last executing test programs: 21.585627428s ago: executing program 0 (id=1): r0 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/87, 0x57}, {&(0x7f0000000240)=""/161, 0xa1}], 0x2, &(0x7f0000000b40)=""/4096, 0x1000}}, {{&(0x7f0000000300)=@rc={0x1f, @none}, 0x80, &(0x7f0000000380)}, 0xb45}], 0x2, 0x10000, &(0x7f0000000440)={0x77359400}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) unshare(0x20000400) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r5}, 0x10) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b0400000000000000000200000048000480440001800c0001007061796c6f616400340002800800054000000000080002400000000008000440000000000800034000000000080008400400000008000740000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) vmsplice(r6, &(0x7f0000000280)=[{&(0x7f0000000240)="80", 0x1}], 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x1, &(0x7f0000000700)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}], &(0x7f0000000740)='syzkaller\x00', 0xf0, 0xc4, &(0x7f0000000780)=""/196, 0x41000, 0x149f854f751fb0ad, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[0x1, 0x1], &(0x7f0000000900)=[{0x5, 0x5, 0x4, 0x6}, {0x2, 0x3, 0x0, 0xb}, {0x1, 0x1, 0x0, 0x1}, {0x4, 0x2, 0x5, 0x5}, {0x5, 0x5, 0x8, 0xf}], 0x10, 0xf}, 0x94) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="40000000000000000000000000000000c94e", @ANYRES32=r4, @ANYRES32, @ANYBLOB="00000000050000000400"/28], 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001f40)=ANY=[@ANYBLOB="0481ea1c7fd2991e000000000000001700000007000000fb010100", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32=r10, @ANYBLOB], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r11, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r11, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001bc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001b40), &(0x7f0000001b80)=r5}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001c80)={{0x1, 0xffffffffffffffff}, &(0x7f0000001c00), &(0x7f0000001c40)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x12, 0x8, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x3}, [@tail_call]}, &(0x7f0000001e00)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0xb, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x8, 0x10000, 0xec4a}, 0x10, 0x0, r8, 0x3, &(0x7f0000001cc0)=[r9, r10, r11, r12, r13, r0, r13], &(0x7f0000001d00)=[{0x5, 0x5, 0x5, 0xa}, {0x0, 0x44, 0xf, 0x4}, {0x1, 0x5, 0x10, 0xa}], 0x10, 0x7}, 0x94) (async) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000580)=[{0x1, 0x1, {0x0, 0x1, 0x2}, {0x0, 0xff}, 0xfd, 0xfd}, {0x1, 0x3, {0x2, 0xff, 0x2}, {0x0, 0x1, 0x1}, 0x1, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x3}, {0x2, 0x0, 0x4}, 0x1, 0x2}, {0x3, 0x2, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x2}, {0x2, 0xf0, 0x2}, 0x1, 0xfe}, {0x3, 0x1, {0x1, 0xff, 0x3}, {0x0, 0xf0, 0x2}, 0xfd, 0x1}, {0x1, 0x1, {0x2, 0x1, 0x4}, {0x1, 0xf0, 0x4}, 0x0, 0xff}, {0x0, 0x0, {0x1, 0xff, 0x4}, {0x0, 0x0, 0x2}, 0x1, 0x2}, {0x3, 0x3, {}, {0x1, 0xf0, 0x2}, 0xfe, 0xfe}, {0x2, 0x1, {0x0, 0xff, 0x2}, {0x2, 0x0, 0x4}, 0xff, 0xfd}], 0x140) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x74, r4, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) socket(0x28, 0x3, 0xff) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0xf, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) 6.543763646s ago: executing program 32 (id=1): r0 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/87, 0x57}, {&(0x7f0000000240)=""/161, 0xa1}], 0x2, &(0x7f0000000b40)=""/4096, 0x1000}}, {{&(0x7f0000000300)=@rc={0x1f, @none}, 0x80, &(0x7f0000000380)}, 0xb45}], 0x2, 0x10000, &(0x7f0000000440)={0x77359400}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) unshare(0x20000400) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r5}, 0x10) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b0400000000000000000200000048000480440001800c0001007061796c6f616400340002800800054000000000080002400000000008000440000000000800034000000000080008400400000008000740000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) vmsplice(r6, &(0x7f0000000280)=[{&(0x7f0000000240)="80", 0x1}], 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x1, &(0x7f0000000700)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}], &(0x7f0000000740)='syzkaller\x00', 0xf0, 0xc4, &(0x7f0000000780)=""/196, 0x41000, 0x149f854f751fb0ad, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[0x1, 0x1], &(0x7f0000000900)=[{0x5, 0x5, 0x4, 0x6}, {0x2, 0x3, 0x0, 0xb}, {0x1, 0x1, 0x0, 0x1}, {0x4, 0x2, 0x5, 0x5}, {0x5, 0x5, 0x8, 0xf}], 0x10, 0xf}, 0x94) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="40000000000000000000000000000000c94e", @ANYRES32=r4, @ANYRES32, @ANYBLOB="00000000050000000400"/28], 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001f40)=ANY=[@ANYBLOB="0481ea1c7fd2991e000000000000001700000007000000fb010100", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32=r10, @ANYBLOB], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r11, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r11, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001bc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001b40), &(0x7f0000001b80)=r5}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001c80)={{0x1, 0xffffffffffffffff}, &(0x7f0000001c00), &(0x7f0000001c40)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x12, 0x8, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x3}, [@tail_call]}, &(0x7f0000001e00)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0xb, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x8, 0x10000, 0xec4a}, 0x10, 0x0, r8, 0x3, &(0x7f0000001cc0)=[r9, r10, r11, r12, r13, r0, r13], &(0x7f0000001d00)=[{0x5, 0x5, 0x5, 0xa}, {0x0, 0x44, 0xf, 0x4}, {0x1, 0x5, 0x10, 0xa}], 0x10, 0x7}, 0x94) (async) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000580)=[{0x1, 0x1, {0x0, 0x1, 0x2}, {0x0, 0xff}, 0xfd, 0xfd}, {0x1, 0x3, {0x2, 0xff, 0x2}, {0x0, 0x1, 0x1}, 0x1, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x3}, {0x2, 0x0, 0x4}, 0x1, 0x2}, {0x3, 0x2, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x2}, {0x2, 0xf0, 0x2}, 0x1, 0xfe}, {0x3, 0x1, {0x1, 0xff, 0x3}, {0x0, 0xf0, 0x2}, 0xfd, 0x1}, {0x1, 0x1, {0x2, 0x1, 0x4}, {0x1, 0xf0, 0x4}, 0x0, 0xff}, {0x0, 0x0, {0x1, 0xff, 0x4}, {0x0, 0x0, 0x2}, 0x1, 0x2}, {0x3, 0x3, {}, {0x1, 0xf0, 0x2}, 0xfe, 0xfe}, {0x2, 0x1, {0x0, 0xff, 0x2}, {0x2, 0x0, 0x4}, 0xff, 0xfd}], 0x140) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x74, r4, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) socket(0x28, 0x3, 0xff) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0xf, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) 3.125203495s ago: executing program 1 (id=328): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r1, &(0x7f0000000000)="14000000140005b7ffccca38b9000000060860eb", 0x14) pselect6(0x40, &(0x7f0000000000)={0xb94, 0x2, 0x4, 0x4, 0xffff, 0x1, 0x4, 0x7}, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x4, 0x3, 0x6, 0x10, 0x2}, &(0x7f0000000080)={0x2, 0x8000, 0x1, 0x8, 0x4b, 0x22, 0x10, 0x6}, &(0x7f00000000c0), &(0x7f0000000200)={&(0x7f0000000140)={[0x600000]}, 0x8}) sendmsg$inet(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2.851733208s ago: executing program 1 (id=334): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6001000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000008000000000000000000000000000000000000000000300000000000000000000000000000004000000000000e3ff000000000000000000000000000000040000000000000000000040000000000000000000000000000000ba9b55090000000000fcffffff0000000002000001000000000000000008001f0004000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000008001f0003000000150008"], 0x160}}, 0x4810) 2.449071372s ago: executing program 4 (id=340): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000002c0)={0x18, 0x4000000, {0x4, @remote, 'erspan0\x00'}}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffffe, 0x10000, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x1b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000}}}}]}, 0x78}}, 0xc090) ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f00000000c0)={0x66, "7f344bc4c197e6e658e951e1d8c0b684ec7375709df421bae98aa768d486539d70f9483c9f7543ff11ea1b2bea80f9bf24d15f6e717c12cfb64d3b871578a95f9e45a9dd8fe9e812379307a8e694df96f9c74f9e3710fe72e13ecc995f56d1e29a647e08d187a0e9e6728375b9fc550593d43ec06d9775ce74dbef0ca76f1aad"}) syz_emit_ethernet(0x76, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @mcast2, [@hopopts={0xbe}], "7bf354a4d44f873e"}}}}}}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x0) readv(r5, &(0x7f0000000500)=[{&(0x7f0000000740)=""/127, 0x7f}], 0x1) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 2.267265702s ago: executing program 4 (id=344): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000500", @ANYRES16=r1, @ANYBLOB="010000000000000000001000000018000180140002007665746830000000000000000000000005000b0000000000"], 0x34}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$netlink(r5, 0x10e, 0x8, &(0x7f0000000080)=""/110, &(0x7f0000000040)=0x6e) (async) getsockopt$netlink(r5, 0x10e, 0x8, &(0x7f0000000080)=""/110, &(0x7f0000000040)=0x6e) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000005716", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) socket$phonet(0x23, 0x2, 0x1) (async) r11 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r11, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) (async) recvmmsg(r11, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r12, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r13, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) r15 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r15, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r15, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r15, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r14, 0x84, 0x7b, &(0x7f0000000080)={r16, 0x808000}, 0x8) sendmmsg$inet_sctp(r5, &(0x7f00000014c0)=[{&(0x7f0000000180)=@in6={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x1caa}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000240)="beec2ac3d5fd8952c271e7d43e", 0xd}, {&(0x7f00000003c0)="eb40b2da2c82b42a502440bc86549e1c8e33a26c30032dedf06aeaab765f732b06afde3e3b95cc617d752798ab293678d980cbd1e253f0778f5b7f47161378156b3d6becafe7720da7abf7909bfb4035c3251470f63e007dc7c4865f63e4a2b5ca575b1ebf8d9f4914ed8248703ba7bc91d26d113665c20a5a451e9b5c6c460f532a74c9f4e7b5e466b71b7e365f55841b2da9", 0x93}, {&(0x7f0000000480)="f7d60821c1fe514d5db7ae3973c6c93c626915994647179b6ec36c4db888e570e1c1b1eef5a253710a68e67ebe45c36b59991d927a8cd804b9724cc46616d97b52cc5f30df2c125f508bbf8806abbc4723c6ef391ab7d78e53", 0x59}, {&(0x7f0000000500)="bc2b37cae982a65281b55b57b1d43bf12ba10e0c65ced73e2cd4e52c8c7c80c15c9dfd305bf56bbc7ddb9166656eccd58b1807d2f9fe39d21cc74183c8b74147e305979cd33b5823345a89b09a497daa7833faf37a194fb6d544611b6351c45d139d9a3166abfac20b0e2d1b0e6290eb9209142cefaca4032f54753af6530f048d3b47dba69ff5074002657c1700ff2c408ea30d4f3603ce4bb6aa946f4fc7038ee6211407f2dc182f67a69425b7fa91cb2576201bd2df6a8a9c3516c9fb7c7a98d4d4d7bd9ee4baf45444aeae2517ebe78efe77a39841d360a783f6c4f84031d0ec706c89a6e5dc6f191d2e1b1c", 0xee}, {&(0x7f0000000600)="d0122d96a72181143a609fc6889109698e3929635aceadd1eee2cdff7725a48d8a1259588aa0fd1ed1473f62be943023f42d44f0518a472590990d9ec9d9c1807ddd2deee50f2a05ce23a4babb809ddfa0cb0bb76295f16c8a8f180cbe1896913ba85b0a4c684ae05631d8bd5835a86d4d3184", 0x73}, {&(0x7f0000000680)="378a143577af4e91773740204f5cb6cf3a7f9163cb389d953257c30c421adf178faea5b4e865fd03ed43c9d0133c24141d9fec2c9cf5f080cbfd22e29384de91821662ca22a9da8d33f03dce9421af9dd4a8cb62e7cae8dd0f02c264769ee29665c9ed81d7cb9352d79857627421d28b67036590eb6b40f785fd1df3c081fedd606fbd13c9051723b5fac5", 0x8b}], 0x6, &(0x7f0000000880)=[@sndinfo={0x20, 0x84, 0x2, {0x9d0, 0x8001, 0x400, 0xf6f}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x800e, 0x2, 0x4}}, @init={0x18, 0x84, 0x0, {0x4bb, 0x34a6, 0x0, 0x101}}], 0x58, 0x4004000}, {&(0x7f0000000900)=@in={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000940)="d5e671495ad3701816ee532343e5c6b93e28772adb98e012e033091317d9cc6968e2a7ec6b6c3714a02b43f685cc281619518219cd1bb19b1cd9db182d078d6802399e2aadc9143ef6dc45dce308537fb57d51b9d3ef5bd9a40b883a7733e86839973876a858ac6c2aea9f8c5dddd93d2367084ae8790d3fe553ea2dc4ea531ef12cb06eef470110ea878ed61bcf2a29b7b6f3fcc182ae1582c54b49a1536c9e8c11175a4eaf3a60d4235e1c7faebdbb487a10a141286d5677c04ae8dd65a048a57ddf8bcdf1906bf2635f6254f2781a39b5b184baa252c1166a4d68d6451ebde60835", 