08ecb6e1faa4dc2964799efd2acc02b20b930505f4c4ac634e570682e1a1dd40441a4a863020250eb4ea9648f5c15fbc904c361e193ed82353109992f4f744ccb4cb2d98a7e7f3aa336140fa7afc5778686154ef2b415636ddd283eb6dfcd9f2d8ac21c8909f7afc609a85a35de9c3b5837865788cebef10f44a6426aacf8e733e3c5caa77b34ae912eb5e1ecbfb3b49528a74575b08455a63cba63913e0c747550fe877f8575132249ca4fe5058802447cf1b8cabd2a042ab4af7643d5ba0b16f3acbe1e875ee50a082f199965411c2e3de00b2b7f45c30f6af49c434702bc97bf70dc9d6cd28290cacf0ebae7793253016906b0fe80489438df416d89c9a20f238cc11bc75a1554eefb3178ee19fdad7e4e1551f017852565e199bda6589e34532e0bc64aef3973a9b2556dc63bed600435421c5b88a297882a5513127bdaff57ec63cdd17ff5c58814fe8c39373f1cd9392d418201d100b0ca4561e9febc6bae01147e40beafcc41053c7f5fd4d8543af85f4b01740760d10fb84eabc072ab10e3898abc47e790b5ec382c88185aed39e96c7d841fc24f58d6906b0686c51200122504878bacd7ba493e905bbbec1f748776c1607bc33a9e153941afd25e2f6618491754153321279491c03bab4d40b746b1e1b8d5371d69f0b51ae2067e3fc1d0be81fbbd6ddb73a0e212fa7149f9108832c4989870d84157b49f8dde58cca267d568610c789c0fef42ade184ea75aefbcb51ddbfd48a62f8627b5544f1557ece2938aab730274d64fb8ed99651cbb81a02f46593f9ab1fa93bae049e6b701dedda2b37c32c5aeafcea706d0d5926af65ce22c62cf0b7b1c6f4c0d3cb07bdd83748d79f449818aa90ace222151f65ac0e6060c906e3853ca933569d33e91a08d35b615d526f561a358f14549799736e82d51d783e8d189a5f0b8790d4e3a7a01373dafcbeb30863588e40307e1d4b375f04e919faf97a0fe9000e5dfad976e1911070c91041cce2e85b07ddeb3a95b5cd9117d6452477c76a0f4eb922df210671ee2d26577665d34bdd64de969b96e707567f0641539a95e732202f6ef69af7a7f7b839bbcaca92913cba078012c5ce5b32929275273d3b76231867ecabee126d0a42b0b2c9eca98c81d7bc71732f4579f9987e6dc6ab1bd9b83281862e114c84a76fc6f824c47a1e54131736e16ce9249ec8ab8067553a2c5a643a0f1c7ca37081958cdb81efb2e34fe2dad168760bfd8938ef147a0dfa345e434ac0496293b7c4ab5ff28a9d479216f9828463fd4f4aefb6ea0ff9e7706f58a1803f86e16fd240b68d6e04053d98eb34becff1ccd0dd54f5eccdcf63d2a8ba683efce9cb5c5bdd5597b9b73a8f3c686fe3265f146f30ec11f4c07112cc9b36f6d850864b893f585d5fcdd5da640f8697570400191a62ff623cf8a6df4c73b6d3eb93b8abb90c1bedfab3190de3d4779dec1b7e7b226e696833fce668efdbd2ec9c85bf88ee176286b7c5a64ed1dd466ec3a52d5324c45eb327e7d033dd5e9763de2aa14500040be545ec494a4c0dfca2b3db7f3ea98f49400847c0761c2ebde1f1700383c4ce850fc5241c77447cda4be92474cb786ed25f455155f4d8156e9537dc26d744253623f02f4bb772f5c327e99c9bf18c96bc3a3f59ad9a3673301b87ee0481db1966278a066ad4e45aefb5aee95636573df516d38e25b5dc3259bf0fb68dd9f419a4f44a84d67a047f9aec7d4e5295c9bccc966c8b4ef3e3b2830593dc4057e7caa2397454169b585baf8b9e61d3f4de5e5cc09bdcd670396f97176c4abbb02c8e4dec20f0010a37cab3f75208defffacdf525d8f42d28f6e3e2d598c582500c32ef327885c9c9514ae3b0c7d71b65467f2f48dbdc4d7da8d11bff81a2d633d502f1751aae4da385ebb3760a79c1885c66731226a986df218e3e1c11ba7666e6914782fbd312630748e8d5621445c1df07511f74fc5147ed678542288502972872b183121f4e0f7159fd1b16aafb700000001000000017912b2854ae07bdd88624068322641e17a89a965752795aeda669e201a7e16b95014ebf19c050000006d8c371f2656dd8a91c153480683c89c78d528408b492c0ae52c2e5acc6b0e65d8e681c98e7289685faac1589f7c98f92d7818c396e4b870aa0fd3fbb155333c72f04ea2e9fe2141914a445e76e078c8d81843aa9e053d3a2f222e2e43bc43b4bd8139cdf902eac556f43c60be7d9f190f844d3f2f99896548841bc014e1294a4aecc7f06b1b6a18d3f68730391bbf096c4653e6db17d8a18369ebf09c3157a9468447dc54fb77aa3a92c1a27802598d550098b8fe24bf24eda25855b11ad23d9418e08e52b3b231533d658f755e8275b7735e96af2532b5e18cddb45b7f00b706d130390db0116658dddec202d465757df741ecaf2da2a46567c97c765fd1fac2369a735b458b001eb8aa83e3986de78793818d3585a35fe07b14d00b74f70befdb142a3447c05b6617aac8238c83d8d09c8a76636715f09b61634038e7994a9090f0b92a4433fd1ea56ac19114baa61bc35e8685455be4672d3a40c65380ba62275debf706a68534ddea03146d18de8187e80182e84026ee824e7a24c3fc1cc3321c9381994f0e20413d01de532e0f2f16f585bed31e0011456d4cdcf41d87ee4a0862e6ebba544db3de0b7e8b31038898e1d61f268ae5e867eb4dfb9e031cbb482820149ab9d4d228aed5c7686e393089a69e52298e404312357fbdd89bd2a4cfc4087b8a5d2d6218ed84507404c61f37f49ad27aa329493a9ef96a6943cf89f527ff1ed65d1732f3beeac0d37dc16fd42eea3870c4627972db33d30c0af5129fc5a282557db9feb22c7e80c23a0be7ca253197dac0d30eeb618b430114e61938ceb0b744e29f9a01d78ad5e6c100e8b1ab6fd0e39447e90f41b678f1ae283353e384dd62d0eda5ba7641c48ff0f98f8b67e93424108bb16238b76e22d2f1c4025076730b50a0d0afdeedf6bdbd2a94dcf6b2783909f91ef33dee561290a0ff7eb9df83e015b04b56a3e32c54bcf5a031f5a7682426e9777be122c7c140ee85c166dad909ece1da25c8aacb9ab812a1098858b99d000158eee9c3b7f0b3b926f77a12babd416237cb436f9a7ce20718f7b5a01f542cd1964d0989b6a71e4a4b661348954925debc0bdc17fcc3f698cf21ad2523ddfa4bb98b486f04921111da5063809eeba2179fde0251915682c268703675c7b4cb5e45dc6688fe817a40dd170332e1a84118b1ecae6460a87792de5a257ddd5ae94807637d4deaa7e18436832406b45be4b2009393254ee6d836bcb4e1180a81c2b068b98b81b5bc9adfd4a4b69c30f58077a25c2a5c43f2fba28d4e79b4de89fcec0234ef17d590074eba859520f6ab37279f89b5ce0311b9ac645e043e24dfc47cdd85966a37ad0e1f1cfd1dedad0ea95bc7627ef58fe0a0c2756dc3e8c31a30da67289fec6dc7b67c45bd9d09f109ac214295f0c817e6ffe2cf1c7c38e6d8bd53a7a4171f64b804d152215a9c8cdaa8798475588715e7aba6e32d3d326f202f0e46a759d7b6ffe0b2e1f842c2c0dcb1cd7468610fd873ccaa2d2b00"}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=@mpls_getroute={0x30, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}, @RTA_DST={0x8, 0x1, {0x1}}]}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f00000013c0)={&(0x7f0000001040), 0xc, &(0x7f0000001380)={&(0x7f0000001080)={0x2d8, r5, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x45}}}}, [@NL80211_ATTR_IE={0x25, 0x2a, [@prep={0x83, 0x1f, {{}, 0xfa, 0x40, @device_a, 0x57, @void, 0x6, 0x0, @device_b, 0x91}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_IE={0x24f, 0x2a, [@channel_switch={0x25, 0x3, {0x2, 0x38, 0x9}}, @rann={0x7e, 0x15, {{0x1, 0x16}, 0x0, 0xff, @device_b, 0x81, 0x1000, 0x5}}, @random_vendor={0xdd, 0x6d, "9c52e281f79a9bf5d9ad8d6cedf3562d341eae5bd4a37d28e7247f2171717a6369535df5f614f5604b23ff61ea53b89b116864d97944634db66786cf37e700f8276f490f8378293bc859f7171408d1ed71c6366e84c990bf0c0d076218bab65d63faddbd6d738aaaf24cc917d9"}, @random_vendor={0xdd, 0x96, "35f6f80d9daf5f91aea4d8c34944fd91d8b404c0552636c2cb513e5de27323fb000e8f2c74e0f26cb2f6395d5273f1d273f5c386137eabf4de232429c7d35509b907f3ebcadcf309dfef86c75f4d800a72971334cc9920af4bd365d9a1d4c4db3c5895a1ba4fd08d9bef48e80187d032f7f0e6182ec748b3470c575173e5b4ea5d9b186ab4fd9a327a61a28a842a0e010647092190e4"}, @cf={0x4, 0x6, {0xff, 0x1, 0x3f}}, @challenge={0x10, 0x1, 0x70}, @erp={0x2a, 0x1, {0x1}}, @mic={0x8c, 0x18, {0xf72, "e488d7d09db2", @long="d4d25c4ae557fab974cfca56c1e88208"}}, @cf={0x4, 0x6, {0x3, 0x6, 0x1, 0x645}}, @fast_bss_trans={0x37, 0xf6, {0x5, 0x7, "4d926c5a845113e5b576df0616b71733", "679eb7a7b7f7279d1841df8d831c103157c1d45113e31ed778e05fe0cd702b26", "34304c4bc7ba07740aca820d42ef10cad53147b086b4545ff8568b0cd3fe2f8d", [{0x1, 0x3, "bc5e67"}, {0x4, 0x25, "f6ecb6bf36a828c4f1ae343c67c2331fb77e121052ebba6a1311ad806a5c16055e5d5c8c44"}, {0x1, 0x27, "452b1b3085f68f38df56493e781c0a73c8ee15d93fe38014433ed9932a3cef40cbe285908b6969"}, {0x1, 0x1a, "5fb30105458f745014b179f748febf0a759a4c1b0a051ebcc561"}, {0x4, 0x10, "bf2f6f75eef5568e12a2124901dbf4ee"}, {0x2, 0xd, "63682768f0626b4c7d4475af7c"}, {0x4, 0x10, "6e7fb97a5f606896de170107aa15427c"}]}}]}, @NL80211_ATTR_IE={0x37, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x17}, 0x1, 0x5, @device_a, 0x1000, 0x7, 0x5255}}, @ht={0x2d, 0x1a, {0x8000, 0x3, 0x6, 0x0, {0x6, 0x8, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x2}, 0x400, 0x91, 0x1}}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) preadv(r2, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) 1.415383872s ago: executing program 0 (id=213): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0xf, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044081}, 0x20004010) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000200)={0x7, 0x7, 0x1}, &(0x7f0000000240)=0x28) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e22, @multicast1}, 0x10) r4 = accept(r2, &(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x80) setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f0000000380)=0x40, 0x4) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000400)={[{0x2d, 