last executing test programs: 2.393755797s ago: executing program 3 (id=4): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100001000000000000000000ac141400000000000000000000000000ac14140000000000000000000000000000000000000000000a00000000000000ddc0e33bd22831f69d9e68d97ebe5254d34c403bee2f1078104a20a45b3768633a7bfd7852b69961a74654ecba10eb35052cb17bbe8bb30fe509371bf07831a0d3e7a99160a1b657ae57b4544e3dac39c3ed45981836b3a2fc7874398720e44ef1e0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000a0000000000000000000000480003006c7a7300"/240], 0x138}}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf251b00000008000100", @ANYRES32=0x0, @ANYBLOB="59d1b3cc67049db58d49f4706fe17aa791110f32cc7fb7074ebc9f799ffc9c84d41888fab43bf892444be4883401b53d65516f2f613262b913eb4577fd6dfa68"], 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) 2.357349649s ago: executing program 1 (id=9): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x0, 0x2, 0xfffffc01, 0xfffffff9, 0x3}, &(0x7f0000000240)=0x98) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004f00010000000000000000080001"], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x140c, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0xa7ff21f70b683d24) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0xf4, 0x0, 0xfffffffe}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000052000164f274e7b7c53ab2001c000000040003"], 0x18}}, 0x0) 2.182940647s ago: executing program 3 (id=10): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, &(0x7f0000000000)="60a9aef821833623030070d86d4965197646ec8c1f833c884135379310c2f47cd083f0b3acd3878d871757251b9e9e5435d0bc900ac47cc7b852ebba3fa00a6565", 0x41, 0x8091, &(0x7f0000000080)={0xa, 0x4e22, 0x5, @private1, 0x3b37}, 0x1c) getsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000180)=""/5, &(0x7f00000001c0)=0x5) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb7, 0xb7, 0xa, [@datasec={0x9, 0x8, 0x0, 0xf, 0x3, [{0x4, 0x1, 0x8}, {0x3, 0x1, 0x3ff}, {0x3, 0x17afb56f, 0x9}, {0x5, 0x8001}, {0x3, 0x6, 0x4}, {0x1, 0x3, 0x6}, {0x1, 0x7ff, 0x9}, {0x1, 0x3e9, 0x8}], "aa5bab"}, @struct={0x8, 0x4, 0x0, 0x4, 0x0, 0xc, [{0xd, 0x2, 0x9}, {0xc, 0x1, 0x6}, {0xc, 0x1, 0xfffffff3}, {0x9, 0x1, 0x7fff}]}, @fwd={0x8}]}, {0x0, [0x30, 0x5f, 0x2e, 0x2e, 0x2e, 0x0, 0x2e, 0x0]}}, &(0x7f0000000300)=""/8, 0xda, 0x8, 0x0, 0x4, 0x10000, @value=r3}, 0x28) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept$alg(r5, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r7, 0x0, 0x41, &(0x7f00000003c0)={'raw\x00', 0xe2, "f1fce4e02699af154ee90bc2eaed5991e04dd30313a10c6fae947466a19ff7fb768a9936b6499e9441e1081dca035d8870ad25dbc5feeb92e7fd57265406dcc2a2d6935581d59f35a58262e6be06895ee8994bc4fbc0f124afc41d6bf0278c774a8a6fdc6e58187565042d330ba50bbeea7faf7bb7274f25d0719345d108691a175678c37d44f0cf3ec4eb742ee71511258df09d06af564b55bf10642f065f74bedba6b1a0cb138975781fb68a9fcc5e731c1cfb693887f0a6218d262e33174bf136bd0c9d2abcdaeed42bea7b75fe60e03cd2f57b4f5de07b354eff658309a7fa5e"}, &(0x7f0000000500)=0x106) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4c, 0xfffffffd, 0x1, 0x6, 0x2, 0x3, 0x2, 0x2, 0xc, 0xc, [0x4, 0xfff, 0x5, 0x1, 0x8, 0x3e8, 0xdf, 0xb98f], [0x7fffffff, 0x6, 0x7d4, 0x80000000, 0x5]}}) openat$nci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x4c, &(0x7f0000000640)=[@in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x3, @mcast1, 0x5}, @in={0x2, 0x4e22, @private=0x2400}]}, &(0x7f0000000700)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000740)={r8, 0x8}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000780)={0x7, 0x800f, 0x7, 0x7, r8}, &(0x7f00000007c0)=0x10) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000800)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x48008) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f00000009c0)={0x0, 'xfrm0\x00', {0x4}, 0xd093}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r12, 0x802, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x70}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4f}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xc}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xf}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x4, '\x00', r11, r4, 0xf, 0x5, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x8, 0x400, 0xff, 0x7d, 0x24424, r13, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000cc0), r4) sendmsg$DEVLINK_CMD_TRAP_GET(r14, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x50, r15, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x844}, 0x20004011) 2.097588049s ago: executing program 4 (id=5): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x300, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x40800) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x300, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x40800) 2.097363375s ago: executing program 1 (id=12): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x67, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @timestamp_reply}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.883672213s ago: executing program 4 (id=13): r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="2400508005000200040000001100010078908e58f594009c4558c0c631000000040005"], 0x58}, 0x1, 0x0, 0x0, 0x94}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d00)=@newtaction={0x16c, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x158, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}, @m_xt={0x58, 0x17, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x90b}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x1f, 0x6, "f62f5842d5a9b8e8524ed558e3b65cc1fc86a749027b865caa0a1c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0xa4, 0x1c, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, {0x6a, 0x6, "2b45b9197ecf7bcbd6d5d0b89e829e9d769f0a6fcdf2f493491fd74e2215c1ff57261a537b40d82cf2a7e591517e2575dfd2d9175e10cab5f40f0e8cd5d063c0ec791f379873f196923734be8ec74e54b7c9aee8b3ba3986a11dc9d804cd96293f161fe9ffc4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x16c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) (async) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c181}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r9, &(0x7f0000000900)={&(0x7f0000000180), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0x2e}}}}, ["", "", "", ""]}, 0x20}}, 0x81) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9c0000438ce92968e300", @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf252500000008000300", @ANYRES32=r4, @ANYBLOB="080035000600000008003500050000000800a1000900000008009f000500000008009f0002000000050019010d00000008009f0007000000080026006c0900000800a10006000000050018012c00000008003500070000000a00340001010101010100000a0006004091c6e817ec00000800a100ffffffff0500180128000000"], 0x9c}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/201, 0xc9}, {&(0x7f0000000600)=""/155, 0x76}, {&(0x7f0000000c00)=""/208, 0xd0}, {&(0x7f0000000500)=""/220, 0xdc}, {&(0x7f0000000b00)=""/213, 0xd5}, {&(0x7f0000000380)=""/207, 0xcf}, {&(0x7f00000006c0)=""/203, 0xcb}, {&(0x7f0000001100)=""/4077, 0xfed}, {&(0x7f0000000480)=""/102, 0x66}], 0x9}, 0x40012000) (async) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/201, 0xc9}, {&(0x7f0000000600)=""/155, 0x76}, {&(0x7f0000000c00)=""/208, 0xd0}, {&(0x7f0000000500)=""/220, 