last executing test programs: 5.407722868s ago: executing program 2 (id=3): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @empty}, 0x2, 0x0, 0x2}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)="43210098") socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r2 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000140)='sit0\x00'}, 0x30) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d300000008000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r4}, &(0x7f0000000040), &(0x7f0000000940)=r3}, 0x20) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, &(0x7f0000000040)={0xffffffffffffffff, 0x9}) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000000000d005c000000ff80000000fffffada28fe3401f04bbcf500dae7476a385e3dd3ef6734f7315b4f3c515d1ba92afe9a1f4b6199af4831b28c5bb82794695f33f7dd22b0afe6f4f2e9d6276bc88a20a351dc87ba2f2ac974d8ee21eceac12fa8d706a4e8dd748985bd63045ce9d69c6cee837a1213c3ccc937743dafc35c79c3787ebc81cacf025230104a28e418e91c7ec310e9854d2841e5f052baa7b07bdb5f1b50fdc81c3469038e83be0047808a2efb7140aa4990f66d395e0a3a7240ec1718352623bfa4ad4433ac389febac5b3513502d6a31275ba0a9fe31c734cf7dd7daa4e556c8bd5a28b5037e"], 0x14}], 0x1}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180001000000005955ee0e662d576c00080000", @ANYRES64=r7], 0x24}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 4.086946324s ago: executing program 2 (id=14): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) (fail_nth: 3) 3.620103289s ago: executing program 2 (id=15): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20044080) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="30a90000001000e1ffffff010000000000000000f4e5b273b1f48a433d9e3d82e42df5a7ebaf11f9170da8d2c3257f8717e8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b0000000000"], 0x30}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={r1}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xf4, r4, 0x56ae4825e35bc0fa, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x99}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x35fc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40001}, 0x4) socket$inet(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 'lo\x00'}}, 0x1e) 3.518215528s ago: executing program 2 (id=16): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="19fd9bed22ac2a90d79729758c8eec869f68cc1cb5ef9a2b0f9efd6cf7828e49625b6a74403aa1a11329ff614cfb541aee3bb1de75901f0d44a30d7b651c6cb50594c012cf6cf0d736b1d8071d01c8093f87bd95554dd0832726e46f997c2d55c36a9f5562b9f882c8cd13d63719c6f50fe9f8b568afa7e1c8c4dc2da3e90caa9a72772d3f7058c2c0ee41599cd19d0ef13242b7456d49c487c3aede74eec7e347e07d7e8c0e7578cc5b2c11", 0xac}, {&(0x7f00000002c0)="3009e8e4c2c988ca4cd4d6736eacbb5dc9dc23db", 0x14}], 0x2, 0x0, 0x0, 0x4000411}, 0x80) r2 = epoll_create(0x3ff) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000280)={0x2000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)={0x20000001}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r4) sendmsg$NFC_CMD_LLC_GET_PARAMS(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000000000d0a000000000000000200000604"], &(0x7f0000000f40)=""/4089, 0x82, 0xff9, 0x5}, 0x28) 3.242899282s ago: executing program 2 (id=19): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x89b1, &(0x7f0000000040)={'veth1_to_team\x00', 0x2000}) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) write$cgroup_pid(r1, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100"], 0x74}}, 0x0) 2.000177976s ago: executing program 4 (id=36): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) (fail_nth: 5) 1.521570309s ago: executing program 4 (id=38): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580), 0x2000000}, 0x20) 1.39906248s ago: executing program 4 (id=41): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000021801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000009e8685000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000cbd520850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000020c0), r4) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002140)={0x38, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r5, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0x6}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x74048011}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000280)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x40}}, 0x40048a4) 1.296494968s ago: executing program 0 (id=43): r0 = socket$alg(0x26, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000300)={0x40, 0x1002, 0x0, 0x0, 0x65}) (async) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) (async) sendmmsg$alg(r1, &(0x7f0000009000)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="9c2e044eb4", 0x5}], 0x1, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8010}], 0x1, 0x4) 1.292398317s ago: executing program 3 (id=44): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x801) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x2b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) (async) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000400000000000000095"], &(0x7f0000001600)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000400000014000500fc0100000000000000000000ad000001080002000500000014000600ff020000000000a30885621a982b3c0106000b0002"], 0x4c}}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r7, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x54, r7, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000840)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r8, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, r12, 0x736, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000002c0000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x40041}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x384, r7, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf6b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe08d}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc060}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @remote, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2015}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef4a}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4485359c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xca6}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pimreg0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x327a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3b, 0x3, "abf051a3424d32f80bb0c25c46ea870294ddbc4f1bebd0b82d813096efbc3d0b2796e080192fe82fcfc3c794e3b3f81025857b78305758"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x4000040}, 0x50) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.156233905s ago: executing program 4 (id=45): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="e8001a8048000a80140007"], 0x15c}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffc0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 1.135617516s ago: executing program 0 (id=46): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a4014"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r7, 0x800, 0x70bd29, 0x25dfdbff}, 0x14}}, 0x80) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.13233701s ago: executing program 3 (id=47): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000740)={0x0, 0x1, 0x2, 0x8000000000400}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa1, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x2f, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x10000, '\x00', r2, r0, 0x4, 0x5, 0x2}, 0x50) setsockopt$inet6_buf(r1, 0x29, 0xcc, &(0x7f00000005c0)="1da98e689249cb243e8476293e1e7fb0da2cfc760d67b83dfbe1e55bd142ed8b4b5c83e48ba9b634155ee0d1d960291371fa3832f6f360797826dfc07fbdbfff7be9d2e462d720a9823b7594cafb61e3434314ef2fff025286c52a3e9ceba09760977fcbf54480af34", 0x69) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb01001800000000000000a8000000a8000000090000000f00000002000013040000001000000000010000060000000300000081000000060000000a00000000000010020000000300000009000093000000000100000003000000600200000b000000020000000800000007000000090000000200000004000000001000000300000010000000040000000300000004000000b4070000b40200000800000005000000100000000d0000000200000062e9000010000000fbffffff1d00000000305f002e5f2e0000d465b5870197c87a0479a9bc365701abe7e9468393dae0a8819d63b98d01533ba172623a321f341a1f7b58f697ee3bef"], &(0x7f0000000780)=""/221, 0xc9, 0xdd, 0x1, 0x5}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x9, 0x3b3, 0xfffffffd, 0x280, r3, 0x2, '\x00', r2, r0, 0x3, 0x0, 0x1, 0xb}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000340)="9f227e2c", &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r4, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r4, &(0x7f0000000a80), &(0x7f0000000ac0)=""/68}, 0x20) 1.068190906s ago: executing program 1 (id=48): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) (fail_nth: 6) 988.088604ms ago: executing program 4 (id=49): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/120, 0x78}], 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, 0x0}, 0x20000001) accept4(0xffffffffffffffff, &(0x7f0000000300)=@can, &(0x7f0000000140)=0x80, 