0xe3}, {&(0x7f0000000a40)="d6229b3770f0b7df289fa800591f1b1b08462f7c5c99390b1f7bfcef2c7c05e56fe1f1d9cbeb0f57f13a46a11e0edf8d2b33255808333bd2946c6e278d", 0x3d}, {&(0x7f0000000b40)="dcaae3f46f2e283478b89505d7976d36695af634b0228807e38be13cfb5da6000bee6ab0fb8bb602b058cbe9048707bdccd6a26d7a277248d241008c49e40caa88b33c182c5ac5df364ef82502786e2d55ca60eb6c9d69bd4d9651ec6d206d9d74d2130ba4d98ac446f99763dfe7b808c7bc3af58b2d9fff4f91b2750d68bfc652e1e01d58c43db5485528dda1841f2cdcad5bc83e6895154e2efe9a2258de949e54b7fe9e58cce2389edcf8fdc9190dcaea63215dad7843498f48aee52bc941ebedaa043df40486", 0xc8}, {&(0x7f0000000c40)="c93141e88dffa0282d162090a1df644d8bad51697d6585a0c6ce7a13f0188ebcbee35c8cf3faa5516d1e945e5b6d013210da238100d88ac92b995ce56f298495ebc734b914bbb70f8743037570aba0545ceb4a326635617152e284b7f0ce5b090eb0699547d1955e9ff018fd5fe5863f3d335f5b77d5e2c5f691bd0d3902116978b7247dedbd69e6462b433391489f31a0116de4a641f5f5a3e2f16a92d466e8d4063a3b1e3990acee23d2e1172d4833358e8db0cd46be987fd16f35f27e040e032fe1581aa0f7ec6958d0f7261e81ec605449dccb", 0xd5}, {&(0x7f0000000d40)="fa549b466f52719606e40ad2ebd384a8a12b634320012acb8c66ed111a1eb571f2f8797da36d00463baba6ae77576db2f54dde4871257a73ed247ff122edd4c3874a95cf4d5c27de5e2cef7ad7d3dc45eaaeabe0b438bd0b9b49b04e1c5eec08b1cf7286d676a7b7e39494c6d4c2eef517946fa1032c0f8dcb268072903757ef7f78fbe39e1054a1ae7b07653bac65ddcdec1b90d66bca", 0x97}], 0x5, &(0x7f0000000a80)=[@authinfo={0x18, 0x84, 0x6, {0x200}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x7fff}}], 0x30, 0x20008044}, {&(0x7f0000000e80)=@in6={0xa, 0x4e22, 0x98, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f00000011c0)=[{&(0x7f0000000ec0)="460da341a77ad9d59270f93137bd954b7ca4e92b12a744b708337e9157e83c8be1cddc0f19c31daf2d7417a6efd8c2773196faf20397be589305a3", 0x3b}, {&(0x7f0000001ec0)="52a846bee68f4c7ab6288919988dab741ff6d8d658aafd1f9878cd341f7654a46a6d0059388b0bb98b9390c64e58147144accdd0499d01efdfaa1d7c5bc101b60a83192b8bdae4437b8e195315b5096562be1806c20e665f47b5d066be559c0f5ed6b1c16cf3320c98f6906502d9be0c0f0d7230608405a0089cc2025ee04e00e484cac04c2bac48ff0ba96428882d9217aa48a97a308dbde95bddf0cb3c0281ce12c5117527d42b0f3bb9263a5b002ca7faa811a728a159eac4244c9e3a8f536ae4dab0718b0c2b7d5ac6a827c4534cc6f40ddb6b4332bf7838ba19af366596180d215f6adfbcd0b47dba1a9df6497c6529494ab3233b5df6aef8cca5b7b85dbd68b9278b9ed4f502512dfaed78643e6271e1d76ad5b21f5cce55d14cce1b3925ec3c966ed87b6c558bf6d24323a535fd840df846a1e3dbb1b1b212b3aeac5e4e1045d46744f19d364efd8e1361a60b89f6579dd42c0547879c8f431ea21cf6767ddcce78b507dfdcea22d0acfa0043bdd62d1e7461411054091c0ad8f0fe3efd32fb46f3e7cf9a7055f9eae1bc0c3d7abc58a60637da5828b444666fc4d2dee1330834b22c00ff44bfd185a8afd19747a2d4b3078dbb43cd1268c9b30582809e3731000027a19d3c88d578ed4cb597b9a6913f8d3f7727bc53c691f35d4f099acb1dd04b95ce312f67d2e7400c8377839fb91c9b3809896056222a5394e42e69bfc0eaa708978fd5a2f8d671aeef36020b69f15232643eed4f6fe29dd1a9117aa87e851912508cf4ee3e4f03848bb184a29126c28180bf245ebe75639b0ce1c1de51ea085f64008bdf25c9b9a2876fd680a63fc66bdcaff6ca54a1ec1788f8b3cfb43e2d20a6bb6f10b628d1c9163cec4f53357876d49f57aa1f4247009f6bb0be2f66a97f1bcca4e5d06a62ed6243eacb0245e4f5d7ae458dd254ace27317c194e8e381eb7a56e642075a1c7829359cfa3acb42188b48b514268fdb44be306df86441a73a99533a5d786aa37212928e1067928405c8a939ff8a34593b4c9a1c8366de6b3a88773365b8ee1a21f066b3e3759801d853b78c0d589e24438e518a49b12f436f6318c5197c5d8654c08b2812d0681349618154f9ee971001015a1bdcbbdb7c5e5ee199b4f896a7f11d70058784eac84bd1c8c5af07ed86681ba3bfa502fb057e51343cde785b6cac17720a0a28050d43bc5baf83accb81710044d78fa832de9a60de0123c542195056ea6995a71f14e0400389c5e203f6ed023c2929e5c20ef4e32a2a4e7c6266ec369cefbeb675078c5bcd7d56f783180f4cb053309f6a89d5920efd421ce5b652eefc0e1931bc10863302f2768526fc386fa0b278c8b38049f86833d8e5d28adc887c069b16d8a3e84bed5d5668515aa1b010c48a575b7953a038ff32e96cf16579c756752a6d154592b12b78cb28b2ecffd19abc1727c402d897775e92004ef6dad5f35efdb9bcfeb3312b2de3306209d45ec25a12d08fb4e69e0a2a72dbe4c698ba00ac1c491af3861a356045ecf3f6fbb83b2358cf80967d0130979748fa09e09e4378c19d340f08b28a5f09cbf050da8031cbf4d00da4d392fea8591d7a70a8024f4180fa6442d94e2d70066313c262d092e81bc031646c35f1c815e687829e86deba50a8438eb30788e9c4dffd72cef77a41a8bed56c8de7aca220b0269f7e2231f97066d5658588d852e409fc3e4aa2ccc3585fddb742a312a99f56ef13745cef06ad412955e95012531b2cd32947393a3501c058beb4efd22dc0cb3ebde59bdbc6cf3b505102e6c6d187954e647d3a5b3e58ac58909c78f333d2e8a0dc219cccd5885a40504a8eac9dee6d440d2647cd579fa4f35552ee8ea39886a2759b636f2aec97d6575d209d955ecb173061b43e678b8783a36ab97fed4e5f0de35daf9bb0bb59a8d34e0a0e8836bb8b885b6ae8f4a8040d9728cdcc07bc901fb0db0392013307196f26288bed3f6a1e7bcac3df0b1cfc58c22373032606ad543033675817d3e30b032d32e4f9b69b4fa2265e2be1b5552695c3f0e60145308c14e5d901a346b50292c83d6a586ea22126e456b2d92c4e01364486ac9e94fd5a5229b43773e26c3f1dbacc68f5ac9643f24f9e86d5c8bb350c80149e8fb5811909c636f7f0ab084cb48c3146c9b1d9da8b6d38cb7b305910e35f0028e2b63de73d618b548dfb69338b928fef7859ce20107dd414958909a438b87e6691707849cd892ce3e330428c3e43af44f7f4f32853855fedc68565eb778f5c5286014f3090f8b82969d4a0cd155496314b15014c0db5f86cb2d87f5b806bc568a08885b1665e4ec9e5ae6403c1c853faaf371f9af40f9e5da4d2c2bcff0d3052fdc82331b636cb70fb5437f0dedd58d34912faa450e86e8bb0e6537a88045dca7b42b1a52f4169d6ed7ee9652f484e4ff0cc3581679517a4f673545ad524c6e5c475e812ca29349733d39190db8572f7b201a8c0bc23bc9c533314d1ac52ab957edc3318e2782e58d67d0c4ae91409fd636eb3f4e7004078a0ae8075da9b38d4677ad77959ae9e323ce106bf966c37520cecb37b32df2d4facecd820752ea5388ece49e1956d6cdac2d6b25e8e89cbd181be43a19006c362e4a48901402e15dd04c233b00dee6026bd01d6b6ee5d562ed91c50b4aecb54f682152c30698e48c90334b6de6ea981cef40d19d0a60f1762560ecd92d7ae2ba6698aa1ba55af57f79336da9435577ec8493ba91a191faac6b1c8e054926b7532fb82d8da5a985d4622a920de02ff841f460a8e27c89213e60037cd3a009a295e7ef18c818dfc14550c81ece65d6a2719d8fe8cc480feafb3252f9464dd8d093fb3302c54b44e8898fe6056d8f3247cd36f373f17ffde37a54b1a2bd63e40a40f0e2ca4a20ddafa0a4294fbc8d9c002e3bf55b1123d17059142099cfe5daf60775e8ae33c031d18d5e70a4606a5e617a131192bf5da42979be524123b3133f342a27e0cbfdfa2285a8703d74d67c7feb40dedf03d8e7274df8ede9dbe1d46badb571712b916ee8639e516048d153a20e1f1eb49b8c3f87dc022d254c65b42be1657fdb252882476a8d3ce589a1b04910fd7ac16e0fd05f34eeb865f2d199545454eaf2720aa767231c700f9714d4a94df069c4fed2ff0caa95b24f52e93fb6b36f8c6660f928efbb46e85e934984f630f0ce3f54d4ae0f7c48c2b1be0f6fcc8cceb9bba8cd1b150ad7c49604b9ba8fe0494ea200a310d22d1abf805a6c161af2cb9c3b1c81c5da8b3e7fcbf5b17a816918ef891d4ea5b2aebd77816635df065f85713b0863703fdca072b1c66289146934bef1bbec27514cbd78fca022961836ad546ead74886d71677193df4b45f8ccac0afc8f6d3e89f8bc93af7bf4ea83f9e638e63cbd9c746dc5a6657f66dbc78f6bd5dd6a9254e4193259892366d4289cccec90bbfe768310c8f6bb4ea33c81c81ed0a5c40db54f5f7671670e9a1df6676b360ae570e13e3f8111f366c1c7abc03462466157e00a44c4d17b4a73ca14117f533cdb97c77bacedd110363d815c9604411960c1eaaf051c33b18c1e2c3f6cc99ae9d4bfda2d88afa66c0513874c4110894b5d4ac7c7701765c9df3b610dbfa876cc57ba38e53457bcbd607a54581f63748ea7a5b3043a8eab536c0f6410795831a7a1fd0ffb0366cc35f73cd85093df7e3d83085e7b722f99c8ffaf431d1fac47744cf0d4a0e122b2d68bd26a535f3a1145eeab67f2b2330a3ef7b34586f9af66551d5d0cef2e21fc403d17f518cfef414a1a0e2df5889e6f664b4a6cd34d781a19adac63d24289d6b9e381d84e3bbe5fabfe6017f031631a2a7e51e270bbffff9c93be303ae7dfb3e64d8b0a0947464a49e3cca83f272d6afde54b3d656131a59dd7c030439896351a5cae25c8333023eec90b2fa38dca032d85ea6972c215ef7641f319453c4201bd633c574d2cd79b08e9a50f1f1c3105a94dae77eba13c12fb5604a1fad3f026fcdea3d4befe196d75af46c6d38ae6970f96a03117c79bc9d577d0856e4b12ed4e9ce0f5a5114797968c500c8c33d6287a4556f9652f5d8b170a9e2d594336b5ae72ba2f33565e5e48275dc301cb90a30d32a1fd6d2efb653dd7b475e32131fefff07244beafe9288393b31fbb9c95b352861c2e54ae312a49bd8a4dfa960b4025d8d46ed617fc79c5f5c50da09fbb8686ec89aa1efb801d0d2076cd9957b306e965b45aaf2cb6ec8ef9d24828f78b8f3fdb381f03ef702c76f7703105f4dd82ea54b102bcd1470f10203ca45975e22f688120c6b2951fd0efdd4f9e406c848541c0c27c218192bba383f73278cbada900478132ceb862e27089dae34e902e346c6b054a381013727443360ef6cfb57b7170a8b7f63e5156490d66b263b15c06cd4d27fcd72c18a53a97527f9a7a8ed4695cc920627eac216c46567d852bea422d8dcca34a85a8a8e851d2659d70b90094d9e3b7dedbdd1aa5f250430759785e1387970a1cc0937a1ce38ab8a071dc856aff5492be16e180da70a3ae231268dbaa9f5e7cc2341c7ead520bf5b02a2fc44fc52be17e726f70b6b6da75eec34282026956dcf9491cd5fbb888698fcc51e1fe9cab3b545e830bf9ec06b1665ae3dbbc47d040def330ba36852565c9945443de24c1945034eb50accc841ee6d35cac02ea597f0260f4bbcf5fe53fdfb376aef3a3b3432821813f4f61b4322a487f83f69b418a7a04f2acc63d220a1a6c0b1c19a7987abb69c5a15a448379a78cf4cfc81fa670eb2662301f443d0a403dc4898cb7a69abeed0b8ef73da0a7abdc8c3c47a5a4065d3a09b50b11556599c631838fdbf5a8448698a3feed03cd498da7b5df38be92b5f84942b9ecb933cdfdf087e4c3c8bed1a89a68f1ed78e903c35f1b125bf509a3f5ae780d2a7d2fe1f94ad310f198c39c1fbf33794b7f6548f6dfde36f9f45f47ccc0a7a80489dc418f765fc4b466b40bf4ae4aada02e6b9ab1cb51e270e169eb3d77169fbcfbb25e0c0e4651d87634ff101d8a77c0c32ffbc4e48a1ca29397bc5caea14671ca34aea269d3888c84786a927e01dc462d8e9782ba5004a7fe526fdf0e103921a9ed29a5c7bf6f3eaa5579fa2179a4366e280ee7eef570caba554bf278e5d186f8dcff99bc6d40f8e659060b07420d6ee27d76c4b3065a5f23d81c5198af02ee70196349858c73c8e872beb02c7a3ed5f49405b7faadfe95263dc857f91ce724fbfa8cff09193687f0a4d1075e824010af2cf529f4bdc50cc09fdaea5dd4f0446d13638297c877db8c677850170abe63a8024bcc4b7860ed94e34934c8a7955bb11cd5f1f774a81ab1d33b14e776aa08578125c9dd99e76bbe73849f6ecb3e2868dedd6747365147039f70ccbe5197336b1ed4b6e7a8e5b04538690b8ecaec73c6834a2b89244f3884021a1bcd556820f7b907f1247c3cdf698db1776879ba64afad5ae974b8fcbfe342a0f2eb07fc3fe310381d7173f74f8f8948bab4680ec99c37cc532bbd2a425f0a9a374325a26595dfb04c35bf57aa67e8ba0ab6c6a1f29eb220ed63b6ba0d924bf9ad80e810c7209a51e2dd8c27c5435277b16ce2a750e00ef010d40445970fd1979e0943517aae938781bec138dcf8ebcb33477dd68d2aef5ab9a381757ba78f7cd6794502a0fc18ffffcedf6e1be1d9917205222c13c931c88d4fcb446695e969e1e8b7849918faaa8da7d6ad56bd67db74579153633c257f2641c25da01a801c1f0850b8a7116c923c8269925640b7951f44cb7c14634d181f99f8aa8e73d1582", 0x1000}, {&(0x7f0000000f00)="66bd90f7a29f9b02e4397dbdeeab36569e1fd39387e40f920939365726fb21629e8c04a6f163b5729ee19de8028098ac4f7f2412c4663c34c7d747e9966352c28d1e997fca0ed386fbdda0b5738d899977c9a34821a1fce4bdc12c27b380c931ccf712634eb4d786eb86ff22b07bdba09caa44a4019923cbad21acd5c992b01191", 0x81}, {&(0x7f0000000fc0)="6ef0654df0ffc4bc40073dada4a479e2d33ef0fba1f260ef6d27544dcb8fa91a40dc00dd0a943b3d115858c3372ca5f52858c32a8469e9099bdec340820a7def9c32b4e506a945e3162fedfec8093a5e9a3a6ee5eadfb8e7f2a06a7b20280214f73d416cf1e3fe57a79f408a515ba84ff39f4fa451ebdb907bc2a032f2416bf195397fae64f61bd1610cfd453c778bf01619e91dad026c2f0b6516d6dc17322f306183854df071804e12af03e82b7ada1a65c9c9e3d8d8aab3e7990ce2016c6f803ff597391a5dd7a183111afef5533b375d53c70f3cfe417149e40ba8f359235b6865cada569d439e3b1c6f7cc6", 0xee}, {&(0x7f00000010c0)="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", 0xfa}], 0x5, &(0x7f0000001240)=[@init={0x18, 0x84, 0x0, {0x5, 0x3, 0x4, 0x5adc}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x205, 0x3, 0x6, r16}}], 0x38, 0x40000}, {&(0x7f0000001280)=@in={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000012c0), 0x0, 0x0, 0x0, 0x4844}, {&(0x7f0000001300)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, &(0x7f0000001380)=[{&(0x7f0000001340)="84f4faa80d1f", 0x6}], 0x1, &(0x7f00000013c0)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x5}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @init={0x18, 0x84, 0x0, {0x3ff, 0x2, 0x400, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010100}, @authinfo={0x18, 0x84, 0x6, {0x3ff}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0xf9}}, @prinfo={0x18, 0x84, 0x5, {0x10}}, @sndrcv={0x30, 0x84, 0x1, {0x10, 0x2, 0x208, 0x6, 0x0, 0x10001, 0xa21, 0xd456}}], 0xd8, 0x20000000}], 0x5, 0x4000) 2.111577404s ago: executing program 3 (id=347): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) (async) r3 = socket$caif_seqpacket(0x25, 0x5, 0x3) recvmmsg(r3, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x1, 0x0) (async) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4078, 0xfee}, {&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f0000000100)=""/120, 0x78}, {&(0x7f0000000180)=""/226, 0xe2}], 0x4}, 0x5}], 0x1, 0x2, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) (async) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000140)=0x4, 