last executing test programs: 4.129352759s ago: executing program 1 (id=403): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x8, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRES8, @ANYBLOB, @ANYRESHEX], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x8, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRES8, @ANYBLOB, @ANYRESHEX], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r3, r3, r3, r3, 0xffffffffffffffff, r3], 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000020400000000000000000000010500000008000000000000000000000300000000010000000200000004000020000000000000000b"], 0x0, 0x5a}, 0x28) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 3.391708962s ago: executing program 1 (id=408): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000700000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000aa3c040000020000000a000200"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.251499957s ago: executing program 3 (id=410): socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0xffffffe1}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/159, 0x9f}, {&(0x7f0000001500)=""/155, 0x9b}], 0x3}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0xab}], 0x6, 0x2000, 0x0) r1 = socket(0x11, 0x3, 0x1000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x100000000}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0xff}]}}}]}, 0x48}}, 0x2005044) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x10000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@private1}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(r2, r5, 0x0, 0x7feff000) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0) 3.127459905s ago: executing program 4 (id=412): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0xffffffe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}, @TCA_POLICE_TBF={0xf, 0x1, {0x0, 0x256da761e0644cfa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xffff, 0xffffc3fd}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0xfffc, @local}]}, &(0x7f0000000440)=0x10) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) (async) sendmsg$can_bcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="050000008b0c"], 0x80}}, 0x4) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2, 0x1}, &(0x7f0000000100)=0x8) (async) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000500)=""/230, 0xe6}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000000340)=""/159, 0x9f}, {&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f00000000c0)=""/81, 0x51}], 0x9}, 0xf}], 0x1, 0x40010041, 0x0) 3.12689271s ago: executing program 1 (id=413): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_newvlan={0x48, 0x70, 0x200, 0x6, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x48, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3c, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x42}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x0, @none, 0x7, 0x1}, 0xe) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r3) r4 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000070}, 0x8000) sendmmsg$sock(r2, &(0x7f00000008c0)=[{{&(0x7f0000000380)=@phonet={0x23, 0x0, 0xb7, 0xc}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000400)="fe6e2d7b4f3e410f85", 0x9}, {&(0x7f0000000440)="ebd627276224a5702bf0ad1d749472a54504eea014bd3e533d14d780f9188284071411875e956af12c26c1841b697dfdae12716c8b95bba5baa4d6670b1b965505bb1999256ebeeb87b3e8ac6a12c2b6b7c52be588c0558d1a2970fd6774ecee11a4b37b058454509e99ebc19964b724cf90627d982e7e5277d9d00d3fe104cee6d8fd8c54f8e80349a9f0c3eaf1ae827af745b94bc4034111f39cdce8171e0d92e90717d2c77f707250e210c48eafa1015a88db731eae17a8fd36ecd754f5868ec816ee39737dd3a83d9a675dee7a0c9c1293e543c0", 0xd6}, {&(0x7f0000000540)="d0e9a1e5d8e915e2beebc796c7a512a694f2ca2c7d423d7c7b69b9a536d92c5b2c136cefa435667be4988877433cf8c14cdbe6204f72230d5597adadad3da8ef4abffe95f9cbffbf0997a69e9e2443ada17df1ea678ac2cb1c46cca2521ee3a3094d289389713a8746faaf229c23b90248d6242f8f316474d1adc27fc1f9af0dfbf3ffb2cea189fd656c580ba2ce0c933534d5c8f87b30df8601eb81e4ac6a6541b2cb5d4ce0f4", 0xa7}, {&(0x7f0000000600)="4ac89b91", 0x4}, {&(0x7f0000000640)="920624257da9a7d4e383fd68156f34447dcadc3358025a53685c90957401d5bfef57b0b90cb549c364011dcebaa5223a9c2cec055c97e1d0f25934f01ebe4da5af1c1b68f65a70dee816238b88da14893e2a05aac4997b66b35301a58050af20cf98c638bc5cdddd1b32c7bc1dd17f6b2744dc19a04167d51004cb79196a1c2dc97feeb487bb5e43e913fd277c5d4cc088646aeb158e8e1f171b242207a5b7a25b2661d7b507d8e2bf0484636b", 0xad}, {&(0x7f0000000700)="8a0a58c2abee23aa44b3c52768b535d3be49cc33840c2c1f4ff91e4f1873f743575bf6d2661d3b9bf810", 0x2a}, {&(0x7f0000000740)="25a0bb1968932574e78eec0580164af60b216bb52eee4a7d8344f00d6080ebd6d99026c5ce35da4a8e0715ce90df84404b", 0x31}, {&(0x7f0000000780)="9d21bb7a8365c16d09f1bc549d231df0e7dd9fea10", 0x15}], 0x8, &(0x7f0000000840)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x607ac5ee}}, @timestamping={{0x14, 0x1, 0x25, 0x21b}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x60}}], 0x1, 0x4000040) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r4) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000000dc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000980)={0x3e4, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xa01, 0x26}}}}, [@NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x25c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xc}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xb}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "ed019a00f1c5"}, @NL80211_NAN_FUNC_SRF={0x228, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}]}, @NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x8}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x80}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x144, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x130, 0xd, 0x0, 0x1, [{0x9c, 0x0, "eb383e891f3707af6388ff0d08e32ed3f4e18fe11e806dd761e20fed5d57dc671ed42f1b2ea4b37e1a2382dc156b9e35626f087a9ded4bfbba17b6499fd4a2a84ee970d7a9f9e8029df597b27c5241230ceacd915a5bb6fca99d2bf130fab3eb0e7e26886ce18f1e92d9b817a07f507511629d6062a81c381f7792a6e9ea796dd73fea529f1afb1ff319e71e20578909c84dc0dd00f7dbe3"}, {0x48, 0x0, "e60853e7e61912a43efab4776fa58a4e1c98957b8da3a48d44dce76101c4822840079e9471f4e1d22d8832405867524a80adf9ccad6f77f78e2d8cf0bfa0f6ce89ec1ca1"}, {0x47, 0x0, "865e1385400f3e240fb72f18e03e721bc65794c05b2dc8684b4c85312c2c9bd0e217bab38ad91f2181df3dd9f1f71db9813e43c748f6929c6d1c41bca65966e24bf3f3"}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x15}, 0x4004) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x70, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000f40), 0x0, &(0x7f0000000f80)=""/202, 0xca}, 0x7}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000001080)=""/72, 0x48}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/94, 0x5e}, {&(0x7f0000002180)=""/180, 0xb4}, {&(0x7f0000002240)=""/21, 0x15}, {&(0x7f0000002280)=""/151, 0x97}, {&(0x7f0000002340)=""/94, 0x5e}], 0x7, &(0x7f0000002440)=""/152, 0x98}, 0x8}], 0x2, 0x2, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000002580)={0x2, 0x1, 0x12}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000025c0), 0x141080, 0x0) write$tun(r7, &(0x7f0000002600)={@val={0x0, 0x9300}, @void, @mpls={[{0x3b}], @ipv4=@tipc={{0x1a, 0x4, 0x1, 0x7, 0x9d, 0x68, 0x0, 0x4, 0x6, 0x0, @private=0xa010100, @remote, {[@ssrr={0x89, 0x7, 0x2c, [@multicast2]}, @rr={0x7, 0x13, 0x43, [@local, @remote, @loopback, @loopback]}, @ssrr={0x89, 0x2b, 0x75, [@rand_addr=0x64010100, @multicast2, @multicast2, @multicast1, @broadcast, @multicast1, @empty, @rand_addr=0x64010100, @loopback, @private=0xa010100]}, @end, @timestamp_addr={0x44, 0xc, 0x8b, 0x1, 0x1, [{@multicast2, 0x7}]}]}}, @payload_mcast={{{{{{0x35, 0x0, 0x1, 0x0, 0x0, 0xb, 0x3, 0x2, 0x8, 0x0, 0x0, 0x9, 0x4, 0x1, 0xfff7, 0xfffb, 0x4, 0x4e22, 0x4e22}, 0x4, 0x1}, 0x2, 0x3}, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}, 0xa5) getsockopt$sock_buf(r2, 0x1, 0x37, &(0x7f00000026c0)=""/236, &(0x7f00000027c0)=0xec) writev(r4, &(0x7f0000002a80)=[{&(0x7f0000002800)="06cd0545b70f268a200ae86a29746087ff254e33557d2e679ec54204472ad8f371a37a971e18ed6a8b18294d86dd95351d5c7bd3a39873efed3f0361034131db2e3c96482dda63c86d7e8e2d5bd2547e4f4b06a937cb587153c24f6b017adcf65896ead888cc47f07e9c398184138c01e526c2fa03189f6989477c6e0b6cd5428408d7fc5cd0a90bbbe4f5d2457c6acd2cdae3bfc1c869b430b12128e300761f1c9117ff27c4", 0xa6}, {&(0x7f00000028c0)="3eed5db7f404bbff850224f0e76da43200200367895c940c487e365ce02c110d47d81358c6504e15117626a55f15a699fde627271a8a11b0c57f970bce84511adc31511e8e63aa40fee90811f3d301769cb4bfd9f6c80186ae5c9b56b5f36a3cc5d2744d13215dade2336fda848606125377ba7bbb9c455dc93e9c53685c77b53687d3ef83046d398fa47ff629675d8548774e370a4a29732d14b396f4a5e92f977dbf51cb8ec5561574bbdf45e427bc6c1c73954546eb9e9a9455f3d8d1682b4ffb72a38f5d608912168bb7bbaaee52397b12a250504b739b2dcb11d6de7c", 0xdf}, {&(0x7f00000029c0)="a56edabc55512367a35548f5d35456f9fcde8ef2432d8659aca56eb7a65cb664", 0x20}, {&(0x7f0000002a00)="6c1fc3719c024853b297393aaaaf39c54bade0c4457278d54bf398208db26afd0c650157d462d59593a2e9bebd4d7c0584", 0x31}, {&(0x7f0000002a40)="206f46ccf0312eb41c", 0x9}], 0x5) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r7, 0x80286722, &(0x7f0000002c00)={&(0x7f0000002b00)=""/240, 0xf0, 0x8, 0x8}) r8 = accept4$inet6(0xffffffffffffffff, &(0x7f0000002c40)={0xa, 0x0, 0x0, @empty}, &(0x7f0000002c80)=0x1c, 0x80800) ioctl$EXT4_IOC_SETFSUUID(r8, 0x4008662c, &(0x7f0000002cc0)={0x10, 0x0, "0c2d0203258a73a4f4bb7d874cc5dc01"}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f0000002d00), 0x2) epoll_create1(0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000002e40)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x20, 0x140f, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4041}, 0xdd93d22e2f12284b) 2.655440042s ago: executing program 4 (id=416): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000006c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x1, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x2}}}}}}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x24, r10, 0x301, 0x0, 0x25dfdbff, {{0x5}, {@val={0x8, 0x1, 0x7c}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044041}, 0x20000000) 2.395082152s ago: executing program 2 (id=419): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x4b, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x20, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xfff3}, {0x10, 0xffe0}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000004088eb0200000008000300", @ANYRES32=r4, @ANYBLOB="0800a0009e090000080027000200000008002600a809"], 0x3c}}, 0x80) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r7) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r9, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x4000044) r10 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r10, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r10, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)={0x1150, r9, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x1110, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1004, 0x0, "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"}, @NL80211_BAND_6GHZ={0xbc, 0x3, "34acd1856a017650c949459b9776921c07a09f1c27cea8638a10841181866133de6cc6bcc26b917c4bda7f518a077940eb4410e1edf25bfccef3d0ec1b12a483280d2a28a5f6f033280785aa6cd99667215aaaf97d700253b8489285f063e1ab4a7aab5ae05efd23d20bbf483819ebc68561f3042d1c80e6460e3dc266a2ffdc64dca1b4788bb0990f6eea5602dd521daa2dcfd397f73a0fa8022f7db8479c30fa840023c8b3636f3b4e6f0c4ab99ef0fdda4d16c64850b9"}, @NL80211_BAND_5GHZ={0x4b, 0x1, "3d43a5286a8b3b17becf4c3385c435d9106b154b11b9b3345056e691a12b3eac45fa891064a68412769aa1934ca2082af652471782ee85d509dafa368137226403dc4554722254"}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x7}}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x9299}]}]}, 0x1150}, 0x1, 0x0, 0x0, 0x24000008}, 0x800) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001800110101000000000000000a0080000002000800000000040008"], 