last executing test programs: 3.439347579s ago: executing program 3 (id=514): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r4, r3}) socket(0x15, 0x5, 0x0) close(0x4) close(r5) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000280)=0x20) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000002c0)={0x0, 0x4, 0x3674, 0x1}) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x0, 0x2}, 0x10) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000400)) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21, 0x31863}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_PHYS_PORT_ID={0x19, 0x22, "b85439fb7cdf2f2899580ceec8ac026869a9f4ca11"}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x44040) 3.323930575s ago: executing program 3 (id=515): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) unshare(0x2040400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='contention_end\x00', r1}, 0x18) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r1}, 0x18) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) unshare(0x20000400) getsockopt$rose(r5, 0x104, 0xc, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x12, &(0x7f0000000580)=ANY=[@ANYBLOB="1800"], 0x0, 0x1000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r8}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r8}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r8, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="8000b2000a000200aaaaaaaaaa0c0000aa389fa250e6414ef3e938160695d2be"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) (async) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="8000b2000a000200aaaaaaaaaa0c0000aa389fa250e6414ef3e938160695d2be"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) socket(0x23, 0x802, 0x5) (async) r9 = socket(0x23, 0x802, 0x5) sendmsg$FOU_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4040001) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}}, 0x8000) 3.268522484s ago: executing program 2 (id=516): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000280)={'gretap0\x00', r2, 0x700, 0x7800, 0x2, 0x5, {{0x19, 0x4, 0x2, 0x1d, 0x64, 0x68, 0x0, 0x68, 0x2f, 0x0, @local, @private=0xa010100, {[@rr={0x7, 0xb, 0xf0, [@remote, @local]}, @timestamp_addr={0x44, 0x14, 0xe9, 0x1, 0x4, [{@loopback, 0x6}, {@empty, 0x4}]}, @rr={0x7, 0x13, 0x52, [@rand_addr=0x64010101, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010102]}, @noop, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x3f, 0x0, 0x3, [0x6, 0x80000001, 0x6, 0x6]}, @generic={0x82, 0x2}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@deltclass={0x3c, 0x29, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0x0, 0xffe0}, {0x4, 0x3}}, [@tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_clsact={0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='sys_exit\x00'}, 0x18) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x1, 0x7, 0x1f15}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={r5, 0x20}, &(0x7f00000001c0)=0x8) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24008004) 3.128276369s ago: executing program 2 (id=517): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000011140100900000000000000008004b0028"], 0x30}, 0x1, 0x0, 0x0, 0x40094}, 0x40) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000080)=0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0xfeffff0700000000, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000000000f9ffffff00000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff010000000100000056", 0x19}], 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="eb769765e706a0beb0655fef7b348a3964e4805c80208068e73e0a9ec45f845b218deecf2d2ceba5ea1250ea595ca7418fd0dc1bc569ccc89c0ee1ada54ec9c59d7d271567c15493fe", 0x49}], 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x6, 0x5, 0x7, 0xc1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r7, &(0x7f0000000340), 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf) 3.043036405s ago: executing program 3 (id=520): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) (async) sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000140)=0x8) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x12d}}}}]}, 0x58}}, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x8001, @multicast, 'gre0\x00'}}, 0x1e) (async) r6 = socket$rds(0x15, 0x5, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x1b, &(0x7f0000000180)={0x0}}, 0x8d1) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$FIONCLEX(r1, 0x5450) (async) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0x9) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f0000000380)={0x0, 0x6}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d01020008000900", @ANYRES32, @ANYBLOB="08000a00e1"], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) (async) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async) close(r6) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32=r10, @ANYBLOB="c95a5115a63f56a3fe31de12b7bcb28b028c9a8eb00545e2fc745063bb26cf11e227aac06dd35222c6b1ed4062e38453044806085f"], 0x1c}}, 0x20000080) 2.971033653s ago: executing program 0 (id=521): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf}]}}}]}, 0x3c}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$PPPIOCGIDLE32(r3, 0x8008743f, &(0x7f00000000c0)) 2.774445482s ago: executing program 1 (id=523): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x81, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c40)={{r1}, &(0x7f0000000bc0), &(0x7f0000000c00)='%pK \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c40)={{r1}, &(0x7f0000000bc0), &(0x7f0000000c00)='%pK \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 2.769526251s ago: executing program 0 (id=524): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000003c0)=""/4096, &(0x7f0000000080)=0x1000) 2.618428743s ago: executing program 0 (id=526): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x5, 0x6}, 0x4) bind$packet(r0, &(0x7f0000000100)={0x11, 0x3, 0x0, 0x1, 0x3, 0x6, @random="ba5de643b791"}, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='b'], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x2d, &(0x7f0000000380)=0x1, 0x4) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$sock(r4, &(0x7f0000000200)={&(0x7f00000005c0)=@can={0x1d, 0x0, 0xf5}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000640)="d70843d0d3a7d851fad0b53f714b67cbace5aee79f641ae72cab5f6a2e16496deeeffee47b5b0e284efef0fff2ae8848abba01f5f8ab6fa8db3c059cb91ff7cd99d1d925df5fbe5d1ad490e319cc0e10535f0134f3c95c488fe6f60a778dbe81a23b3d1215791c6eb6e3778ee28fe1c7a65994519a168eac54dcf849875eb792708c0c6440ff50b0477f4047f7c6eaa171a4252ece9054006724eaf6db6b59ba3a7f4d743486a5205a2dbbffd79501ea9345c6ca2047840006b9aaeec65c78f57e329c2923a6e0c78819bf55e3a5b6542c70a286ab5a39f481fd61836877338a06d7a071a2f764374537c44d9823", 0xee}, {&(0x7f0000000740)="e16fdb2f41db56208b1bdab9839d8b764d15b9a34928b8358799ea0e330a378ed09fa94fcf366c381e8a474883e9dee976f8dcf68b85d9b463ff0118701821bf49683f3616becebbfb9737f46352fd2680ebbc428ef004cd9bfdbb05e4741a0cd5fc693f2472ae31", 0x68}, {&(0x7f00000007c0)="b5008d9a75143e8db609e26250d4a0d2a5e0cb18e7978806eee6e3d75ba24c995453d7ee398cfad992082e185c965cb517e873d20b696726d33b7e6785c283009939f1e4b38241674f382c1d4684c68a09a833a0597ae4996995", 0x5a}, {&(0x7f0000000240)="25ee0292a0d058acd5fe18495c8f1317c4b4d14d25daa0b78cce05022e957b4a939ed513bc110fa0481d9ce536b255f92b86447e5870081f9394", 0x3a}, {&(0x7f0000000840)="2d739656d65997a1dbb426a3db01627c4988ff8c7db6b28b691059ac13431304c759c5cc503c4d5f6d36451fad3b7f60190f78267f7a76fb57358d1b5e06e8d427ce0f6f17ac1900ceff151c212874faf2c0eade90f052e3c4f0b04dc9421b92a1788450bdd69ff8d24b224fa6d01117766c7ee7ffc8a61ccb397f24fbdef1d1f10e0db03ecee8ef4dba08e57c0362fd0f31d54ba23f48dc9c82a93b81f28401b00a54623316d40fb50da3e58e47859298983b15a69dcda7494443b4b73430ac81bc043c8e3e18c729d5dc978df91286036fd5b2b3d191746877b24026982ed808e3ef100d3b3005b74a2dc4f10e0452dfdc", 0xf2}, {&(0x7f0000001500)="90a40f341ee4df106d649d7ce0f65d5f12224c07256863a103ad1ab9a05df0657a4cc52524a4d7c2b394eac44983ba649f7f8b74ce8de11106f52dc62459577e9e416d2a0ae3786c256c06725fda604dac8f54e74dc0f23844f705b758d8fa9414f67bc969edcb387411fad8657f6f16e3115935f0f31454e2c5848b8f480f4ec6921e284062b2a6f1a1c756f32bc0a2c3dc2d5351ab68f3dabc8659ccb3d8509fcabd6bd5de01c7e751091b71539d10a45059882b76e07580c9fd7856b856fcd60a83a544a3c588d00e7fe9c69046ba1489b9cb570d002629259899ad0ce1b6a8bd5dd67a668b8b11ccd7135722ed89ce6228bd31cd954c11886f5fe5e264beb1595a16776894c1e35460323e2e211c82cf72f8236c9fe7f6e967ff79ef2733abb56194e4c2ea0cdd85a09eba516744c8ae629a34d9b17ba742dc7057e21cf57a451c591b17d125c5bd2a5e73a6165bbb2d8086f234b85503b36619f8634a36005f61e55cb537a5796b90348f61bbeaa42132abce2138f8fc651fff2b455c6ba1bda6f5324f76c81a59b1b1c5c6638931e7f5ce00530d3912f96be8c406b360f4188a1cecdd1a62e048b8d04149031afa1b0ed09656c644bdbd89f30f3ca31094c5843b8ddf10885d26229332aa5463d77ff2754fca01d1b55e0f7d35d2fd4c8ed03989802344e1ab207502e9fe1f2dbd6107d2c7e8a1c95118396358a2faeda7092d3267612eb10f0a7d0ea66992efc7e0a1a6a6731d4439e347c9aae9d4932a3426b2f93479a3581c9c812045ba54a02f4c032fbe85eea1d5492114bfce0c96e5e75de35d9b931bf610486797ac7587eba0b9b45dd62aa7072a67718278a6ffca619e6ad14426b9a130470f55c25c584c67864ebf573b52932431917fc636366946564fa6e3ec8de62a6983e5aafcea2c31748213617cbe4720d60a1c4401cb9f12ffb179bf33a6196bcbc3255460f04900d8dddf165e5ae5ff10a83bdd171075e477bd618e3b55b895ef737e538621eefa752ea134f24ee1b1b1dc41f81af6f6a732d80271f2737db403a9f674c128bb248a34e9171f9e327a41b6c24fbff87acddcb0c8b0881b5b34aab6f5b29e3d019258a948d7af7b0d82d4c7fd6668f94a85e64a6bfbee53b9cc0d5af0a4e81ce3ff7dbff95aa2c8f1b5498e01fc6311fe05c66abb4a96bb78e9a14401499d6ebfa2182a79aaad1c8a56f52bcc565ecee1021822491fb97e073a6996929efb7572c2850a09b93b0f21a1aa3637886d11b9e14b4839cb35c0f232df82f8c48ee499037b2f01228b2e6956824b9fdb254106864d8c5438263ae8a5937c2078ff2f4b2504336acec3e70c32632e0d5b55c0522f5c8e14848fcaeb198f71642581394221b398f65a8aa075b7c134d0eaf444c8e42dc4a56a4e4cff9276783fcb2a02ebc5a885e63c84ecde66790a5d5669d9b3d811684e4bf7675602bb8bb9dc49da064a6332760d6d45a44f43e75a", 0x41e}], 0x6}, 0x4000040) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r1, 0x0, r8, 0x0, 0x8, 0x0) unshare(0x6a040000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01000000009bfaa22b5cd5a7451707be0000000000070000496d9a169699a946f4ca0008000b0000000000"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a300000000014000000020a0300000000000000000001800000140000001100010000000000000000000000000aad0c343951db5c97c0bd670108899b753441fcf0cf2578c76151a0b02d80e35872f41b8a6f9d288207604069335e7d1c6bdbd38633a3bafc4f9d54ceaab320709770a7cb7df65c05c5bdad7b467c397483de2eec35caf02ddbb28dd64988b683c3948f76a1acac5a4ec8d66f5fc0159706b8a147fe6d4265b6038967df044bda666ee089bc6b43cb61a7fcc2ba73618400c912c440f3bdd47e0e89cd640b4e4d174020ff72121525bd068e367a339f472e1abd8d94470c7959d7631b7735215cbb1bce77211e68266905b05e2acb936e1384a5652258dcb9b70c703e2f475490856d"], 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000cba146a7b25c59a3aa8aefe860d6", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000600)=ANY=[@ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r12, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000300)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) 2.522072624s ago: executing program 1 (id=527): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = epoll_create1(0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x3}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r1, 0x0, 0x0, 0x2d516fb6, 0x0, 0x0) socket(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa", @ANYRESDEC=r1, @ANYRES32=r1, @ANYRES64=r5, @ANYRES32=r4, @ANYRESHEX=r1], &(0x7f0000281ffc)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @cgroup_skb=0x1, r5}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r6, 0x2000000, 0x1d, 0x0, &(0x7f0000000040)="13b85c46632b5f1ef020bc6a5c73e4e71c9b050000000500080001d67be98c8b38e34bd008", 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@getqdisc={0x34, 0x26, 0x800, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x5}, {0xc, 0x3}, {0x6, 0xa}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}}, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r9, 0x1}], 0x1, 0x0, 0x0, 0x3) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, r5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r10}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f00000004c0)=ANY=[@ANYRES32=r10, @ANYRES32=r0, @ANYRES16=r7, @ANYRES64=r0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x48) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r12, 0x0) splice(r12, 0x0, r11, 0x0, 0x406f413, 0x0) socket$kcm(0x2, 0x3, 0x2) 2.272205884s ago: executing program 3 (id=528): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r1, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x82}}]}, 0x3c}}, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001740)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB='.