last executing test programs: 2.645670288s ago: executing program 4 (id=682): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000003c0)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000003c0)=0x14) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8993, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8993, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x4, 0x4, 0xb8, 0x6, 0x46, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x10, 0x7ff, 0x2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x703283d8d4b5ce77}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ppoll(&(0x7f0000000900)=[{r3}], 0x1, &(0x7f0000000940)={0x77359400}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000000040)='hrtimer_init\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0x78, r1, 0xa18, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_VALUE={0xb, 0x4, "8c155060874790"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000044}, 0x40) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0x78, r1, 0xa18, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_VALUE={0xb, 0x4, "8c155060874790"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000044}, 0x40) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000580), 0x1000, r7}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000580), 0x1000, r7}, 0x38) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x34, 0x3b, 0x1, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x7, 0x0, 0x0, @u32=0x100}]}, 0x34}}, 0xc000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000980)={0x24c, r8, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x25}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf8000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xc78}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x268c}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_BEARER={0x154, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdbb8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfff}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa54}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x29}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @private0, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @mcast1, 0xd}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @empty, 0xff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6a14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x124ffb8f}]}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000004) 2.227996636s ago: executing program 3 (id=687): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x1004) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) clock_gettime(0x0, &(0x7f0000002980)={0x0, 0x0}) recvmmsg(r3, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)}, {&(0x7f0000000380)=""/65, 0x41}], 0x2, &(0x7f0000000440)=""/89, 0x59}, 0x8}, {{0x0, 0x57, &(0x7f0000001580)=[{&(0x7f00000004c0)=""/4096, 0xfffffffffffffdd9}, {0x0}, {&(0x7f0000001500)}, {&(0x7f0000001540)=""/38, 0x26}], 0x4, &(0x7f00000015c0)=""/143, 0x8f}, 0x9}, {{&(0x7f0000001680)=@nfc_llcp, 0x80, &(0x7f0000001880)=[{&(0x7f0000001700)=""/224, 0xe0}], 0x1, &(0x7f00000018c0)=""/4096, 0x1000}, 0x7}], 0x3, 0x0, &(0x7f00000029c0)={r4, r5+10000000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002a00)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r8, @ANYBLOB="010000000000fddbdf253f00000008000300", @ANYRES32=r7, @ANYBLOB="10005e80040001000800050001000000fcd6bcc5d35ea960934240355af16434073618e9ab0deae2b448fe75f429eb341839554844ef01a448d9b26cb9e5257e60264da3209c216b33e21aff8143c8bc6eadf98e229a495287d285f22205b166417fe174a495352fab6dbbbdeec94095f42258816b0517c343ac9d9ee280a5e26fcb895a1aa87eb68373d59e0759514895930ff5d9f3"], 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) listen(r3, 0x8) accept4(r3, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x3}, 0x8) r9 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@rand_addr=0x64010100, 0x4e1e, 0x0, 0x4e22, 0x445b, 0x2, 0x20, 0x0, 0x3c}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000007, 0xe6}, {0x10000, 0x80000000000}, 0x4, 0x6e6bba, 0x1, 0x0, 0x3}, {{@in=@empty, 0x4d2, 0x6c}, 0x0, @in=@rand_addr=0x64010102, 0x3502, 0x1, 0x8, 0x0, 0x2}}, 0xe8) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 2.102803379s ago: executing program 3 (id=688): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) sendto$inet(r1, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x40012103, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="49531f000000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900070000000000000010001d800c00008005000a0009000000"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, r9, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0xd4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x80, 0x8000, 0x3, 0x80000000, {{0x26, 0x4, 0x3, 0x2, 0x98, 0x64, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010102, @remote, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x47, [@rand_addr=0x64010101, @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @rr={0x7, 0xb, 0x6a, [@dev={0xac, 0x14, 0x14, 0x12}, @multicast2]}, @ssrr={0x89, 0x17, 0x1e, [@empty, @dev={0xac, 0x14, 0x14, 0x39}, @multicast2, @loopback, @empty]}, @generic={0x0, 0x3, "de"}, @ra={0x94, 0x4}, @cipso={0x86, 0x32, 0x1, [{0x6, 0x6, "9d311b11"}, {0x7, 0x12, "60d65b053ff6e20d0e827ae1393bd09d"}, {0x2, 0x7, "db2e1c5af2"}, {0x2, 0x3, "c5"}, {0x6, 0xa, "b1c1368b55d8ae2a"}]}, @end, @generic={0x83, 0xa, "8daf2c08b3aead01"}]}}}}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='C\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080c2cbd7000fddbdf250400000008000200040000000800030008000000050005000900000008000400a89a000024000180080006000f00000008000700", @ANYRES32=r5, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r7, @ANYBLOB="08000600010000000c00018008000700", @ANYRES32=r10, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4001) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='C\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080c2cbd7000fddbdf250400000008000200040000000800030008000000050005000900000008000400a89a000024000180080006000f00000008000700", @ANYRES32=r5, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r7, @ANYBLOB="08000600010000000c00018008000700", @ANYRES32=r10, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x58, r11, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x62, 0x46}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000046) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.774428067s ago: executing program 0 (id=691): socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x1548, 0x2c, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {0x6, 0x7}, {0x0, 0xfff1}, {0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x151c, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_INDEV={0x14, 0x8, 'ip6_vti0\x00'}, @TCA_U32_CLASSID={0x8, 0x1, {0xffe0, 0xfff3}}, @TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x1, 0x3, 0xfb48, 0x7, 0x5, 0x3, 0xa, 0x0, 0x7, 0xec, 0x1, 0x8, 0x0, 0x6b, 0x7ff, 0x54f6f8ea, 0x7, 0xe491, 0x80000, 0xfb, 0x1, 0x1, 0xd8e, 0x8, 0x3, 0x5, 0x7ff, 0x8, 0x3, 0x5, 0x6, 0x3ff, 0x8, 0x1000, 0x7, 0x0, 0x10001, 0x8, 0x73bb, 0x9, 0xfff, 0xfff, 0x24, 0x8, 0xf5a1, 0xffff7fff, 0x7, 0x10, 0x5, 0x5, 0x8, 0x6, 0xf, 0x0, 0x9, 0xff, 0x726cb5a5, 0x6, 0x40, 0xb, 0x5, 0x9, 0xfffffff9, 0x2, 0x7, 0x4, 0xc67, 0x9, 0x3, 0x19, 0x0, 0x3, 0xfffffffb, 0x3, 0x7f, 0x3, 0x9, 0x3, 0x8, 0x5, 0x0, 0x1, 0xa, 0x1, 0x3, 0x8, 0x1000, 0x5, 0x9, 0x6a, 0xc, 0x6, 0x9c91, 0x89, 0x1, 0xc, 0x1, 0x3, 0x4, 0x0, 0x3, 0x5, 0x60000, 0xb51, 0x1, 0xfffffff8, 0x371, 0xf04f, 0xb2b0, 0x5, 0xb63d, 0x101, 0xb7b, 0x10, 0x3, 0x9, 0x1, 0x0, 0x2, 0x9, 0x69dd, 0x5, 0x4c92, 0x8, 0x760, 0x5, 0x2, 0x100, 0x7ff, 0x0, 0x6, 0xee2, 0x365a800, 0x6, 0x2, 0x5, 0x2, 0x6, 0x654, 0x8, 0x2, 0x6, 0x3, 0x7c, 0xe, 0xfffffeff, 0x1ff, 0x8, 0x7, 0x401, 0x2, 0x0, 0xffffffff, 0xf0c, 0x0, 0x7, 0x0, 0x7f, 0x6, 0xf, 0x2, 0x2, 0x2, 0x8, 0x7, 0x80000001, 0x1, 0x2, 0x0, 0x1, 0x0, 0x9, 0x3, 0xfffffff8, 0x1, 0x0, 0x8, 0x7f, 0x1, 0x9, 0x400, 0x1, 0xfff, 0x8e, 0x2, 0x3, 0x8, 0x0, 0x9, 0x0, 0x2, 0x0, 0xc, 0xc, 0x4, 0x6, 0xffff8000, 0x1, 0x7, 0x6, 0x7, 0x2, 0x401, 0x4, 0x2, 0x1, 0xa9, 0xffff, 0xa, 0x3f, 0x4, 0x1000, 0x4, 0x1, 0xff, 0x10001, 0x97e9, 0x8, 0x3ff, 0x7, 0xffffffff, 0x6, 0x94, 0xffff, 0x7, 0x9, 0x101, 0x5, 0x2, 0x800, 0x6, 0x2, 0x7ff, 0x6, 0x3, 0x2e4, 0xffff, 0x80000001, 0x9, 0xbd60, 0x8f3, 0x101, 0x9ad, 0x7, 0x9, 0x5, 0xfffffffd, 0x5, 0x0, 0x101, 0x4, 0x1, 0xcc, 0x8]}]}, @TCA_U32_MARK={0x10, 0xa, {0x6, 0x8}}, @TCA_U32_ACT={0xfffffffffffffc48, 0x7, [@m_mpls={0x74, 0xf, 0x0, 0x0, {{0x9}, {0x4}, {0x47, 0x6, "6e8681a6ab1f659ea7eed5dfedd7eefc3de94e92731fa347b1d03231edc06b5f8650d447ba3c9ba0162b6c5dee265e5d65a61c8db7b749926ad1713f6e563cbd89179e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_U32_POLICE={0x1054, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x426, 0xe, 0x1a3, 0x3, 0x4, 0x7, 0x1, 0x7, 0x2, 0xb, 0x7, 0x8, 0x4c4b, 0x1, 0x3, 0x3, 0x3, 0xfff, 0x7, 0x2, 0x7, 0x2, 0x7, 0x2, 0x9, 0x730, 0xb263, 0x7, 0x5, 0x8, 0x6ad2, 0x6, 0x8, 0x9, 0x80000000, 0x7, 0x1ff, 0xee6, 0x400, 0xc, 0x6, 0x58a, 0xf, 0xbe, 0x4, 0x1736, 0xa1, 0x125, 0x2, 0xa2, 0x5, 0xfffffffa, 0x3ff, 0x1, 0xc, 0xff, 0x200000, 0xf, 0x8, 0x200, 0xb, 0xfffffff1, 0x200, 0x7, 0xd, 0x3, 0x401, 0xffffffff, 0x80000001, 0x3, 0x4, 0x1, 0x0, 0x8, 0xa, 0x100, 0xfdd, 0x5aa, 0x8000, 0x9, 0xf, 0x1, 0x2, 0x8, 0x3, 0x3, 0x8a76, 0x5, 0x0, 0xd483, 0x9, 0x1ff, 0x800, 0x0, 0x9, 0xff80000, 0xd, 0x4, 0x2, 0x3665, 0x6, 0x7, 0xa9a, 0x2, 0x6, 0xc6, 0x8, 0x730, 0xffffff5e, 0xa, 0x0, 0xffffffff, 0x6, 0x0, 0x100, 0x7, 0x1c, 0x1, 0x2, 0x81, 0x8, 0x3, 0x7, 0x1, 0x9, 0x8, 0x5, 0x6, 0xe9, 0x200, 0x4, 0x2, 0x5, 0x2, 0x6, 0x40, 0x0, 0x7, 0x4b4d, 0x3, 0xffffffff, 0x7ff, 0x80000001, 0x7, 0x80, 0x3, 0x4, 0x8001, 0xa, 0xbdc, 0x1, 0x3, 0x45d2, 0x8000, 0x3, 0x2, 0x8, 0x5, 0x8001, 0x1, 0x2, 0xffff, 0x4, 0x80000001, 0xd, 0x9, 0x1, 0x2dff, 0x2, 0x2, 0x7, 0x9, 0x3, 0x8, 0x33, 0x5, 0x63, 0xfffffff9, 0x6, 0xe, 0xfffffc00, 0x1, 0x2, 0x6, 0x8000, 0x18, 0x9, 0x70000, 0x6, 0x200, 0x6, 0x27, 0x6, 0x0, 0x80000001, 0x3, 0x10000, 0x8, 0x40, 0x1, 0x200, 0x0, 0x8, 0x40000000, 0x5, 0x4, 0x5, 0x4, 0x7, 0x80000000, 0x800, 0x8, 0xfff, 0x3, 0x8, 0x0, 0x4, 0x18a000, 0x4, 0x3, 0x0, 0x8, 0x8, 0x0, 0x1ffc00, 0x7, 0xfffffff9, 0x60, 0x4dd6, 0xc323, 0x8, 0x7, 0x6, 0x5, 0x3329, 0x3ff, 0xa4d, 0xe2aa, 0x10001, 0x5, 0xd83, 0x8f8c, 0x1, 0x4, 0xffffffff, 0x4, 0x8, 0x4, 0x3, 0x5, 0x10, 0x0, 0xfffffffb, 0x9, 0x7, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xa34b}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2e, 0x81, 0x3, 0x200, 0x3, 0x96a4, 0x5, 0x9, 0xe, 0x0, 0x800, 0x7fff, 0x6, 0x7, 0x7d39, 0x6, 0x6, 0x1c5e, 0xa12, 0xd, 0x2, 0xfff00000, 0x48, 0x5, 0x800, 0x5, 0x400, 0x4f9, 0x6, 0x40, 0x8, 0xf, 0x7fff, 0xf, 0x0, 0x9, 0x29, 0x0, 0x7b72, 0x40, 0xd15, 0x779eacf, 0x0, 0x9, 0xa908, 0x0, 0x0, 0xd, 0x0, 0xf, 0x3ff, 0x9, 0x8, 0x1, 0x5, 0x6, 0x7, 0x7, 0x2, 0x7, 0x0, 0x8, 0x7, 0x5, 0x34b, 0x3, 0x5, 0x15, 0x7, 0x5, 0x2, 0x0, 0xfffffffd, 0x1, 0x3ff, 0x3, 0x4, 0x4, 0x2, 0x0, 0x0, 0x8, 0x4, 0x2, 0x2, 0xe, 0x9, 0x6, 0x7f, 0x10, 0xffff, 0xffffff51, 0x800, 0x6, 0x45, 0x127, 0x7f, 0x80000000, 0xff, 0x2, 0x1, 0x0, 0x0, 0x101, 0x9, 0x2, 0x0, 0x6ea3, 0xe, 0x73, 0x5, 0x3, 0x7, 0x8000, 0x3, 0x81, 0x7, 0x200, 0x81, 0x5, 0x0, 0x2, 0x1b23, 0xd, 0x8, 0x28e, 0xd, 0xfffffffd, 0x2, 0x0, 0x1ff, 0x7, 0x8001, 0x6, 0xff, 0x8, 0x6, 0x0, 0x7, 0x1b9f, 0x1, 0xe108, 0x200, 0x3f, 0x6, 0x0, 0x6, 0x2, 0x7, 0xfe38, 0x7, 0x0, 0x1, 0xe9, 0x8710, 0x1, 0x6, 0x6, 0x8, 0x200, 0x182b, 0x7f, 0x9, 0x8, 0x0, 0xfffffffd, 0x7, 0x80, 0x5, 0x10000, 0xa9, 0x6, 0xdc, 0x9, 0x2, 0xfffffff9, 0x2, 0x8, 0x9, 0x81, 0x8, 0x80000000, 0x7, 0x40, 0x200, 0x6, 0x200, 0x9, 0x7, 0xd6, 0x101, 0x186199a5, 0x6, 0x8, 0x22f, 0x10, 0x914, 0x5, 0x0, 0x5, 0x5, 0x80, 0x1, 0x21a, 0x1, 0xf, 0x2, 0x5, 0x3, 0x2, 0x1000, 0x114, 0x7, 0x0, 0x4, 0x3, 0x1, 0x9, 0x9, 0x8, 0xa, 0x633f, 0x7fff, 0xbce7, 0xd15, 0x985, 0xfffffffc, 0x387, 0x9, 0x431, 0x4, 0x5, 0x45, 0x3ff, 0x2, 0x80, 0x6, 0x80000001, 0x0, 0x1, 0xb, 0x4, 0x6, 0x9, 0x9, 0x7ff, 0x7, 0x4, 0x5, 0x4, 0x40, 0x1000, 0x1b6, 0x1, 0x3, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x9, 0x800, 0x1, 0x8, 0x0, 0x7, 0x51c2, 0x8001, 0x68d, 0x5, 0x1, 0x5, 0x4, 0x2, 0x2, 0x100, 0x8342, 0x8e2, 0x8, 0x98, 0x81, 0x1, 0x6, 0x4, 0x8, 0x5d79, 0x40, 0x5, 0x2, 0x2, 0x8dd2, 0x0, 0x5, 0x1, 0x800, 0x0, 0x6, 0xe1, 0xaa05a3f, 0x0, 0x7fff, 0x2, 0x3, 0xa, 0x4, 0x5, 0xe3, 0x800, 0x10001, 0x101, 0x7, 0x4e, 0xfd00, 0x3, 0x80000000, 0xfffffffe, 0x0, 0x9, 0x7, 0x80000001, 0x1, 0x2, 0x82, 0x6, 0x4, 0x5, 0x87, 0xa, 0x4, 0xf, 0xffff, 0x8, 0x8, 0x9e5b, 0x100, 0xfffffff0, 0xe370, 0x1, 0x3a, 0x6, 0xfffffffc, 0x0, 0x6, 0x8, 0x7ff, 0x40, 0x5, 0x4, 0xfffffffe, 0x933, 0x6, 0x6, 0x4, 0x5, 0x7, 0x80000000, 0x5, 0x2, 0x0, 0x4, 0xd, 0x9, 0x17, 0x4, 0x0, 0x10, 0x6, 0x9, 0x3, 0xf3, 0xc005, 0x2, 0x2, 0x8000, 0x3, 0x6, 0x0, 0x8, 0x3, 0x5, 0x7, 0x7ff, 0x3, 0x7, 0xfff, 0x89, 0x4eee, 0xfffff432, 0x3, 0xa4, 0x5, 0x7ff, 0x6, 0x10000, 0x4, 0x5, 0x78d, 0x5, 0x6, 0x81, 0x8, 0x3, 0x7fff, 0xaa98, 0x400, 0x9, 0x4, 0x5, 0x7, 0x6, 0x5, 0x304, 0x8000, 0xd2b, 0x6, 0xe3da, 0x9, 0x9, 0x6, 0x8, 0x5, 0xb6, 0x2, 0x2, 0x8, 0x2, 0x1, 0x9, 0x2, 0x800, 0x8, 0x2, 0xff43, 0x5, 0x80000000, 0x2, 0x2, 0xfb88, 0x2, 0x4, 0xb420, 0x7fffffff, 0xe, 0x40, 0x4, 0x4, 0x6, 0xfe2, 0x7, 0x10001, 0x5, 0x79, 0x6, 0x8, 0x2, 0xc945, 0xd0, 0xa, 0xa, 0x101, 0x1, 0xfffffffa, 0xb, 0x2, 0x4, 0x56fca9de, 0x2, 0x0, 0x5, 0x800, 0x79e, 0x8, 0x7, 0xffffffff, 0x2, 0x1, 0x40, 0x200, 0x3b9, 0x6, 0x3, 0x28, 0x4, 0x9, 0x2, 0x7, 0x101, 0x7bb9, 0x4, 0x7ff, 0xfffffffd, 0xfd, 0x2, 0x8, 0xa, 0x5, 0x6, 0x5, 0x7ff, 0x6, 0x2, 0x1, 0x2, 0x95fa, 0x7, 0x0, 0x41, 0x1, 0x3, 0x6, 0x2, 0x3, 0x1, 0x6, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3866}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10001}, @TCA_POLICE_RATE={0x404, 0x2, [0x51, 0x3ff, 0x3, 0x2, 0xf, 0x4, 0x8, 0x3, 0x0, 0x8001, 0x3, 0x7, 0xfff, 0x6, 0x9, 0x3, 0x0, 0x8, 0xc308, 0x5, 0x1, 0x2, 0x10, 0x9, 0x8, 0x7fffffff, 0xfffffff9, 0x7, 0x80000000, 0x46, 0x400, 0x9, 0x1, 0xf02, 0x100, 0xfffff896, 0x1ff, 0x7, 0x1, 0x7, 0x9, 0x5b, 0x80000001, 0xb848, 0x0, 0x4080000, 0x74, 0x6, 0xb295, 0xa496, 0x3, 0x2, 0xb, 0xa, 0x0, 0x7, 0x0, 0x3ff, 0x7, 