'io'}, {0x2b, 'freezer'}, {0x2d, 'net_prio'}, {0x2d, 'memory'}, {0x2d, 'cpu'}, {0x2b, 'freezer'}, {0x2d, 'cpuset'}, {0x2d, 'rdma'}, {0x2b, 'rlimit'}, {0x2d, 'net_prio'}]}, 0x4d) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000480)={0xffffffffffffffff, 0x9, 0x8}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r4) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xf8, r7, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x93}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x225}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa2f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xdf90}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7bed}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x47a}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}]}, 0xf8}}, 0x850) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e21, 0x6, @mcast2, 0x8}}, 0x6, 0x6, 0xb, 0x1, 0x6, 0x0, 0x8b}, &(0x7f0000000780)=0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000007c0)={r8, @in={{0x2, 0x4e22, @remote}}, 0x9, 0x8000, 0x1, 0x1, 0x10, 0x4, 0x9}, 0x9c) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r9, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040050}, 0x40040) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r6) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r10, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xffffffe5}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xe29}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4880) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r11, 0x6, 0x1a, &(0x7f0000000b40)="04f4afa2877921", 0x7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={r6, 0x58, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000d00)={'gre0\x00', &(0x7f0000000c40)={'gre0\x00', r12, 0x80, 0x80, 0x9, 0x8, {{0x1c, 0x4, 0x2, 0x8, 0x70, 0x68, 0x0, 0x1, 0x4, 0x0, @loopback, @loopback, {[@rr={0x7, 0xf, 0x93, [@dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010101, @loopback]}, @lsrr={0x83, 0x13, 0xa5, [@dev={0xac, 0x14, 0x14, 0x13}, @broadcast, @remote, @local]}, @ssrr={0x89, 0x13, 0xef, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x5, 0x0}]}, @noop, @end, @timestamp_addr={0x44, 0x24, 0xcf, 0x1, 0xe, [{@private=0xa010101}, {@multicast1, 0xcd8}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x101}, {@multicast1, 0xe}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000d40)) clock_gettime(0x0, &(0x7f0000000dc0)={0x0, 0x0}) ppoll(&(0x7f0000000d80)=[{r0, 0x880}], 0x1, &(0x7f0000000e00)={r13, r14+10000000}, &(0x7f0000000e40)={[0xbf]}, 0x8) socket$tipc(0x1e, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)=@ipv6_newnexthop={0x4c, 0x68, 0x300, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x4}, [@NHA_GROUP_TYPE={0x6}, @NHA_ID={0x8}, @NHA_GATEWAY={0x14, 0x6, @ip4=@private=0xa010100}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP_TYPE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000080) 1.335396086s ago: executing program 3 (id=214): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x81000000}, 0x0) 1.274772105s ago: executing program 2 (id=215): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x7, 0x2}, 0x48) unshare(0x6020400) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff21, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x6}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac-aes-neon\x00'}, 0x58) syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa008100000086dd602e5cea00403c0020010000000000000000000000000002ff0200000000000000000000000000010004c9"], 0x0) 1.274122165s ago: executing program 4 (id=216): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000010c0)={0x130, r2, 0x203, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x11c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a75}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeba}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x53e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x56d5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x65e907e2}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.197471461s ago: executing program 1 (id=217): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r2 = socket(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) pipe(0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6a) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYRES32=r1], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x34}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r3, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x20020480) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x7800, 0x20, 0xe, 0x9, {{0xd, 0x4, 0x3, 0x6, 0x34, 0x66, 0x0, 0x6, 0x4, 0x0, @multicast2, @broadcast, {[@timestamp={0x44, 0x20, 0x86, 0x0, 0x4, [0xfffffffc, 0x9, 0x7fffffff, 0x1, 0x81, 0x7, 0x9]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000500)=@framed={{0x18, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f0000000300)='syzkaller\x00', 0x8, 0xe5, &(0x7f0000000340)=""/229, 0x0, 0x0, '\x00', r5}, 0x90) 1.023874733s ago: executing program 4 (id=218): socket(0x40000000015, 0x5, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) 1.023721816s ago: executing program 3 (id=219): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000000}, 0x0) 914.790688ms ago: executing program 1 (id=220): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000000c0), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x8, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x4, 0x1, 0x9, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 912.370857ms ago: executing program 4 (id=221): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="58000e001200192340834b80040d8c5610067f0200ff000005000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000a000200040010000800034004000000", 0x58}], 0x1) 783.993116ms ago: executing program 3 (id=222): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001100010000000000000000000700a888", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c000680080004"], 0x34}}, 0x0) 783.625848ms ago: executing program 2 (id=223): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2a, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000015"], 0x188}}, 0x600000000000000) 769.093757ms ago: executing program 4 (id=224): syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea004889ff20010000000000000000000400000002ff020000000000000000000000000001000400"], 0x0) 734.234839ms ago: executing program 1 (id=225): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x11, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000000000010000ac"], 0x28}}], 0x1, 0x0) 599.639987ms ago: executing program 3 (id=226): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000480)) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32, @ANYBLOB="000000fcffffff00b702000014000000b703000085429f003956d73f352cf7c1456cd6000000008500000083000000bf090000000000005509010000", @ANYRES32, @ANYBLOB="0000000009000000185a00000200000000000000000000008520000004000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xc, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000400)=[{0x5, 0x2, 0x3, 0x2}, {0x2, 0x4, 0xa, 0x2}, {0x4, 0x4, 0x7, 0xc}, {0x5, 0x2, 0x5, 0xb}, {0x4, 0x3, 0x2, 0xb}, {0x2, 0x4, 0xd, 0x6}], 0x10, 0xa18}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0x1, 0xec, &(0x7f0000000640)='%', &(0x7f0000000680)=""/236, 0x1, 0x0, 0xd5, 0x93, &(0x7f0000000780)="64b3dc6023c2a453cc4fe2727644aeeda79fe36490f96769ecf4c96ce4d61fcdcb0d355cc3a1e7a9a2fa95e0572bbc6e0a39eb664ebfba5459abd78f7b18cfaf86a592d9c2025e54227688fa67278bab298f15e862c8809bf4e7de58e735973ad3b8c43ed56b306981498d438f80e4a6b2d46b2f06378c949c778c93e9be4612b7a5b62fc4e25cd46cfe5589e821f43c49cb3df480984bd77670210c4918eb87e5f088f6d33d7462413a10531f80f918149afeedf4de4b9b3e5d2c958af0c95dc91b1a14b7e904140a32f5d0c52d2dfd755098b1d8", &(0x7f0000000880)="b5bfdc16113440bac4d1588df8494f0de9d2796eb23da246344a7a8256d9f8d8b955f2e655b0f4135bc2c3cc486fa41abaff515ed1d1d1f71a10a40d737273b93938696f7ea215f0c3de29693dc3833235e141d58e6a19b838ed69335a404ea3f0a79de9c23c1e777892c2b766f633db3da53de885e2c297247b53b46510c0d8de7fdfbf4d1f3efbde30469ea1503be26a019b", 