0x800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @empty}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0x8001, @remote, 0x6}}, 0x811e, 0x2, 0x5, 0x7, 0x2f, 0xcd, 0x7}, &(0x7f0000000580)=0x9c) shutdown(0xffffffffffffffff, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r6, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x1100000000f336, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040885) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 975.072539ms ago: executing program 3 (id=50): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x5ed240, 0x0) r1 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3f, 0xffffffffffffffff, &(0x7f00000000c0)={0x72000002}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x38) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)={'ipvlan0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r7, @ANYRES32=r7], 0x44}}, 0x2000800) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0x874d) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e00000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\n\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000c1cbc006c8270b4ab5bdc2d3d400"/41], 0x50) unshare(0xc040400) close(0x3) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0100000300000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$inet6(0xa, 0x800, 0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f00000001c0)={0x1, 0xf, 0x401}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c210b000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) 962.259935ms ago: executing program 1 (id=51): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580), 0x200000000000000}, 0x20) 835.884527ms ago: executing program 1 (id=52): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f00000002c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x6, 0xfffffffffffffffc, &(0x7f0000000000)=0x5e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f00000003c0)) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x1, 0x4000, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd2d, 0x25dfdbfd, {0x2, 0x20, 0x0, 0x2, 0x3e, 0x0, 0x0, 0x7, 0x1}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 640.687888ms ago: executing program 1 (id=53): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r1) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x64000) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r6, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ec0)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x1, 0xae, 0x803, 0x0, 0x89, 0x8, 0x2, 0x81, 0x8ad0, 0x29a8, 0x8, 0xfffffffe, 0x3, 0x1, 0x3, 0x4, 0x1, 0x6, 0x9, 0x7, 0x2, 0xffff, 0x1b1e88b6, 0x1b, 0x9, 0x6, 0x9, 0x7, 0xb, 0x5, 0x2, 0x5, 0xe22, 0x651, 0x8001, 0x7, 0x7dfb, 0x6, 0x6, 0x8001, 0x7, 0x1, 0x5, 0x9, 0x4, 0x80000001, 0x83, 0x1, 0x1, 0x0, 0x1, 0x7, 0x7, 0x800, 0x7, 0xd, 0x6, 0x6, 0x8, 0xfffffff9, 0xfffffffa, 0x80000000, 0x6, 0x3, 0xc9, 0x7, 0x3, 0x3, 0x3, 0x87, 0xf, 0x2, 0x6, 0x389, 0x8, 0x7fff, 0x2, 0x0, 0xfc8, 0x6, 0x0, 0xdd7, 0x1, 0x3ff, 0x9, 0x0, 0x1, 0x8, 0xc, 0xfddd, 0x3, 0x7f, 0x0, 0xcf, 0xa, 0x7fffffff, 0xffffffff, 0x7, 0xfffffffc, 0x5, 0x3, 0x401, 0x4, 0xa9, 0x5, 0x3ff, 0x6, 0x6, 0x8, 0xf33, 0x8, 0x6, 0x0, 0x3, 0x2, 0x1, 0x4, 0xfffffe00, 0x5, 0x7fffffff, 0x1, 0x5, 0x8, 0x81, 0x6, 0x7b, 0x3, 0x0, 0x3, 0x2, 0x6, 0x7, 0x4b1d, 0x80000000, 0x7, 0x2, 0x7ff, 0x1, 0x40, 0x1, 0x6, 0x0, 0x5, 0x7, 0x0, 0x9, 0x1, 0xfffffffd, 0x2a, 0x4, 0x3, 0x400000, 0x7, 0x9, 0x9, 0x4, 0x3, 0x4, 0x2a8f529d, 0x4c, 0x2, 0x7fffffff, 0x8, 0x7fff, 0x800, 0xe, 0xa92d, 0x0, 0x1, 0x6, 0xbf, 0x0, 0x1, 0x81, 0x5c, 0xfff, 0x5, 0x7a15, 0xfffffffd, 0x0, 0xac, 0x2e5bb190, 0xda3, 0x9, 0x1, 0x80000001, 0x2, 0x4, 0x7674, 0x7, 0x6, 0x7, 0x4932, 0x6, 0x9, 0x5, 0x2, 0x2, 0x5, 0xffff, 0x81, 0x6, 0x25, 0x179, 0x0, 0x6d5, 0x4, 0x8, 0x6, 0x2, 0x4, 0x1, 0x5d, 0x6, 0x6c, 0x0, 0xe, 0x8, 0x53a, 0x4000002, 0x9, 0x4, 0x97, 0x3, 0x1f5, 0xbd0, 0x1, 0x5, 0xecfc, 0x5, 0x4, 0x9e38, 0x2, 0xffff, 0x2, 0xdb6f, 0xff, 0x1c, 0x9, 0x5, 0x800, 0xe685, 0xdb7, 0xfffffffa, 0x7, 0x2, 0x7ff, 0x997, 0xffff, 0x3, 0xd, 0x3, 0xe, 0x4, 0xbb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x80000001, 0x402, 0x9, 0x6, 0x9, 0x2, 0xffff, 0xfffffff9, 0x81, 0x5, 0x7fffffff, 0x81, 0x8000, 0xffffffff, 0x1, 0x8, 0x7, 0x7, 0xda8, 0xfffff800, 0x7fffffff, 0xfffffffa, 0x3, 0x4, 0x200, 0x100, 0x8, 0x7, 0x1ff, 0x0, 0xf1, 0x3, 0x8, 0x3, 0x10001, 0xc, 0x9, 0x200, 0x3, 0x543d, 0x74, 0x2, 0x8, 0x4, 0x37, 0x81, 0xd425, 0x1, 0x10, 0x2a8, 0x6, 0xc, 0x9, 0x1, 0x10001, 0x5, 0x4, 0x10001, 0x5, 0x40, 0x6, 0x400, 0xd87d, 0xfffffff7, 0x8, 0x3, 0x10001, 0xd1e, 0x4c8000, 0x348, 0x2, 0x8, 0x5, 0x2, 0x7fffffff, 0x0, 0x4, 0x5, 0x5, 0x0, 0x80000001, 0x10, 0xfffffc00, 0xffff, 0x81, 0x3, 0x1d4, 0x47ff, 0x3, 0x7, 0x1, 0x5, 0x1, 0x1000, 0x81, 0x4, 0x3, 0x10001, 0x80, 0x1, 0x5, 0x9, 0x9, 0x5, 0x5, 0x5, 0x8, 0xb, 0x5ca, 0xe, 0x6, 0xfff, 0x4, 0x80000000, 0x0, 0x4, 0x24, 0x5, 0x46, 0x3e994374, 0x7, 0x6, 0xa, 0x7f, 0x6, 0x6, 0x800, 0x4, 0x67, 0x800, 0x1ff, 0xc89c, 0x788, 0x0, 0x8000, 0x100, 0x9, 0xe, 0xb, 0x5, 0x7, 0xfffffff0, 0x0, 0x5, 0x7fffffff, 0xfffffffc, 0x2, 0x3, 0xfffffc01, 0x0, 0x6, 0x4, 0xf, 0x3850, 0x4, 0xe00000, 0xb9c, 0x0, 0xfffffff9, 0x0, 0x7, 0x2, 0x80, 0xfffffff9, 0x0, 0x1, 0x30, 0x1, 0x7, 0x140000, 0xfffffff8, 0x23, 0x7fffffff, 0x1, 0x5, 0x9, 0x40, 0x7, 0x200000, 0x8000, 0x3, 0xc, 0x6, 0x4, 0x7, 0xb95, 0x6, 0x7ff, 0x7fffffff, 0x7, 0xbdd1, 0x1, 0x132c, 0x4, 0x8, 0xe, 0x8, 0x9e, 0x8, 0x8, 0xfff, 0xffff, 0x7, 0x9d, 0x16, 0x2, 0x1, 0x0, 0xac, 0x6, 0x2, 0x6, 0x9e, 0xb, 0x10, 0x5, 0x4, 0xac, 0x7961481c, 0xf5c9, 0x27cf, 0x1, 0x6, 0x7f, 0x7, 0x1, 0x7, 0x7, 0x7, 0x0, 0x4, 0xd3, 0x1, 0xff, 0x9, 0x7fffffff, 0x40000003, 0x9c7, 0x2000001, 0x6, 0x7, 0x1, 0x8, 0x8, 0x1746, 0x0, 0x9, 0x40, 0x1, 0x8001, 0x29fb, 0x0, 0x7, 0x8]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0xffffffffffffffff, 0xffff21a5, 0x3, 0x4, {0x6, 0x2, 0xfffb, 0xc7, 0x6554, 0x7}, {0x5, 0x0, 0x5, 0x8, 0xd, 0x8}, 0x81, 0x5b2, 0xbb2e}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r1) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x64000) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) close(r3) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r6, 0x4) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x0, 0x0}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ec0)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x1, 0xae, 0x803, 0x0, 0x89, 0x8, 0x2, 0x81, 0x8ad0, 0x29a8, 0x8, 0xfffffffe, 0x3, 0x1, 0x3, 0x4, 0x1, 0x6, 0x9, 0x7, 0x2, 0xffff, 0x1b1e88b6, 0x1b, 0x9, 0x6, 0x9, 0x7, 0xb, 0x5, 0x2, 0x5, 0xe22, 0x651, 0x8001, 0x7, 0x7dfb, 0x6, 0x6, 0x8001, 0x7, 0x1, 0x5, 0x9, 0x4, 0x80000001, 0x83, 0x1, 0x1, 0x0, 0x1, 0x7, 0x7, 0x800, 0x7, 0xd, 0x6, 0x6, 0x8, 0xfffffff9, 0xfffffffa, 0x80000000, 0x6, 0x3, 0xc9, 0x7, 0x3, 0x3, 0x3, 0x87, 0xf, 0x2, 0x6, 0x389, 0x8, 0x7fff, 0x2, 0x0, 0xfc8, 0x6, 0x0, 0xdd7, 0x1, 0x3ff, 0x9, 0x0, 0x1, 0x8, 0xc, 0xfddd, 0x3, 0x7f, 0x0, 0xcf, 0xa, 0x7fffffff, 0xffffffff, 0x7, 0xfffffffc, 0x5, 0x3, 0x401, 0x4, 0xa9, 0x5, 0x3ff, 0x6, 0x6, 0x8, 0xf33, 0x8, 0x6, 0x0, 0x3, 0x2, 0x1, 0x4, 0xfffffe00, 0x5, 0x7fffffff, 0x1, 0x5, 0x8, 0x81, 0x6, 0x7b, 0x3, 0x0, 0x3, 0x2, 0x6, 0x7, 0x4b1d, 0x80000000, 0x7, 0x2, 0x7ff, 0x1, 0x40, 0x1, 0x6, 0x0, 0x5, 0x7, 0x0, 0x9, 0x1, 0xfffffffd, 0x2a, 0x4, 0x3, 0x400000, 0x7, 0x9, 0x9, 0x4, 0x3, 0x4, 0x2a8f529d, 0x4c, 0x2, 0x7fffffff, 0x8, 0x7fff, 0x800, 0xe, 0xa92d, 0x0, 0x1, 0x6, 0xbf, 0x0, 0x1, 0x81, 0x5c, 0xfff, 0x5, 0x7a15, 0xfffffffd, 0x0, 0xac, 0x2e5bb190, 0xda3, 0x9, 0x1, 0x80000001, 0x2, 0x4, 0x7674, 0x7, 0x6, 0x7, 0x4932, 0x6, 0x9, 0x5, 0x2, 0x2, 0x5, 0xffff, 0x81, 0x6, 0x25, 0x179, 0x0, 0x6d5, 0x4, 0x8, 0x6, 0x2, 0x4, 0x1, 0x5d, 0x6, 0x6c, 0x0, 0xe, 0x8, 0x53a, 0x4000002, 0x9, 0x4, 0x97, 0x3, 0x1f5, 0xbd0, 0x1, 0x5, 0xecfc, 0x5, 0x4, 0x9e38, 0x2, 0xffff, 0x2, 0xdb6f, 0xff, 0x1c, 0x9, 0x5, 0x800, 0xe685, 0xdb7, 0xfffffffa, 0x7, 0x2, 0x7ff, 0x997, 0xffff, 0x3, 0xd, 0x3, 0xe, 0x4, 0xbb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x80000001, 0x402, 0x9, 0x6, 0x9, 0x2, 0xffff, 0xfffffff9, 0x81, 0x5, 0x7fffffff, 0x81, 0x8000, 0xffffffff, 0x1, 0x8, 0x7, 0x7, 0xda8, 0xfffff800, 0x7fffffff, 0xfffffffa, 0x3, 0x4, 0x200, 0x100, 0x8, 0x7, 0x1ff, 0x0, 0xf1, 0x3, 0x8, 0x3, 0x10001, 0xc, 0x9, 0x200, 0x3, 0x543d, 0x74, 0x2, 0x8, 0x4, 0x37, 0x81, 0xd425, 0x1, 0x10, 0x2a8, 0x6, 0xc, 0x9, 0x1, 0x10001, 0x5, 0x4, 0x10001, 0x5, 0x40, 0x6, 0x400, 0xd87d, 0xfffffff7, 0x8, 0x3, 0x10001, 0xd1e, 0x4c8000, 0x348, 0x2, 0x8, 0x5, 0x2, 0x7fffffff, 0x0, 0x4, 0x5, 0x5, 0x0, 0x80000001, 0x10, 0xfffffc00, 0xffff, 0x81, 0x3, 0x1d4, 0x47ff, 0x3, 0x7, 0x1, 0x5, 0x1, 0x1000, 0x81, 0x4, 0x3, 0x10001, 0x80, 0x1, 0x5, 0x9, 0x9, 0x5, 0x5, 0x5, 0x8, 0xb, 0x5ca, 0xe, 0x6, 0xfff, 0x4, 0x80000000, 0x0, 0x4, 0x24, 0x5, 0x46, 0x3e994374, 0x7, 0x6, 0xa, 0x7f, 0x6, 0x6, 0x800, 0x4, 0x67, 0x800, 0x1ff, 0xc89c, 0x788, 0x0, 0x8000, 0x100, 0x9, 0xe, 0xb, 0x5, 0x7, 0xfffffff0, 0x0, 0x5, 0x7fffffff, 0xfffffffc, 0x2, 0x3, 0xfffffc01, 0x0, 0x6, 0x4, 0xf, 0x3850, 0x4, 0xe00000, 0xb9c, 0x0, 0xfffffff9, 0x0, 0x7, 0x2, 0x80, 0xfffffff9, 0x0, 0x1, 0x30, 0x1, 0x7, 0x140000, 0xfffffff8, 0x23, 0x7fffffff, 