last executing test programs: 4.727218348s ago: executing program 3 (id=47): r0 = socket$l2tp6(0xa, 0x2, 0x73) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x87f}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xe2eb}}], 0x18}, 0x24004800) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) shutdown(r2, 0x1) r3 = accept4(r1, 0x0, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000043000900fffffffffddbdf25010000000c0003804e2d"], 0x20}}, 0x44850) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000ec0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04102b0000001d00000002ffffffffffff7f05000200508056a2ef2039edcc2f0000000000000000000000ee8261536780d9bfd466e17bcdf9d4ec30567cde362230d8ef25e63ac6ccb97f45f4a39104ecaa6d3ca284f66fa686f805fd9318310c9ff8e6be0ed52115759e32361dc96dfa12b3d45f0ecaf060362fa7419e0c2f1d566cd5c65f2b1849a5123cca962dbc7c942abdcfa30f2886916c5cea1395d0c1bb1fe9789d7275c186c5c58206f32ed5b5fe32635afdee52662c"], 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x1) 4.550125174s ago: executing program 3 (id=52): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x9) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x200000000000014d, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.328582371s ago: executing program 3 (id=56): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2001040500000000000000000000000080000000"], 0x26}}, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x40, 0x0, 0x0, 0x3}, {0x6}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x7) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="68000000020603000000000000000000087200030900020073797a32000000000900020073797a30000000002800078005000300050000000c00018008000600000f010108001740000000ea45be100800094000000000177306843a8cc2784bee13000300686173023a6e65742c69666163"], 0x68}}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write(r4, &(0x7f0000001100)="94", 0x1) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x1}}, 0x10) tee(r3, r6, 0x8000000000081, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYRES16=r6, @ANYRES8=r4, @ANYRES32=r2, @ANYRESOCT=r4, @ANYBLOB="23007f00260305fc537e150a060108021100000140000000d70800000800000010012a0004002a006c000e0080380800ffffffffffff080211000000b1a7dea8260405001000000000000000640018540406000a00000180060208000503800309250301b9072a01023c0401e624062d1a481000000001000000000004000600070000000100f4ffffff80710701ff000100030008000c00e0d2ffff08000d0000"], 0xc0}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex, 0x32, 0x1, 0x85, &(0x7f0000000180)=[0x0], 0x1, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0}, 0x40) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r9, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@cgroup=r9, r7, 0x17, 0x22, r7, @void, @void, @void, @value, r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@cgroup=r0, r6, 0x16, 0x0, 0xffffffffffffffff, @void, @value=r10, @void, @void, r8}, 0x20) socket$packet(0x11, 0x2, 0x300) write$ppp(r0, &(0x7f0000000300)="0113", 0x2) 2.566180762s ago: executing program 0 (id=76): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000"], 0x134}}, 0x4c004) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) (async) sendmsg$unix(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='xprtrdma_marshal\x00', r10}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r12, &(0x7f0000000ec0)=[{{&(0x7f0000000c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000700)="ed797024739ba7b90385a078effe81a1cd80a708bcc1a63315b5c891b75732c1df13f350f92e1ee9e39b39e37db9e079910a7938e1e161e9e4ec3ab8be68c473256300b377488ab639ae4c08b542140f3d98a370563c4110e728151348109092204162608e025edc2e96840bf739314fa145bd614006992ecd4b27918cf5c2fb088bc6a847097b945f64cd5e1fb7ab05bd1b6b55a35f7a5b0f0e657000666224c0f86ba80777d3ad070f0d431598c42d9c6eddb14961f023819203a9ecd983721b6538a201366123e011a6e1167b3dfd974208df9e9518", 0xd7}, {&(0x7f0000000a00)="80489116f0e78325921b70b63f817f2d44a45220689bf4742a2ceb7844231a75bc50826286dfa6fab73e09b86e401d35742705fcfb94f05ee2baa61a0f6d280c0229333e28d04ad065904dd750826d16c5892c85da093eb94efb213d83ef0566e0ad392e18a7cdf65edbcdb2763dfdfb945e0b62878137cea1b28afd925cf922ac402df045139b653f4a812e157f4f0a6b979f86b5bd0a402db41674ca8e1183261941288f167a7042d9fc44f5fdd17e38be1d63209c9d754ba6ef58bea31e21742ea6851c4520e3d06899409c93dff1", 0xd0}, {&(0x7f0000000b00)="4fc1d28368931b9530177838b57702f82aecfbde0f4254512c6734411dbb8c003c2feb32cfbb1cb70a4c6791667a772d9da5ae49d94d87594f8744aab0d03b0ac92bee5130eaaf2e30f92b00fbedd4e788cb41b9a60f694a6aaa4ad4ffb97d74566dc24ea04dc27e963e117f9059202aff7533ce7880f1bbed7e726e640a66c20efe0b43b847028da0", 0x89}, {&(0x7f0000000f00)="178bd7b95412b127402df2a2adc8cac5443b68ca9c3e2321fd0500dec228820e47227823a53975a9a7f2144d32b796e1999a9c3eae921394436efb0c28622b34189b22eed14894d1fe9027e2355dae294a66a3d321a22120f4a824bb5e2edaea0c36f626e1d745ff9d28c2ee790ff7516a2a2a71ba9459dec45426a5db5184bcf405b2ad1ae2e213e5c9221e", 0x8c}, {&(0x7f0000000600)="0fbdc16f3b2a798e419b71835bea5b358068ae4882c2383877f9780225329fabcb5fc4992ed9a263c9b42ff0e7d4aa97531020d0a16dedece7bcd8f12601de003a0e3f036d", 0x45}, {&(0x7f0000000d00)="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", 0x110}], 0x6, &(0x7f0000000e80)=ANY=[@ANYBLOB="38006f80eb090dfc193e6b0000006d82", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32, @ANYRES32=r5, @ANYRES32=r9, @ANYRES32=r7, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32, @ANYRES32=r6], 0x38, 0x108c1}}], 0x1, 0x0) (async) r13 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f0000000040)={0xb0000004}) (async) epoll_pwait(r13, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) connect$unix(r11, &(0x7f0000000140)=@abs, 0x6e) (async) socket(0x11, 0x80a, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010446ca9e1a4a2baae728dd5800", @ANYRES32, @ANYBLOB="00000000000000001c00128009000100626f6e64000010000c0002800800ad"], 0x3c}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x640000, 0x0) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000016000000b300009bafed299fa58aae69f4b5155337b1007f00000010000008b355e3140916066d8568d04c862a704b420a7f79b0f12c1f86ffbac23714fd69acc41c12bf42eb7f7cc08f4236abd81eb19b3e1e7e3206b0e543c124d30b3b6ef9520b3f8d85a33e7224ab02fa78383987220e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) socket$can_j1939(0x1d, 0x2, 0x7) 2.483168733s ago: executing program 0 (id=78): mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000009, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x1, 0x6, 0x0, 0x7b35}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000004900), 0x4) 2.432775585s ago: executing program 1 (id=79): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000e40)=@updsa={0xf0, 0x1a, 0x1, 0x70bd2a, 0x25dfdbfe, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4e22, 0x7, 0x4e20, 0xfffc, 0x2, 0x0, 0x80, 0x3c}, {@in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x4d4, 0xff}, @in6=@loopback, {0x80, 0x8000000000000001, 0x4, 0x8, 0x0, 0x1, 0xd503, 0x10000}, {0xfffffffffffffffc, 0xe, 0x5, 0x3}, {0x4, 0x1ff, 0x80}, 0x70bd27, 0x3504, 0x2, 0x0, 0x10, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) 2.290296538s ago: executing program 1 (id=80): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) ioctl$FIBMAP(r0, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0xfffc, 0x7d7, 0xe, 0x1, 0x9, 0x10, 0x8}, 0xc) r2 = socket$inet6(0xa, 0x800, 0x80) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000400000000000000000000007cd1529"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="fae78b36000e6179f713e519000071"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) listen(r2, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23, @multicast1}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007940), 0x55, 0x30, 0x0) sendmmsg(r4, &(0x7f0000000140), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0xce20, 0x10001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3ffc}, 0x1c) setsockopt$sock_int(r9, 0x1, 0x1d, &(0x7f0000000000)=0x2, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 2.257972951s ago: executing program 0 (id=81): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x64}}, 0x8010) socket(0x10, 0x803, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x10008) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000004c0), &(0x7f00000001c0)=0x8) r4 = openat$cgroup_procs(r1, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000500), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000440)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x1, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x9, 0x1c, 0x66, 0x0, 0xff, 0x11, 0x0, @multicast1, @private=0xa010102}, {0x4e22, 0x4e21, 0x8}}}}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_procs(r5, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)='%-010d \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.118354557s ago: executing program 4 (id=84): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) recvmsg(r2, &(0x7f0000000640)={&(0x7f0000000180)=@un=@abs, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/106, 0x6a}, {&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000040)=""/63, 0x3f}, {&(0x7f00000003c0)=""/153, 0x99}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f0000000480)=""/234, 0xea}], 0x6, &(0x7f0000000600)=""/42, 0x2a}, 