0x3, 0x0, 0x6}, 0x50) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x24, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010003000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x20, r4, 0x301, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x6}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000000), &(0x7f0000000200), 0x1, r6}, 0x38) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x2, 0x3, 0x2, 0x4}, {0x5, 0x5, 0x99, 0xffffffff}, {0xfffc, 0x7, 0x1, 0x9}, {0x3, 0x9, 0x4, 0xba}]}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 590.985886ms ago: executing program 1 (id=227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x110, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x68, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}]}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6}]}, @NFCTH_TUPLE={0x78, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}]}, 0x110}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000008000000000000000200000d000000000000000000000000000000611e00"], 0x0, 0x3c}, 0x20) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "ae95c69400311d48aad0bff5434e4daefeebbdfe3198b929fed36aae687d362c2d866ff14a0cbec8b491d56b52b140eda575852ea81921ebff746d451657e65d0811e5987eac486c9c4b75c4ff6aafb611cd7d03cbfbd9e500d9cb12cf3f19ee82e9b469a8cf57f61583f3bac73b19c5a450293e4710c264514b37c7fa25e36383a27a84d5a4c0e18de5a1797c673863cc00dc5cdc32c1258d84c073535e5deff67705562d14d97b87083ee4d46c2ca0fce82cfb9dbd65fac7a0ee3f343365d654fe8ab11cc98ca5c93434e40115965798a90c26c17a88eb3cdca0696b1c499a07bc1bb0be5b081894d9d8a6c33ceef29631b455362d75701de885445f54041d", "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"}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=@mpls_getroute={0x30, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}, @RTA_DST={0x8, 0x1, {0x1}}]}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f00000013c0)={&(0x7f0000001040), 0xc, &(0x7f0000001380)={&(0x7f0000001080)={0x2d8, r5, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x45}}}}, [@NL80211_ATTR_IE={0x25, 0x2a, [@prep={0x83, 0x1f, {{}, 0xfa, 0x40, @device_a, 0x57, @void, 0x6, 0x0, @device_b, 0x91}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_IE={0x24f, 0x2a, [@channel_switch={0x25, 0x3, {0x2, 0x38, 0x9}}, @rann={0x7e, 0x15, {{0x1, 0x16}, 0x0, 0xff, @device_b, 0x81, 0x1000, 0x5}}, @random_vendor={0xdd, 0x6d, "9c52e281f79a9bf5d9ad8d6cedf3562d341eae5bd4a37d28e7247f2171717a6369535df5f614f5604b23ff61ea53b89b116864d97944634db66786cf37e700f8276f490f8378293bc859f7171408d1ed71c6366e84c990bf0c0d076218bab65d63faddbd6d738aaaf24cc917d9"}, @random_vendor={0xdd, 0x96, "35f6f80d9daf5f91aea4d8c34944fd91d8b404c0552636c2cb513e5de27323fb000e8f2c74e0f26cb2f6395d5273f1d273f5c386137eabf4de232429c7d35509b907f3ebcadcf309dfef86c75f4d800a72971334cc9920af4bd365d9a1d4c4db3c5895a1ba4fd08d9bef48e80187d032f7f0e6182ec748b3470c575173e5b4ea5d9b186ab4fd9a327a61a28a842a0e010647092190e4"}, @cf={0x4, 0x6, {0xff, 0x1, 0x3f}}, @challenge={0x10, 0x1, 0x70}, @erp={0x2a, 0x1, {0x1}}, @mic={0x8c, 0x18, {0xf72, "e488d7d09db2", @long="d4d25c4ae557fab974cfca56c1e88208"}}, @cf={0x4, 0x6, {0x3, 0x6, 0x1, 0x645}}, @fast_bss_trans={0x37, 0xf6, {0x5, 0x7, "4d926c5a845113e5b576df0616b71733", "679eb7a7b7f7279d1841df8d831c103157c1d45113e31ed778e05fe0cd702b26", "34304c4bc7ba07740aca820d42ef10cad53147b086b4545ff8568b0cd3fe2f8d", [{0x1, 0x3, "bc5e67"}, {0x4, 0x25, "f6ecb6bf36a828c4f1ae343c67c2331fb77e121052ebba6a1311ad806a5c16055e5d5c8c44"}, {0x1, 0x27, "452b1b3085f68f38df56493e781c0a73c8ee15d93fe38014433ed9932a3cef40cbe285908b6969"}, {0x1, 0x1a, "5fb30105458f745014b179f748febf0a759a4c1b0a051ebcc561"}, {0x4, 0x10, "bf2f6f75eef5568e12a2124901dbf4ee"}, {0x2, 0xd, "63682768f0626b4c7d4475af7c"}, {0x4, 0x10, "6e7fb97a5f606896de170107aa15427c"}]}}]}, @NL80211_ATTR_IE={0x37, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x17}, 0x1, 0x5, @device_a, 0x1000, 0x7, 0x5255}}, @ht={0x2d, 0x1a, {0x8000, 0x3, 0x6, 0x0, {0x6, 0x8, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x2}, 0x400, 0x91, 0x1}}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) preadv(r2, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) 551.641904ms ago: executing program 4 (id=228): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 2) 487.844007ms ago: executing program 2 (id=229): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ipvlan1\x00'}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000080)=@udp, 0x11}, 0x20) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r5, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r5, 0x111, 0x5, 0x0, 0x20001f00) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x750, 0x0, 0x290, 0x0, 0x450, 0x1b0, 0x680, 0x680, 0x680, 0x680, 0x680, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00'}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x680}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @private2, @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b0) 460.29511ms ago: executing program 0 (id=230): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000002500000000001d00000008000300", @ANYRES32=r2, @ANYBLOB="30002f801800c18c0c0003800600010000000000080001f6ffffff00080001"], 0x4c}}, 0x0) 79.663094ms ago: executing program 3 (id=231): socket(0x40000000015, 0x5, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) 0s ago: executing program 0 (id=232): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f5c64000000000c000280060019"], 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="ff00000000000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts. [ 73.829499][ T5089] cgroup: Unknown subsys name 'net' [ 74.005761][ T5089] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.753808][ T5089] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.133873][ T5102] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.144756][ T5108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.152678][ T5108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.165286][ T5108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.171626][ T5102] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.181170][ T5110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.189540][ T5110] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.198966][ T5114] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.200136][ T5110] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.215673][ T5110] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.217980][ T5114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.230201][ T5110] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.230969][ T5114] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.243517][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.245312][ T5114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.251623][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.262335][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.265837][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.273907][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.283204][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.287320][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.295003][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.308494][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.317104][ T5110] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.325213][ T5110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.325249][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.346102][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.354031][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.354095][ T5110] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.368761][ T5110] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.024783][ T5106] chnl_net:caif_netlink_parms(): no params data found [ 79.114290][ T5116] chnl_net:caif_netlink_parms(): no params data found [ 79.136220][ T5099] chnl_net:caif_netlink_parms(): no params data found [ 79.243321][ T5107] chnl_net:caif_netlink_parms(): no params data found [ 79.299479][ T5098] chnl_net:caif_netlink_parms(): no params data found [ 