0x3, 0x3, 0x0, 0x3, 0x6b6, 0x82, 0x1000, 0x10001, 0x9, 0x1, 0xa8c, 0x92f, 0x1, 0x2b93, 0x6, 0x5, 0xf48d, 0x5, 0x400, 0x1, 0xe5e, 0x1, 0x6, 0x10001, 0x80, 0x7, 0x56b, 0xb, 0x29, 0x6, 0x0, 0x8, 0x7fffffff, 0x9, 0x0, 0xa3, 0x68c6654e, 0x71, 0x9, 0x31, 0xffff, 0x5, 0xd, 0xca6, 0x1, 0xd, 0x93, 0x6, 0xdbe, 0x0, 0x2, 0x0, 0x81, 0x4, 0xf, 0x3, 0x7, 0x0, 0x3, 0x2, 0x0, 0x7, 0x8001, 0xe3, 0x3, 0xf1, 0xc, 0xfffffff8, 0x2, 0x7e, 0x0, 0x9, 0x401, 0x3, 0x5, 0x8, 0x5, 0x97, 0x10001, 0x2, 0xa1, 0x8, 0x0, 0x10001, 0x8, 0x3, 0xe70, 0x3237, 0x0, 0xbc8, 0x7, 0x1, 0x5, 0x5564, 0xd7bc, 0x9, 0x2, 0x1, 0x4f, 0x7, 0x0, 0xfffffff7, 0x1, 0x200, 0x1, 0x5, 0x3, 0x3dee302c, 0x28202e3c, 0xa, 0x0, 0xfffffeff, 0x5, 0x400, 0x9, 0x0, 0x8000, 0x8885, 0x5, 0x8, 0x9, 0x5, 0x7ff, 0x6, 0x1acc0000, 0xdef4, 0x3, 0xd, 0x1ff, 0xb, 0x640, 0x3, 0x80000001, 0x1, 0x5, 0x8, 0xfffffff8, 0xaf46, 0x6, 0xff, 0x5, 0x8, 0xba7, 0xf8000000, 0x8e, 0xfffffff8, 0x200, 0x6, 0xac, 0x2, 0x3, 0x4, 0x7, 0x1, 0xa91, 0x5, 0x4, 0x7, 0x7, 0x5, 0x7, 0x3, 0x0, 0x7, 0x7, 0xaea, 0xf, 0x0, 0x2, 0xe, 0x9, 0xe, 0xd8, 0x4ba9cee, 0xffffffff, 0x6b5b0a51, 0x10, 0x7, 0x800, 0x10, 0x6a5, 0x101, 0x5, 0x4, 0x1ff, 0xffff, 0x6, 0x5, 0x4, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3ff, 0x2, 0x3]}]}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0x401}}]}}]}, 0x1548}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.664133556s ago: executing program 4 (id=693): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x1000, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 1.62819701s ago: executing program 0 (id=694): r0 = socket(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r1], 0x20}}, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30000000180001000000000000000000020000000000ff00000000000c0016800800020006000000060015000a"], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x40080) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffec77, @hyper=0x300}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newnexthop={0x2c, 0x68, 0x400, 0x3, 0x25dfdbfd, {}, [@NHA_GROUP={0x1d, 0x2, [{0x1, 0x25}]}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x4004040) preadv(r0, &(0x7f0000000740)=[{}, {&(0x7f0000000240)=""/241, 0xf1}, {&(0x7f0000000440)=""/232, 0xe8}, {&(0x7f0000000540)=""/199, 0xc7}, {&(0x7f0000000140)=""/48, 0x30}, {&(0x7f0000000340)=""/108, 0x6c}, {&(0x7f0000000640)=""/229, 0xe5}], 0x7, 0x0, 0x85) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(r4, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000480)={0x0, 0x5}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000840)={'sit0\x00', &(0x7f00000007c0)={'tunl0\x00', 0x0, 0x20, 0x7, 0x0, 0xffff340e, {{0xc, 0x4, 0x3, 0x4, 0x30, 0x67, 0x0, 0x4f, 0x4, 0x0, @rand_addr=0x64010102, @multicast1, {[@ssrr={0x89, 0xb, 0xda, [@empty, @remote]}, @timestamp={0x44, 0x8, 0xeb, 0x0, 0x0, [0x283e]}, @ssrr={0x89, 0x7, 0xa0, [@remote]}, @end]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x9, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xcb, '\x00', r5, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a09040000000000000000020000000900010073797a30000000000900020073797a3200000000200004801c0001800a00010071756575650000000c000280080004"], 0x74}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000900)={@link_local={0x3, 0x80, 0xc2, 0x18}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0xd4aa6c3a0ba5a270, 0x0, 0x0, 0x9, 0x7, {0x5, 0x4, 0x0, 0x30, 0x5, 0x68, 0x5, 0xea, 0x32, 0x0, @multicast1, @loopback}, "f34eeb708d04930a"}}}}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)=ANY=[@ANYBLOB="34000000000b010400000000000000000200000a080002400012000008000340000000000d000100727066696c74657200000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) 1.555099922s ago: executing program 1 (id=695): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a000000000000000000000014000500ff"], 0x30}, 0x1, 0x11}, 0x0) 1.530061494s ago: executing program 2 (id=696): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/cgroup\x00') ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 1.477464664s ago: executing program 4 (id=697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x40000010) 1.414983103s ago: executing program 0 (id=698): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x1, 0x8000, 0x8db, 0x6, {{0x6, 0x4, 0x0, 0x7, 0x18, 0x66, 0x0, 0x29, 0x29, 0x0, @remote, @multicast2, {[@noop]}}}}}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x1e, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f00000003c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x3, 0x6, 0x10000}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000500)=[{0x5, 0x1, 0xb, 0xb}, {0x3, 0x4, 0x3, 0xc}, {0x5, 0x3, 0xb, 0x9}, {0x0, 0x1, 0xf}, {0x0, 0x4, 0xd, 0xa}, {0x0, 0x5, 0x9, 0x6}, {0x1, 0x5, 0xb, 0xa}], 0x10, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f00000016c0)}, 0x20) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001740)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0x6027, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000100)=0x1, 0x4) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r11, 0x303, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x7, 0x5, &(0x7f0000000100)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], &(0x7f0000000140)='GPL\x00', 0x4, 0x1000, &(0x7f00000006c0)=""/4096, 0x0, 0x4, '\x00', r5, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r6, 0x5, &(0x7f00000017c0)=[r7, r8], &(0x7f0000001800)=[{0x5, 0x5, 0x5, 0xa}, {0x1, 0x4, 0xc, 0x7}, {0x4, 0x5, 0x6, 0x3}, {0x1, 0x3, 0xa, 0x1}, {0x4, 0x4, 0x2, 0xb}], 0x10, 0xffff094e, @void, @value}, 0x94) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001d00000008000300", @ANYRES32=r3, @ANYBLOB="28002f80080001"], 0x44}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x40400c4) 1.414269984s ago: executing program 1 (id=699): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10820, 0x400}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}}, 0x4084) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000019440)=[{&(0x7f0000000340)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00000f7f89e3ff296aa1f6475322f000200000004a2471083ec6991778581acb6c0101ff00", 0x48}], 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'macvlan1\x00', {0x2, 0x4e23, @multicast2}}) 1.326821776s ago: executing program 2 (id=700): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2], 0x24}}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) r4 = socket(0x40000000015, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x20000}, 0x24}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r7, &(0x7f0000001880)={@val={0x0, 0xc}, @val={0x1, 0x4, 0x0, 0x0, 0x3d}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "4966cd", 0x17, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e24, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x1ff, 0x0, 0x1}, {"50f6d8"}}}}}}, 0x4d) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1", 0x12}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x93}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}]}]}}]}, 0x54}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x114}], 0x1, 0x0, 0x0, 0x20040840}, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000fffe160003006873683a6e65742c706f72742c6e657400000005000400000000000900020073797a30000000000c000780080012409efffffd05000500"], 0x5c}}, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 1.319840413s ago: executing program 4 (id=701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$inet6(0xa, 0x3, 0x88) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000006000000000000000000000902000000040000000000000700000000000000005f"], 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, 0x0, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000025c0)={0xa8, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x4}, @broadcast, @device_b}}, @NL80211_ATTR_FRAME={0x49, 0x33, @mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_a, @broadcast, @random="ead2bd9a98d6", {0x0, 0x680}, @value=@ver_80211n={0x0, 0x2, 0x0, 0x3, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, @val, @void, @val={0x3, 0x1, 0xe}, @val={0x2d, 0x1a, {0x4000, 0x3, 0x3, 0x0, {0x9, 0xee, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x300, 0x192a, 0xe}}, @val={0x72, 0x6}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @initial, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa8}}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@broadcast, @in6=@remote, 0x4e22, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x16}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000000, 0x4, 0x200000003, 0x9}, {0x5, 0xfffffffffffffff8, 0x0, 0x1}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@remote, 0x0, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a010200000000000000000200fffe0900010073797a30000000000900010073797a30010000002800048024000180090001006d657461000000001400028008000240000000140800024000000013140000001100010000000000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x200448c0}, 0x0) 1.293982826s ago: executing program 0 (id=702): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"/326, @ANYRES16=0x0, @ANYBLOB="840629bd7000fbdbdf250200000008000100020000000800020002000000080002000200000008000200020000000800010003000000080001000000000008000100000000000800010001000000"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) (async) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) recvmmsg(r1, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000001580)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0x1000) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x10) (async) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000040)={0x10, 0x0, "f4e6e719ef6554d2af459fd30052287b"}) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/11], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) 1.24638638s ago: executing program 3 (id=703): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) (async, rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000b00)={'nat\x00', 0x0, 0x3, 0x0, [0x9, 0x0, 0x7fffffffffffffff, 0x4991, 0x9, 0xf43], 0x0, 0x0, 0x0}, &(0x7f0000000800)=0x78) 1.086906155s ago: executing program 1 (id=704): pipe(&(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)='w', 0x1}], 0x1000000000000101, 0x1) (async) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)='w', 0x1}], 0x1000000000000101, 0x1) close(r1) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x2, {}, 0x884d4e09817961eb}, 0x18) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) 1.083383665s ago: executing program 4 (id=705): sendto$l2tp(0xffffffffffffffff, &(0x7f0000000140)="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", 0x28e, 0x40080, 0x0, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100, 0x3}, 0x10) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000811"], 0x42) (async) syz_emit_ethernet(0x4e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60ff00f500180600fe807aca4830000000000000000000aafe8000000000004e2200"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c20000907800010403c600"], 0x0) 1.051842043s ago: executing program 0 (id=706): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) (async) sendmmsg$inet(r2, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000240), &(0x7f0000000280)=0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0900000000000000000009000000080001000100000005000700060000000500070000000000050008000b00"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc004) socket$nl_generic(0x10, 0x3, 0x10) 986.063727ms ago: executing program 1 (id=707): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x2f, 0x0, 0xee, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r4, &(0x7f00000001c0), 0x2, 0x0) (async) mkdirat$cgroup(r4, &(0x7f0000000300)='syz1\x00', 0x1ff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x8, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70fd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x40}]}}}]}, 0x40}}, 0x0) (async) mkdirat$cgroup(r4, &(0x7f0000001e40)='syz0\x00', 0x1ff) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r8, 0x4) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r4, r2, 0x1b, 0x202c, 0x0, @void, @void, @value=r8, @void, r3}, 0x20) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, &(0x7f0000000000)=0x10, 0x4) (async) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x1d, 0x0, &(0x7f0000000580)=0x44) (async) syz_emit_ethernet(0x92, &(0x7f0000000380)={@remote, @empty, @val={@void, {0x8100, 0x2, 0x1}}, {@ipv4={0x800, @igmp={{0x1e, 0x4, 0x0, 0x3e, 0x80, 0x68, 0x0, 0xa, 0x2, 0x0, @rand_addr=0x64010101, @private=0xa010102, {[@timestamp_prespec={0x44, 0x14, 0x1d, 0x3, 0xf, [{@multicast2, 0x7e}, {@rand_addr=0x64010100, 0x3e6fb740}]}, @end, @timestamp_addr={0x44, 0x24, 0x60, 0x1, 0x5, [{@multicast1, 0x2}, {@broadcast, 0x8}, {@multicast1, 0x4}, {@empty, 0x1}]}, @lsrr={0x83, 0x1f, 0x7f, [@broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty, @local, @multicast2]}, @lsrr={0x83, 0xb, 0xb0, [@private=0xa010102, @multicast2]}]}}, {0x15, 0x8, 0x0, @multicast1}}}}}, &(0x7f0000000440)={0x0, 0x3, [0xc70, 0x113, 0xfad, 0x11f]}) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)={0x40, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0) 854.640059ms ago: executing program 0 (id=708): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1004e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a00)={@cgroup, 0xffffffffffffffff, 0x1f, 0x200c, 0x0, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000780)={@local, @empty, @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x1, 0x3, 0x60, 0x67, 0x0, 0x9, 0x2f, 0x0, @rand_addr=0x64010101, @private=0xa010102, {[@ssrr={0x89, 0x3, 0xd5}, @timestamp_addr={0x44, 0x4, 0x56, 0x1, 0xf}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x4, 0x2, 0x0, 0x1, 0x1, 0x5}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0x1, 0x2, 0x0, 0x3, 0x4, 0x2}, 0x2, {0x120, 0xfd, 0x2, 0x9, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x2}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@deltclass={0x24, 0x29, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xb, 0xa}, {0x4, 