0xdc}, {&(0x7f0000000b00)=""/213, 0xd5}, {&(0x7f0000000380)=""/207, 0xcf}, {&(0x7f00000006c0)=""/203, 0xcb}, {&(0x7f0000001100)=""/4077, 0xfed}, {&(0x7f0000000480)=""/102, 0x66}], 0x9}, 0x40012000) 1.753970768s ago: executing program 1 (id=14): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000440)={0x20, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x5b7, 0x4) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv6_getrule={0x1c, 0x22, 0x8, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x10, 0x2, 0x2, 0x0, 0x0, 0x5, 0x16}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 1.701332254s ago: executing program 2 (id=15): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108001840000000032000018006000340000200001400018008000100ac1414aa08000200ffffffff0800044000000056b1d50b1d04075c000a8008000140000000015000028014000180080001007f00000108000200640101000c000280050001002f0000002c0001801400030020"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000052000122000000000000000002"], 0x1c}}, 0x0) 1.545408036s ago: executing program 2 (id=16): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00ff05", @ANYRES16=r1, @ANYBLOB="000127bd7000fddbdf25080000000c00038008000100ffffffff14000980080002000a0000000800020005000000"], 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0xb75, 0x2, 0xff, 0x1, 0x81, 0xe}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b32, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r4, 0x0, 0x0) ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f00000001c0)=0x4) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 1.47402621s ago: executing program 0 (id=17): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000e5175e5d73d8290595d45ff3bd444d9c5ee0f6c9fcafa60947eacb925a60670dcf492652d62c927810a927cc7016009274300f708ce35d7a7b9afb9e586c382ed7cfce3432729f9900f650", @ANYRES16=r1, @ANYBLOB="010000000000000000001a0000001c000d80040000801400008008000100008000000800070000000000"], 0x30}}, 0x0) 1.399449055s ago: executing program 3 (id=18): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xb}, {0x10, 0xc}, {0xf, 0xfff1}}}, 0x24}}, 0x40004) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x400, 0x4140}}}}}}]}, 0x48}}, 0x0) 1.2952268s ago: executing program 0 (id=19): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 1.181971485s ago: executing program 0 (id=20): r0 = socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c00000052000100000000000000000002"], 0x1c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.175592417s ago: executing program 1 (id=21): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010200000000000000000000000005000100070000000c0007800800120000f5ff00050004000000000005000500020000220900020073797a310000000011000300686173683a6e65742c6e6574"], 0x58}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000140)={0x4, [0x6, 0x1718, 0xf3e, 0xfffd]}, 0xc) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400003caf", @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000080002000000000008000100", @ANYRES32, @ANYBLOB], 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10008}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xa0, r3, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4e}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21a}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x84}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 1.116383705s ago: executing program 4 (id=22): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r0, @ANYBLOB="8000b2000a000200aaaaaaaaaa1c000007000500"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x48801) 957.86456ms ago: executing program 3 (id=23): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1f, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000)={0x2, 0x0, 0x8000}, 0x10, r1}, 0x94) 940.362423ms ago: executing program 4 (id=24): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0xfc}}, 0x24040000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)={0x88, 0x453, 0x0, 0x70bd27, 0x25dfdbff, "4c8292d9e1941d7d513dad3cadf68f167567d26e3d32044040bd7d10620ba72829b9d0b063b23585c16d8c0a72c82cb6defd88953a00b11d19b10d614373136617d532ddeedf1f6705aa794d163d8d42cb03edc20e522307f7b6d8b251ad426f1e5d830c0fac61bb85acf0018ef2c4fb2193db1094f02a"}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bd000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000220500000000006decd78c14a20f8aca663e57282e18ca16f731831fd56978eb73c35a000000000000000000150000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r6, 0x11, 0x0, 0x0, @void, @value=r5}, 0x20) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELRULE={0x5c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x52e1ca8fab95c039}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x4c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x21, 0x6, "951cb31c3bd76c9791f70ce1c97f3e6f63005a9a591f08453d46ef6ccf"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14}}, 0xf0}, 0x1, 0x0, 0x0, 0x14000805}, 0x4000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) socket(0x5, 0x80000, 0xfffffff8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00@\x00'/17, @ANYRES16=r8, @ANYBLOB="01002dbd7000ffdbdf25570000000c009900030000007d000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x19, 0x4c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 939.896176ms ago: executing program 1 (id=25): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r1, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r1, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x400, {0x6, 0x9, 0x5, 0xf000}}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c800}, 0x4011) r5 = accept4$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000380)=0x10, 0x800) accept4$llc(r5, &(0x7f0000000440)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000480)=0x10, 0x800) pipe(&(0x7f0000000040)) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x24, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x10, 0x0, 0x0, 0x0, 0xc8}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x9}]}, 0x24}}, 0x20000080) 904.00925ms ago: executing program 2 (id=26): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @empty}, 0x1, 0x3, 0x9, 0x2}}, 0x26) close(r1) socket$packet(0x11, 0x2, 0x300) 825.525858ms ago: executing program 3 (id=27): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x90, 0x0, 0x148, 0x90, 0x148, 0x160, 0x240, 0x240, 0x160, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x16, 0x0, 0x9}, 0x0, 0x118, 0x180}, @unspec}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@SET={0x0, 'SET\x00', 0x0, {{0x0, [0x5, 0x0, 0x7, 0x4, 0x6, 0x2], 0x1, 0x4}, {0x3, [0x1, 0x5, 0x1, 0x2, 0x4, 0x2], 0x4, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d7) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x90, 0x0, 0x148, 0x90, 0x148, 0x160, 0x240, 0x240, 0x160, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x16, 0x0, 0x9}, 0x0, 0x118, 0x180}, @unspec}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@SET={0x0, 'SET\x00', 0x0, {{0x0, [0x5, 0x0, 0x7, 0x4, 0x6, 0x2], 0x1, 0x4}, {0x3, [0x1, 0x5, 0x1, 0x2, 0x4, 0x2], 0x4, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d7) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) (async) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000040)) 753.830793ms ago: executing program 0 (id=28): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6(0xa, 0x5, 0x2) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x118, r2, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x30, 0x5b, "386c2a6af802f50a8c87600520fe370e6b8d83e41ab0478d278bce290bc8e440653e25c923871f16c6942d42"}, @NL80211_ATTR_FRAME_MATCH={0xca, 0x5b, "b691d48e87e6a2c09d4f21be1d4a066ff772088299aed764494bf800e4e28466b3b3e71d5c5c3602924fda505f984c52ff3c71de31c0c296718403fb279c7294c594cdc9cd55ba87dfb5b70d0a2394053275b58be8eb73de3870dbbbaa5fa58a15ea93b98bb904d4ed96b592efaf2516425c41f8e5688ef89c7e068f6746693dc2d992eeee3b3f3f5b6a65df46b0d8f62024e00216816c0a6db1f9643b0c25dacf3745ef0cc922bea30334038d75553ffeb7401badb3501cd1287d80b2154965617ca7f0abc5"}]}, 0x118}, 0x1, 0x0, 0x0, 0x200008c0}, 0x20000004) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x216}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)={r4}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000400)) r6 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000440)='wg1\x00', 0x4) recvmmsg(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000480)=@generic, 0x80, &(0x7f0000000880)=[{&(0x7f0000000500)=""/16, 0x10}, {&(0x7f0000000540)=""/42, 0x2a}, {&(0x7f0000000580)=""/187, 0xbb}, {&(0x7f0000000640)=""/17, 0x11}, {&(0x7f0000000680)=""/45, 0x2d}, {&(0x7f00000006c0)=""/149, 0x95}, {&(0x7f0000000780)=""/193, 0xc1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/224, 0xe0}, {&(0x7f0000000a00)=""/190, 0xbe}, {&(0x7f0000000ac0)=""/171, 0xab}], 0x3, &(0x7f0000000bc0)=""/242, 0xf2}, 0x8}], 0x2, 0x40000041, 0x0) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r7, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x743}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x80) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000e80)={0xfffff800, 0x9, 0x200, 0x4, 0x1}) (async, rerun: 32) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000ec0)) (async, rerun: 32) setsockopt$sock_void(r1, 0x1, 0x0, 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfb, {0x1, 0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x20040044) (async) socket$igmp6(0xa, 0x3, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) (async) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001000)='cgroup.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f0000001040)={0x1}, 0x1) ioctl$SIOCX25CALLACCPTAPPRV(r8, 0x89e8) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000001180)={&(0x7f0000001080), 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x54, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x5, 0x2}}, @NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x1}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4b}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xf}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x200088c4}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000011c0)={0x0, 0x7}, 0x8) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001280)={'syztnl2\x00', &(0x7f0000001200)={'ip6gre0\x00', 0x0, 0x4, 0xe3, 0x5, 0x2, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, @remote, 0x50, 0x1, 0x1, 0x6}}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000001300)={0x0, @generic={0x15, "7899879bd9e3adbb64b42e1e3205"}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1}, @xdp={0x2c, 0x1, r9, 0x9}, 0x2d7, 0x0, 0x0, 0x0, 0x9, &(0x7f00000012c0)='pim6reg1\x00', 0x7ff, 0x36e5, 0x1000}) (async, rerun: 32) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000001380)={0x0, 0xffffffffffffffff, 0x8, 0x80000000, 0x6, 0x4}) (rerun: 32) 661.906243ms ago: executing program 2 (id=29): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x42, r2, 0x1, 0x80000000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 530.078553ms ago: executing program 4 (id=30): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0xd1383000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000200001"], 0xb8}}, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r5, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 453.730424ms ago: executing program 3 (id=31): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000002ec0)={'netdevsim0\x00', 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x28502, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x10, 0x80, 0x20000, 0x9, {{0x11, 0x4, 0x2, 0x35, 0x44, 0x65, 0x0, 0x1, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@ssrr={0x89, 0x3, 0x5d}, @timestamp={0x44, 0x10, 0xd7, 0x0, 0x9, [0x7, 0x0, 0x5]}, @noop, @timestamp_prespec={0x44, 0x1c, 0x65, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0xfffffff7}, {@remote, 0x9}, {@multicast2, 0x3}]}]}}}}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000340)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), r6) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in=@remote, 0x4e20, 0x7f, 0x4e21, 0x8, 0x2, 0xa0, 0x0, 0x1d, r4, r5}, {0x9, 0xffffffff, 0x2, 0x0, 0x8, 0xd10, 0x4a}, {0xe5, 0x8000000000000000, 0xfffffffffffffff9, 0xffffffff7fffffff}, 0x80000001, 0x6e6bbc, 0x2, 0x0, 0x3, 0x3}, {{@in6=@mcast1, 0x4d5, 0x6c}, 0x2, @in=@multicast1, 0x0, 0x4, 0x2, 0x81, 0x3, 0x6, 0x6}}, 0xe8) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r10}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x240848d4) recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)=""/192, 0xc0}, {&(0x7f0000000900)=""/239, 0xef}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000040)=""/233, 0xe9}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f00000003c0)=""/78, 0x4e}, {&(0x7f00000005c0)=""/224, 0xe0}], 0x7}, 0xfd}], 0x4, 0x40000020, 0x0) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000005180)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x63, 0x2400000000000000, 0x0, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1e, 0x805, 0x0) connect$tipc(r13, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000200000000000000fbdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) 451.794434ms ago: executing program 1 (id=32): r0 = socket$netlink(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x11f42) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32) r6 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x368, 0xffffffff, 0x1d0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5}}}, {{@ip={@broadcast, @broadcast, 0x0, 0xff, 'pim6reg0\x00', 'ip6tnl0\x00', {0xff}, {}, 0xc, 0x0, 0x2}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0xc}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x6, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x80}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xffffffff}) (async, rerun: 32) ioctl(r9, 0x8b23, &(0x7f0000000040)) (async, rerun: 32) epoll_create1(0x80000) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001e0100400000000a001e32", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff020000000000000000000000000001"], 0x30}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd3f, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x4, 0x2}, {0x8, 0x6}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0xc, 0xf}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x10}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (rerun: 64) setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000540)={{0xa, 0x4e23, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, {0xa, 