\x00\x00'], 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x8c, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8800) 2.109494777s ago: executing program 2 (id=529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000061100000000000006200020000000000950001f0ffff0000901fb02d6d91ce393f7e51b00d976e38541d7f59089dafe842f228d6accecf1ca0f0d0f7bb81687b77e486a7e9b0d2102f2a11d58808ee7348e34e2401dc67d9059d53906cab5116bef016ee"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r11, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r11, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) socket$inet_udplite(0x2, 0x2, 0x88) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r12], 0x10) 1.456235454s ago: executing program 3 (id=531): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES16=0x0], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000053000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc777", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000740), &(0x7f0000000780)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000300000000030000000200000002000000000000000000000105000020200000000000000000000003000000000200000002"], 0x0, 0x5a}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) pselect6(0x40, &(0x7f0000000100)={0x2}, &(0x7f0000000000)={0x24a0, 0x20, 0x3838, 0x0, 0xfffffffffffffffc, 0x7, 0x8}, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r6, 0x6}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000200)={r6, 0x8f, "6be7f3259355da8b028740fad3fa5ee1f829fccdceceed0c40584ccbb089a8d8a72a4c164b779aab3e5253a6515dd6efd165cc26c8c8c401e9bc9df40b15b8cca7f156ce3d6473cb8df7356ffb15dc5cfb728860f653ef22506cd67750eb21f16da87679d727fbba37cfb672f41e677f4fd7c9df867d87de41b2cc65f5c352d16ee793bf039e3187f720da3b11203e"}, &(0x7f00000002c0)=0x97) r7 = socket(0x29, 0x0, 0x9) getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000400)={r4, 0x0, 0xd, 0x8, 0x8, 0x4}, &(0x7f0000000440)=0x14) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000300)={r6, 0x6, 0x4, 0x0, 0x4, 0x5}, &(0x7f0000000380)=0xff3c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000480)="a2e589a3f63933405ff0af4073c6062afd0bf9ee094045d360ac02c75e1a0dd38b830539b484cb9e28a17d5367ecebad87b20a88c40da0b7ceb2066803c1277b1dcd31e79ae5a762f6e5ac41c288537d7e25a6ad11920dd8291d26862bc768a245ebbf15a11394328efa203d014c30ada571dbb57aeece12", 0x78}], 0x1, 0x0, 0x0, 0xa6820000}, 0xafe6) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f0000000600)={0x3, 0x48, '\x00', 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 1.237061925s ago: executing program 3 (id=532): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) (async) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) write$cgroup_int(r7, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@mask_cswp={0x58, 0x114, 0x9, {{0x3, 0x1000}, &(0x7f0000000240)=0xabc7, &(0x7f00000002c0)=0x6, 0x3, 0x40, 0x2, 0x1, 0x40, 0xa}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x70}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, r3, 0x54099000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000208000a40000000000900020073797a31000000000900010073797a300000000008000540000000213000118008000100636d7000240002801000038009000100357c8b80ae0000000800024000000001080001"], 0xb4}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000208000a40000000000900020073797a31000000000900010073797a300000000008000540000000213000118008000100636d7000240002801000038009000100357c8b80ae0000000800024000000001080001"], 0xb4}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a27f200022c00fe8000000000000000000000000000bbfe8000000000000000000000000000aaff0001080000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078080050e439cc1c50f9e8f0e11a069a10956846f9b94ac998f72d61715c8c4129345ff7afa956de43ce83b4c1b2fd7eafbe4262b2a5cceb924593f577cf04736141ea2ae5370d3f14c75cba771a9ee982efac6d632b944c8a90dcdae68109c259f0bfba1973a8b12f4d11dabc5d60ae87f6b6c78d6b2a01b5e1bda3afbb5fd61a2267026b611444954d06525cf062794471ed32d643f610ddbbfe8148fd2aa4a46e3e"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 1.178097367s ago: executing program 1 (id=533): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010100}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000180)={0x1, 0x2, 0x1000, 0x22, &(0x7f0000000100)="7f42e289835984d47720c360528022184eaa89da5773e20de11d362d60a87d052e7b", 0x0, 0x0, &(0x7f0000000140)}) 956.456109ms ago: executing program 4 (id=534): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 926.285357ms ago: executing program 4 (id=535): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4c}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x4b}}}}, [""]}, 0x30}}, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)=@base={0x1c, 0x4, 0x41, 0x0, 0x1, 0x1, 0x11, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x6}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x7, 0x0, 0x2, 0x1, 0x8, 0x10, 0xfffffffffffffff0}, @exit, @exit]}, &(0x7f0000000340)='syzkaller\x00', 0x400002, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback, 0x36, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) sendto$inet6(r3, &(0x7f0000000280)="050350038f0b48030102", 0xa, 0x800, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=r6], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='btrfs_transaction_commit\x00', r6, 0x0, 0x510}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x69188f15, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)="898b968f9ada06b1f03efafd4d99e8118cb1fe5331a15ae14a9508c32bb8d9d55245fa", 0x23}, 0x1, 0x0, 0x0, 0x24004884}, 0x20004884) 800.357424ms ago: executing program 4 (id=536): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01c5d147650500001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01"], 0x3c}}, 0x0) 656.421991ms ago: executing program 1 (id=537): syz_emit_ethernet(0x11c, &(0x7f0000000100)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @generic={0xe, 0x6, '\x00', 0xe6, 0x4, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[@srh={0x32, 0xa, 0x4, 0x5, 0x40, 0x48, 0x1ff, [@empty, @loopback, @empty, @mcast2, @empty]}, @srh={0x2b, 0x8, 0x4, 0x4, 0x0, 0x0, 0x7, [@empty, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0x1, 0x0, 0x9, 0x0, 0x0, 0x8, 0x67}, @srh={0x6c, 0x2, 0x4, 0x1, 0x1, 0x0, 0xb, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], "9148f9d0ad1b27abe1b30c895e2881367b70b543825e5f262ba92fbbcd70206555e22483c96d"}}}}}, 0x0) 655.881229ms ago: executing program 2 (id=538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000b8f1140000000200005500da1f2c060262e361c46960306500001100010000000000000000000000000a"], 0x3c}}, 0x40) r2 = socket(0x10, 0x3, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f0000000140), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7fff, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80003, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x10000000}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f0000000500)=""/107, 0x6b, 0x0, &(0x7f0000000580)=""/227, 0xe3}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000f, 0x20010, r9, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r10, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r10, 0x0) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0), 0xc) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x4, 0x10}, 0xc) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2000000000100000010000000400000000100000", @ANYRES32=0x1, @ANYBLOB="0200000000000000000000000000000000000000e8e3905a3a18dcaeedca3267aca780b43c6549f3ea4fba5acf059870ebae3f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000400"/28], 0x50) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000940)={r2, 0x1, 0x7fff, 0x3}) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=0x1, @ANYBLOB="80a30500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000030105beaa4df2208eaedc00"/27], 0x50) r17 = bpf$ITER_CREATE(0x21, &(0x7f0000000a00), 0x8) r18 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x8, 0x14, &(0x7f0000000c40)=ANY=[@ANYBLOB="18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001853000005000000000000000000000018000000ffffffff000000000900000018200000", @ANYRES32, @ANYBLOB="000000000800000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000000c421800f0ffffff9500000000000000186800000800000000000000810000009ba378f0de63d458c273de60c1ccf79e4853a1ca68203763e32a4f8b5ab1555b691f3fbf35d7d1dcd4ae3b99a6a2913ce91a546595d26552175e3951977eb8769c7cba269a20313a529d1697983e59521c5ac3c741bce305d494d01121e28a6c251d97bceebbeaa1c920cc07229b8b8aeed503dda6aff37a05fcc1f80c3017"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x5, '\x00', r4, @fallback=0xc, r6, 0x8, &(0x7f0000000480)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x3, 0x3b5, 0x9}, 0x10, r8, r9, 0x1, &(0x7f0000000ac0)=[r5, r10, r11, r12, r13, r14, r15, r16, r17, r18], &(0x7f0000000b40)=[{0x4, 0x5, 0xc, 0x5}], 0x10, 0x7940}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x28, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, r4, {0x4}, {0xd, 0x1}, {0x4, 0xfff3}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x44) 594.335382ms ago: executing program 1 (id=539): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x8800) sendfile(r0, r2, 0x0, 0xffffffff000) listen(r0, 0x4) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) (async) pipe(&(0x7f0000000080)) (async) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) (async) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x8800) (async) sendfile(r0, r2, 0x0, 0xffffffff000) (async) listen(r0, 0x4) (async) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) (async) 565.303658ms ago: executing program 4 (id=540): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x7d, &(0x7f0000001080)={0x0, 0x7}, &(0x7f00000010c0)=0x8) r1 = socket$kcm(0x10, 0x3, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000027c0)=""/4047, 0xfcf}, {&(0x7f0000000680)=""/4088, 0xff8}, {&(0x7f0000000500)=""/244, 0xf4}, {&(0x7f00000003c0)=""/180, 0xb4}], 0x4}, 0x2043) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001840)={'sit0\x00', 0x0, 0x0, 0x7800, 0x20, 0xfffffffb, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x4, 0x0, 0xfe, 0x29, 0x0, @remote, @multicast1}}}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000100)="b70000000000", 0x6}, {&(0x7f0000000040)="37a8a6c4", 0x4}, {&(0x7f0000000280)="3de496b26cb156fc17de651bb0059979575c10b71057fbfd852720c6e528", 0x1e}], 0x4) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x0, 0xb, 0x5, 0x80, 0x81}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) 477.968297ms ago: executing program 2 (id=541): socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet(0x2, 0x3, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd50200000009"], 0x7c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010d57b90b013f4159400", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009"], 0x3c}, 0x1, 0x0, 0x0, 0x20040}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x14}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f00000002c0)=ANY=[], 0x0}, 0x94) (async) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000200)=0x91f, 