0x9}, {0xb, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4e000) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r6) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x2000}, {r1, 0x8104}], 0x2, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 852.621756ms ago: executing program 2 (id=709): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x400, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r4, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 825.86929ms ago: executing program 1 (id=710): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x28) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x80000006}]}, 0x10) bind$alg(r1, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000280)="ebe3a0e9796cfd1647e2000800000000000080b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51795873048918526a5b8361a81f57afdbd06da680e1cb8c68f1629d2a439cc63e2629bdd3e7127d8dcb15b9e7451d77a4c", 0x6e}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="92dc2ae77b5e98ab7563076685c8497e1eab1b4a51ee8c1645041bc9a3923140be3d63575175a251acb047ce663658e0c3a735a8909fb99274a05bb3d83255a5a23518ee99cd99518c164345843881393aa6fbf90273e647694d6800a78ca981be9512299eeb7c6e5b77b517ad3e7b59dac9dc070f71a5a08131161f171395f16075114f98", 0x85}, {&(0x7f0000000180)="c5fa92e793f614", 0x7}], 0x2, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x10c0, 0x40}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001780)="423a2273f05ad3924f0405b53934ed3ed8ed67581bbf8cfef289d95deb0a9528de85a0b58ec9d3476834487347ede3605b02951bace755fa13fd52c3edbb60ef71c1b1cb348add5e26f432c8e38a902ff0b5f45a8d1e874c86f876616bab0288f67e7bf2c21d9f055c040108ad4d629a83c663f41a5f4574ca1957907197ccc2696d772bb3f17f76614e064f6bc8d16272e714a33300b399a2ac16bb9bf8", 0x9e}, {&(0x7f0000001e40)="eacedf299f2c389252c7253fbd1941689a60a3cb06563834abec68e4950de801bd13a49e777815", 0x27}], 0x2, &(0x7f0000001840)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x58, 0x117, 0x2, 0x44, "61d76588542decde9361b401c849b49fb21bf60415f2609aa4ed96629f5f5896603053ba7a21ad87e12d329abedfaa56025c54fb7251b96653c559d97abb251a901ef978"}], 0xa0, 0x8a5e32725ceeb476}], 0x3, 0x40800) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}]}, 0x48}}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r5) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000001d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001d00)={&(0x7f00000019c0)={0x324, r7, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x120, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x101, 0x3, "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"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x92}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x948c}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x595c907c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x58}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd75}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x23}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x400}, 0xd1) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000001d80)={'nat\x00', 0x0, 0x0, 0x0, [0x6, 0xfc08, 0x1, 0x6, 0xa8, 0x1]}, &(0x7f0000001e00)=0x78) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001e80)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001f00)="b5f608d1f493cc6b995be11f8c3c66c89954c7bbebefdba6a7e5ce6aefc84cfca757219b7e29d2ca3611760b8406dc1137d29b9bbbe2e52ddd99c7b26ca2ac8a579f50f967ca2eb1061d78002db03fef315275d0c9c7ca7cc3e59250c18f0f5aacd7f88c83cc145c6e767ecffb300c212fadc2678df56a81339f751369686deda7320f5477e4fa1b497473eb26ab6a6019fb9faa0c64f086d64f373ad155c44eeffb48afeabbc43331b5f17bce6634d38d1f27491ce093e143f2fb9bd45d9b2bb269f27f7836fbb729949ce18a36f7aa", 0xd0}], 0x1, 0x0, 0x0, 0x40000}, 0x4008801) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) 767.246104ms ago: executing program 4 (id=711): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000180)=0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x10702, 0x0, 0x0) 740.528449ms ago: executing program 2 (id=712): r0 = socket$inet(0x2, 0x2, 0x8) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4f23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x40c0899) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000680)=ANY=[@ANYBLOB="460771106f71728371cd3ddb4879c0db51a603cf845ce5c406a432479ec2a1acc80ed784664072479bcaea8a201e4d79fc1cf71d306e4819349a140d637e8b622d8e61d5d0832b1cec627d3d57db70eabea25e9b4bb77974d94d122d266182f8c805f777ed99efcfab455d4f1077705b1e5ee50e6836055408602b7215de1c27a06074462ccd0f8affeff38d5ee806b5b2e542e26aa54766365d6e149ce2fc425ceef64bb0f4a8ed44fa5f25f00367c27dc7747beadddfe672fd8e2c30dccf6be4f5", @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf251200000008000300", @ANYRES32=r5, @ANYBLOB="0600be008fe100000a0006000802110000010000"], 0x30}}, 0x0) r6 = epoll_create1(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000067e1f396000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000e094", @ANYRESOCT=0x0], &(0x7f0000000080)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x480}, {r9, 0xa088}, {r1, 0x8041}], 0x3, 0x0, 0x0, 0x0) mmap(&(0x7f000006a000/0x2000)=nil, 0x2000, 0xd, 0x4000010, 0xffffffffffffffff, 0x2000) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf251f0000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="58c858ac3b10f4564def06009b9275123fbadc6c078ffd91233302000000000000000c00060000000000000000000c000600b8eccf25b0aea41f1995b483d7549efe0ff15bc7966ff253cf02f43667de21480130840aaa1ccb42debd78253ce1f767cf50d8fdd1893d4cc3269223ce91e740c360c471761f54cc7aea7121d5219667"], 0x54}}, 0xd) r10 = socket$unix(0x1, 0x1, 0x0) socket(0x2, 0x6, 0x0) setsockopt$sock_int(r10, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r10, &(0x7f0000000080)={0xa002a008}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="020f00000f0000000000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000fe80000000000000000004000000000005001700000000000a00000000000000ff0100000000000000000000000000010000000000000000"], 0x78}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 559.980211ms ago: executing program 1 (id=713): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xfe33) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000140)=""/182, 0xb6}, {&(0x7f0000000200)=""/244, 0xf4}, {&(0x7f0000000000)=""/26, 0x1a}, {&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f0000000300)=""/249, 0xf9}, {&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f0000000400)=""/164, 0xa4}, {&(0x7f0000000500)=""/41, 0x29}, {&(0x7f0000000540)=""/117, 0x75}, {&(0x7f0000000680)=""/175, 0xaf}, {&(0x7f0000000740)=""/227, 0xe3}, {&(0x7f00000004c0)=""/54, 0x36}, {&(0x7f0000001d40)=""/240, 0xf0}, {&(0x7f0000000940)=""/100, 0x64}, {&(0x7f00000009c0)=""/35, 0x23}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/195, 0xc3}, {&(0x7f0000001b00)=""/142, 0x8e}], 0x12}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f00000025c0)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x14800}, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r7, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x8000000000000055, 0x10000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6d}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = socket(0x9, 0x6, 0xfffffff9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r8, 0xdb4aa000) 222.834921ms ago: executing program 3 (id=714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x34, r2, 0x801, 0x0, 0x800, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}]}]}, 0x34}}, 0x800) (async) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032cbd7000fedbdf2500000000140002"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="030700000000000000000480040007801300010062726f6164636173742d6c696e6b000019000780080003000000000008000200000000000800030000000000080002"], 0x7c}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x21c, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x167}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8caa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x74, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000000000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xbbcd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4151}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x36d6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40000080}, 0x40010) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)=ANY=[@ANYBLOB="54010000160001000000000000000000fc010000000000000000000000000002ac1414bb000000000000000000000000000000fb000000000000200004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d36c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000200000026bd70000200001002000000000000000000000004000000050000000c"], 0x154}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) 139.060777ms ago: executing program 2 (id=715): r0 = socket$inet6(0xa, 0x800, 0x8000208) sendto$inet6(r0, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e22, 0x7ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) close(r2) (async) r3 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x10) (async) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) (async) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r0, 0x1) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) 122.122493ms ago: executing program 3 (id=716): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000000)=""/242, 0xf2}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ec0)=@newtaction={0x894, 0x30, 0xffff, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x101}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x1, 0x3, 0x3, 0x0, 0x89, 0x8, 0x2, 0x81, 0x8ad0, 0x29a8, 0x5, 0xfffffffe, 0x3, 0x1, 0x3, 0x7, 0x1, 0x6, 0x9, 0x7, 0x2, 0xffff, 0x1b1e88b6, 0x1b, 0x9, 0x6, 0x9, 0x7, 0xb, 0x5, 0x2, 0x5, 0x4, 0x654, 0x8001, 0x7, 0x7dfb, 0x6, 0x6, 0x8001, 0x7, 0x1, 0x5, 0x9, 0x4, 0x80000001, 0x83, 0x1, 0x1, 0x0, 0x1, 0x7, 0x7, 0x800, 0x7, 0xd, 0x6, 0x6, 0x8, 0xfffffff9, 0xfffffffa, 0x80000000, 0x6, 0x3, 0xc9, 0x7, 0x3, 0x3, 0x0, 0x7, 0xf, 0x2, 0x6, 0x389, 0x8, 0x7fff, 0x2, 0x0, 0xd12e, 0x6, 0x0, 0xdd7, 0x1, 0x3ff, 0x200, 0x0, 0x1, 0x8, 0xc, 0xfddd, 0x3, 0x7f, 0x0, 0xc1a, 0xa, 0x7fffffff, 0xffffffff, 0x7, 0xfffffffc, 0x5, 0x3, 0x401, 0x4, 0xa9, 0x5, 0x3ff, 0x6, 0x6, 0x8, 0xf33, 0x8, 0x6, 0x0, 0x3, 0x2, 0x1, 0x4, 0xfffffe00, 0x5, 0x7fffffff, 0x1, 0x5, 0x60, 0x81, 0x6, 0x7b, 0x4, 0x0, 0x3, 0x2, 0x6, 0x7, 0x4b1d, 0x80000000, 0x7, 0x2, 0x7ff, 0x1, 0x40, 0x1, 0x6, 0x0, 0x5, 0x7, 0x3, 0x9, 0x1, 0xfffffffd, 0x2a, 0x4, 0x3, 0x400000, 0x7, 0x9, 0x9, 0x4, 0x3, 0x4, 0x2a8f529d, 0x4c, 0x2, 0x7fffffff, 0x8, 0x7fff, 0x800, 0xe, 0xa92d, 0x0, 0x1, 0x6, 0xbf, 0x0, 0x1, 0x1, 0x5c, 0xfff, 0x5, 0x7a15, 0xfffffffd, 0x0, 0xac, 0x2e5bb190, 0xda3, 0x6, 0x1, 0x80000001, 0x2, 0x4, 0x7674, 0x7, 0x6, 0x7, 0x4932, 0x1, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8000, 0x4, 0x6, 0x25, 0x179, 0x0, 0x6d5, 0x4, 0x8, 0x6, 0x2, 0x0, 0x1, 0x5d, 0x6, 0x6c, 0x0, 0xe, 0x8, 0x53a, 0x2, 0x9, 0x4, 0x97, 0x3, 0x1f5, 0xbd0, 0x1, 0x5, 0xecfc, 0x5, 0x4, 0x9e38, 0x2, 0xffff, 0x2, 0xdb6f, 0xff, 0x1c, 0x9, 0x5, 0x800, 0xe685, 0xdb7, 0xfffffffa, 0x7, 0x2, 0x7ff, 0x997, 0xffff, 0x3, 0xd, 0x3, 0xe, 0x4, 0xbb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x80000001, 0x2, 0x9, 0x6, 0x9, 0x2, 0xffff, 0xfffffff9, 0x81, 0x5, 0x7fffffff, 0x81, 0x8000, 0xffffffff, 0x1, 0x8, 0x7, 0x7, 0xda8, 0xfffff800, 0x7fffffff, 0xfffffffa, 0x3, 0x4, 0x200, 0x100, 0x8, 0x7, 0x1ff, 0x0, 0xf1, 0x3, 0x8, 0x3, 0x10001, 0xc, 0x9, 0x200, 0x3, 0x543d, 0x74, 0x2, 0x8, 0x4, 0x37, 0x81, 0xd425, 0x1, 0x10, 0x2a8, 0x6, 0x9, 0x9, 0x1, 0x10001, 0x400, 0x6, 0x10001, 0x5, 0x40, 0x3, 0x400, 0xd87d, 0xfffffff7, 0x8, 0x3, 0x10001, 0xd1e, 0x4c8000, 0x348, 0x2, 0x8, 0x5, 0x2, 0x7fffffff, 0x0, 0x4, 0x5, 0x5, 0x0, 0x80000001, 0x10, 0xfffffc00, 0xffff, 0x81, 0x3, 0x1d4, 0x7ff, 0x3, 0x7, 0x1, 0x5, 0x1, 0x1000, 0x81, 0x4, 0x3, 0x10001, 0x80, 0x1, 0x5, 0x1, 0x9, 0x5, 0x5, 0x5, 0x8, 0xb, 0x5ca, 0xe, 0x6, 0x5, 0x4, 0x80000000, 0x0, 0x4, 0x24, 0x5, 0x46, 0x3e994374, 0x7, 0x6, 0xa, 0x7f, 0x6, 0x6, 0x800, 0x4, 0x67, 0x800, 0x1ff, 0x0, 0x788, 0x0, 0x8000, 0x100, 0x9, 0xe, 0xb, 0x5, 0x7, 0xfffffff0, 0x0, 0x4, 0x4, 0xfffffffc, 0x2, 0x3, 0xfffffc01, 0x0, 0x6, 0x4, 0xf, 0x3850, 0x4, 0xe00000, 0xb9c, 0x0, 0xfffffff9, 0x0, 0x7, 0x2, 0x80, 0xfffffff9, 0x0, 0xfffffffe, 0x30, 0x1, 0x7, 0x140000, 0xfffffff8, 0x23, 0x7fffffff, 0x1, 0x5, 0x9, 0x40, 0x7, 0x200000, 0x8000, 0x3, 0xc, 0x6, 0x4, 0x9, 0xb95, 0x6, 0x7ff, 0x7fffffff, 0x9, 0xbdd1, 0x1, 0x132c, 0x4, 0x8, 0x0, 0x8, 0x9e, 0x8, 0x8, 0xfff, 0xffff, 0x7, 0x9d, 0x15, 0x2, 0x1, 0x0, 0xac, 0x6, 0x2, 0x6, 0x9e, 0xb, 0x10, 0x5, 0x4, 0xac, 0x7961481c, 0xf5c9, 0x27cf, 0x1, 0x6, 0x80, 0x7, 0x1, 0x7, 0x7, 0x7, 0x0, 0x4, 0xd3, 0x1, 0xff, 0x9, 0x7fffffff, 0x3, 0x9c7, 0x1, 0x6, 0x7, 0x1, 0x8, 0xb, 0x1746, 0x0, 0x9, 0x40, 0x1, 0x8001, 0x29fb, 0x0, 0x7, 0x8]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0xffffffffffffffff, 0xffff21a5, 0x3, 0x4, {0x3, 0x2, 0xfffb, 0xc7, 0x6554, 0x7}, {0x3, 0x0, 0x5, 0x8, 0xd, 0x8}, 0x80, 0x5b2, 0x6}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x894}}, 0x0) 29.267772ms ago: executing program 3 (id=717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @rand_addr=0x64010102}}}], 0x20}, 0x24044804) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x6}, 0x15) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 64) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 64) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async, rerun: 32) sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6", 0x90}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f0000000e00)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235a7", 0xd0}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76", 0x56}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3", 0x2b}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae992000000", 0xd2}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c910000000000000000", 0x7b}, {&(0x7f0000000b80)="bd2f6aa36cea0e4bccda24dc5bd69ad762", 0x11}], 0x4}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b5d383823677f025217943343e363268a73daecfa0fdc5beb5a7ac332a11533627b41dbe33a6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a813bc3ebba62168141343c9938965233cdaef85778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e8ebc08f6e6dc652a12e000000000000000000", 