0x4e22, 0x6, @remote, 0x3}, 0xffffffffffffffff, {[0x9, 0x1, 0x35, 0xcf, 0x8, 0xffffffff, 0x6, 0x3ff]}}, 0x5c) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="940000000001010400000000000000000a00000a3c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100007900003c0002802c0001801400035121ad2400fe8000000000000000000000000000aa14000400fe8000000000000000000000000011650c000280050001000000000008000740fb1748a1e0fbd9389b1e43d7cb4f679f962bd67dac9bdd514c779cda90575475f19648ff6251e0ae66f8e4e762a7fbcdd9a7971dda1cd86c30072c96ff81e87b0d14fe13c6508050954fb988de1029dc"], 0x94}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x48, 0x1, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x401}]}, @CTA_LABELS_MASK={0x18, 0x17, [0xa, 0x6, 0x5, 0x3, 0x6e]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140010000a0000000000f4e1b9aa8344dc7042df081c459d2d2c000000000000ff000008"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 397.315203ms ago: executing program 0 (id=33): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x7, 0x8000, 0x4ab, 0x0, {{0x2a, 0x4, 0x0, 0x5, 0xa8, 0x66, 0x0, 0x1, 0x29, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x41, 0x3, [{0x5, 0x12, "8a3595b07e900682a67c8ffe6d1bb299"}, {0x0, 0xf, "e06f08064fd28e8d9a54826546"}, {0x5, 0xf, "1f9e1f32d37eaf0812c8dc1129"}, {0x7, 0x9, "219b89665ddcef"}, {0x6, 0x2}]}, @timestamp_addr={0x44, 0x34, 0x87, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0xb}, 0x4e}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x1}, {@private=0xa010100, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x7}]}, @timestamp_prespec={0x44, 0x1c, 0x9f, 0x3, 0x3, [{@remote, 0x9}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x87}, {@rand_addr=0x64010102, 0x9}]}, @end]}}}}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r5}, 0x94) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x8, 0x10}, 0xc) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x90b, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'team0\x00', 'wg1\x00'}, 0x0, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0xfe5}}}, @common=@ah={{0x30}, {[0x9, 0xcef1], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r11, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r11, 0x112, 0x4, 0x0, &(0x7f00000000c0)) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x4, 0x101, 0x7fff, 0x335, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x15, 0x4, 0x6, 0xb, 0x20000, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) r16 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000040)=@raw=[@alu={0x7, 0x0, 0x7, 0x1, 0xb, 0x1, 0xffffffffffffffff}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0xe, 0x3c, &(0x7f00000000c0)=""/60, 0x41000, 0x4, '\x00', r2, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0x0, 0x8, &(0x7f0000000600)=[r7, r8, r9, r12, r13, 0x1, r14, r15, r16], &(0x7f0000000640)=[{0x3, 0x3, 0x9, 0x2}, {0x0, 0x5, 0x8, 0x2}, {0x2, 0x5, 0x6, 0x3}, {0x2, 0x3, 0x8, 0x6}, {0x5, 0x5, 0x6, 0x4}, {0x1, 0x2, 0x7, 0x2}, {0x2, 0x5, 0xa, 0x4}, {0x5, 0x2, 0x2, 0x4}], 0x10, 0x1000}, 0x94) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00', 0x7, 0x4, 0x3d0, 0x1d8, 0xe8, 0xe8, 0x2e8, 0x1d8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @broadcast, @local}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x4c}}, 0x0) 347.587773ms ago: executing program 2 (id=34): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000ff", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300, 0x0, 0xc090}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x3}, 0x8) sendto$inet(r1, &(0x7f0000000140)='\x00', 0x1, 0x44040, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001340)={r2, &(0x7f00000012c0), 0x0}, 0x20) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="aa0000140000000000849078ac2414bbe000000100"/34], 0x0) 169.877628ms ago: executing program 4 (id=35): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x8, 0x0, 0x0, 0x0, {{0x29, 0x4, 0x0, 0x8, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@generic={0x82, 0xf, "768365686736924c5942d9b044"}, @timestamp_addr={0x44, 0x54, 0xcf, 0x1, 0x7, [{@multicast2, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x8001}, {@rand_addr=0x64010101, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x8001}, {@rand_addr=0x64010102, 0x214fd5db}, {@local, 0x1ff}, {@local, 0x9}, {@loopback, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x4973}, {@rand_addr=0x64010101, 0x9}]}, @timestamp_prespec={0x44, 0x14, 0xee, 0x3, 0x4, [{@remote, 0x2}, {@rand_addr=0x64010101, 0x8}]}, @timestamp={0x44, 0x18, 0x4b, 0x0, 0x0, [0x8, 0x2, 0xcc, 0x0, 0xff]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000005c0)={'ip_vti0\x00', 0x0, 0x7, 0x80, 0x4000, 0x200000, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000005c0)={'ip_vti0\x00', 0x0, 0x7, 0x80, 0x4000, 0x200000, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}}}}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xe}, {0x10, 0x110, 0xe}], 0x20}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xe}, {0x10, 0x110, 0xe}], 0x20}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e4", 0x4}], 0x1, 0x0, 0x0, 0x84}, 0x8084) (async) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e4", 0x4}], 0x1, 0x0, 0x0, 0x84}, 0x8084) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r5, 0x5, 0x40000000, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2008c0d4) close(r1) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000040), &(0x7f00000000c0)=0x8) 127.193894ms ago: executing program 2 (id=36): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000000)={0x0, 0x2710}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) accept(r1, &(0x7f0000000080)=@ax25={{0x3, @null}, [@remote, @bcast, @netrom, @bcast, @default, @netrom, @bcast, @null]}, &(0x7f0000000100)=0x80) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) shutdown(r0, 0x1) 0s ago: executing program 0 (id=37): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000003700000000000000a6a000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x80000001, 0x95, 0x8, 0x2004, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0xb}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', r0}, 0x18) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.193' (ED25519) to the list of known hosts. [ 68.065054][ T5835] cgroup: Unknown subsys name 'net' [ 68.190222][ T5835] cgroup: Unknown subsys name 'cpuset' [ 68.198720][ T5835] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.595043][ T5835] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.380168][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.387335][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.993129][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.002120][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.010002][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.018356][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.026033][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.046264][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.055298][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.062834][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.071241][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.078961][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.177106][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.185042][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.193253][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.197015][ T5168] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.210693][ T5168] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.218506][ T5168] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.221397][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.226207][ T5168] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.233346][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.241545][ T5168] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.247994][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.261037][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.261876][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.276357][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.283757][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.826988][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 72.856488][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 72.928872][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 73.121218][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 73.221568][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.228879][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.236267][ T5845] bridge_slave_0: entered allmulticast mode [ 73.245344][ T5845] bridge_slave_0: entered promiscuous mode [ 73.259302][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.266446][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.273688][ T5845] bridge_slave_1: entered allmulticast mode [ 73.281362][ T5845] bridge_slave_1: entered promiscuous mode [ 73.295151][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.302394][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.309737][ T5854] bridge_slave_0: entered allmulticast mode [ 73.316660][ T5854] bridge_slave_0: entered promiscuous mode [ 73.351010][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 73.384565][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.393277][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.400488][ T5854] bridge_slave_1: entered allmulticast mode [ 73.407558][ T5854] bridge_slave_1: entered promiscuous mode [ 73.414121][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.421511][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.428819][ T5849] bridge_slave_0: entered allmulticast mode [ 73.435808][ T5849] bridge_slave_0: entered promiscuous mode [ 73.444434][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.451653][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.458979][ T5849] bridge_slave_1: entered allmulticast mode [ 73.466719][ T5849] bridge_slave_1: entered promiscuous mode [ 73.533077][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.585282][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.604303][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.617485][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.677573][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.688627][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.734410][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.741970][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.749611][ T5857] bridge_slave_0: entered allmulticast mode [ 73.756562][ T5857] bridge_slave_0: entered promiscuous mode [ 73.792642][ T5849] team0: Port device team_slave_0 added [ 73.823513][ T5845] team0: Port device team_slave_0 added [ 73.830502][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.837926][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.845066][ T5857] bridge_slave_1: entered allmulticast mode [ 73.852783][ T5857] bridge_slave_1: entered promiscuous mode [ 73.875075][ T5849] team0: Port device team_slave_1 added [ 73.881293][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.888590][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.895731][ T5855] bridge_slave_0: entered allmulticast mode [ 73.903977][ T5855] bridge_slave_0: entered promiscuous mode [ 73.913343][ T5845] team0: Port device team_slave_1 added [ 73.933972][ T5854] team0: Port device team_slave_0 added [ 73.953725][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.961258][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.968903][ T5855] bridge_slave_1: entered allmulticast mode [ 73.975805][ T5855] bridge_slave_1: entered promiscuous mode [ 74.009354][ T5854] team0: Port device team_slave_1 added [ 74.055722][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.069391][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.093274][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.100666][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.100770][ T5850] Bluetooth: hci1: command tx timeout [ 74.127066][ T50] Bluetooth: hci0: command tx timeout [ 74.127764][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.162767][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.169861][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.196508][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.210036][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.217033][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.243074][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.277838][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.284821][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.311090][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.324467][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.337162][ T5850] Bluetooth: hci3: command tx timeout [ 74.337246][ T50] Bluetooth: hci2: command tx timeout [ 74.342829][ T5850] Bluetooth: hci4: command tx timeout [ 74.371277][ T5857] team0: Port device team_slave_0 added [ 74.379153][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.386103][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.412359][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.425502][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.432577][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.458708][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.476717][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.505746][ T5857] team0: Port device team_slave_1 added [ 74.615389][ T5855] team0: Port device team_slave_0 added [ 74.627716][ T5845] hsr_slave_0: entered promiscuous mode [ 74.633998][ T5845] hsr_slave_1: entered promiscuous mode [ 74.642044][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.649144][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.675169][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.719396][ T5854] hsr_slave_0: entered promiscuous mode [ 74.725672][ T5854] hsr_slave_1: entered promiscuous mode [ 74.732286][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.740035][ T5854] Cannot create hsr debugfs directory [ 74.748542][ T5855] team0: Port device team_slave_1 added [ 74.764446][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.772272][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.798537][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.822700][ T5849] hsr_slave_0: entered promiscuous mode [ 74.829752][ T5849] hsr_slave_1: entered promiscuous mode [ 74.835779][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.843464][ T5849] Cannot create