last executing test programs: 1.759392796s ago: executing program 3 (id=102): socket$unix(0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@getnexthop={0x18, 0x76, 0x401}, 0x18}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54010000100033060019000000000000ac1e0001000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000002001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400000000000000000048000200656362286369706865725f6e756c6c2900"/215], 0x154}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x6}, @NFTA_HASH_SREG={0x8}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000c50000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x16, 0xb3}, 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000001e00851000000600000018000000", @ANYRES32=r6, @ANYBLOB="0000000000000000660a000000000000180000000000000000000000000000109500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r8 = accept4(r5, 0x0, 0x0, 0x0) recvfrom(r8, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x0, 0x0, 0xffffffffffffff54) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x8, 0x4e21, 0x2, 0x0, 0xa0, 0x80, 0x6, r4}, {0x5, 0x6f, 0xfffffffeffffffff, 0x9, 0x6, 0x0, 0x25ea, 0x3a47}, {0x0, 0x8, 0x676, 0x3}, 0x7ff, 0x6e6bb8, 0x0, 0x1, 0x2}, {{@in=@empty, 0x4d2, 0xff}, 0x2, @in6=@mcast1, 0x3504, 0x1, 0x2, 0x6, 0x8, 0xd9d}}, 0xe8) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) 1.53213245s ago: executing program 3 (id=108): socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100), 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [], {0xfffffffffffffe40}}, 0x28}}, 0x20008000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x4c}}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x7, 0xfffe, 0xa2af, 0x181}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.402718891s ago: executing program 3 (id=110): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x10}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) 1.315428083s ago: executing program 4 (id=111): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="7a0a00ff0000000071104e00000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, 0x5a, r2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) 1.27633942s ago: executing program 3 (id=113): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@func, @var]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3c}, 0x20) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x20, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r7, 0x0, 0x11203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r8) sendmsg$TIPC_NL_NAME_TABLE_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r9) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r8) sendmsg$sock(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="869b132bd023614380db065e0361c17ea4a123b3bb9e097016930f86e5770aad078c4c277a1395029b04e6e395582175a5a51337a9cca6caa5dbca7d39f50d3c0953ced75eb50ab4bd376a823a25e25fedb026cc0bfe050a853add29e084638e80ea15d545bc95fa88627d7655fabad382915947827999877ccda8219594061cf48fe5dab16ef146649e7e028814bfaf30cab93eb504eed401a2fb150716a6846135fbe3ed3b14696dfa17f7f4e2c25287e53088614a50682c0c2fc16acefd8d9efd4fda8c9e43260fc9fdfb1c88e806ed60f2ada4838b9121780a8f84cdbf51e94b168394c9548cf4ec13209f4c6b61f836", 0xf2}, {&(0x7f0000000180)="63dc795835b4abc3c66a6e43fea75ec65048efda024fdf35087571dc1d1b616c974a193938ab50c5a9040e493af0d8b3fd64c4b6c4e240f82c33fa04565e96627b710e1a1bed2b0bf3b639a0330dfd84769348c374bc3df81dcba87c805741808d97453f774927a7eac58c92dcb5bbe6c7f3c8928c6f67fce77871e66b", 0x7d}, {&(0x7f0000000200)="e6fa9509b3792cd8646ebb9e5cd3c4a3c0298aa2f0e9af3211b9955da6183790f633515fc57370dc7213c5344ed303e14a4df7bdf7c927fdba448e0f08f7279b9dcdeaf9da197bebd94e1cef1fdc75679ea9503c9d7d411ef4ec64f9f8c4cf89c9eb1c8ca62a1ee73ef25529b0a184249f2bef66", 0x74}, {&(0x7f0000000280)="bade6986c4232e27e3f99c07302eade2ff6d6f759679f4facdf6527ccd2990bf067d2035a5a40b89881da26e8e31b8a69542e9c28544292a9f7b98ed76ec55f43051e0f5c054e218f68921671d930e4482680ecdb7b48da951639612eb96e3f5dde849be9be09d7c4344", 0x6a}, {&(0x7f0000000300)="cbc573c9900f51448fab2864e1d1172045", 0x11}, {&(0x7f0000000600)="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", 0x367}], 0x6}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000580)='cgroup\x00'}, 0x30) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)={@cgroup=r10, r11, 0x2}, 0x20) r12 = socket(0x2, 0x801, 0x100) setsockopt$rose(r12, 0x104, 0x1, &(0x7f0000000380)=0x5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000000000000000000003c06000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000040518942519153dcc4f466c8a700850083000000bf09000000000000550901000000000095000000182000000000000000200180000000000000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=0x1, @ANYRESHEX, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 1.188176975s ago: executing program 4 (id=115): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1b, 0x8, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r1, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000540)="ff", 0x1}, {0x0}], 0x2}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x10, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4f, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:4\tm\n'], 0xa) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}}, 0x0) 1.132122183s ago: executing program 2 (id=116): setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000100), 0x1) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000180)={0x27, 0xffffffffffffffff, 0x4}, 0x6) listen(r2, 0x0) r3 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000007c0)={0x10000001}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000004a00010000000000001a00004a00800000881d198cd0a3c176aab3eff87fd1d840692388d9aa86e8d574d741a9878f7d04321fd910411d4260a9b1c16c8e468985e047a8e7efd3161b5e61bc252d00"/97, @ANYRESOCT, @ANYBLOB="000000000000000001"], 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xe, 0x80, 0x9, 0x2, 0x800, r4, 0x27, '\x00', r7, r4, 0x0, 0x0, 0x4}, 0x48) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000305000000000000000000002500", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470001c00028008000100", @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00!\x00', @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x50}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e"], 0x398}}, 0x0) bind$netlink(r11, 0x0, 0x5c) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) 1.050878069s ago: executing program 0 (id=118): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r2, 0x111, 0x4, 0x0, 0x20001f00) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001}}) 910.06015ms ago: executing program 1 (id=119): bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x3d0, 0x1, 0xe66f, 0x2404, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_pktinfo={{0x1c, 0x600, 0x8, {0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x34}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @empty}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x3, [{0x1, 0x2}]}]}}}], 0x58}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002940)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x4, 0x20000000) 846.067279ms ago: executing program 0 (id=120): socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100), 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [], {0xfffffffffffffe40}}, 0x28}}, 0x20008000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x4c}}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x7, 0xfffe, 0xa2af, 0x181}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 815.462491ms ago: executing program 2 (id=121): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='8', 0x1}], 0x1}}], 0x1, 0xc1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x78) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e1e, 0x0, @empty, 0xfffffffd}, 0x1c) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r4, &(0x7f00000060c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005fc0)}}], 0x3, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x15f3cee6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000001f00)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, 0x0, 0x0}, 0x20) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e23, @private=0xa010102}, 