0x3) (async) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r0, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="f7412ba8213f88d560a3a5574e642b669a3e5dc25f8ee41af07a4e1c44bfa6ce3a53f2460d481bfddfb459bf5eff3ddde6436c58b2aba519504badbcbbb76d26654865b6144579937d5d509d8cd73c8be878c73b414a66c6a63e89ffe48b4dbb4a545820dfecc7f89eea09b1b7d863f82d7c234bbcba6160704739e827ee3893fab25b70b8bfd3b220f5369683a22df025f13ac4d653214b99a931bb87bb2de2ed6aa57e", 0xa4}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e816a4e863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x42}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0x2e}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 372.237121ms ago: executing program 0 (id=542): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) setsockopt(0xffffffffffffffff, 0xff, 0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x51d, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000380)=0xe10, 0x4) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x56, "53f47e507a6fee1f3457997cafdcd52af7aefd59be3e69c45b230cc3bfbca9a76f3672d3c9cc05fb625df9b95b000ff9e6cf0fdfdce7d18e634f094615712902e1b94ca55e4b763eac8d1b0e7575eacb189697eaa3dd"}, &(0x7f0000000000)=0x5e) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d0001fff00000000000000006"], 0x118}], 0x1}, 0x180) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xf}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r4, 0x0, 0x2}, 0x18) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="240000002e0001002aab70000000000008000000"], 0x24}], 0x1}, 0x0) unshare(0x20000400) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x483, &(0x7f0000000000)={0x6, @multicast1, 0x0, 0x0, 'fo\x00', 0x14, 0x0, 0x807f}, 0x2c) 293.101169ms ago: executing program 2 (id=543): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000091401001000000002000000080021"], 0x18}}, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa00"/197], 0x23c}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r5 = socket(0x10, 0x800, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r5) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB='`\x00\x00'], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000740)={0x0, 0xe00, "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"}, &(0x7f0000000040)=0xe08) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r6, 0x1b3}, 0x8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000889078ac1e0001ac1414aa0c009078000b0300450000000000000000000000e0000001e0000b02"], 0x0) unshare(0x8040600) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x600, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 262.742438ms ago: executing program 1 (id=544): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) (async, rerun: 32) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x3, &(0x7f0000000200)=[{0x40, 0x0, 0x38, 0x4}, {0x6, 0xfc, 0xfe}, {0x7f, 0x13, 0xfd, 0xff}]}) (async, rerun: 32) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000240)=0x10001) write(r0, &(0x7f0000000280)="4591", 0x2) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x45936000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000018c0)=ANY=[@ANYBLOB="38000000190001002bbd7000fbdbdf251d01020008000900", @ANYRES32=0x0, @ANYBLOB="0c000b00000000c0040000e008000500d3ad33d531bd90eb", @ANYRES32=0x0, @ANYRES32=0x0], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001840)=ANY=[@ANYRESHEX=r0, @ANYRES16, @ANYBLOB="01000000000000000000020000000900010073007a32000000000900030073797a32"], 0x2c}, 0x1, 0x0, 0x0, 0x40004040}, 0xc800) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e2f76d240500d7a03b00", "d8a024e5", "20000926000200"}, 0x38) (async) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x4e1f, 0x5, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x6}}, 0x0, 0x0, 0x4e, 0x0, "f5fe9c103abe0b65544e0980519f38f54dd5f87ecc377210bd44fe7e1375550831c5f6dd769f5a1d175f47a8b941c8e568ca41e8da841f4f18f1ea6b206d495119ac37c29f4b384d0a9181566cfc4a1b"}, 0xd8) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000001840), 0x4) (async, rerun: 64) connect$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff78) (async, rerun: 32) r5 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$inet_int(r5, 0x0, 0x32, 0x0, 0x0) (async) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000001800)=0x1) (async, rerun: 64) r6 = socket(0x1, 0x2, 0x0) (rerun: 64) bind$unix(r6, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000dc0)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208d}}], 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000017c0)={r7}) (async) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="04002780b90b00000000000000f400ff010000000000000000000000000001000000"], 0x120}], 0x1}, 0x300) 191.276205ms ago: executing program 4 (id=545): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 104.438927ms ago: executing program 0 (id=546): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x25, @dev={0xfe, 0x80, '\x00', 0x26}, 0xd52}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1400000000000000290000003e00000000000000000000002400000000000000290000003200000000000000000000000000ffffe00000", @ANYRES16], 0x40}}], 0x1, 0x8000) 29.157755ms ago: executing program 0 (id=547): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd28, 0x5, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x80) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x11}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x280048d1}, 0x80) writev(r0, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1) 0s ago: executing program 4 (id=548): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@loopback, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, "fc034b65b139a0f66f20ee6737d95f400bbbd4bcd7ddab69b14f9f9fdb843d8d", 0x2, 0x6, 0x9, 0x6}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000040)={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "b718f0ad39be9e19ce54d6874523d1b9162d02c90ba0d4716d773b66e8d9fbd9", 0xffff, 0xf8, 0x7, 0x5}, 0x3c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @multicast1}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={r3}, &(0x7f0000000180)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200), 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=@flushpolicy={0x174, 0x1d, 0x100, 0x70bd2b, 0x25dfdbfd, "", [@extra_flags={0x8, 0x18, 0x80000000}, @algo_aead={0x146, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x7d0, 0x0, "bd351d4331d8a4008d8da60b6ffdb1d578fb76d95679e1c327bca69c67def60042c82533305ba4c4e52c511700ee3eb04f394c016ad5426b8ed108e8da54df1209b17d2437e7cc84ede4c3070722da3c05d43616c20c0f963becb14d126904d83e240ec5ce06a83b12e3c1809f709d169ce821a3e71ec909584e9378e760f614779126f0d88f9815aef75b9141fee51ec10064a8caaf1b995d1df318d5ee2ba2efdc814290521266603f79815bd0de6a0a01c1f42bd2c9eae1269a614c76106032fa6d45a98c569a59a13a988ec62993c120f93b28aeb8eda0e3bd65aaaeb5c9ebfbe16b44c506aab3276a9f5c66e857fcc8d720aaef482f99ef"}}, @coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x174}, 0x1, 0x0, 0x0, 0x44880}, 0x40) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000440)=0x1, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x28, &(0x7f0000000540)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffff}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @alu={0x4, 0x0, 0x9, 0xb, 0x0, 0x40, 0x1}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x10001}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @alu={0x7, 0x1, 0x8, 0x7, 0xe}], &(0x7f0000000680)='GPL\x00', 0x7, 0xcc, &(0x7f00000006c0)=""/204, 0x41000, 0x53, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0x0, 0x7, 0xb8e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r9 = socket$unix(0x1, 0x5, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000900)={r4, 0x7}, &(0x7f0000000940)=0x8) syz_genetlink_get_family_id$nbd(&(0x7f0000000980), r10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x810, r7, 0x329ab000) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r11, 0x29, 0xcc, &(0x7f00000009c0)={{0xa, 0x4e23, 0x8, @mcast2}, {0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x8}, 0x0, {[0x7fffffff, 0xe, 0x3, 0x0, 0x1f85, 0x6, 0x8001, 0x5]}}, 0x5c) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r8) sendmsg$TIPC_NL_MON_GET(r8, &(0x7f0000000c00)={&(0x7f0000000a40), 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xc4, r12, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x71f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004091}, 0x4000000) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f0000000c40)={r4, 0x1a, "da964a1d54369af13fad6648af825cf7784dcbaea78138312e7f"}, &(0x7f0000000c80)=0x22) openat$cgroup_type(r8, &(0x7f0000000cc0), 0x2, 0x0) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f0000000d00)={0x1, @null, @netrom={'nr', 0x0}, 0x1, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x80000000, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000d80)={r3, 0xf860, 0x1, 0x1, 0x4, 0x1}, 0x14) gettid() mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x50, r11, 0x699de000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.176' (ED25519) to the list of known hosts. [ 65.659802][ T5835] cgroup: Unknown subsys name 'net' [ 65.807581][ T5835] cgroup: Unknown subsys name 'cpuset' [ 65.815888][ T5835] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.225489][ T5835] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.503079][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.510941][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.518634][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.533636][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.543688][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.659434][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.667915][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.675448][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.689970][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.697909][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.745291][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.753070][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.764365][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.772337][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.783352][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.835225][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.844046][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.853408][ T5167] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.860578][ T5167] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.869272][ T5167] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.883075][ T5167] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.923529][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.931266][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.945381][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.955925][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.288465][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 70.494481][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 70.630640][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.638513][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.646344][ T5845] bridge_slave_0: entered allmulticast mode [ 70.653575][ T5845] bridge_slave_0: entered promiscuous mode [ 70.673575][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 70.712927][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.720057][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.727270][ T5845] bridge_slave_1: entered allmulticast mode [ 70.734969][ T5845] bridge_slave_1: entered promiscuous mode [ 70.870440][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.878025][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.885714][ T5853] bridge_slave_0: entered allmulticast mode [ 70.892579][ T5853] bridge_slave_0: entered promiscuous mode [ 70.903064][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.912416][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 70.945166][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.952306][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.959755][ T5853] bridge_slave_1: entered allmulticast mode [ 70.967488][ T5853] bridge_slave_1: entered promiscuous mode [ 