0x9c}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d532", 0x18}], 0x2}}], 0x3, 0xc0) (async, rerun: 32) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x10, 0x1, 0xfffff067, 0x7}, &(0x7f0000000200)=0x14) (async, rerun: 64) r8 = socket$kcm(0x29, 0x2, 0x0) (rerun: 64) write$cgroup_pressure(r8, &(0x7f0000000140)={'full'}, 0xfffffdef) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x5452, &(0x7f0000000000)) (async, rerun: 64) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x6) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000000340)={r7, 0x401, 0xb}, 0x8) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4008000}, 0x20044000) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) (async, rerun: 32) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000440)={r7, 0x4, 0x4}, 0x8) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1d, &(0x7f0000000740)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @jmp={0x5, 0x0, 0xd, 0x0, 0xa, 0x0, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 2 (id=718): r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x004\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a00000018000d801400008008000300090000000800040008000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r2 = accept(r0, &(0x7f0000000380)=@l2, &(0x7f00000002c0)=0xfffffe54) connect$rxrpc(r2, &(0x7f0000000340)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x7, @private0}}, 0x24) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000100)=@buf) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000d40)={0x0, 0x7000003, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket(0x26, 0x6, 0x7) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x2d, 0x0) setsockopt$inet_int(r6, 0x0, 0x14, &(0x7f0000003d80)=0x2, 0x4) setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10) recvmmsg(r3, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/27, 0x1b}, 0x8}, {{&(0x7f00000000c0)=@ethernet, 0x80, &(0x7f0000000280)=[{&(0x7f0000000000)=""/48, 0x30}], 0x1, &(0x7f00000008c0)=""/4096, 0x1000}, 0x8}], 0x2, 0x45833af92e4b39ff, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300}, @address_request}}}}, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.83' (ED25519) to the list of known hosts. [ 66.275449][ T5820] cgroup: Unknown subsys name 'net' [ 66.406458][ T5820] cgroup: Unknown subsys name 'cpuset' [ 66.414413][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.836088][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.371991][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.378528][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.425334][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.441453][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.449386][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.458758][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.467729][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.475361][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.495182][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.502918][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.513006][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.513090][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.528895][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.532717][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.542848][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.564195][ T5850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.578001][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.579653][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.587320][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.593027][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.600061][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.609049][ T5851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.613062][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.620427][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.627596][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.636793][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.648487][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.648500][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.662887][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.677223][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.693245][ T5851] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.703063][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.062102][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 72.121290][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 72.151847][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 72.189841][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 72.349598][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.357635][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.370179][ T5831] bridge_slave_0: entered allmulticast mode [ 72.377051][ T5831] bridge_slave_0: entered promiscuous mode [ 72.399180][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.406519][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.413700][ T5831] bridge_slave_1: entered allmulticast mode [ 72.420270][ T5831] bridge_slave_1: entered promiscuous mode [ 72.493323][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 72.508240][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.515467][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.523061][ T5847] bridge_slave_0: entered allmulticast mode [ 72.529699][ T5847] bridge_slave_0: entered promiscuous mode [ 72.536820][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.544144][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.551271][ T5836] bridge_slave_0: entered allmulticast mode [ 72.558092][ T5836] bridge_slave_0: entered promiscuous mode [ 72.571523][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.578673][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.585826][ T5830] bridge_slave_0: entered allmulticast mode [ 72.592505][ T5830] bridge_slave_0: entered promiscuous mode [ 72.603788][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.610864][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.618207][ T5847] bridge_slave_1: entered allmulticast mode [ 72.625676][ T5847] bridge_slave_1: entered promiscuous mode [ 72.641054][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.648191][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.655432][ T5836] bridge_slave_1: entered allmulticast mode [ 72.661972][ T5836] bridge_slave_1: entered promiscuous mode [ 72.670478][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.682119][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.691509][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.699173][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.706461][ T5830] bridge_slave_1: entered allmulticast mode [ 72.713704][ T5830] bridge_slave_1: entered promiscuous mode [ 72.791346][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.803287][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.815043][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.834658][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.846315][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.875217][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.894011][ T5831] team0: Port device team_slave_0 added [ 72.927241][ T5847] team0: Port device team_slave_0 added [ 72.943958][ T5831] team0: Port device team_slave_1 added [ 72.951875][ T5830] team0: Port device team_slave_0 added [ 72.966987][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.974189][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.981285][ T5834] bridge_slave_0: entered allmulticast mode [ 72.989009][ T5834] bridge_slave_0: entered promiscuous mode [ 72.997793][ T5847] team0: Port device team_slave_1 added [ 73.014629][ T5836] team0: Port device team_slave_0 added [ 73.038449][ T5830] team0: Port device team_slave_1 added [ 73.053828][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.060948][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.068475][ T5834] bridge_slave_1: entered allmulticast mode [ 73.075428][ T5834] bridge_slave_1: entered promiscuous mode [ 73.088940][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.096264][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.122474][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.135643][ T5836] team0: Port device team_slave_1 added [ 73.148851][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.156092][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.182199][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.214574][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.221533][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.247757][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.270788][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.278084][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.304171][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.336067][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.347625][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.357398][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.364838][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.390801][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.411999][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.419159][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.445181][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.457900][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.465405][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.491451][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.519578][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.526916][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.553210][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.593776][ T5834] team0: Port device team_slave_0 added [ 73.608453][ T5831] hsr_slave_0: entered promiscuous mode [ 73.615269][ T5831] hsr_slave_1: entered promiscuous mode [ 73.625342][ T5847] hsr_slave_0: entered promiscuous mode [ 73.631462][ T5847] hsr_slave_1: entered promiscuous mode [ 73.637983][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.645891][ T5847] Cannot create hsr debugfs directory [ 73.654972][ T5834] team0: Port device team_slave_1 added [ 73.683370][ T5851] Bluetooth: hci1: command tx timeout [ 73.683375][ T54] Bluetooth: hci2: command tx timeout [ 73.688280][ T5843] Bluetooth: hci0: command tx timeout [ 73.701583][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.708823][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.734788][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.762464][ T5843] Bluetooth: hci4: command tx timeout [ 73.762724][ T5851] Bluetooth: hci3: command tx timeout [ 73.785007][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.791957][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.821375][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.838877][ T5830] hsr_slave_0: entered promiscuous mode [ 73.845465][ T5830] hsr_slave_1: entered promiscuous mode [ 73.851356][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.859293][ T5830] Cannot create hsr debugfs directory [ 73.912227][ T5836] hsr_slave_0: entered promiscuous mode [ 73.918580][ T5836] hsr_slave_1: entered promiscuous mode [ 73.925110][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.933715][ T5836] Cannot create hsr debugfs directory [ 73.986925][ T5834] hsr_slave_0: entered promiscuous mode [ 73.993338][ T5834] hsr_slave_1: entered promiscuous mode [ 73.999238][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.007273][ T5834] Cannot create hsr debugfs directory [ 74.287538][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.302138][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.316693][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.330893][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.358164][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.385321][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.406374][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.415805][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.447624][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.468977][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.490415][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.509247][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.545983][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.555368][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.575995][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.606147][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.658013][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.669796][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.680213][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.689491][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.747086][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.773777][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.787483][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.828997][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.845223][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.852547][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.862344][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.869480][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.894401][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.936688][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.943810][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.963838][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.978282][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.985383][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.016487][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.025578][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.032787][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.041791][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.048879][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.136493][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.168202][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.192671][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.199766][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.228721][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.235863][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.268842][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.319378][ T5836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.330729][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.410013][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.417267][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.446916][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.485228][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.492386][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.611976][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.657156][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.762978][ T5851] Bluetooth: hci0: command tx timeout [ 75.768532][ T5851] Bluetooth: hci2: command tx timeout [ 75.771884][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.775091][ T5843] Bluetooth: hci1: command tx timeout [ 75.809710][ T5847] veth0_vlan: entered promiscuous mode [ 75.844031][ T5851] Bluetooth: hci3: command tx timeout [ 75.849622][ T5843] Bluetooth: hci4: command tx timeout [ 75.850319][ T5831] veth0_vlan: entered promiscuous mode [ 75.877045][ T5830] veth0_vlan: entered promiscuous mode [ 75.897916][ T5847] veth1_vlan: entered promiscuous mode [ 75.911106][ T5830] veth1_vlan: entered promiscuous mode [ 75.931675][ T5831] veth1_vlan: entered promiscuous mode [ 76.001285][ T5836] veth0_vlan: entered promiscuous mode [ 76.011891][ T5836] veth1_vlan: entered promiscuous mode [ 76.029248][ T5830] veth0_macvtap: entered promiscuous mode [ 76.044115][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.056762][ T5830] veth1_macvtap: entered promiscuous mode [ 76.066400][ T5831] veth0_macvtap: entered promiscuous mode [ 76.081722][ T5847] veth0_macvtap: entered promiscuous mode [ 76.104392][ T5836] veth0_macvtap: entered promiscuous mode [ 76.113894][ T5831] veth1_macvtap: entered promiscuous mode [ 76.129896][ T5836] veth1_macvtap: entered promiscuous mode [ 76.140078][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.151238][ T5847] veth1_macvtap: entered promiscuous mode [ 76.179080][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.191861][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.204359][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.215701][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.225925][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.237456][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.249194][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.266832][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.276188][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.285288][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.294306][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.306966][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.318023][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.328289][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.339006][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.350040][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.359397][ T5847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.368176][ T5847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.377223][ T5847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.386635][ T5847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.401408][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.413297][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.423172][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.433981][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.443942][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.454602][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.465580][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.478027][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.488698][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.498728][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.509654][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.520224][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.536600][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.547188][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.557230][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.568918][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.578818][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.589843][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.600994][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.617490][ T5831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.626490][ T5831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.635420][ T5831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.646123][ T5831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.668295][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.677796][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.686916][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.696074][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.712200][ T5834] veth0_vlan: entered promiscuous mode [ 76.749679][ T5834] veth1_vlan: entered promiscuous mode [ 76.854326][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.865542][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.892944][ T5834] veth0_macvtap: entered promiscuous mode [ 76.904332][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.905740][ T5834] veth1_macvtap: entered promiscuous mode [ 76.912204][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.953052][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.960272][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.964485][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.982153][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.986457][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.000201][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.010057][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.020572][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.030586][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.041115][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.052244][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.085005][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.087615][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.096991][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.108779][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.114146][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.131560][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.141472][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.152039][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.161900][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.172673][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.183621][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.213974][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.227436][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.237275][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.246194][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.270176][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.284326][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.295668][ T4319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.318183][ T4319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.398244][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.414218][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.431584][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.482014][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.508677][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.611185][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.642968][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.737950][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.760324][ T5928] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 77.792535][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.841593][ T5934] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5'. [ 77.843475][ T5843] Bluetooth: hci1: command tx timeout [ 77.857384][ T5851] Bluetooth: hci2: command tx timeout [ 77.862930][ T54] Bluetooth: hci0: command tx timeout [ 77.919563][ T5929] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5'. [ 77.923362][ T5851] Bluetooth: hci3: command tx timeout [ 77.934339][ T5843] Bluetooth: hci4: command tx timeout [ 78.057438][ T5929] tipc: Started in network mode [ 78.073393][ T5929] tipc: Node identity 9ef5fd16a12e, cluster identity 4711 [ 78.108416][ T5929] tipc: Enabled bearer , priority 0 [ 78.189287][ T5942] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 78.205483][ T5929] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 78.360486][ T5934] syzkaller0: entered promiscuous mode [ 78.367893][ T5934] syzkaller0: entered allmulticast mode [ 78.376729][ T5934] tipc: Resetting bearer [ 78.417512][ T5942] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 78.565454][ T5926] tipc: Resetting bearer [ 78.634140][ T5960] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.819430][ T5968] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11'. [ 79.124353][ T5833] tipc: Node number set to 1071381782 [ 79.805278][ T5926] tipc: Disabling bearer [ 79.827934][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 79.838081][ T5964] Zero length message leads to an empty skb [ 79.923644][ T5851] Bluetooth: hci2: command tx timeout [ 79.929519][ T54] Bluetooth: hci0: command tx timeout [ 79.936595][ T5843] Bluetooth: hci1: command tx timeout [ 80.002526][ T5843] Bluetooth: hci4: command tx timeout [ 80.008098][ T5851] Bluetooth: hci3: command tx timeout [ 80.073609][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.080774][ T5989] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.093333][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.110890][ T5991] netlink: 88 bytes leftover after parsing attributes in process `syz.3.16'. [ 80.120309][ T5991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16'. [ 80.141779][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'. [ 80.294502][ T5997] can: request_module (can-proto-0) failed. [ 80.326761][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.346752][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.426276][ T5978] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.441018][ T5978] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.453456][ T5978] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.464391][ T5978] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.546219][ T5993] bridge_slave_1: left allmulticast mode [ 80.557372][ T5993] bridge_slave_1: left promiscuous mode [ 80.567582][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.607423][ T5993] bridge_slave_0: left allmulticast mode [ 80.627930][ T5993] bridge_slave_0: left promiscuous mode [ 80.634196][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.671110][ T6007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18'. [ 81.028424][ T6022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23'. [ 81.614042][ T2151] cfg80211: failed to load regulatory.db [ 81.718647][ T6046] tipc: Started in network mode [ 81.732893][ T6046] tipc: Node identity 2efaf99e4d8b, cluster identity 4711 [ 81.770740][ T6046] tipc: Enabled bearer , priority 0 [ 81.930081][ T6037] syzkaller0: entered promiscuous mode [ 81.936999][ T6037] syzkaller0: entered allmulticast mode [ 81.943771][ T6037] tipc: Resetting bearer [ 82.117912][ T6068] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.125425][ T6068] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.271938][ T6068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.297120][ T6068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.404912][ T6068] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.415348][ T6068] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.424755][ T6068] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.434510][ T6068] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.509333][ T6035] tipc: Resetting bearer [ 82.774558][ T6082] __nla_validate_parse: 8 callbacks suppressed [ 82.774575][ T6082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.35'. [ 82.818032][ T9] tipc: Node number set to 1668413854 [ 83.707006][ T6035] tipc: Disabling bearer [ 83.718501][ T6069] bridge_slave_1: left allmulticast mode [ 83.725114][ T6069] bridge_slave_1: left promiscuous mode [ 83.730817][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.740187][ T6069] bridge_slave_0: left allmulticast mode [ 83.746014][ T6069] bridge_slave_0: left promiscuous mode [ 83.751696][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.814859][ T6074] veth0_to_batadv: entered promiscuous mode [ 83.829009][ T6074] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 83.869672][ T6082] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.877197][ T6082] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.111913][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 84.147245][ T6102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.40'. [ 84.156651][ T6094] netlink: 'syz.1.38': attribute type 4 has an invalid length. [ 84.192614][ T6102] netlink: 'syz.2.40': attribute type 7 has an invalid length. [ 84.233431][ T6101] netlink: 68 bytes leftover after parsing attributes in process `syz.2.40'. [ 84.383609][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 84.432596][ T6113] netlink: 32 bytes leftover after parsing attributes in process `syz.2.42'. [ 84.478817][ T6117] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 84.506385][ T6113] gretap1: entered promiscuous mode [ 84.525745][ T6120] netlink: 16 bytes leftover after parsing attributes in process `syz.3.44'. [ 