0x10) sendmmsg(r7, &(0x7f0000000080), 0x4000000000001f0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 787.647915ms ago: executing program 1 (id=122): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050040000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a0034000202020202020000080026006c090000"], 0x30}}, 0x0) 741.86829ms ago: executing program 4 (id=123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x0, 0xf0ff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}]}, 0x2c}}, 0x0) 671.504551ms ago: executing program 2 (id=124): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="940000001000030400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000006400128009000100626f6e64"], 0x94}}, 0x0) 670.276969ms ago: executing program 1 (id=125): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000f80500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300009fe68550477424ce25d96c99df1a", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0xffffffffffffff22) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x0, @ILA_ATTR_IDENT_TYPE={0x64}}, @RTA_OIF={0x8, 0x4, r4}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00'}, 0x10) sendmmsg$inet6(r5, &(0x7f00000065c0)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="120000000000000011000000"], 0x28}}], 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000014c0)={0xacc, r8, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PEERS={0xa74, 0x8, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e"}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0xb0, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @local}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "379aa2504ba04bea45625d490000000000000000005100"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @rand_addr=0x64010101}}]}, {0x84, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x814, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2dc, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, @WGPEER_A_ALLOWEDIPS={0x47c, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5, 0x3, 0x10}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x4}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x6}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "55fbc2635cc801d67c589cc98f3cf65074dffe0886750dec83be49fbf628e1dc"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8001}]}, 0xacc}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 669.73555ms ago: executing program 0 (id=126): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 547.384802ms ago: executing program 2 (id=127): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='GPL\x00'}, 0x90) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xf8df803362adb335}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xc63b9e35) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) (async) r2 = socket$key(0xf, 0x3, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r3, 0x12, 0x2, 0x0, &(0x7f0000000100)) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x7}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0xfffffffffffffda0) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0xfffffffffffffda0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r4, 0x0, 0x0, 0x2400d041, 0x0, 0x9) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket(0xf, 0x800, 0x888) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000006c0)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000006c0)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'ip6gre0\x00', r7, 0x4, 0x5, 0x6, 0x2, 0x40, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x10, 0xfffffffc, 0x1}}) socket(0x29, 0x800, 0x0) (async) r8 = socket(0x29, 0x800, 0x0) sendmsg$key(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)=ANY=[@ANYBLOB="0214fd07130000002cbd7000ffdbdf2502001000000004d600000cdf000000000800120000000000b06b6e000700000006003200800300731f918e0d3844ee0005000000000000000a010102000000000000000000000000fc02000000000000000000000000000002001300080000002abd70000635000003000300b080000002004e20ac1414bb330b1300ed000000abbd700006350000"], 0x98}}, 0x800) (async) sendmsg$key(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)=ANY=[@ANYBLOB="0214fd07130000002cbd7000ffdbdf2502001000000004d600000cdf000000000800120000000000b06b6e000700000006003200800300731f918e0d3844ee0005000000000000000a010102000000000000000000000000fc02000000000000000000000000000002001300080000002abd70000635000003000300b080000002004e20ac1414bb330b1300ed000000abbd700006350000"], 0x98}}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, 0x0, &(0x7f0000000300)=0x21) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f00000007c0)=[{0x0, 0x3, {0x1, 0x0, 0x1}, {0x0, 0xff, 0x3}, 0xfe, 0xfe}, {0x1, 0x3, {0x2, 0xf0}, {0x0, 0xf0, 0xd}, 0x0, 0x1}, {0x2, 0x1, {0x2, 0x0, 0x3}, {0x1, 0x1, 0x3}, 0x1, 0x2}, {0x3, 0x1, {0x0, 0xd2453a6d54f4f0e7, 0x1}, {0x1, 0xf0}, 0x2, 0xfe}], 0x80) (async) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f00000007c0)=[{0x0, 0x3, {0x1, 0x0, 0x1}, {0x0, 0xff, 0x3}, 0xfe, 0xfe}, {0x1, 0x3, {0x2, 0xf0}, {0x0, 0xf0, 0xd}, 0x0, 0x1}, {0x2, 0x1, {0x2, 0x0, 0x3}, {0x1, 0x1, 0x3}, 0x1, 0x2}, {0x3, 0x1, {0x0, 0xd2453a6d54f4f0e7, 0x1}, {0x1, 0xf0}, 0x2, 0xfe}], 0x80) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x128, 0x25, 0x148, 0x0, 0x60, 0x1f8, 0x2a8, 0x2a8, 0x1f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0xff, 0x0, 'bridge0\x00', 'virt_wifi0\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x128, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x28}}, @common=@ah={{0x30}, {[0x2, 0x6]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="d89df338792e", 0x7f, 0x10, [0x19, 0x7, 0x40, 0x22, 0x1e, 0x40, 0x11, 0x40, 0x2d, 0xd, 0x3a, 0xa, 0xb, 0x23, 0x33, 0x3b], 0x1, 0x401, 0xffffffffffffff81}}}, {{@ip={@empty, @empty, 0x0, 0xffffff00, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2f0) 546.530061ms ago: executing program 0 (id=128): r0 = socket(0x1000000010, 0x80002, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRESHEX=0x0, @ANYBLOB="00000000ff7f00001c001a800800038004000500080000003e"], 0x44}}, 0x0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x4) getsockname(r3, &(0x7f0000000c00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004840)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="31070000000000000000380000000e0001006e657464657673496d0000000f0002006e657464657673696d30000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x64}, 0x1, 0x2}, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f0000004640)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) sendmsg(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="d0", 0x1}, {&(0x7f0000000240)="a0c4df", 0x3}], 0x2}, 0x1) setsockopt$sock_attach_bpf(r11, 0x1, 0x2a, &(0x7f0000000100)=r13, 0x4) recvmsg(r11, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r12) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r14, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x1f8, 0x111, 0x4b4, 0x1f8, 0xd4feffff, 0x2c8, 0x20a, 0x278, 0x2c8, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:dpkg_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{}]}, @union]}}, &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) recvmmsg(r8, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/30, 0x1e}], 0x1, &(0x7f0000000100)=""/7, 0x7}, 0x2}, {{&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000001f40)=""/4096, 0x1000}, 0x211f}, {{&(0x7f0000000200)=@sco={0x1f, @none}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)=""/153, 0x99}, {&(0x7f0000000340)=""/144, 0x90}], 0x2, &(0x7f0000000440)=""/103, 0x67}, 0x5}, {{&(0x7f00000004c0)=@nfc, 0x80, &(0x7f0000000800)=[{&(0x7f0000000540)=""/224, 0xe0}, {&(0x7f0000000640)=""/150, 0x96}, {&(0x7f0000000700)=""/203, 0xcb}], 0x3, &(0x7f0000000840)=""/129, 0x81}, 0x3}, {{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002f40)=[{&(0x7f0000000980)=""/120, 0x78}, {&(0x7f0000000a00)=""/9, 0x9}, {&(0x7f0000000a40)=""/33, 0x21}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/3, 0x3}, {&(0x7f00000046c0)=""/221, 0xdd}, {&(0x7f0000000cc0)=""/245, 0xf5}, {&(0x7f0000000dc0)=""/101, 0x65}, {&(0x7f0000000e40)=""/189, 0xbd}], 0x9, &(0x7f00000047c0)=""/72, 0x48}, 0x4}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000f00)=""/25, 