0x1, 0x5, 0x9, 0x40, 0x7, 0x200000, 0x8000, 0x3, 0xc, 0x6, 0x4, 0x7, 0xb95, 0x6, 0x7ff, 0x7fffffff, 0x7, 0xbdd1, 0x1, 0x132c, 0x4, 0x8, 0xe, 0x8, 0x9e, 0x8, 0x8, 0xfff, 0xffff, 0x7, 0x9d, 0x16, 0x2, 0x1, 0x0, 0xac, 0x6, 0x2, 0x6, 0x9e, 0xb, 0x10, 0x5, 0x4, 0xac, 0x7961481c, 0xf5c9, 0x27cf, 0x1, 0x6, 0x7f, 0x7, 0x1, 0x7, 0x7, 0x7, 0x0, 0x4, 0xd3, 0x1, 0xff, 0x9, 0x7fffffff, 0x40000003, 0x9c7, 0x2000001, 0x6, 0x7, 0x1, 0x8, 0x8, 0x1746, 0x0, 0x9, 0x40, 0x1, 0x8001, 0x29fb, 0x0, 0x7, 0x8]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0xffffffffffffffff, 0xffff21a5, 0x3, 0x4, {0x6, 0x2, 0xfffb, 0xc7, 0x6554, 0x7}, {0x5, 0x0, 0x5, 0x8, 0xd, 0x8}, 0x81, 0x5b2, 0xbb2e}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}}, 0x0) (async) 500.60394ms ago: executing program 0 (id=54): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000007e00000095"], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) r2 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d80)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private2}}, &(0x7f00000005c0)=0xe8) unshare(0x24020400) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) r5 = socket$pptp(0x18, 0x1, 0x2) r6 = socket$unix(0x1, 0x1, 0x0) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000013c0)={0x0, 0x0, 0x0}, &(0x7f0000001400)=0xc) sendmsg$unix(r6, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r7}}}], 0x20}, 0x20000800) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb000000000000000002002000000000003d66efd356038b7a616b1817452796fecb325b0f7f9b9aafd5b27a8ba4fdbe297498848b9b4523003c047feb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000100000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580), &(0x7f0000000600)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000980), 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="000000002000000000000000d300000001000000", @ANYRES32=r8, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x20004840}, 0x20004000) r9 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x67, r3, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x9, 0x8000080000000000, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in=@rand_addr=0x64010102, 0x2, 0x6c}, 0xa, @in6=@mcast2, 0x0, 0x5, 0x0, 0xb7, 0x0, 0x0, 0xffffffff}}, 0xe8) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b000100697036746e6c00003800028014000200fe8000000000000000000000000000aa08000100", @ANYRES32=r10, @ANYBLOB="0400bbf71400030017"], 0x68}}, 0x20008804) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f00000004c0)="b42d49c46aa113650fdedd852318244790afc28d3453760aab7e1881d5e049bba2e5aa486a5e391beb94fbf5de1e81e6b5652d4af0597cf2781a679572b8e0ef189178aa98d6e79d88b1d962c9ea02e1b01111aab31397c825d6fb701744beb2563860be76b82f1e39ff448971b4c70f544a9abf1a52f3894dd04b2a1db6f6411685bc008f60fe391fdd6d393a8e73f74ff577393d5da6bfe91e3b1af36f982e18f6050fabd0a62265cae634706d31945f", 0xb1}, {&(0x7f0000000080)="ba5fdff7d8ed0500000000000000", 0xe}, {&(0x7f0000000e80)="3308221777f35cbb2e4822d32d6ecc7c7eeaa8dde2d21828879765847fdaff5e8c5361657b774cc3e69e57e7a24063cb73de6747b26cc5320971ae87bb8ea6c5e6f6dd1502fbce5ee7306c144a38076a6aaaac6ab4900589aba58e5ccea82f5fd012d42589c74aa41eaf4fc18b10efe3d5d7d62abe938d56f64a87a5cd95dfc09d982301ec9932665dbdead2b6f2fb98113a922e4ae800fed22b701c9644349a3324b4df8d91a55259c6004247444b1e8511fc8e576d48c2c71aa0e0ed4c66e9387aba09a3b17dc0cc2affce477a5b465deb678f2a87e1d0bacfb0003d858213819433e185606ba7679053c47cd2ddb18af81329ba4ebba5d2", 0xf9}, {&(0x7f0000000a40)="828a7f579ff4f1ebf5d9db439185ea19a951e2462d1ae43e6a48502996db73c1577aee631fa59d8d0f50612286c7cf1a5da0e8844b29474297ead6d07de8ec07a5e092fdb7c146baae56ef26d726c4c4eb7e4db715049e5b3b335b7910b85217f4f423c2695e64c2fe845c86a2a2ac002ca02e3c8543946eaf1ee8efd19e9380bab0c437a29907dfb5a7c996e473a5b1e83b14f68a49f0cc9e6e1e31adb9cf", 0x9f}], 0x4}, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) (async) pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="feff0aff0b000000000000007e3f02988c5578910b9ec0e12716d22ae470", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) splice(r11, 0x0, r12, &(0x7f00000002c0), 0x6, 0x2) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 395.898238ms ago: executing program 3 (id=55): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f35446182b31f3176d814a3c9f99bfaac6425159dc45b2d239928fb53047a78072c5a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000800c00028008000001000014bb0a0001"], 0x48}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r4, &(0x7f0000000000), 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701020000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r8, 0x0, 0x24, &(0x7f0000000200)={@broadcast, @multicast2}, &(0x7f0000000240)=0xc) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="3904feffffff000002005c00000008000300", @ANYRES32=r7, @ANYBLOB="46fdc5b25aae58613c868d2f1fa41267c422"], 0x1c}}, 0x4004000) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xf3e5}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/net\x00') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r3, 0x20, &(0x7f0000000680)={&(0x7f0000000540)=""/166, 0xa6, 0x0, &(0x7f0000000600)=""/124, 0x7c}}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11], 0x90}}, 0x0) write(r1, 0x0, 0x0) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r12, &(0x7f0000000bc0)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) poll(0x0, 0x0, 0x7) 395.077482ms ago: executing program 1 (id=56): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) write(r2, &(0x7f0000000000)="c04bd7baffd9c16d8e", 0x9) (async) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="800000000301010400000000000000000100000964000d8014000400fc01000000000000000000000000000008000100ac1414bb44000380060002004e240000060002004e240000060002004e230000060002004e220000060001004e2000000600020000400000060001004e200000060002004e23000008000740000000009e2bcd2647558ec1844975b6e92262b71aef17a402f6a4b5155de5560065463e1657781bfee4f98e416b3b9b875cf8b58797002ac86f93557e3a39aba273141786640f34149de0077d6973850aa267e98b86da027b0592c99982b55ea495bbb2c36f5b9802fc606ad195fd1678"], 0x80}, 0x1, 0x0, 0x0, 0x801}, 0x20000080) (async, rerun: 64) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (rerun: 64) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000340)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0x17, 0xb, 0x35}, 0x2c) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, 0x0, &(0x7f0000000140)) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000480)={r8, 0x2}, &(0x7f00000004c0)=0x8) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r8, 0x8001, 0x30}, 0xc) splice(r0, 0x0, r3, 0x0, 0x10d00, 0xf) 346.953205ms ago: executing program 0 (id=57): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) close(0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind(r1, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x2, @broadcast}}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000a06700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x10) 254.023515ms ago: executing program 0 (id=58): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = socket$rds(0x15, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x7, 0x6, 0x8c}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, &(0x7f0000000140)=0x4, 0x0, 0x2, 0x3ff, 0x7, 0x8000000000000000, 0x8, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfffffff4, 0x5}, 0x0, 0x0, 0x1c4f, 0x5, 0x8, 0x8, 0x13}}], 0xb0}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) 199.902692ms ago: executing program 1 (id=59): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000080000000000000000000000180100002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000000002500f8ff0600000095"], &(0x7f0000000280)='GPL\x00', 0x7}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000014000000002000fc7f0a0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000040000000000000003000000181100003a565aa46ab563535c73ffaf4f479ccc03a037c5bbb7c033b5732d49728872879aeffd6b60624af98af5af2d41e8b5d3ac56a9d3adbe0bd5729918b8da8c97cab11f57fe1e4495df5dade2949ea80b9b60a2ba6c89cb50670c3c5120b7c298996a2074f4a91feb1ffc781071e85a0cfcb3b48b4e8d829e347e82bf4faa2ce070", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r5], 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x3, 0xffff}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x8, 0x0, 0x5, 0x2, 0x2, 0xb}}, {0x4}}, {{0x1c, 0x1, {0xfe, 0x4, 0xffff, 0x7, 0x2, 0xf, 0x78}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000c80)={@remote, @rand_addr, 0x0}, &(0x7f0000000cc0)=0xc) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r11, @ANYBLOB="00000000000000001c001a80080002800800e500080000003e120000080002001040e5"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000d80)={'ip6_vti0\x00', &(0x7f0000000d00)={'syztnl2\x00', 0x0, 0x2f, 0xa, 0x0, 0x1, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x1, 0x80, 0x4, 0xfffffff9}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000dc0)={0x0, @dev, @remote}, &(0x7f0000000e00)=0xc) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@RTM_DELMDB={0x38, 0x55, 0x93d, 0x100402, 