70.987494][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.996902][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 71.099244][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.106684][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.114727][ T5850] bridge_slave_0: entered allmulticast mode [ 71.122368][ T5850] bridge_slave_0: entered promiscuous mode [ 71.132052][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.145044][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.164715][ T5845] team0: Port device team_slave_0 added [ 71.176093][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.183523][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.190668][ T5850] bridge_slave_1: entered allmulticast mode [ 71.198560][ T5850] bridge_slave_1: entered promiscuous mode [ 71.234662][ T5845] team0: Port device team_slave_1 added [ 71.309465][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.318577][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.341552][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.353580][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.364224][ T5853] team0: Port device team_slave_0 added [ 71.388687][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.395751][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.421644][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.446372][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.453943][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.461031][ T5855] bridge_slave_0: entered allmulticast mode [ 71.469231][ T5855] bridge_slave_0: entered promiscuous mode [ 71.478217][ T5853] team0: Port device team_slave_1 added [ 71.509185][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.516353][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.542326][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.554097][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.561245][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.569156][ T5855] bridge_slave_1: entered allmulticast mode [ 71.576055][ T5855] bridge_slave_1: entered promiscuous mode [ 71.606974][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.614123][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.621193][ T5857] bridge_slave_0: entered allmulticast mode [ 71.629159][ T5857] bridge_slave_0: entered promiscuous mode [ 71.633777][ T51] Bluetooth: hci0: command tx timeout [ 71.692969][ T5850] team0: Port device team_slave_0 added [ 71.698983][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.706149][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.714152][ T5857] bridge_slave_1: entered allmulticast mode [ 71.721034][ T5857] bridge_slave_1: entered promiscuous mode [ 71.743714][ T5845] hsr_slave_0: entered promiscuous mode [ 71.749967][ T5845] hsr_slave_1: entered promiscuous mode [ 71.770063][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.777273][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.803513][ T51] Bluetooth: hci1: command tx timeout [ 71.806872][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.821866][ T5850] team0: Port device team_slave_1 added [ 71.842513][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.854459][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.863806][ T51] Bluetooth: hci2: command tx timeout [ 71.869605][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.879504][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.886561][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.912583][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.943108][ T51] Bluetooth: hci3: command tx timeout [ 71.959431][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.011316][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.018452][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.044561][ T51] Bluetooth: hci4: command tx timeout [ 72.050485][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.076031][ T5855] team0: Port device team_slave_0 added [ 72.099803][ T5857] team0: Port device team_slave_0 added [ 72.129102][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.136675][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.162997][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.183654][ T5855] team0: Port device team_slave_1 added [ 72.191302][ T5857] team0: Port device team_slave_1 added [ 72.299977][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.307098][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.335254][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.351355][ T5853] hsr_slave_0: entered promiscuous mode [ 72.358029][ T5853] hsr_slave_1: entered promiscuous mode [ 72.364522][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.372159][ T5853] Cannot create hsr debugfs directory [ 72.416093][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.423174][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.449054][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.460601][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.467852][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.493820][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.537641][ T5850] hsr_slave_0: entered promiscuous mode [ 72.543947][ T5850] hsr_slave_1: entered promiscuous mode [ 72.549868][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.557454][ T5850] Cannot create hsr debugfs directory [ 72.563604][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.570539][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.596659][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.725773][ T5857] hsr_slave_0: entered promiscuous mode [ 72.731902][ T5857] hsr_slave_1: entered promiscuous mode [ 72.738436][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.746337][ T5857] Cannot create hsr debugfs directory [ 72.850471][ T5855] hsr_slave_0: entered promiscuous mode [ 72.856944][ T5855] hsr_slave_1: entered promiscuous mode [ 72.863128][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.870676][ T5855] Cannot create hsr debugfs directory [ 73.114396][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.163629][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.174002][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.218380][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.333199][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.343415][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.368901][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.395901][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.447251][ T5850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.471003][ T5850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.481302][ T5850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.492500][ T5850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.613850][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.654410][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.671249][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.711720][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.715353][ T51] Bluetooth: hci0: command tx timeout [ 73.752310][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.780851][ T5855] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.799214][ T5855] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.810986][ T5855] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.821604][ T5855] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.834946][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.866227][ T51] Bluetooth: hci1: command tx timeout [ 73.881103][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.928123][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.937999][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.945237][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.952699][ T51] Bluetooth: hci2: command tx timeout [ 73.994846][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.001961][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.023706][ T51] Bluetooth: hci3: command tx timeout [ 74.028068][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.051745][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.058850][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.088910][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.096014][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.113776][ T51] Bluetooth: hci4: command tx timeout [ 74.150010][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.176415][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.194600][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.201677][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.242438][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.249567][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.278934][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.304040][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.311107][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.341177][ T5845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.358382][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.384302][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.391435][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.586880][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.677394][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.746926][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.754097][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.769659][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.776827][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.848882][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.029675][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.117227][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.175461][ T5853] veth0_vlan: entered promiscuous mode [ 75.212848][ T5845] veth0_vlan: entered promiscuous mode [ 75.220842][ T5853] veth1_vlan: entered promiscuous mode [ 75.266662][ T5845] veth1_vlan: entered promiscuous mode [ 75.288607][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.360944][ T5850] veth0_vlan: entered promiscuous mode [ 75.379015][ T5853] veth0_macvtap: entered promiscuous mode [ 75.415278][ T5850] veth1_vlan: entered promiscuous mode [ 75.423947][ T5853] veth1_macvtap: entered promiscuous mode [ 75.440976][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.455051][ T5845] veth0_macvtap: entered promiscuous mode [ 75.489344][ T5857] veth0_vlan: entered promiscuous mode [ 75.511540][ T5845] veth1_macvtap: entered promiscuous mode [ 75.555082][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.564194][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.576428][ T5857] veth1_vlan: entered promiscuous mode [ 75.600886][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.621811][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.660647][ T1089] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.672413][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.700038][ T5850] veth0_macvtap: entered promiscuous mode [ 75.721348][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.735427][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.751885][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.764927][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.784725][ T51] Bluetooth: hci0: command tx timeout [ 75.809130][ T1143] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.822574][ T1143] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.844200][ T5850] veth1_macvtap: entered promiscuous mode [ 75.920840][ T5857] veth0_macvtap: entered promiscuous mode [ 75.943113][ T51] Bluetooth: hci1: command tx timeout [ 75.944765][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.974571][ T5857] veth1_macvtap: entered promiscuous mode [ 76.013944][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.021879][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.030330][ T51] Bluetooth: hci2: command tx timeout [ 76.043672][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.088965][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.097703][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.113553][ T51] Bluetooth: hci3: command tx timeout [ 76.120404][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.127962][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.139244][ T1143] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.158384][ T5855] veth0_vlan: entered promiscuous mode [ 76.183017][ T51] Bluetooth: hci4: command tx timeout [ 76.185813][ T1143] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.202101][ T1143] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.217304][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.257685][ T5855] veth1_vlan: entered promiscuous mode [ 76.266882][ T1143] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.319092][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.353696][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.388129][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.401070][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.411106][ T5958] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1'. [ 76.476459][ T44] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.501588][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.520255][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.545782][ T44] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.558378][ T44] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.613937][ T44] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.630084][ T5855] veth0_macvtap: entered promiscuous mode [ 76.678709][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.705725][ T5855] veth1_macvtap: entered promiscuous mode [ 76.708585][ T5962] netlink: 'syz.1.2': attribute type 39 has an invalid length. [ 76.723757][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.768417][ T5964] syz.0.6 uses obsolete (PF_INET,SOCK_PACKET) [ 76.848019][ T5964] tipc: Started in network mode [ 76.854473][ T5964] tipc: Node identity ac1414aa, cluster identity 4711 [ 76.861670][ T5964] tipc: Enabling of bearer rejected, failed to enable media [ 76.886634][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.915942][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.926679][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.966815][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.144039][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 77.197361][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.205210][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.365623][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.380203][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.480620][ T1089] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.497890][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.507375][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.592725][ T1089] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.618897][ T1089] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.660212][ T1089] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.685210][ T1089] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.740738][ T1089] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.764329][ T3487] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.843781][ T3487] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.845219][ T5995] netlink: 5 bytes leftover after parsing attributes in process `syz.3.13'. [ 77.864249][ T51] Bluetooth: hci0: command tx timeout [ 77.881613][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.924026][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'. [ 77.958203][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.024142][ T51] Bluetooth: hci1: command tx timeout [ 78.067946][ T5997] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.103251][ T51] Bluetooth: hci2: command tx timeout [ 78.135780][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.142379][ T6004] gretap1: entered promiscuous mode [ 78.143718][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.180972][ T6004] gretap1: entered allmulticast mode [ 78.194020][ T51] Bluetooth: hci3: command tx timeout [ 78.267150][ T51] Bluetooth: hci4: command tx timeout [ 78.481246][ T6009] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5'. [ 78.505090][ T6009] Zero length message leads to an empty skb [ 78.544258][ T6011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'. [ 78.856829][ T6020] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 79.139119][ T6027] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.174465][ T6032] netlink: 168 bytes leftover after parsing attributes in process `syz.1.18'. [ 79.236867][ T6029] netlink: 'syz.2.20': attribute type 10 has an invalid length. [ 79.408160][ T6039] netlink: 'syz.0.21': attribute type 1 has an invalid length. [ 79.415964][ T6039] netlink: 600 bytes leftover after parsing attributes in process `syz.0.21'. [ 79.576888][ T6029] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 79.730541][ T6029] syz.2.20 (6029) used greatest stack depth: 19544 bytes left [ 79.952475][ T6065] Bluetooth: MGMT ver 1.23 [ 79.954438][ T6064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25'. [ 80.696319][ T6071] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.843349][ T6075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.977837][ T6071] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.092264][ T6090] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 81.214833][ T6091] netlink: 'syz.1.32': attribute type 10 has an invalid length. [ 81.246270][ T6071] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.318318][ T6090] bridge_slave_0: left allmulticast mode [ 81.330964][ T6090] bridge_slave_0: left promiscuous mode [ 81.365704][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.393831][ T6090] bridge_slave_1: left allmulticast mode [ 81.410634][ T6090] bridge_slave_1: left promiscuous mode [ 81.420246][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.444988][ T6090] bond0: (slave bond_slave_0): Releasing backup interface [ 81.463558][ T6090] bond0: (slave bond_slave_1): Releasing backup interface [ 81.485619][ T6090] team0: Port device team_slave_0 removed [ 81.498635][ T6090] team0: Port device team_slave_1 removed [ 81.506623][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.516046][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.532906][ T6091] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 81.560470][ T977] cfg80211: failed to load regulatory.db [ 81.568203][ T6091] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 81.580599][ T6108] netlink: 5 bytes leftover after parsing attributes in process `syz.4.38'. [ 81.617190][ T6071] bond0: (slave netdevsim0): Releasing backup interface [ 81.646254][ T6071] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.764495][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 81.900732][ T78] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.036301][ T78] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.068604][ T78] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.143626][ T78] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.284619][ T6129] netlink: 168 bytes leftover after parsing attributes in process `syz.2.44'. [ 82.296949][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.45'. [ 82.369676][ T6131] geneve2: entered promiscuous mode [ 82.375100][ T6131] geneve2: entered allmulticast mode [ 82.506103][ T6140] vxcan1: tx address claim with dlc 0 [ 82.521865][ T6139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.48'. [ 82.623104][ T6139] vxcan1: entered allmulticast mode [ 82.637271][ T6139] vxcan1: left allmulticast mode [ 82.850773][ T6155] netlink: 'syz.3.52': attribute type 1 has an invalid length. [ 82.901785][ T6155] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 83.518920][ T30] audit: type=1800 audit(1753860647.333:2): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.56" name="memory.events" dev="tmpfs" ino=78 res=0 errno=0 [ 83.706651][ T6194] netlink: 'syz.0.63': attribute type 10 has an invalid length. [ 83.746122][ T6194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.758056][ T6194] team0: Port device bond0 added [ 83.765862][ T6196] netlink: 'syz.4.61': attribute type 3 has an invalid length. [ 83.959427][ T6200] netlink: 20 bytes leftover after parsing attributes in process `syz.3.65'. [ 84.042566][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 84.378642][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.69'. [ 84.454378][ T6215] netlink: 52 bytes leftover after parsing attributes in process `syz.2.70'. [ 85.262379][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'. [ 85.555459][ T6232] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 85.994451][ T6301] vlan0: entered promiscuous mode [ 86.745717][ T51] Bluetooth: hci0: command 0x0c20 tx timeout [ 86.850560][ T6348] Bluetooth: MGMT ver 1.23 [ 86.857671][ T6347] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 86.914287][ T6353] netlink: 'syz.4.102': attribute type 1 has an invalid length. [ 86.981813][ T6353] __nla_validate_parse: 11 callbacks suppressed [ 86.981830][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.102'. [ 87.020698][ T6347] netlink: 68 bytes leftover after parsing attributes in process `syz.3.98'. [ 87.030834][ T6336] gretap1: left promiscuous mode [ 88.098325][ T6420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.118'. [ 88.941572][ T6465] netlink: 168 bytes leftover after parsing attributes in process `syz.0.132'. [ 89.182308][ T6475] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.135'. [ 89.676797][ T6492] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 89.809811][ T6500] netlink: 88 bytes leftover after parsing attributes in process `syz.4.142'. [ 89.865204][ T6505] netlink: 16 bytes leftover after parsing attributes in process `syz.2.143'. [ 90.023777][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'. [ 90.184079][ T6517] veth0_to_bridge: entered promiscuous mode [ 90.356960][ T6526] netlink: 3 bytes leftover after parsing attributes in process `syz.4.149'. [ 90.410080][ T6528] netlink: 'syz.2.148': attribute type 3 has an invalid length. [ 90.639729][ T6531] veth1_to_bond: entered allmulticast mode [ 90.655075][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'. [ 90.754727][ T6531] bond0: (slave bond_slave_1): Releasing backup interface [ 90.900852][ T6531] veth1_to_bond (unregistering): left allmulticast mode [ 91.039256][ T6522] veth0_to_bridge: left promiscuous mode [ 91.208274][ T6535] ipvlan2: entered promiscuous mode [ 91.215619][ T6535] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 91.328165][ T6537] netlink: 'syz.1.153': attribute type 5 has an invalid length. [ 91.593473][ T6548] trusted_key: syz.2.154 sent an empty control message without MSG_MORE. [ 91.836600][ T6558] ipvlan2: entered promiscuous mode [ 92.513887][ T6568] wg1: entered promiscuous mode [ 92.521130][ T6568] wg1: entered allmulticast mode [ 92.683907][ T6573] __nla_validate_parse: 1 callbacks suppressed [ 92.683923][ T6573] netlink: 52 bytes leftover after parsing attributes in process `syz.1.162'. [ 92.857277][ T6579] tipc: Started in network mode [ 92.862170][ T6579] tipc: Node identity ea31987d977a, cluster identity 4711 [ 92.885895][ T6579] tipc: Enabled bearer , priority 0 [ 92.899014][ T6583] warning: `syz.2.167' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.933117][ T6579] syzkaller0: entered promiscuous mode [ 92.938602][ T6579] syzkaller0: entered allmulticast mode [ 92.965020][ T6579] tipc: Resetting bearer [ 92.972550][ T6578] tipc: Resetting bearer [ 92.988909][ T6578] tipc: Disabling bearer [ 93.258137][ T6593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'. [ 93.300887][ T6599] netlink: 'syz.4.172': attribute type 1 has an invalid length. [ 93.309123][ T6599] netlink: 224 bytes leftover after parsing attributes in process `syz.4.172'. [ 93.800460][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'. [ 93.952506][ T6621] netlink: 'syz.2.178': attribute type 10 has an invalid length. [ 94.032219][ T6621] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 94.190778][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.179'. [ 