0x19}, {&(0x7f0000003080)=""/27, 0x1b}], 0x2}, 0x7f}, {{&(0x7f0000003100)=@isdn, 0x80, &(0x7f0000003180), 0x0, &(0x7f00000031c0)=""/183, 0xb7}, 0xf}, {{&(0x7f0000003280)=@nl, 0x80, &(0x7f0000004300)=[{&(0x7f0000003300)=""/4096, 0x1000}], 0x1, &(0x7f0000004340)=""/193, 0xc1}, 0x1}], 0x8, 0x40000160, &(0x7f0000004680)={r9, r10+10000000}) 546.234207ms ago: executing program 4 (id=129): r0 = socket(0x10, 0x803, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000140)=0x632f, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000880)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x1d, r2, 0x3}, 0x10, &(0x7f0000000080)={&(0x7f0000000280)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "17c725fb5c00"}, 0x10}}, 0x0) 485.517046ms ago: executing program 4 (id=130): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a00010071756575650000001400028008000440000000000600014000000800000000001100010000000000000000000000000a"], 0xd8}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x8, 0x8, 0x10000, 0x42, 0x1410, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xfffffffe}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x3, 0x81, 0x40, 0x444, 0x1, 0xc2c, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1, 0xd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESOCT=r2, @ANYBLOB="e5eaf8b1143c7386e7b575b3ba0e0bd12d362a5403aa671cf05148f300988d206f0900000000000000a4f81d86c414c3a249322609665a4fdc2b20699191ceb3dc3556948fe31e1bf02c6ad986ee0eda9691c13970fb68744b1e4325727a68", @ANYRES16=r4], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r8, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c1f0000000000000d00000008000500", @ANYRES16=r7], 0x50}}, 0x48000) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000011000d04000000000800000000000000", @ANYRES32=r10, @ANYRES32=r3], 0x20}, 0x1, 0x6}, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1a, 0x16, &(0x7f0000000400)=ANY=[@ANYRESDEC=r1], &(0x7f0000000100)='GPL\x00', 0x6}, 0x90) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f00000004c0)="1bcd63c3a795c397737905b20db7b1b2a93ed0026260673dcf68c548640afe018d347937381c794e7786da8d0ee34bb0948d0e877e3a0bdfe5bb04c68db196ca21bd96c2f76b9f342d3a0c20e3a453c5f78b82b5754d9738238c60f0b2fa32a0a0b7db58a5236dc440fbe124ecad319b3e35f7383342be20956bf6ad040855aca3e606b33fdb355f903ebcad2a4573c492d436c58df710f2b66d516b8d40634cfd2bc6644e194efbc6cdeea791e13795f01e77898947381c0ade9082ec", &(0x7f0000000b00)=""/261, &(0x7f0000000c40)="9143bb26691ccb3c637734dc1eb9089a7cad5a3138013db3d9d7e3ba2c5037959a228817a002dedafe569880610201ddeffa8aa299f73b4681efb019a2657aa1ca157816ae8b319871c97e6c4862022a9ac3d495354b9ea27941ea0721cd52e9161f041d80210b59c4e41ef576a5a807bca626c2ab05d7fdea1ff87c784ca4e0ea8c5ab00829401c2b38ef17ac466cf377dc724377c5bfa5377ba335777f1cfe08793730872681c00875e0c1d7e7ad46fabffeea3ce70b904914cc", &(0x7f0000000a40)="5c349a91aefdca9453e35163d2a4c042d6564fac6100f043f95a4bd4da88c86897c192184180245d5c4e3ce4286e0a87346edec0fec54e2e1ec249ef8f78f27de08cc9b2a3f89c73b861ecfa23ce5894f8013e03d37ceb25c164445754284b99ee5a6fb3dae0c20dc61b668b8106664152cd0825267f311a5e0162a3c4b10d7d3dc4e3a196f545f0324021f031", 0xffff, r5, 0x4}, 0xfff9) accept4(r11, 0x0, 0x0, 0x0) 461.650666ms ago: executing program 1 (id=131): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@private, @in=@multicast1}}, {{@in=@local}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast1, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {0xb0, 0x0, 0x4}, {0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in6=@private1}, 0x0, @in6=@loopback, 0x3503}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0xcf8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 359.472142ms ago: executing program 2 (id=132): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r2, 0x111, 0x4, 0x0, 0x20001f00) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x184, r6, 0x300, 0x4, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x15c, 0x80, [@ht={0x2d, 0x1a, {0xc, 0x1, 0x4, 0x0, {0x2, 0x8b5, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x6, 0x5}}, @perr={0x84, 0xee, {0xb, 0xe, [{{0x0, 0x1}, @device_b, 0x4, @value=@broadcast, 0x25}, {{0x0, 0x1}, @device_b, 0x3, @value=@device_b, 0xb}, {{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0x3}, {{}, @broadcast, 0x1, @void, 0x1f}, {{0x0, 0x1}, @broadcast, 0x7, @value, 0x34}, {{}, @device_a, 0x8000, @void, 0x11}, {{0x0, 0x1}, @device_b, 0x2, @value, 0x41}, {{}, @device_a, 0xbb, @void, 0x1a}, {{0x0, 0x1}, @device_b, 0x92d, @value=@device_b, 0x36}, {{}, @device_b, 0x2, @void, 0x3b}, {{0x0, 0x1}, @device_b, 0x8, @value=@broadcast}, {{}, @broadcast, 0x9, @void, 0xf}, {{0x0, 0x1}, @device_a, 0x3, @value, 0x2d}, {{0x0, 0x1}, @device_a, 0xff, @value=@device_b, 0x32}]}}, @random_vendor={0xdd, 0x40, "13001fb32a80b43ae69d39ebf0c8105b52c27bee0803ccc71796e0b69747f3c2427f707e519641428db09154acd98f3f6dcb0f9783d8c03824a7e96ed1b59184"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xfc, 0x38, 0x5}}, @ibss={0x6, 0x2, 0x6}]}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x184}}, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001}}) 357.871944ms ago: executing program 1 (id=133): setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000100), 0x1) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000180)={0x27, 0xffffffffffffffff, 0x4}, 0x6) listen(r2, 0x0) r3 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000007c0)={0x10000001}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000004a00010000000000001a00004a00800000881d198cd0a3c176aab3eff87fd1d840692388d9aa86e8d574d741a9878f7d04321fd910411d4260a9b1c16c8e468985e047a8e7efd3161b5e61bc252d00"/97, @ANYRESOCT, @ANYBLOB="000000000000000001"], 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xe, 0x80, 0x9, 0x2, 0x800, r4, 0x27, '\x00', r7, r4, 0x0, 0x0, 0x4}, 0x48) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000305000000000000000000002500", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00!\x00', @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x50}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e"], 0x398}}, 0x0) bind$netlink(r11, 0x0, 0x5c) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) 304.724544ms ago: executing program 0 (id=134): r0 = socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x10, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x54}}, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="9a4f106a6fe2849f24a4c141ac01b980610de5908463294ced7fc388d75400852412a33fe59ce6ac8e26dfb941c966633312f48e756d407752c2bf9cfc19546418a1be1b36276c4bdd13e209db3fdc6d2bbe1930cabb68a67f4988290d1a", 0x5e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x80, r5, 0x135, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x81, 0x7}, {0x0, 0xff}, {0x6, 0x7}, {0x80, 0x7}, {0x0, 0x7}, {}, {}, {0x0, 0x6}, {0x0, 0x2}, {}, {0x8, 0x4}, {0x0, 0x3}, {0x7, 0x5}], "040ded930dde6d5a"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x40, 0x4}, {0xc, 0x3}, {0x5}, {0x1, 0x4}, {0x81, 0x5}, {0x8, 0x4}], "7ecbad144922f925"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x1f, 0x4}, {0xa8}, {0x1, 0x5}, {}, {}, {0x7, 0x2}, {0x7}, {0x40}, {0xf7}, {0x79, 0x3}, {0x0, 0x4}], "caa024a8eda00f60"}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="890c2e2f", 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x5}, 0x90) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000003b000701000000000000000001000000040000000800018004001000080002"], 0x28}}, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r9, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r9, &(0x7f0000001bc0)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @private0}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0}}], 0x2, 0x0) 295.800372ms ago: executing program 3 (id=135): r0 = socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x10, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x0, {0x60}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x54}}, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="9a4f106a6fe2849f24a4c141ac01b980610de5908463294ced7fc388d75400852412a33fe59ce6ac8e26dfb941c966633312f48e756d407752c2bf9cfc19546418a1be1b36276c4bdd13e209db3fdc6d2bbe19", 0x53) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x80, r4, 