0x20}, 0x1, 0x0, 0x0, 0x44845}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x8, 0x1, 0x73a0, 0x2}, {0x6, 0x1, 0x3, 0x2, 0x7, 0x9}, 0xdd, 0x5, 0x1e8c}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa668cd67f58edc68}, @TCA_TBF_BURST={0x8, 0x6, 0x2}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.279987359s ago: executing program 3 (id=421): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x41, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sendmmsg$inet6(r2, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)='y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040), 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cc, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r5, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000440)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008c00000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r3, 0x400454ce, 0x9) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="000008050201040002000200080000aab0be74f13c00018713b4f09fcff85e3659c06b790ec64349b46cff32cc9a00db3dfb5b85ea8aaf983e7b1cb2a3dedeacdfe976e50dbd00edbb3a0ba8ab5f310e0ec42a0e46db37280c9e131ac846c577e5b8dd943a4f39c4437f8a5eab0763672238b02a74381a11cc188f6375b046961b1ecf1bb686191c0bb657fe3eaa51"], 0x7b) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 2.232648574s ago: executing program 0 (id=422): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000024000103f2ffffffffffffff0100a2000400ae"], 0x18}}, 0x4000) recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f0000004740)=""/4090, 0xffa}, {&(0x7f00000001c0)=""/99, 0x63}], 0x3}, 0x4}, {{0x0, 0x0, 0x0}, 0xf}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000003740)=""/4090, 0xffa}, {&(0x7f0000001740)=""/4085, 0xff5}], 0x2}, 0x8}], 0x4000000000002cf, 0x30002, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x8}}}}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}}, 0x0) 2.083548253s ago: executing program 1 (id=423): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000002000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000aa3c040000020000000a000200"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.046761179s ago: executing program 4 (id=424): socket$kcm(0x29, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x401, 0x4) socket$inet(0x2, 0x3, 0x8d) (async) socket$inet(0x2, 0x3, 0x8d) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002ef1c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.976079832s ago: executing program 2 (id=425): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000180000001801000020ff642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000ff000000000099308d35a2c9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0xff02, 0x0) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000180)={0x8, 'wg0\x00', {'ipvlan1\x00'}, 0x7}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x40, 0x8, 0x80000000, 0x3, {{0x2e, 0x4, 0x1, 0xf, 0xb8, 0x64, 0x0, 0x8, 0x4, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x14, 0xdb, 0x0, 0x1, [0xffffffff, 0xc07, 0x7, 0x1]}, @end, @lsrr={0x83, 0x23, 0xcf, [@rand_addr=0x64010100, @rand_addr=0x64010100, @local, @multicast2, @multicast1, @remote, @private=0xa010100, @remote]}, @generic={0x89, 0x12, "011004280bdf3449b586b7015c5fae5c"}, @lsrr={0x83, 0x23, 0x8e, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @local, @loopback]}, @generic={0x44, 0xf, "eaf81141aad10af3978394b520"}, @ssrr={0x89, 0x17, 0xb0, [@remote, @local, @dev={0xac, 0x14, 0x14, 0x32}, @remote, @local]}, @generic={0x86, 0xe, "cb715866fb8a7a6e5f77542f"}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xa, &(0x7f0000000340)=@raw=[@call={0x85, 0x0, 0x0, 0x1b}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_fd={0x18, 0xa, 0x1, 0x0, r4}, @map_fd={0x18, 0x6, 0x1, 0x0, r4}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r5, @sched_cls, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.911198074s ago: executing program 1 (id=426): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x8010) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$PPPIOCGUNIT(r5, 0x80047456, &(0x7f0000000200)) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f0000000240)=@ccm_128={{0x304}, "44713dff48293e35", "a2924710c0300fd0aafeff155c41fdeb", "90a8f938", "ead2be9357b2b984"}, 0x28) getsockname$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, &(0x7f00000002c0)=0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x10}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) ioctl(r7, 0x80000000, &(0x7f0000000440)="3a90cbfae742743db5f95c745d1a1b8a83c69086433ed1f828b1f2403aef2c973e6499b3d913ad12701ab8c32df0e7bf475e36cc38c0e4fdfeaf8a92344e92cb1a519d843e1ad26ea78d251f6f8ee9") r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r3) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x408004}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xc4, r8, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0xa4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x29}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa38f}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9c523d27c25581cb}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80c4}, 0x24000000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000700), r0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000740)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r9, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x88, r10, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x2e, 0x14, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, '\xff\xff\xff\xff\xff\xff'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_FIRMWARE_NAME={0xe, 0x14, 'NLBL_MGMT\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '\xf9/@'}]}, 0x88}, 0x1, 0x0, 0x0, 0x401}, 0x4010) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000008c0)={0x0}, &(0x7f0000000900)=0xc) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000940)=r12) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000980)={'dvmrp0\x00'}) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r5) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x851ff67e74854a0b}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r13, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x5, 0x59101235, 0x2, 0x5}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0xc000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b00), r0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x40, r14, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x101, 0x43}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x110}, 0x8111) 1.832860694s ago: executing program 1 (id=427): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) (async) clock_gettime(0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0x2b0a, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x4, 0x8}, 0x0, 0x0, 0x0, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xc, 0x13012, r3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r6, @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x200400b0) (async) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048083) 1.758666005s ago: executing program 3 (id=428): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88810100ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) shutdown(r0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000040)=0x51, 0x4) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="4400000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c000280050001000600000008000a00", @ANYRES32], 0x44}}, 0x0) 1.703403663s ago: executing program 0 (id=429): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002000000085000000a000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002000000085000000a000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r1 = socket(0x2, 0x3, 0xff) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="07db2716b09b314030d976dc3808284ff464832583f72bf3bea7408f46", 0x1d}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="14"], 0x18}}], 0x2, 0x8c4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a2131677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x30, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)={0x50, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private1}}}]}]}, 0x50}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)={0x50, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private1}}}]}]}, 0x50}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000400000000000007000000000300000000"], 0x0, 0x44}, 0x28) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r7, &(0x7f0000002380)=[{&(0x7f0000002180)=""/117, 0x75}], 0x1) connect$unix(r6, &(0x7f0000000140)=@abs={0x1}, 0x6e) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x104, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x20000000, 0xebb, 0x1, 0x2, {0x3, 0x2, 0x3, 0x2, 0x6}, {0xf3, 0x1, 0xfffb, 0x6f4, 0x6, 0x6}, 0x6, 0x0, 0xfafd}}]}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0xc040) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.703061655s ago: executing program 4 (id=430): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x14, 0x2b, 0xb, 0x70bd29, 0x40000, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080c40) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0xcf8b, 0x8002, 0x0, 0xfffffff9}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x40000d0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r6) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r9, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r10, 0x0, 0x7c, 0x40800, &(0x7f0000000100)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000180)=0x2, 0x2) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x79}, 0x8) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x8, 0xffff}, {0xe, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) 1.585843743s ago: executing program 2 (id=431): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000006000000850000002e0000008500000007000000949c09cb53e57cd01a7698b995000000000000009e345c13cc73a9fbcd7200077405574a250ca11ab8189aa7bd63e74cf457bf1293de8f1c8bf08c5ff9314e81b57b179aaeffcfaf26b25a18fbfa79f0e69738592bc8832ba8648147a8ce92ad66c16d9781e628202e55e6e41286bb1e682540c48d85a65337ed63ac53de141a78dcf83eb0e0576bf8a1f36e8f472d9a1237892a3cb03cebdcf25f5dd176538f4301811f26ca0a9cad79c57ddcfbd6c7e0e4a86b7b219388cb447ddd84a90a78eff5d2de1d2c1fa873c928fe845aec1da18b14904e6dbb764fc5d8bacca92da0a7ced51cd4f1541c51104a440e8795e1d26cc051d538f62552e63cc3a245c984d545956c742c2c6e12075a"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYRESOCT=r2], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) bind$inet6(r10, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r14, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8004840}, 0x4008844) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r13) bind$inet6(r12, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r12, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r10, 0x6) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r9}, 0xc) socket$kcm(0x10, 0x2, 0x0) 1.535134126s ago: executing program 4 (id=432): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000580)='kfree\x00', r1}, 0x18) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) recvmmsg(r0, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000006080)=""/4074, 0xfea}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f00000001c0)=""/54, 0x36}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x20008}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000780)=""/146, 0x92}, {&(0x7f0000000840)=""/158, 0x9e}, {&(0x7f0000000900)=""/220, 0xdc}, {&(0x7f0000000a00)=""/11, 0xb}, {&(0x7f0000000a40)=""/80, 0x50}, {&(0x7f0000000b40)=""/97, 0x61}, {&(0x7f0000000bc0)=""/123, 0x7b}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/171, 0xab}], 0x9, &(0x7f0000003e00)=""/4096, 0x1000}, 0x9}, {{0x0, 0x0, 0x0}, 0xb68d}, {{&(0x7f0000004ec0)=@generic, 0x80, &(0x7f0000005180), 0x0, &(0x7f00000051c0)=""/247, 0xf7}, 0x6}], 0xa, 0x40010000, 0x0) 1.055380581s ago: executing program 4 (id=433): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10) unshare(0x62070200) gettid() socket$key(0xf, 0x3, 0x2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(r4, &(0x7f0000002f80)=[{{&(0x7f0000000200)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000000400)=""/68, 0x44}, {&(0x7f0000000580)=""/216, 0xd8}], 0x4, &(0x7f0000000300)=""/63, 0x3f}, 0xfffffff8}, {{&(0x7f0000000680)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000700)=""/238, 0xee}, {&(0x7f0000000800)=""/134, 0x86}, {&(0x7f00000008c0)=""/217, 0xd9}, {&(0x7f00000009c0)=""/39, 0x27}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/23, 0x17}], 0x6, &(0x7f0000001ac0)=""/114, 0x72}}, {{&(0x7f0000001b40)=@caif=@dgm, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001bc0)=""/22, 0x16}, {&(0x7f0000001c00)=""/12, 0xc}, {&(0x7f0000001c40)=""/1, 0x1}, {&(0x7f0000001c80)=""/75, 0x4b}], 0x4}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001d40)=""/17, 0x11}, {&(0x7f0000001d80)=""/243, 0xf3}, {&(0x7f0000001e80)=""/149, 0x95}], 0x3, &(0x7f0000001f80)=""/4096, 0x1000}, 0x5}], 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbcbbbbbbbbb4aa468739b8508060001080006040001da82ce4f59beaaaaaaaaaaaa0a010100573303"], 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207b8b29440b4073e00000200000000001a0000000000"], 0x10}}, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) writev(0xffffffffffffffff, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) close(0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 1.022400798s ago: executing program 3 (id=434): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='////\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97\x00\x00\x00\x00'}, 0x30) r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00005689eb09112dbd930000003bbe4530e396a7c4f066007aa79ce9dbb9b9d6798febdcebf104c181147b310a78341258f784be862856ac35150416504086c1c44ef440db62fb2e33", @ANYBLOB="05a58a23656440b4d1899d4d3a6506880e3411bf33273f500d653ea0ebbffe25def1a951d8052a8598629e1a63c376e3868fbd29bb7e73cd01d9a9b3aade3c539d76cc9ccc4fc22b1e852adb9d260d2097626fee", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\r=\x00'/28], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r2, 0x1, 0x34, &(0x7f0000000040), 0x4) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1b, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000005b10000000000000000000000010000c744342a29ecbd44ee4804e8d09c", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYRESOCT=r0, @ANYBLOB="b6c016d1ac867fc9c10496dec34934f4062d8357c63f901f9d3efc37e1b6ebe292b3abb622ef20a1e39a1673ade06952efd1111f4298d5bd0da9e74bceec0833f81feb8d174be9c2098e11aa67d4c1cb7d5e249d00707ce4cc85cb5b55b1ca3d4b5ef6bc55b8ccd3d1cb734e80f06f7d45229e62cb0cfb077e0ecd8b2c72ab5bd3e11ec522b503cc1b4524edca7276e3ba1f7e0530d97946d13a2267af6256d3f790b9", @ANYRES32=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) (async) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async) listen(r0, 0x9) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1f016a3ca40dd0b815220a1f74cf6accd5b645b0b4ed55050311c1491e1dfb3b", 0x20}, {&(0x7f0000000140)="78e4f9668e8fcede7837f5812c5d5695c94062b963542c9c6abb511e838927ecbc0de099fa5f41ed499b154adb0f53b5b18d9d90b501c942c11b40f852547e59c05f94a1adddb5a8e82d26d55d1f26099af29b486b85a58e00f2a55477d727f6308f9203948f8daef812dee5131da56fb163742601627a71441930161ca4ccbba98820bd78a437abdf7825fb1fc457f362e7cfb7da777bdba4395c38fc8b30d7e81f8d7338011e34f5133de525aaa2183f05ace7b8ad3dbd2095d4bb32184f7179fb814a5fd2c7", 0xc7}, {&(0x7f0000000480)="1f67a88935bf576f3db1d9b683d8140c65baaacb7fc476dbcb40561629f02fc3fe345a8021f228b559ccab473ca4cbc511d78039943cdd58903cf1fb17570d58a4cf9353c95ceb906efb3f20fcf0dca2b9dbf6f3670fb637b16b7f0db690f64b00a2a78380af05ed529c0a3b3bbc71eab8a2b6c44289c1c131ddb61deb545e5a3471ce5ea114de1b1cf19f69830f9f04c4071e7f5a63e390cc40a1620699c405cdc7f480a32073cc47aa253e2f7754fa672c3256176cf76489e6c27da9d2033c1b25b2ec114eeb35cc595a35193dab866957b0343cf1866c056a516602580c2a2d1dbee96b833ec6", 0xe8}, {&(0x7f0000000380)="af7e0d8399b17f68f40c19067c0673963acc5c719a02990e81d1287f90687bd2cadb4f1f380b6594b9e110794c0e592114ce56aebb148f278f49c84b4489773ec3815e860210f87fa3fd035af301382c5964175dff2b479c5e51bf1089bfd0efa8c5e88c1fd7408c443e6e86985b3e83556e4b6185e5541e7a865c167594cc69c27bf323bac521c2a8eebd5313be0ab22d465a30415484786d0af33daf1737e1c8de34727c556f4031251af9d882ab816e48fb", 0xb3}], 0x4) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) r5 = accept4$unix(r0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0}, &(0x7f0000000c40)=0xc) (rerun: 32) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000011c0)) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r3, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000940)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000980)=[0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x29, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) (async, rerun: 32) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) (rerun: 32) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) (async, rerun: 64) ioctl$SIOCAX25ADDUID(r10, 0x89e1, &(0x7f0000000740)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r8}) (async, rerun: 64) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000700)=0x0) sendmsg$nl_xfrm(r7, &(0x7f00000010c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001480)=ANY=[@ANYBLOB="540300001600000427bf7000fddbdf25ac141418000000000000000000000000fe8000000000000000000000000000bb4e2100004e20d8800a00200088000000", @ANYRES32=0x0, @ANYRES32=r12, @ANYBLOB="ffffffff000000000000000000000000000004d42b0000007f00000100000000000000000000000000000000000006000100000000000000810000000000000007000000000000000900000000000000000001000000000009000000000000000300000000000000020000000000000001000000000000000600000000000000ff7f000000000000f9ffffff090000000800000026bd7000043500000a000004120000000000000003000000d10100000c001c00", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r9, @ANYRES32=r11, @ANYBLOB="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"/324], 0x354}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r13) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="01002bbd7000fddbdf250600000006000b00240000001a32c003e25159e32e1c2e67478c2af2b4ea737f4616da3ecab3650d4736f34ea47094466b1fca15328acb2415df2f50fa8ce68d500668a2a4aec2c3ebac584c9a6e467112ca278e97297b6d5c698757ab0ec57dcc47ae3d3cadcb43f99349742ff938c30f0a9d9b797d4d0352268c9a34285a7551920b09182090a71717ca900750527487d4ee5cf976db3cc79f612adf59e1e8437cfcd9983f4847e595b43c226f2be96b29ca4cca22f4592852a4acddae74fa48bf9357c882edeca64ecedbd63ad8c5983f86fbf3c05a3235fcb96532e4a4cbde49828ae95c094b6eaeb41913594faf17fae645cfbe2b1043308127a9c3aa8b63fb42fb163c36f14b48e99b23ce6d1305a7c8c9d3d13cfb1ded3ed565bf115fd583e667c147b420755725caae2d67f644535a19684658baad6471f0d4edf9f3f79b3a240346000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x34008014}, 0x40004) (async) sendto$packet(r4, &(0x7f0000000600)="5f0efc3e1792a50972ff07000000000000804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0x44, 0x20004000, 0x0, 0x0) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0x4a}], 0x1}, 0x10000) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500005c00000000001190780000000000e2ff0000004e220048907803000000020000006944423b850bc9fa94173e6335a79230de73d6f32bfd49b77c2d01a8ac6334c2bd5c341f44cbb52d9d51c500017cd89c9cf84a0b6ec3606f3e97d850427a78e750"], 0x0) 1.018316171s ago: executing program 2 (id=435): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) close(0x3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) write$tun(r6, &(0x7f0000000100)={@void, @void, @arp=@generic={0x7, 0x8884, 0x6, 0x0, 0xa, @empty, "", @empty, "549f217ff019b32a6cdf0fd4b9"}}, 0x21) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r2}, 0xc) r7 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x58, 0x1402, 0x2, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r7}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008881}, 0x4000010) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x1b, &(0x7f0000000440)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9c}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={r10, r11/1000+10000}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)}}], 0x1, 0x0) 919.609023ms ago: executing program 0 (id=436): vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) socketpair(0x2c, 0x800, 0x5ec, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCAX25OPTRT(r3, 0x89e7, &(0x7f0000000100)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, 0x56}) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 889.615275ms ago: executing program 3 (id=437): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00000001000000328bd700000000000ac1e4101000000000000000000dfadbbf9996e3f31a3c529f2c8decb0c000000ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000020010000000000000000000000000001ff06ffffffffffff0000000000000000080000000000000001000000d5"], 0xf0}, 0x1, 0x0, 0x0, 0xc4}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x8917, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="feffffff54000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="010002006401010000000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000002c0)={@private0, r6}, 0x14) connect(r4, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x34, &(0x7f00000001c0), 0xfd12) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 656.074169ms ago: executing program 3 (id=438): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000e00000000000000000000008500000050000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80300001600010000000100fcffffff0a01010000000000000000000000000000000000000000000000ffff000000000000000000000000000080201d000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000033000000ac1414450000000000000000000000000000000000000000010000000000000000000000000000000000000000000000fffffffffffffffff1ffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000feffffffffffffff00000000000000009607000000000000043d000000000000ef0000000000000000000000060000002c00130020010000000000000000000000000002ac141430000000000000000000000000000000000a000000e40006007f000001000000000000000000000000ff0100000000000000000000000000014e2303ff4e24000e0200200088000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x3c8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=r5, @ANYBLOB="000000000000000014004000000001006261746164760000040002800c001a"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002000010300000000000000000200000000000000000000000800060000000200"], 0x24}}, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000200)="5805ae7f2767f19eac211d901d4de781ac26c18b4667693800f42d61ef4a9ef3f942824d519e80369be53ff83f6946981211ea715e44dfb6ee888fa3c3b80a9dba5a1cccf36e8dc564542d99e793d7800aa65caf3b69864d4b55232c5f54dba9c680f78737b9cdc4275c9ee17ccbd82532f412db20214ee0d60d30795f452d4611eaad", 0x83, 0x4, &(0x7f00000000c0)={0xa, 0x4e24, 0x1, @private0, 0x5}, 0x1c) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x60) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x37, 0x9d, 0x62}, 0x2c) r9 = socket$inet6(0x10, 0x3, 0x0) write(r9, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="9135de3ef4f16fc883835000f0ffffff"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000000}, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 515.561285ms ago: executing program 0 (id=439): socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xba, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x6f, 0x0, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0x8, "6580a5e97612"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 453.274828ms ago: executing program 2 (id=440): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0xdd, "2108365506f585ef98da538f662d34a22efad2c00b6fed7318158c590966944397580409abdf403a173fd726be9b1e6ad6b86c0513350709576aa3f8f33fbb18bfa6afba42da1728a9b7e9fb6d7202a100060b3032a2b25f13531daf7bec9899d073e6d28d73792db4f25e9c2adafe5468b952b1422899b33ae06c799a60c2528f455192c88493dc49193cd3a0d220b06453133c9dbdf569650e34bc1ff53809ec9a317fd7ceae234272fa8e1392ac0f8fa40f3e37e023e37e6fc2340bb3207018101d14d886398335f04968c1985569f0c6708a545f1c3cac49cfbda2"}, &(0x7f00000000c0)=0xe5) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r1, 0x8, 0x307}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="f5af24bd7000fcffffff0d00000008000300", @ANYRES64=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 276.288271ms ago: executing program 0 (id=441): syz_emit_ethernet(0x22, &(0x7f00000002c0)={@broadcast, @random="f5ab325f8d63", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x38, 0x14, 0x65, 0x0, 0xef, 0x2b, 0x0, @loopback, @loopback}}}}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 179.423107ms ago: executing program 2 (id=442): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b00"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x1c, 0x3e, 0x400, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000300)={0x14d, 0x35, 0x6}) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) write(r5, &(0x7f0000000040)="cb", 0xfffffdef) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x8, {{0xa, 0x0, 0x7, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f0000000400)={0x0, {{0xa, 0x0, 0x2, @mcast1={0xff, 0x7}}}, {{0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, 0x108) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000200)='blkio.bfq.io_queued\x00', 0x0, 0x0) preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/121, 0x79}], 0x1, 0x0, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x8, {{0xa, 0x0, 0x400, @mcast1={0xff, 0x7}}}, {{0xa, 0xffff, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000340)) 0s ago: executing program 0 (id=443): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b7070000000002006a0000000000000007000000000000009500000000000000561cf53109c66825d874b16b2cba"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r5, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r3, 0xaedf}, 0x8) sendfile(r1, r1, &(0x7f0000000140)=0x6, 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.196' (ED25519) to the list of known hosts. [ 81.703576][ T5851] cgroup: Unknown subsys name 'net' [ 81.814303][ T5851] cgroup: Unknown subsys name 'cpuset' [ 81.823513][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.635437][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.305155][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.329681][ T5874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.337989][ T5879] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.345860][ T5874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.367428][ T5877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.371075][ T5874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.377140][ T5877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.388964][ T5884] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.391482][ T5874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.397736][ T5884] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.411082][ T5884] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.419426][ T5884] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.420813][ T5874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.431863][ T5884] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.435395][ T5874] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.448951][ T5877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.451210][ T5884] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.458304][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.467402][ T5882] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.472815][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.480234][ T5882] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.486416][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.501546][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.510985][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.518388][ T5877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.272120][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 87.360367][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 87.445718][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 87.470484][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 87.664248][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 87.783938][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.791616][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.799200][ T5864] bridge_slave_0: entered allmulticast mode [ 87.807498][ T5864] bridge_slave_0: entered promiscuous mode [ 87.817280][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.824513][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.831938][ T5865] bridge_slave_0: entered allmulticast mode [ 87.839279][ T5865] bridge_slave_0: entered promiscuous mode [ 87.888294][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.896103][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.903854][ T5864] bridge_slave_1: entered allmulticast mode [ 87.912470][ T5864] bridge_slave_1: entered promiscuous mode [ 87.919785][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.927513][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.934944][ T5865] bridge_slave_1: entered allmulticast mode [ 87.942320][ T5865] bridge_slave_1: entered promiscuous mode [ 87.962306][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.969648][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.977797][ T5862] bridge_slave_0: entered allmulticast mode [ 87.985488][ T5862] bridge_slave_0: entered promiscuous mode [ 88.056701][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.065442][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.072834][ T5863] bridge_slave_0: entered allmulticast mode [ 88.080273][ T5863] bridge_slave_0: entered promiscuous mode [ 88.087704][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.095187][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.102454][ T5862] bridge_slave_1: entered allmulticast mode [ 88.109694][ T5862] bridge_slave_1: entered promiscuous mode [ 88.127862][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.141451][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.151625][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.160597][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.167808][ T5863] bridge_slave_1: entered allmulticast mode [ 88.175418][ T5863] bridge_slave_1: entered promiscuous mode [ 88.219393][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.232515][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.328787][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.342304][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.385581][ T5864] team0: Port device team_slave_0 added [ 88.393490][ T5865] team0: Port device team_slave_0 added [ 88.402127][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.414049][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.438371][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.446053][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.453821][ T5880] bridge_slave_0: entered allmulticast mode [ 88.461693][ T5880] bridge_slave_0: entered promiscuous mode [ 88.471604][ T5864] team0: Port device team_slave_1 added [ 88.477619][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.484818][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.492779][ T5880] bridge_slave_1: entered allmulticast mode [ 88.500040][ T5880] bridge_slave_1: entered promiscuous mode [ 88.510218][ T5865] team0: Port device team_slave_1 added [ 88.521070][ T5877] Bluetooth: hci4: command tx timeout [ 88.521071][ T5871] Bluetooth: hci2: command tx timeout [ 88.600336][ T5871] Bluetooth: hci1: command tx timeout [ 88.604484][ T5877] Bluetooth: hci3: command tx timeout [ 88.606733][ T5870] Bluetooth: hci0: command tx timeout [ 88.639012][ T5863] team0: Port device team_slave_0 added [ 88.647466][ T5862] team0: Port device team_slave_0 added [ 88.657420][ T5862] team0: Port device team_slave_1 added [ 88.695641][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.706422][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.713509][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.740599][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.755278][ T5863] team0: Port device team_slave_1 added [ 88.775081][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.782152][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.808427][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.821155][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.828221][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.854193][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.867527][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.891957][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.898969][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.925911][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.993906][ T5880] team0: Port device team_slave_0 added [ 89.016581][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.023858][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.050467][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.065254][ T5880] team0: Port device team_slave_1 added [ 89.088037][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.095206][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.122009][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.135418][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.142431][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.168547][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.215168][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.222339][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.249335][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.306042][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.313318][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.339608][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.352901][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.359894][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.386813][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.420872][ T5865] hsr_slave_0: entered promiscuous mode [ 89.427756][ T5865] hsr_slave_1: entered promiscuous mode [ 89.453814][ T5864] hsr_slave_0: entered promiscuous mode [ 89.461230][ T5864] hsr_slave_1: entered promiscuous mode [ 89.467584][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 89.473531][ T5864] Cannot create hsr debugfs directory [ 89.521768][ T5862] hsr_slave_0: entered promiscuous mode [ 89.528388][ T5862] hsr_slave_1: entered promiscuous mode [ 89.534832][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 89.541684][ T5862] Cannot create hsr debugfs directory [ 89.641072][ T5863] hsr_slave_0: entered promiscuous mode [ 89.648014][ T5863] hsr_slave_1: entered promiscuous mode [ 89.654575][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 89.660403][ T5863] Cannot create hsr debugfs directory [ 89.733350][ T5880] hsr_slave_0: entered promiscuous mode [ 89.739814][ T5880] hsr_slave_1: entered promiscuous mode [ 89.746566][ T5880] debugfs: 'hsr0' already exists in 'hsr' [ 89.752607][ T5880] Cannot create hsr debugfs directory [ 90.312402][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.334204][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.346583][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.370205][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.428551][ T5865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.442483][ T5865] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.459266][ T5865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.478730][ T5865] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.544498][ T5880] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.562361][ T5880] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.573024][ T5880] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.588711][ T5880] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.600790][ T5870] Bluetooth: hci2: command tx timeout [ 90.601348][ T5871] Bluetooth: hci4: command tx timeout [ 90.680632][ T5871] Bluetooth: hci0: command tx timeout [ 90.686110][ T5871] Bluetooth: hci1: command tx timeout [ 90.687463][ T5870] Bluetooth: hci3: command tx timeout [ 90.752648][ T5864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.786087][ T5864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.800464][ T5864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.815418][ T5864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.946496][ T5863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.959294][ T5863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.979650][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.997300][ T5863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.028378][ T5863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.052178][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.073985][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.122691][ T969] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.129998][ T969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.143364][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.164296][ T969] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.171504][ T969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.215667][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.237729][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.257638][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.264861][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.275771][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.283344][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.324674][ T1337] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.331882][ T1337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.355949][ T969] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.363611][ T969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.479131][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.644500][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.716409][ T1337] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.723680][ T1337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.792996][ T1337] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.800238][ T1337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.849493][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.949314][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.018310][ T969] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.025564][ T969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.064595][ T969] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.071787][ T969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.116625][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.175715][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.233876][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.429997][ T5862] veth0_vlan: entered promiscuous mode [ 92.454156][ T5865] veth0_vlan: entered promiscuous mode [ 92.468126][ T5880] veth0_vlan: entered promiscuous mode [ 92.508700][ T5880] veth1_vlan: entered promiscuous mode [ 92.527070][ T5865] veth1_vlan: entered promiscuous mode [ 92.552356][ T5862] veth1_vlan: entered promiscuous mode [ 92.635729][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.684190][ T5870] Bluetooth: hci4: command tx timeout [ 92.689652][ T5877] Bluetooth: hci2: command tx timeout [ 92.719677][ T5862] veth0_macvtap: entered promiscuous mode [ 92.745234][ T5880] veth0_macvtap: entered promiscuous mode [ 92.754821][ T5862] veth1_macvtap: entered promiscuous mode [ 92.761362][ T5870] Bluetooth: hci1: command tx timeout [ 92.766799][ T5877] Bluetooth: hci0: command tx timeout [ 92.779664][ T5870] Bluetooth: hci3: command tx timeout [ 92.816511][ T5880] veth1_macvtap: entered promiscuous mode [ 92.837787][ T5865] veth0_macvtap: entered promiscuous mode [ 92.855651][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.865661][ T5864] veth0_vlan: entered promiscuous mode [ 92.882237][ T5865] veth1_macvtap: entered promiscuous mode [ 92.929260][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.971133][ T5864] veth1_vlan: entered promiscuous mode [ 92.989666][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.012435][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.066440][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.076704][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.097017][ T1311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.116584][ T1311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.128527][ T1311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.144604][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.175644][ T1311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.203140][ T1311] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.212404][ T1311] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.280746][ T969] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.296431][ T5864] veth0_macvtap: entered promiscuous mode [ 93.318927][ T5864] veth1_macvtap: entered promiscuous mode [ 93.339914][ T969] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.349153][ T969] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.359973][ T969] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.402737][ T969] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.414607][ T969] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.450474][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.492348][ T969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.517549][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.525151][ T969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.592782][ T5863] veth0_vlan: entered promiscuous mode [ 93.608921][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.617456][ T1311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.626840][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.660082][ T1311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.676089][ T1311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.688246][ T5863] veth1_vlan: entered promiscuous mode [ 93.703521][ T1311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.723284][ T1311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.731977][ T1311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.868320][ T5880] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.877837][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.900093][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.917726][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.917862][ T5863] veth0_macvtap: entered promiscuous mode [ 93.926319][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.015744][ T1311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.041452][ T1311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.051938][ T5863] veth1_macvtap: entered promiscuous mode [ 94.156015][ T1311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.191389][ T1311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.223023][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.255244][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.267030][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.317098][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.330019][ T5991] Zero length message leads to an empty skb [ 94.417361][ T969] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.547247][ T5994] Bluetooth: MGMT ver 1.23 [ 94.723830][ T969] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.764549][ T5870] Bluetooth: hci4: command tx timeout [ 94.770217][ T5877] Bluetooth: hci2: command tx timeout [ 94.848365][ T5870] Bluetooth: hci3: command tx timeout [ 94.854078][ T5877] Bluetooth: hci1: command tx timeout [ 94.871884][ T969] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.907246][ T969] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.176473][ T6010] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET) [ 95.557289][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 95.689177][ T969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.728087][ T969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.899093][ T6026] warning: `syz.2.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.956567][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.983810][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.032326][ T6034] netlink: 'syz.0.17': attribute type 4 has an invalid length. [ 96.066058][ T6034] netlink: 152 bytes leftover after parsing attributes in process `syz.0.17'. [ 96.172932][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 96.186634][ T6034] : renamed from bond0 (while UP) [ 96.192384][ T6039] openvswitch: netlink: Missing key (keys=40, expected=100) [ 96.204557][ T6038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18'. [ 96.222811][ T6038] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18'. [ 96.285591][ T6038] netlink: 'syz.3.18': attribute type 8 has an invalid length. [ 96.332874][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 96.400827][ T6041] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.476699][ T6038] bond0: entered promiscuous mode [ 96.490365][ T6038] bond_slave_0: entered promiscuous mode [ 96.509398][ T6038] bond_slave_1: entered promiscuous mode [ 96.536084][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 96.569264][ T6038] bond0: left promiscuous mode [ 96.577732][ T6038] bond_slave_0: left promiscuous mode [ 96.596016][ T6038] bond_slave_1: left promiscuous mode [ 96.608020][ T6049] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5'. [ 96.655448][ T6041] batadv_slave_1: entered promiscuous mode [ 96.708646][ T6044] bridge_slave_1: left allmulticast mode [ 96.716776][ T6044] bridge_slave_1: left promiscuous mode [ 96.743736][ T6044] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.775944][ T6044] bridge_slave_0: left allmulticast mode [ 96.782724][ T6044] bridge_slave_0: left promiscuous mode [ 96.802597][ T6044] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.041464][ T6036] batadv_slave_1: left promiscuous mode [ 97.056011][ T6052] netlink: 'syz.1.22': attribute type 1 has an invalid length. [ 97.092117][ T6052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22'. [ 97.301533][ T5982] IPVS: starting estimator thread 0... [ 97.308683][ T6064] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 97.327148][ T9] cfg80211: failed to load regulatory.db [ 97.441260][ T6068] IPVS: using max 26 ests per chain, 62400 per kthread [ 97.582344][ T6078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29'. [ 97.955896][ T6090] netlink: 'syz.3.33': attribute type 1 has an invalid length. [ 98.057639][ T6085] netlink: 'syz.2.32': attribute type 21 has an invalid length. [ 98.105543][ T6085] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 98.864535][ T6112] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.249252][ T6122] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 99.526723][ T6112] tipc: Started in network mode [ 99.550043][ T6112] tipc: Node identity 4a158b5847cc, cluster identity 4711 [ 99.596376][ T6112] tipc: Enabled bearer , priority 0 [ 99.784262][ T6127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.860623][ T6127] bond0: (slave rose0): Enslaving as an active interface with an up link [ 100.338798][ T6142] netlink: 'syz.2.45': attribute type 4 has an invalid length. [ 100.729752][ T44] tipc: Node number set to 232360792 [ 100.933283][ T6161] __nla_validate_parse: 3 callbacks suppressed [ 100.933303][ T6161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.48'. [ 100.951308][ T6164] netlink: 48 bytes leftover after parsing attributes in process `syz.1.50'. [ 101.097069][ T6164] syzkaller1: entered promiscuous mode [ 