94.211279][ T6628] team_slave_0: entered promiscuous mode [ 94.217122][ T6628] team_slave_1: entered promiscuous mode [ 94.289870][ T6628] macsec1: entered promiscuous mode [ 94.309670][ T6628] team0: entered promiscuous mode [ 94.323372][ T6628] macsec1: entered allmulticast mode [ 94.328679][ T6628] team0: entered allmulticast mode [ 94.361317][ T6628] team_slave_0: entered allmulticast mode [ 94.372906][ T6628] team_slave_1: entered allmulticast mode [ 94.390628][ T6628] team0: Device macsec1 is already an upper device of the team interface [ 94.447345][ T6628] team0: left allmulticast mode [ 94.459667][ T6628] team_slave_0: left allmulticast mode [ 94.469778][ T6628] team_slave_1: left allmulticast mode [ 94.481158][ T6628] team0: left promiscuous mode [ 94.548245][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'. [ 94.573486][ T6628] team_slave_0: left promiscuous mode [ 94.578934][ T6628] team_slave_1: left promiscuous mode [ 94.624709][ T6639] netlink: 'syz.1.177': attribute type 6 has an invalid length. [ 94.883768][ T6646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.183'. [ 95.121566][ T6658] pimreg: entered allmulticast mode [ 95.666282][ T6680] netlink: 248 bytes leftover after parsing attributes in process `syz.1.191'. [ 95.800610][ T6684] netlink: zone id is out of range [ 95.819579][ T6684] netlink: zone id is out of range [ 95.909575][ T6684] netlink: set zone limit has 4 unknown bytes [ 95.935490][ T6696] netlink: 16 bytes leftover after parsing attributes in process `syz.2.194'. [ 96.549561][ T6720] sctp: [Deprecated]: syz.2.201 (pid 6720) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.549561][ T6720] Use struct sctp_sack_info instead [ 96.905924][ T6730] tipc: Enabling of bearer rejected, failed to enable media [ 96.936777][ T6730] tipc: Started in network mode [ 96.941739][ T6730] tipc: Node identity , cluster identity 4711 [ 97.505199][ T6774] netlink: 34 bytes leftover after parsing attributes in process `syz.1.206'. [ 97.730709][ T6780] __nla_validate_parse: 1 callbacks suppressed [ 97.730726][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'. [ 97.870475][ T6784] netlink: 'syz.2.208': attribute type 1 has an invalid length. [ 97.889139][ T6780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.903605][ T6780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.950587][ T6780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.973945][ T6780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.771194][ T6806] netlink: 96 bytes leftover after parsing attributes in process `syz.4.213'. [ 99.158021][ T6468] Set syz1 is full, maxelem 65536 reached [ 99.613190][ T6845] netlink: 'syz.4.223': attribute type 11 has an invalid length. [ 99.661486][ T6847] ip6erspan0: entered allmulticast mode [ 99.931556][ T6478] Set syz1 is full, maxelem 65536 reached [ 100.048803][ T6852] netlink: 40 bytes leftover after parsing attributes in process `syz.3.226'. [ 100.208873][ T6858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.225'. [ 100.288174][ T6858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.225'. [ 100.379562][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 100.418716][ T6867] netlink: 248 bytes leftover after parsing attributes in process `syz.1.229'. [ 100.766201][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.230'. [ 101.569927][ T6911] netlink: 'syz.2.235': attribute type 1 has an invalid length. [ 101.621132][ T6911] netlink: 144 bytes leftover after parsing attributes in process `syz.2.235'. [ 101.659047][ T6911] netlink: 28 bytes leftover after parsing attributes in process `syz.2.235'. [ 101.837823][ T6946] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 101.847563][ T6946] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 102.162708][ T30] audit: type=1800 audit(1753860665.963:3): pid=6967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.250" name=14 dev="tmpfs" ino=365 res=0 errno=0 [ 102.259544][ T30] audit: type=1804 audit(1753860666.073:4): pid=6976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.250" name=2F6E6577726F6F742F36362F14 dev="tmpfs" ino=365 res=1 errno=0 [ 102.293353][ T6974] syzkaller0: entered promiscuous mode [ 102.298837][ T6974] syzkaller0: entered allmulticast mode [ 102.587652][ T6989] netlink: 'syz.4.254': attribute type 1 has an invalid length. [ 102.833014][ T6990] __nla_validate_parse: 2 callbacks suppressed [ 102.833031][ T6990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.248'. [ 102.919199][ T7003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.258'. [ 103.082206][ T7013] netlink: 'syz.1.261': attribute type 1 has an invalid length. [ 103.181773][ T7013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.241750][ T7013] vlan2: entered promiscuous mode [ 103.276872][ T7013] bond1: entered promiscuous mode [ 103.290867][ T7013] vlan2: entered allmulticast mode [ 103.322887][ T7013] bond1: entered allmulticast mode [ 103.528977][ T7013] bond1: (slave gretap1): making interface the new active one [ 103.530088][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'. [ 103.542572][ T7013] gretap1: entered promiscuous mode [ 103.550726][ T7013] gretap1: entered allmulticast mode [ 103.561939][ T7013] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 103.611625][ T7013] syz.1.261 (7013) used greatest stack depth: 19528 bytes left [ 103.834952][ T7040] !: renamed from dummy0 [ 103.936493][ T7042] lo speed is unknown, defaulting to 1000 [ 103.946832][ T7042] lo speed is unknown, defaulting to 1000 [ 103.978680][ T7042] lo speed is unknown, defaulting to 1000 [ 104.039087][ T7042] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 104.266963][ T7042] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 104.281845][ T7053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.266'. [ 104.458027][ T7042] lo speed is unknown, defaulting to 1000 [ 104.482266][ T7042] lo speed is unknown, defaulting to 1000 [ 104.500920][ T7042] lo speed is unknown, defaulting to 1000 [ 104.567433][ T7042] lo speed is unknown, defaulting to 1000 [ 104.631340][ T7065] netlink: 36 bytes leftover after parsing attributes in process `syz.3.268'. [ 104.672105][ T7065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.268'. [ 104.684481][ T7048] lo speed is unknown, defaulting to 1000 [ 104.700968][ T7065] netlink: 36 bytes leftover after parsing attributes in process `syz.3.268'. [ 104.747211][ T7065] netlink: 36 bytes leftover after parsing attributes in process `syz.3.268'. [ 104.769149][ T7042] lo speed is unknown, defaulting to 1000 [ 104.807350][ T7042] lo speed is unknown, defaulting to 1000 [ 105.184629][ T7096] netlink: 'syz.3.274': attribute type 13 has an invalid length. [ 105.210132][ T7096] netlink: 'syz.3.274': attribute type 17 has an invalid length. [ 105.248726][ T7086] ±ÿ: renamed from batadv_slave_1 (while UP) [ 105.484931][ T7096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.755812][ T7087] syz.3.274 (7087) used greatest stack depth: 19160 bytes left [ 105.781958][ T7123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.280'. [ 105.931973][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'. [ 106.279465][ T7131] hsr_slave_1 (unregistering): left promiscuous mode [ 106.461541][ T7155] netlink: 'syz.4.284': attribute type 303 has an invalid length. [ 107.004777][ T7146] syz.4.284 (7146) used greatest stack depth: 17736 bytes left [ 107.495170][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.774498][ T7225] syz.4.307 uses old SIOCAX25GETINFO [ 107.794242][ T7225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.141855][ T7249] __nla_validate_parse: 3 callbacks suppressed [ 108.141871][ T7249] netlink: 28 bytes leftover after parsing attributes in process `syz.3.314'. [ 108.169174][ T7239] lo speed is unknown, defaulting to 1000 [ 108.406662][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.317'. [ 108.432927][ T7260] netlink: 'syz.2.317': attribute type 29 has an invalid length. [ 108.441794][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 108.594813][ T7271] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607) [ 108.617908][ T7271] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 108.656754][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.320'. [ 108.666668][ T7269] netlink: 40 bytes leftover after parsing attributes in process `syz.1.320'. [ 108.962243][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'. [ 108.971801][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.324'. [ 109.009447][ T7286] netlink: 'syz.4.324': attribute type 15 has an invalid length. [ 109.078967][ T7296] netlink: 'syz.0.328': attribute type 1 has an invalid length. [ 109.100787][ T7296] netlink: 72 bytes leftover after parsing attributes in process `syz.0.328'. [ 109.139476][ T7296] netlink: 97 bytes leftover after parsing attributes in process `syz.0.328'. [ 109.203753][ T7302] netlink: 'syz.3.327': attribute type 39 has an invalid length. [ 109.242777][ T7301] nbd0: detected capacity change from 0 to 127 [ 109.326473][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 109.361259][ T51] block nbd0: Receive control failed (result -32) [ 109.667885][ T7330] netlink: 'syz.3.335': attribute type 10 has an invalid length. [ 109.712487][ T7323] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.873672][ T7330] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.920472][ T7330] bond0: (slave team0): Enslaving as an active interface with an up link [ 110.001814][ T7323] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.229870][ T7323] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.349322][ T7323] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.578985][ T7382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.673090][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.745617][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.786979][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.798449][ T7391] netlink: 'syz.0.354': attribute type 3 has an invalid length. [ 110.879615][ T6764] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.150361][ T7415] netlink: 'syz.0.362': attribute type 13 has an invalid length. [ 111.172715][ T7415] netlink: 'syz.0.362': attribute type 17 has an invalid length. [ 111.202350][ T7420] IPVS: set_ctl: invalid protocol: 103 100.1.1.1:20000 [ 111.216015][ T7408] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20003 [ 111.233296][ T7410] netlink: 'syz.2.360': attribute type 1 has an invalid length. [ 111.241084][ T7410] netlink: 'syz.2.360': attribute type 2 has an invalid length. [ 111.444572][ T7423] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 111.446136][ T5847] lo speed is unknown, defaulting to 1000 [ 112.617657][ T7482] C: renamed from team_slave_0 (while UP) [ 112.645999][ T7482] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 113.258691][ T7521] tipc: Started in network mode [ 113.273149][ T7521] tipc: Node identity ae46eecd413, cluster identity 4711 [ 113.280329][ T7521] tipc: Enabled bearer , priority 0 [ 113.340451][ T7524] tipc: Enabling of bearer rejected, already enabled [ 113.349212][ T7525] __nla_validate_parse: 12 callbacks suppressed [ 113.349225][ T7525] netlink: 16 bytes leftover after parsing attributes in process `syz.1.388'. [ 113.375050][ T7521] netlink: 16 bytes leftover after parsing attributes in process `syz.1.388'. [ 113.393206][ T5847] lo speed is unknown, defaulting to 1000 [ 113.399771][ T5847] syz2: Port: 1 Link DOWN [ 113.491583][ T7524] tipc: Resetting bearer [ 113.528034][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 113.671275][ T7517] tipc: Disabling bearer [ 113.901679][ T7547] netlink: 24 bytes leftover after parsing attributes in process `syz.0.397'. [ 113.942369][ T7558] validate_nla: 6 callbacks suppressed [ 113.942385][ T7558] netlink: 'syz.1.401': attribute type 5 has an invalid length. [ 113.991095][ T7560] ip6tnl1: entered promiscuous mode [ 114.016837][ T7560] ip6tnl1: entered allmulticast mode [ 114.025475][ T7560] team0: Device ip6tnl1 is of different type [ 114.295967][ T7577] macsec1: entered