0x135, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x81, 0x7}, {0x0, 0xff}, {0x6, 0x7}, {0x80, 0x7}, {0x0, 0x7}, {}, {}, {0x0, 0x6}, {0x0, 0x2}, {}, {0x8, 0x4}, {0x0, 0x3}, {0x7, 0x5}], "040ded930dde6d5a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x0, 0x4}, {0x0, 0x3}, {0x5}, {}, {0x8, 0x4}], "7ecbad144922f925"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x0, 0x4}, {0xa8}, {0x1, 0x5}, {0x1}, {0x1f, 0x1}, {0x7, 0x2}, {0x7}, {0x40}, {0xf7}, {0x79, 0x3}, {0x0, 0x4}], "caa024a8eda00f60"}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 162.942503ms ago: executing program 1 (id=136): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x34, r1, 0xf1aad47e89fb43b5, 0x0, 0x0, {}, [@handle=@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) recvmsg$unix(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001bc0), 0x0, &(0x7f0000000980)}, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001a00010000000488349911b885"], 0x2c}}, 0x24008800) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000140)=0x4) r6 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000180)='cpu.stat\x00', 0x275a, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r10, &(0x7f000000a440)={0x0, 0x0, &(0x7f000000a400)={0x0}}, 0x0) accept$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000005c0)=0x1c) getpeername$packet(r7, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="0030db0aff0f000018140000", @ANYRES32=r7, @ANYBLOB="0000000000000000184000000800"/24], &(0x7f0000000700)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', r11, 0x0, r7, 0x8, &(0x7f00000007c0)={0x7}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x5, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff8c}, 0x90) socket$igmp6(0xa, 0x3, 0x2) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb4}}, 0x0) 162.253025ms ago: executing program 4 (id=137): socket$kcm(0x10, 0x2, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) socketpair(0x5, 0x2, 0x6, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0xa0, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x81, 0x33, @beacon={{{}, {}, @broadcast, @device_a, @random="16046e098b08"}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x1, [{}]}, @void, @void, @void, @val={0x5, 0x3}, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x19, {0x0, 0x2, 0x4, 0x0, {0x1ff, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x7cfadfd09456c78c, 0x9, 0x7}}, @void, @void, @void, [{0xdd, 0x1e, "4681fcb2fb4323c9f657e659a392e70d299679756854196d371f504d9b18"}]}}]}, 0xa0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x20040080) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x0, 0x200}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) setsockopt$inet_mtu(r0, 0x10d, 0xa, &(0x7f0000000e00), 0x4) socket$inet_udp(0x2, 0x2, 0x0) 119.365678ms ago: executing program 3 (id=138): bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x3d0, 0x1, 0xe66f, 0x2404, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_pktinfo={{0x1c, 0x600, 0x8, {0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x34}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @empty}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x3, [{0x1, 0x2}]}]}}}], 0x58}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002940)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x4, 0x20000000) 104.045076ms ago: executing program 0 (id=139): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="7a0a00ff0000000071104e00000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, 0x5a, r2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) 0s ago: executing program 2 (id=140): socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100), 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x4c}}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540)={0x7, 0xfffe, 0xa2af, 0x181}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. [ 68.252387][ T5079] cgroup: Unknown subsys name 'net' [ 68.404364][ T5079] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.032641][ T5079] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.609109][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.615706][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.368313][ T5091] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.379291][ T5096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.387705][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.396174][ T5096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.404108][ T5096] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.425615][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.432725][ T5102] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.433140][ T5096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.446320][ T5102] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.449172][ T5096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.461624][ T5096] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.462368][ T5105] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.469179][ T5096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.483576][ T5096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.485046][ T5105] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.490990][ T5096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.499515][ T5105] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.505952][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.513323][ T5105] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.519368][ T5096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.525900][ T5102] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.533418][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.540466][ T5102] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.550368][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.554557][ T5102] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.560995][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.574709][ T5096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.583123][ T5096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.591160][ T5096] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.599679][ T5096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.182712][ T5089] chnl_net:caif_netlink_parms(): no params data found [ 74.256426][ T5098] chnl_net:caif_netlink_parms(): no params data found [ 74.370755][ T5088] chnl_net:caif_netlink_parms(): no params data found [ 74.467961][ T5095] chnl_net:caif_netlink_parms(): no params data found [ 74.548089][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.556285][ T5089] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.563606][ T5089] bridge_slave_0: entered allmulticast mode [ 74.571598][ T5089] bridge_slave_0: entered promiscuous mode [ 74.599505][ T5103] chnl_net:caif_netlink_parms(): no params data found [ 74.622576][ T5089] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.631332][ T5089] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.639077][ T5089] bridge_slave_1: entered allmulticast mode [ 74.646690][ T5089] bridge_slave_1: entered promiscuous mode [ 74.667679][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.674912][ T5098] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.683903][ T5098] bridge_slave_0: entered allmulticast mode [ 74.692514][ T5098] bridge_slave_0: entered promiscuous mode [ 74.753537][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.760923][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.768645][ T5098] bridge_slave_1: entered allmulticast mode [ 74.776207][ T5098] bridge_slave_1: entered promiscuous mode [ 74.789252][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.796453][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.803602][ T5088] bridge_slave_0: entered allmulticast mode [ 74.810954][ T5088] bridge_slave_0: entered promiscuous mode [ 74.859838][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.867243][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.874405][ T5088] bridge_slave_1: entered allmulticast mode [ 74.883039][ T5088] bridge_slave_1: entered promiscuous mode [ 74.893018][ T5089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.961875][ T5089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.997018][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.004221][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.011885][ T5095] bridge_slave_0: entered allmulticast mode [ 75.019410][ T5095] bridge_slave_0: entered promiscuous mode [ 75.029115][ T5098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.041805][ T5098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.066322][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.079589][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.105906][ T5089] team0: Port device team_slave_0 added [ 75.112293][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.120053][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.127824][ T5095] bridge_slave_1: entered allmulticast mode [ 75.134895][ T5095] bridge_slave_1: entered promiscuous mode [ 75.179197][ T5089] team0: Port device team_slave_1 added [ 75.216959][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.224163][ T5103] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.231824][ T5103] bridge_slave_0: entered allmulticast mode [ 75.239326][ T5103] bridge_slave_0: entered promiscuous mode [ 75.248436][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.256120][ T5103] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.263284][ T5103] bridge_slave_1: entered allmulticast mode [ 75.270738][ T5103] bridge_slave_1: entered promiscuous mode [ 75.320422][ T5095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.334487][ T5098] team0: Port device team_slave_0 added [ 75.343618][ T5098] team0: Port device team_slave_1 added [ 75.364774][ T5088] team0: Port device team_slave_0 added [ 75.374759][ T5088] team0: Port device team_slave_1 added [ 75.396807][ T5095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.454600][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.461613][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.488211][ T5089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.502056][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.509084][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.535641][ T5089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.573707][ T5103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.606020][ T5096] Bluetooth: hci1: command tx timeout [ 75.613334][ T5095] team0: Port device team_slave_0 added [ 75.620270][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.630931][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.657231][ T5098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.670752][ T5103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.685153][ T5101] Bluetooth: hci2: command tx timeout [ 75.690908][ T5096] Bluetooth: hci3: command tx timeout [ 75.696907][ T5101] Bluetooth: hci0: command tx timeout [ 75.696930][ T4490] Bluetooth: hci4: command tx timeout [ 75.711414][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.718473][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.744756][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.759465][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.766662][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.792677][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.807621][ T5095] team0: Port device team_slave_1 added [ 75.814351][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.821454][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.847793][ T5098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.881369][ T5103] team0: Port device team_slave_0 added [ 75.896825][ T5103] team0: Port device team_slave_1 added [ 75.997698][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.004681][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.031449][ T5103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.044362][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.052080][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.078172][ T5095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.118193][ T5089] hsr_slave_0: entered promiscuous mode [ 76.125314][ T5089] hsr_slave_1: entered promiscuous mode [ 76.132853][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.139942][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.166444][ T5103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.178296][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.185666][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.211762][ T5095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.239232][ T5098] hsr_slave_0: entered promiscuous mode [ 76.246594][ T5098] hsr_slave_1: entered promiscuous mode [ 76.253037][ T5098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.261301][ T5098] Cannot create hsr debugfs directory [ 76.302653][ T5088] hsr_slave_0: entered promiscuous mode [ 76.309397][ T5088] hsr_slave_1: entered promiscuous mode [ 76.316419][ T5088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.324022][ T5088] Cannot create hsr debugfs directory [ 76.410129][ T5095] hsr_slave_0: entered promiscuous mode [ 76.416774][ T5095] hsr_slave_1: entered promiscuous mode [ 76.423249][ T5095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.431371][ T5095] Cannot create hsr debugfs directory [ 76.531623][ T5103] hsr_slave_0: entered promiscuous mode [ 76.538110][ T5103] hsr_slave_1: entered promiscuous mode [ 76.544310][ T5103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.552777][ T5103] Cannot create hsr debugfs directory [ 76.953303][ T5089] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.987327][ T5089] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.024603][ T5089] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.047802][ T5089] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.079495][ T5098] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.097846][ T5098] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.109693][ T5098] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.120471][ T5098] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.214371][ T5088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.234184][ T5088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.246600][ T5088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.257547][ T5088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.378626][ T5095] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.394110][ T5095] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.424031][ T5095] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.456361][ T5095] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.578817][ T5103] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.596277][ T5098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.620845][ T5103] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.632286][ T5103] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.656967][ T5089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.673634][ T5103] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.686125][ T5101] Bluetooth: hci1: command tx timeout [ 77.731464][ T5089] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.766213][ T5101] Bluetooth: hci4: command tx timeout [ 77.771761][ T5101] Bluetooth: hci0: command tx timeout [ 77.777226][ T5096] Bluetooth: hci3: command tx timeout [ 77.778224][ T4490] Bluetooth: hci2: command tx timeout [ 77.796907][ T5098] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.825011][ T4833] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.832450][ T4833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.843833][ T4833] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.851009][ T4833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.876913][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.897598][ T4833] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.904705][ T4833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.953346][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.960639][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.051523][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.079573][ T5095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.114578][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.121787][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.133047][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.140359][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.253341][ T5095] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.320027][ T5103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.387552][ T5103] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.409769][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.416980][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.454743][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.461959][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.568841][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.576065][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.600481][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.607814][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.669546][ T5098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.773488][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.803560][ T5089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.818419][ T5095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.948538][ T5088] veth0_vlan: entered promiscuous mode [ 79.040964][ T5088] veth1_vlan: entered promiscuous mode [ 79.080200][ T5089] veth0_vlan: entered promiscuous mode [ 79.154518][ T5089] veth1_vlan: entered promiscuous mode [ 79.262214][ T5088] veth0_macvtap: entered promiscuous mode [ 79.283745][ T5088] veth1_macvtap: entered promiscuous mode [ 79.320158][ T5089] veth0_macvtap: entered promiscuous mode [ 79.341219][ T5089] veth1_macvtap: entered promiscuous mode [ 79.363756][ T5103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.372407][ T5098] veth0_vlan: entered promiscuous mode [ 79.393681][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.414760][ T5098] veth1_vlan: entered promiscuous mode [ 79.427716][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.439426][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.453160][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.469967][ T5095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.496159][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.515537][ T5088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.524400][ T5088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.536347][ T5088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.545654][ T5088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.572913][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.584079][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.596100][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.660324][ T5089] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.676492][ T5089] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.686250][ T5089] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.696543][ T5089] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.759508][ T5095] veth0_vlan: entered promiscuous mode [ 79.765316][ T4490] Bluetooth: hci1: command tx timeout [ 79.822308][ T5103] veth0_vlan: entered promiscuous mode [ 79.845687][ T4490] Bluetooth: hci0: command tx timeout [ 79.847431][ T5101] Bluetooth: hci3: command tx timeout [ 79.851115][ T4490] Bluetooth: hci2: command tx timeout [ 79.857197][ T5096] Bluetooth: hci4: command tx timeout [ 79.868001][ T5098] veth0_macvtap: entered promiscuous mode [ 79.889114][ T5103] veth1_vlan: entered promiscuous mode [ 79.898595][ T5095] veth1_vlan: entered promiscuous mode [ 79.922809][ T3860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.931991][ T3860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.952247][ T5098] veth1_macvtap: entered promiscuous mode [ 79.993576][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.002550][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.084323][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.097454][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.109037][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.119714][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.131392][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.155939][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.165870][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.172687][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.188682][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.194397][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.208096][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.221604][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.231315][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.239500][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.261342][ T5098] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.270304][ T5098] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.280408][ T5098] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.289363][ T5098] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.323450][ T5095] veth0_macvtap: entered promiscuous mode [ 80.338281][ T5103] veth0_macvtap: entered promiscuous mode [ 80.360444][ T5103] veth1_macvtap: entered promiscuous mode [ 80.389960][ T5095] veth1_macvtap: entered promiscuous mode [ 80.441399][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.458261][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.469080][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.483366][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.497294][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.526722][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.556401][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.589358][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.601274][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.616996][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.628575][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.638990][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.652270][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.665686][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.679592][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.691922][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.723338][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.751725][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.773749][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.812818][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.823043][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.834651][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.849423][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.893181][ T5183] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 80.961420][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.987621][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.012196][ T5188] netlink: 'syz.1.8': attribute type 46 has an invalid length. [ 81.025454][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.045514][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.057856][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.082572][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.106659][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.120706][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.137720][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.201776][ T5103] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.211113][ T5194] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.231134][ T5103] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.266439][ T5103] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.275549][ T5103] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.294460][ T5095] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.306580][ T5095] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.315665][ T5095] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.324374][ T5095] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.358437][ T5199] syz.1.12 uses obsolete (PF_INET,SOCK_PACKET) [ 81.372581][ T3875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.386032][ T3875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.597152][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.650045][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.677385][ T3860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.705654][ T3860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.723359][ T5208] netlink: 'syz.1.15': attribute type 10 has an invalid length. [ 81.799381][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.825322][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.858669][ T5096] Bluetooth: hci1: command tx timeout [ 81.925413][ T5101] Bluetooth: hci2: command tx timeout [ 81.930881][ T5101] Bluetooth: hci0: command tx timeout [ 81.936499][ T5096] Bluetooth: hci4: command tx timeout [ 81.938345][ T4490] Bluetooth: hci3: command tx timeout [ 81.942495][ T3875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.975029][ T3875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.061684][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.074089][ T5214] netlink: 25 bytes leftover after parsing attributes in process `syz.1.16'. [ 82.112037][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.197815][ T5218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 82.858040][ T5242] netlink: 7 bytes leftover after parsing attributes in process `syz.4.22'. [ 83.051162][ T5246] Zero length message leads to an empty skb [ 83.147485][ T5257] FAULT_INJECTION: forcing a failure. [ 83.147485][ T5257] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 83.207774][ T5257] CPU: 0 PID: 5257 Comm: syz.2.26 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 83.217725][ T5257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 83.227820][ T5257] Call Trace: [ 83.231132][ T5257] [ 83.234093][ T5257] dump_stack_lvl+0x241/0x360 [ 83.238822][ T5257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.244051][ T5257] ? __pfx__printk+0x10/0x10 [ 83.248674][ T5257] ? __pfx_lock_release+0x10/0x10 [ 83.253753][ T5257] should_fail_ex+0x3b0/0x4e0 [ 83.258459][ T5257] _copy_to_user+0x2f/0xb0 [ 83.262874][ T5257] generic_map_lookup_batch+0x95d/0xf90 [ 83.268446][ T5257] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 83.274546][ T5257] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 83.277022][ T5262] netlink: 108 bytes leftover after parsing attributes in process `syz.1.28'. [ 83.280634][ T5257] bpf_map_do_batch+0x2d2/0x690 [ 83.280672][ T5257] __sys_bpf+0x654/0x810 [ 83.298727][ T5257] ? __pfx___sys_bpf+0x10/0x10 [ 83.303522][ T5257] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 83.309525][ T5257] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.315865][ T5257] ? do_syscall_64+0x100/0x230 [ 83.320746][ T5257] __x64_sys_bpf+0x7c/0x90 [ 83.325184][ T5257] do_syscall_64+0xf3/0x230 [ 83.329696][ T5257] ? clear_bhb_loop+0x35/0x90 [ 83.334387][ T5257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.340299][ T5257] RIP: 0033:0x7f92ec375bd9 [ 83.344722][ T5257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.364328][ T5257] RSP: 002b:00007f92ebdff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 83.372753][ T5257] RAX: ffffffffffffffda RBX: 00007f92ec504038 RCX: 00007f92ec375bd9 [ 83.380728][ T5257] RDX: 0000000000000038 RSI: 00000000200003c0 RDI: 0000000000000018 [ 83.388708][ T5257] RBP: 00007f92ebdff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 83.396681][ T5257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 83.404652][ T5257] R13: 000000000000006e R14: 00007f92ec504038 R15: 00007ffc52337bb8 [ 83.412637][ T5257] [ 83.498582][ T5256] netlink: 40 bytes leftover after parsing attributes in process `syz.1.28'. [ 83.797690][ T5273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.32'. [ 83.979723][ T5282] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.157457][ T5296] warning: `syz.3.39' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.528779][ T5317] openvswitch: netlink: Message has 16 unknown bytes. [ 84.549444][ T5319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 84.712191][ T5323] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 84.830930][ T5323] bond0: entered promiscuous mode [ 84.836827][ T5329] xt_TCPMSS: Only works on TCP SYN packets [ 84.860821][ T5323] bond_slave_0: entered promiscuous mode [ 84.875289][ T5323] bond_slave_1: entered promiscuous mode [ 84.893804][ T5323] bond0: left promiscuous mode [ 84.901628][ T5334] netlink: 28 bytes leftover after parsing attributes in process `syz.4.50'. [ 84.903259][ T5323] bond_slave_0: left promiscuous mode [ 84.918959][ T5323] bond_slave_1: left promiscuous mode [ 84.942626][ T5324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.48'. [ 85.106159][ T5342] netlink: 'syz.3.56': attribute type 10 has an invalid length. [ 85.124213][ T5342] netlink: 40 bytes leftover after parsing attributes in process `syz.3.56'. [ 85.157670][ T5342] bridge0: port 3(syz_tun) entered blocking state [ 85.164349][ T5342] bridge0: port 3(syz_tun) entered disabled state [ 85.192891][ T5342] syz_tun: entered allmulticast mode [ 85.217835][ T5342] syz_tun: entered promiscuous mode [ 85.226632][ T5342] bridge0: port 3(syz_tun) entered blocking state [ 85.233392][ T5342] bridge0: port 3(syz_tun) entered forwarding state [ 85.267231][ T5344] vlan2: entered promiscuous mode [ 85.272319][ T5344] bond0: entered promiscuous mode [ 85.298067][ T5344] bond_slave_0: entered promiscuous mode [ 85.313283][ T5344] bond_slave_1: entered promiscuous mode [ 85.612043][ T5363] netlink: 'syz.1.61': attribute type 12 has an invalid length. [ 85.849308][ T5382] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 86.433267][ T5415] openvswitch: netlink: Flow actions attr not present in new flow. [ 86.451545][ T5411] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.459892][ T5411] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.547839][ T5418] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.555740][ T5418] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.694149][ T5429] netlink: 'syz.4.87': attribute type 15 has an invalid length. [ 86.973029][ T929] cfg80211: failed to load regulatory.db [ 87.142550][ T5451] openvswitch: netlink: Flow actions attr not present in new flow. [ 87.283885][ T5457] __nla_validate_parse: 13 callbacks suppressed [ 87.283906][ T5457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'. [ 87.326170][ T5462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'. [ 87.341957][ T5462] netlink: 16 bytes leftover after parsing attributes in process `syz.4.101'. [ 87.401019][ T5462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.101'. [ 87.453963][ T5465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.102'. [ 87.585919][ T5473] openvswitch: netlink: Message has 16 unknown bytes. [ 87.877687][ T5486] openvswitch: netlink: Flow actions attr not present in new flow. [ 87.967866][ T5494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 88.066052][ T5496] bridge0: port 3(syz_tun) entered disabled state [ 88.072759][ T5496] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.081333][ T5496] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.145090][ T5502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 88.153952][ T5502] netlink: 16 bytes leftover after parsing attributes in process `syz.2.116'. [ 88.204055][ T5503] xt_TCPMSS: Only works on TCP SYN packets [ 88.214795][ T5509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'. [ 88.290092][ T5500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.115'. [ 88.980413][ T5552] openvswitch: netlink: Flow actions attr not present in new flow. [ 89.165735][ T62] ================================================================== [ 89.173865][ T62] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0xe5/0x330 [ 89.181984][ T62] Read of size 8 at addr ffff88802d7228b8 by task kworker/u8:4/62 [ 89.189807][ T62] [ 89.192158][ T62] CPU: 0 PID: 62 Comm: kworker/u8:4 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 89.202248][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 89.212331][ T62] Workqueue: l2tp l2tp_tunnel_del_work [ 89.217830][ T62] Call Trace: [ 89.221134][ T62] [ 89.224083][ T62] dump_stack_lvl+0x241/0x360 [ 89.228776][ T62] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.233992][ T62] ? __pfx__printk+0x10/0x10 [ 89.238587][ T62] ? _printk+0xd5/0x120 [ 89.242740][ T62] ? __virt_addr_valid+0x183/0x520 [ 89.247856][ T62] ? __virt_addr_valid+0x183/0x520 [ 89.252979][ T62] print_report+0x169/0x550 [ 89.257489][ T62] ? __virt_addr_valid+0x183/0x520 [ 89.262608][ T62] ? __virt_addr_valid+0x183/0x520 [ 89.267722][ T62] ? __virt_addr_valid+0x44e/0x520 [ 89.272839][ T62] ? __phys_addr+0xba/0x170 [ 89.277349][ T62] ? l2tp_tunnel_del_work+0xe5/0x330 [ 89.282631][ T62] kasan_report+0x143/0x180 [ 89.287137][ T62] ? l2tp_tunnel_del_work+0xe5/0x330 [ 89.292424][ T62] l2tp_tunnel_del_work+0xe5/0x330 [ 89.297536][ T62] ? process_scheduled_works+0x945/0x1830 [ 89.303254][ T62] process_scheduled_works+0xa2c/0x1830 [ 89.308812][ T62] ? __pfx_process_scheduled_works+0x10/0x10 [ 89.314810][ T62] ? assign_work+0x364/0x3d0 [ 89.319423][ T62] worker_thread+0x86d/0xd50 [ 89.324028][ T62] ? __kthread_parkme+0x169/0x1d0 [ 89.329060][ T62] ? __pfx_worker_thread+0x10/0x10 [ 89.334171][ T62] kthread+0x2f0/0x390 [ 89.338243][ T62] ? __pfx_worker_thread+0x10/0x10 [ 89.343368][ T62] ? __pfx_kthread+0x10/0x10 [ 89.347964][ T62] ret_from_fork+0x4b/0x80 [ 89.352387][ T62] ? __pfx_kthread+0x10/0x10 [ 89.356994][ T62] ret_from_fork_asm+0x1a/0x30 [ 89.361771][ T62] [ 89.364787][ T62] [ 89.367104][ T62] Allocated by task 5547: [ 89.371426][ T62] kasan_save_track+0x3f/0x80 [ 89.376104][ T62] __kasan_kmalloc+0x98/0xb0 [ 89.380700][ T62] __kmalloc_noprof+0x1f9/0x400 [ 89.385557][ T62] l2tp_session_create+0x3b/0xc20 [ 89.390581][ T62] pppol2tp_connect+0xca3/0x17a0 [ 89.395522][ T62] __sys_connect+0x2df/0x310 [ 89.400114][ T62] __x64_sys_connect+0x7a/0x90 [ 89.404879][ T62] do_syscall_64+0xf3/0x230 [ 89.409377][ T62] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.415358][ T62] [ 89.417678][ T62] Freed by task 5095: [ 89.421652][ T62] kasan_save_track+0x3f/0x80 [ 89.426326][ T62] kasan_save_free_info+0x40/0x50 [ 89.431359][ T62] poison_slab_object+0xe0/0x150 [ 89.436301][ T62] __kasan_slab_free+0x37/0x60 [ 89.441068][ T62] kfree+0x149/0x360 [ 89.444984][ T62] __sk_destruct+0x58/0x5f0 [ 89.449495][ T62] rcu_core+0xafd/0x1830 [ 89.453736][ T62] handle_softirqs+0x2c4/0x970 [ 89.458498][ T62] __irq_exit_rcu+0xf4/0x1c0 [ 89.463100][ T62] irq_exit_rcu+0x9/0x30 [ 89.467341][ T62] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 89.472990][ T62] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 89.478986][ T62] [ 89.481309][ T62] Last potentially related work creation: [ 89.487103][ T62] kasan_save_stack+0x3f/0x60 [ 89.491813][ T62] __kasan_record_aux_stack+0xac/0xc0 [ 89.497208][ T62] call_rcu+0x167/0xa70 [ 89.501462][ T62] pppol2tp_release+0x24b/0x350 [ 89.506325][ T62] sock_close+0xbc/0x240 [ 89.510568][ T62] __fput+0x24a/0x8a0 [ 89.514549][ T62] task_work_run+0x24f/0x310 [ 89.519146][ T62] syscall_exit_to_user_mode+0x168/0x360 [ 89.524866][ T62] do_syscall_64+0x100/0x230 [ 89.529463][ T62] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.535383][ T62] [ 89.537713][ T62] The buggy address belongs to the object at ffff88802d722800 [ 89.537713][ T62] which belongs to the cache kmalloc-1k of size 1024 [ 89.551859][ T62] The buggy address is located 184 bytes inside of [ 89.551859][ T62] freed 1024-byte region [ffff88802d722800, ffff88802d722c00) [ 89.565758][ T62] [ 89.568094][ T62] The buggy address belongs to the physical page: [ 89.574507][ T62] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d720 [ 89.583262][ T62] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 89.591766][ T62] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 89.599317][ T62] page_type: 0xffffefff(slab) [ 89.603991][ T62] raw: 00fff00000000040 ffff888015041dc0 ffffea0001f58200 0000000000000002 [ 89.612563][ T62] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 89.621315][ T62] head: 00fff00000000040 ffff888015041dc0 ffffea0001f58200 0000000000000002 [ 89.629992][ T62] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 89.638764][ T62] head: 00fff00000000003 ffffea0000b5c801 ffffffffffffffff 0000000000000000 [ 89.647445][ T62] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 89.656204][ T62] page dumped because: kasan: bad access detected [ 89.662611][ T62] page_owner tracks the page as allocated [ 89.668316][ T62] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5088, tgid 5088 (syz-executor), ts 78909385906, free_ts 78846282129 [ 89.689158][ T62] post_alloc_hook+0x1f3/0x230 [ 89.694111][ T62] get_page_from_freelist+0x2e4c/0x2f10 [ 89.699662][ T62] __alloc_pages_noprof+0x256/0x6c0 [ 89.704956][ T62] alloc_slab_page+0x5f/0x120 [ 89.709636][ T62] allocate_slab+0x5a/0x2f0 [ 89.714136][ T62] ___slab_alloc+0xcd1/0x14b0 [ 89.718816][ T62] __slab_alloc+0x58/0xa0 [ 89.723181][ T62] kmalloc_node_track_caller_noprof+0x281/0x440 [ 89.729464][ T62] kmalloc_reserve+0x111/0x2a0 [ 89.734231][ T62] __alloc_skb+0x1f3/0x440 [ 89.738648][ T62] inet6_rt_notify+0xdf/0x290 [ 89.743323][ T62] fib6_add+0x1e33/0x4430 [ 89.747651][ T62] ip6_route_add+0x8b/0x160 [ 89.752167][ T62] addrconf_permanent_addr+0x7c4/0xc50 [ 89.757676][ T62] addrconf_notify+0x9f5/0x1020 [ 89.762555][ T62] notifier_call_chain+0x19f/0x3e0 [ 89.767710][ T62] page last free pid 5163 tgid 5163 stack trace: [ 89.774039][ T62] free_unref_page+0xd22/0xea0 [ 89.778814][ T62] __put_partials+0xeb/0x130 [ 89.783409][ T62] put_cpu_partial+0x17c/0x250 [ 89.788173][ T62] __slab_free+0x2ea/0x3d0 [ 89.792584][ T62] qlist_free_all+0x9e/0x140 [ 89.797169][ T62] kasan_quarantine_reduce+0x14f/0x170 [ 89.802626][ T62] __kasan_slab_alloc+0x23/0x80 [ 89.807475][ T62] kmem_cache_alloc_noprof+0x135/0x2a0 [ 89.812958][ T62] __anon_vma_prepare+0xc4/0x4a0 [ 89.817906][ T62] handle_pte_fault+0x59b1/0x7090 [ 89.822928][ T62] handle_mm_fault+0x10df/0x1ba0 [ 89.827873][ T62] exc_page_fault+0x459/0x8c0 [ 89.832572][ T62] asm_exc_page_fault+0x26/0x30 [ 89.837437][ T62] [ 89.839756][ T62] Memory state around the buggy address: [ 89.845385][ T62] ffff88802d722780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.853468][ T62] ffff88802d722800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.861529][ T62] >ffff88802d722880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.869587][ T62] ^ [ 89.875474][ T62] ffff88802d722900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.883532][ T62] ffff88802d722980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.891586][ T62] ================================================================== [ 89.899723][ T62] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 89.906935][ T62] CPU: 0 PID: 62 Comm: kworker/u8:4 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 89.917018][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 89.927096][ T62] Workqueue: l2tp l2tp_tunnel_del_work [ 89.932587][ T62] Call Trace: [ 89.935871][ T62] [ 89.938810][ T62] dump_stack_lvl+0x241/0x360 [ 89.943503][ T62] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.948709][ T62] ? __pfx__printk+0x10/0x10 [ 89.953304][ T62] ? vscnprintf+0x5d/0x90 [ 89.957645][ T62] panic+0x349/0x860 [ 89.961555][ T62] ? check_panic_on_warn+0x21/0xb0 [ 89.966676][ T62] ? __pfx_panic+0x10/0x10 [ 89.971273][ T62] ? mark_lock+0x9a/0x350 [ 89.975607][ T62] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 89.981510][ T62] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 89.987415][ T62] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 89.993750][ T62] ? print_report+0x502/0x550 [ 89.998438][ T62] check_panic_on_warn+0x86/0xb0 [ 90.003388][ T62] ? l2tp_tunnel_del_work+0xe5/0x330 [ 90.008678][ T62] end_report+0x77/0x160 [ 90.012936][ T62] kasan_report+0x154/0x180 [ 90.017447][ T62] ? l2tp_tunnel_del_work+0xe5/0x330 [ 90.022740][ T62] l2tp_tunnel_del_work+0xe5/0x330 [ 90.027946][ T62] ? process_scheduled_works+0x945/0x1830 [ 90.033667][ T62] process_scheduled_works+0xa2c/0x1830 [ 90.039232][ T62] ? __pfx_process_scheduled_works+0x10/0x10 [ 90.045232][ T62] ? assign_work+0x364/0x3d0 [ 90.049853][ T62] worker_thread+0x86d/0xd50 [ 90.054476][ T62] ? __kthread_parkme+0x169/0x1d0 [ 90.059508][ T62] ? __pfx_worker_thread+0x10/0x10 [ 90.064623][ T62] kthread+0x2f0/0x390 [ 90.068702][ T62] ? __pfx_worker_thread+0x10/0x10 [ 90.073818][ T62] ? __pfx_kthread+0x10/0x10 [ 90.078418][ T62] ret_from_fork+0x4b/0x80 [ 90.082845][ T62] ? __pfx_kthread+0x10/0x10 [ 90.087457][ T62] ret_from_fork_asm+0x1a/0x30 [ 90.092240][ T62] [ 90.095546][ T62] Kernel Offset: disabled [ 90.099869][ T62] Rebooting in 86400 seconds..