0x40) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000000c0)="0b3f8aa8be44ba071b54257677402d6c031fc1d89d8fa1074e70886c84c0306a52d345c3fcf9adf6313cb5fa7ff756f9f0e8aaf314fd338762c814c7cfbbabea1dfd2b2c894de0d1434ce8517208084f5279ddbe6dd59916dca2bfbbeefd722f24e94367c2f2c34f4db55adc9ff950d17d18f8d571ae9e4bf245e613c3265d3474459c74090a0660230a2ea79ad9e34cea60cf0d21ca3b12cadad54dc01c5fb68c58bbd8e1acd8aa1bd10f849563d00e469a07fd64674d16", 0xb8, 0x4000011, 0x0, 0x0) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x400100a3) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000005240)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x39d}, {0x8, 0x0, 0xf4a5}]}]}, 0x30}}, 0x0) 2.108931297s ago: executing program 0 (id=85): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000000061114c000000000085000000260000009500"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x1c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x183181, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20044810, 0x0, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB='E+\x00\x00\x00\x00\x00\x00'], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r4 = socket$isdn(0x22, 0x2, 0x26) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x80044943, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x4, 0x1}, {0xb, 0x1}, {0xc}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x32) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0x4, 0xfc0}, &(0x7f0000000500)=0x8) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000003846a647176cb2000000000000000000000001000006020202020202010602229b2d1a010008e3c10000030000000400"/85], 0x55) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x8010, r3, 0x0) 2.006008293s ago: executing program 2 (id=86): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000008000000000000000000a4c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c0002800800014000000020"], 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000001000030525bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB="08001f0009"], 0x58}}, 0x0) 1.978698644s ago: executing program 4 (id=87): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000fdffffff180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c300009095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xfe7, &(0x7f0000001e00)=""/4071, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000fdffffff180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c300009095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xfe7, &(0x7f0000001e00)=""/4071, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x25, 0x80000, 0x800, &(0x7f0000000000)) socket(0x11, 0x800000003, 0x0) (async) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x26f}]}]}]}}]}, 0xac}}, 0x24008824) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001e002503000000000000000007"], 0x28}}, 0x0) recvmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000006}, {@dev}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60dd690b00442f0098000000000000000000000000000000ff0200000000000000000000000000012420810000000000000008e0ba671d7b98c9a8be81"], 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r8}, 0x10) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 1.794402506s ago: executing program 2 (id=88): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x5) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 1.725851999s ago: executing program 2 (id=89): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x3, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x40, 0x7, 0x9, 0x7, {{0xf, 0x4, 0x3, 0x1, 0x3c, 0x67, 0x0, 0x4, 0x4, 0x0, @broadcast, @rand_addr=0x64010102, {[@rr={0x7, 0x17, 0xdc, [@empty, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x28}]}, @noop, @timestamp={0x44, 0x10, 0xdc, 0x0, 0x5, [0x1, 0xd219, 0x2]}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000740)={&(0x7f0000000500), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x57aa18703585b0c4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040804}, 0x4004044) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCDARP(r8, 0x8953, &(0x7f0000000240)={{0x2, 0x4e23, @empty}, {0x1, @random="5bf7fa7966af"}, 0xe, {0x2, 0x4e22, @multicast1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@generic={0x1, 0x9, 0x8, 0x0, 0x62b3}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0xc, 0x1, 0x3, 0x11, @private2, @local, 0x8, 0x10, 0xfffffff9, 0x2}}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair(0x7, 0x2, 0x97, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r13, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3e8, 0x100, 0x70bd28, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0xa0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x3f, 0x3}}, @TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_RATE64={0xc}]}}}]}, 0x90}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x220, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xce8b8db9af398df6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x40000}, 0x840) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r15}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r16}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x6, 0x4, 0x8, 0x1b, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @local, 0x9}, 0x1c) 1.632260527s ago: executing program 4 (id=90): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1f0000, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xa971, 0x2, 0x8, 0x9}, {0x6, 0x0, 0x2, 0xffffffff}, {0x1ff, 0x2, 0x40, 0x7f}]}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)={0x200, 0x2, 0x2, 0xb56, 0x1, 0x0, [{0x7fffffffffffffff, 0x7, 0x7fffffff, '\x00', 0x100}]}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000140)) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000340)={0x1, 0x2, 0x1000, 0xfd, &(0x7f0000000180)="13da45912f3a9d94ce4dbfb42a399f1f32f66bea22e828cc1feca28f46f497355c7516b2cf9edcf889fb5c1a3c454b13550da7327ec435fbb651be8e5bd088529cdf4349bc36b735f5bfae202c981f3918ee80111afd8a7d7ba53d42c8e736fd6b300144d4b2f62ee2e4a34787cd39e057c86b020f8d0699ffbcf40ef356b46b137463df0ad75e7061254985942a67a00b75a51d484726c7bd8eb9c4db0d866a08ccf18cb516f2286849a70973bcf1b7c7e6a3c644e98ed766d33174efc81c128f132ce311de8141f8b0739d7568da5ecee298b6557250acfe6d3e50cc0a9c9b811d5cc2bc9592913197fa937236ecc4de68f9a4076e112eb798c620bd", 0xa7, 0x0, &(0x7f0000000280)="a308512df406d0a9b313a7b02b329e8d20d76460d453168ab39e7fb7861b6b949fa20883eabcac334960adcee3c01f6af2991eb5231c9a44b852eac11e953831333fde2a21670fa61c08d4fa9503d5eb09d8838810bfef5eab81ca3bdf70559c1971fda812f3443601ea229ac17170a613248f705e991eb29d179e43912dd9e2863f0f6ae19a7b1520af12f3f2f6c7ca1d127acf434346125feb2fb992111c2f28520bf4809359"}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r1, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa9b}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb13}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x44}}, 0x10) socketpair(0x2b, 0x3, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_l2cap(r3, &(0x7f0000000580)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1}, 0xe) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$nl_xfrm(r4, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8600440}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)=@report={0x1b8, 0x20, 0x10, 0x70bd27, 0x25dfdbfd, {0x2b, {@in=@empty, @in=@rand_addr=0x64010100, 0x4e22, 0xb, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x0, r5, 0xee01}}, [@tmpl={0x144, 0x5, [{{@in6=@loopback, 0x4d4, 0x3c}, 0xa, @in6=@local, 0x3507, 0x3, 0x2, 0x40, 0x4, 0x40, 0x3e9}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3503, 0x4, 0x2, 0x8, 0xffffffff, 0x1, 0x6}, {{@in=@local, 0x4d6, 0x6c}, 0x2, @in=@remote, 0x3503, 0x4, 0x0, 0x9, 0x3, 0x5, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0x2, @in6=@mcast1, 0x3502, 0x0, 0x0, 0x8, 0x1, 0xb1e5, 0x6}, {{@in=@multicast2, 0x4d6, 0x18}, 0x2, @in6=@remote, 0x0, 0x2, 0x2, 0x4, 0xff, 0x8, 0x7bb5}]}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa, 0x3, 0x1}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4004}, 0x20000800) close(r3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0}, &(0x7f0000000900)=0xc) sendmsg$nl_xfrm(r4, &(0x7f0000000bc0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000940)=@delpolicy={0x21c, 0x14, 0x76fe1e98f936abe2, 0x70bd29, 0x25dfdbff, {{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, @in6=@local, 0x4e21, 0x0, 0x4e21, 0xee, 0xa, 0x0, 0x80, 0x89, r5, r7}, 0x6e6bb2, 0x2}, [@migrate={0x1cc, 0x11, [{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private=0xa010102, @in6=@local, 0x6c, 0x0, 0x0, 0x3505, 0x2, 0x2}, {@in=@private=0xa010101, @in=@broadcast, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2b, 0x2, 0x0, 0x3505, 0x2, 0x2}, {@in6=@loopback, @in=@local, @in6=@private0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xff, 0x2, 0x0, 0x34ff, 0xa, 0xa}, {@in=@multicast1, @in=@private=0xa010102, @in=@empty, @in6=@loopback, 0x3c, 0x4, 0x0, 0x34ff, 0xa}, {@in6=@mcast2, @in6=@loopback, @in6=@mcast2, @in=@broadcast, 0xff, 0x4, 0x0, 0x34ff, 0x2, 0xa}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@loopback, @in=@private=0xa010100, @in6=@rand_addr=' \x01\x00', 0x6c, 0x1, 0x0, 0x3500, 0x2, 0xa}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0xc040}, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000c80)={'gretap0\x00', &(0x7f0000000c00)={'syztnl0\x00', r5, 0x8, 0x20, 0x6c, 0xb221, {{0xa, 0x4, 0x1, 0x29, 0x28, 0x64, 0x0, 0x0, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100, {[@generic={0x83, 0x12, "1256b3986d8e73ceb5f2554d1bf082fc"}]}}}}}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x64, r1, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x48, 