hsr debugfs directory [ 74.930529][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.937675][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.963984][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.977252][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.984207][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.010253][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.145725][ T5857] hsr_slave_0: entered promiscuous mode [ 75.153217][ T5857] hsr_slave_1: entered promiscuous mode [ 75.159860][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.167601][ T5857] Cannot create hsr debugfs directory [ 75.271395][ T5855] hsr_slave_0: entered promiscuous mode [ 75.277808][ T5855] hsr_slave_1: entered promiscuous mode [ 75.283794][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.291406][ T5855] Cannot create hsr debugfs directory [ 75.700843][ T5854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.714524][ T5854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.725970][ T5854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.743167][ T5854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.813183][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.825404][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.838065][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.852328][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.946472][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.965937][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.976233][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.005813][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.119599][ T5857] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.131718][ T5857] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.163953][ T5857] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.176434][ T5857] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.183529][ T5850] Bluetooth: hci0: command tx timeout [ 76.183569][ T5851] Bluetooth: hci1: command tx timeout [ 76.203793][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.260696][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.276329][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.288614][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.320462][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.331613][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.369334][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.410124][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.417807][ T5851] Bluetooth: hci4: command tx timeout [ 76.417867][ T5850] Bluetooth: hci2: command tx timeout [ 76.423195][ T50] Bluetooth: hci3: command tx timeout [ 76.439126][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.446321][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.457947][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.465368][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.505188][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.512381][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.546557][ T3451] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.553697][ T3451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.628453][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.710990][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.749683][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.789257][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.802286][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.809476][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.854647][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.874998][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.882253][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.935872][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.943092][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.004111][ T3451] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.011326][ T3451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.060911][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.112939][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.120191][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.160742][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.167935][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.209478][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.226747][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.530342][ T5849] veth0_vlan: entered promiscuous mode [ 77.616248][ T5849] veth1_vlan: entered promiscuous mode [ 77.675722][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.870745][ T5849] veth0_macvtap: entered promiscuous mode [ 77.904612][ T5849] veth1_macvtap: entered promiscuous mode [ 77.914351][ T5845] veth0_vlan: entered promiscuous mode [ 77.950287][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.965997][ T5845] veth1_vlan: entered promiscuous mode [ 77.991404][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.008293][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.025568][ T5854] veth0_vlan: entered promiscuous mode [ 78.051007][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.089780][ T5849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.098992][ T5849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.109107][ T5849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.117956][ T5849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.130039][ T5854] veth1_vlan: entered promiscuous mode [ 78.192985][ T5845] veth0_macvtap: entered promiscuous mode [ 78.225163][ T5845] veth1_macvtap: entered promiscuous mode [ 78.234935][ T5857] veth0_vlan: entered promiscuous mode [ 78.258420][ T50] Bluetooth: hci1: command tx timeout [ 78.267468][ T50] Bluetooth: hci0: command tx timeout [ 78.276682][ T5855] veth0_vlan: entered promiscuous mode [ 78.308243][ T5857] veth1_vlan: entered promiscuous mode [ 78.340857][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.358677][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.386613][ T5855] veth1_vlan: entered promiscuous mode [ 78.404780][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.447905][ T5854] veth0_macvtap: entered promiscuous mode [ 78.456501][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.469543][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.477429][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.491613][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.498188][ T5851] Bluetooth: hci4: command tx timeout [ 78.501107][ T5850] Bluetooth: hci2: command tx timeout [ 78.505772][ T50] Bluetooth: hci3: command tx timeout [ 78.519629][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.528581][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.537340][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.571530][ T5854] veth1_macvtap: entered promiscuous mode [ 78.594020][ T5857] veth0_macvtap: entered promiscuous mode [ 78.624788][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.627117][ T5857] veth1_macvtap: entered promiscuous mode [ 78.666247][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.709989][ T5855] veth0_macvtap: entered promiscuous mode [ 78.743264][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.753990][ T5855] veth1_macvtap: entered promiscuous