promiscuous mode [ 114.407220][ T7574] Can't find ip_set type hash:net,ned [ 114.478758][ T7590] netlink: 'syz.3.410': attribute type 72 has an invalid length. [ 114.484335][ T5847] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 114.514428][ T7590] netlink: 1016 bytes leftover after parsing attributes in process `syz.3.410'. [ 114.857042][ T7603] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 114.869506][ T7603] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 114.994374][ T5847] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 115.031233][ T7618] Driver unsupported XDP return value 0 on prog (id 204) dev N/A, expect packet loss! [ 115.108292][ T7620] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 115.114290][ T7620] syzkaller1: ignored: set checksum disabled [ 115.123988][ T7620] netlink: 60 bytes leftover after parsing attributes in process `syz.3.420'. [ 115.301325][ T7628] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002 [ 115.350194][ T7628] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002 [ 115.382129][ T7637] netlink: 112 bytes leftover after parsing attributes in process `syz.1.426'. [ 115.406077][ T7637] netlink: 112 bytes leftover after parsing attributes in process `syz.1.426'. [ 115.494931][ T7641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.427'. [ 115.631419][ T7647] tipc: Enabled bearer , priority 0 [ 115.639471][ T7648] tipc: Enabling of bearer rejected, already enabled [ 115.670658][ T7647] syzkaller0: entered promiscuous mode [ 115.683032][ T7647] syzkaller0: entered allmulticast mode [ 115.735032][ T7648] tipc: Resetting bearer [ 115.744764][ T7656] netlink: 104 bytes leftover after parsing attributes in process `syz.4.431'. [ 115.856752][ T7646] tipc: Resetting bearer [ 115.938148][ T7646] tipc: Disabling bearer [ 116.502403][ T7699] wireguard0: entered promiscuous mode [ 116.508752][ T7699] wireguard0: entered allmulticast mode [ 116.563684][ T7696] bond0: entered promiscuous mode [ 116.569242][ T7696] bond_slave_0: entered promiscuous mode [ 116.579161][ T7696] bond0: left promiscuous mode [ 116.595895][ T7696] bond_slave_0: left promiscuous mode [ 116.861552][ T7720] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 117.099668][ T7734] netlink: 'syz.3.452': attribute type 1 has an invalid length. [ 117.208251][ T7734] bond1: entered promiscuous mode [ 117.217863][ T7734] bond1: entered allmulticast mode [ 117.249585][ T7747] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20000 [ 117.302407][ T7749] lo speed is unknown, defaulting to 1000 [ 117.331697][ T7747] nbd: must specify a device to reconfigure [ 117.940016][ T7763] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 117.998259][ T7766] !: renamed from dummy0 (while UP) [ 118.279347][ T7776] lo speed is unknown, defaulting to 1000 [ 118.479235][ T7793] __nla_validate_parse: 14 callbacks suppressed [ 118.479337][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 118.511954][ T7792] syz_tun: entered promiscuous mode [ 118.525384][ T7792] batadv_slave_0: entered promiscuous mode [ 118.554056][ T7792] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 118.580917][ T7792] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 118.647682][ T7792] hsr1: entered allmulticast mode [ 118.673131][ T7792] syz_tun: entered allmulticast mode [ 118.682852][ T7792] batadv_slave_0: entered allmulticast mode [ 118.759890][ T7800] !: renamed from dummy0 (while UP) [ 119.012520][ T7815] erspan1: entered promiscuous mode [ 119.020436][ T7815] erspan1: entered allmulticast mode [ 119.259242][ T7806] lo speed is unknown, defaulting to 1000 [ 119.418948][ T7828] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 119.479547][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880590b3000: rx timeout, send abort [ 119.489186][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880590b3000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 119.805121][ T51] Bluetooth: hci4: link tx timeout [ 119.810576][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 119.833553][ T7843] netlink: 28 bytes leftover after parsing attributes in process `syz.1.471'. [ 120.008253][ T7847] netlink: 'syz.2.472': attribute type 1 has an invalid length. [ 120.051016][ T7842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.165435][ T7849] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 120.197109][ T7849] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 120.235323][ T7849] bond1: (slave vti0): making interface the new active one [ 120.255863][ T7849] bond1: (slave vti0): Enslaving as an active interface with an up link [ 120.545144][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 120.558358][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 120.719415][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.476'. [ 120.762751][ T7879] netlink: 'syz.1.479': attribute type 15 has an invalid length. [ 120.770723][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880590b0800: rx timeout, send abort [ 120.779699][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880590b0800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 120.898082][ T7879] bpq0: entered promiscuous mode [ 120.935405][ T7860] lo speed is unknown, defaulting to 1000 [ 120.990086][ T7870] lo speed is unknown, defaulting to 1000 [ 121.223945][ T7892] lo speed is unknown, defaulting to 1000 [ 121.665735][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 121.717483][ T7913] Bluetooth: MGMT ver 1.23 [ 121.726574][ T7913] syzkaller1: entered promiscuous mode [ 121.732181][ T7913] syzkaller1: entered allmulticast mode [ 121.863457][ T5859] Bluetooth: hci4: command 0x0406 tx timeout [ 121.978712][ T7927] netlink: 32 bytes leftover after parsing attributes in process `syz.1.489'. [ 122.059548][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 122.181847][ T7941] netlink: 36 bytes leftover after parsing attributes in process `syz.0.494'. [ 123.097785][ T7960] netlink: 'syz.1.497': attribute type 10 has an invalid length. [ 123.122702][ T7960] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 123.141915][ T7961] netlink: 36 bytes leftover after parsing attributes in process `syz.1.497'. [ 123.181893][ T7967] netlink: zone id is out of range [ 123.202283][ T7967] netlink: zone id is out of range [ 123.219054][ T7967] netlink: zone id is out of range [ 123.226770][ T7960] netlink: 'syz.1.497': attribute type 12 has an invalid length. [ 123.238738][ T7967] netlink: zone id is out of range [ 123.251935][ T7954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.267898][ T7967] netlink: zone id is out of range [ 123.278032][ T7967] netlink: zone id is out of range [ 123.292509][ T7967] netlink: zone id is out of range [ 123.311988][ T7967] netlink: zone id is out of range [ 123.340949][ T7967] netlink: zone id is out of range [ 123.360049][ T7967] netlink: zone id is out of range [ 123.590244][ T7992] __nla_validate_parse: 4 callbacks suppressed [ 123.590260][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 123.709050][ T8001] netlink: 40 bytes leftover after parsing attributes in process `syz.2.508'. [ 123.805677][ T8003] netlink: 76 bytes leftover after parsing attributes in process `syz.2.509'. [ 123.840482][ T8005] geneve2: entered allmulticast mode [ 123.941147][ T8008] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.974626][ T8008] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.982013][ T8008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.321328][ T8032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.517'. [ 124.389961][ T8032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.517'. [ 124.521871][ T8039] netlink: 25 bytes leftover after parsing attributes in process `syz.2.517'. [ 124.753195][ T8062] tipc: Enabling of bearer rejected, failed to enable media [ 124.951251][ T8070] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 125.057955][ T8070] lo speed is unknown, defaulting to 1000 [ 126.060745][ T8094] sctp: [Deprecated]: syz.3.531 (pid 8094) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.060745][ T8094] Use struct sctp_sack_info instead [ 126.120492][ T8086] bpq0: left promiscuous mode [ 126.246271][ T8091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.287981][ T8105] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.315878][ T8108] netlink: 'syz.1.533': attribute type 1 has an invalid length. [ 126.445101][ T8112] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 126.482932][ T8112] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 126.513371][ T8112] bond2: (slave vti0): making interface the new active one [ 126.533363][ T8112] bond2: (slave vti0): Enslaving as an active interface with an up link [ 126.570326][ T8105] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.700425][ T8105] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.837626][ T8105] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.170074][ T8136] IPVS: persistence engine module ip_vs_pe_ not found [ 127.185742][ T977] IPVS: starting estimator thread 0... [ 127.191440][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.221204][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.241599][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.288616][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.303193][ T8141] IPVS: using max 25 ests per chain, 60000 per kthread [ 127.322408][ T8106] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.383374][ T12] ================================================================== [ 127.391454][ T12] BUG: KASAN: slab-use-after-free in __mutex_lock+0x144/0xe80 [ 127.398931][ T12] Read of size 8 at addr ffff88802f44c4b0 by task kworker/u8:0/12 [ 127.405230][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 127.406726][ T12] [ 127.406758][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 127.406779][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 127.406791][ T12] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 127.406835][ T12] Call Trace: [ 127.406846][ T12] [ 127.406854][ T12] dump_stack_lvl+0x189/0x250 [ 127.406873][ T12] ? __kasan_check_byte+0x12/0x40 [ 127.406896][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.406913][ T12] ? lock_release+0x4b/0x3e0 [ 127.406931][ T12] ? __virt_addr_valid+0x4a5/0x5c0 [ 127.406952][ T12] print_report+0xca/0x230 [ 127.406974][ T12] ? __mutex_lock+0x144/0xe80 [ 127.406989][ T12] kasan_report+0x118/0x150 [ 127.407008][ T12] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 127.407032][ T12] ? __mutex_lock+0x144/0xe80 [ 127.407051][ T12] __mutex_lock+0x144/0xe80 [ 127.407066][ T12] ? __lock_acquire+0xab9/0xd20 [ 127.407080][ T12] ? __mutex_lock+0x51b/0xe80 [ 127.407097][ T12] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 127.407122][ T12] ? __pfx___mutex_lock+0x10/0x10 [ 127.407140][ T12] ? __lock_acquire+0xab9/0xd20 [ 127.407160][ T12] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 127.407188][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 127.407204][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 127.407221][ T12] process_scheduled_works+0xae1/0x17b0 [ 127.407250][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 127.407274][ T12] worker_thread+0x8a0/0xda0 [ 127.407302][ T12] kthread+0x70e/0x8a0 [ 127.407322][ T12] ? __pfx_worker_thread+0x10/0x10 [ 127.407344][ T12] ? __pfx_kthread+0x10/0x10 [ 127.407364][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 127.407385][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.407400][ T12] ? __pfx_kthread+0x10/0x10 [ 127.407419][ T12] ret_from_fork+0x3fc/0x770 [ 127.407435][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 127.407454][ T12] ? __switch_to_asm+0x39/0x70 [ 127.407472][ T12] ? __switch_to_asm+0x33/0x70 [ 127.407489][ T12] ? __pfx_kthread+0x10/0x10 [ 127.407509][ T12] ret_from_fork_asm+0x1a/0x30 [ 127.407534][ T12] [ 127.407541][ T12] [ 127.627019][ T12] Allocated by task 8105: [ 127.631328][ T12] kasan_save_track+0x3e/0x80 [ 127.635992][ T12] __kasan_kmalloc+0x93/0xb0 [ 127.640567][ T12] __kmalloc_noprof+0x27a/0x4f0 [ 127.645400][ T12] udp_tunnel_nic_netdevice_event+0x854/0x19f0 [ 127.651548][ T12] notifier_call_chain+0x1b3/0x3e0 [ 127.656638][ T12] register_netdevice+0x1608/0x1ae0 [ 127.661819][ T12] nsim_create+0xae8/0xf10 [ 127.666220][ T12] __nsim_dev_port_add+0x6b6/0xb10 [ 127.671310][ T12] nsim_dev_port_add_all+0x37/0xf0 [ 127.676398][ T12] nsim_dev_reload_up+0x451/0x780 [ 127.681410][ T12] devlink_reload+0x4ec/0x8d0 [ 127.686069][ T12] devlink_nl_reload_doit+0xb35/0xd50 [ 127.691423][ T12] genl_family_rcv_msg_doit+0x212/0x300 [ 127.696950][ T12] genl_rcv_msg+0x60e/0x790 [ 127.701436][ T12] netlink_rcv_skb+0x205/0x470 [ 127.706177][ T12] genl_rcv+0x28/0x40 [ 127.710140][ T12] netlink_unicast+0x82f/0x9e0 [ 127.714888][ T12] netlink_sendmsg+0x805/0xb30 [ 127.719629][ T12] __sock_sendmsg+0x219/0x270 [ 127.724296][ T12] ____sys_sendmsg+0x505/0x830 [ 127.729058][ T12] ___sys_sendmsg+0x21f/0x2a0 [ 127.733715][ T12] __x64_sys_sendmsg+0x19b/0x260 [ 127.738635][ T12] do_syscall_64+0xfa/0x3b0 [ 127.743119][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.748994][ T12] [ 127.751297][ T12] Freed by task 8106: [ 127.755258][ T12] kasan_save_track+0x3e/0x80 [ 127.759922][ T12] kasan_save_free_info+0x46/0x50 [ 127.764936][ T12] __kasan_slab_free+0x62/0x70 [ 127.769690][ T12] kfree+0x18e/0x440 [ 127.773567][ T12] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 127.779798][ T12] notifier_call_chain+0x1b3/0x3e0 [ 127.784895][ T12] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 127.791298][ T12] unregister_netdevice_queue+0x33c/0x380 [ 127.797002][ T12] nsim_destroy+0x1dd/0x670 [ 127.801490][ T12] __nsim_dev_port_del+0x14d/0x1b0 [ 127.806579][ T12] nsim_dev_reload_destroy+0x288/0x490 [ 127.812018][ T12] nsim_dev_reload_down+0x8a/0xc0 [ 127.817019][ T12] devlink_reload+0x1b6/0x8d0 [ 127.821679][ T12] devlink_nl_reload_doit+0xb35/0xd50 [ 127.827031][ T12] genl_family_rcv_msg_doit+0x212/0x300 [ 127.832565][ T12] genl_rcv_msg+0x60e/0x790 [ 127.837058][ T12] netlink_rcv_skb+0x205/0x470 [ 127.841805][ T12] genl_rcv+0x28/0x40 [ 127.845779][ T12] netlink_unicast+0x82f/0x9e0 [ 127.850532][ T12] netlink_sendmsg+0x805/0xb30 [ 127.855277][ T12] __sock_sendmsg+0x219/0x270 [ 127.859941][ T12] ____sys_sendmsg+0x505/0x830 [ 127.864686][ T12] ___sys_sendmsg+0x21f/0x2a0 [ 127.869345][ T12] __x64_sys_sendmsg+0x19b/0x260 [ 127.874260][ T12] do_syscall_64+0xfa/0x3b0 [ 127.878741][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.884609][ T12] [ 127.886913][ T12] Last potentially related work creation: [ 127.892606][ T12] kasan_save_stack+0x3e/0x60 [ 127.897266][ T12] kasan_record_aux_stack+0xbd/0xd0 [ 127.902448][ T12] insert_work+0x3d/0x330 [ 127.906754][ T12] __queue_work+0xbd9/0xfe0 [ 127.911239][ T12] queue_work_on+0x181/0x270 [ 127.915807][ T12] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 127.921423][ T12] udp_tunnel_push_rx_port+0x17d/0x200 [ 127.926862][ T12] geneve_offload_rx_ports+0xd7/0x160 [ 127.932211][ T12] geneve_netdevice_event+0x6a/0x80 [ 127.937386][ T12] notifier_call_chain+0x1b3/0x3e0 [ 127.942479][ T12] call_netdevice_notifiers+0x88/0xc0 [ 127.947835][ T12] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 127.954061][ T12] notifier_call_chain+0x1b3/0x3e0 [ 127.959150][ T12] register_netdevice+0x1608/0x1ae0 [ 127.964328][ T12] nsim_create+0xae8/0xf10 [ 127.968726][ T12] __nsim_dev_port_add+0x6b6/0xb10 [ 127.973813][ T12] nsim_dev_port_add_all+0x37/0xf0 [ 127.978902][ T12] nsim_dev_reload_up+0x451/0x780 [ 127.983909][ T12] devlink_reload+0x4ec/0x8d0 [ 127.988568][ T12] devlink_nl_reload_doit+0xb35/0xd50 [ 127.993921][ T12] genl_family_rcv_msg_doit+0x212/0x300 [ 127.999447][ T12] genl_rcv_msg+0x60e/0x790 [ 128.003928][ T12] netlink_rcv_skb+0x205/0x470 [ 128.008669][ T12] genl_rcv+0x28/0x40 [ 128.012631][ T12] netlink_unicast+0x82f/0x9e0 [ 128.017376][ T12] netlink_sendmsg+0x805/0xb30 [ 128.022115][ T12] __sock_sendmsg+0x219/0x270 [ 128.026775][ T12] ____sys_sendmsg+0x505/0x830 [ 128.031517][ T12] ___sys_sendmsg+0x21f/0x2a0 [ 128.036174][ T12] __x64_sys_sendmsg+0x19b/0x260 [ 128.041092][ T12] do_syscall_64+0xfa/0x3b0 [ 128.045576][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.051451][ T12] [ 128.053753][ T12] Second to last potentially related work creation: [ 128.060312][ T12] kasan_save_stack+0x3e/0x60 [ 128.064970][ T12] kasan_record_aux_stack+0xbd/0xd0 [ 128.070146][ T12] insert_work+0x3d/0x330 [ 128.074451][ T12] __queue_work+0xcfc/0xfe0 [ 128.078933][ T12] queue_work_on+0x181/0x270 [ 128.083501][ T12] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 128.089115][ T12] udp_tunnel_push_rx_port+0x17d/0x200 [ 128.094555][ T12] geneve_offload_rx_ports+0xd7/0x160 [ 128.099904][ T12] geneve_netdevice_event+0x6a/0x80 [ 128.105078][ T12] notifier_call_chain+0x1b3/0x3e0 [ 128.110168][ T12] call_netdevice_notifiers+0x88/0xc0 [ 128.115524][ T12] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 128.121748][ T12] notifier_call_chain+0x1b3/0x3e0 [ 128.126835][ T12] register_netdevice+0x1608/0x1ae0 [ 128.132011][ T12] nsim_create+0xae8/0xf10 [ 128.136411][ T12] __nsim_dev_port_add+0x6b6/0xb10 [ 128.141500][ T12] nsim_dev_port_add_all+0x37/0xf0 [ 128.146591][ T12] nsim_dev_reload_up+0x451/0x780 [ 128.151594][ T12] devlink_reload+0x4ec/0x8d0 [ 128.156255][ T12] devlink_nl_reload_doit+0xb35/0xd50 [ 128.161612][ T12] genl_family_rcv_msg_doit+0x212/0x300 [ 128.167138][ T12] genl_rcv_msg+0x60e/0x790 [ 128.171624][ T12] netlink_rcv_skb+0x205/0x470 [ 128.176363][ T12] genl_rcv+0x28/0x40 [ 128.180324][ T12] netlink_unicast+0x82f/0x9e0 [ 128.185068][ T12] netlink_sendmsg+0x805/0xb30 [ 128.189809][ T12] __sock_sendmsg+0x219/0x270 [ 128.194469][ T12] ____sys_sendmsg+0x505/0x830 [ 128.199209][ T12] ___sys_sendmsg+0x21f/0x2a0 [ 128.203865][ T12] __x64_sys_sendmsg+0x19b/0x260 [ 128.208783][ T12] do_syscall_64+0xfa/0x3b0 [ 128.213263][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.219137][ T12] [ 128.221441][ T12] The buggy address belongs to the object at ffff88802f44c400 [ 128.221441][ T12] which belongs to the cache kmalloc-256 of size 256 [ 128.235468][ T12] The buggy address is located 176 bytes inside of [ 128.235468][ T12] freed 256-byte region [ffff88802f44c400, ffff88802f44c500) [ 128.249241][ T12] [ 128.251546][ T12] The buggy address belongs to the physical page: [ 128.257941][ T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f44c [ 128.266679][ T12] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 128.275157][ T12] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 128.282691][ T12] page_type: f5(slab) [ 128.286652][ T12] raw: 00fff00000000040 ffff88801a441b40 dead000000000100 dead000000000122 [ 128.295209][ T12] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 128.303769][ T12] head: 00fff00000000040 ffff88801a441b40 dead000000000100 dead000000000122 [ 128.312413][ T12] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 128.321057][ T12] head: 00fff00000000001 ffffea0000bd1301 00000000ffffffff 00000000ffffffff [ 128.329702][ T12] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 128.338343][ T12] page dumped because: kasan: bad access detected [ 128.344737][ T12] page_owner tracks the page as allocated [ 128.350434][ T12] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5845, tgid 5845 (syz-executor), ts 74949015558, free_ts 74448222241 [ 128.371769][ T12] post_alloc_hook+0x240/0x2a0 [ 128.376518][ T12] get_page_from_freelist+0x21e4/0x22c0 [ 128.382048][ T12] __alloc_frozen_pages_noprof+0x181/0x370 [ 128.387843][ T12] alloc_pages_mpol+0x232/0x4a0 [ 128.392680][ T12] allocate_slab+0x8a/0x3b0 [ 128.397161][ T12] ___slab_alloc+0xbfc/0x1480 [ 128.401819][ T12] __kmalloc_noprof+0x305/0x4f0 [ 128.406648][ T12] fib_create_info+0x1728/0x3210 [ 128.411570][ T12] fib_table_insert+0xc6/0x1b50 [ 128.416398][ T12] fib_magic+0x2c4/0x390 [ 128.420621][ T12] fib_add_ifaddr+0x144/0x5f0 [ 128.425277][ T12] fib_inetaddr_event+0x12e/0x190 [ 128.430284][ T12] notifier_call_chain+0x1b3/0x3e0 [ 128.435374][ T12] blocking_notifier_call_chain+0x6a/0x90 [ 128.441073][ T12] __inet_insert_ifa+0xa13/0xbf0 [ 128.445991][ T12] inet_rtm_newaddr+0xf3a/0x18b0 [ 128.450911][ T12] page last free pid 5850 tgid 5850 stack trace: [ 128.457210][ T12] __free_frozen_pages+0xc71/0xe70 [ 128.462317][ T12] __slab_free+0x326/0x400 [ 128.466709][ T12] qlist_free_all+0x97/0x140 [ 128.471277][ T12] kasan_quarantine_reduce+0x148/0x160 [ 128.476712][ T12] __kasan_slab_alloc+0x22/0x80 [ 128.481542][ T12] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 128.486978][ T12] fib_table_insert+0x4a7/0x1b50 [ 128.491893][ T12] fib_magic+0x2c4/0x390 [ 128.496118][ T12] fib_add_ifaddr+0x3fb/0x5f0 [ 128.500773][ T12] fib_netdev_event+0x382/0x490 [ 128.505605][ T12] notifier_call_chain+0x1b3/0x3e0 [ 128.510695][ T12] __dev_notify_flags+0x18d/0x2e0 [ 128.515696][ T12] netif_change_flags+0xe8/0x1a0 [ 128.520611][ T12] do_setlink+0xc55/0x41c0 [ 128.525005][ T12] rtnl_newlink+0x160b/0x1c70 [ 128.529656][ T12] rtnetlink_rcv_msg+0x7cc/0xb70 [ 128.534577][ T12] [ 128.536880][ T12] Memory state around the buggy address: [ 128.542482][ T12] ffff88802f44c380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 128.550517][ T12] ffff88802f44c400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 128.558554][ T12] >ffff88802f44c480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 128.566588][ T12] ^ [ 128.572192][ T12] ffff88802f44c500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 128.580225][ T12] ffff88802f44c580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 128.588265][ T12] ================================================================== [ 128.621342][ T12] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 128.628554][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 128.640506][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.650543][ T12] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 128.657822][ T12] Call Trace: [ 128.661084][ T12] [ 128.663998][ T12] dump_stack_lvl+0x99/0x250 [ 128.668570][ T12] ? __asan_memcpy+0x40/0x70 [ 128.673138][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.678317][ T12] ? __pfx__printk+0x10/0x10 [ 128.682901][ T12] panic+0x2db/0x790 [ 128.686797][ T12] ? __pfx_panic+0x10/0x10 [ 128.691201][ T12] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 128.697080][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 128.703391][ T12] ? print_memory_metadata+0x314/0x400 [ 128.708834][ T12] ? __mutex_lock+0x144/0xe80 [ 128.713489][ T12] check_panic_on_warn+0x89/0xb0 [ 128.718415][ T12] ? __mutex_lock+0x144/0xe80 [ 128.723072][ T12] end_report+0x78/0x160 [ 128.727298][ T12] kasan_report+0x129/0x150 [ 128.731779][ T12] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 128.737655][ T12] ? __mutex_lock+0x144/0xe80 [ 128.742312][ T12] __mutex_lock+0x144/0xe80 [ 128.746794][ T12] ? __lock_acquire+0xab9/0xd20 [ 128.751625][ T12] ? __mutex_lock+0x51b/0xe80 [ 128.756281][ T12] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 128.762512][ T12] ? __pfx___mutex_lock+0x10/0x10 [ 128.767525][ T12] ? __lock_acquire+0xab9/0xd20 [ 128.772361][ T12] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 128.778418][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 128.784119][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 128.789822][ T12] process_scheduled_works+0xae1/0x17b0 [ 128.795360][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 128.801326][ T12] worker_thread+0x8a0/0xda0 [ 128.805907][ T12] kthread+0x70e/0x8a0 [ 128.809964][ T12] ? __pfx_worker_thread+0x10/0x10 [ 128.815059][ T12] ? __pfx_kthread+0x10/0x10 [ 128.819632][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 128.824813][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.829989][ T12] ? __pfx_kthread+0x10/0x10 [ 128.834559][ T12] ret_from_fork+0x3fc/0x770 [ 128.839138][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 128.844241][ T12] ? __switch_to_asm+0x39/0x70 [ 128.848989][ T12] ? __switch_to_asm+0x33/0x70 [ 128.853733][ T12] ? __pfx_kthread+0x10/0x10 [ 128.858314][ T12] ret_from_fork_asm+0x1a/0x30 [ 128.863079][ T12] [ 128.866296][ T12] Kernel Offset: disabled [ 128.870604][ T12] Rebooting in 86400 seconds..