0x5b, "be3364b0b29e31550412645447a3af322cad9efcf83a4932803075e48af9ebbd3f43e28b56ecdcb4194cbb61d34feddb08192d6e8211bb9d0ea5fa457341f610f1aa8feb"}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040001) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000e00)=0x4, 0x4) getpeername$packet(r2, &(0x7f0000000f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000f40)=0x14) sendto$packet(r2, &(0x7f0000000e40)="0c903e7426e8b731d0591b5932b08e8139cf3692276a8fa2ee6f97ff2bf94cbe7f84d36b78ae7c7feb743256d90572ba69fc735a7e2d4f78ab6780a0f287c9676cbe8012f26d210a98a6711d288e2568faa7b110d4597088bc4c034c57b8605f112fe2abf6f0f7e681ee90ad6c9f22765f86ca5ac95b48f8dbee4b4ed46478888807a81eb5f0906bae98c421f11c53e1198390a17bc7e54472860752eef7c2eaaca50be007151f15cd5a67e73e", 0xad, 0x4000000, &(0x7f0000000f80)={0x11, 0xd, r8, 0x1, 0x9, 0x6, @remote}, 0x14) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000fc0)=0x2) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001040), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, r9, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x9c}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8820}, 0x4004) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001140)={'team0\x00', 0x0}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x40010, r2, 0x4290b000) recvfrom(r6, &(0x7f0000001180)=""/143, 0x8f, 0x2000, &(0x7f0000001240)=@l2tp={0x2, 0x0, @private=0xa010102, 0x1}, 0x80) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f00000012c0)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x6, 0x81, 0x5, 0x3, 0x1, 0x8caa}, {0x10, 0x3, 0x1ff, 0x5, 0xffffffffffffff06, 0x1}], ['\x00']}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000013c0)={0x6, 0x8, 0x2, 0x2, 0x81, 0x6, 0x200}, 0xc) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001480)={r10, @loopback, @local}, 0xc) 1.409546668s ago: executing program 4 (id=91): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20a81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x2, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) 1.408205994s ago: executing program 2 (id=92): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x7}, @in6={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0xb}, @in6={0xa, 0x4e21, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, @in6={0xa, 0x4e20, 0x80000000, @private2={0xfc, 0x2, '\x00', 0xfc}, 0x1}], 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x1, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x8094) 1.356050522s ago: executing program 1 (id=93): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7, 0x8, 0x2, 0x10001, {{0x5, 0x4, 0x1, 0x28, 0x14, 0x64, 0x1, 0x8, 0x4, 0x0, @empty, @empty}}}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x1}}]}, 0x30}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x4, 0xa}, @generic={0x7, 0xc, "0990ec742f779f8fa6a3"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 1.218232151s ago: executing program 0 (id=94): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113a0000000000851000000200000008feffffe900000095003bd3a091634f699f470400000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r2, r2}, 0xc) recvmmsg(r0, &(0x7f00000067c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/17, 0x11}}], 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x8000003, 0xffffffff}]}]}, {0x0, [0x61, 0x2e]}}, 0x0, 0x30, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r5, 0x112, 0x9, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0xfffffffffffffd5c}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x37}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000200)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000000)='g', 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r8, 0x1, 0x0, 0x6, @remote}, 0x14) recvfrom(r3, &(0x7f0000000100)=""/7, 0x7, 0x10100, &(0x7f0000000140)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, 0x80) 1.217801374s ago: executing program 4 (id=95): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x7bb3, 0x4) r4 = socket(0xb, 0xa, 0x9) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$unix(r5, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x2000, @local}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) vmsplice(r1, &(0x7f00000007c0), 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000008000000000001"], 0xd4}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) recvmsg(r3, &(0x7f0000000540)={&(0x7f0000000280)=@can, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)=""/239, 0xef}], 0x1, &(0x7f0000000480)=""/137, 0x89}, 0x40000062) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="01002dbd6600fddbdf250c00000004000580"], 0x18}, 0x1, 0x0, 0x0, 0x20000001}, 0x2004c8c0) socket$key(0xf, 0x3, 0x2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000003dc0)=ANY=[@ANYBLOB="13000300ffffe0ffff8002000000000000bbbbbbffbb58f31ed2defc"]) sendmmsg$alg(r4, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000004080)="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", 0x110}, {&(0x7f00000015c0)="1cf4288b8e6033a49729d271eb28cbc36097ea87b5f7630ae51b0ca86fd85a44c3ad4017556803e7763e7e1836699dc3f8c3877de4aebb6eabcca68a1408b173c4baf7c3be9f1ffa11c993c6da6b7de6666c7455e2daa785c428410ba59717b4cfca4686ec985924741f7565f6bd4fcc8c19f403917df76b51ee376b30d85eeccdedeb7948021e2adae937122abc78e805252c0f8a1c35ebb303594c6590dfb8b53e90b4790c5bb387c26859606b4504efe94c3c5ca31342603986624826f77dfcb732a3003a5fd898c7b58ea5721d", 0xcf}, {&(0x7f00000016c0)="93175eb71ab4f4ac3d069ec06af9a45b1336037d2c6d8b1dc4fcb0b246c576d8", 0x20}, {&(0x7f0000001700)="0827b047be9a3beee745147b5bda051abec83f856babcc0bf07509d4f71624359ccfec587348ed8505ce36b418de2055252a77edaaef5c03af42d1c4f4668189c387ac82650fc0eae1ea48e63b07462cb5c5ea4c1a48b580f024319dea39315f00765c91ced6e40f0461d09027d2c1cb15037c6392314e8223829a1ae825f7d99eb36bf688216980653598a110bd73c1ddcfcf309c422071e1ecb32c4beb1144b685bce08bc3de8c341065077431eb31b252e00df53de0da299ac0cece7eccc0e4cfd8d5a6616aa4368daebffd3fead2fa9d697a5158214ab4918d9e19473c8caef148fb3a24d62a6514f29e46f66071c794b7c3", 0xf4}], 0x5, 0x0, 0x0, 0x8001}, {0x0, 0x0, &(0x7f00000039c0), 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="2000000000000000170100000200007091a32fa306d738cfe4309b0005000000"], 0x20, 0x800}, {0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000003b80)="4e3480ec9c17b6e992228051ea3801bca8908e88d7433dafda8ed0c31d018363b557def73c4098c640e9d2244a43fe8fc3af3002f79357c37b74845ec103ba005446816e3e0f8aa32a8c1092f86f86580456a92a5e8ca37c45d29932a4b21ebb11372a0a8f8ca68ac31d007d8faa0bcc18b9e0", 0x73}, {&(0x7f0000003a00)="cedaf196f234d221f3fecbbf1220548219777a839f98f7d4b0cc94f244ac06a77ffdab6d9e50e4ffb5c22fe817d60f8f9e24adf949302b64ea5b2c5068c4987b21e62b5890f99229bc163e04dd3caad91cfdae612890dc52b01aae1edeaf1a954d6a8b52ebe99a5fe830d02e17f924cfa00a34ff000000", 0x77}], 0x2, &(0x7f0000003cc0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000003d80), 0x0, &(0x7f0000003f80)=ANY=[@ANYBLOB="480000000000000017010000020000002e0000006b5dc0bf4d4a42bb2f2ede296049575e230242f0b340146718ef7236b3dfc65ab5e3c6e33856adda024dca5f83b300000000000018000000000000001701000004000000040000000000000018000000000000001701000004000000010000000000000018000000000000001701000004000000ffff000000000000d4fdd62c2ecffa85a9b5dd835b340996f9becb2d54f2591303f6447583551a7dafbd13accab17375e9bdd3833a86313994811017809211d0b73da3b2289ed965a24f8fdbf8f67d34d15957c145caed9fb965853a97208fb572b6986a5d7b48790711734f7a"], 0x90, 0x20000010}], 0x4, 0x4040841) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f0000000280)=0x2, 0x4) bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x200, &(0x7f0000001880)=ANY=[], 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="24be000014001400000000000000000011090d0001006d13a20d015dc921e40000000000"], 0x24}}, 0x0) 1.159551389s ago: executing program 2 (id=96): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000100)="43aa28a1787f94f0", 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x1e, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x100000001, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001) socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x120, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0xf0, 0x2, [@TCA_FLOW_EMATCHES={0xec, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xc8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xedb9, 0x7, 0x4}, {{0x3, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x98, 0x2, 0x0, 0x0, {{0x1, 0x0, 0x4}, "3a3aab8cdcd095125828766997eba6459c4ad0ffef8378dcae4887ca9a92d2815e78b6cb23b71a1f265706473c664a524a0d09100e3743b37ec4860eaec07e8b2393fe1ba10a041739d510406e2aae7572fda24ea259e8152c7e1c859c404c69a94c68c9fdd0b6865d837eb934345f8e21b994fa899e3c50f0686e2f503a2e51f82ee35a7b361c4e93474464"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfff, 0x1, 0xb}, {0x8, 0xfffffffd, 0x3, 0x1, 0x0, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x120}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) 1.122008323s ago: executing program 1 (id=97): r0 = socket$igmp6(0xa, 0x3, 0x2) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x15d0, 0x0, 0x0, 0x12a0, 0xd0, 0xd0, 0x1500, 0x1500, 0x1500, 0x1500, 0x1500, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'lo\x00', 'dvmrp0\x00', {}, {0xff}}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x1, './cgroup.cpu/syz0\x00', 0x40, {0x9faf}}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'macsec0\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x7, 