101.108622][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.50'. [ 101.157874][ T6164] syzkaller1: entered allmulticast mode [ 102.744678][ T6221] netlink: 'syz.2.62': attribute type 1 has an invalid length. [ 102.775260][ T6221] netlink: 'syz.2.62': attribute type 3 has an invalid length. [ 102.800853][ T6221] netlink: 'syz.2.62': attribute type 1 has an invalid length. [ 102.820242][ T6221] netlink: 204 bytes leftover after parsing attributes in process `syz.2.62'. [ 102.910352][ T6221] NCSI netlink: No device for ifindex 0 [ 102.916150][ T6220] netlink: 'syz.2.62': attribute type 1 has an invalid length. [ 102.955294][ T6220] netlink: 'syz.2.62': attribute type 3 has an invalid length. [ 103.015086][ T6220] netlink: 'syz.2.62': attribute type 1 has an invalid length. [ 103.056084][ T6220] netlink: 204 bytes leftover after parsing attributes in process `syz.2.62'. [ 103.105638][ T6220] NCSI netlink: No device for ifindex 0 [ 103.658491][ T6251] netlink: 68 bytes leftover after parsing attributes in process `syz.0.70'. [ 103.940886][ T6261] Driver unsupported XDP return value 0 on prog (id 36) dev N/A, expect packet loss! [ 104.064907][ T6278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.74'. [ 104.157882][ T6280] Bluetooth: MGMT ver 1.23 [ 105.715458][ T6327] netlink: 16 bytes leftover after parsing attributes in process `syz.1.87'. [ 105.814166][ T6327] bond0: entered promiscuous mode [ 105.833848][ T6327] bond_slave_0: entered promiscuous mode [ 105.852866][ T6327] bond_slave_1: entered promiscuous mode [ 105.875595][ T6327] bond0: left promiscuous mode [ 105.904309][ T6327] bond_slave_0: left promiscuous mode [ 105.919856][ T6327] bond_slave_1: left promiscuous mode [ 106.307808][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.91'. [ 106.397969][ T6354] bridge_slave_1: left allmulticast mode [ 106.433653][ T6354] bridge_slave_1: left promiscuous mode [ 106.439633][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.459348][ T6354] bridge_slave_0: left allmulticast mode [ 106.466650][ T6354] bridge_slave_0: left promiscuous mode [ 106.472114][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 106.479310][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.548679][ T6360] nbd: illegal input index -1 [ 106.571497][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.94'. [ 106.585467][ T6367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.94'. [ 106.711564][ T6367] geneve2: entered promiscuous mode [ 106.719202][ T6367] geneve2: entered allmulticast mode [ 106.996444][ T6378] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 107.007205][ T6383] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20001 [ 107.198247][ T6387] netlink: 24 bytes leftover after parsing attributes in process `syz.4.101'. [ 107.229654][ T6387] netlink: 40 bytes leftover after parsing attributes in process `syz.4.101'. [ 107.314664][ T6387] netlink: 'syz.4.101': attribute type 8 has an invalid length. [ 107.322530][ T6387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.101'. [ 107.338873][ T6387] bond0: entered promiscuous mode [ 107.366514][ T6387] bond_slave_0: entered promiscuous mode [ 107.385881][ T6387] bond_slave_1: entered promiscuous mode [ 107.457262][ T6395] netlink: 788 bytes leftover after parsing attributes in process `syz.2.104'. [ 107.477353][ T6387] bond0: left promiscuous mode [ 107.516463][ T6387] bond_slave_0: left promiscuous mode [ 107.529894][ T6387] bond_slave_1: left promiscuous mode [ 108.018432][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.107'. [ 108.085527][ T6410] netlink: 'syz.4.107': attribute type 4 has an invalid length. [ 108.595722][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.110'. [ 110.717664][ T6490] netlink: zone id is out of range [ 110.724094][ T6490] netlink: zone id is out of range [ 110.729357][ T6490] netlink: zone id is out of range [ 110.733175][ T6487] bridge_slave_0: left allmulticast mode [ 110.734924][ T6490] netlink: zone id is out of range [ 110.745541][ T6490] netlink: zone id is out of range [ 110.750833][ T6490] netlink: zone id is out of range [ 110.756093][ T6490] netlink: zone id is out of range [ 110.773373][ T6490] netlink: zone id is out of range [ 110.789336][ T6487] bridge_slave_0: left promiscuous mode [ 110.793152][ T6490] netlink: zone id is out of range [ 110.802089][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.884565][ T6487] bridge_slave_1: left allmulticast mode [ 110.897050][ T6487] bridge_slave_1: left promiscuous mode [ 110.930806][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.989477][ T6487] bond0: (slave bond_slave_0): Releasing backup interface [ 111.000384][ T5870] Bluetooth: hci4: command tx timeout [ 111.039817][ T6487] bond0: (slave bond_slave_1): Releasing backup interface [ 111.074720][ T6487] team0: Port device team_slave_0 removed [ 111.095124][ T6487] team0: Port device team_slave_1 removed [ 111.102384][ T6487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.110393][ T6487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.142433][ T6487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.150102][ T6487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.455339][ T6515] netlink: 'syz.4.137': attribute type 10 has an invalid length. [ 111.468657][ T6516] __nla_validate_parse: 6 callbacks suppressed [ 111.468675][ T6516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.137'. [ 111.558935][ T6516] xfrm1: entered promiscuous mode [ 111.582679][ T6516] xfrm1: entered allmulticast mode [ 111.794078][ T6527] netlink: 40 bytes leftover after parsing attributes in process `syz.2.141'. [ 111.971256][ T6535] netlink: 'syz.2.144': attribute type 1 has an invalid length. [ 111.979215][ T6535] netlink: 'syz.2.144': attribute type 2 has an invalid length. [ 112.066472][ T6535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'. [ 112.112683][ T6546] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 112.114217][ T6536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.436264][ T6556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 112.951575][ T6570] syzkaller0: entered promiscuous mode [ 113.031149][ T6570] syzkaller0: entered allmulticast mode [ 113.982026][ T6606] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 113.995889][ T6606] macvtap1: entered promiscuous mode [ 114.023662][ T6606] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 114.075487][ T6616] netlink: 40 bytes leftover after parsing attributes in process `syz.2.158'. [ 114.175400][ T6607] vlan2: entered allmulticast mode [ 114.191507][ T6607] bridge_slave_0: entered allmulticast mode [ 114.453035][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.163'. [ 114.483743][ T6625] 8021q: VLANs not supported on caif0 [ 114.549676][ T6629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.163'. [ 114.568175][ T6632] net_ratelimit: 7 callbacks suppressed [ 114.568195][ T6632] openvswitch: netlink: IPv4 tun info is not correct [ 114.599407][ T6634] openvswitch: netlink: IPv4 tun info is not correct [ 114.647932][ T6633] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 114.676614][ T6633] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 115.017343][ T6639] tipc: Started in network mode [ 115.029882][ T6639] tipc: Node identity ca997582a9ef, cluster identity 4711 [ 115.046984][ T6639] tipc: Enabled bearer , priority 0 [ 115.058444][ T6642] netlink: 'syz.2.167': attribute type 14 has an invalid length. [ 115.101232][ T6639] syzkaller0: entered promiscuous mode [ 115.116206][ T6639] syzkaller0: entered allmulticast mode [ 115.158792][ T6646] tipc: Resetting bearer [ 115.228790][ T6638] tipc: Resetting bearer [ 115.291957][ T6638] tipc: Disabling bearer [ 115.318933][ T6650] trusted_key: syz.1.170 sent an empty control message without MSG_MORE. [ 115.365434][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 115.390496][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 115.451750][ T6656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 116.293297][ T6680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.585995][ T6680] macvlan2: entered promiscuous mode [ 116.632732][ T6685] __nla_validate_parse: 3 callbacks suppressed [ 116.632755][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.179'. [ 116.690563][ T6680] macvlan2: entered allmulticast mode [ 116.704979][ T6680] bond2: (slave macvlan2): Opening slave failed [ 117.082846][ T6710] netlink: 176 bytes leftover after parsing attributes in process `syz.2.187'. [ 117.105803][ T6712] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.186'. [ 117.459023][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'. [ 117.493544][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'. [ 117.923908][ T6727] netlink: 32 bytes leftover after parsing attributes in process `syz.3.191'. [ 117.997263][ T6735] netlink: 'syz.4.193': attribute type 1 has an invalid length. [ 118.020403][ T6731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.192'. [ 118.313315][ T6747] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 118.618518][ T6755] tipc: Started in network mode [ 118.628101][ T6755] tipc: Node identity 660bbd7fc6e, cluster identity 4711 [ 118.670406][ T6755] tipc: Enabled bearer , priority 0 [ 118.693224][ T6765] syzkaller0: entered promiscuous mode [ 118.700305][ T6765] syzkaller0: entered allmulticast mode [ 118.717679][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.200'. [ 118.737482][ T6755] tipc: Resetting bearer [ 118.840508][ T6754] tipc: Resetting bearer [ 118.920739][ T6754] tipc: Disabling bearer [ 119.103669][ T6768] bond1 (unregistering): Released all slaves [ 119.220583][ T6781] netlink: 'syz.0.204': attribute type 15 has an invalid length. [ 119.309917][ T6785] netlink: 32 bytes leftover after parsing attributes in process `syz.3.206'. [ 119.329655][ T6789] bridge1: entered promiscuous mode [ 120.311651][ T6833] tipc: Enabling of bearer rejected, already enabled [ 120.348241][ T6833] syzkaller0: entered promiscuous mode [ 120.412708][ T6833] syzkaller0: entered allmulticast mode [ 120.499457][ T6833] tipc: Resetting bearer [ 120.740330][ T30] audit: type=1800 audit(1758102476.602:2): pid=6819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.212" name="memory.events" dev="tmpfs" ino=227 res=0 errno=0 [ 120.824633][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 121.108492][ T6853] bond0 (unregistering): Released all slaves [ 121.338351][ T6872] netlink: 'syz.2.224': attribute type 4 has an invalid length. [ 121.607256][ T6876] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 121.686783][ T6891] __nla_validate_parse: 1 callbacks suppressed [ 121.686803][ T6891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.229'. [ 121.766022][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'. [ 121.799066][ T6891] bond0: entered promiscuous mode [ 121.812724][ T6891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.826451][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.229'. [ 122.003690][ T6894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.015779][ T6894] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 122.033644][ T6898] netlink: 3 bytes leftover after parsing attributes in process `syz.3.230'. [ 122.059708][ T6894] bond0: (slave vcan1): Error -95 calling set_mac_address [ 122.115997][ T6898] 0ªX¹¦À: renamed from caif0 [ 122.171704][ T6898] 0ªX¹¦À: entered allmulticast mode [ 122.216625][ T6898] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 122.367631][ T6905] netlink: 16 bytes leftover after parsing attributes in process `syz.4.232'. [ 122.383013][ T6905] netlink: 16 bytes leftover after parsing attributes in process `syz.4.232'. [ 122.421207][ T6905] netlink: 40 bytes leftover after parsing attributes in process `syz.4.232'. [ 122.561359][ T6912] tipc: Enabling of bearer rejected, failed to enable media [ 122.646876][ T6915] tipc: Enabling of bearer rejected, failed to enable media [ 122.780998][ T6912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.224703][ T6927] sit0: entered promiscuous mode [ 123.308098][ T6927] netlink: 'syz.3.238': attribute type 1 has an invalid length. [ 123.334480][ T6927] netlink: 1 bytes leftover after parsing attributes in process `syz.3.238'. [ 123.385480][ T6933] tipc: Started in network mode [ 123.406702][ T6933] tipc: Node identity 52201cbfbf0a, cluster identity 4711 [ 123.433290][ T6933] tipc: Enabled bearer , priority 0 [ 123.488361][ T6929] syzkaller0: entered promiscuous mode [ 123.505727][ T6929] syzkaller0: entered allmulticast mode [ 123.669194][ T6928] tipc: Resetting bearer [ 123.729800][ T6925] tipc: Resetting bearer [ 123.739427][ T6940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.241'. [ 123.760080][ T6925] tipc: Disabling bearer [ 123.988939][ T6939] bridge1: port 1(veth3) entered blocking state [ 124.006670][ T6939] bridge1: port 1(veth3) entered disabled state [ 124.033865][ T6939] veth3: entered allmulticast mode [ 124.048520][ T6939] veth3: entered promiscuous mode [ 124.069880][ T6942] bridge1: port 2(veth0_to_bond) entered blocking state [ 124.090572][ T6942] bridge1: port 2(veth0_to_bond) entered disabled state [ 124.098067][ T6942] veth0_to_bond: entered allmulticast mode [ 124.167829][ T6942] veth0_to_bond: entered promiscuous mode [ 124.448571][ T6964] netlink: 240 bytes leftover after parsing attributes in process `syz.1.247'. [ 124.866353][ T6981] netlink: 'syz.1.251': attribute type 8 has an invalid length. [ 124.914319][ T6991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.960058][ T6981] bond0: entered promiscuous mode [ 124.965362][ T6981] bond_slave_0: entered promiscuous mode [ 124.971471][ T6981] bond_slave_1: entered promiscuous mode [ 124.993783][ T6981] bond0: left promiscuous mode [ 124.998715][ T6981] bond_slave_0: left promiscuous mode [ 125.006076][ T6981] bond_slave_1: left promiscuous mode [ 125.116603][ T6993] tipc: Enabling of bearer rejected, already enabled [ 125.299056][ T7004] netlink: 'syz.1.261': attribute type 10 has an invalid length. [ 125.344183][ T7004] team0: Port device dummy0 added [ 125.575345][ T7014] Bluetooth: MGMT ver 1.23 [ 126.420903][ T7044] tipc: Enabled bearer , priority 0 [ 126.445260][ T7044] syzkaller0: entered promiscuous mode [ 126.477517][ T7044] syzkaller0: entered allmulticast mode [ 126.597449][ T7043] tipc: Resetting bearer [ 126.767716][ T7043] tipc: Disabling bearer [ 127.045804][ T7068] sctp: [Deprecated]: syz.3.277 (pid 7068) Use of int in maxseg socket option. [ 127.045804][ T7068] Use struct sctp_assoc_value instead [ 127.202958][ T7053] syzkaller1: entered promiscuous mode [ 127.208579][ T7053] syzkaller1: entered allmulticast mode [ 127.391760][ T7075] __nla_validate_parse: 8 callbacks suppressed [ 127.391780][ T7075] netlink: 64 bytes leftover after parsing attributes in process `syz.2.279'. [ 127.639503][ T7081] sctp: [Deprecated]: syz.0.280 (pid 7081) Use of int in max_burst socket option. [ 127.639503][ T7081] Use struct sctp_assoc_value instead [ 128.034670][ T7089] netlink: 24 bytes leftover after parsing attributes in process `syz.3.283'. [ 128.150059][ T7096] 8021q: VLANs not supported on lo [ 128.163867][ T7097] 8021q: VLANs not supported on lo [ 128.200824][ T5877] Bluetooth: hci4: command 0x0405 tx timeout [ 128.445128][ T7105] tipc: Started in network mode [ 128.450077][ T7105] tipc: Node identity ea6bdf63ebee, cluster identity 4711 [ 128.474340][ T7105] tipc: Enabled bearer , priority 0 [ 128.505341][ T7105] syzkaller0: entered promiscuous mode [ 128.516412][ T7105] syzkaller0: entered allmulticast mode [ 128.554467][ T7102] tipc: Resetting bearer [ 128.575123][ T7102] tipc: Disabling bearer [ 128.666035][ T7116] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.292'. [ 128.778486][ T7118] openvswitch: netlink: Duplicate or invalid key (type 0). [ 128.786205][ T7118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.178943][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.296'. [ 129.249637][ T7130] 8021q: VLANs not supported on caif0 [ 129.396522][ T7137] syzkaller0: entered promiscuous mode [ 129.406294][ T7137] syzkaller0: entered allmulticast mode [ 130.004164][ T7149] bond1: entered promiscuous mode [ 130.009479][ T7149] bond1: entered allmulticast mode [ 130.021413][ T7149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.299773][ T7149] bond1 (unregistering): Released all slaves [ 130.378219][ T7155] hsr0: entered promiscuous mode [ 130.384727][ T7155] macvlan0: entered allmulticast mode [ 130.394740][ T7155] hsr0: entered allmulticast mode [ 130.404857][ T7155] hsr_slave_0: entered allmulticast mode [ 130.417704][ T7155] hsr_slave_1: entered allmulticast mode [ 130.448236][ T7155] hsr0: left allmulticast mode [ 130.464409][ T7155] hsr_slave_0: left allmulticast mode [ 130.486723][ T7155] hsr_slave_1: left allmulticast mode [ 130.536103][ T7165] tipc: Enabled bearer , priority 0 [ 130.560013][ T7166] syzkaller0: entered promiscuous mode [ 130.585661][ T7166] syzkaller0: entered allmulticast mode [ 130.625263][ T7151] tipc: Resetting bearer [ 130.791983][ T7151] tipc: Disabling bearer [ 130.972605][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 131.590088][ T7224] netlink: 'syz.2.314': attribute type 13 has an invalid length. [ 131.617685][ T7224] netlink: 'syz.2.314': attribute type 17 has an invalid length. [ 131.717724][ T7229] netlink: 'syz.4.315': attribute type 2 has an invalid length. [ 131.965671][ T7224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.033168][ T7224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.151798][ T7229] : entered promiscuous mode [ 133.011323][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 133.354402][ T7270] openvswitch: netlink: IP tunnel dst address not specified [ 133.403382][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'. [ 133.418906][ T7273] tipc: Enabling of bearer rejected, already enabled [ 133.699732][ T7287] netlink: 176 bytes leftover after parsing attributes in process `syz.4.327'. [ 133.752724][ T7275] bond1 (unregistering): Released all slaves [ 134.310688][ T7303] tipc: Enabling of bearer rejected, already enabled [ 134.475862][ T7310] netlink: 'syz.1.332': attribute type 1 has an invalid length. [ 134.516972][ T7310] netlink: 208 bytes leftover after parsing attributes in process `syz.1.332'. [ 134.566898][ T7310] netlink: 'syz.1.332': attribute type 1 has an invalid length. [ 134.599474][ T7310] netlink: 'syz.1.332': attribute type 2 has an invalid length. [ 134.645398][ T7312] IPVS: set_ctl: invalid protocol: 229 127.0.0.1:20001 [ 134.724921][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.332'. [ 134.837738][ T7315] netlink: 248 bytes leftover after parsing attributes in process `syz.3.333'. [ 134.996063][ T7319] netem: change failed [ 135.304995][ T7326] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 135.313143][ T7326] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 135.930434][ T7345] tipc: Enabling of bearer rejected, already enabled [ 136.158649][ T7346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.340'. [ 136.267011][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.341'. [ 136.305277][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.340'. [ 136.483553][ T7358] bond1 (unregistering): Released all slaves [ 136.713760][ T7376] netlink: 36 bytes leftover after parsing attributes in process `syz.3.342'. [ 136.790499][ T7368] vlan0: entered promiscuous mode [ 136.795596][ T7368] erspan0: entered promiscuous mode [ 136.820725][ T7384] netlink: 'syz.0.344': attribute type 1 has an invalid length. [ 137.578123][ T7413] netlink: 'syz.2.349': attribute type 2 has an invalid length. [ 137.587593][ T7413] netlink: 'syz.2.349': attribute type 8 has an invalid length. [ 138.310868][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.904601][ T7438] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.972470][ T7444] __nla_validate_parse: 6 callbacks suppressed [ 138.972489][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.354'. [ 139.269380][ T7444] bond1 (unregistering): Released all slaves [ 139.289188][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'. [ 139.482672][ T7483] netlink: 'syz.3.355': attribute type 2 has an invalid length. [ 139.724869][ T7438] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.866495][ T7480] veth5: entered promiscuous mode [ 139.927735][ T7483] þ: entered promiscuous mode [ 140.049712][ T7438] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.154179][ T7496] netlink: 20824 bytes leftover after parsing attributes in process `syz.1.358'. [ 140.244212][ T7498] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 140.275603][ T7498] macvtap0: entered allmulticast mode [ 140.299130][ T7498] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 140.330763][ T7498] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 140.337652][ T7498] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 140.380065][ T7510] netlink: 'syz.4.360': attribute type 1 has an invalid length. [ 140.435599][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.360'. [ 140.456155][ T7438] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.512286][ T7510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.521943][ T7515] netlink: 'syz.0.361': attribute type 2 has an invalid length. [ 140.582767][ T7516] netlink: 3 bytes leftover after parsing attributes in process `syz.0.361'. [ 140.596406][ T7513] vlan2: entered allmulticast mode [ 140.608526][ T7513] veth1: entered allmulticast mode [ 140.633001][ T7513] bond1: (slave vlan2): making interface the new active one [ 140.652957][ T7513] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 140.667541][ T7515] : entered promiscuous mode [ 140.687744][ T7516] batadv1: entered promiscuous mode [ 140.693487][ T7516] batadv1: entered allmulticast mode [ 140.920349][ T7471] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.005927][ T7472] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.086113][ T7468] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.195288][ T7472] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.286216][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 141.477964][ T7548] bond1 (unregistering): Released all slaves [ 141.852261][ T7567] IPVS: set_ctl: invalid protocol: 25 224.0.0.2:0 [ 141.963870][ T7567] tipc: Enabled bearer , priority 26 [ 141.984105][ T7569] netlink: 44 bytes leftover after parsing attributes in process `syz.1.373'. [ 142.209076][ T7571] hsr0: left promiscuous mode [ 142.237500][ T7571] geneve2: left promiscuous mode [ 142.253708][ T7571] vlan0: left promiscuous mode [ 142.284753][ T7571] erspan0: left promiscuous mode [ 142.585705][ T7591] netlink: 120 bytes leftover after parsing attributes in process `syz.3.379'. [ 142.780922][ T7612] netlink: 48 bytes leftover after parsing attributes in process `syz.3.379'. [ 142.923500][ T7594] raw_sendmsg: syz.3.379 forgot to set AF_INET. Fix it! [ 143.004554][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.383'. [ 143.128971][ T7592] tipc: Node number set to 2699804031 [ 143.571827][ T7587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.598412][ T7587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.794675][ T7587] bridge1: left promiscuous mode [ 143.914552][ T7621] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 143.934508][ T7468] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.001640][ T7468] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.010078][ T7468] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.109002][ T7468] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.146387][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.388'. [ 144.212365][ T7655] netlink: 'syz.3.387': attribute type 1 has an invalid length. [ 144.226431][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'. [ 144.317111][ T7662] netlink: 176 bytes leftover after parsing attributes in process `syz.0.391'. [ 144.463087][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.392'. [ 