84.880910][ T6142] netlink: 'syz.0.46': attribute type 4 has an invalid length. [ 84.907200][ T6144] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.47'. [ 84.982427][ T6139] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.47'. [ 85.039188][ T6139] tipc: Started in network mode [ 85.076405][ T6139] tipc: Node identity 366ac4af6b54, cluster identity 4711 [ 85.106822][ T6139] tipc: Enabled bearer , priority 0 [ 85.240475][ T6144] syzkaller0: entered promiscuous mode [ 85.253891][ T6144] syzkaller0: entered allmulticast mode [ 85.261133][ T6144] tipc: Resetting bearer [ 85.383332][ T6157] syzkaller0: entered promiscuous mode [ 85.388867][ T6157] syzkaller0: entered allmulticast mode [ 85.433233][ T6132] tipc: Resetting bearer [ 85.854420][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.54'. [ 86.182423][ T5885] tipc: Node number set to 1564394671 [ 86.799825][ T6132] tipc: Disabling bearer [ 86.816858][ T6164] vxcan5: entered allmulticast mode [ 88.263395][ T6217] netlink: 44 bytes leftover after parsing attributes in process `syz.2.59'. [ 88.450729][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.62'. [ 88.536678][ T6234] netlink: 'syz.3.63': attribute type 10 has an invalid length. [ 88.614498][ T6234] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 90.103363][ T6302] netlink: 36 bytes leftover after parsing attributes in process `syz.2.76'. [ 90.123525][ T6302] netlink: 16 bytes leftover after parsing attributes in process `syz.2.76'. [ 90.152262][ T6302] netlink: 36 bytes leftover after parsing attributes in process `syz.2.76'. [ 90.218254][ T6302] netlink: 36 bytes leftover after parsing attributes in process `syz.2.76'. [ 90.245322][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'. [ 90.255526][ T6309] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.263016][ T6309] IPv6: NLM_F_CREATE should be set when creating new route [ 90.270278][ T6309] IPv6: NLM_F_CREATE should be set when creating new route [ 90.279222][ T6303] netlink: 36 bytes leftover after parsing attributes in process `syz.2.76'. [ 90.280923][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'. [ 90.334205][ T6303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.76'. [ 90.358397][ T6316] warning: `syz.1.80' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.334598][ T6385] x_tables: duplicate underflow at hook 1 [ 91.706224][ T6405] netlink: 'syz.1.95': attribute type 5 has an invalid length. [ 91.725735][ T6411] netlink: 'syz.3.96': attribute type 7 has an invalid length. [ 91.993881][ T6435] netlink: 'syz.0.101': attribute type 8 has an invalid length. [ 92.580374][ T6469] netlink: 'syz.2.109': attribute type 4 has an invalid length. [ 92.609136][ T6469] !€ÿ: renamed from bond_slave_0 (while UP) [ 92.883549][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 93.290936][ T6514] netlink: 'syz.3.118': attribute type 4 has an invalid length. [ 93.695401][ T6534] __nla_validate_parse: 8 callbacks suppressed [ 93.695419][ T6534] netlink: 28 bytes leftover after parsing attributes in process `syz.0.123'. [ 93.734816][ T6534] netlink: 16 bytes leftover after parsing attributes in process `syz.0.123'. [ 93.850366][ T6538] netlink: 'syz.2.113': attribute type 4 has an invalid length. [ 93.966978][ T6544] syzkaller1: entered promiscuous mode [ 93.982531][ T6544] syzkaller1: entered allmulticast mode [ 94.003407][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'. [ 94.018856][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.125'. [ 94.030036][ T6546] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 94.115187][ T6550] netlink: 44 bytes leftover after parsing attributes in process `syz.1.127'. [ 94.346161][ T6556] netlink: 'syz.1.129': attribute type 10 has an invalid length. [ 94.397342][ T6556] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 94.612229][ T6578] netlink: 16 bytes leftover after parsing attributes in process `syz.2.131'. [ 94.832843][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 94.880425][ T6592] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.266855][ T6613] Cannot find add_set index 0 as target [ 95.268401][ T6611] sit0: entered promiscuous mode [ 95.293958][ T6611] netlink: 'syz.0.144': attribute type 1 has an invalid length. [ 95.319660][ T6611] netlink: 1 bytes leftover after parsing attributes in process `syz.0.144'. [ 97.248634][ T6638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.259316][ T6638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.269320][ T6638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.279764][ T6638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.289817][ T6638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.300342][ T6638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.310398][ T6638] batadv_slave_0: entered promiscuous mode [ 97.317317][ T6638] batadv_slave_0: left promiscuous mode [ 97.458662][ T6658] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 97.611872][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.154'. [ 97.646933][ T6663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.155'. [ 97.721493][ T6667] openvswitch: netlink: Message has 44053 unknown bytes. [ 98.024471][ T6689] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.031695][ T6689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.039217][ T6689] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.046352][ T6689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.112645][ T6689] bridge0: entered promiscuous mode [ 98.155547][ T6697] sctp: [Deprecated]: syz.2.164 (pid 6697) Use of int in maxseg socket option. [ 98.155547][ T6697] Use struct sctp_assoc_value instead [ 99.146946][ T6741] sit0: left promiscuous mode [ 99.183137][ T6743] __nla_validate_parse: 8 callbacks suppressed [ 99.183154][ T6743] netlink: 244 bytes leftover after parsing attributes in process `syz.0.174'. [ 99.241484][ T6741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.256742][ T6741] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.302573][ T6741] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.600000][ T6759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'. [ 100.895966][ T6701] Set syz1 is full, maxelem 65536 reached [ 101.136445][ T6769] netlink: 188 bytes leftover after parsing attributes in process `syz.2.180'. [ 101.891601][ T6790] x_tables: duplicate underflow at hook 1 [ 101.921747][ T6776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.983251][ T6776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.181243][ T6795] Bluetooth: MGMT ver 1.23 [ 102.221479][ T6776] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.244303][ T6800] netlink: 20 bytes leftover after parsing attributes in process `syz.4.188'. [ 102.262539][ T6776] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.277414][ T6776] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.291173][ T6776] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.321420][ T6800] nbd: socks must be embedded in a SOCK_ITEM attr [ 102.464680][ T6776] gretap1: left promiscuous mode [ 102.498324][ T6794] IPv6: NLM_F_CREATE should be specified when creating new route [ 102.524400][ T6794] IPv6: Can't replace route, no match found [ 102.586526][ T6809] netlink: 60 bytes leftover after parsing attributes in process `syz.4.189'. [ 102.784520][ T6814] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 103.592035][ T6839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.626320][ T6839] team0: Port device bond1 added [ 104.211651][ T6868] xt_TCPMSS: Only works on TCP SYN packets [ 104.449018][ T6881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.202'. [ 104.653261][ T6891] netlink: 40 bytes leftover after parsing attributes in process `syz.3.204'. [ 104.814382][ T6902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.847932][ T6902] team0: Port device bond0 added [ 105.101866][ T6921] vlan2: entered promiscuous mode [ 105.128026][ T6921] vlan2: entered allmulticast mode [ 105.153428][ T6921] hsr_slave_1: entered allmulticast mode [ 105.196184][ T6927] Bluetooth: MGMT ver 1.23 [ 105.199233][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 105.207183][ T6927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.210'. [ 105.239169][ T6927] netlink: 60 bytes leftover after parsing attributes in process `syz.1.210'. [ 105.485278][ T6944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.578066][ T6938] netlink: 68 bytes leftover after parsing attributes in process `syz.2.212'. [ 105.912914][ T6966] openvswitch: netlink: Invalid VLAN frame [ 106.193240][ T6980] netlink: 72 bytes leftover after parsing attributes in process `syz.1.222'. [ 106.202154][ T6980] netlink: 72 bytes leftover after parsing attributes in process `syz.1.222'. [ 106.596861][ T7002] netlink: 36 bytes leftover after parsing attributes in process `syz.0.226'. [ 106.648737][ T7002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.226'. [ 106.764577][ T6960] Illegal XDP return value 4294967274 on prog (id 141) dev N/A, expect packet loss! [ 106.970625][ T7031] vlan2: entered allmulticast mode [ 106.988096][ T7031] hsr0: entered allmulticast mode [ 107.012689][ T7031] hsr_slave_0: entered allmulticast mode [ 107.018372][ T7031] hsr_slave_1: entered allmulticast mode [ 107.175770][ T7036] netlink: 'syz.1.230': attribute type 12 has an invalid length. [ 107.184799][ T7045] netlink: 'syz.0.233': attribute type 29 has an invalid length. [ 107.213569][ T7031] netlink: 'syz.1.230': attribute type 12 has an invalid length. [ 107.228113][ T7047] netlink: 'syz.3.234': attribute type 4 has an invalid length. [ 107.242880][ T7045] smc: net device bond0 applied user defined pnetid SYZ0 [ 107.283413][ T7049] netlink: 'syz.3.234': attribute type 4 has an invalid length. [ 109.202660][ T7148] xt_CT: No such helper "syz1" [ 109.502978][ T7181] xt_time: unknown flags 0x4 [ 109.939181][ T7199] tipc: Enabling of bearer rejected, failed to enable media [ 110.437771][ T7222] __nla_validate_parse: 17 callbacks suppressed [ 110.437789][ T7222] netlink: 20 bytes leftover after parsing attributes in process `syz.1.270'. [ 110.471233][ T7223] netlink: 48 bytes leftover after parsing attributes in process `syz.0.268'. [ 110.471818][ T7222] netlink: 20 bytes leftover after parsing attributes in process `syz.1.270'. [ 110.501626][ T7222] xt_bpf: check failed: parse error [ 110.613400][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 110.692565][ T7222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.270'. [ 110.759304][ T7238] netlink: 28 bytes leftover after parsing attributes in process `syz.3.273'. [ 110.768542][ T7238] netlink: 'syz.3.273': attribute type 7 has an invalid length. [ 110.794359][ T7238] netlink: 'syz.3.273': attribute type 8 has an invalid length. [ 110.822691][ T7240] netlink: 2 bytes leftover after parsing attributes in process `syz.4.274'. [ 110.853145][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'. [ 110.865488][ T7244] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 110.932177][ T6806] IPVS: starting estimator thread 0... [ 110.945143][ T7238] bridge0: entered promiscuous mode [ 110.969111][ T7238] bridge0: left promiscuous mode [ 111.044003][ T7253] IPVS: using max 20 ests per chain, 48000 per kthread [ 111.701008][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.281'. [ 111.729136][ T7294] raw_sendmsg: syz.1.280 forgot to set AF_INET. Fix it! [ 112.034461][ T7303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.283'. [ 112.248440][ T7320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.977460][ T7361] team0: Device gtp0 is of different type [ 113.264958][ T7373] macvlan1: entered promiscuous mode [ 113.295859][ T7373] ipvlan0: entered promiscuous mode [ 113.311158][ T7373] ipvlan0: left promiscuous mode [ 113.323969][ T7373] macvlan1: left promiscuous mode [ 113.410028][ T7377] pimreg: entered allmulticast mode [ 113.436180][ T7380] pimreg: left allmulticast mode [ 114.722259][ T7420] sctp: [Deprecated]: syz.4.314 (pid 7420) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.722259][ T7420] Use struct sctp_sack_info instead [ 114.732685][ T5843] Bluetooth: hci0: command tx timeout [ 114.945933][ T7433] xt_TCPMSS: Only works on TCP SYN packets [ 115.096056][ T7438] xt_l2tp: v2 sid > 0xffff: 262144 [ 116.005734][ T7414] bridge: RTM_NEWNEIGH with invalid ether address [ 116.389193][ T7450] __nla_validate_parse: 5 callbacks suppressed [ 116.389210][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.325'. [ 116.445604][ T7450] vlan0: entered promiscuous mode [ 116.452762][ T7450] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 117.351480][ T7518] netlink: 52 bytes leftover after parsing attributes in process `syz.0.336'. [ 117.382983][ T7511] netlink: 52 bytes leftover after parsing attributes in process `syz.0.336'. [ 117.567623][ T7535] netlink: 20 bytes leftover after parsing attributes in process `syz.3.339'. [ 117.843193][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 117.899045][ T7554] netlink: 156 bytes leftover after parsing attributes in process `syz.2.345'. [ 117.931996][ T7554] netlink: 48 bytes leftover after parsing attributes in process `syz.2.345'. [ 118.111388][ T7562] netlink: 'syz.1.347': attribute type 39 has an invalid length. [ 118.239912][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.348'. [ 118.308153][ T7571] netlink: 20 bytes leftover after parsing attributes in process `syz.0.348'. [ 118.347380][ T7566] openvswitch: netlink: IPv4 tunnel dst address is zero [ 118.564951][ T7583] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 118.588399][ T7583] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 118.622031][ T7588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.354'. [ 118.652606][ T7588] netlink: 'syz.3.354': attribute type 6 has an invalid length. [ 118.707779][ T7587] team0: Port device bond0 removed [ 118.715274][ T7587] bond0: (slave 1!