0x25dfdbfc, {0x7, r17}, [@MDBA_SET_ENTRY={0x20, 0x1, {r17, 0x0, 0x0, 0x3, {@in6_addr=@empty, 0x800}}}]}, 0x38}}, 0x24048850) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000018c0)={&(0x7f0000001940)={0xaa8, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb913}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x264, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x13}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe0}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff0bc}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8, 0x1, r8}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x6, 0x5, 0x88eb}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r13}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0xff2c, 0x6, r17}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0xaa8}, 0x1, 0x0, 0x0, 0x240000c5}, 0x4004000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r19 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r18, r20, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40) close(0x3) 198.928942ms ago: executing program 3 (id=60): socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x25, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@exit, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x9}, @generic={0x10, 0x4, 0x0, 0x4, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x29, &(0x7f0000000040)=""/41, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000000c0)={0x3, 0x2, 0xa, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{0x1, 0x1, 0xc, 0x5}], 0x10, 0x1b31}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1d, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) 81.124096ms ago: executing program 2 (id=61): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) (fail_nth: 7) 61.377145ms ago: executing program 3 (id=62): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x40, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24040814) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, 0x0, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r3}, 0x10) r4 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4000, @empty}}, 0x24) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8081) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, 0x0, 0x1) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0x400c6615, &(0x7f00000006c0)={0x0, @adiantum, 0x0, @desc2}) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) 404.33µs ago: executing program 0 (id=63): r0 = socket$isdn(0x22, 0x3, 0x23) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0xfffffff8, 0x1, 0x9, 0x3f, 0x401, 0x5, 0xfffffffa, 0x7}}}}]}, 0x58}}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xfff1}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000200025a729bd7000fddbdf250a000008ffe00001020001000800060000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040090}, 0x44854) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 0s ago: executing program 4 (id=64): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x2, 0x4}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) unshare(0x6020400) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd, 0x80000}]}}) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7, r6}, 0xc) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001001000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f0000000200)="165cb1fa0919976b4e046ea74f70", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r8, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000000)={0x0, 0xb}, 0x8) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000040), 0x12) socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(r2, r11, 0x0, 0xf) sendmsg$kcm(r4, &(0x7f0000000ac0)={&(0x7f0000000480)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000300)="f1c68d12c60a71727c7ad0f91f6c364f8eef8fe80cba46b7022f38f95a3d49c4acc5a2", 0x23}, {&(0x7f0000000400)="72e66490a428ddd7d2931d", 0xb}, {&(0x7f0000000580)="5adbe038ccfc85e2dc", 0x9}, {&(0x7f0000000880)="6ab607cf840406eb1c403d88fe8c72b5cd3b9e426da9a3663ac6bb5f1c31bedf126b5b8933c46df18c4b433bf77f7c95bf285f160fafb6a9dd357ee9fdeedc93e19e78114d98d620d87469362df97d4bf9619d82beabd5261794cb7461595194db4b654492b1abaec1e7389b3d261246695577df210a77764fad2a822e9013b94e5e30619135446bb50442a8b38d9071d9ca7f92faa8f96f5ef75c65f37a66f9354c3cfd1fe9cc069a77f48e796888eff336971d7e6189b5ebc102f38ab048d79ad2", 0xc2}, {&(0x7f0000000680)="4a0bb7d4dc3197d950ea744f65e8072d824e2c415965f77b24f9b8e9edff82f01ed57527e574c9060e51c9aa1cd9f3d51dd8331825d931f56d15193cf2c772d00613c813582d620a", 0x48}, {&(0x7f00000005c0)="ccea7a39ee118112753b09079d396d79", 0x10}, {&(0x7f0000000740)="0d1fde673cbca9ad4a6d8cba74327bc9ca83de2e3e4ba0e67558839b24e059fe1c5a2372ac9f2024debbf4a8c11cc508eec11a983044687371f3197787b75f28b3c3c314d2cb70252e24ebe865097f46459442b1998fe7d25c63", 0x5a}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000000980)="63c75fd3ab87a4ebfb3b1e6ee47a679931e8efa31e0f356769401a17625e432f87e240f21fb9f51f42395cf31932e5da49ef3767bd4f78167de1cf9bb8c72c76ce81784467e505eac7f044e4fd5a1edf192bc24d99dc38db701d9c239503a0ad", 0x60}], 0x9, &(0x7f0000001b40)=[{0xa8, 0x10d, 0x1, "089e1d4ad5e23a0022c5a3ed9d7265eabb5963c3325d6b579c16768f35049501ce353da3a25ed96805e61a36895caaf11c7390cb7d542fecd9cb7e1e81e2bd019e23e80cc8a76d430323a3151da97009daa2dae80a1ebad50a4b87afbc0078b191c742f04b538174ccec109b222f1cadea2c10830855444f4ac328fa74a9c1021e1d41c0df6bbbf2895830c932bb88078275ec7368b5a1"}, {0xf8, 0x109, 0x8e, "0bdb9b13a538162d60e262d5a9d106f6bf1098601e5e21c6d9227148e6077ef0ec44fba3caae990241b8fd5d9573f6b46f76cdb0e4fa5286519da6637b2dc6fead50fae23dff5653a7df08ddcf089c6e7fc9026d09292f92cd68163498deef2c37235c1d6ac16f9f8f14ab0f32ed39fa211234655a25a2aedbafad37244e1bef52b7f975310d66887f0019da99b71d3c7032f0ab9c051cf43c8e926808ab871a1b970975c26a6e63664b3779eaa6bff2797d8c7a3b8106932bc4710691b20b6b54fe10a8cec07be99ef32a52a8b559f5da84e085d2be5cae23bdcc326968a9215aeb1eacf714"}, {0xf8, 0x10e, 0xfffffffa, "d8385f7021c7d49f67e8a845fa00f230e5a3ede85e3dd7e93f77e982fc120b21235d753aee9d8217047949cd9bc29c4fd176baf8de0a6ce7ebc6313085d9e50079a2c99a0dae5c163cd1442ee34fda0c1b60863d80d6046ca9a8e8774b8e2ac50d24a569e2ea528ec54eed5836a2cd576e6d207d3f9199d2e87f7992db0d760e78167bd75fe0b2d8ec07c54118c782ea5879f2b5d33b1f8faa4a66fe51c5e970cbfc615a36f82e78c4e51634b8973668337f8a87d4e18d12d8b2286ba958b94b5dbd9e980eb51df03584cf8189c309c85cb88c9d0125f4309e2a5bc2eb16ce9db2696744e5360b1e"}, {0xa0, 0x112, 0x1ff, "b8d893377f67bd4edcf9759eae1b0b86c292f5d4475d84f4180607f38f467b6393c4ddf249d8f183e7d5e9fc4f9f79f834e6ec93eab7297b4a3f025675a4d24127ff39a547202633faab46a5a516c604bc0604e191adc84f4ec69ac56b349452f23d788ed1c5d9c6a3cfc243c2bde7860b8569583df1f19a0e329a066120cadd800f4b34f09bf7bf5f2d"}], 0x338}, 0x4008080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts. [ 69.363130][ T5851] cgroup: Unknown subsys name 'net' [ 69.472641][ T5851] cgroup: Unknown subsys name 'cpuset' [ 69.481419][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.864907][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.592594][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.598934][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.095816][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.105283][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.113179][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.131057][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.149388][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.276257][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.284771][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.292808][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.301266][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.308902][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.419450][ T5182] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.429513][ T5182] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.438154][ T5182] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.447012][ T5182] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.461503][ T5874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.479971][ T5876] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.490039][ T5876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.498973][ T5876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.506693][ T5876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.520311][ T5876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.528566][ T5876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.536504][ T5876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.561330][ T5874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.570344][ T5874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.578061][ T5874] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.722093][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 74.040851][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.048658][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.056733][ T5861] bridge_slave_0: entered allmulticast mode [ 74.065211][ T5861] bridge_slave_0: entered promiscuous