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x64, r5, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}, 0x1, 0x2}, 0x0) 1.946588733s ago: executing program 4 (id=348): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f0000000bc0)=@framed={{}, [@exit, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x38}, @map_fd, @map_idx, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x5}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x1, "0000000000190000000100800e000f01"}}}]}, 0x48}}, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sys_enter\x00', r3, 0x0, 0x6}, 0x18) r8 = socket(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x21, 0x5, 0x0, 0x0, 0x5}, 0x48) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r9, 0x10f, 0x84, &(0x7f00000004c0), &(0x7f0000000500)=0x4) listen(r8, 0x0) accept4$nfc_llcp(r8, 0x0, 0x0, 0x0) r10 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r10, r7, 0x0, 0xa, &(0x7f0000000000)='sys_enter\x00'}, 0x30) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) 1.941781645s ago: executing program 3 (id=349): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x40000000, 0x400}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x44}}, 0x0) 1.804912787s ago: executing program 3 (id=351): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x1a0, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xf0, 0x84, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0xa}, @NL80211_BAND_LC={0x8, 0x5, 0x7f}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x10000}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x21, 0x1, @random="fbd98a2843262c4f643d1d2fc416f481301d39b758035e6d15e8a38fb2"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7fffffff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1a}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="851b13f82c95"}]}]}, @NL80211_ATTR_SCAN_SSIDS={0x4c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x9, 0x0, @random="900946209e"}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCAN_SSIDS={0x38, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xd, 0x0, @random="5cf75c5c55667944fd"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x1a0}}, 0x20000800) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r2}, 0x18) nanosleep(&(0x7f0000000bc0)={0x0, 0x3938700}, 0x0) socket$inet6(0xa, 0x5, 0x0) 1.681358597s ago: executing program 2 (id=353): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5d, 'syz1\x00', @null, 0xa9, 0x3, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80032002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYRES16=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=@newlink={0x48, 0x10, 0x503, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000611082000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000400)={r1, 0x9, 0x2, 0x200}) ioctl$SIOCPNADDRESOURCE(r8, 0x89e0, &(0x7f0000000440)=0x48) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x50, r7, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_FAMILY={0x5, 0xd, 0x11}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x5}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x400c084) 1.580824736s ago: executing program 3 (id=354): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x4, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52a99}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x4000040) 1.415889873s ago: executing program 2 (id=355): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0xff00) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0xffffffffffffffb0}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_TOS={0x5}]}}}]}, 0x44}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6001010000481100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e2200489078030000000200000088c73ba1f267636d01dbe5712c1c941e1cdafbbb43f09c70e13808ca72381f41e5fff9620915b6f78670df284edb0e31a29a2b52ee69597b"], 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x2, 0x2, 0x547b31180522e04c}, {0x0, 0x4, 0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe8) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x10) 1.410090176s ago: executing program 3 (id=356): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x4}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) 1.365973303s ago: executing program 2 (id=357): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x12, 0x4, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000380), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000500)={0x0, @empty}, &(0x7f0000000540)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x7a, &(0x7f0000000640)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xd0, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000980)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c80)={&(0x7f0000000c40)='rpm_return_int\x00', r3, 0x0, 0x6}, 0x18) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000bc0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)={0x194, r4, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcbe}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r7}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}]}, 0x194}, 0x1, 0x0, 0x0, 0x48051}, 0x880) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x6}, 0x4000) r9 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r1, &(0x7f0000000c00)={0x40000000}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0xfff4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @remote}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xff000000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$TUNSETIFINDEX(r10, 0x400454da, &(0x7f00000000c0)=r14) 1.294693345s ago: executing program 3 (id=358): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)=ANY=[], 0xa) r1 = socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.248230279s ago: executing program 1 (id=359): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) sendmsg$xdp(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x2c, 0x3, 0x0, 0x3e}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000240)="526bddc1c65061fac97e31183768825cfece735666a4a1b56f52812025b8f8c3f96a0b543716daa12f31d482aec3fda3286fd0b3954ea4bb0ff22e130a0491d91fa5b8be50e5bca2ac425c92c2b2b72d9adf9246f542485cc36f42f2f0c649de99cd67da912760fdcd56eae943f61b7329ca54ebc57eef1d3cf26835d2c74cf3653733c90e51f11736d0d3be4550a3ffe972a89a2b495447b38c55a9eeeb0d2a29f649153058b3da44b0c365fe6ab117ca1a077a840b05f618c877e7174e8e01d56e", 0xc2}, {&(0x7f0000000200)="17ce72ee57012700"/18, 0x12}, {&(0x7f00000003c0)="2f580000040000000000c9ade4b427662379fb20682f20f4b1dd362747ee9408b7aae304a712462196288a683f581023bb51f1836dfbfbfc78ad44219a3a038e23604531de1d04bc37532d31365d0f59b97b41dbe90b1617c9d8feaf276c8560c34d15bcb398e8dfc35afa77f4eb640200ea77751589dcd429c7875208ad219200902b0d7fd47b29c7997c370cf066eb5386eff87d21010a576fb52b7897e77faa1fa6c02b352213e1", 0xa9}, {&(0x7f0000000500)="7feeaf8962c97d03ea75fb0a510f948732040dc6dfa2da59ddaeff71994277b5f872e5256c4c8b49139c7af210c5db83f52d8b36c49bb41f60c82dd4dc78ae1248c4e51ca69f323061817445ddc5baa4c0139f4cdbb56eb616dad8057d46dab4f29a8465dbb66ae5d011e910ea25dbfafeca0e2f8dade2b85aff3f95f2113d5615a7cfdfd194adbe42047d58027091caffc0598471127aea0ff78f6afdc38f0627a732b7a376174c3cdf32f6575d16b261", 0xb1}, {&(0x7f00000005c0)="6e6013b5c108f9d3bc22c987ee038edfd7edb6316ab6d69b7b5f11f4fbfae50540a024c3e1c3c174f8d0a1dc531a5069f069a0cd35948f55ebb300d2d68a3d9524c914fcc594a6c3b35a2d3f5a92f288f372b851898ee103e3e6aee1e593ea9dbfaec1aa79435317ec105979634133028c", 0x71}, {&(0x7f0000000640)="84d50eb96e38467581376e10020db379ed7a834da9bf5f3615070d36db14877ba4fb6dbcf86a1a75148df208479b12db9a6fd2091bd72a902f", 0x39}], 0x6, 0x0, 0x0, 0x200008c0}, 0x24004000) 1.226726713s ago: executing program 2 (id=360): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x81}]}}}]}, 0x44}}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x4, 0xfff3}, {0x0, 0xffe0}, {0xfff3, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c8c4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020009000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008000000b70300000000000085009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) 1.015075097s ago: executing program 4 (id=361): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) epoll_pwait(r0, 0x0, 0x0, 0x45, &(0x7f0000000280)={[0x8]}, 0x8) 832.21766ms ago: executing program 4 (id=362): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', r2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x24040080) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c000c801400010008000000430100008000000088a800001400"], 0x68}}, 0x24040800) 415.909048ms ago: executing program 2 (id=363): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x80, 0xd, 0x5, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x11}, 0x7800, 0x8020, 0x14853, 0x400000}}) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000002e80)={'gre0\x00', &(0x7f0000002e40)=@ethtool_wolinfo={0x7, 0x1, 0x1ff, "729d3031f960"}}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 414.866178ms ago: executing program 4 (id=364): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff2, 0xffff}, {0x0, 0xfff4}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000020c0)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000002100)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r7, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000180)={r7, 0x3, 0x7, 0x7fffffff}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r10) sendto$inet(r10, &(0x7f0000004480)="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", 0xfe0, 0x40000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r12, &(0x7f0000000400)="62cd30000000000000000857feaaf0d843088864e26d6e9005f4a48a30eb786c9d61363a09aba8c9c0d3e8ecccd321882363307ee15c1a57a4fd96b9afcc206e536d5ce63cb84fe2b56f9531d689d9ea4d4a138d62bb6fa4034deb062c61d6a9cd470ef3dd4e0a3171d6c25a9348a680a577b8b07306ab0000000000000100000000", 0x82) tee(r11, r13, 0x81, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r14}, 0x10) 297.498543ms ago: executing program 5 (id=281): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x3}, @enum, @func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{0x10}, {}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x50}, 0x20) (async, rerun: 64) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x9, 0x2, 0x0, 0x0, 0x24, 0x0, 0x9, 0x2, 0x0, 0x0, @local, @rand_addr=0xe0000000, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @timestamp_addr={0x44, 0x0, 0x6b, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x1d}}, {@local, 0x4}, {@rand_addr=0x64010102, 0x3}, {@multicast2, 0x81}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x8000}, {@loopback, 0x22e}, {@loopback, 0x10001}, {@multicast2, 0xa}]}]}}}}}}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) r1 = accept(r0, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) close(r1) (rerun: 64) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ip_vti0\x00', 0x100}) (rerun: 64) shutdown(r0, 0x2) 143.921768ms ago: executing program 2 (id=365): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000280)={0x3e, 0x7, 0x5, 0x7, 0x4, 0x81}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000940)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000500)) sendto$inet(r0, &(0x7f0000000380)="3b8007528dbf07e929d523b69daa4cd522f2012a67e3a2ac9daf2ac1d69b44e4d59f986a6d944278b6b23cc34abbef57d6ebe67b9f60b6068369fbea407fa99fda4d3608ba3e5d6648487db32183ea5321fb1d01bd0857f57f12c3eb84fccee91835e4dfb71c1c51bc1a1257be7c7fcd3d351607d79a1a694c682a1158e09103ed06d40f972cd4d0e4bc3795dd10d852d6d556ed5ae577e4b201f3ba", 0x9c, 0x44000, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8, 0x600, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x6, &(0x7f0000000040)=@raw=[@ldst={0x2, 0x1, 0x0, 0x6, 0x8, 0x20, 0x8}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000001}, @generic={0x39, 0x4, 0xc, 0x3, 0x8}, @alu={0x4, 0x0, 0x3, 0x3, 0x5, 0x5b7e8e56286a82d2, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x68, &(0x7f0000000100)=""/104, 0x41100, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x4, 0x1, 0xe36d}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000280)}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000080)=0x80) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117100000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) 138.916357ms ago: executing program 1 (id=366): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x19, 