79.338578][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.347096][ T5106] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.354815][ T5106] bridge_slave_0: entered allmulticast mode [ 79.362115][ T5106] bridge_slave_0: entered promiscuous mode [ 79.378471][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.386171][ T5106] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.393402][ T5106] bridge_slave_1: entered allmulticast mode [ 79.401243][ T5106] bridge_slave_1: entered promiscuous mode [ 79.540945][ T5106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.570435][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.577885][ T5099] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.586144][ T5099] bridge_slave_0: entered allmulticast mode [ 79.593314][ T5099] bridge_slave_0: entered promiscuous mode [ 79.601560][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.609023][ T5099] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.616309][ T5099] bridge_slave_1: entered allmulticast mode [ 79.623724][ T5099] bridge_slave_1: entered promiscuous mode [ 79.646414][ T5106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.659835][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.667176][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.674377][ T5116] bridge_slave_0: entered allmulticast mode [ 79.682039][ T5116] bridge_slave_0: entered promiscuous mode [ 79.734237][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.742001][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.749361][ T5116] bridge_slave_1: entered allmulticast mode [ 79.757151][ T5116] bridge_slave_1: entered promiscuous mode [ 79.779297][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.787012][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.794292][ T5107] bridge_slave_0: entered allmulticast mode [ 79.802201][ T5107] bridge_slave_0: entered promiscuous mode [ 79.880172][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.887570][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.894938][ T5107] bridge_slave_1: entered allmulticast mode [ 79.902584][ T5107] bridge_slave_1: entered promiscuous mode [ 79.912209][ T5099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.925644][ T5099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.936080][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.943245][ T5098] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.950638][ T5098] bridge_slave_0: entered allmulticast mode [ 79.958335][ T5098] bridge_slave_0: entered promiscuous mode [ 79.970206][ T5106] team0: Port device team_slave_0 added [ 79.979391][ T5106] team0: Port device team_slave_1 added [ 80.030501][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.037863][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.045228][ T5098] bridge_slave_1: entered allmulticast mode [ 80.052370][ T5098] bridge_slave_1: entered promiscuous mode [ 80.074006][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.089174][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.173441][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.181301][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.207932][ T5106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.234367][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.247447][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.260796][ T5099] team0: Port device team_slave_0 added [ 80.270037][ T5098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.283173][ T5098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.293808][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.300850][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.327163][ T5106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.345738][ T5102] Bluetooth: hci3: command tx timeout [ 80.371936][ T5099] team0: Port device team_slave_1 added [ 80.415670][ T5116] team0: Port device team_slave_0 added [ 80.425875][ T5102] Bluetooth: hci0: command tx timeout [ 80.431742][ T5105] Bluetooth: hci1: command tx timeout [ 80.431767][ T5110] Bluetooth: hci2: command tx timeout [ 80.432089][ T5102] Bluetooth: hci4: command tx timeout [ 80.468724][ T5098] team0: Port device team_slave_0 added [ 80.478905][ T5098] team0: Port device team_slave_1 added [ 80.506083][ T5116] team0: Port device team_slave_1 added [ 80.516256][ T5107] team0: Port device team_slave_0 added [ 80.575973][ T5107] team0: Port device team_slave_1 added [ 80.582775][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.590474][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.617534][ T5099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.630832][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.637911][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.664246][ T5099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.694510][ T5106] hsr_slave_0: entered promiscuous mode [ 80.701645][ T5106] hsr_slave_1: entered promiscuous mode [ 80.709741][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.717046][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.743106][ T5098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.803644][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.811056][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.838833][ T5098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.851252][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.858521][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.885320][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.899905][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.907044][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.933327][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.946571][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.953609][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.979601][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.001196][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.008302][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.034940][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.124512][ T5099] hsr_slave_0: entered promiscuous mode [ 81.131446][ T5099] hsr_slave_1: entered promiscuous mode [ 81.139058][ T5099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.147505][ T5099] Cannot create hsr debugfs directory [ 81.310162][ T5107] hsr_slave_0: entered promiscuous mode [ 81.317288][ T5107] hsr_slave_1: entered promiscuous mode [ 81.323539][ T5107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.332027][ T5107] Cannot create hsr debugfs directory [ 81.342697][ T5098] hsr_slave_0: entered promiscuous mode [ 81.350798][ T5098] hsr_slave_1: entered promiscuous mode [ 81.357691][ T5098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.365452][ T5098] Cannot create hsr debugfs directory [ 81.375956][ T5116] hsr_slave_0: entered promiscuous mode [ 81.382735][ T5116] hsr_slave_1: entered promiscuous mode [ 81.389832][ T5116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.397815][ T5116] Cannot create hsr debugfs directory [ 81.924216][ T5106] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.938872][ T5106] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.971900][ T5106] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.991079][ T5106] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.063782][ T5099] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.095635][ T5099] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.128896][ T5099] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.177665][ T5099] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.229809][ T5098] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.307934][ T5098] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.342195][ T5098] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.397154][ T5098] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.415339][ T5116] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.428161][ T5102] Bluetooth: hci3: command tx timeout [ 82.471717][ T5116] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.504765][ T5102] Bluetooth: hci1: command tx timeout [ 82.511016][ T5102] Bluetooth: hci4: command tx timeout [ 