mode [ 74.122689][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.129919][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.137044][ T5861] bridge_slave_1: entered allmulticast mode [ 74.144691][ T5861] bridge_slave_1: entered promiscuous mode [ 74.226906][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 74.259536][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.313754][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.323341][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 74.440636][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 74.478448][ T5861] team0: Port device team_slave_0 added [ 74.517607][ T5861] team0: Port device team_slave_1 added [ 74.540703][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.547865][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.555385][ T5868] bridge_slave_0: entered allmulticast mode [ 74.562600][ T5868] bridge_slave_0: entered promiscuous mode [ 74.586638][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 74.628752][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.636370][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.643989][ T5868] bridge_slave_1: entered allmulticast mode [ 74.650991][ T5868] bridge_slave_1: entered promiscuous mode [ 74.702664][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.710281][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.736683][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.758545][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.765611][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.792345][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.859865][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.867293][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.875291][ T5866] bridge_slave_0: entered allmulticast mode [ 74.886121][ T5866] bridge_slave_0: entered promiscuous mode [ 74.907598][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.924179][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.931411][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.938743][ T5866] bridge_slave_1: entered allmulticast mode [ 74.946020][ T5866] bridge_slave_1: entered promiscuous mode [ 74.953177][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.960467][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.967600][ T5869] bridge_slave_0: entered allmulticast mode [ 74.974915][ T5869] bridge_slave_0: entered promiscuous mode [ 74.984374][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.016161][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.023518][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.030809][ T5869] bridge_slave_1: entered allmulticast mode [ 75.037860][ T5869] bridge_slave_1: entered promiscuous mode [ 75.144262][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.167568][ T5868] team0: Port device team_slave_0 added [ 75.180912][ T5861] hsr_slave_0: entered promiscuous mode [ 75.187219][ T5861] hsr_slave_1: entered promiscuous mode [ 75.193426][ T5874] Bluetooth: hci0: command tx timeout [ 75.200884][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.208178][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.215690][ T5872] bridge_slave_0: entered allmulticast mode [ 75.222837][ T5872] bridge_slave_0: entered promiscuous mode [ 75.232166][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.243436][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.254385][ T5868] team0: Port device team_slave_1 added [ 75.261677][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.268825][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.276368][ T5872] bridge_slave_1: entered allmulticast mode [ 75.283568][ T5872] bridge_slave_1: entered promiscuous mode [ 75.303035][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.350417][ T5874] Bluetooth: hci1: command tx timeout [ 75.383074][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.390332][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.416275][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.439645][ T5866] team0: Port device team_slave_0 added [ 75.464023][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.471490][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.497453][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.509232][ T5874] Bluetooth: hci2: command tx timeout [ 75.512343][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.525744][ T5866] team0: Port device team_slave_1 added [ 75.532986][ T5869] team0: Port device team_slave_0 added [ 75.560899][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.582844][ T5869] team0: Port device team_slave_1 added [ 75.589172][ T5874] Bluetooth: hci3: command tx timeout [ 75.669470][ T5874] Bluetooth: hci4: command tx timeout [ 75.680754][ T5872] team0: Port device team_slave_0 added [ 75.687135][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.695084][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.721908][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.744670][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.752215][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.778683][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.797886][ T5872] team0: Port device team_slave_1 added [ 75.804556][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.811530][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.837512][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.871921][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.878876][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.905560][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.970737][ T5868] hsr_slave_0: entered promiscuous mode [ 75.976982][ T5868] hsr_slave_1: entered promiscuous mode [ 75.983543][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 75.989430][ T5868] Cannot create hsr debugfs directory [ 76.021498][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.028461][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.054480][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.091830][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.098794][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.125159][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.227269][ T5869] hsr_slave_0: entered promiscuous mode [ 76.233916][ T5869] hsr_slave_1: entered promiscuous mode [ 76.240150][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 76.245879][ T5869] Cannot create hsr debugfs directory [ 76.264802][ T5866] hsr_slave_0: entered promiscuous mode [ 76.271283][ T5866] hsr_slave_1: entered promiscuous mode [ 76.277296][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 76.283856][ T5866] Cannot create hsr debugfs directory [ 76.368339][ T5872] hsr_slave_0: entered promiscuous mode [ 76.374917][ T5872] hsr_slave_1: entered promiscuous mode [ 76.381465][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 76.387199][ T5872] Cannot create hsr debugfs directory [ 76.597256][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.656171][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.666666][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.694521][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.831607][ T5868] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.855170][ T5868] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.866599][ T5868] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.878391][ T5868] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.983030][ T5869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.013319][ T5869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.025809][ T5869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.036806][ T5869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.145106][ T5866] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.157809][ T5866] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.177787][ T5866] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.188184][ T5866] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.269509][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.280233][ T5874] Bluetooth: hci0: command tx timeout [ 77.293652][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.345659][ T5872] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.373698][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.381274][ T5872] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.395537][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.420738][ T5872] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.429500][ T5874] Bluetooth: hci1: command tx timeout [ 77.431791][ T5872] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.448535][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.455968][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.466008][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.473225][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.482317][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.489453][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.515369][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.522511][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.581387][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.590052][ T5874] Bluetooth: hci2: command tx timeout [ 77.645364][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.664972][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.672645][ T5874] Bluetooth: hci3: command tx timeout [ 77.750282][ T5874] Bluetooth: hci4: command tx timeout [ 77.761643][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.768796][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.793443][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.814729][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.821925][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.901475][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.908615][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.978776][ T5866] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.996702][ T5866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.015219][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.022350][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.077819][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.177516][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.225043][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.293073][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.300342][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.320747][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.327916][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.372350][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.527442][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.552316][ T5861] veth0_vlan: entered promiscuous mode [ 78.558329][ T5868] veth0_vlan: entered promiscuous mode [ 78.601885][ T5868] veth1_vlan: entered promiscuous mode [ 78.616043][ T5861] veth1_vlan: entered promiscuous mode [ 78.686084][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.739905][ T5866] veth0_vlan: entered promiscuous mode [ 78.762144][ T5861] veth0_macvtap: entered promiscuous mode [ 78.774182][ T5868] veth0_macvtap: entered promiscuous mode [ 78.796358][ T5868] veth1_macvtap: entered promiscuous mode [ 78.804908][ T5861] veth1_macvtap: entered promiscuous mode [ 78.826990][ T5866] veth1_vlan: entered promiscuous mode [ 78.857731][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.884217][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.896671][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.921811][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.930724][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.958174][ T5869] veth0_vlan: entered promiscuous mode [ 78.977520][ T5866] veth0_macvtap: entered promiscuous mode [ 78.985516][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.995283][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.045911][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.057347][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.066868][ T5866] veth1_macvtap: entered promiscuous mode [ 79.093835][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.102819][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.117073][ T5869] veth1_vlan: entered promiscuous mode [ 79.125767][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.154004][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.212537][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.274060][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.316809][ T5869] veth0_macvtap: entered promiscuous mode [ 79.327827][ T5869] veth1_macvtap: entered promiscuous mode [ 79.340368][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.350264][ T5874] Bluetooth: hci0: command tx timeout [ 79.351030][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.366012][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.375999][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.409390][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.435568][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.456625][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.460621][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.465779][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.510253][ T5874] Bluetooth: hci1: command tx timeout [ 79.535691][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.561463][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.577856][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.587881][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.596356][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.597184][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.628623][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.670790][ T5874] Bluetooth: hci2: command tx timeout [ 79.680003][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.713910][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.736087][ T5872] veth0_vlan: entered promiscuous mode [ 79.746842][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.757154][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.774180][ T5874] Bluetooth: hci3: command tx timeout [ 79.777833][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.830267][ T5874] Bluetooth: hci4: command tx timeout [ 79.875013][ T5975] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1'. [ 79.888040][ T5872] veth1_vlan: entered promiscuous mode [ 80.041676][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.042471][ T5980] nbd: must specify a size in bytes for the device [ 80.056770][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.067732][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.083827][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.094917][ T5981] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 80.102309][ T5981] IPv6: NLM_F_CREATE should be set when creating new route [ 80.109628][ T5981] IPv6: NLM_F_CREATE should be set when creating new route [ 80.187916][ T5872] veth0_macvtap: entered promiscuous mode [ 80.226530][ T5872] veth1_macvtap: entered promiscuous mode [ 80.269718][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.312198][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.340615][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.385921][ T5989] ieee802154 phy0 wpan0: encryption failed: -22 [ 80.420448][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.434243][ T5991] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 80.449745][ T3455] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.484572][ T3455] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.512634][ T3455] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.565375][ T3455] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.586128][ T5996] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.697004][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9'. [ 80.746176][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'. [ 80.803319][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 80.907309][ T5994] bridge0: port 3(batadv1) entered blocking state [ 80.927153][ T5994] bridge0: port 3(batadv1) entered disabled state [ 80.945989][ T5994] batadv1: entered allmulticast mode [ 80.977357][ T5994] batadv1: entered promiscuous mode [ 81.231617][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.253695][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.400979][ T3455] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 81.410460][ T3455] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 81.439403][ T5874] Bluetooth: hci0: command tx timeout [ 81.475311][ T6016] netlink: 'syz.0.12': attribute type 2 has an invalid length. [ 81.592541][ T5874] Bluetooth: hci1: command tx timeout [ 81.658969][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.725452][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.749247][ T5874] Bluetooth: hci2: command tx timeout [ 81.830226][ T5874] Bluetooth: hci3: command tx timeout [ 81.919282][ T5874] Bluetooth: hci4: command tx timeout [ 81.933911][ T6026] FAULT_INJECTION: forcing a failure. [ 81.933911][ T6026] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 81.956970][ T6026] CPU: 0 UID: 0 PID: 6026 Comm: syz.2.14 Not tainted syzkaller #0 PREEMPT(full) [ 81.956993][ T6026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 81.957010][ T6026] Call Trace: [ 81.957018][ T6026] [ 81.957025][ T6026] dump_stack_lvl+0x189/0x250 [ 81.957053][ T6026] ? __pfx____ratelimit+0x10/0x10 [ 81.957077][ T6026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.957096][ T6026] ? __pfx__printk+0x10/0x10 [ 81.957131][ T6026] should_fail_ex+0x414/0x560 [ 81.957159][ T6026] _copy_from_user+0x2d/0xb0 [ 81.957180][ T6026] ___bpf_copy_key+0xa5/0x110 [ 81.957205][ T6026] map_update_elem+0x200/0x750 [ 81.957229][ T6026] ? bpf_lsm_bpf+0x9/0x20 [ 81.957252][ T6026] __sys_bpf+0x63a/0x870 [ 81.957274][ T6026] ? __pfx___sys_bpf+0x10/0x10 [ 81.957306][ T6026] ? ksys_write+0x22a/0x250 [ 81.957330][ T6026] ? __pfx_ksys_write+0x10/0x10 [ 81.957349][ T6026] ? rcu_is_watching+0x15/0xb0 [ 81.957373][ T6026] __x64_sys_bpf+0x7c/0x90 [ 81.957393][ T6026] do_syscall_64+0xfa/0x3b0 [ 81.957410][ T6026] ? lockdep_hardirqs_on+0x9c/0x150 [ 81.957428][ T6026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.957445][ T6026] ? clear_bhb_loop+0x60/0xb0 [ 81.957465][ T6026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.957481][ T6026] RIP: 0033:0x7fc2a6b8ec29 [ 81.957501][ T6026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.957514][ T6026] RSP: 002b:00007fc2a7a3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 81.957533][ T6026] RAX: ffffffffffffffda RBX: 00007fc2a6dd5fa0 RCX: 00007fc2a6b8ec29 [ 81.957545][ T6026] RDX: 0000000000000020 RSI: 00002000000005c0 RDI: 0000000000000002 [ 81.957556][ T6026] RBP: 00007fc2a7a3d090 R08: 0000000000000000 R09: 0000000000000000 [ 81.957567][ T6026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.957576][ T6026] R13: 00007fc2a6dd6038 R14: 00007fc2a6dd5fa0 R15: 00007fff47ac3368 [ 81.957604][ T6026] [ 82.789905][ T6038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18'. [ 82.929747][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 82.974672][ T6040] netlink: 'syz.2.19': attribute type 5 has an invalid length. [ 83.002484][ T6040] netlink: 48 bytes leftover after parsing attributes in process `syz.2.19'. [ 83.026633][ T6050] netlink: 'syz.1.22': attribute type 4 has an invalid length. [ 83.032643][ T6045] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.055245][ T6050] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.22'. [ 83.084966][ T6053] netlink: 'syz.3.21': attribute type 12 has an invalid length. [ 83.211539][ T6040] geneve2: entered promiscuous mode [ 83.216939][ T6040] geneve2: entered allmulticast mode [ 83.320428][ T6045] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.343577][ T969] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 83.398747][ T969] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 83.988686][ T6091] FAULT_INJECTION: forcing a failure. [ 83.988686][ T6091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.007881][ T6091] CPU: 0 UID: 0 PID: 6091 Comm: syz.4.36 Not tainted syzkaller #0 PREEMPT(full) [ 84.007908][ T6091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 84.007918][ T6091] Call Trace: [ 84.007925][ T6091] [ 84.007933][ T6091] dump_stack_lvl+0x189/0x250 [ 84.007958][ T6091] ? __pfx____ratelimit+0x10/0x10 [ 84.007977][ T6091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.007995][ T6091] ? __pfx__printk+0x10/0x10 [ 84.008017][ T6091] ? __might_fault+0xb0/0x130 [ 84.008050][ T6091] should_fail_ex+0x414/0x560 [ 84.008078][ T6091] _copy_from_user+0x2d/0xb0 [ 84.008099][ T6091] map_update_elem+0x4a6/0x750 [ 84.008131][ T6091] __sys_bpf+0x63a/0x870 [ 84.008153][ T6091] ? __pfx___sys_bpf+0x10/0x10 [ 84.008186][ T6091] ? ksys_write+0x22a/0x250 [ 84.008215][ T6091] ? __pfx_ksys_write+0x10/0x10 [ 84.008230][ T6091] ? rcu_is_watching+0x15/0xb0 [ 84.008249][ T6091] __x64_sys_bpf+0x7c/0x90 [ 84.008264][ T6091] do_syscall_64+0xfa/0x3b0 [ 84.008277][ T6091] ? lockdep_hardirqs_on+0x9c/0x150 [ 84.008290][ T6091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.008301][ T6091] ? clear_bhb_loop+0x60/0xb0 [ 84.008317][ T6091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.008328][ T6091] RIP: 0033:0x7f475f98ec29 [ 84.008340][ T6091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.008350][ T6091] RSP: 002b:00007f47607fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.008364][ T6091] RAX: ffffffffffffffda RBX: 00007f475fbd5fa0 RCX: 00007f475f98ec29 [ 84.008373][ T6091] RDX: 0000000000000020 RSI: 00002000000005c0 RDI: 0000000000000002 [ 84.008381][ T6091] RBP: 00007f47607fe090 R08: 0000000000000000 R09: 0000000000000000 [ 84.008389][ T6091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.008396][ T6091] R13: 00007f475fbd6038 R14: 00007f475fbd5fa0 R15: 00007ffcb7216fb8 [ 84.008417][ T6091] [ 84.300407][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 84.809162][ T6134] netlink: 32 bytes leftover after parsing attributes in process `syz.4.45'. [ 84.998613][ T6045] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.011417][ T6045] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 85.038727][ T6146] bridge0: port 3(hsr0) entered blocking state [ 85.039452][ T6139] __nla_validate_parse: 2 callbacks suppressed [ 85.039466][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.46'. [ 85.061280][ T6146] bridge0: port 3(hsr0) entered disabled state [ 85.075461][ T6146] hsr0: entered allmulticast mode [ 85.081408][ T6146] hsr_slave_0: entered allmulticast mode [ 85.087105][ T6146] hsr_slave_1: entered allmulticast mode [ 85.096261][ T6146] hsr0: entered promiscuous mode [ 85.106191][ T6146] bridge0: port 3(hsr0) entered blocking state [ 85.112629][ T6146] bridge0: port 3(hsr0) entered forwarding state [ 85.137747][ T6158] Zero length message leads to an empty skb [ 85.180828][ T6143] netlink: 'syz.0.46': attribute type 5 has an invalid length. [ 85.244998][ T6045] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.274404][ T6045] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 85.323110][ T6143] batman_adv: batadv0: Adding interface: vxlan0 [ 85.329615][ T6143] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.358033][ T6143] batman_adv: batadv0: Interface activated: vxlan0 [ 85.374254][ T59] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.404701][ T59] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.447469][ T59] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.476924][ T59] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.532888][ T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 85.547394][ T49] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 85.557239][ T6173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.55'. [ 85.571982][ T6173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.55'. [ 85.605948][ T6173] bridge0: entered promiscuous mode [ 85.614335][ T6173] ip6gretap0: entered promiscuous mode [ 85.627398][ T59] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 85.636082][ T59] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 85.708194][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 85.727824][ T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 85.752252][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 85.760956][ T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 85.784539][ T6183] ip6gretap2: entered promiscuous mode [ 85.891465][ T6191] FAULT_INJECTION: forcing a failure. [ 85.891465][ T6191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.909642][ T6191] CPU: 0 UID: 0 PID: 6191 Comm: syz.2.61 Not tainted syzkaller #0 PREEMPT(full) [ 85.909666][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 85.909675][ T6191] Call Trace: [ 85.909683][ T6191] [ 85.909690][ T6191] dump_stack_lvl+0x189/0x250 [ 85.909713][ T6191] ? __pfx____ratelimit+0x10/0x10 [ 85.909731][ T6191] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.909749][ T6191] ? __pfx__printk+0x10/0x10 [ 85.909782][ T6191] should_fail_ex+0x414/0x560 [ 85.909809][ T6191] _copy_to_user+0x31/0xb0 [ 85.909833][ T6191] simple_read_from_buffer+0xe1/0x170 [ 85.909861][ T6191] proc_fail_nth_read+0x1b3/0x220 [ 85.909883][ T6191] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 85.909905][ T6191] ? rw_verify_area+0x2a6/0x4d0 [ 85.909923][ T6191] ? __lock_acquire+0xab9/0xd20 [ 85.909950][ T6191] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 85.909970][ T6191] vfs_read+0x1fd/0xa30 [ 85.909990][ T6191] ? fdget_pos+0x247/0x320 [ 85.910009][ T6191] ? __pfx___mutex_lock+0x10/0x10 [ 85.910035][ T6191] ? __pfx_vfs_read+0x10/0x10 [ 85.910056][ T6191] ? __fget_files+0x2a/0x420 [ 85.910076][ T6191] ? __fget_files+0x3a0/0x420 [ 85.910090][ T6191] ? __fget_files+0x2a/0x420 [ 85.910115][ T6191] ksys_read+0x145/0x250 [ 85.910138][ T6191] ? __pfx_ksys_read+0x10/0x10 [ 85.910156][ T6191] ? rcu_is_watching+0x15/0xb0 [ 85.910179][ T6191] ? do_syscall_64+0xbe/0x3b0 [ 85.910202][ T6191] do_syscall_64+0xfa/0x3b0 [ 85.910217][ T6191] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.910231][ T6191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.910246][ T6191] ? clear_bhb_loop+0x60/0xb0 [ 85.910266][ T6191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.910281][ T6191] RIP: 0033:0x7fc2a6b8d63c [ 85.910297][ T6191] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 85.910310][ T6191] RSP: 002b:00007fc2a7a3d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 85.910329][ T6191] RAX: ffffffffffffffda RBX: 00007fc2a6dd5fa0 RCX: 00007fc2a6b8d63c [ 85.910339][ T6191] RDX: 000000000000000f RSI: 00007fc2a7a3d0a0 RDI: 0000000000000004 [ 85.910350][ T6191] RBP: 00007fc2a7a3d090 R08: 0000000000000000 R09: 0000000000000000 [ 85.910360][ T6191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.910370][ T6191] R13: 00007fc2a6dd6038 R14: 00007fc2a6dd5fa0 R15: 00007fff47ac3368 [ 85.910399][ T6191] [ 86.159007][ T59] [ 86.161358][ T59] ============================================ [ 86.167497][ T59] WARNING: possible recursive locking detected [ 86.173644][ T59] syzkaller #0 Not tainted [ 86.178050][ T59] -------------------------------------------- [ 