144.964121][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'. [ 145.113136][ T7699] netlink: 24 bytes leftover after parsing attributes in process `syz.3.402'. [ 145.141024][ T7700] netlink: 36 bytes leftover after parsing attributes in process `syz.4.401'. [ 145.229749][ T7696] bond1 (unregistering): Released all slaves [ 145.367817][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.402'. [ 145.506604][ T7715] IPVS: length: 91191230 != 8 [ 145.865403][ T7723] netlink: 176 bytes leftover after parsing attributes in process `syz.2.407'. [ 146.385926][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'. [ 146.461932][ T7744] bond3 (unregistering): Released all slaves [ 146.609506][ T7759] bridge0: port 3(vlan2) entered blocking state [ 146.624350][ T7759] bridge0: port 3(vlan2) entered disabled state [ 146.633307][ T7759] vlan2: entered allmulticast mode [ 146.638536][ T7759] bridge0: entered allmulticast mode [ 146.647727][ T7759] vlan2: left allmulticast mode [ 146.653010][ T7759] bridge0: left allmulticast mode [ 146.895568][ T7773] netlink: 'syz.0.420': attribute type 5 has an invalid length. [ 146.904668][ T7773] netlink: 'syz.0.420': attribute type 7 has an invalid length. [ 146.947058][ T7774] IPv6: Can't replace route, no match found [ 147.031226][ T7774] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 147.060082][ T7771] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 147.095866][ T7771] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 147.159878][ T7780] vxcan3: entered allmulticast mode [ 147.336269][ T7787] 8021q: VLANs not supported on vcan0 [ 147.957876][ T7806] bond1 (unregistering): Released all slaves [ 148.503209][ T7833] netlink: 'syz.0.436': attribute type 1 has an invalid length. [ 148.550247][ T7833] netlink: 'syz.0.436': attribute type 2 has an invalid length. [ 148.667711][ T7836] netlink: 'syz.3.438': attribute type 64 has an invalid length. [ 148.893428][ T7628] IPVS: starting estimator thread 0... [ 148.903386][ T7841] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 148.977471][ T7836] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 149.000467][ T7836] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 149.030235][ T7843] IPVS: using max 27 ests per chain, 64800 per kthread [ 149.051308][ T7836] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 149.213610][ T7851] ================================================================== [ 149.221760][ T7851] BUG: KASAN: use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 149.229249][ T7851] Read of size 1 at addr ffff8880331e4330 by task syz.2.442/7851 [ 149.236974][ T7851] [ 149.239345][ T7851] CPU: 1 UID: 0 PID: 7851 Comm: syz.2.442 Not tainted syzkaller #0 PREEMPT(full) [ 149.239367][ T7851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 149.239386][ T7851] Call Trace: [ 149.239394][ T7851] [ 149.239404][ T7851] dump_stack_lvl+0x189/0x250 [ 149.239427][ T7851] ? __kasan_check_byte+0x12/0x40 [ 149.239456][ T7851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.239476][ T7851] ? lock_release+0x4b/0x3e0 [ 149.239506][ T7851] ? __virt_addr_valid+0x4a5/0x5c0 [ 149.239537][ T7851] print_report+0xca/0x240 [ 149.239553][ T7851] ? xfrm_state_find+0x2cf2/0x5400 [ 149.239576][ T7851] kasan_report+0x118/0x150 [ 149.239603][ T7851] ? xfrm_state_find+0x2cf2/0x5400 [ 149.239630][ T7851] xfrm_state_find+0x2cf2/0x5400 [ 149.239654][ T7851] ? __lock_acquire+0xab9/0xd20 [ 149.239690][ T7851] ? xfrm_state_find+0x1da/0x5400 [ 149.239716][ T7851] ? __pfx_xfrm_state_find+0x10/0x10 [ 149.239748][ T7851] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 149.239776][ T7851] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 149.239797][ T7851] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 149.239816][ T7851] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 149.239836][ T7851] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 149.239869][ T7851] ? xfrm_expand_policies+0x41f/0x6a0 [ 149.239888][ T7851] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 149.239920][ T7851] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 149.239952][ T7851] ? __lock_acquire+0xab9/0xd20 [ 149.239980][ T7851] xfrm_lookup_route+0x3c/0x1c0 [ 149.239997][ T7851] __ip4_datagram_connect+0x9a5/0x1270 [ 149.240033][ T7851] udp_connect+0x33/0x1f0 [ 149.240056][ T7851] __sys_connect+0x313/0x440 [ 149.240079][ T7851] ? __pfx___sys_connect+0x10/0x10 [ 149.240108][ T7851] ? rcu_is_watching+0x15/0xb0 [ 149.240135][ T7851] __x64_sys_connect+0x7a/0x90 [ 149.240161][ T7851] do_syscall_64+0xfa/0x3b0 [ 149.240188][ T7851] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.240209][ T7851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.240226][ T7851] ? clear_bhb_loop+0x60/0xb0 [ 149.240245][ T7851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.240263][ T7851] RIP: 0033:0x7fb687f8eba9 [ 149.240285][ T7851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.240301][ T7851] RSP: 002b:00007fb6861d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 149.240323][ T7851] RAX: ffffffffffffffda RBX: 00007fb6881d6090 RCX: 00007fb687f8eba9 [ 149.240337][ T7851] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000007 [ 149.240348][ T7851] RBP: 00007fb688011e19 R08: 0000000000000000 R09: 0000000000000000 [ 149.240359][ T7851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.240369][ T7851] R13: 00007fb6881d6128 R14: 00007fb6881d6090 R15: 00007ffc9e5a5078 [ 149.240390][ T7851] [ 149.240397][ T7851] [ 149.519794][ T7851] The buggy address belongs to the physical page: [ 149.526229][ T7851] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880331e4000 pfn:0x331e4 [ 149.536339][ T7851] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 149.543477][ T7851] raw: 00fff00000000000 ffffea0001ef4c08 ffffea00015da308 0000000000000000 [ 149.552094][ T7851] raw: ffff8880331e4000 0000000000000000 00000000ffffffff 0000000000000000 [ 149.560696][ T7851] page dumped because: kasan: bad access detected [ 149.567141][ T7851] page_owner tracks the page as freed [ 149.572512][ T7851] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92800(GFP_NOWAIT|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 5528, tgid 5528 (dhcpcd), ts 149103222348, free_ts 149103275209 [ 149.590842][ T7851] post_alloc_hook+0x240/0x2a0 [ 149.595629][ T7851] get_page_from_freelist+0x21e4/0x22c0 [ 149.601214][ T7851] __alloc_frozen_pages_noprof+0x181/0x370 [ 149.607056][ T7851] alloc_pages_mpol+0x232/0x4a0 [ 149.611938][ T7851] alloc_pages_noprof+0xa9/0x190 [ 149.616894][ T7851] stack_depot_save_flags+0x777/0x860 [ 149.622285][ T7851] ref_tracker_free+0xfe/0x7d0 [ 149.627056][ T7851] dst_destroy+0x10f/0x350 [ 149.631488][ T7851] rcu_core+0xcab/0x1770 [ 149.635756][ T7851] handle_softirqs+0x283/0x870 [ 149.640616][ T7851] do_softirq+0xec/0x180 [ 149.644864][ T7851] __local_bh_enable_ip+0x17d/0x1c0 [ 149.650066][ T7851] sk_setsockopt+0xe10/0x2dc0 [ 149.654762][ T7851] do_sock_setsockopt+0x11b/0x1b0 [ 149.659800][ T7851] __x64_sys_setsockopt+0x13f/0x1b0 [ 149.665029][ T7851] do_syscall_64+0xfa/0x3b0 [ 149.669560][ T7851] page last free pid 5528 tgid 5528 stack trace: [ 149.675898][ T7851] __free_frozen_pages+0xbc4/0xd30 [ 149.681040][ T7851] stack_depot_save_flags+0x436/0x860 [ 149.686440][ T7851] ref_tracker_free+0xfe/0x7d0 [ 149.691222][ T7851] dst_destroy+0x10f/0x350 [ 149.695663][ T7851] rcu_core+0xcab/0x1770 [ 149.699936][ T7851] handle_softirqs+0x283/0x870 [ 149.704707][ T7851] do_softirq+0xec/0x180 [ 149.708956][ T7851] __local_bh_enable_ip+0x17d/0x1c0 [ 149.714157][ T7851] sk_setsockopt+0xe10/0x2dc0 [ 149.718849][ T7851] do_sock_setsockopt+0x11b/0x1b0 [ 149.723884][ T7851] __x64_sys_setsockopt+0x13f/0x1b0 [ 149.729113][ T7851] do_syscall_64+0xfa/0x3b0 [ 149.733635][ T7851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.739536][ T7851] [ 149.741865][ T7851] Memory state around the buggy address: [ 149.747584][ T7851] ffff8880331e4200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 149.755646][ T7851] ffff8880331e4280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 149.763804][ T7851] >ffff8880331e4300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 149.771871][ T7851] ^ [ 149.777504][ T7851] ffff8880331e4380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 149.785569][ T7851] ffff8880331e4400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 149.793644][ T7851] ================================================================== [ 149.883396][ T7851] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 149.890654][ T7851] CPU: 1 UID: 0 PID: 7851 Comm: syz.2.442 Not tainted syzkaller #0 PREEMPT(full) [ 149.899884][ T7851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 149.909977][ T7851] Call Trace: [ 149.913284][ T7851] [ 149.916247][ T7851] dump_stack_lvl+0x99/0x250 [ 149.920881][ T7851] ? __asan_memcpy+0x40/0x70 [ 149.925516][ T7851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.930758][ T7851] ? __pfx__printk+0x10/0x10 [ 149.935379][ T7851] vpanic+0x281/0x750 [ 149.939390][ T7851] ? preempt_schedule+0xae/0xc0 [ 149.944270][ T7851] ? __pfx_vpanic+0x10/0x10 [ 149.948825][ T7851] ? preempt_schedule_common+0x83/0xd0 [ 149.954324][ T7851] ? preempt_schedule+0xae/0xc0 [ 149.959280][ T7851] ? __pfx_preempt_schedule+0x10/0x10 [ 149.964667][ T7851] panic+0xb9/0xc0 [ 149.968403][ T7851] ? __pfx_panic+0x10/0x10 [ 149.972836][ T7851] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 149.978832][ T7851] ? xfrm_state_find+0x2cf2/0x5400 [ 149.983962][ T7851] check_panic_on_warn+0x89/0xb0 [ 149.988921][ T7851] ? xfrm_state_find+0x2cf2/0x5400 [ 149.994049][ T7851] end_report+0x78/0x160 [ 149.998326][ T7851] kasan_report+0x129/0x150 [ 150.002956][ T7851] ? xfrm_state_find+0x2cf2/0x5400 [ 150.008103][ T7851] xfrm_state_find+0x2cf2/0x5400 [ 150.013069][ T7851] ? __lock_acquire+0xab9/0xd20 [ 150.017953][ T7851] ? xfrm_state_find+0x1da/0x5400 [ 150.023010][ T7851] ? __pfx_xfrm_state_find+0x10/0x10 [ 150.028321][ T7851] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 150.034493][ T7851] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 150.040402][ T7851] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 150.047005][ T7851] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 150.052949][ T7851] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 150.058969][ T7851] ? xfrm_expand_policies+0x41f/0x6a0 [ 150.064351][ T7851] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 150.069757][ T7851] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 150.075590][ T7851] ? __lock_acquire+0xab9/0xd20 [ 150.080462][ T7851] xfrm_lookup_route+0x3c/0x1c0 [ 150.085352][ T7851] __ip4_datagram_connect+0x9a5/0x1270 [ 150.090841][ T7851] udp_connect+0x33/0x1f0 [ 150.095182][ T7851] __sys_connect+0x313/0x440 [ 150.099788][ T7851] ? __pfx___sys_connect+0x10/0x10 [ 150.104923][ T7851] ? rcu_is_watching+0x15/0xb0 [ 150.109701][ T7851] __x64_sys_connect+0x7a/0x90 [ 150.114549][ T7851] do_syscall_64+0xfa/0x3b0 [ 150.119069][ T7851] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.124287][ T7851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.130367][ T7851] ? clear_bhb_loop+0x60/0xb0 [ 150.135053][ T7851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.140949][ T7851] RIP: 0033:0x7fb687f8eba9 [ 150.145371][ T7851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.164979][ T7851] RSP: 002b:00007fb6861d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 150.173406][ T7851] RAX: ffffffffffffffda RBX: 00007fb6881d6090 RCX: 00007fb687f8eba9 [ 150.181413][ T7851] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000007 [ 150.189399][ T7851] RBP: 00007fb688011e19 R08: 0000000000000000 R09: 0000000000000000 [ 150.197374][ T7851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.205351][ T7851] R13: 00007fb6881d6128 R14: 00007fb6881d6090 R15: 00007ffc9e5a5078 [ 150.213344][ T7851] [ 150.216607][ T7851] Kernel Offset: disabled [ 150.221050][ T7851] Rebooting in 86400 seconds..