82.516847][ T53] Bluetooth: hci2: command tx timeout [ 82.522545][ T53] Bluetooth: hci0: command tx timeout [ 82.545051][ T5116] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.613434][ T5116] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.650013][ T5106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.746964][ T5107] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.791757][ T5106] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.816812][ T5107] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.836628][ T5107] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.856436][ T5107] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.899899][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.907315][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.973927][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.981670][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.038849][ T5099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.108232][ T5099] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.127794][ T5098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.177106][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.184239][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.252531][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.259727][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.309295][ T5098] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.358727][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.365942][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.409191][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.416458][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.460812][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.527478][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.577731][ T5099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.612055][ T5116] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.681107][ T5107] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.718782][ T5098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.744372][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.751623][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.768352][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.775638][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.810401][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.817692][ T5156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.838474][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.845747][ T5156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.897991][ T5106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.988519][ T5099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.083465][ T5107] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.094142][ T5107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.269872][ T5099] veth0_vlan: entered promiscuous mode [ 84.288743][ T5106] veth0_vlan: entered promiscuous mode [ 84.310671][ T5098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.370854][ T5099] veth1_vlan: entered promiscuous mode [ 84.414307][ T5106] veth1_vlan: entered promiscuous mode [ 84.508472][ T53] Bluetooth: hci3: command tx timeout [ 84.538926][ T5099] veth0_macvtap: entered promiscuous mode [ 84.581478][ T5106] veth0_macvtap: entered promiscuous mode [ 84.589022][ T53] Bluetooth: hci2: command tx timeout [ 84.594490][ T53] Bluetooth: hci1: command tx timeout [ 84.601556][ T5102] Bluetooth: hci0: command tx timeout [ 84.601604][ T5110] Bluetooth: hci4: command tx timeout [ 84.629280][ T5106] veth1_macvtap: entered promiscuous mode [ 84.650996][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.671656][ T5099] veth1_macvtap: entered promiscuous mode [ 84.783629][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.810180][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.822113][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.837319][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.851548][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.871643][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.884589][ T5106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.894298][ T5106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.903871][ T5106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.913608][ T5106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.928389][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.945195][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.958364][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.062714][ T5099] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.072684][ T5099] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.081814][ T5099] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.091018][ T5099] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.150962][ T5107] veth0_vlan: entered promiscuous mode [ 85.210397][ T5098] veth0_vlan: entered promiscuous mode [ 85.229328][ T5098] veth1_vlan: entered promiscuous mode [ 85.249707][ T5116] veth0_vlan: entered promiscuous mode [ 85.266272][ T5107] veth1_vlan: entered promiscuous mode [ 85.266635][ T2883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.282749][ T2883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.318376][ T5116] veth1_vlan: entered promiscuous mode [ 85.403017][ T5098] veth0_macvtap: entered promiscuous mode [ 85.426950][ T5098] veth1_macvtap: entered promiscuous mode [ 85.460960][ T2452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.481356][ T2452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.511146][ T5116] veth0_macvtap: entered promiscuous mode [ 85.551648][ T5116] veth1_macvtap: entered promiscuous mode [ 85.571414][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.585205][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.626942][ T5107] veth0_macvtap: entered promiscuous mode [ 85.675110][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.676410][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.682996][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.696411][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.712735][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.725073][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.742806][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.753272][ T5107] veth1_macvtap: entered promiscuous mode [ 85.813734][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.848304][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.861865][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.873229][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.888319][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.914800][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.940662][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.953696][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.964534][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.975271][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.987565][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.000728][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.016635][ T5191] netlink: 'syz.2.3': attribute type 9 has an invalid length. [ 86.047749][ T5098] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.057881][ T5098] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.086102][ T5098] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.111040][ T5098] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.151437][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.172366][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.183243][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.195769][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.207621][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.218796][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.230717][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.247660][ T5195] netlink: 'syz.2.6': attribute type 1 has an invalid length. [ 