0x0, &(0x7f0000000080)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x64, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0xec}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000001c00)="b7", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r5, 0x0) getsockopt$bt_hci(r3, 0x84, 0x0, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8901, &(0x7f0000000040)) sendmsg$inet(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000080)="90", 0x1}], 0x1}, 0x24004011) 89.658037ms ago: executing program 1 (id=367): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f00000012c0)) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010", @ANYRES32=r4, @ANYBLOB="01000000010000001c"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}]}}]}, 0x44}}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002000)=ANY=[@ANYBLOB="4c000000210001002dbd7000fedbdf250a208002080000020300000014000200fe8000000000000000000000040000aa14000100fc020000000000000000000000000001080004009b6c0000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x800) 0s ago: executing program 1 (id=368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xe7f, 0x7c}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004081}, 0xc800) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r5, 0x8921, &(0x7f0000000140)={'dvmrp1\x00'}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x2, 0x9, 0x3, 0x5}]}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40400, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000029000000050000000000020000000000f82e324160150dd8a8eb22b1664241ed90a5081635cb110bce562d992c899a53c1d623190e100e3c2cdb4d97364b370e21c03d"], 0x18}}], 0x1, 0x0) r7 = socket(0x1, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r7}, 0x20) close(r6) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x11, &(0x7f0000000080)=0x5, 0x4) socket(0x21, 0x9, 0x202) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r10, 0x8b2d, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.228' (ED25519) to the list of known hosts. [ 67.343745][ T5846] cgroup: Unknown subsys name 'net' [ 67.487609][ T5846] cgroup: Unknown subsys name 'cpuset' [ 67.495021][ T5846] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.772569][ T5846] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.577333][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.583625][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.478424][ T5184] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.487273][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.494506][ T5869] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.501995][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.509945][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.517514][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.525374][ T5871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.532729][ T5869] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.532837][ T5871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.547105][ T5869] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.547321][ T5871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.565971][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.567979][ T5869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.580238][ T5871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.581019][ T5869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.587800][ T5871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.594924][ T5869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.601717][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.609491][ T5869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.616399][ T5871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.623173][ T5869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.630015][ T5871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.643436][ T5875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.644879][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.658684][ T5184] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.889055][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 73.014827][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.022185][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.030239][ T5857] bridge_slave_0: entered allmulticast mode [ 73.037073][ T5857] bridge_slave_0: entered promiscuous mode [ 73.063544][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.071033][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.078372][ T5857] bridge_slave_1: entered allmulticast mode [ 73.084920][ T5857] bridge_slave_1: entered promiscuous mode [ 73.160814][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.170621][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 73.193129][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.232672][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 73.247391][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 73.269247][ T5857] team0: Port device team_slave_0 added [ 73.287135][ T5857] team0: Port device team_slave_1 added [ 73.360608][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.367813][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.394575][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.407074][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.414036][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.439988][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.460125][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 73.480745][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.488095][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.495207][ T5859] bridge_slave_0: entered allmulticast mode [ 73.502615][ T5859] bridge_slave_0: entered promiscuous mode [ 73.524122][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.531709][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.539210][ T5859] bridge_slave_1: entered allmulticast mode [ 73.546119][ T5859] bridge_slave_1: entered promiscuous mode [ 73.615620][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.622917][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.630328][ T5858] bridge_slave_0: entered allmulticast mode [ 73.637389][ T5858] bridge_slave_0: entered promiscuous mode [ 73.644410][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.651631][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.659023][ T5866] bridge_slave_0: entered allmulticast mode [ 73.665557][ T5866] bridge_slave_0: entered promiscuous mode [ 73.673628][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.686056][ T5857] hsr_slave_0: entered promiscuous mode [ 73.692192][ T5857] hsr_slave_1: entered promiscuous mode [ 73.704243][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.711427][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.718877][ T5858] bridge_slave_1: entered allmulticast mode [ 73.725342][ T5858] bridge_slave_1: entered promiscuous mode [ 73.738413][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.745711][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.752828][ T5866] bridge_slave_1: entered allmulticast mode [ 73.759586][ T5866] bridge_slave_1: entered promiscuous mode [ 73.767355][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.817456][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.824613][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.832154][ T5868] bridge_slave_0: entered allmulticast mode [ 73.838873][ T5868] bridge_slave_0: entered promiscuous mode [ 73.847265][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.858696][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.873984][ T5859] team0: Port device team_slave_0 added [ 73.883192][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.890436][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.897749][ T5868] bridge_slave_1: entered allmulticast mode [ 73.904739][ T5868] bridge_slave_1: entered promiscuous mode [ 73.919680][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.930349][ T5859] team0: Port device team_slave_1 added [ 73.964117][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.994142][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.006075][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.017044][ T5858] team0: Port device team_slave_0 added [ 74.037968][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.044951][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.071013][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.089337][ T5858] team0: Port device team_slave_1 added [ 74.102661][ T5866] team0: Port device team_slave_0 added [ 74.111841][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.119125][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.145774][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.163351][ T5868] team0: Port device team_slave_0 added [ 74.170891][ T5868] team0: Port device team_slave_1 added [ 74.177748][ T5866] team0: Port device team_slave_1 added [ 74.227150][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.234155][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.260190][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.284720][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.291783][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.318005][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.335131][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.342290][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.369347][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.380697][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.387761][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.414381][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.429248][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.436416][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.462392][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.476011][ T5859] hsr_slave_0: entered promiscuous mode [ 74.482050][ T5859] hsr_slave_1: entered promiscuous mode [ 74.489039][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 74.494781][ T5859] Cannot create hsr debugfs directory [ 74.504519][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.511531][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.537824][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.545770][ T5860] Bluetooth: hci0: command tx timeout [ 74.592041][ T5868] hsr_slave_0: entered promiscuous mode [ 74.598631][ T5868] hsr_slave_1: entered promiscuous mode [ 74.604651][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 74.610612][ T5868] Cannot create hsr debugfs directory [ 74.646503][ T5866] hsr_slave_0: entered promiscuous mode [ 74.652506][ T5866] hsr_slave_1: entered promiscuous mode [ 74.658668][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 74.664406][ T5866] Cannot create hsr debugfs directory [ 74.693691][ T5858] hsr_slave_0: entered promiscuous mode [ 74.696161][ T5860] Bluetooth: hci4: command tx timeout [ 74.699703][ T5184] Bluetooth: hci1: command tx timeout [ 74.706635][ T5858] hsr_slave_1: entered promiscuous mode [ 74.716792][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 74.722615][ T5858] Cannot create hsr debugfs directory [ 74.775954][ T5860] Bluetooth: hci2: command tx timeout [ 74.776966][ T5184] Bluetooth: hci3: command tx timeout [ 74.893798][ T5857] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.918133][ T5857] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.941528][ T5857] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.971949][ T5857] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.028880][ T5866] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.040607][ T5866] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.050787][ T5866] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.060015][ T5866] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.114875][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.137591][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.146907][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.163483][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.205038][ T5868] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.215019][ T5868] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.232820][ T5868] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.242520][ T5868] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.278983][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.305003][ T5858] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.317041][ T5858] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.328773][ T5858] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.347531][ T5858] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.363465][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.396393][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.404277][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.411405][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.433891][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.441042][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.474079][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.488524][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.495659][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.528395][ T1345] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.535601][ T1345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.563313][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.613693][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.654366][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.670600][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.697981][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.705106][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.728551][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.735786][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.759185][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.766359][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.789755][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.818635][ T1345] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.825811][ T1345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.872285][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.898967][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.920103][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.927209][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.940876][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.948124][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.989570][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.061931][ T5857] veth0_vlan: entered promiscuous mode [ 76.099654][ T5857] veth1_vlan: entered promiscuous mode [ 76.183070][ T5857] veth0_macvtap: entered promiscuous mode [ 76.203896][ T5857] veth1_macvtap: entered promiscuous mode [ 76.251405][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.288042][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.301524][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.335420][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.360481][ T1345] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.393893][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.408624][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.418451][ T1345] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.491586][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.496319][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.507912][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.538931][ T5866] veth0_vlan: entered promiscuous mode [ 76.580413][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.586422][ T5858] veth0_vlan: entered promiscuous mode [ 76.594238][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.598462][ T5866] veth1_vlan: entered promiscuous mode [ 76.616249][ T5184] Bluetooth: hci0: command tx timeout [ 76.618414][ T5859] veth0_vlan: entered promiscuous mode [ 76.646316][ T5858] veth1_vlan: entered promiscuous mode [ 76.658829][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.666823][ T5866] veth0_macvtap: entered promiscuous mode [ 76.681164][ T5868] veth0_vlan: entered promiscuous mode [ 76.698032][ T5859] veth1_vlan: entered promiscuous mode [ 76.707306][ T5866] veth1_macvtap: entered promiscuous mode [ 76.727314][ T5868] veth1_vlan: entered promiscuous mode [ 76.775861][ T5184] Bluetooth: hci1: command tx timeout [ 76.776940][ T5860] Bluetooth: hci4: command tx timeout [ 76.803364][ T5859] veth0_macvtap: entered promiscuous mode [ 76.819373][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.837934][ T5978] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 76.838699][ T5859] veth1_macvtap: entered promiscuous mode [ 76.853728][ T5858] veth0_macvtap: entered promiscuous mode [ 76.862152][ T5860] Bluetooth: hci2: command tx timeout [ 76.866122][ T5184] Bluetooth: hci3: command tx timeout [ 76.883004][ T5868] veth0_macvtap: entered promiscuous mode [ 76.894454][ T5858] veth1_macvtap: entered promiscuous mode [ 76.907662][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.928556][ T5868] veth1_macvtap: entered promiscuous mode [ 76.963902][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.977926][ T1161] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.987808][ T1161] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.012774][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.022117][ T5986] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8'. [ 77.036691][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.044587][ T1161] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.054487][ T1161] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.097821][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.115130][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.128861][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.142876][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.152733][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.153065][ T5988] syz.1.9 uses obsolete (PF_INET,SOCK_PACKET) [ 77.169275][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.179892][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.197273][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.206310][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.230881][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.240450][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.270000][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.304437][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.313653][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.331364][ T1345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.348111][ T1345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.364245][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.437887][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.453859][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.473217][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.483035][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.541828][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.567951][ T1345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.582827][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.601578][ T1345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.618298][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.634593][ T1345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.635815][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.658462][ T1345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.720932][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.730507][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.771371][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 77.938283][ T6011] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 78.038444][ T6016] netlink: 'syz.1.13': attribute type 9 has an invalid length. [ 78.173187][ T6028] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.239866][ T6032] netlink: 'syz.3.19': attribute type 3 has an invalid length. [ 78.248995][ T6032] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.19'. [ 78.363642][ T6043] lo: entered promiscuous mode [ 78.371384][ T6043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 78.696070][ T5184] Bluetooth: hci0: command tx timeout [ 78.783207][ T6072] netlink: 16 bytes leftover after parsing attributes in process `syz.4.29'. [ 78.793841][ T6072] netlink: 92 bytes leftover after parsing attributes in process `syz.4.29'. [ 78.843598][ T6080] pimreg: entered allmulticast mode [ 78.856451][ T5184] Bluetooth: hci4: command tx timeout [ 78.856461][ T5860] Bluetooth: hci1: command tx timeout [ 78.935599][ T5184] Bluetooth: hci2: command tx timeout [ 78.946293][ T5184] Bluetooth: hci3: command tx timeout [ 79.374146][ T6092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33'. [ 79.502389][ T6097] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 79.743648][ T6114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.42'. [ 79.783108][ T6113] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.871636][ T6119] !: renamed from bond_slave_0 (while UP) [ 79.914345][ T6124] warning: `syz.4.45' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.947736][ T6124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.45'. [ 79.978828][ T6124] Zero length message leads to an empty skb [ 80.091040][ T6135] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 80.110854][ T6135] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 80.454008][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'. [ 80.475264][ T6167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.55'. [ 80.502720][ T6169] Bluetooth: MGMT ver 1.23 [ 80.653372][ T6177] bond1: entered promiscuous mode [ 80.659023][ T6177] bond1: entered allmulticast mode [ 80.674649][ T6177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.775961][ T5184] Bluetooth: hci0: command tx timeout [ 80.909091][ T6197] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 80.937703][ T5184] Bluetooth: hci4: command tx timeout [ 80.937709][ T5860] Bluetooth: hci1: command tx timeout [ 81.016867][ T5184] Bluetooth: hci3: command tx timeout [ 81.016877][ T5860] Bluetooth: hci2: command tx timeout [ 81.034640][ T6204] netlink: 'syz.3.67': attribute type 11 has an invalid length. [ 81.081481][ T6208] netlink: 'syz.1.68': attribute type 1 has an invalid length. [ 81.527673][ T6239] netlink: 'syz.3.77': attribute type 6 has an invalid length. [ 81.570253][ T6239] netlink: 'syz.3.77': attribute type 5 has an invalid length. [ 81.775018][ T6261] netlink: 'syz.3.82': attribute type 1 has an invalid length. [ 81.830420][ T6266] trusted_key: syz.4.84 sent an empty control message without MSG_MORE. [ 81.969597][ T6271] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.062962][ T6278] __nla_validate_parse: 12 callbacks suppressed [ 82.062983][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'. [ 82.091035][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'. [ 82.104739][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.88'. [ 82.113780][ T6271] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.132997][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.87'. [ 82.143437][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.87'. [ 82.224464][ T6271] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.326463][ T6271] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.402953][ T6301] openvswitch: netlink: IPv4 tun info is not correct [ 82.433756][ T3548] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.459191][ T3548] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.481607][ T3548] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.514495][ T3548] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.554883][ T6307] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.94'. [ 82.566088][ T6307] netlink: zone id is out of range [ 82.571324][ T6307] netlink: get zone limit has 8 unknown bytes [ 82.652465][ T6313] netlink: 'syz.2.96': attribute type 6 has an invalid length. [ 82.773257][ T6321] netlink: 'syz.2.99': attribute type 11 has an invalid length. [ 82.789833][ T6321] netlink: 224 bytes leftover after parsing attributes in process `syz.2.99'. [ 83.014101][ T6339] netem: change failed [ 83.271370][ T6370] netlink: 20 bytes leftover after parsing attributes in process `syz.1.115'. [ 83.282209][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'. [ 83.300458][ T6370] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 83.370406][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 83.496433][ T6388] Illegal XDP return value 1853290969 on prog (id 18) dev syz_tun, expect packet loss! [ 83.812367][ T6410] netlink: 