€ÿ): Releasing backup interface [ 118.728348][ T7587] bond0: (slave bond_slave_1): Releasing backup interface [ 118.759689][ T7587] team0: Port device team_slave_0 removed [ 118.778703][ T7587] team0: Port device team_slave_1 removed [ 118.787873][ T7587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.800640][ T7587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.819214][ T7595] bridge_slave_1: left allmulticast mode [ 118.827530][ T7595] bridge_slave_1: left promiscuous mode [ 118.837697][ T7595] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.865785][ T7595] bridge_slave_0: left allmulticast mode [ 118.875507][ T7595] bridge_slave_0: left promiscuous mode [ 118.881703][ T7595] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.140445][ T7604] netlink: 'syz.4.360': attribute type 2 has an invalid length. [ 119.148742][ T7604] netlink: 'syz.4.360': attribute type 8 has an invalid length. [ 119.178313][ T7604] netlink: 'syz.4.360': attribute type 1 has an invalid length. [ 119.189474][ T7604] netlink: 'syz.4.360': attribute type 2 has an invalid length. [ 119.485389][ T7617] xt_hashlimit: size too large, truncated to 1048576 [ 119.543265][ T7613] xt_hashlimit: size too large, truncated to 1048576 [ 119.604454][ T7624] : renamed from bond0 (while UP) [ 119.754142][ T7630] erspan0: entered promiscuous mode [ 119.784462][ T7630] gretap0: entered promiscuous mode [ 120.207398][ T7642] x_tables: duplicate underflow at hook 1 [ 120.615977][ T7664] netlink: 'syz.4.374': attribute type 1 has an invalid length. [ 120.678611][ T7663] netlink: 'syz.4.374': attribute type 1 has an invalid length. [ 120.864536][ T7663] bond1: entered promiscuous mode [ 120.892773][ T7663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.934576][ T7674] gretap0: entered promiscuous mode [ 121.137145][ T7687] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 121.524210][ T7708] __nla_validate_parse: 16 callbacks suppressed [ 121.524228][ T7708] netlink: 732 bytes leftover after parsing attributes in process `syz.2.385'. [ 121.621790][ T7708] netlink: 732 bytes leftover after parsing attributes in process `syz.2.385'. [ 121.956558][ T7741] netlink: 'syz.2.391': attribute type 1 has an invalid length. [ 122.037272][ T7741] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.085897][ T7749] bond1: (slave bridge2): making interface the new active one [ 122.096122][ T7749] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 122.300551][ T7762] netlink: 'syz.1.396': attribute type 1 has an invalid length. [ 122.387855][ T7762] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.492001][ T7767] gretap1: entered promiscuous mode [ 122.544938][ T7767] bond1: (slave gretap1): making interface the new active one [ 122.583875][ T7767] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 123.489446][ T7815] x_tables: duplicate underflow at hook 2 [ 123.597987][ T7815] netlink: 'syz.0.404': attribute type 29 has an invalid length. [ 123.647994][ T7816] netlink: 'syz.0.404': attribute type 29 has an invalid length. [ 123.694519][ T7819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.407'. [ 124.284574][ T7836] sctp: [Deprecated]: syz.1.412 (pid 7836) Use of int in max_burst socket option deprecated. [ 124.284574][ T7836] Use struct sctp_assoc_value instead [ 125.192889][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 125.201702][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 125.456371][ T7880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.422'. [ 125.953765][ T7894] syzkaller0: entered allmulticast mode [ 125.985395][ T7894] syzkaller0: entered promiscuous mode [ 126.188114][ T7927] No such timeout policy "syz0" [ 126.241491][ T7894] syzkaller0 (unregistering): left promiscuous mode [ 126.252520][ T7894] syzkaller0 (unregistering): left allmulticast mode [ 126.435602][ T7916] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 126.478036][ T7916] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 126.524197][ T7951] netlink: 'syz.1.436': attribute type 15 has an invalid length. [ 126.569614][ T7951] netlink: 232 bytes leftover after parsing attributes in process `syz.1.436'. [ 126.748476][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.436'. [ 126.818594][ T7965] trusted_key: syz.4.439 sent an empty control message without MSG_MORE. [ 127.129260][ T7984] netlink: 'syz.2.442': attribute type 2 has an invalid length. [ 127.378788][ T7996] xt_hashlimit: size too large, truncated to 1048576 [ 127.412564][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'. [ 127.421936][ T7994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.448'. [ 127.435794][ T7994] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.482470][ T7994] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.491222][ T7994] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.531077][ T7994] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.562019][ T7994] geneve2: entered promiscuous mode [ 127.578918][ T7994] geneve2: entered allmulticast mode [ 127.884574][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'. [ 127.895203][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.453'. [ 127.964933][ T8024] x_tables: duplicate underflow at hook 3 [ 128.096209][ T8035] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 128.275625][ T8035] syzkaller1: entered promiscuous mode [ 128.281347][ T8035] syzkaller1: entered allmulticast mode [ 129.051880][ T8088] netlink: 72 bytes leftover after parsing attributes in process `syz.0.464'. [ 129.251039][ T8094] netlink: 44 bytes leftover after parsing attributes in process `syz.3.467'. [ 129.973533][ T8127] netlink: 96 bytes leftover after parsing attributes in process `syz.2.474'. [ 129.999780][ T8127] netlink: 120 bytes leftover after parsing attributes in process `syz.2.474'. [ 130.575131][ T8137] netlink: 'syz.4.477': attribute type 1 has an invalid length. [ 130.702042][ T8097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.724394][ T8097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.083581][ T8097] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.108431][ T8097] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.117665][ T8097] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.126617][ T8097] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.237409][ T8097] veth0_to_batadv: left promiscuous mode [ 131.290220][ T8094] 8021q: adding VLAN 0 to HW filter on device  [ 131.297916][ T8094] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.308756][ T8094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.329084][ T8124] netlink: 'syz.0.475': attribute type 30 has an invalid length. [ 131.357432][ T8124] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.366430][ T8124] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.375270][ T8124] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.384025][ T8124] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.409920][ T8124] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.418961][ T8124] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.428263][ T8124] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.438496][ T8124] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.517783][ T8137] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 131.880890][ T8164] openvswitch: netlink: Flow key attr not present in new flow. [ 131.931702][ T8164] netlink: 32 bytes leftover after parsing attributes in process `syz.0.483'. [ 132.293938][ T8182] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.487'. [ 132.336164][ T8180] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.487'. [ 132.428918][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'. [ 132.451955][ T8187] x_tables: duplicate underflow at hook 2 [ 132.460215][ T8185] nbd: socks must be embedded in a SOCK_ITEM attr [ 132.546290][ T8187] netlink: 'syz.4.488': attribute type 29 has an invalid length. [ 132.611537][ T8187] netlink: 'syz.4.488': attribute type 29 has an invalid length. [ 132.779039][ T8192] netlink: 'syz.4.488': attribute type 10 has an invalid length. [ 132.819371][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.825831][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.924425][ T8192] team0: Device veth1_macvtap failed to register rx_handler [ 133.969796][ T8200] ªªªªªªü: renamed from lo [ 134.042185][ T8207] netlink: 'syz.0.491': attribute type 1 has an invalid length. [ 134.138286][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'. [ 134.340039][ T8207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.395200][ T8213] bond1: (slave ip6gretap1): making interface the new active one [ 134.453599][ T8213] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 134.506273][ T8217] 8021q: VLANs not supported on tunl0 [ 134.542538][ T8238] netlink: 68 bytes leftover after parsing attributes in process `syz.4.495'. [ 134.999256][ T8257] netlink: 124 bytes leftover after parsing attributes in process `syz.0.498'. [ 135.690651][ T8293] netlink: 40 bytes leftover after parsing attributes in process `syz.4.505'. [ 135.818833][ T8301] pimreg0: tun_chr_ioctl cmd 1074025677 [ 135.849851][ T8301] pimreg0: linktype set to 65534 [ 136.462201][ T8330] mac80211_hwsim hwsim5 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 136.975464][ T8359] netlink: 28 bytes leftover after parsing attributes in process `syz.2.521'. [ 137.224959][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 137.260759][ T8375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.526'. [ 137.277331][ T8375] netlink: 3 bytes leftover after parsing attributes in process `syz.1.526'. [ 137.685871][ T8397] smc: net device caif0 applied user defined pnetid SYZ1 [ 137.735911][ T8397] netlink: 44 bytes leftover after parsing attributes in process `syz.0.531'. [ 137.762655][ T8397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.531'. [ 137.828758][ T8397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.531'. [ 137.868451][ T8402] netlink: 'syz.0.531': attribute type 11 has an invalid length. [ 138.004974][ T8397] tipc: Started in network mode [ 138.013333][ T8397] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 138.028140][ T8397] tipc: Enabled bearer , priority 10 [ 138.271036][ T8420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.537'. [ 138.377199][ T8401] syzkaller1: entered promiscuous mode [ 138.391400][ T8401] syzkaller1: entered allmulticast mode [ 138.693313][ T8435] netlink: 36 bytes leftover after parsing attributes in process `syz.0.541'. [ 138.980838][ T8449] IPv6: sit1: Disabled Multicast RS [ 139.023447][ T8449] netlink: 16 bytes leftover after parsing attributes in process `syz.3.547'. [ 139.086361][ T8455] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 139.142468][ T8139] tipc: Node number set to 10136234 [ 139.304221][ T8462] netlink: 'syz.4.552': attribute type 11 has an invalid length. [ 139.490387][ T8470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.696092][ T8491] vlan2: entered promiscuous mode [ 139.702085][ T8491] gretap0: entered promiscuous mode [ 139.945222][ T8507] vxcan1: entered allmulticast mode [ 140.581071][ T8544] netlink: 'syz.2.568': attribute type 10 has an invalid length. [ 141.857117][ T8544] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.865257][ T8544] bond0: (slave team0): Enslaving as an active interface with an up link [ 142.317861][ T8577] bond0: entered promiscuous mode [ 142.324061][ T8577] bond_slave_0: entered promiscuous mode [ 142.329903][ T8577] bond_slave_1: entered promiscuous mode [ 142.340297][ T8577] dummy0: entered promiscuous mode [ 142.346737][ T8577] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 142.355120][ T8577] bond0: left promiscuous mode [ 142.360724][ T8577] bond_slave_0: left promiscuous mode [ 142.366745][ T8577] bond_slave_1: left promiscuous mode [ 142.372724][ T8577] dummy0: left promiscuous mode [ 142.693355][ T8592] __nla_validate_parse: 6 callbacks suppressed [ 142.693373][ T8592] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.580'. [ 142.747345][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.582'. [ 142.794503][ T8600] netlink: 148 bytes leftover after parsing attributes in process `syz.1.582'. [ 142.804371][ T8600] netlink: 148 bytes leftover after parsing attributes in process `syz.1.582'. [ 142.967018][ T8608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.585'. [ 142.996422][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.585'. [ 143.331752][ T8619] netlink: 'syz.1.588': attribute type 21 has an invalid length. [ 143.358501][ T8619] netlink: 132 bytes leftover after parsing attributes in process `syz.1.588'. [ 143.476714][ T8633] openvswitch: netlink: Flow actions attr not present in new flow. [ 143.621966][ T8642] netlink: 3696 bytes leftover after parsing attributes in process `syz.3.592'. [ 143.667292][ T8642] netlink: 3696 bytes leftover after parsing attributes in process `syz.3.592'. [ 143.725133][ T8648] netlink: 'syz.3.592': attribute type 10 has an invalid length. [ 143.810460][ T8648] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.849116][ T8648] : (slave team0): Enslaving as an active interface with an up link [ 143.886313][ T8653] netlink: 'syz.0.595': attribute type 1 has an invalid length. [ 144.018498][ T8658] netlink: 84 bytes leftover after parsing attributes in process `syz.1.598'. [ 144.098596][ T8656] netlink: 'syz.4.597': attribute type 14 has an invalid length. [ 144.519743][ T8673] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 145.051540][ T8699] geneve3: entered promiscuous mode [ 145.077465][ T8699] geneve3: entered allmulticast mode [ 145.872062][ T8705] netlink: 'syz.0.610': attribute type 1 has an invalid length. [ 146.106859][ T8731] netlink: 'syz.4.617': attribute type 10 has an invalid length. [ 146.137104][ T8731] team0: Device hsr_slave_0 failed to register rx_handler [ 146.474239][ T8747] netlink: 'syz.1.621': attribute type 3 has an invalid length. [ 146.546259][ T8747] netlink: 'syz.1.621': attribute type 4 has an invalid length. [ 146.756282][ T8762] netlink: 'syz.4.623': attribute type 21 has an invalid length. [ 147.019611][ T8784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.420112][ T8799] xt_socket: unknown flags 0x8 [ 147.590334][ T8816] sctp: [Deprecated]: syz.2.635 (pid 8816) Use of int in max_burst socket option. [ 147.590334][ T8816] Use struct sctp_assoc_value instead [ 147.854904][ T8829] bond0: (slave