86.326724][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.352271][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.371796][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.382601][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.395067][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.405601][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.417359][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.428175][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.441143][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.449931][ T5116] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.459572][ T5116] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.469766][ T5116] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.480539][ T5116] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.496253][ T5197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7'. [ 86.518435][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.537921][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.548850][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.562190][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.585220][ T5110] Bluetooth: hci3: command tx timeout [ 86.586561][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.622079][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.632284][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.643734][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.665193][ T5105] Bluetooth: hci1: command tx timeout [ 86.670011][ T53] Bluetooth: hci0: command tx timeout [ 86.670639][ T5105] Bluetooth: hci2: command tx timeout [ 86.679091][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.681566][ T5110] Bluetooth: hci4: command tx timeout [ 86.713111][ T5203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'. [ 86.742695][ T5205] ɶƣ0GCTw: entered promiscuous mode [ 86.757767][ T5107] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.774201][ T5107] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.784873][ T5107] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.793722][ T5107] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.964151][ T5212] syz.2.10 uses obsolete (PF_INET,SOCK_PACKET) [ 87.050520][ T2840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.063449][ T2840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.156255][ T5219] netlink: 256 bytes leftover after parsing attributes in process `syz.1.13'. [ 87.231105][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.281182][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.300670][ T5221] netlink: 277 bytes leftover after parsing attributes in process `syz.1.14'. [ 87.393793][ T2452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.421000][ T5224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 87.438223][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.447766][ T2452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.467665][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.643904][ T5231] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.659146][ T2840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.694908][ T2840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.716668][ T2452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.761146][ T2452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.878990][ T5231] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 88.171110][ T5244] warning: `syz.2.21' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.224316][ T5243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 88.279106][ T5245] bridge0: port 3(geneve1) entered blocking state [ 88.321937][ T5245] bridge0: port 3(geneve1) entered disabled state [ 88.373687][ T5245] geneve1: entered allmulticast mode [ 88.418419][ T5245] geneve1: entered promiscuous mode [ 88.440102][ T5245] bridge0: port 3(geneve1) entered blocking state [ 88.447032][ T5245] bridge0: port 3(geneve1) entered forwarding state [ 88.469073][ T5248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22'. [ 89.327497][ T5279] netlink: 'syz.3.34': attribute type 10 has an invalid length. [ 89.356883][ T5279] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 89.433889][ T5283] Zero length message leads to an empty skb [ 89.720056][ T5298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.39'. [ 89.843479][ T5298] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 89.895562][ T5298] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 89.965482][ T5305] openvswitch: netlink: Flow actions attr not present in new flow. [ 90.000748][ T5304] netlink: 40 bytes leftover after parsing attributes in process `syz.2.43'. [ 90.011084][ T5305] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.105631][ T5310] netlink: 68 bytes leftover after parsing attributes in process `syz.2.43'. [ 90.292935][ T5311] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 90.444884][ T5326] netlink: 'syz.4.49': attribute type 7 has an invalid length. [ 90.617375][ T5332] vcan0: entered promiscuous mode [ 90.648383][ T5332] vlan2: entered promiscuous mode [ 90.702759][ T5332] vcan0: left promiscuous mode [ 91.276227][ T5366] netlink: 'syz.3.57': attribute type 1 has an invalid length. [ 91.356124][ T5366] netlink: 'syz.3.57': attribute type 1 has an invalid length. [ 91.363767][ T5366] netlink: 'syz.3.57': attribute type 1 has an invalid length. [ 91.483789][ T5361] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 91.556745][ T5372] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 91.872554][ T5381] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 91.979253][ T5395] x_tables: duplicate underflow at hook 2 [ 92.289335][ T5402] IPVS: set_ctl: invalid protocol: 0 172.20.20.36:20001 [ 92.303490][ T5403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.315481][ T5399] __nla_validate_parse: 5 callbacks suppressed [ 92.315502][ T5399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.74'. [ 92.362445][ T785] cfg80211: failed to load regulatory.db [ 92.746973][ T5419] netlink: 'syz.3.81': attribute type 4 has an invalid length. [ 92.779693][ T5419] netlink: 17 bytes leftover after parsing attributes in process `syz.3.81'. [ 92.841993][ T5426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.83'. [ 93.101396][ T5434] netlink: 'syz.4.87': attribute type 11 has an invalid length. [ 93.196843][ T5438] netlink: 'syz.3.88': attribute type 3 has an invalid length. [ 93.230352][ T5438] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.88'. [ 93.301361][ T5441] nftables ruleset with unbound set [ 93.486403][ T5443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.91'. [ 93.635709][ T5452] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 93.695040][ T5455] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.703212][ T5455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.714043][ T5415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.102851][ T5467] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 94.834971][ T5496] netlink: 'syz.2.107': attribute type 2 has an invalid length. [ 94.843032][ T5496] netlink: 'syz.2.107': attribute type 1 has an invalid length. [ 94.893597][ T5496] netlink: 'syz.2.107': attribute type 1 has an invalid length. [ 94.973825][ T5506] netlink: 830 bytes leftover after parsing attributes in process `syz.4.106'. [ 94.974485][ T5496] netlink: 'syz.2.107': attribute type 2 has an invalid length. [ 95.032052][ T5504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.107'. [ 95.071635][ T5511] netlink: 17 bytes leftover after parsing attributes in process `syz.0.110'. [ 95.125776][ T5509] netlink: 104 bytes leftover after parsing attributes in process `syz.3.109'. [ 95.778744][ T5548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'. [ 96.027711][ T5538] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 96.998205][ T5589] validate_nla: 8 callbacks suppressed [ 96.998226][ T5589] netlink: 'syz.1.134': attribute type 2 has an invalid length. [ 97.034743][ T5589] netlink: 'syz.1.134': attribute type 1 has an invalid length. [ 97.057534][ T5589] netlink: 'syz.1.134': attribute type 1 has an invalid length. [ 97.145482][ T5589] netlink: 'syz.1.134': attribute type 2 has an invalid length. [ 97.171362][ T5589] netlink: 'syz.1.134': attribute type 2 has