0x7c}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @local, [0xff, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff000000, 0xff000000], 'veth1_to_hsr\x00', 'geneve0\x00', {}, {}, 0x73, 0xe, 0x6, 0x58}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x3a, 0x0, 0x0, 0x6, 0x7ce4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, [0xff000000, 0xffffffff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff000000], [0x0, 0xff, 0xffffffff, 0xffffff00], 0x14d8, 0x240}}, @common=@srh={{0x30}, {0x2f, 0x5, 0x5, 0x5, 0x3, 0x8, 0x10}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1630) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001640)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000001780)={&(0x7f0000001680)={0x1d, r3}, 0x10, &(0x7f0000001740)={&(0x7f00000016c0)=@canfd={{0x3, 0x1}, 0x20, 0x2, 0x0, 0x0, "ee9eed2ed887713c1508040adbb759ec3855eee1e98a0fa66e467a107a4ea2bae5d248c03186c053f8775fe5d3fa760cb1167d570404c3e99f99ec22bdb76b92"}, 0x48}, 0x1, 0x0, 0x0, 0x4008041}, 0x4000000) (async) r4 = socket$packet(0x11, 0x3, 0x300) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000008c0)=r5, 0x4) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000001800), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)=ANY=[], 0x118}, 0x1, 0x0, 0x0, 0x1}, 0x4084) (async) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002c00)=ANY=[], 0xe0c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000001811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r8, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r10}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 974.235368ms ago: executing program 3 (id=98): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) (async) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r6) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @remote, 0x3}, 0x1c) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendto$inet6(r2, &(0x7f0000001280)='h', 0x1, 0x8044, 0x0, 0x0) sendmsg$inet(r3, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)="c28cd390a481933aba7da9f54852966b3cb0fa4975cd5d3f363ab97cce4791ac9fb265526cef003a7b0afb186b5704a4c981189b231bc8a6a842549e7ac48b62314a77b12640f4356d4db0144efad0dada67e59eb7046ac57e677bca05b5b5bb00"/107, 0x6b}, {&(0x7f00000000c0)}, {&(0x7f00000005c0)="4823a3ecee4786f5ca5a0d6a772afadad9a94db27965e7b5e12c6daf2f5192c28a775d1002e27ea803cf553e1b93e3104aa11ae502060bb349f39c85b27314cc8a24971b511cd2f52060a3cdc3ae1fc21fc86c5eea050b2dd2e53286733ceb16b667c8202201aec6a0ef55222128fc05bfb27cf99e54943a5912d13847fba2b13008c66c4a872c48aaf7f528b2e82e34ed13761b20648441", 0x98}], 0x3, &(0x7f0000000680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x18}, 0x20004059) (async) sendmsg$inet(r3, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)="c28cd390a481933aba7da9f54852966b3cb0fa4975cd5d3f363ab97cce4791ac9fb265526cef003a7b0afb186b5704a4c981189b231bc8a6a842549e7ac48b62314a77b12640f4356d4db0144efad0dada67e59eb7046ac57e677bca05b5b5bb00"/107, 0x6b}, {&(0x7f00000000c0)}, {&(0x7f00000005c0)="4823a3ecee4786f5ca5a0d6a772afadad9a94db27965e7b5e12c6daf2f5192c28a775d1002e27ea803cf553e1b93e3104aa11ae502060bb349f39c85b27314cc8a24971b511cd2f52060a3cdc3ae1fc21fc86c5eea050b2dd2e53286733ceb16b667c8202201aec6a0ef55222128fc05bfb27cf99e54943a5912d13847fba2b13008c66c4a872c48aaf7f528b2e82e34ed13761b20648441", 0x98}], 0x3, &(0x7f0000000680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x18}, 0x20004059) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x11, r0, 0xa8cfb000) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f00000003c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRESDEC, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xb3) 842.324096ms ago: executing program 2 (id=99): r0 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000003000000000000040000000800020005"], 0x24}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x11, 0x0, 0x89, 0x0, @remote, @private}}}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) (async, rerun: 64) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5088a8a5e986f3", 0x12, 0x0, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) (rerun: 64) 839.203561ms ago: executing program 1 (id=100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000040)=@raw=[@ringbuf_query, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], &(0x7f0000000080)='syzkaller\x00', 0x5000, 0x4b, &(0x7f00000000c0)=""/75, 0x40f00, 0x4d, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000180)=[{0x1, 0x1, 0x6, 0xc}, {0x2, 0x2, 0x9, 0x8}, {0x1, 0x4, 0x1, 0x9}, {0x2, 0x5, 0x5, 0x4}], 0x10, 0x4, @void, @value}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000280)=r1) r2 = socket$netlink(0x10, 0x3, 0x1) getsockopt$netlink(r2, 0x10e, 0xa, &(0x7f00000002c0)=""/64, &(0x7f0000000300)=0x40) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x29, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000340)="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") syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000480)={0xfffffff7, 0x6, 0x0, 0x4, 0x71}, 0x14) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000500), r2) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, r5, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000804) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), r2) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa4, r6, 0x2, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbe9}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x40}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x4008840) bind$alg(0xffffffffffffffff, &(0x7f0000000840)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) socket$tipc(0x1e, 0x5, 0x0) bind$inet(r3, &(0x7f00000008c0)={0x2, 0x4e23, @multicast1}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900), 0x8000, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r2) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x1004) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a80)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r8, 0x541b, &(0x7f0000000ac0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b80)={&(0x7f0000000b40)='ext4_fc_commit_stop\x00', r8, 0x0, 0xad6}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c00)={0x110, 0x0, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x100}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}]}, @CTA_LABELS_MASK={0x14, 0x17, [0x2, 0x8, 0xd, 0x9]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x10001]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_TUPLE_ORIG={0x90, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}]}]}, 0x110}}, 0x10) r10 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) write(r10, &(0x7f0000000dc0)="34b9373f99d4daba8e56a836a395034c755cbafea5b799a71764124609017eb9dcae455584f0ed6734", 0x29) 782.657382ms ago: executing program 3 (id=101): r0 = socket$kcm(0x10, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000400000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x200000100000011, 0x803, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)='m', 0x102, 0x0, &(0x7f0000000200)={0x3a, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703010000001f00000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 566.427668ms ago: executing program 1 (id=102): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) tee(r0, 0xffffffffffffffff, 0xa1, 0x5) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 557.69043ms ago: executing program 3 (id=103): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) close(r2) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket(0x1, 0xa, 0x3) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) 1.055825ms ago: executing program 0 (id=104): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000000061114c000000000085000000260000009500"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x1c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x183181, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20044810, 0x0, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB='E+\x00\x00\x00\x00\x00\x00'], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r4 = socket$isdn(0x22, 0x2, 0x26) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x80044943, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x4, 0x1}, {0xb, 0x1}, {0xc}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x32) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0x4, 0xfc0}, &(0x7f0000000500)=0x8) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000003846a647176cb2000000000000000000000001000006020202020202010602229b2d1a010008e3c10000030000000400"/85], 0x55) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x8010, r3, 0x0) 0s ago: executing program 4 (id=105): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x81}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) unshare(0x20000400) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r2, 0x2f, 0x14, 0x4, @void, @value=r2}, 0x20) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x28, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_ZONE={0x6}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r1) kernel console output (not intermixed with test programs): DUID 00:04:b0:7e:30:9f:4d:11:81:da:bf:2d:3d:77:4c:17:c1:ba forked to background, child pid 5499 [ 48.120474][ T5500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.154232][ T5500] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.33' (ED25519) to