'syz.1.125': attribute type 10 has an invalid length. [ 83.831016][ T6410] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 84.421576][ T6458] openvswitch: netlink: Flow key attr not present in new flow. [ 84.487952][ T6461] ip6gretap0: mtu less than device minimum [ 84.601288][ T3548] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 85.549147][ T6491] netlink: 'syz.2.156': attribute type 21 has an invalid length. [ 85.579834][ T6492] netlink: 'syz.2.156': attribute type 21 has an invalid length. [ 86.418822][ T6560] netlink: 'syz.4.176': attribute type 12 has an invalid length. [ 86.428398][ T6560] netlink: 'syz.4.176': attribute type 29 has an invalid length. [ 86.720704][ T6580] openvswitch: netlink: IPv4 tun info is not correct [ 86.765812][ T6583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.933798][ T6601] ip6erspan0: entered promiscuous mode [ 86.954174][ T92] cfg80211: failed to load regulatory.db [ 87.731939][ T6618] __nla_validate_parse: 21 callbacks suppressed [ 87.731960][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'. [ 87.790970][ T6624] dvmrp0: entered allmulticast mode [ 87.901738][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.198'. [ 87.912357][ T6630] bridge_slave_1: left allmulticast mode [ 87.919498][ T6630] bridge_slave_1: left promiscuous mode [ 87.925486][ T6630] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.023341][ T6630] bridge_slave_0: left allmulticast mode [ 88.040099][ T6630] bridge_slave_0: left promiscuous mode [ 88.046590][ T6630] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.179761][ T6638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.200'. [ 88.925112][ T6669] netlink: 'syz.3.211': attribute type 1 has an invalid length. [ 88.925152][ T6670] netlink: 'syz.3.211': attribute type 1 has an invalid length. [ 88.954196][ T6669] 8021q: adding VLAN 0 to HW filter on device bond3 [ 88.961897][ T6669] bond2: (slave bond3): making interface the new active one [ 88.970064][ T6669] bond2: (slave bond3): Enslaving as an active interface with an up link [ 89.362461][ T6693] bond4: entered promiscuous mode [ 89.368681][ T6693] bond4: entered allmulticast mode [ 89.374176][ T6693] 8021q: adding VLAN 0 to HW filter on device bond4 [ 89.384229][ T6693] bond4 (unregistering): Released all slaves [ 89.527589][ T6701] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 89.661850][ T6707] netlink: 'syz.3.222': attribute type 1 has an invalid length. [ 89.672057][ T6707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.222'. [ 89.695010][ T6711] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.224'. [ 89.983409][ T6735] netlink: 'syz.3.231': attribute type 64 has an invalid length. [ 89.993414][ T6735] netlink: 20 bytes leftover after parsing attributes in process `syz.3.231'. [ 90.194521][ T6750] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.237'. [ 90.598429][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.609558][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.620664][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.631506][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.077303][ T6793] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 91.231306][ T6802] netlink: 16 bytes leftover after parsing attributes in process `syz.4.250'. [ 91.309298][ T6804] netlink: 140 bytes leftover after parsing attributes in process `syz.1.249'. [ 91.331173][ T6803] netlink: 140 bytes leftover after parsing attributes in process `syz.1.249'. [ 91.403289][ T6814] netlink: 'syz.3.253': attribute type 1 has an invalid length. [ 91.460428][ T6814] gre1: entered promiscuous mode [ 91.476172][ T6814] gre1: entered allmulticast mode [ 91.510795][ T6820] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.569264][ T6820] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.624694][ T6820] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.691586][ T6824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.692570][ T6826] netlink: 'syz.4.258': attribute type 142 has an invalid length. [ 91.741777][ T6820] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.799846][ T6830] netlink: 'syz.4.258': attribute type 142 has an invalid length. [ 91.883255][ T6837] netlink: 'syz.2.261': attribute type 1 has an invalid length. [ 91.911221][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.929973][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.972605][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.012980][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.063071][ T6851] IPVS: set_ctl: invalid protocol: 100 224.0.0.2:20004 [ 92.312507][ T6869] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 92.327782][ T6869] netlink: 'syz.4.269': attribute type 10 has an invalid length. [ 92.340829][ T6869] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 92.366803][ T6869] bridge_slave_0: left allmulticast mode [ 92.372562][ T6869] bridge_slave_0: left promiscuous mode [ 92.378473][ T6869] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.389100][ T6869] bridge_slave_1: left allmulticast mode [ 92.394791][ T6869] bridge_slave_1: left promiscuous mode [ 92.401191][ T6869] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.417698][ T6869] bond0: (slave 1!): Releasing backup interface [ 92.431016][ T6869] bond0: (slave bond_slave_1): Releasing backup interface [ 92.454192][ T6869] team0: Port device team_slave_0 removed [ 92.467475][ T6869] team0: Port device team_slave_1 removed [ 92.473890][ T6869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.481991][ T6869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.490628][ T6869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.498426][ T6869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.039390][ T36] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.063585][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.083369][ T36] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.114926][ T5860] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.114961][ T36] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.144687][ T5860] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.160890][ T5860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.171138][ T5860] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.181121][ T5860] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.384831][ T6936] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.664799][ T6960] __nla_validate_parse: 7 callbacks suppressed [ 93.664821][ T6960] netlink: 256 bytes leftover after parsing attributes in process `syz.3.291'. [ 93.696761][ T6960] unsupported nlmsg_type 40 [ 93.711342][ T6923] chnl_net:caif_netlink_parms(): no params data found [ 93.876089][ T6923] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.896962][ T6923] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.904196][ T6923] bridge_slave_0: entered allmulticast mode [ 93.918231][ T6923] bridge_slave_0: entered promiscuous mode [ 93.926471][ T6923] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.935842][ T6923] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.943057][ T6923] bridge_slave_1: entered allmulticast mode [ 93.959106][ T6923] bridge_slave_1: entered promiscuous mode [ 94.002737][ T6979] netlink: 'syz.1.295': attribute type 10 has an invalid length. [ 94.021089][ T6923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.051079][ T6923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.105182][ T6923] team0: Port device team_slave_0 added [ 94.108167][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'. [ 94.113388][ T6923] team0: Port device team_slave_1 added [ 94.156842][ T6923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.171970][ T6923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.213774][ T6985] can: request_module (can-proto-0) failed. [ 94.222248][ T6923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.243649][ T6923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.243822][ T6993] netlink: 173164 bytes leftover after parsing attributes in process `syz.1.299'. [ 94.253619][ T6923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.287846][ T6923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.352475][ T6923] hsr_slave_0: entered promiscuous mode [ 94.363024][ T6923] hsr_slave_1: entered promiscuous mode [ 94.376514][ T6923] debugfs: 'hsr0' already exists in 'hsr' [ 94.395987][ T6923] Cannot create hsr debugfs directory [ 94.438305][ T7003] netlink: 'syz.4.301': attribute type 10 has an invalid length. [ 94.458933][ T7003] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 94.494377][ T7002] netlink: 84 bytes leftover after parsing attributes in process `syz.2.303'. [ 94.590424][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.306'. [ 94.649532][ T7013] delete_channel: no stack [ 94.726699][ T6923] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.760537][ T6923] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.821249][ T6923] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.871676][ T6923] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.901732][ T7020] tipc: Started in network mode [ 94.911457][ T7020] tipc: Node identity 962e45109643, cluster identity 4711 [ 94.941002][ T7020] tipc: Enabled bearer , priority 0 [ 94.979099][ T7017] tipc: Enabling of bearer rejected, already enabled [ 95.030644][ T7017] tipc: Disabling bearer [ 95.031521][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.311'. [ 95.037971][ T7040] netlink: 20 bytes leftover after parsing attributes in process `syz.1.312'. [ 95.234239][ T6923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.257366][ T5184] Bluetooth: hci5: command tx timeout [ 95.263409][ T7050] netlink: 'syz.2.313': attribute type 2 has an invalid length. [ 95.293009][ T6923] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.323532][ T7058] netlink: 32 bytes leftover after parsing attributes in process `syz.3.315'. [ 95.340365][ T1345] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.347554][ T1345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.377215][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'. [ 95.405779][ T1345] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.412954][ T1345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.574084][ T7067] syzkaller1: entered promiscuous mode [ 95.583661][ T7067] syzkaller1: entered allmulticast mode [ 95.638941][ T6923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.844627][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'. [ 95.876426][ T7092] bridge0: entered promiscuous mode [ 95.894701][ T7092] macsec1: entered promiscuous mode [ 95.909839][ T7092] bridge0: port 3(macsec1) entered blocking state [ 95.929090][ T7092] bridge0: port 3(macsec1) entered disabled state [ 95.940519][ T7092] macsec1: entered allmulticast mode [ 95.954948][ T7092] bridge0: entered allmulticast mode [ 95.963365][ T7092] macsec1: left allmulticast mode [ 95.968821][ T7092] bridge0: left allmulticast mode [ 95.974707][ T7092] bridge0: left promiscuous mode [ 95.992683][ T7093] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 96.101635][ T6923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.217056][ T7117] netlink: 'syz.1.328': attribute type 10 has an invalid length. [ 96.296915][ T7117] team0: Port device geneve0 added [ 96.358706][ T7128] vlan2: entered allmulticast mode [ 96.387526][ T7128] erspan0: entered allmulticast mode [ 96.517995][ T7140] bridge_slave_0: entered allmulticast mode [ 96.569310][ T7145] bridge_slave_0: entered promiscuous mode [ 96.839353][ T6923] veth0_vlan: entered promiscuous mode [ 96.866085][ T7158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.877825][ T6923] veth1_vlan: entered promiscuous mode [ 96.910298][ T7164] netlink: 'syz.4.340': attribute type 10 has an invalid length. [ 96.970372][ T6923] veth0_macvtap: entered promiscuous mode [ 96.998165][ T6923] veth1_macvtap: entered promiscuous mode [ 97.068612][ T7180] netlink: 'syz.4.344': attribute type 1 has an invalid length. [ 97.109353][ T7180] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.120237][ T6923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.161949][ T7187] netlink: 'syz.2.346': attribute type 5 has an invalid length. [ 97.192514][ T7180] bond1: (slave veth3): Enslaving as an active interface with a down link [ 97.229477][ T6923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.250515][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.277943][ T7138] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 97.283902][ T7138] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 97.296204][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.305259][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.335634][ T5184] Bluetooth: hci5: command tx timeout [ 97.353983][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.379355][ T7138] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 97.385312][ T7138] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 97.409596][ T7138] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 97.430295][ T7138] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 97.476077][ T7138] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 97.493639][ T7138] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 97.520200][ T7138] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 97.533338][ T7138] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 97.834190][ T7138] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 97.854446][ T7138] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 97.884115][ T7229] pim6reg: entered allmulticast mode [ 98.013149][ T1345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.050817][ T1345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.079365][ T7241] syz.1.359: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 98.112073][ T7240] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 98.118873][ T7241] CPU: 1 UID: 0 PID: 7241 Comm: syz.1.359 Not tainted syzkaller #0 PREEMPT(full) [ 98.118899][ T7241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.118909][ T7241] Call Trace: [ 98.118916][ T7241] [ 98.118924][ T7241] dump_stack_lvl+0x189/0x250 [ 98.118952][ T7241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.118972][ T7241] ? __pfx__printk+0x10/0x10 [ 98.118995][ T7241] ? lock_release+0x4b/0x3e0 [ 98.119022][ T7241] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 98.119044][ T7241] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 98.119064][ T7241] warn_alloc+0x214/0x310 [ 98.119090][ T7241] ? stack_depot_save_flags+0x41b/0x860 [ 98.119114][ T7241] ? __pfx_warn_alloc+0x10/0x10 [ 98.119139][ T7241] ? kasan_save_track+0x4f/0x80 [ 98.119160][ T7241] ? xskq_create+0x56/0x170 [ 98.119182][ T7241] ? xsk_init_queue+0xb0/0x110 [ 98.119202][ T7241] ? xsk_setsockopt+0x4dc/0x8d0 [ 98.119221][ T7241] ? do_sock_setsockopt+0x17c/0x1b0 [ 98.119237][ T7241] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 98.119253][ T7241] ? do_syscall_64+0xfa/0x3b0 [ 98.119277][ T7241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.119297][ T7241] __vmalloc_node_range_noprof+0x125/0x12f0 [ 98.119333][ T7241] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 98.119359][ T7241] ? xsk_setsockopt+0x462/0x8d0 [ 98.119380][ T7241] ? __kasan_kmalloc+0x93/0xb0 [ 98.119404][ T7241] vmalloc_user_noprof+0xad/0xf0 [ 98.119428][ T7241] ? xskq_create+0xbf/0x170 [ 98.119450][ T7241] xskq_create+0xbf/0x170 [ 98.119473][ T7241] xsk_init_queue+0xb0/0x110 [ 98.119496][ T7241] xsk_setsockopt+0x4dc/0x8d0 [ 98.119517][ T7241] ? __pfx_xsk_setsockopt+0x10/0x10 [ 98.119538][ T7241] ? __pfx_aa_sk_perm+0x10/0x10 [ 98.119562][ T7241] ? lock_release+0x4b/0x3e0 [ 98.119586][ T7241] ? aa_sock_opt_perm+0xff/0x1b0 [ 98.119603][ T7241] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 98.119621][ T7241] ? __pfx_xsk_setsockopt+0x10/0x10 [ 98.119642][ T7241] do_sock_setsockopt+0x17c/0x1b0 [ 98.119660][ T7241] __x64_sys_setsockopt+0x13f/0x1b0 [ 98.119679][ T7241] do_syscall_64+0xfa/0x3b0 [ 98.119703][ T7241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.119728][ T7241] ? clear_bhb_loop+0x60/0xb0 [ 98.119747][ T7241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.119764][ T7241] RIP: 0033:0x7f263c98ebe9 [ 98.119779][ T7241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.119794][ T7241] RSP: 002b:00007f263d8b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 98.119820][ T7241] RAX: ffffffffffffffda RBX: 00007f263cbb5fa0 RCX: 00007f263c98ebe9 [ 98.119839][ T7241] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 98.119850][ T7241] RBP: 00007f263ca11e19 R08: 0000000000000004 R09: 0000000000000000 [ 98.119862][ T7241] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.119873][ T7241] R13: 00007f263cbb6038 R14: 00007f263cbb5fa0 R15: 00007ffc5161a0e8 [ 98.119892][ T7241] [ 98.119949][ T7241] Mem-Info: [ 98.432469][ T7241] active_anon:6722 inactive_anon:0 isolated_anon:0 [ 98.432469][ T7241] active_file:2312 inactive_file:39831 isolated_file:0 [ 98.432469][ T7241] unevictable:768 dirty:96 writeback:0 [ 98.432469][ T7241] slab_reclaimable:11127 slab_unreclaimable:98522 [ 98.432469][ T7241] mapped:34286 shmem:1360 pagetables:1392 [ 98.432469][ T7241] sec_pagetables:0 bounce:0 [ 98.432469][ T7241] kernel_misc_reclaimable:0 [ 98.432469][ T7241] free:1291032 free_pcp:39847 free_cma:0 [ 98.478638][ T7241] Node 0 active_anon:26888kB inactive_anon:0kB active_file:9248kB inactive_file:159120kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137144kB dirty:376kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12472kB pagetables:5520kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 98.480447][ T7244] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.511005][ T7241] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 98.511063][ T7241] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 98.511124][ T7241] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 98.511169][ T7241] Node 0 DMA32 free:1252968kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26836kB inactive_anon:0kB active_file:9248kB inactive_file:157548kB unevictable:1536kB writepending:368kB present:3129332kB managed:2557460kB mlocked:0kB bounce:0kB free_pcp:140180kB local_pcp:60432kB free_cma:0kB [ 98.511229][ T7241] lowmem_reserve[]: 0 0 1 1 1 [ 98.511270][ T7241] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:8kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 98.511325][ T7241] lowmem_reserve[]: 0 0 0 0 0 [ 98.511366][ T7241] Node 1 Normal free:3895588kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19108kB local_pcp:9824kB free_cma:0kB [ 98.511433][ T7241] lowmem_reserve[]: 0 0 0 0 0 [ 98.511474][ T7241] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 98.511604][ T7241] Node 0 DMA32: 292*4kB (UME) 339*8kB (UME) 124*16kB (UME) 805*32kB (UME) 197*64kB (UME) 54*128kB (UME) 30*256kB (UME) 16*512kB (UME) 4*1024kB (UM) 5*2048kB (ME) 286*4096kB (M) = 1252808kB [ 98.511786][ T7241] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 98.511911][ T7241] Node 1 Normal: 167*4kB (UME) 57*8kB (UME) 42*16kB [ 98.588291][ T7244] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.761576][ T7241] (UME) 53*32kB (UME) 16*64kB (UME) 11*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3895588kB [ 98.781256][ T7241] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.800933][ T7258] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 98.818628][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.831883][ T7244] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.845688][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.871655][ T7244] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.882152][ T7241] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.893542][ T7241] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.908434][ T7241] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.921515][ T7241] 43499 total pagecache pages [ 98.922841][ T7266] __nla_validate_parse: 8 callbacks suppressed [ 98.922858][ T7266] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.363'. [ 98.935113][ T7241] 0 pages in swap cache [ 98.965262][ T7269] netlink: 24 bytes leftover after parsing attributes in process `syz.4.364'. [ 98.979285][ T7244] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.995993][ T7241] Free swap = 124996kB [ 99.000288][ T7241] Total swap = 124996kB [ 99.004483][ T7241] 2097051 pages RAM [ 99.023668][ T7244] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.046613][ T7241] 0 pages HighMem/MovableOnly [ 99.060292][ T7241] 425660 pages reserved [ 99.076818][ T7241] 0 pages cma reserved [ 99.111833][ T7244] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.122632][ T7244] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.264441][ T3548] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.280692][ T3548] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.317723][ T7292] tipc: Started in network mode [ 99.324047][ T7292] tipc: Node identity c22c9200d91b, cluster identity 4711 [ 99.333426][ T7292] tipc: Enabled bearer , priority 0 [ 99.341035][ T3548] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.352573][ T3548] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.382236][ T3548] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.392332][ T3548] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.415894][ T7298] tipc: Resetting bearer [ 99.423497][ T3548] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.433447][ T3548] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.444863][ T7242] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.460852][ T7242] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.474331][ T3548] ================================================================== [ 99.482440][ T3548] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 99.490031][ T3548] Read of size 8 at addr ffff8880333094b0 by task kworker/u8:8/3548 [ 99.498147][ T3548] [ 99.500501][ T3548] CPU: 1 UID: 0 PID: 3548 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 99.500530][ T3548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 99.500543][ T3548] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 99.500577][ T3548] Call Trace: [ 99.500586][ T3548] [ 99.500593][ T3548] dump_stack_lvl+0x189/0x250 [ 99.500620][ T3548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.500642][ T3548] ? lock_release+0x4b/0x3e0 [ 99.500680][ T3548] ? __virt_addr_valid+0x4a5/0x5c0 [ 99.500707][ T3548] print_report+0xca/0x240 [ 99.500724][ T3548] ? __mutex_lock+0x147/0x1350 [ 99.500750][ T3548] kasan_report+0x118/0x150 [ 99.500775][ T3548] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 99.500800][ T3548] ? __mutex_lock+0x147/0x1350 [ 99.500830][ T3548] __mutex_lock+0x147/0x1350 [ 99.500857][ T3548] ? __mutex_lock+0x5bb/0x1350 [ 99.500885][ T3548] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 99.500913][ T3548] ? __pfx___mutex_lock+0x10/0x10 [ 99.500939][ T3548] ? do_raw_spin_unlock+0x122/0x240 [ 99.500963][ T3548] ? rcu_is_watching+0x15/0xb0 [ 99.500986][ T3548] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 99.501016][ T3548] ? process_scheduled_works+0x9ef/0x17b0 [ 99.501033][ T3548] ? process_scheduled_works+0x9ef/0x17b0 [ 99.501052][ T3548] process_scheduled_works+0xae1/0x17b0 [ 99.501080][ T3548] ? __pfx_process_scheduled_works+0x10/0x10 [ 99.501103][ T3548] worker_thread+0x8a0/0xda0 [ 99.501123][ T3548] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 99.501150][ T3548] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 99.501173][ T3548] ? __kthread_parkme+0x7b/0x200 [ 99.501197][ T3548] kthread+0x70e/0x8a0 [ 99.501220][ T3548] ? __pfx_worker_thread+0x10/0x10 [ 99.501238][ T3548] ? __pfx_kthread+0x10/0x10 [ 99.501259][ T3548] ? rcu_is_watching+0x15/0xb0 [ 99.501276][ T3548] ? __pfx_kthread+0x10/0x10 [ 99.501299][ T3548] ret_from_fork+0x3f9/0x770 [ 99.501320][ T3548] ? __pfx_ret_from_fork+0x10/0x10 [ 99.501342][ T3548] ? __switch_to_asm+0x39/0x70 [ 99.501366][ T3548] ? __switch_to_asm+0x33/0x70 [ 99.501388][ T3548] ? __pfx_kthread+0x10/0x10 [ 99.501411][ T3548] ret_from_fork_asm+0x1a/0x30 [ 99.501442][ T3548] [ 99.501449][ T3548] [ 99.716840][ T3548] Allocated by task 7244: [ 99.721175][ T3548] kasan_save_track+0x3e/0x80 [ 99.725860][ T3548] __kasan_kmalloc+0x93/0xb0 [ 99.730452][ T3548] __kmalloc_noprof+0x27a/0x4f0 [ 99.735303][ T3548] udp_tunnel_nic_netdevice_event+0x854/0x19f0 [ 99.741461][ T3548] notifier_call_chain+0x1b3/0x3e0 [ 99.746598][ T3548] register_netdevice+0x1608/0x1ae0 [ 99.751797][ T3548] nsim_create+0xae8/0xf10 [ 99.756212][ T3548] __nsim_dev_port_add+0x6b6/0xb10 [ 99.761330][ T3548] nsim_dev_port_add_all+0x37/0xf0 [ 99.766443][ T3548] nsim_dev_reload_up+0x451/0x780 [ 99.771475][ T3548] devlink_reload+0x4e9/0x8d0 [ 99.776238][ T3548] devlink_nl_reload_doit+0xb35/0xd50 [ 99.781642][ T3548] genl_family_rcv_msg_doit+0x215/0x300 [ 99.787193][ T3548] genl_rcv_msg+0x60e/0x790 [ 99.791703][ T3548] netlink_rcv_skb+0x208/0x470 [ 99.796481][ T3548] genl_rcv+0x28/0x40 [ 99.800485][ T3548] netlink_unicast+0x82c/0x9e0 [ 99.805256][ T3548] netlink_sendmsg+0x805/0xb30 [ 99.810027][ T3548] __sock_sendmsg+0x21c/0x270 [ 99.814725][ T3548] ____sys_sendmsg+0x505/0x830 [ 99.819506][ T3548] ___sys_sendmsg+0x21f/0x2a0 [ 99.824181][ T3548] __x64_sys_sendmsg+0x19b/0x260 [ 99.829130][ T3548] do_syscall_64+0xfa/0x3b0 [ 99.833638][ T3548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.839537][ T3548] [ 99.841881][ T3548] Freed by task 7242: [ 99.845859][ T3548] kasan_save_track+0x3e/0x80 [ 99.850537][ T3548] kasan_save_free_info+0x46/0x50 [ 99.855731][ T3548] __kasan_slab_free+0x5b/0x80 [ 99.860505][ T3548] kfree+0x18e/0x440 [ 99.864403][ T3548] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 99.870649][ T3548] notifier_call_chain+0x1b3/0x3e0 [ 99.875763][ T3548] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 99.882188][ T3548] unregister_netdevice_queue+0x33c/0x380 [ 99.887911][ T3548] nsim_destroy+0x1dd/0x670 [ 99.892413][ T3548] __nsim_dev_port_del+0x14d/0x1b0 [ 99.897525][ T3548] nsim_dev_reload_destroy+0x288/0x490 [ 99.902987][ T3548] nsim_dev_reload_down+0x8a/0xc0 [ 99.908014][ T3548] devlink_reload+0x1b3/0x8d0 [ 99.912722][ T3548] devlink_nl_reload_doit+0xb35/0xd50 [ 99.918102][ T3548] genl_family_rcv_msg_doit+0x215/0x300 [ 99.923653][ T3548] genl_rcv_msg+0x60e/0x790 [ 99.928157][ T3548] netlink_rcv_skb+0x208/0x470 [ 99.932936][ T3548] genl_rcv+0x28/0x40 [ 99.936924][ T3548] netlink_unicast+0x82c/0x9e0 [ 99.941745][ T3548] netlink_sendmsg+0x805/0xb30 [ 99.946611][ T3548] __sock_sendmsg+0x21c/0x270 [ 99.951287][ T3548] ____sys_sendmsg+0x505/0x830 [ 99.956136][ T3548] ___sys_sendmsg+0x21f/0x2a0 [ 99.960822][ T3548] __x64_sys_sendmsg+0x19b/0x260 [ 99.965773][ T3548] do_syscall_64+0xfa/0x3b0 [ 99.970281][ T3548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.976167][ T3548] [ 99.978484][ T3548] Last potentially related work creation: [ 99.984191][ T3548] kasan_save_stack+0x3e/0x60 [ 99.988872][ T3548] kasan_record_aux_stack+0xbd/0xd0 [ 99.994071][ T3548] insert_work+0x3d/0x330 [ 99.998577][ T3548] __queue_work+0xbaf/0xfb0 [ 100.003167][ T3548] queue_work_on+0x181/0x270 [ 100.007761][ T3548] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 100.013395][ T3548] udp_tunnel_push_rx_port+0x180/0x200 [ 100.018940][ T3548] geneve_offload_rx_ports+0xd7/0x160 [ 100.024321][ T3548] geneve_netdevice_event+0x6a/0x80 [ 100.029519][ T3548] notifier_call_chain+0x1b3/0x3e0 [ 100.034802][ T3548] call_netdevice_notifiers+0x88/0xc0 [ 100.040178][ T3548] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 100.046435][ T3548] notifier_call_chain+0x1b3/0x3e0 [ 100.051554][ T3548] register_netdevice+0x1608/0x1ae0 [ 100.056751][ T3548] nsim_create+0xae8/0xf10 [ 100.061173][ T3548] __nsim_dev_port_add+0x6b6/0xb10 [ 100.066290][ T3548] nsim_dev_port_add_all+0x37/0xf0 [ 100.071402][ T3548] nsim_dev_reload_up+0x451/0x780 [ 100.076428][ T3548] devlink_reload+0x4e9/0x8d0 [ 100.081626][ T3548] devlink_nl_reload_doit+0xb35/0xd50 [ 100.087001][ T3548] genl_family_rcv_msg_doit+0x215/0x300 [ 100.092558][ T3548] genl_rcv_msg+0x60e/0x790 [ 100.097070][ T3548] netlink_rcv_skb+0x208/0x470 [ 100.101870][ T3548] genl_rcv+0x28/0x40 [ 100.105870][ T3548] netlink_unicast+0x82c/0x9e0 [ 100.110645][ T3548] netlink_sendmsg+0x805/0xb30 [ 100.115435][ T3548] __sock_sendmsg+0x21c/0x270 [ 100.120122][ T3548] ____sys_sendmsg+0x505/0x830 [ 100.124887][ T3548] ___sys_sendmsg+0x21f/0x2a0 [ 100.129563][ T3548] __x64_sys_sendmsg+0x19b/0x260 [ 100.134507][ T3548] do_syscall_64+0xfa/0x3b0 [ 100.139046][ T3548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.145036][ T3548] [ 100.147374][ T3548] Second to last potentially related work creation: [ 100.153965][ T3548] kasan_save_stack+0x3e/0x60 [ 100.158666][ T3548] kasan_record_aux_stack+0xbd/0xd0 [ 100.163864][ T3548] insert_work+0x3d/0x330 [ 100.168199][ T3548] __queue_work+0xcd2/0xfb0 [ 100.172703][ T3548] queue_work_on+0x181/0x270 [ 100.177298][ T3548] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 100.182933][ T3548] udp_tunnel_push_rx_port+0x180/0x200 [ 100.188404][ T3548] vxlan_offload_rx_ports+0x139/0x200 [ 100.193783][ T3548] vxlan_netdevice_event+0x111/0x470 [ 100.199070][ T3548] notifier_call_chain+0x1b3/0x3e0 [ 100.204182][ T3548] call_netdevice_notifiers+0x88/0xc0 [ 100.209555][ T3548] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 100.215829][ T3548] notifier_call_chain+0x1b3/0x3e0 [ 100.220937][ T3548] register_netdevice+0x1608/0x1ae0 [ 100.226136][ T3548] nsim_create+0xae8/0xf10 [ 100.230561][ T3548] __nsim_dev_port_add+0x6b6/0xb10 [ 100.235702][ T3548] nsim_dev_port_add_all+0x37/0xf0 [ 100.240819][ T3548] nsim_dev_reload_up+0x451/0x780 [ 100.245843][ T3548] devlink_reload+0x4e9/0x8d0 [ 100.250522][ T3548] devlink_nl_reload_doit+0xb35/0xd50 [ 100.255979][ T3548] genl_family_rcv_msg_doit+0x215/0x300 [ 100.261525][ T3548] genl_rcv_msg+0x60e/0x790 [ 100.266034][ T3548] netlink_rcv_skb+0x208/0x470 [ 100.270827][ T3548] genl_rcv+0x28/0x40 [ 100.274832][ T3548] netlink_unicast+0x82c/0x9e0 [ 100.279601][ T3548] netlink_sendmsg+0x805/0xb30 [ 100.284370][ T3548] __sock_sendmsg+0x21c/0x270 [ 100.289052][ T3548] ____sys_sendmsg+0x505/0x830 [ 100.293813][ T3548] ___sys_sendmsg+0x21f/0x2a0 [ 100.298488][ T3548] __x64_sys_sendmsg+0x19b/0x260 [ 100.303433][ T3548] do_syscall_64+0xfa/0x3b0 [ 100.307956][ T3548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.313858][ T3548] [ 100.316182][ T3548] The buggy address belongs to the object at ffff888033309400 [ 100.316182][ T3548] which belongs to the cache kmalloc-256 of size 256 [ 100.330231][ T3548] The buggy address is located 176 bytes inside of [ 100.330231][ T3548] freed 256-byte region [ffff888033309400, ffff888033309500) [ 100.344028][ T3548] [ 100.346354][ T3548] The buggy address belongs to the physical page: [ 100.352763][ T3548] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33308 [ 100.361517][ T3548] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 100.370011][ T3548] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 100.377663][ T3548] page_type: f5(slab) [ 100.381649][ T3548] raw: 00fff00000000040 ffff88801a441b40 dead000000000122 0000000000000000 [ 100.390248][ T3548] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 100.398849][ T3548] head: 00fff00000000040 ffff88801a441b40 dead000000000122 0000000000000000 [ 100.407523][ T3548] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 100.416219][ T3548] head: 00fff00000000001 ffffea0000ccc201 00000000ffffffff 00000000ffffffff [ 100.424902][ T3548] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 100.433586][ T3548] page dumped because: kasan: bad access detected [ 100.439998][ T3548] page_owner tracks the page as allocated [ 100.445707][ T3548] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7274, tgid 7271 (syz.5.281), ts 99071319410, free_ts 77808515260 [ 100.465069][ T3548] post_alloc_hook+0x240/0x2a0 [ 100.469848][ T3548] get_page_from_freelist+0x21e4/0x22c0 [ 100.475421][ T3548] __alloc_frozen_pages_noprof+0x181/0x370 [ 100.481228][ T3548] alloc_pages_mpol+0x232/0x4a0 [ 100.486103][ T3548] allocate_slab+0x8a/0x370 [ 100.490617][ T3548] ___slab_alloc+0xbeb/0x1410 [ 100.495304][ T3548] __kmalloc_noprof+0x305/0x4f0 [ 100.500157][ T3548] sctp_make_init_ack+0x2a5/0x1300 [ 100.505274][ T3548] sctp_sf_do_unexpected_init+0xc43/0x1110 [ 100.511083][ T3548] sctp_do_sm+0x1e4/0x5a20 [ 100.515516][ T3548] sctp_assoc_bh_rcv+0x3f2/0x630 [ 100.520476][ T3548] sctp_backlog_rcv+0x167/0x3f0 [ 100.525340][ T3548] __release_sock+0x24c/0x350 [ 100.530119][ T3548] release_sock+0x5f/0x1f0 [ 100.534544][ T3548] sctp_sendmsg+0x1b72/0x2810 [ 100.539230][ T3548] __sock_sendmsg+0x19c/0x270 [ 100.543912][ T3548] page last free pid 13 tgid 13 stack trace: [ 100.549889][ T3548] __free_frozen_pages+0xbc4/0xd30 [ 100.555006][ T3548] __slab_free+0x303/0x3c0 [ 100.559511][ T3548] qlist_free_all+0x97/0x140 [ 100.564119][ T3548] kasan_quarantine_reduce+0x148/0x160 [ 100.569581][ T3548] __kasan_slab_alloc+0x22/0x80 [ 100.574442][ T3548] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 100.580362][ T3548] __alloc_skb+0x112/0x2d0 [ 100.584796][ T3548] mld_newpack+0x13c/0xc40 [ 100.589243][ T3548] add_grhead+0x5a/0x2a0 [ 100.593503][ T3548] add_grec+0x1452/0x1740 [ 100.597836][ T3548] mld_send_initial_cr+0x288/0x550 [ 100.602966][ T3548] ipv6_mc_dad_complete+0x88/0x410 [ 100.608108][ T3548] addrconf_dad_completed+0x6d5/0xd60 [ 100.613499][ T3548] addrconf_dad_work+0xc36/0x14b0 [ 100.618536][ T3548] process_scheduled_works+0xae1/0x17b0 [ 100.624269][ T3548] worker_thread+0x8a0/0xda0 [ 100.628859][ T3548] [ 100.631208][ T3548] Memory state around the buggy address: [ 100.636929][ T3548] ffff888033309380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.644984][ T3548] ffff888033309400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.653043][ T3548] >ffff888033309480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.661185][ T3548] ^ [ 100.666816][ T3548] ffff888033309500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.674879][ T3548] ffff888033309580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.682936][ T3548] ================================================================== [ 100.703127][ T5870] tipc: Node number set to 456626688 [ 100.722456][ T3548] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 100.729719][ T3548] CPU: 0 UID: 0 PID: 3548 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 100.739280][ T3548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.749348][ T3548] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 100.756672][ T3548] Call Trace: [ 100.759966][ T3548] [ 100.762921][ T3548] dump_stack_lvl+0x99/0x250 [ 100.767539][ T3548] ? __asan_memcpy+0x40/0x70 [ 100.772154][ T3548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.777399][ T3548] ? __pfx__printk+0x10/0x10 [ 100.782022][ T3548] vpanic+0x281/0x750 [ 100.786012][ T3548] ? preempt_schedule+0xae/0xc0 [ 100.790885][ T3548] ? __pfx_vpanic+0x10/0x10 [ 100.795394][ T3548] ? preempt_schedule_common+0x83/0xd0 [ 100.800868][ T3548] ? preempt_schedule+0xae/0xc0 [ 100.805723][ T3548] ? __pfx_preempt_schedule+0x10/0x10 [ 100.811191][ T3548] panic+0xb9/0xc0 [ 100.814920][ T3548] ? __pfx_panic+0x10/0x10 [ 100.819339][ T3548] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 100.825244][ T3548] ? __mutex_lock+0x147/0x1350 [ 100.830098][ T3548] check_panic_on_warn+0x89/0xb0 [ 100.835045][ T3548] ? __mutex_lock+0x147/0x1350 [ 100.839820][ T3548] end_report+0x78/0x160 [ 100.844071][ T3548] kasan_report+0x129/0x150 [ 100.848579][ T3548] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 100.854482][ T3548] ? __mutex_lock+0x147/0x1350 [ 100.859263][ T3548] __mutex_lock+0x147/0x1350 [ 100.863949][ T3548] ? __mutex_lock+0x5bb/0x1350 [ 100.868806][ T3548] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 100.875064][ T3548] ? __pfx___mutex_lock+0x10/0x10 [ 100.880184][ T3548] ? do_raw_spin_unlock+0x122/0x240 [ 100.885392][ T3548] ? rcu_is_watching+0x15/0xb0 [ 100.890248][ T3548] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 100.896415][ T3548] ? process_scheduled_works+0x9ef/0x17b0 [ 100.902135][ T3548] ? process_scheduled_works+0x9ef/0x17b0 [ 100.908114][ T3548] process_scheduled_works+0xae1/0x17b0 [ 100.913758][ T3548] ? __pfx_process_scheduled_works+0x10/0x10 [ 100.919744][ T3548] worker_thread+0x8a0/0xda0 [ 100.924430][ T3548] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 100.930767][ T3548] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 100.936666][ T3548] ? __kthread_parkme+0x7b/0x200 [ 100.941611][ T3548] kthread+0x70e/0x8a0 [ 100.945772][ T3548] ? __pfx_worker_thread+0x10/0x10 [ 100.950884][ T3548] ? __pfx_kthread+0x10/0x10 [ 100.955570][ T3548] ? rcu_is_watching+0x15/0xb0 [ 100.960395][ T3548] ? __pfx_kthread+0x10/0x10 [ 100.964991][ T3548] ret_from_fork+0x3f9/0x770 [ 100.969613][ T3548] ? __pfx_ret_from_fork+0x10/0x10 [ 100.974727][ T3548] ? __switch_to_asm+0x39/0x70 [ 100.979500][ T3548] ? __switch_to_asm+0x33/0x70 [ 100.984273][ T3548] ? __pfx_kthread+0x10/0x10 [ 100.988874][ T3548] ret_from_fork_asm+0x1a/0x30 [ 100.993652][ T3548] [ 100.997063][ T3548] Kernel Offset: disabled [ 101.001405][ T3548] Rebooting in 86400 seconds..