an invalid length. [ 97.377807][ T5601] __nla_validate_parse: 6 callbacks suppressed [ 97.377829][ T5601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.139'. [ 97.535464][ T5609] netlink: 'syz.2.142': attribute type 2 has an invalid length. [ 97.614880][ T5609] netlink: 'syz.2.142': attribute type 1 has an invalid length. [ 97.622608][ T5609] netlink: 'syz.2.142': attribute type 1 has an invalid length. [ 97.687279][ T5605] netlink: 256 bytes leftover after parsing attributes in process `syz.1.140'. [ 97.710255][ T5609] netlink: 'syz.2.142': attribute type 2 has an invalid length. [ 97.718159][ T5615] netlink: 60 bytes leftover after parsing attributes in process `syz.4.145'. [ 97.751806][ T5617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.142'. [ 97.774246][ T5609] netlink: 'syz.2.142': attribute type 2 has an invalid length. [ 97.941820][ T5621] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 98.222923][ T5628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'. [ 98.634097][ T5653] Cannot find add_set index 0 as target [ 99.024314][ T5667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.165'. [ 99.698245][ T5698] team0: Failed to send options change via netlink (err -105) [ 99.722027][ T5698] team0: Port device netdevsim0 added [ 99.766205][ T5692] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 99.839779][ T5692] team0: Failed to send options change via netlink (err -105) [ 99.861550][ T5692] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 99.903443][ T5692] team0: Port device netdevsim0 removed [ 99.931349][ T5692] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 99.960612][ T5707] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 99.991790][ T5707] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 100.001048][ T5707] gretap1: entered promiscuous mode [ 100.006896][ T5707] gretap1: entered allmulticast mode [ 100.096150][ T5711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.181'. [ 100.350927][ T5719] syz_tun: entered promiscuous mode [ 100.401391][ T5719] ip6gretap0: entered promiscuous mode [ 100.584294][ T5728] netlink: 16 bytes leftover after parsing attributes in process `syz.0.189'. [ 100.616533][ T5728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.189'. [ 100.691616][ T5739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'. [ 101.071377][ T5747] team0: Failed to send options change via netlink (err -105) [ 101.115899][ T5747] team0: Port device netdevsim0 added [ 101.163900][ T5750] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 101.192696][ T5750] team0: Failed to send options change via netlink (err -105) [ 101.202925][ T5750] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 101.214864][ T5750] team0: Port device netdevsim0 removed [ 101.224298][ T5750] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 101.662936][ T5780] trusted_key: syz.0.206 sent an empty control message without MSG_MORE. [ 102.560627][ T5820] __nla_validate_parse: 4 callbacks suppressed [ 102.560651][ T5820] netlink: 277 bytes leftover after parsing attributes in process `syz.2.223'. [ 102.763669][ T5830] syz.3.226[5830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.784322][ T5829] validate_nla: 31 callbacks suppressed [ 102.784345][ T5829] netlink: 'syz.1.227': attribute type 2 has an invalid length. [ 102.825010][ T5829] netlink: 'syz.1.227': attribute type 1 has an invalid length. [ 102.847188][ T5833] FAULT_INJECTION: forcing a failure. [ 102.847188][ T5833] name failslab, interval 1, probability 0, space 0, times 1 [ 102.868477][ T5830] Driver unsupported XDP return value 0 on prog (id 86) dev N/A, expect packet loss! [ 102.883180][ T5829] netlink: 'syz.1.227': attribute type 1 has an invalid length. [ 102.901552][ T5833] CPU: 1 PID: 5833 Comm: syz.4.228 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 102.911870][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 102.921980][ T5833] Call Trace: [ 102.925299][ T5833] [ 102.928263][ T5833] dump_stack_lvl+0x241/0x360 [ 102.933002][ T5833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.938254][ T5833] ? __pfx__printk+0x10/0x10 [ 102.942901][ T5833] ? __pfx___might_resched+0x10/0x10 [ 102.948245][ T5833] ? __lock_acquire+0x1346/0x1fd0 [ 102.953330][ T5833] should_fail_ex+0x3b0/0x4e0 [ 102.958066][ T5833] ? bpf_test_init+0xe1/0x180 [ 102.962783][ T5833] should_failslab+0x9/0x20 [ 102.967427][ T5833] __kmalloc_noprof+0xd8/0x400 [ 102.972252][ T5833] bpf_test_init+0xe1/0x180 [ 102.976270][ T5838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 102.976792][ T5833] bpf_prog_test_run_xdp+0x48e/0x11b0 [ 102.990961][ T5833] ? __pfx_lock_acquire+0x10/0x10 [ 102.996035][ T5833] ? __pfx_lock_release+0x10/0x10 [ 103.001119][ T5833] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 103.006975][ T5833] ? __fget_files+0x29/0x470 [ 103.011626][ T5833] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 103.017484][ T5833] bpf_prog_test_run+0x33a/0x3b0 [ 103.022474][ T5833] __sys_bpf+0x48d/0x810 [ 103.026321][ T5829] netlink: 'syz.1.227': attribute type 2 has an invalid length. [ 103.026750][ T5833] ? __pfx___sys_bpf+0x10/0x10 [ 103.034461][ T5829] netlink: 'syz.1.227': attribute type 2 has an invalid length. [ 103.039472][ T5833] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 103.039506][ T5833] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.039531][ T5833] ? do_syscall_64+0x100/0x230 [ 103.039560][ T5833] __x64_sys_bpf+0x7c/0x90 [ 103.039593][ T5833] do_syscall_64+0xf3/0x230 [ 103.073572][ T5833] ? clear_bhb_loop+0x35/0x90 [ 103.078306][ T5833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.084424][ T5833] RIP: 0033:0x7f9e70975bd9 [ 103.088888][ T5833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.108545][ T5833] RSP: 002b:00007f9e716d3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 103.117368][ T5833] RAX: ffffffffffffffda RBX: 00007f9e70b03f60 RCX: 00007f9e70975bd9 [ 103.125396][ T5833] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 103.133511][ T5833] RBP: 00007f9e716d30a0 R08: 0000000000000000 R09: 0000000000000000 [ 103.141528][ T5833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.149540][ T5833] R13: 000000000000000b R14: 00007f9e70b03f60 R15: 00007ffd9a8f8bb8 [ 103.157574][ T5833] [ 103.171929][ T5842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.230'. [ 103.219587][ T1102] ================================================================== [ 103.227707][ T1102] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0xe5/0x330 [ 103.235818][ T1102] Read of size 8 at addr ffff888060baf8b8 by task kworker/u8:7/1102 [ 103.243829][ T1102] [ 103.246177][ T1102] CPU: 0 PID: 1102 Comm: kworker/u8:7 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 103.256458][ T1102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 103.266548][ T1102] Workqueue: l2tp l2tp_tunnel_del_work [ 103.272065][ T1102] Call Trace: [ 103.275386][ T1102] [ 103.278440][ T1102] dump_stack_lvl+0x241/0x360 [ 103.283176][ T1102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.288415][ T1102] ? __pfx__printk+0x10/0x10 [ 103.293047][ T1102] ? _printk+0xd5/0x120 [ 103.297334][ T1102] ? __virt_addr_valid+0x183/0x520 [ 103.302501][ T1102] ? __virt_addr_valid+0x183/0x520 [ 103.307661][ T1102] print_report+0x169/0x550 [ 103.312296][ T1102] ? __virt_addr_valid+0x183/0x520 [ 103.317464][ T1102] ? __virt_addr_valid+0x183/0x520 [ 103.322624][ T1102] ? __virt_addr_valid+0x44e/0x520 [ 103.327790][ T1102] ? __phys_addr+0xba/0x170 [ 103.332340][ T1102] ? l2tp_tunnel_del_work+0xe5/0x330 [ 103.337754][ T1102] kasan_report+0x143/0x180 [ 103.342308][ T1102] ? l2tp_tunnel_del_work+0xe5/0x330 [ 103.347635][ T1102] l2tp_tunnel_del_work+0xe5/0x330 [ 103.352787][ T1102] ? process_scheduled_works+0x945/0x1830 [ 103.358555][ T1102] process_scheduled_works+0xa2c/0x1830 [ 103.364174][ T1102] ? __pfx_process_scheduled_works+0x10/0x10 [ 103.370197][ T1102] ? assign_work+0x364/0x3d0 [ 103.374839][ T1102] worker_thread+0x86d/0xd50 [ 103.379480][ T1102] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 103.385418][ T1102] ? __kthread_parkme+0x169/0x1d0 [ 103.390484][ T1102] ? __pfx_worker_thread+0x10/0x10 [ 103.395646][ T1102] kthread+0x2f0/0x390 [ 103.399757][ T1102] ? __pfx_worker_thread+0x10/0x10 [ 103.404904][ T1102] ? __pfx_kthread+0x10/0x10 [ 103.409620][ T1102] ret_from_fork+0x4b/0x80 [ 103.414080][ T1102] ? __pfx_kthread+0x10/0x10 [ 103.418708][ T1102] ret_from_fork_asm+0x1a/0x30 [ 103.423522][ T1102] [ 103.426571][ T1102] [ 103.428908][ T1102] Allocated by task 5835: [ 103.433257][ T1102] kasan_save_track+0x3f/0x80 [ 103.437973][ T1102] __kasan_kmalloc+0x98/0xb0 [ 103.442600][ T1102] __kmalloc_noprof+0x1f9/0x400 [ 103.447495][ T1102] l2tp_session_create+0x3b/0xc20 [ 103.452551][ T1102] pppol2tp_connect+0xca3/0x17a0 [ 103.457524][ T1102] __sys_connect+0x2df/0x310 [ 103.462155][ T1102] __x64_sys_connect+0x7a/0x90 [ 103.466965][ T1102] do_syscall_64+0xf3/0x230 [ 103.471495][ T1102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.477418][ T1102] [ 103.479759][ T1102] Freed by task 5834: [ 103.483761][ T1102] kasan_save_track+0x3f/0x80 [ 103.488472][ T1102] kasan_save_free_info+0x40/0x50 [ 103.493532][ T1102] poison_slab_object+0xe0/0x150 [ 103.498501][ T1102] __kasan_slab_free+0x37/0x60 [ 103.503299][ T1102] kfree+0x149/0x360 [ 103.507236][ T1102] __sk_destruct+0x58/0x5f0 [ 103.511773][ T1102] rcu_core+0xafd/0x1830 [ 103.516041][ T1102] handle_softirqs+0x2c4/0x970 [ 103.520829][ T1102] __irq_exit_rcu+0xf4/0x1c0 [ 103.525445][ T1102] irq_exit_rcu+0x9/0x30 [ 103.529715][ T1102] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 103.535392][ T1102] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 103.541510][ T1102] [ 103.543854][ T1102] Last potentially related work creation: [ 103.549594][ T1102] kasan_save_stack+0x3f/0x60 [ 103.554490][ T1102] __kasan_record_aux_stack+0xac/0xc0 [ 103.559952][ T1102] call_rcu+0x167/0xa70 [ 103.564144][ T1102] pppol2tp_release+0x24b/0x350 SYZFAIL: failed to send rpc fd=3 want=320 sent=0 n=-1 (errno 32: Broken pipe) [ 103.569034][ T1102] sock_close+0xbc/0x240 [ 103.573312][ T1102] __fput+0x24a/0x8a0 [ 103.577326][ T1102] task_work_run+0x24f/0x310 [ 103.581954][ T1102] do_exit+0xa27/0x27e0 [ 103.586148][ T1102] do_group_exit+0x207/0x2c0 [ 103.590775][ T1102] __x64_sys_exit_group+0x3f/0x40 [ 103.595841][ T1102] do_syscall_64+0xf3/0x230 [ 103.600375][ T1102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.606302][ T1102] [ 103.608656][ T1102] The buggy address belongs to the object at ffff888060baf800 [ 103.608656][ T1102] which belongs to the cache kmalloc-1k of size 1024 [ 103.622917][ T1102] The buggy address is located 184 bytes inside of [ 103.622917][ T1102] freed 1024-byte region [ffff888060baf800, ffff888060bafc00) [ 103.637190][ T1102] [ 103.639574][ T1102] The buggy address belongs to the physical page: [ 103.646025][ T1102] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60ba8 [ 103.654814][ T1102] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 103.663343][ T1102] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 103.671733][ T1102] page_type: 0xffffefff(slab) [ 103.676449][ T1102] raw: 00fff00000000040 ffff888015041dc0 0000000000000000 dead000000000001 [ 103.685247][ T1102] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 103.693880][ T1102] head: 00fff00000000040 ffff888015041dc0 0000000000000000 dead000000000001 [ 103.702583][ T1102] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 103.711270][ T1102] head: 00fff00000000003 ffffea000182ea01 ffffffffffffffff 0000000000000000 [ 103.719953][ T1102] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 103.728627][ T1102] page dumped because: kasan: bad access detected [ 103.735069][ T1102] page_owner tracks the page as allocated [ 103.740782][ T1102] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 1094, tgid 1094 (kworker/u8:6), ts 88363471281, free_ts 25938021506 [ 103.761546][ T1102] post_alloc_hook+0x1f3/0x230 [ 103.766415][ T1102] get_page_from_freelist+0x2e4c/0x2f10 [ 103.771976][ T1102] __alloc_pages_noprof+0x256/0x6c0 [ 103.777223][ T1102] alloc_slab_page+0x5f/0x120 [ 103.781915][ T1102] allocate_slab+0x5a/0x2f0 [ 103.786430][ T1102] ___slab_alloc+0xcd1/0x14b0 [ 103.791201][ T1102] __slab_alloc+0x58/0xa0 [ 103.795618][ T1102] __kmalloc_noprof+0x257/0x400 [ 103.800569][ T1102] ieee802_11_parse_elems_full+0xdb/0x2880 [ 103.806390][ T1102] ieee80211_inform_bss+0x15f/0x1080 [ 103.811690][ T1102] cfg80211_inform_single_bss_data+0xe93/0x2030 [ 103.817941][ T1102] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 103.823580][ T1102] cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 103.829661][ T1102] ieee80211_bss_info_update+0x8a7/0xbc0 [ 103.835312][ T1102] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 103.841477][ T1102] ieee80211_iface_work+0x8a5/0xf20 [ 103.846689][ T1102] page last free pid 1 tgid 1 stack trace: [ 103.852496][ T1102] free_unref_page+0xd22/0xea0 [ 103.857294][ T1102] free_contig_range+0x9e/0x160 [ 103.862172][ T1102] destroy_args+0x8a/0x890 [ 103.866611][ T1102] debug_vm_pgtable+0x4be/0x550 [ 103.871474][ T1102] do_one_initcall+0x248/0x880 [ 103.876256][ T1102] do_initcall_level+0x157/0x210 [ 103.881232][ T1102] do_initcalls+0x3f/0x80 [ 103.885576][ T1102] kernel_init_freeable+0x435/0x5d0 [ 103.890787][ T1102] kernel_init+0x1d/0x2b0 [ 103.895124][ T1102] ret_from_fork+0x4b/0x80 [ 103.899557][ T1102] ret_from_fork_asm+0x1a/0x30 [ 103.904514][ T1102] [ 103.906852][ T1102] Memory state around the buggy address: [ 103.912479][ T1102] ffff888060baf780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.920627][ T1102] ffff888060baf800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.928970][ T1102] >ffff888060baf880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.937057][ T1102] ^ [ 103.942956][ T1102] ffff888060baf900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.951022][ T1102] ffff888060baf980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.959082][ T1102] ================================================================== [ 103.967219][ T1102] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 103.974439][ T1102] CPU: 0 PID: 1102 Comm: kworker/u8:7 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 103.984709][ T1102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 103.994791][ T1102] Workqueue: l2tp l2tp_tunnel_del_work [ 104.000326][ T1102] Call Trace: [ 104.003643][ T1102] [ 104.006602][ T1102] dump_stack_lvl+0x241/0x360 [ 104.011310][ T1102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.016545][ T1102] ? __pfx__printk+0x10/0x10 [ 104.021252][ T1102] ? vscnprintf+0x5d/0x90 [ 104.025903][ T1102] panic+0x349/0x860 [ 104.029837][ T1102] ? check_panic_on_warn+0x21/0xb0 [ 104.035072][ T1102] ? __pfx_panic+0x10/0x10 [ 104.039525][ T1102] ? mark_lock+0x9a/0x350 [ 104.043974][ T1102] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 104.049911][ T1102] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 104.055850][ T1102] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 104.062299][ T1102] ? print_report+0x502/0x550 [ 104.067020][ T1102] check_panic_on_warn+0x86/0xb0 [ 104.071990][ T1102] ? l2tp_tunnel_del_work+0xe5/0x330 [ 104.077304][ T1102] end_report+0x77/0x160 [ 104.081578][ T1102] kasan_report+0x154/0x180 [ 104.086285][ T1102] ? l2tp_tunnel_del_work+0xe5/0x330 [ 104.091701][ T1102] l2tp_tunnel_del_work+0xe5/0x330 [ 104.096932][ T1102] ? process_scheduled_works+0x945/0x1830 [ 104.102677][ T1102] process_scheduled_works+0xa2c/0x1830 [ 104.108270][ T1102] ? __pfx_process_scheduled_works+0x10/0x10 [ 104.114282][ T1102] ? assign_work+0x364/0x3d0 [ 104.118901][ T1102] worker_thread+0x86d/0xd50 [ 104.123526][ T1102] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 104.129460][ T1102] ? __kthread_parkme+0x169/0x1d0 [ 104.134517][ T1102] ? __pfx_worker_thread+0x10/0x10 [ 104.139656][ T1102] kthread+0x2f0/0x390 [ 104.143762][ T1102] ? __pfx_worker_thread+0x10/0x10 [ 104.148996][ T1102] ? __pfx_kthread+0x10/0x10 [ 104.153618][ T1102] ret_from_fork+0x4b/0x80 [ 104.158178][ T1102] ? __pfx_kthread+0x10/0x10 [ 104.162839][ T1102] ret_from_fork_asm+0x1a/0x30 [ 104.167651][ T1102] [ 104.171029][ T1102] Kernel Offset: disabled [ 104.175390][ T1102] Rebooting in 86400 seconds..