the list of known hosts. syzkaller login: [ 69.422990][ T5822] cgroup: Unknown subsys name 'net' [ 69.549941][ T5822] cgroup: Unknown subsys name 'cpuset' [ 69.558361][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.139245][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.611728][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.618298][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.501320][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.509710][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.521161][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.530046][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.538927][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.549198][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.556648][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.564762][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.566459][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.573931][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.580847][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.593818][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.596511][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.605826][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.616017][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.623359][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.626501][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.632467][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.645231][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.645551][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.654198][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.659756][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.673625][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.695529][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.703847][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.707808][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.712191][ T5847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.718820][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.725656][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.732658][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.178814][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 74.199957][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 74.243873][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 74.282406][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 74.430603][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 74.468996][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.476381][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.483792][ T5833] bridge_slave_0: entered allmulticast mode [ 74.491711][ T5833] bridge_slave_0: entered promiscuous mode [ 74.529448][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.537003][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.544161][ T5833] bridge_slave_1: entered allmulticast mode [ 74.551272][ T5833] bridge_slave_1: entered promiscuous mode [ 74.567243][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.574339][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.582556][ T5845] bridge_slave_0: entered allmulticast mode [ 74.589951][ T5845] bridge_slave_0: entered promiscuous mode [ 74.636818][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.643988][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.651678][ T5845] bridge_slave_1: entered allmulticast mode [ 74.658578][ T5845] bridge_slave_1: entered promiscuous mode [ 74.665228][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.672659][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.679968][ T5832] bridge_slave_0: entered allmulticast mode [ 74.687162][ T5832] bridge_slave_0: entered promiscuous mode [ 74.708302][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.715466][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.722911][ T5848] bridge_slave_0: entered allmulticast mode [ 74.733472][ T5848] bridge_slave_0: entered promiscuous mode [ 74.753982][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.766679][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.792407][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.799753][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.807682][ T5832] bridge_slave_1: entered allmulticast mode [ 74.814391][ T5832] bridge_slave_1: entered promiscuous mode [ 74.834917][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.842159][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.849982][ T5848] bridge_slave_1: entered allmulticast mode [ 74.857112][ T5848] bridge_slave_1: entered promiscuous mode [ 74.881442][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.894697][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.977806][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.990918][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.003760][ T5833] team0: Port device team_slave_0 added [ 75.017182][ T5833] team0: Port device team_slave_1 added [ 75.025171][ T5845] team0: Port device team_slave_0 added [ 75.033710][ T5845] team0: Port device team_slave_1 added [ 75.041910][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.054047][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.063994][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.071178][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.078487][ T5837] bridge_slave_0: entered allmulticast mode [ 75.085546][ T5837] bridge_slave_0: entered promiscuous mode [ 75.133685][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.140953][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.148633][ T5837] bridge_slave_1: entered allmulticast mode [ 75.155283][ T5837] bridge_slave_1: entered promiscuous mode [ 75.180657][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.187948][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.214671][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.228431][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.235417][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.261487][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.307586][ T5848] team0: Port device team_slave_0 added [ 75.316619][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.331328][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.338723][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.364823][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.383560][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.390955][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.417046][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.430440][ T5832] team0: Port device team_slave_0 added [ 75.438912][ T5832] team0: Port device team_slave_1 added [ 75.446448][ T5848] team0: Port device team_slave_1 added [ 75.453817][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.513575][ T5833] hsr_slave_0: entered promiscuous mode [ 75.520435][ T5833] hsr_slave_1: entered promiscuous mode [ 75.555463][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.562567][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.588825][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.611509][ T5837] team0: Port device team_slave_0 added [ 75.622254][ T5837] team0: Port device team_slave_1 added [ 75.635645][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.643084][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.669693][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.681991][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.689714][ T5841] Bluetooth: hci0: command tx timeout [ 75.693130][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.721510][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.746807][ T5845] hsr_slave_0: entered promiscuous mode [ 75.753287][ T5845] hsr_slave_1: entered promiscuous mode [ 75.759695][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.767532][ T5841] Bluetooth: hci1: command tx timeout [ 75.767601][ T5845] Cannot create hsr debugfs directory [ 75.776717][ T5843] Bluetooth: hci2: command tx timeout [ 75.784167][ T5841] Bluetooth: hci3: command tx timeout [ 75.800013][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.807082][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.833223][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.846155][ T5841] Bluetooth: hci4: command tx timeout [ 75.878547][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.885533][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.912894][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.944264][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.951333][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.977604][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.045728][ T5848] hsr_slave_0: entered promiscuous mode [ 76.052430][ T5848] hsr_slave_1: entered promiscuous mode [ 76.060470][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.068584][ T5848] Cannot create hsr debugfs directory [ 76.105421][ T5832] hsr_slave_0: entered promiscuous mode [ 76.112323][ T5832] hsr_slave_1: entered promiscuous mode [ 76.118661][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.126515][ T5832] Cannot create hsr debugfs directory [ 76.171804][ T5837] hsr_slave_0: entered promiscuous mode [ 76.178173][ T5837] hsr_slave_1: entered promiscuous mode [ 76.184301][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.192120][ T5837] Cannot