86.184196][ T59] kworker/u8:4/59 is trying to acquire lock: [ 86.190165][ T59] ffff888059b54f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 86.199234][ T59] [ 86.199234][ T59] but task is already holding lock: [ 86.206606][ T59] ffff888030696f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 86.215659][ T59] [ 86.215659][ T59] other info that might help us debug this: [ 86.223698][ T59] Possible unsafe locking scenario: [ 86.223698][ T59] [ 86.231128][ T59] CPU0 [ 86.234393][ T59] ---- [ 86.237649][ T59] lock(&hsr->seqnr_lock); [ 86.242149][ T59] lock(&hsr->seqnr_lock); [ 86.246633][ T59] [ 86.246633][ T59] *** DEADLOCK *** [ 86.246633][ T59] [ 86.254757][ T59] May be due to missing lock nesting notation [ 86.254757][ T59] [ 86.263144][ T59] 13 locks held by kworker/u8:4/59: [ 86.268328][ T59] #0: ffff88814cc49948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 86.279878][ T59] #1: ffffc9000210fbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 86.292649][ T59] #2: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 86.302146][ T59] #3: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x1e4/0x1510 [ 86.311635][ T59] #4: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 86.320677][ T59] #5: ffffffff8e13a140 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 86.330584][ T59] #6: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 86.339705][ T59] #7: ffff888030696f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 86.349172][ T59] #8: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860 [ 86.358636][ T59] #9: ffffffff8e13a140 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 86.368540][ T59] #10: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x185/0x1840 [ 86.377831][ T59] #11: ffffffff8e13a140 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 86.387822][ T59] #12: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 86.397127][ T59] [ 86.397127][ T59] stack backtrace: [ 86.403026][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 86.403046][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 86.403056][ T59] Workqueue: ipv6_addrconf addrconf_dad_work [ 86.403081][ T59] Call Trace: [ 86.403088][ T59] [ 86.403095][ T59] dump_stack_lvl+0x189/0x250 [ 86.403114][ T59] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.403128][ T59] ? __pfx__printk+0x10/0x10 [ 86.403149][ T59] print_deadlock_bug+0x28b/0x2a0 [ 86.403164][ T59] validate_chain+0x1a3f/0x2140 [ 86.403190][ T59] ? skb_network_protocol+0x508/0x760 [ 86.403209][ T59] ? __pfx_skb_network_protocol+0x10/0x10 [ 86.403227][ T59] __lock_acquire+0xab9/0xd20 [ 86.403247][ T59] ? hsr_dev_xmit+0x237/0x360 [ 86.403263][ T59] lock_acquire+0x120/0x360 [ 86.403280][ T59] ? hsr_dev_xmit+0x237/0x360 [ 86.403299][ T59] ? hsr_dev_xmit+0x237/0x360 [ 86.403315][ T59] _raw_spin_lock_bh+0x36/0x50 [ 86.403333][ T59] ? hsr_dev_xmit+0x237/0x360 [ 86.403348][ T59] hsr_dev_xmit+0x237/0x360 [ 86.403364][ T59] ? hsr_dev_xmit+0x2d/0x360 [ 86.403380][ T59] dev_hard_start_xmit+0x2d4/0x830 [ 86.403402][ T59] __dev_queue_xmit+0x1b8d/0x3b50 [ 86.403422][ T59] ? __dev_queue_xmit+0x27b/0x3b50 [ 86.403440][ T59] ? __lock_acquire+0xab9/0xd20 [ 86.403459][ T59] ? __pfx___dev_queue_xmit+0x10/0x10 [ 86.403477][ T59] ? unwind_next_frame+0xa5/0x2390 [ 86.403492][ T59] ? unwind_next_frame+0xa5/0x2390 [ 86.403508][ T59] ? __lock_acquire+0xab9/0xd20 [ 86.403530][ T59] br_dev_queue_push_xmit+0x6c5/0x890 [ 86.403550][ T59] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 86.403567][ T59] ? NF_HOOK+0x9e/0x3c0 [ 86.403581][ T59] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 86.403596][ T59] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 86.403611][ T59] NF_HOOK+0x320/0x3c0 [ 86.403627][ T59] ? NF_HOOK+0x9e/0x3c0 [ 86.403641][ T59] ? __pfx_NF_HOOK+0x10/0x10 [ 86.403656][ T59] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 86.403675][ T59] br_forward_finish+0xd3/0x130 [ 86.403689][ T59] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 86.403704][ T59] ? __pfx_br_forward_finish+0x10/0x10 [ 86.403719][ T59] ? __pfx_br_forward_finish+0x10/0x10 [ 86.403733][ T59] NF_HOOK+0x320/0x3c0 [ 86.403753][ T59] ? NF_HOOK+0x9e/0x3c0 [ 86.403767][ T59] ? __pfx_NF_HOOK+0x10/0x10 [ 86.403786][ T59] __br_forward+0x41e/0x600 [ 86.403800][ T59] ? __pfx_br_forward_finish+0x10/0x10 [ 86.403817][ T59] ? __pfx___br_forward+0x10/0x10 [ 86.403833][ T59] ? skb_clone+0x246/0x3a0 [ 86.403851][ T59] maybe_deliver+0xb5/0x160 [ 86.403871][ T59] br_flood+0x31a/0x6a0 [ 86.403889][ T59] ? br_dev_xmit+0x185/0x1840 [ 86.403900][ T59] br_dev_xmit+0x11b3/0x1840 [ 86.403912][ T59] ? br_dev_xmit+0x185/0x1840 [ 86.403926][ T59] ? __pfx_br_dev_xmit+0x10/0x10 [ 86.403937][ T59] ? validate_xmit_xfrm+0xbf/0x1160 [ 86.403955][ T59] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 86.403971][ T59] ? kasan_save_track+0x4f/0x80 [ 86.403991][ T59] dev_hard_start_xmit+0x2d4/0x830 [ 86.404012][ T59] __dev_queue_xmit+0x1b8d/0x3b50 [ 86.404033][ T59] ? __dev_queue_xmit+0x27b/0x3b50 [ 86.404051][ T59] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 86.404067][ T59] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 86.404084][ T59] ? __pfx___dev_queue_xmit+0x10/0x10 [ 86.404100][ T59] ? __copy_skb_header+0xa7/0x550 [ 86.404116][ T59] ? __asan_memcpy+0x40/0x70 [ 86.404130][ T59] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 86.404147][ T59] ? __asan_memcpy+0x40/0x70 [ 86.404160][ T59] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 86.404185][ T59] ? hsr_create_tagged_frame+0x449/0xc30 [ 86.404197][ T59] ? __asan_memmove+0x40/0x70 [ 86.404211][ T59] ? hsr_addr_subst_dest+0x307/0xac0 [ 86.404230][ T59] hsr_forward_skb+0x158b/0x2860 [ 86.404246][ T59] ? hsr_forward_skb+0x9e/0x2860 [ 86.404259][ T59] ? __pfx_hsr_forward_skb+0x10/0x10 [ 86.404270][ T59] ? do_raw_spin_lock+0x121/0x290 [ 86.404285][ T59] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 86.404301][ T59] ? hsr_dev_xmit+0x237/0x360 [ 86.404317][ T59] hsr_dev_xmit+0x242/0x360 [ 86.404333][ T59] ? hsr_dev_xmit+0x2d/0x360 [ 86.404349][ T59] dev_hard_start_xmit+0x2d4/0x830 [ 86.404370][ T59] __dev_queue_xmit+0x1b8d/0x3b50 [ 86.404387][ T59] ? register_lock_class+0x51/0x320 [ 86.404406][ T59] ? __dev_queue_xmit+0x27b/0x3b50 [ 86.404426][ T59] ? __pfx___dev_queue_xmit+0x10/0x10 [ 86.404443][ T59] ? read_seqbegin+0x122/0x250 [ 86.404456][ T59] ? neigh_connected_output+0x1ea/0x460 [ 86.404469][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.404483][ T59] ? read_seqbegin+0x1ac/0x250 [ 86.404495][ T59] ? __pfx_read_seqbegin+0x10/0x10 [ 86.404507][ T59] ? eth_header+0x11b/0x200 [ 86.404523][ T59] ? __asan_memcpy+0x40/0x70 [ 86.404537][ T59] ? eth_header+0x11b/0x200 [ 86.404551][ T59] ? __pfx_eth_header+0x10/0x10 [ 86.404566][ T59] ? neigh_connected_output+0x3b6/0x460 [ 86.404585][ T59] ip6_finish_output2+0xfb3/0x1480 [ 86.404604][ T59] ? __pfx_ip6_finish_output2+0x10/0x10 [ 86.404618][ T59] ? ip6_mtu+0x7d/0x490 [ 86.404630][ T59] ? ip6_mtu+0x38c/0x490 [ 86.404642][ T59] ? ip6_finish_output+0x2ef/0x4e0 [ 86.404654][ T59] ? ip6_output+0x126/0x550 [ 86.404666][ T59] ip6_output+0x340/0x550 [ 86.404679][ T59] ndisc_send_skb+0xbce/0x1510 [ 86.404696][ T59] ? ndisc_send_skb+0x1e4/0x1510 [ 86.404714][ T59] ? __pfx_ndisc_send_skb+0x10/0x10 [ 86.404730][ T59] ? ndisc_ns_create+0x4ea/0x650 [ 86.404746][ T59] ? __asan_memcpy+0x40/0x70 [ 86.404763][ T59] ? mod_delayed_work_on+0x128/0x200 [ 86.404780][ T59] ndisc_send_ns+0xcb/0x150 [ 86.404797][ T59] ? __pfx_ndisc_send_ns+0x10/0x10 [ 86.404812][ T59] ? addrconf_dad_work+0xa04/0x14b0 [ 86.404832][ T59] addrconf_dad_work+0xaae/0x14b0 [ 86.404849][ T59] ? __lock_acquire+0xab9/0xd20 [ 86.404868][ T59] ? __pfx_addrconf_dad_work+0x10/0x10 [ 86.404885][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 86.404899][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 86.404910][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 86.404922][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 86.404935][ T59] process_scheduled_works+0xae1/0x17b0 [ 86.404956][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.404973][ T59] worker_thread+0x8a0/0xda0 [ 86.404987][ T59] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 86.405002][ T59] ? __kthread_parkme+0x7b/0x200 [ 86.405018][ T59] kthread+0x70e/0x8a0 [ 86.405033][ T59] ? __pfx_worker_thread+0x10/0x10 [ 86.405045][ T59] ? __pfx_kthread+0x10/0x10 [ 86.405060][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 86.405071][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.405083][ T59] ? __pfx_kthread+0x10/0x10 [ 86.405097][ T59] ret_from_fork+0x439/0x7d0 [ 86.405112][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 86.405126][ T59] ? __switch_to_asm+0x39/0x70 [ 86.405141][ T59] ? __switch_to_asm+0x33/0x70 [ 86.405155][ T59] ? __pfx_kthread+0x10/0x10 [ 86.405175][ T59] ret_from_fork_asm+0x1a/0x30 [ 86.405196][ T59] [ 87.088455][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 87.108353][ T6198] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.123198][ T1216] cfg80211: failed to load regulatory.db