bond_slave_0): Releasing backup interface [ 147.884601][ T8831] openvswitch: netlink: Actions may not be safe on all matching packets [ 147.904376][ T8829] bond0: (slave bond_slave_1): Releasing backup interface [ 147.929369][ T8829] team0: Port device team_slave_0 removed [ 147.947457][ T8829] team0: Port device team_slave_1 removed [ 147.954545][ T8829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.967156][ T8829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.982683][ T8829] bond1: (slave gretap1): Releasing active interface [ 148.038348][ T8837] team0: Mode changed to "loadbalance" [ 148.052137][ T8839] __nla_validate_parse: 12 callbacks suppressed [ 148.052152][ T8839] netlink: 196 bytes leftover after parsing attributes in process `syz.2.640'. [ 148.078907][ T8839] netlink: 196 bytes leftover after parsing attributes in process `syz.2.640'. [ 148.118869][ T8846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.642'. [ 148.133852][ T8839] netlink: 19 bytes leftover after parsing attributes in process `syz.2.640'. [ 148.369021][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 148.835901][ T8872] geneve0: entered allmulticast mode [ 148.842109][ T8874] netlink: 76 bytes leftover after parsing attributes in process `syz.2.653'. [ 148.866065][ T8874] netlink: 76 bytes leftover after parsing attributes in process `syz.2.653'. [ 149.000279][ T8885] netlink: 20 bytes leftover after parsing attributes in process `syz.4.656'. [ 149.011083][ T8885] netlink: 20 bytes leftover after parsing attributes in process `syz.4.656'. [ 149.284299][ T8900] lo speed is unknown, defaulting to 1000 [ 149.290374][ T8900] lo speed is unknown, defaulting to 1000 [ 149.333945][ T8900] lo speed is unknown, defaulting to 1000 [ 149.371736][ T8900] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 149.390459][ T8900] lo speed is unknown, defaulting to 1000 [ 149.400411][ T8900] lo speed is unknown, defaulting to 1000 [ 149.419328][ T8909] netlink: 16 bytes leftover after parsing attributes in process `syz.4.661'. [ 149.434407][ T8913] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 149.459398][ T8900] lo speed is unknown, defaulting to 1000 [ 149.513391][ T8900] lo speed is unknown, defaulting to 1000 [ 149.551184][ T8900] lo speed is unknown, defaulting to 1000 [ 149.602804][ T8900] lo speed is unknown, defaulting to 1000 [ 149.913254][ T8934] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 150.307091][ T8946] can: request_module (can-proto-0) failed. [ 150.855155][ T8978] netlink: 'syz.3.681': attribute type 10 has an invalid length. [ 150.868707][ T8978] syz_tun: entered promiscuous mode [ 150.902705][ T8978] : (slave syz_tun): Enslaving as an active interface with an up link [ 151.040907][ T8997] : entered promiscuous mode [ 151.348138][ T9007] netlink: 'syz.3.688': attribute type 29 has an invalid length. [ 151.568203][ T9012] netlink: 'syz.1.689': attribute type 4 has an invalid length. [ 151.901496][ T9027] netlink: 'syz.1.695': attribute type 15 has an invalid length. [ 151.922595][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 152.226946][ T9037] netlink: 'syz.2.700': attribute type 1 has an invalid length. [ 153.437987][ T9103] ================================================================== [ 153.446190][ T9103] BUG: KASAN: slab-use-after-free in udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 153.454973][ T9103] Write of size 8 at addr ffff88801bf8d4b0 by task syz.3.717/9103 [ 153.462784][ T9103] [ 153.465135][ T9103] CPU: 0 UID: 0 PID: 9103 Comm: syz.3.717 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 153.465156][ T9103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.465170][ T9103] Call Trace: [ 153.465177][ T9103] [ 153.465184][ T9103] dump_stack_lvl+0x241/0x360 [ 153.465209][ T9103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.465229][ T9103] ? __pfx__printk+0x10/0x10 [ 153.465247][ T9103] ? _printk+0xd5/0x120 [ 153.465263][ T9103] ? __virt_addr_valid+0x183/0x530 [ 153.465281][ T9103] ? __virt_addr_valid+0x183/0x530 [ 153.465299][ T9103] print_report+0x16e/0x5b0 [ 153.465321][ T9103] ? __virt_addr_valid+0x183/0x530 [ 153.465338][ T9103] ? __virt_addr_valid+0x183/0x530 [ 153.465354][ T9103] ? __virt_addr_valid+0x45f/0x530 [ 153.465371][ T9103] ? __phys_addr+0xba/0x170 [ 153.465388][ T9103] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 153.465409][ T9103] kasan_report+0x143/0x180 [ 153.465433][ T9103] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 153.465457][ T9103] udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 153.465481][ T9103] rxrpc_lookup_local+0xea5/0x1890 [ 153.465509][ T9103] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 153.465530][ T9103] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 153.465549][ T9103] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 153.465572][ T9103] ? __local_bh_enable_ip+0x168/0x200 [ 153.465595][ T9103] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 153.465621][ T9103] rxrpc_sendmsg+0x323/0x5f0 [ 153.465642][ T9103] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 153.465659][ T9103] __sock_sendmsg+0x221/0x270 [ 153.465688][ T9103] ____sys_sendmsg+0x53a/0x860 [ 153.465713][ T9103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.465734][ T9103] ? __fget_files+0x2a/0x410 [ 153.465761][ T9103] ? __fget_files+0x2a/0x410 [ 153.465795][ T9103] __sys_sendmsg+0x269/0x350 [ 153.465819][ T9103] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.465860][ T9103] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.465888][ T9103] ? do_syscall_64+0x100/0x230 [ 153.465916][ T9103] ? do_syscall_64+0xb6/0x230 [ 153.465944][ T9103] do_syscall_64+0xf3/0x230 [ 153.465970][ T9103] ? clear_bhb_loop+0x35/0x90 [ 153.465997][ T9103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.466029][ T9103] RIP: 0033:0x7efd6df8d169 [ 153.466047][ T9103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.466062][ T9103] RSP: 002b:00007efd6ee38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.466081][ T9103] RAX: ffffffffffffffda RBX: 00007efd6e1a5fa0 RCX: 00007efd6df8d169 [ 153.466094][ T9103] RDX: 0000000024044804 RSI: 0000200000000080 RDI: 0000000000000005 [ 153.466106][ T9103] RBP: 00007efd6e00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 153.466117][ T9103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.466128][ T9103] R13: 0000000000000000 R14: 00007efd6e1a5fa0 R15: 00007ffc00727c68 [ 153.466148][ T9103] [ 153.466159][ T9103] [ 153.543952][ T9106] netlink: 'syz.2.719': attribute type 13 has an invalid length. [ 153.546036][ T9103] Allocated by task 8417: [ 153.546048][ T9103] kasan_save_track+0x3f/0x80 [ 153.546073][ T9103] __kasan_slab_alloc+0x66/0x80 [ 153.773613][ T9103] kmem_cache_alloc_noprof+0x1d9/0x380 [ 153.779077][ T9103] sk_prot_alloc+0x58/0x210 [ 153.783575][ T9103] sk_alloc+0x3e/0x370 [ 153.787636][ T9103] inet_create+0x648/0xea0 [ 153.792046][ T9103] __sock_create+0x4c0/0xa30 [ 153.796635][ T9103] __sys_socket+0x150/0x3c0 [ 153.801124][ T9103] __x64_sys_socket+0x7a/0x90 [ 153.805793][ T9103] do_syscall_64+0xf3/0x230 [ 153.810292][ T9103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.816191][ T9103] [ 153.818511][ T9103] Freed by task 8416: [ 153.822479][ T9103] kasan_save_track+0x3f/0x80 [ 153.827154][ T9103] kasan_save_free_info+0x40/0x50 [ 153.832176][ T9103] __kasan_slab_free+0x59/0x70 [ 153.836935][ T9103] kmem_cache_free+0x195/0x410 [ 153.841701][ T9103] __sk_destruct+0x4fd/0x690 [ 153.846301][ T9103] inet_release+0x17d/0x200 [ 153.850802][ T9103] sock_close+0xbc/0x240 [ 153.855043][ T9103] __fput+0x3e9/0x9f0 [ 153.859023][ T9103] task_work_run+0x24f/0x310 [ 153.863605][ T9103] syscall_exit_to_user_mode+0x13f/0x340 [ 153.869236][ T9103] do_syscall_64+0x100/0x230 [ 153.873829][ T9103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.879747][ T9103] [ 153.882077][ T9103] The buggy address belongs to the object at ffff88801bf8cd80 [ 153.882077][ T9103] which belongs to the cache UDP of size 1856 [ 153.895532][ T9103] The buggy address is located 1840 bytes inside of [ 153.895532][ T9103] freed 1856-byte region [ffff88801bf8cd80, ffff88801bf8d4c0) [ 153.909515][ T9103] [ 153.911843][ T9103] The buggy address belongs to the physical page: [ 153.918283][ T9103] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801bf8c5c0 pfn:0x1bf88 [ 153.928349][ T9103] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 153.936851][ T9103] memcg:ffff888033987401 [ 153.941104][ T9103] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 153.949113][ T9103] page_type: f5(slab) [ 153.953105][ T9103] raw: 00fff00000000040 ffff888143efcb40 0000000000000000 0000000000000001 [ 153.961685][ T9103] raw: ffff88801bf8c5c0 000000008010000e 00000000f5000000 ffff888033987401 [ 153.970270][ T9103] head: 00fff00000000040 ffff888143efcb40 0000000000000000 0000000000000001 [ 153.978937][ T9103] head: ffff88801bf8c5c0 000000008010000e 00000000f5000000 ffff888033987401 [ 153.987605][ T9103] head: 00fff00000000003 ffffea00006fe201 ffffffffffffffff 0000000000000000 [ 153.996266][ T9103] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 154.004929][ T9103] page dumped because: kasan: bad access detected [ 154.011336][ T9103] page_owner tracks the page as allocated [ 154.017042][ T9103] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3389623110, free_ts 0 [ 154.036665][ T9103] post_alloc_hook+0x1f4/0x240 [ 154.041434][ T9103] get_page_from_freelist+0x365c/0x37a0 [ 154.046992][ T9103] __alloc_frozen_pages_noprof+0x292/0x710 [ 154.052812][ T9103] alloc_pages_mpol+0x311/0x660 [ 154.057702][ T9103] allocate_slab+0x8f/0x3a0 [ 154.062206][ T9103] ___slab_alloc+0xc27/0x14a0 [ 154.066903][ T9103] __slab_alloc+0x58/0xa0 [ 154.071236][ T9103] kmem_cache_alloc_noprof+0x268/0x380 [ 154.076692][ T9103] sk_prot_alloc+0x58/0x210 [ 154.081253][ T9103] sk_alloc+0x3e/0x370 [ 154.085323][ T9103] inet_create+0x648/0xea0 [ 154.089740][ T9103] __sock_create+0x4c0/0xa30 [ 154.094330][ T9103] inet_ctl_sock_create+0xc2/0x250 [ 154.099439][ T9103] igmp_net_init+0xbb/0x150 [ 154.103935][ T9103] ops_init+0x349/0x5b0 [ 154.108093][ T9103] register_pernet_operations+0x30d/0x630 [ 154.113805][ T9103] page_owner free stack trace missing [ 154.119161][ T9103] [ 154.121476][ T9103] Memory state around the buggy address: [ 154.127119][ T9103] ffff88801bf8d380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.135178][ T9103] ffff88801bf8d400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.143235][ T9103] >ffff88801bf8d480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 154.151284][ T9103] ^ [ 154.156905][ T9103] ffff88801bf8d500: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 154.164976][ T9103] ffff88801bf8d580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.173046][ T9103] ================================================================== [ 154.181738][ T9103] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 154.188952][ T9103] CPU: 0 UID: 0 PID: 9103 Comm: syz.3.717 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 154.199535][ T9103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 154.209585][ T9103] Call Trace: [ 154.212858][ T9103] [ 154.215788][ T9103] dump_stack_lvl+0x241/0x360 [ 154.220500][ T9103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.225697][ T9103] ? __pfx__printk+0x10/0x10 [ 154.230301][ T9103] ? vscnprintf+0x5d/0x90 [ 154.234640][ T9103] panic+0x349/0x880 [ 154.238537][ T9103] ? check_panic_on_warn+0x21/0xb0 [ 154.243663][ T9103] ? __pfx_panic+0x10/0x10 [ 154.248077][ T9103] ? mark_lock+0x9a/0x360 [ 154.252406][ T9103] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 154.258301][ T9103] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 154.264197][ T9103] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 154.270525][ T9103] ? print_report+0x519/0x5b0 [ 154.275206][ T9103] check_panic_on_warn+0x86/0xb0 [ 154.280153][ T9103] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 154.286152][ T9103] end_report+0x77/0x160 [ 154.290397][ T9103] kasan_report+0x154/0x180 [ 154.294903][ T9103] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 154.300977][ T9103] udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 154.306791][ T9103] rxrpc_lookup_local+0xea5/0x1890 [ 154.311906][ T9103] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 154.317463][ T9103] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 154.322757][ T9103] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 154.328392][ T9103] ? __local_bh_enable_ip+0x168/0x200 [ 154.333769][ T9103] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 154.339491][ T9103] rxrpc_sendmsg+0x323/0x5f0 [ 154.344082][ T9103] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 154.349193][ T9103] __sock_sendmsg+0x221/0x270 [ 154.353871][ T9103] ____sys_sendmsg+0x53a/0x860 [ 154.358637][ T9103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.363920][ T9103] ? __fget_files+0x2a/0x410 [ 154.368514][ T9103] ? __fget_files+0x2a/0x410 [ 154.373200][ T9103] __sys_sendmsg+0x269/0x350 [ 154.377806][ T9103] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.382943][ T9103] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 154.389274][ T9103] ? do_syscall_64+0x100/0x230 [ 154.394038][ T9103] ? do_syscall_64+0xb6/0x230 [ 154.398718][ T9103] do_syscall_64+0xf3/0x230 [ 154.403241][ T9103] ? clear_bhb_loop+0x35/0x90 [ 154.407926][ T9103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.413822][ T9103] RIP: 0033:0x7efd6df8d169 [ 154.418240][ T9103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.437887][ T9103] RSP: 002b:00007efd6ee38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.446311][ T9103] RAX: ffffffffffffffda RBX: 00007efd6e1a5fa0 RCX: 00007efd6df8d169 [ 154.454274][ T9103] RDX: 0000000024044804 RSI: 0000200000000080 RDI: 0000000000000005 [ 154.462249][ T9103] RBP: 00007efd6e00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 154.470224][ T9103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.478191][ T9103] R13: 0000000000000000 R14: 00007efd6e1a5fa0 R15: 00007ffc00727c68 [ 154.486167][ T9103] [ 154.489551][ T9103] Kernel Offset: disabled [ 154.493886][ T9103] Rebooting in 86400 seconds..