create hsr debugfs directory [ 76.464710][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.501623][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.521977][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.540495][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.564361][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.590386][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.604345][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.621544][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.672330][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.717696][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.727554][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.743729][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.753938][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.764241][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.783402][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.811377][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.884189][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.895232][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.915586][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.925566][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.963662][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.029494][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.050706][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.091751][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.099060][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.123525][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.154963][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.162094][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.185139][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.195538][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.202696][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.239104][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.246296][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.278001][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.338880][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.357183][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.370904][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.385630][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.409371][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.416518][ T753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.429588][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.436721][ T753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.484294][ T753] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.491492][ T753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.501439][ T753] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.508608][ T753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.527276][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.639520][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.646717][ T753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.687323][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.753045][ T753] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.760245][ T753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.777734][ T5841] Bluetooth: hci0: command tx timeout [ 77.853994][ T5841] Bluetooth: hci3: command tx timeout [ 77.857802][ T5843] Bluetooth: hci2: command tx timeout [ 77.859773][ T5838] Bluetooth: hci1: command tx timeout [ 77.926426][ T5841] Bluetooth: hci4: command tx timeout [ 77.972027][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.038261][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.061687][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.154994][ T5833] veth0_vlan: entered promiscuous mode [ 78.205574][ T5833] veth1_vlan: entered promiscuous mode [ 78.230097][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.239269][ T5837] veth0_vlan: entered promiscuous mode [ 78.262200][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.303680][ T5837] veth1_vlan: entered promiscuous mode [ 78.312435][ T5833] veth0_macvtap: entered promiscuous mode [ 78.344737][ T5833] veth1_macvtap: entered promiscuous mode [ 78.380837][ T5832] veth0_vlan: entered promiscuous mode [ 78.402701][ T5848] veth0_vlan: entered promiscuous mode [ 78.425284][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.458378][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.472072][ T5832] veth1_vlan: entered promiscuous mode [ 78.484803][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.494444][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.503992][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.512898][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.524202][ T5848] veth1_vlan: entered promiscuous mode [ 78.537625][ T5837] veth0_macvtap: entered promiscuous mode [ 78.577349][ T5837] veth1_macvtap: entered promiscuous mode [ 78.654428][ T5832] veth0_macvtap: entered promiscuous mode [ 78.684630][ T5848] veth0_macvtap: entered promiscuous mode [ 78.693447][ T5845] veth0_vlan: entered promiscuous mode [ 78.703996][ T5848] veth1_macvtap: entered promiscuous mode [ 78.713391][ T5832] veth1_macvtap: entered promiscuous mode [ 78.724816][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.726979][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.743433][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.753386][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.763195][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.791238][ T5845] veth1_vlan: entered promiscuous mode [ 78.820887][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.834693][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.845532][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.867587][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.882634][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.893178][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.904105][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.917049][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.928594][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.939240][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.949452][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.960058][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.970824][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.981370][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.993049][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.005134][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.013946][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.022867][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.031855][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.056575][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.064695][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.070870][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.084133][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.094476][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.110425][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.121151][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.132007][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.143351][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.153402][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.165243][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.175243][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.185723][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.197081][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.220919][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.231753][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.241094][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.250567][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.274088][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.283556][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.293996][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.303112][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.355856][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.382151][ T5845] veth0_macvtap: entered promiscuous mode [ 79.411794][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.420926][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.446469][ T5845] veth1_macvtap: entered promiscuous mode [ 79.465304][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.475984][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.485821][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.496425][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.506309][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.516816][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.527026][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.537774][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.548820][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.576812][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.587703][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.606459][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.620563][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.635559][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.675494][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.713866][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.746917][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.751757][ T5925] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.762914][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.813184][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.835446][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.847453][ T5841] Bluetooth: hci0: command tx timeout [ 79.857143][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.873200][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.882242][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.891433][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.915565][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.924007][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.932322][ T5841] Bluetooth: hci2: command tx timeout [ 79.936279][ T5838] Bluetooth: hci3: command tx timeout [ 79.937925][ T5841] Bluetooth: hci1: command tx timeout [ 79.959670][ T5930] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.006004][ T5841] Bluetooth: hci4: command tx timeout [ 80.032904][ T753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.049148][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.052683][ T753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.070475][ T5931] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 80.074032][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.236198][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.244158][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.246860][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.272084][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.299640][ T753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.307904][ T753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.578050][ T5934] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1'. [ 80.671280][ T5938] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 80.836101][ T25] IPVS: starting estimator thread 0... [ 80.837149][ T5947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 80.905273][ T5947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 80.946088][ T5950] IPVS: using max 19 ests per chain, 45600 per kthread [ 81.368012][ C0] Illegal XDP return value 16128 on prog (id 11) dev bond_slave_1, expect packet loss! [ 81.578325][ T5980] netlink: 56 bytes leftover after parsing attributes in process `syz.1.18'. [ 81.600358][ T5980] netlink: 'syz.1.18': attribute type 2 has an invalid length. [ 81.733669][ T5956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.784543][ T5988] netlink: 76 bytes leftover after parsing attributes in process `syz.0.19'. [ 81.784784][ T5956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.794347][ T5988] nbd: illegal input index 16744192 [ 81.850784][ T5956] bond0 (unregistering): Released all slaves [ 81.946182][ T5841] Bluetooth: hci0: command tx timeout [ 82.006155][ T5841] Bluetooth: hci3: command tx timeout [ 82.007037][ T5843] Bluetooth: hci2: command tx timeout [ 82.011629][ T5841] Bluetooth: hci1: command tx timeout [ 82.075218][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 82.096380][ T5838] Bluetooth: hci4: command tx timeout [ 82.504082][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 82.585088][ T6014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.28'. [ 82.906691][ T6019] netlink: 'syz.2.30': attribute type 2 has an invalid length. [ 82.947948][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 82.980239][ T6024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.32'. [ 84.847246][ T6119] netlink: 'syz.1.60': attribute type 4 has an invalid length. [ 85.473846][ T6154] netlink: 'syz.2.68': attribute type 4 has an invalid length. [ 85.500434][ T6154] Zero length message leads to an empty skb [ 85.527613][ T6155] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 85.537655][ T6155] macsec1: entered promiscuous mode [ 85.543047][ T6155] macsec1: entered allmulticast mode [ 85.552141][ T6155] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 85.599600][ T6155] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 85.637175][ T6155] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 85.882181][ T6171] __nla_validate_parse: 5 callbacks suppressed [ 85.882201][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 85.897980][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 85.908784][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 85.923284][ T6169] vlan2: entered promiscuous mode [ 85.929656][ T6169] vlan2: entered allmulticast mode [ 86.198322][ T6185] sctp: [Deprecated]: syz.0.78 (pid 6185) Use of int in maxseg socket option. [ 86.198322][ T6185] Use struct sctp_assoc_value instead [ 86.665855][ T6205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.681426][ T6205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.694995][ T6207] netlink: 20 bytes leftover after parsing attributes in process `syz.2.86'. [ 86.695459][ T6204] delete_channel: no stack [ 86.751209][ T6210] netlink: 28 bytes leftover after parsing attributes in process `syz.4.87'. [ 86.769045][ T6209] netlink: 28 bytes leftover after parsing attributes in process `syz.4.87'. [ 86.795754][ T6210] netlink: 'syz.4.87': attribute type 10 has an invalid length. [ 86.805415][ T6210] netlink: 2 bytes leftover after parsing attributes in process `syz.4.87'. [ 86.825363][ T6210] team0: entered promiscuous mode [ 86.830904][ T6210] team_slave_0: entered promiscuous mode [ 86.843403][ T6210] team_slave_1: entered promiscuous mode [ 86.849846][ T6210] bridge0: port 3(team0) entered blocking state [ 86.862861][ T6210] bridge0: port 3(team0) entered disabled state [ 86.869849][ T6210] team0: entered allmulticast mode [ 86.875163][ T6210] team_slave_0: entered allmulticast mode [ 86.891954][ T6210] team_slave_1: entered allmulticast mode [ 86.903392][ T6210] bridge0: port 3(team0) entered blocking state [ 86.910123][ T6210] bridge0: port 3(team0) entered forwarding state [ 86.986274][ T974] cfg80211: failed to load regulatory.db [ 87.251331][ T6225] netlink: 'syz.4.91': attribute type 2 has an invalid length. [ 87.576150][ T6236] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 87.917456][ T6258] netlink: 'syz.3.101': attribute type 10 has an invalid length. [ 87.925554][ T6258] netlink: 40 bytes leftover after parsing attributes in process `syz.3.101'. [ 87.937369][ T6258] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.991097][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 88.248827][ T6263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.103'. [ 88.406534][ T5838] Bluetooth: hci4: command tx timeout [ 88.675588][ T6256] syz.2.99 (6256) used greatest stack depth: 18512 bytes left [ 88.873387][ T6250] ================================================================== [ 88.881524][ T6250] BUG: KASAN: slab-use-after-free in skb_release_data+0x103/0x8a0 [ 88.889404][ T6250] Read of size 4 at addr ffff8880309a8760 by task syz.2.99/6250 [ 88.897045][ T6250] [ 88.899382][ T6250] CPU: 0 UID: 0 PID: 6250 Comm: syz.2.99 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 88.909895][ T6250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 88.919953][ T6250] Call Trace: [ 88.923231][ T6250] [ 88.926182][ T6250] dump_stack_lvl+0x241/0x360 [ 88.930891][ T6250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.936135][ T6250] ? __pfx__printk+0x10/0x10 [ 88.940755][ T6250] ? _printk+0xd5/0x120 [ 88.944942][ T6250] ? __virt_addr_valid+0x183/0x530 [ 88.950076][ T6250] ? __virt_addr_valid+0x183/0x530 [ 88.955191][ T6250] print_report+0x169/0x550 [ 88.959699][ T6250] ? __virt_addr_valid+0x183/0x530 [ 88.964848][ T6250] ? __virt_addr_valid+0x183/0x530 [ 88.970011][ T6250] ? __virt_addr_valid+0x45f/0x530 [ 88.975132][ T6250] ? __phys_addr+0xba/0x170 [ 88.979656][ T6250] ? skb_release_data+0x103/0x8a0 [ 88.984706][ T6250] kasan_report+0x143/0x180 [ 88.989222][ T6250] ? skb_release_data+0x103/0x8a0 [ 88.994255][ T6250] kasan_check_range+0x282/0x290 [ 88.999221][ T6250] skb_release_data+0x103/0x8a0 [ 89.004085][ T6250] sk_skb_reason_drop+0x1c9/0x380 [ 89.009120][ T6250] skb_queue_purge_reason+0x3c5/0x500 [ 89.014593][ T6250] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 89.020502][ T6250] ? packet_release+0xa17/0xcd0 [ 89.025355][ T6250] ? packet_release+0xa7f/0xcd0 [ 89.030216][ T6250] packet_release+0xb15/0xcd0 [ 89.034904][ T6250] ? __pfx_packet_release+0x10/0x10 [ 89.040113][ T6250] ? down_write+0x18c/0x220 [ 89.044622][ T6250] ? __pfx_down_write+0x10/0x10 [ 89.049478][ T6250] sock_close+0xbc/0x240 [ 89.053730][ T6250] ? __pfx_sock_close+0x10/0x10 [ 89.058590][ T6250] __fput+0x23c/0xa50 [ 89.062578][ T6250] task_work_run+0x24f/0x310 [ 89.067180][ T6250] ? __pfx_task_work_run+0x10/0x10 [ 89.072302][ T6250] ? switch_task_namespaces+0xe4/0x110 [ 89.077783][ T6250] do_exit+0xa2f/0x28e0 [ 89.082038][ T6250] ? preempt_schedule_common+0x84/0xd0 [ 89.087506][ T6250] ? __pfx_do_exit+0x10/0x10 [ 89.092098][ T6250] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 89.098085][ T6250] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 89.104419][ T6250] ? preempt_schedule_thunk+0x1a/0x30 [ 89.109799][ T6250] do_group_exit+0x207/0x2c0 [ 89.114402][ T6250] __x64_sys_exit_group+0x3f/0x40 [ 89.119450][ T6250] x64_sys_call+0x26a8/0x26b0 [ 89.124148][ T6250] do_syscall_64+0xf3/0x230 [ 89.128678][ T6250] ? clear_bhb_loop+0x35/0x90 [ 89.133372][ T6250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.139292][ T6250] RIP: 