mode [ 78.767441][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.800813][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.815006][ T5857] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.825656][ T5857] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.834486][ T5857] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.843548][ T5857] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.884953][ T5854] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.896371][ T5854] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.913727][ T5854] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.939026][ T5854] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.962612][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.987359][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6'. [ 79.004429][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.028654][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.036726][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.082597][ T5855] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.094929][ T5855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.104080][ T5855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.114437][ T5855] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.139738][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6'. [ 79.175539][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.197726][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.229570][ T5963] Zero length message leads to an empty skb [ 79.325398][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.360773][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.456376][ T5970] netlink: 'syz.1.7': attribute type 83 has an invalid length. [ 79.465632][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.480543][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.505937][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.514011][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.531950][ T5976] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7'. [ 79.629642][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.647934][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.655803][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.678952][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.734595][ T5979] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4'. [ 79.815588][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 79.845338][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.885949][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.207348][ T6001] 8021q: VLANs not supported on xfrm0 [ 80.342643][ T5850] Bluetooth: hci0: command tx timeout [ 80.342644][ T50] Bluetooth: hci1: command tx timeout [ 80.362632][ T6008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13'. [ 80.417389][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13'. [ 80.490539][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13'. [ 80.497571][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 80.540739][ T6007] bridge_slave_1: left allmulticast mode [ 80.553738][ T6007] bridge_slave_1: left promiscuous mode [ 80.560829][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.583423][ T50] Bluetooth: hci3: command tx timeout [ 80.583446][ T5851] Bluetooth: hci4: command tx timeout [ 80.589281][ T5850] Bluetooth: hci2: command tx timeout [ 80.656714][ T6007] bridge_slave_0: left allmulticast mode [ 80.678581][ T6007] bridge_slave_0: left promiscuous mode [ 80.691355][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.816226][ T6020] warning: `syz.2.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.892729][ T6021] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 80.916626][ T6030] netlink: 'syz.0.20': attribute type 21 has an invalid length. [ 80.929490][ T6021] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 80.948220][ T6030] netlink: 128 bytes leftover after parsing attributes in process `syz.0.20'. [ 80.966565][ T6021] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 80.980365][ T6021] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 80.992144][ T6021] geneve2: entered promiscuous mode [ 81.002933][ T6021] geneve2: entered allmulticast mode [ 81.110275][ T6030] netlink: 'syz.0.20': attribute type 4 has an invalid length. [ 81.126933][ T6030] netlink: 'syz.0.20': attribute type 5 has an invalid length. [ 81.286388][ T30] audit: type=1107 audit(1753758432.097:2): pid=6040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='L‚’Ùá”}Q=­<­öugÒn=2@@½}b §()¹Ð°c²5…ÁmŒ [ 81.286388][ T30] rÈ,¶Þýˆ•:' [ 81.370350][ T6048] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.797513][ T6068] netlink: 'syz.1.32': attribute type 1 has an invalid length. [ 81.963700][ T6065] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 82.137434][ T6003] ================================================================== [ 82.145548][ T6003] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80 [ 82.153031][ T6003] Read of size 8 at addr ffff88802767a320 by task kworker/1:8/6003 [ 82.160920][ T6003] [ 82.163276][ T6003] CPU: 1 UID: 0 PID: 6003 Comm: kworker/1:8 Not tainted 6.16.0-rc7-syzkaller-00100-gafd8c2c9e2e2 #0 PREEMPT(full) [ 82.163292][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.163301][ T6003] Workqueue: events l2cap_chan_timeout [ 82.163325][ T6003] Call Trace: [ 82.163331][ T6003] [ 82.163337][ T6003] dump_stack_lvl+0x189/0x250 [ 82.163353][ T6003] ? __kasan_check_byte+0x12/0x40 [ 82.163371][ T6003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.163385][ T6003] ? lock_release+0x4b/0x3e0 [ 82.163400][ T6003] ? __virt_addr_valid+0x4a5/0x5c0 [ 82.163416][ T6003] print_report+0xca/0x230 [ 82.163427][ T6003] ? __mutex_lock+0x738/0xe80 [ 82.163441][ T6003] kasan_report+0x118/0x150 [ 82.163457][ T6003] ? __mutex_lock+0x738/0xe80 [ 82.163473][ T6003] __mutex_lock+0x738/0xe80 [ 82.163487][ T6003] ? __mutex_lock+0x51b/0xe80 [ 82.163502][ T6003] ? l2cap_chan_timeout+0x63/0x390 [ 82.163514][ T6003] ? __pfx___mutex_lock+0x10/0x10 [ 82.163531][ T6003] ? process_scheduled_works+0x9ef/0x17b0 [ 82.163548][ T6003] l2cap_chan_timeout+0x63/0x390 [ 82.163559][ T6003] ? process_scheduled_works+0x9ef/0x17b0 [ 82.163573][ T6003] process_scheduled_works+0xae1/0x17b0 [ 82.163596][ T6003] ? __pfx_process_scheduled_works+0x10/0x10 [ 82.163615][ T6003] worker_thread+0x8a0/0xda0 [ 82.163630][ T6003] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 82.163645][ T6003] ? __kthread_parkme+0x7b/0x200 [ 82.163662][ T6003] kthread+0x70e/0x8a0 [ 82.163679][ T6003] ? __pfx_worker_thread+0x10/0x10 [ 82.163692][ T6003] ? __pfx_kthread+0x10/0x10 [ 82.163708][ T6003] ? _raw_spin_unlock_irq+0x23/0x50 [ 82.163719][ T6003] ? lockdep_hardirqs_on+0x9c/0x150 [ 82.163731][ T6003] ? __pfx_kthread+0x10/0x10 [ 82.163747][ T6003] ret_from_fork+0x3fc/0x770 [ 82.163766][ T6003] ? __pfx_ret_from_fork+0x10/0x10 [ 82.163780][ T6003] ? __switch_to_asm+0x39/0x70 [ 82.163795][ T6003] ? __switch_to_asm+0x33/0x70 [ 82.163809][ T6003] ? __pfx_kthread+0x10/0x10 [ 82.163825][ T6003] ret_from_fork_asm+0x1a/0x30 [ 82.163845][ T6003] [ 82.163850][ T6003] [ 82.365170][ T6003] Allocated by task 6082: [ 82.369489][ T6003] kasan_save_track+0x3e/0x80 [ 82.374156][ T6003] __kasan_kmalloc+0x93/0xb0 [ 82.378769][ T6003] __kmalloc_cache_noprof+0x230/0x3d0 [ 82.384131][ T6003] l2cap_conn_add+0xaa/0x8d0 [ 82.388710][ T6003] l2cap_chan_connect+0x6c8/0xe30 [ 82.393737][ T6003] l2cap_sock_connect+0x5c5/0x7a0 [ 82.398765][ T6003] __sys_connect+0x316/0x440 [ 82.403357][ T6003] __x64_sys_connect+0x7a/0x90 [ 82.408114][ T6003] do_syscall_64+0xfa/0x3b0 [ 82.412609][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.418491][ T6003] [ 82.420801][ T6003] Freed by task 5850: [ 82.424765][ T6003] kasan_save_track+0x3e/0x80 [ 82.429431][ T6003] kasan_save_free_info+0x46/0x50 [ 82.434441][ T6003] __kasan_slab_free+0x62/0x70 [ 82.439277][ T6003] kfree+0x18e/0x440 [ 82.443159][ T6003] l2cap_connect_cfm+0x11d/0x1040 [ 82.448173][ T6003] hci_conn_failed+0x1ce/0x310 [ 82.452940][ T6003] hci_abort_conn_sync+0x5d1/0xdf0 [ 82.458045][ T6003] hci_cmd_sync_work+0x210/0x3a0 [ 82.462972][ T6003] process_scheduled_works+0xae1/0x17b0 [ 82.468513][ T6003] worker_thread+0x8a0/0xda0 [ 82.473091][ T6003] kthread+0x70e/0x8a0 [ 82.477148][ T6003] ret_from_fork+0x3fc/0x770 [ 82.481730][ T6003] ret_from_fork_asm+0x1a/0x30 [ 82.486485][ T6003] [ 82.488795][ T6003] The buggy address belongs to the object at ffff88802767a000 [ 82.488795][ T6003] which belongs to the cache kmalloc-1k of size 1024 [ 82.502833][ T6003] The buggy address is located 800 bytes inside of [ 82.502833][ T6003] freed 1024-byte region [ffff88802767a000, ffff88802767a400) [ 82.516696][ T6003] [ 82.519007][ T6003] The buggy address belongs to the physical page: [ 82.525409][ T6003] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27678 [ 82.534198][ T6003] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 82.542682][ T6003] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 82.550218][ T6003] page_type: f5(slab) [ 82.554190][ T6003] raw: 00fff00000000040 ffff88801a441dc0 dead000000000122 0000000000000000 [ 82.562765][ T6003] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 82.571340][ T6003] head: 00fff00000000040 ffff88801a441dc0 dead000000000122 0000000000000000 [ 82.580002][ T6003] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 82.588659][ T6003] head: 00fff00000000003 ffffea00009d9e01 00000000ffffffff 00000000ffffffff [ 82.597314][ T6003] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 82.605970][ T6003] page dumped because: kasan: bad access detected [ 82.612382][ T6003] page_owner tracks the page as allocated [ 82.618078][ T6003] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 3451, tgid 3451 (kworker/u8:7), ts 82032058488, free_ts 82028646163 [ 82.637343][ T6003] post_alloc_hook+0x240/0x2a0 [ 82.642117][ T6003] get_page_from_freelist+0x21e4/0x22c0 [ 82.647694][ T6003] __alloc_frozen_pages_noprof+0x181/0x370 [ 82.653494][ T6003] alloc_pages_mpol+0x232/0x4a0 [ 82.658346][ T6003] allocate_slab+0x8a/0x3b0 [ 82.662840][ T6003] ___slab_alloc+0xbfc/0x1480 [ 82.667536][ T6003] __kmalloc_noprof+0x305/0x4f0 [ 82.672379][ T6003] ___neigh_create+0x6d5/0x2260 [ 82.677220][ T6003] ip6_finish_output2+0xb4d/0x16a0 [ 82.682321][ T6003] ndisc_send_skb+0xb47/0x1400 [ 82.687072][ T6003] ndisc_send_ns+0xcb/0x150 [ 82.691560][ T6003] addrconf_dad_work+0xaae/0x14b0 [ 82.696569][ T6003] process_scheduled_works+0xae1/0x17b0 [ 82.702188][ T6003] worker_thread+0x8a0/0xda0 [ 82.706764][ T6003] kthread+0x70e/0x8a0 [ 82.710822][ T6003] ret_from_fork+0x3fc/0x770 [ 82.715394][ T6003] page last free pid 6082 tgid 6081 stack trace: [ 82.721701][ T6003] __free_frozen_pages+0xc71/0xe70 [ 82.726808][ T6003] __put_partials+0x161/0x1c0 [ 82.731473][ T6003] put_cpu_partial+0x17c/0x250 [ 82.736219][ T6003] __slab_free+0x2f7/0x400 [ 82.740654][ T6003] qlist_free_all+0x97/0x140 [ 82.745234][ T6003] kasan_quarantine_reduce+0x148/0x160 [ 82.750687][ T6003] __kasan_slab_alloc+0x22/0x80 [ 82.755528][ T6003] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 82.760975][ T6003] getname_flags+0xb8/0x540 [ 82.765465][ T6003] do_sys_openat2+0xbc/0x1c0 [ 82.770046][ T6003] __x64_sys_openat+0x138/0x170 [ 82.774882][ T6003] do_syscall_64+0xfa/0x3b0 [ 82.779372][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.785251][ T6003] [ 82.787560][ T6003] Memory state around the buggy address: [ 82.793174][ T6003] ffff88802767a200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.801218][ T6003] ffff88802767a280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.809263][ T6003] >ffff88802767a300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.817313][ T6003] ^ [ 82.822411][ T6003] ffff88802767a380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.830462][ T6003] ffff88802767a400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 82.838506][ T6003] ================================================================== [ 82.848560][ T6003] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 82.855779][ T6003] CPU: 1 UID: 0 PID: 6003 Comm: kworker/1:8 Not tainted 6.16.0-rc7-syzkaller-00100-gafd8c2c9e2e2 #0 PREEMPT(full) [ 82.867848][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.877898][ T6003] Workqueue: events l2cap_chan_timeout [ 82.883365][ T6003] Call Trace: [ 82.886634][ T6003] [ 82.889557][ T6003] dump_stack_lvl+0x99/0x250 [ 82.894142][ T6003] ? __asan_memcpy+0x40/0x70 [ 82.898731][ T6003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.903921][ T6003] ? __pfx__printk+0x10/0x10 [ 82.908512][ T6003] panic+0x2db/0x790 [ 82.912401][ T6003] ? __pfx_panic+0x10/0x10 [ 82.916807][ T6003] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 82.922695][ T6003] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 82.928578][ T6003] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 82.934892][ T6003] ? print_memory_metadata+0x314/0x400 [ 82.940340][ T6003] ? __mutex_lock+0x738/0xe80 [ 82.945003][ T6003] check_panic_on_warn+0x89/0xb0 [ 82.949945][ T6003] ? __mutex_lock+0x738/0xe80 [ 82.954612][ T6003] end_report+0x78/0x160 [ 82.958849][ T6003] kasan_report+0x129/0x150 [ 82.963363][ T6003] ? __mutex_lock+0x738/0xe80 [ 82.968032][ T6003] __mutex_lock+0x738/0xe80 [ 82.972523][ T6003] ? __mutex_lock+0x51b/0xe80 [ 82.977197][ T6003] ? l2cap_chan_timeout+0x63/0x390 [ 82.982306][ T6003] ? __pfx___mutex_lock+0x10/0x10 [ 82.987326][ T6003] ? process_scheduled_works+0x9ef/0x17b0 [ 82.993044][ T6003] l2cap_chan_timeout+0x63/0x390 [ 82.997970][ T6003] ? process_scheduled_works+0x9ef/0x17b0 [ 83.003681][ T6003] process_scheduled_works+0xae1/0x17b0 [ 83.009228][ T6003] ? __pfx_process_scheduled_works+0x10/0x10 [ 83.015215][ T6003] worker_thread+0x8a0/0xda0 [ 83.019797][ T6003] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 83.026119][ T6003] ? __kthread_parkme+0x7b/0x200 [ 83.031050][ T6003] kthread+0x70e/0x8a0 [ 83.035110][ T6003] ? __pfx_worker_thread+0x10/0x10 [ 83.040213][ T6003] ? __pfx_kthread+0x10/0x10 [ 83.044802][ T6003] ? _raw_spin_unlock_irq+0x23/0x50 [ 83.049989][ T6003] ? lockdep_hardirqs_on+0x9c/0x150 [ 83.055181][ T6003] ? __pfx_kthread+0x10/0x10 [ 83.059766][ T6003] ret_from_fork+0x3fc/0x770 [ 83.064346][ T6003] ? __pfx_ret_from_fork+0x10/0x10 [ 83.069452][ T6003] ? __switch_to_asm+0x39/0x70 [ 83.074208][ T6003] ? __switch_to_asm+0x33/0x70 [ 83.078964][ T6003] ? __pfx_kthread+0x10/0x10 [ 83.083550][ T6003] ret_from_fork_asm+0x1a/0x30 [ 83.088341][ T6003] [ 83.091601][ T6003] Kernel Offset: disabled [ 83.095918][ T6003] Rebooting in 86400 seconds..