0033:0x7f36d7f7fed9 [ 89.143727][ T6250] Code: Unable to access opcode bytes at 0x7f36d7f7feaf. [ 89.150745][ T6250] RSP: 002b:00007fff5e389f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 89.159165][ T6250] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f36d7f7fed9 [ 89.167139][ T6250] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.175107][ T6250] RBP: 00007fff5e389fec R08: 00007fff5e38a07f R09: 0000000000015669 [ 89.183099][ T6250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 89.191161][ T6250] R13: 0000000000015669 R14: 00000000000155da R15: 00007fff5e38a040 [ 89.199143][ T6250] [ 89.202163][ T6250] [ 89.204482][ T6250] Allocated by task 6256: [ 89.208808][ T6250] kasan_save_track+0x3f/0x80 [ 89.213496][ T6250] __kasan_slab_alloc+0x66/0x80 [ 89.218360][ T6250] kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 89.224282][ T6250] kmalloc_reserve+0xa8/0x2a0 [ 89.228977][ T6250] __alloc_skb+0x1f3/0x440 [ 89.233405][ T6250] alloc_skb_with_frags+0xc3/0x820 [ 89.238524][ T6250] sock_alloc_send_pskb+0x91a/0xa60 [ 89.243736][ T6250] packet_sendmsg+0x3fe8/0x6a40 [ 89.248599][ T6250] __sock_sendmsg+0x221/0x270 [ 89.253304][ T6250] __sys_sendto+0x363/0x4c0 [ 89.257819][ T6250] __x64_sys_sendto+0xde/0x100 [ 89.262590][ T6250] do_syscall_64+0xf3/0x230 [ 89.267117][ T6250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.273028][ T6250] [ 89.275354][ T6250] Freed by task 6250: [ 89.279333][ T6250] kasan_save_track+0x3f/0x80 [ 89.284025][ T6250] kasan_save_free_info+0x40/0x50 [ 89.289053][ T6250] __kasan_slab_free+0x59/0x70 [ 89.293823][ T6250] kmem_cache_free+0x195/0x410 [ 89.298599][ T6250] skb_release_data+0x677/0x8a0 [ 89.303469][ T6250] sk_skb_reason_drop+0x1c9/0x380 [ 89.308512][ T6250] skb_queue_purge_reason+0x3c5/0x500 [ 89.313900][ T6250] packet_release+0xb15/0xcd0 [ 89.318599][ T6250] sock_close+0xbc/0x240 [ 89.322865][ T6250] __fput+0x23c/0xa50 [ 89.326859][ T6250] task_work_run+0x24f/0x310 [ 89.331468][ T6250] do_exit+0xa2f/0x28e0 [ 89.335654][ T6250] do_group_exit+0x207/0x2c0 [ 89.340258][ T6250] __x64_sys_exit_group+0x3f/0x40 [ 89.345290][ T6250] x64_sys_call+0x26a8/0x26b0 [ 89.349970][ T6250] do_syscall_64+0xf3/0x230 [ 89.354487][ T6250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.360391][ T6250] [ 89.362712][ T6250] The buggy address belongs to the object at ffff8880309a8600 [ 89.362712][ T6250] which belongs to the cache skbuff_small_head of size 640 [ 89.377285][ T6250] The buggy address is located 352 bytes inside of [ 89.377285][ T6250] freed 640-byte region [ffff8880309a8600, ffff8880309a8880) [ 89.391080][ T6250] [ 89.393402][ T6250] The buggy address belongs to the physical page: [ 89.399818][ T6250] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x309a8 [ 89.408598][ T6250] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 89.417091][ T6250] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 89.424984][ T6250] page_type: f5(slab) [ 89.428974][ T6250] raw: 00fff00000000040 ffff88801e6cba00 ffffea0000cb2a00 dead000000000003 [ 89.437583][ T6250] raw: 0000000000000000 0000000000150015 00000001f5000000 0000000000000000 [ 89.446181][ T6250] head: 00fff00000000040 ffff88801e6cba00 ffffea0000cb2a00 dead000000000003 [ 89.454870][ T6250] head: 0000000000000000 0000000000150015 00000001f5000000 0000000000000000 [ 89.463560][ T6250] head: 00fff00000000002 ffffea0000c26a01 ffffffffffffffff 0000000000000000 [ 89.472240][ T6250] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 89.480916][ T6250] page dumped because: kasan: bad access detected [ 89.487345][ T6250] page_owner tracks the page as allocated [ 89.493058][ T6250] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5207, tgid 5207 (udevadm), ts 30160752686, free_ts 30113579340 [ 89.514004][ T6250] post_alloc_hook+0x1f3/0x230 [ 89.518794][ T6250] get_page_from_freelist+0x365c/0x37a0 [ 89.524348][ T6250] __alloc_pages_noprof+0x292/0x710 [ 89.529558][ T6250] alloc_pages_mpol_noprof+0x3e8/0x680 [ 89.535049][ T6250] alloc_slab_page+0x6a/0x140 [ 89.539761][ T6250] allocate_slab+0x5a/0x2f0 [ 89.544309][ T6250] ___slab_alloc+0xcd1/0x14b0 [ 89.548989][ T6250] __slab_alloc+0x58/0xa0 [ 89.553327][ T6250] kmem_cache_alloc_node_noprof+0x269/0x380 [ 89.559242][ T6250] kmalloc_reserve+0xa8/0x2a0 [ 89.563923][ T6250] __alloc_skb+0x1f3/0x440 [ 89.568351][ T6250] alloc_uevent_skb+0x74/0x230 [ 89.573112][ T6250] kobject_uevent_net_broadcast+0x2fd/0x580 [ 89.579010][ T6250] kobject_uevent_env+0x57d/0x8e0 [ 89.584037][ T6250] kobject_synth_uevent+0x4ef/0xae0 [ 89.589236][ T6250] store_uevent+0x16/0x30 [ 89.593561][ T6250] page last free pid 5217 tgid 5217 stack trace: [ 89.599879][ T6250] free_unref_page+0xdef/0x1130 [ 89.604725][ T6250] __put_partials+0xeb/0x130 [ 89.609324][ T6250] put_cpu_partial+0x17c/0x250 [ 89.614089][ T6250] __slab_free+0x2ea/0x3d0 [ 89.618609][ T6250] qlist_free_all+0x9a/0x140 [ 89.623202][ T6250] kasan_quarantine_reduce+0x14f/0x170 [ 89.628663][ T6250] __kasan_slab_alloc+0x23/0x80 [ 89.633519][ T6250] kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 89.639419][ T6250] __alloc_skb+0x1c3/0x440 [ 89.643835][ T6250] netlink_sendmsg+0x638/0xcb0 [ 89.648605][ T6250] __sock_sendmsg+0x221/0x270 [ 89.653294][ T6250] ____sys_sendmsg+0x52a/0x7e0 [ 89.658059][ T6250] __sys_sendmsg+0x269/0x350 [ 89.662655][ T6250] do_syscall_64+0xf3/0x230 [ 89.667170][ T6250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.673071][ T6250] [ 89.675392][ T6250] Memory state around the buggy address: [ 89.681015][ T6250] ffff8880309a8600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.689071][ T6250] ffff8880309a8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.697126][ T6250] >ffff8880309a8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.705178][ T6250] ^ [ 89.712368][ T6250] ffff8880309a8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.720429][ T6250] ffff8880309a8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.728482][ T6250] ================================================================== [ 89.789003][ T6274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.798953][ T6250] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 89.806178][ T6250] CPU: 1 UID: 0 PID: 6250 Comm: syz.2.99 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 89.816679][ T6250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 89.826736][ T6250] Call Trace: [ 89.830016][ T6250] [ 89.832947][ T6250] dump_stack_lvl+0x241/0x360 [ 89.837640][ T6250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.842848][ T6250] ? __pfx__printk+0x10/0x10 [ 89.847457][ T6250] ? preempt_schedule+0xe1/0xf0 [ 89.852318][ T6250] ? vscnprintf+0x5d/0x90 [ 89.856660][ T6250] panic+0x349/0x880 [ 89.860563][ T6250] ? check_panic_on_warn+0x21/0xb0 [ 89.865681][ T6250] ? __pfx_panic+0x10/0x10 [ 89.870104][ T6250] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 89.876094][ T6250] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 89.882427][ T6250] ? print_report+0x502/0x550 [ 89.887113][ T6250] check_panic_on_warn+0x86/0xb0 [ 89.892060][ T6250] ? skb_release_data+0x103/0x8a0 [ 89.897099][ T6250] end_report+0x77/0x160 [ 89.901352][ T6250] kasan_report+0x154/0x180 [ 89.905885][ T6250] ? skb_release_data+0x103/0x8a0 [ 89.910935][ T6250] kasan_check_range+0x282/0x290 [ 89.915885][ T6250] skb_release_data+0x103/0x8a0 [ 89.920761][ T6250] sk_skb_reason_drop+0x1c9/0x380 [ 89.925791][ T6250] skb_queue_purge_reason+0x3c5/0x500 [ 89.931178][ T6250] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 89.937091][ T6250] ? packet_release+0xa17/0xcd0 [ 89.941943][ T6250] ? packet_release+0xa7f/0xcd0 [ 89.946805][ T6250] packet_release+0xb15/0xcd0 [ 89.951487][ T6250] ? __pfx_packet_release+0x10/0x10 [ 89.956715][ T6250] ? down_write+0x18c/0x220 [ 89.961223][ T6250] ? __pfx_down_write+0x10/0x10 [ 89.966081][ T6250] sock_close+0xbc/0x240 [ 89.970332][ T6250] ? __pfx_sock_close+0x10/0x10 [ 89.975190][ T6250] __fput+0x23c/0xa50 [ 89.979180][ T6250] task_work_run+0x24f/0x310 [ 89.983785][ T6250] ? __pfx_task_work_run+0x10/0x10 [ 89.988905][ T6250] ? switch_task_namespaces+0xe4/0x110 [ 89.994379][ T6250] do_exit+0xa2f/0x28e0 [ 89.998542][ T6250] ? preempt_schedule_common+0x84/0xd0 [ 90.004042][ T6250] ? __pfx_do_exit+0x10/0x10 [ 90.008636][ T6250] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 90.014639][ T6250] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 90.020988][ T6250] ? preempt_schedule_thunk+0x1a/0x30 [ 90.026373][ T6250] do_group_exit+0x207/0x2c0 [ 90.030972][ T6250] __x64_sys_exit_group+0x3f/0x40 [ 90.036012][ T6250] x64_sys_call+0x26a8/0x26b0 [ 90.040715][ T6250] do_syscall_64+0xf3/0x230 [ 90.045235][ T6250] ? clear_bhb_loop+0x35/0x90 [ 90.049937][ T6250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.055845][ T6250] RIP: 0033:0x7f36d7f7fed9 [ 90.060260][ T6250] Code: Unable to access opcode bytes at 0x7f36d7f7feaf. [ 90.067275][ T6250] RSP: 002b:00007fff5e389f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 90.075702][ T6250] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f36d7f7fed9 [ 90.083683][ T6250] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.091661][ T6250] RBP: 00007fff5e389fec R08: 00007fff5e38a07f R09: 0000000000015669 [ 90.099640][ T6250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 90.107620][ T6250] R13: 0000000000015669 R14: 00000000000155da R15: 00007fff5e38a040 [ 90.115600][ T6250] [ 90.118937][ T6250] Kernel Offset: disabled [ 90.123271][ T6250] Rebooting in 86400 seconds..